last executing test programs:

3.399356475s ago: executing program 2 (id=131):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a0000000500010006000000140007800800064000000002"], 0x58}}, 0x20000000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = accept(r0, 0x0, &(0x7f0000000200))
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x1406, 0x800, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) (async)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0xffffffffffffff48, 0xfa00, {{0x1b, 0x4e21, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, {0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6b8d}, 0xffffffffffffffff, 0xffff3d97}}, 0x87) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x14, &(0x7f0000000040), 0x50) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000014}, 0x840) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800)
r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000003c0)=@int=0x3, 0x4)
ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000240)={0xe, &(0x7f0000000000)=[{0x2, '\x00', @buffer={"8b4035f18f709ed27e8d48dffb6f640a1028a2b30a4d5984d70ba1df4e15129d", 0x20}, 0xa}]})

3.310163945s ago: executing program 2 (id=132):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000002704971a000000001c0000001c0000000500000002000000020000060400000003000000ffffffff0082329cce00000094b4000000612e5f00"], 0x0, 0x39, 0x0, 0x1, 0x6}, 0x28)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x754ba3df}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x840)
r2 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source\x00', &(0x7f00000004c0)='//1#7.0.0.1/\xcb7\xcc\b\\\xd0\xe4\x85\xaf\xbb\x97yshare\x00$kV\xd6c\xa5\x19%\xe53\xefV5q\\\xb2.\x86\xd4\xaa\xcd\x05\xc6Z\x12\xb6R?\xee1\xc5\x80~~h\x95\xbd\xdf\xb2\xe1\x1fK>\xe2\x17\xb6F{\xb9\xd9\x00\x00\x00\x01\xf5+x\n\x1c\x06\xc9\xe1\xd9\xed\x9d3\t\xaa\x93\xcf\x1d\xb0\x02\xc3#\xd4>\x9b\x81/\x8e\v\xd5\xa2\x02_\xfc\x1b\xa7\xe7\x1e\xe4w', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r4 = open_tree(r3, &(0x7f00000001c0)='./cgroup\x00', 0x901)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0x2}, 0x10)
write(r5, &(0x7f00000000c0)="1b0000001e005f025145e9676a2cbf0dffffffff01000000000000", 0x1b)
move_mount(r3, 0x0, r4, 0x0, 0x164)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='ip\x00', &(0x7f0000000240)='127.0.0.1\x00', 0x0)
setns(0xc9, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x501800)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04015b0c"], 0x7)
ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_io_uring_setup(0x5b0f, &(0x7f0000000280)={0x0, 0xa211, 0x80, 0x1, 0x359}, &(0x7f0000000080), &(0x7f0000ff4000), 0x0)

1.810030036s ago: executing program 0 (id=159):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000006d05000002"], 0x48)
getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001780)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040084}, 0x0)

1.788138811s ago: executing program 0 (id=161):
r0 = socket$kcm(0x23, 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f00000031c0)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
ioctl(r2, 0x8b19, &(0x7f0000000040))
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4)

1.782428323s ago: executing program 3 (id=162):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000002000)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
setreuid(0x0, 0xee00)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = inotify_init1(0x800)
r2 = fcntl$dupfd(r0, 0x406, r1)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, 0xffffffffffffffff, 0x26, 0x0, @void}, 0x10)
setsockopt$inet_mtu(r2, 0x111, 0xa, 0x0, 0x0)
ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f0000000000))
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x70bd25, 0x0, {0x2, 0x14, 0x14, 0x0, 0x0, 0x2, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x40}}]}, 0x30}}, 0x40000)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/module/ueagle_atm/parameters/altsetting\x00', 0x1, 0x0)

1.6883378s ago: executing program 3 (id=163):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x20)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)=ANY=[@ANYBLOB="000000004c900200400000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000404000000000000ffffffffffffffff00000000810000000000000000000000000000000000000000000000000000000000000000000000ffffffff"])

1.630544576s ago: executing program 0 (id=164):
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f0000000580)='%pK    \x00'}, 0x1b)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) (async)
r3 = socket$inet6(0xa, 0x80002, 0x3)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
prlimit64(0x0, 0xc, &(0x7f00000000c0)={0x8, 0x1}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0xaf) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000540)="d40c12197ce961e242912da5be9424c30034218bcafc61ea434030a15a33764c2515bddb65f4db5070c6089c30cf39999a2b000000", &(0x7f0000000740)=@udp6=r3}, 0x20) (async)
mkdirat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x1ff) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000400)=0x1) (async)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e6574"], 0x60}}, 0x0)
socketpair(0x25, 0xa, 0x4, &(0x7f00000005c0)={<r5=>0xffffffffffffffff})
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f00000003c0)="c41d82dbd0d701b66fb25dc79d359c4d", 0x10) (async)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r6, &(0x7f00000000c0)='syz1\x00', 0x1ff) (async)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000002940)={{r4}, "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"}) (async)
connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async)
syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd6002adf700383a002b290000000000000000000000000001ff020000000000000000000000000001020090780000000060fd906300003a00ff010000000000000000000000000001ff02000000000000000000000000000180ac97989e0ad479"], 0x0) (async)
r8 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
sendto$inet(r8, &(0x7f0000000240)="4655bd2a6ab807f57f207e79d7621a0513ee8c24791767becb2125efc69b0565a3095e65ce5654abba054c5ffc32fbb4408faa01ba9500ec591066fb851dc47fa6b3230a3f990cfee814979abefaa4fe96885ad9559ef7c773493ab985de4bf27fa3b65df75d27d1c8e39b1e895338c8d591c20da8680b513dbae2ef73947ebea2c5", 0x82, 0x20004800, &(0x7f0000000300)={0x2, 0x4e22, @local}, 0x10)

1.490608385s ago: executing program 0 (id=165):
socket(0x400000000010, 0x3, 0x0) (async)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="46a241e3410a8864000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x44010) (async)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x5) (async)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x80) (async)
open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46eaf) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfc, 0x0, 0x0, 0x6}, [@RTA_MULTIPATH={0xc, 0x9, {0x1, 0x12, 0x3, r3}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x40}}]}, 0x34}}, 0x0)

1.440440391s ago: executing program 3 (id=166):
r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x3fffffffd, 0x7b72dbb2c8324782)
r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r2, 0x40000000af01, 0x0) (async)
syz_emit_ethernet(0x4e, &(0x7f0000001740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x3, '\x00', @local}}}}}}, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) (async)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/vtconsole/vtcon0/bind\x00', 0x1, 0x0)
write$cgroup_int(r3, &(0x7f0000000340)=0x6e, 0x12) (async)
ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000240)={0x1, 0xc1}) (async)
getsockopt$inet6_opts(r1, 0x29, 0x4d, 0x0, &(0x7f0000000280)) (async)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0x7ff, 0x4, 0x0, 0x1})
socket$inet6_udp(0xa, 0x2, 0x0) (async)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x8841) (async)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0) (async)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) (async)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) (async)
write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'})
write$sndseq(r7, &(0x7f0000000500)=[{0x5, 0x69, 0x6, 0xd, @tick=0x4, {0xce, 0x3}, {0x3, 0x7}, @ext={0x82, &(0x7f0000000380)="13e1d8864f7b144fd5dc38dcb807aeb3493bbf2e8f4cbd7f1c0bc8076c1fac1ad6f60bce55b0df5f18155ae25e2cf2e7125b162b934147f9ff6141a328c63c85609e99ed7dc510c3c1591747344ed3f3550b6347519c042e79a58ce6c9d58a8dcefd70949874f335dceda2730be6f550459f4104e17188f472d366df43ff8794c346"}}, {0x4, 0x0, 0xd, 0xa, @tick, {0x4, 0x2}, {0x91, 0x2}, @result={0x877825f5, 0x8}}, {0x2, 0x38, 0xb, 0x0, @time={0x5, 0x1}, {0xf2, 0x8}, {0x9, 0x5}, @note={0x11, 0xc, 0x9f, 0x7, 0x4}}, {0x81, 0x5d, 0x3, 0x3, @time={0x65, 0x2}, {0x6}, {0xd, 0x47}, @raw8={"fccb7513336ae9647484f1b1"}}, {0x6, 0x93, 0x27, 0x8, @tick=0xfff, {0x5e, 0x3}, {0xfe}, @addr={0x1, 0x37}}, {0x1, 0xe1, 0x4, 0x74, @tick=0xa, {0xf, 0x1}, {0x1, 0x10}, @connect={{0xe, 0x81}, {0x9, 0x9a}}}], 0xa8)
close_range(r5, 0xffffffffffffffff, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x0) (async)
r9 = socket(0xa, 0x803, 0x2)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRESDEC=r9], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000)

1.379844255s ago: executing program 3 (id=168):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e04a1f29f656e642c6163638173733d616e792c63616368653d66736361636865"])
mkdir(&(0x7f0000000100)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000011c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '[)%..\xb9'}}, {@hash}, {@seclabel}, {@appraise}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
ioctl$TIOCSETD(r2, 0x541b, &(0x7f0000000000))
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x1, 0x60000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x17)
r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x18)
symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f0000000140)='./file0\x00')
openat2(r5, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x8}, 0x18)
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000000180)={<r7=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000000100)={<r8=>0x0, 0x1})
ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, r4, {0xd, 0x1}}, './file2\x00'})
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r6, 0xc02064cc, &(0x7f0000000100)={r7, r8, 0x0, 0x8, 0x2})
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r5, 0xc00864c0, &(0x7f0000000080)={r8})
syz_open_dev$sndpcmc(&(0x7f00000001c0), 0x401, 0x40)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x89)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r9, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000012c0)="b9354b27b553aeee40000b0000a4df2a9080f3c9aa55548f47b480f3", 0x0, 0x603, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
io_uring_setup(0x136a, &(0x7f00000000c0)={0x0, 0x1889, 0x0, 0x2, 0x5b})
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs\x00', 0x0)

727.988819ms ago: executing program 1 (id=170):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0)
inotify_init1(0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r0) (async)
dup(r0)
syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') (async)
syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYRES32=r1], 0x118) (async)
write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYRES32=r1], 0x118)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504a9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x10001}]}}}, @IFLA_MTU={0x8}]}, 0x44}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504a9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x10001}]}}}, @IFLA_MTU={0x8}]}, 0x44}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000))
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="67727071756f74615f696e6f646502006172646c696d06003d372c00"])

726.112148ms ago: executing program 1 (id=171):
ioprio_set$pid(0x2, 0x0, 0x2000) (async)
r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='limits\x00')
read$msr(r0, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='proc\x00', 0x911000, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x3) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fe9000/0x4000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x31}, 0x68) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000240)=0x9d) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r5=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB="0000000002"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x1}, 0x94) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r6) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x94)
ioctl$SIOCSIFHWADDR(r6, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="ebffffff4ecd2f0009000000000000", @ANYRES16=r2, @ANYRES16=0x0, @ANYRES32=r5, @ANYBLOB="10005a800c0000800400020004000100"], 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000006800090300000001000000000a0000000000000004000b00"], 0x1c}}, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r0, 0x4068aea3, &(0x7f00000001c0))

620.540513ms ago: executing program 0 (id=172):
socket$vsock_stream(0x28, 0x1, 0x0) (async)
r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xc1, 0x100, 0x29}, 0x18)
read$usbfs(r0, &(0x7f0000000080)=""/201, 0xc9)
fchmodat(r0, &(0x7f0000000180)='./file0\x00', 0xc0) (async)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x400000, 0x0, 0x11}, 0x18)
fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000001c0)='^/&\\\x00', &(0x7f0000000200)='./file0\x00', r1) (async)
execveat(r0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)={[&(0x7f0000000300)='^/&\\\x00', &(0x7f0000000340)='^/&\\\x00', &(0x7f0000000380)='^/&\\\x00', &(0x7f00000003c0)='^/&\\\x00', &(0x7f0000000400)='^/&\\\x00']}, &(0x7f0000000640)={[&(0x7f0000000480)='\x00', &(0x7f00000004c0)='&\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='^/&\\\x00', &(0x7f0000000580)='^/&\\\x00', &(0x7f00000005c0)='$,\x00', &(0x7f0000000600)='^/&\\\x00']}, 0x1000) (async)
sendmsg$nl_crypto(r0, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)=@upd={0x108, 0x12, 0x100, 0x70bd25, 0x25dfdbfb, {{'lrw-camellia-aesni\x00'}, '\x00', '\x00', 0x2000, 0x2000}, [{0x8, 0x1, 0xeea}, {0x8}, {0x8, 0x1, 0x5}, {0x8, 0x1, 0x8001}, {0x8, 0x1, 0x1}]}, 0x108}, 0x1, 0x0, 0x0, 0x40c89}, 0xc880) (async)
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000880)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
readv(r2, &(0x7f00000008c0), 0x0) (async)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2)
chroot(&(0x7f0000000900)='./file0\x00') (async)
fchdir(r0)
r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000940), 0x80000)
write$UHID_CREATE2(r3, &(0x7f0000000980)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x4d, 0x1ff, 0x1, 0x8, 0x25, 0x1, "a1eaafaa52a363ec2b853d5678dede78a5f07532e3f0a777fa89473187fcec83cfb64e6cb6b86726ee5b633b4dfbe8a507473febfaffcbc691cc65c6b46be5f2ca45a2a4291739c585f114e13b"}}, 0x165) (async)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000002) (async)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000b00)={{0x1, 0x1, 0x18, <r4=>r0}, './file0\x00'})
setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000b80)={'broute\x00', 0x0, 0x0, 0x0, [0x9, 0x7, 0x100000001, 0xd995, 0x86, 0x1], 0x8, &(0x7f0000000b40)=[{}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, 0xf8)
getsockname$packet(r4, &(0x7f0000000e00)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000e40)=0x14) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000f00)={0x1, <r6=>0x0}, 0x8) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=@base={0x8, 0xd, 0x4, 0x10000, 0x20210, r3, 0x8, '\x00', 0x0, r4, 0x0, 0x3, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x1c, 0x1e, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8dec}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}]}, &(0x7f0000000d80)='syzkaller\x00', 0x7, 0x3a, &(0x7f0000000dc0)=""/58, 0x40f00, 0x12, '\x00', r5, @fallback=0x33, r3, 0x8, &(0x7f0000000e80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000ec0)={0x1, 0x3, 0x5, 0xb20}, 0x10, r6, r3, 0x0, &(0x7f0000000fc0)=[r3, r7], 0x0, 0x10, 0x4}, 0x94) (async)
ioctl$UFFDIO_POISON(r4, 0xc020aa08, &(0x7f00000010c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000001100)={0x0, 0x1, 0x25000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) (async)
ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r3, 0x8010aebc, &(0x7f0000001140)={0x2, 0x1a000}) (async)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, &(0x7f0000001180))
close_range(r2, r1, 0x0) (async)
mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000ffe000/0x1000)=nil)
mmap$qrtrtun(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x810, 0xffffffffffffffff, 0x0) (async)
ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f00000011c0))

619.117104ms ago: executing program 1 (id=173):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x111000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil})

519.736607ms ago: executing program 0 (id=174):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]})
ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
umount2(0x0, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$rds(0x15, 0x5, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000340)=""/123, 0x7b}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0xfffffd63, 0x40080}, 0x4000000)
recvmmsg(r4, &(0x7f00000031c0)=[{{0x0, 0x6f, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=""/216, 0xd8}, 0x10001}], 0x2, 0x40010000, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0)
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f0000000140)='./file0\x00', 0xa4000061)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
pread64(r6, &(0x7f0000001280)=""/200, 0xc8, 0x17a7)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
setns(r8, 0x24020000)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000280)=ANY=[@ANYBLOB="040100000102010400000000000000000a00fffe440002800c00028005000100840000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffff0a010101060003400003000008000840000000020800054000000003060007"], 0x104}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000)

518.891727ms ago: executing program 1 (id=175):
syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x8, 0x2c, 0x1, @empty, @mcast2, {[@fragment={0x33, 0x0, 0x9, 0x0, 0x0, 0x1, 0x66}]}}}}}, 0x0) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x8, 0x2c, 0x1, @empty, @mcast2, {[@fragment={0x33, 0x0, 0x9, 0x0, 0x0, 0x1, 0x66}]}}}}}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
syz_open_dev$loop(0x0, 0x401, 0x145981)
r1 = socket$inet6(0xa, 0x802, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}]}, 0x70}, 0x1, 0x7}, 0x0) (async)
sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}]}, 0x70}, 0x1, 0x7}, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000080)={'dummy0\x00'})
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xff00, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000004)

410.733989ms ago: executing program 3 (id=176):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'xfrm0\x00', 0x79de})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xc040)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r3, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1ff}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008104}, 0x10)

330.810585ms ago: executing program 1 (id=177):
r0 = syz_open_procfs(0x0, &(0x7f00000008c0)='uid_map\x00')
preadv(r0, &(0x7f0000002d80)=[{&(0x7f0000000940)=""/178, 0xb2}], 0x1, 0x200, 0x3)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x5, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0xfffffffd, 0x8, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x5, 0x100000, 0x400, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x24000, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x7, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x407, 0x7, 0x10103, 0x0, 0x5, 0x3c, 0x91, 0x2, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x4, 0x80, 0x0, 0x5, 0x2, 0x8, 0x4, 0xfffffffd, 0x514], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x4, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x10807, 0x5, 0x2f, 0xb99, 0x312, 0x78, 0xea4, 0xa, 0x6, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0x8, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x100, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0xe, 0x80004, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x800004, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x85, 0x6, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x7, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0x100c8, 0x3, 0x2, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x493, 0x1, 0x10003, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x100005, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r1, &(0x7f0000000040)="e2", 0x918)
r2 = openat(0xffffffffffffffff, 0x0, 0x14b9c1, 0x0)
write(r2, 0x0, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

250.509264ms ago: executing program 1 (id=178):
r0 = io_uring_setup(0x6748, &(0x7f0000000000)={0x0, 0x86f4, 0x80, 0x1, 0x43})
io_uring_enter(r0, 0x68b9, 0x74b6, 0x26, &(0x7f0000000080)={[0x5]}, 0x8)
r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UBLK_U_CMD_GET_PARAMS(r1, 0x80207509, &(0x7f0000000180)={0x0, 0xffff, 0x70, &(0x7f0000000100)={0x70}})
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan0\x00', <r3=>0x0})
bind$can_raw(r2, &(0x7f0000000240)={0x1d, r3}, 0x10)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0xa84401, 0x0)
ioctl$PPPIOCSCOMPRESS(r4, 0x4010744d)
syz_usb_connect(0x2, 0xd82, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0xa8, 0x3c, 0x8a, 0x10, 0xcf3, 0x1011, 0x2fbd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd70, 0x3, 0x12, 0x9, 0x0, 0x8, "", [{{0x9, 0x4, 0x8b, 0x67, 0xf, 0x83, 0x68, 0x4d, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x31}, [@mixer_unit={0x6, 0x24, 0x4, 0x2, 0x4, "e7"}, @processing_unit={0xa, 0x24, 0x7, 0x3, 0x6, 0x2, "16b200"}, @extension_unit={0xb, 0x24, 0x8, 0x1, 0xf, 0x8e, "30b1e5e9"}, @processing_unit={0xc, 0x24, 0x7, 0x5, 0x0, 0x7, "b92bd484e5"}]}], [{{0x9, 0x5, 0x0, 0x0, 0x40, 0x17, 0x3, 0x4, [@generic={0xfb, 0x11, "d4943c63e311894e408b8e45f7c81c3a77d32592d28fa9866483ef34361a67de3c703475ae9bae3c66de225e2ae5608e309521f9e903ea291e33492d2e8f72efa38099069a282f8bebf02b17741869b1d7b21facc66110934eae3ca4b57577c8f0a3945631c1908ab444ca618f07e765c5122818c930d3aab2758e379b52d54484b0b3969bcfc17c9c60401d2614a56a2b07112c8f9a59786165f8a62c5d2e88fc24747016dc7f148a3b3bfed868158571b8f076978ccd8fc8580c3c067ce20b4c203e1c6cc78d272eace2eacd260238522f4680633ad3b2cec61c408490fb4497d6d1dea81aa0c73fc120c3b11bb49d96b8807be2976145a3"}, @generic={0x9e, 0x5, "ee6e28a385b2a4f14b2c526bae6ae8dad660b1186fb447a6417d69504270012e89a0b1cce1c0241a94926a2a43ccbb3d01229020ee127672396c9243b185eb174e67cf854cb0541d40102aa5b145a995214dcaec5aa3fb1943b9cc319b33101e70a334278c9efff778b24038d9dc5564ee28cab5a46d8e8efcbd8ede24a247a4a260196bf6cf909ef082ef6627c757357956c4cc84c3c93d99200402"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x3ff, 0x4, 0x4, 0x5, [@generic={0xb9, 0xa, "6b5070a8d4e275b421b6e5f779ee264ea766434092d39f1fbdd0c999e2d314ad387bed6ca3c1e755b7dd2cc939a0f9e7e35342568ff719cece327b6e13455cf1bde22b4928402c34fc3eeb0ee56c1a8b6a5d035097b698d60e63abb44a41e98c0c486094339736df402ccf8d9bebf99e79c58e602da03664ea08539ca09f9b9cc5b955957736ae60bbf25a7095ab1ce91d31206543193dd18531db75a9e487a889b0944ed5abe4430276c4d0120282e6ace85ba0b818c5"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x5}]}}, {{0x9, 0x5, 0x8, 0x3, 0x20, 0x7, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0xa6}]}}, {{0x9, 0x5, 0x4, 0x1, 0x220, 0xb, 0x9, 0x10}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x6, 0xa7, 0x4e}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x2, 0xe2, 0x6}}, {{0x9, 0x5, 0x0, 0x3, 0x10, 0x1, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x8}]}}, {{0x9, 0x5, 0x2, 0xc, 0x40, 0x61, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4b, 0x4}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x5, 0xa0, 0x5, [@generic={0x91, 0xa, "d412c363c482ac8d26986c4c91f729f27335e230507cba0266b15b7c82a12ee6128f12ccded3923dc297ace07ed2ed0072da5bb6cd516050d01464544355ea6016b6df2e6a9d22d2eaee17414970b2ae6f6b6eb834f808450433ddf089d52479769a5ac936122e40f0ab79a3091b5fdede590812a3b4afe1444e36077c67361d0aba9e6d33f1ca29832136607f675c"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x8d, 0x80, 0x9}}, {{0x9, 0x5, 0x7, 0xb4459b6d05fdf868, 0x400, 0x6, 0x3f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x2410}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x1ff}]}}, {{0x9, 0x5, 0xb, 0x8, 0x3ff, 0x3, 0x2, 0x53, [@generic={0xeb, 0x22, "4b063329a6ddbf7d135774e2f5757ed27c24ca3006fb60fe05dc752c8f84231592fbebb385f6992ba19afd10c1523f9e5b5a4e9a69a02d26ec1a31ba743119d27ec736b845d675f152dbdb1251f82a1b5f0387da55c6bb8579f5167f27f6367254699bd8f784abfb362dbbbe020ed0ab5b708411cd5023aadaa2c2fb53ebfbfe96115de45a8c85f37440a7ddd594b6c3ce8edda124d5b3d955f119451ec58b891aa55ad7f21c031be6f29f968f43ec84a84c28fc5e71e922d88ea8a4398f99a8636e4c4c70aa241f9e8b61eda471912b87992a43626228c44c70a0acba04d9ada9c326ce47f20a8ea2"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x89, 0x2}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x2, 0x9}}, {{0x9, 0x5, 0xe, 0x4, 0x8, 0x8, 0x6, 0xbb, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x5a, 0x8000}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0xd, 0x4, 0x1c, [@generic={0x51, 0x11, "4286b62752622ea0f3be3ef706513e4c11b57640c8827d5e6fe18b81f14d8743252f3c4711992d1bb70d33e1a21a423e0223756f90e9205df4c66095a8b2ee22caddb05fccb00d522d700e96250b70"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x8001}]}}]}}, {{0x9, 0x4, 0xe3, 0x2, 0xc, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0xf, 0x2, 0x400, 0x8, 0x0, 0x0, [@generic={0xe9, 0x31, "6f40c1d3de7177775027aa0a74d4c4d1b79fae5d015db9cc5f2d04e3d64621cdd155c43f6c06eea596b730266a0f882d1245a280daa1d51673d347c78c620533aa7b2d04789d5d9da8aba0de772dd6abf4186ad1d8fa6f77f3ffa01de2884d67c31b713ad3b80ecefdad01021d456a6f44ed19bb7145b5620891f3cf8dd08f6a9cd55190f290548c0ef0f96b376a11cad8eb2f869ef86eb04bbd9ed3ea78a3a229b7169dd854b394ad24b3089950b4936bbf4d6615951c9321811e98b7839a7e3b62c12c1cd4b72cd0320ae911066e44b5bfe6350dc32d48e7e9b1c1750cc5a2e16be23616cf65"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x78, 0xc, 0xf}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x9, 0x6, 0x2, [@generic={0x77, 0x30, "bee8aff4cb90f8240c31779590038deae2f38818b669cd68d89dfbeb0ee804064b728fe408d94996e92ece9310d956a74691e73e377fdad7e195a6586f28eb0440627d0b31bedbecf145039d01a231a722bf3a7ed1da6b00293682c80b886906dfe4ede871648f1d16c4b302109ac0ef5f1c9758f6"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x4, 0x3, 0x2, [@generic={0x22, 0xa, "6bc7395b285d1823baf68768b26c330fd469dbff49b931f4de297d7c64328772"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x200, 0x47, 0x2, 0x9, [@generic={0xfc, 0x3, "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"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x8}]}}, {{0x9, 0x5, 0x84, 0x1, 0x40, 0x4, 0xb, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x10, 0x8}, @generic={0xd0, 0x8, "fc7b96560fd6cd9a77ecbb49954ed2de221ba223d6b93ef7036156b1b978ebb7897c50dbd5ac8f4bd08cc4acc1a3b54a994afed15e7f5589d6b61a813fe51ca22326f2fadb837bc26447322a026281304fca2ac227e6576a64be58a173fc51f28b3ccefcb5fc46dd66c4bc13a43f8de1159899bf4aa53d942e08b1c2754748e337688a95f2139cb75bb8bfe59657c34f081e2f33f3f455f528f51a8df1f81b8c9b8fe13fb93b6373f746013054537d063fb849b29bdda38507bea127362628d73a1f48919a7acde2441b59860b4c"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x8, 0x0, 0xbd, [@generic={0x9f, 0x9, "f3b6c992d879e51d997eda173e9f5dcb9e8c96d770837d776a8afa21f79c67cadb4c4ca33aeb21bfa53928b9212e7ba92fa0f9b8da23faf7ca6bdb52e16a52a0802c71bca2907696e1bfc7d298ccd0d787f957437cd51ad4be77871aabf45f7a3b95f8f8d668ab2b6bae647e9c8507c000f05ebf96b9d777f6ce42d6d877d619567fcf553d1110f775e6fc50c0297c29b03c367f08a0c7439093a5db8a"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x65, 0x2400}]}}, {{0x9, 0x5, 0x2, 0x8, 0x10, 0x6c, 0x4, 0x3}}, {{0x9, 0x5, 0x8, 0x4, 0x10, 0xf6, 0x4, 0x6, [@generic={0x9, 0x4, "96545a6994bcf4"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7}]}}, {{0x9, 0x5, 0xb, 0xc, 0x200, 0x31, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x10, 0x9, 0xff, [@generic={0xf, 0x23, "3eb42271883300840103de3feb"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x2, 0x2}}]}}, {{0x9, 0x4, 0x4, 0x2, 0x6, 0xfe, 0x69, 0x1a, 0x1, [@generic={0x23, 0x22, "0f1b26cad5bcb9189c47ea0a274e882f91bf56bebb488276af48feb1c053d7fba2"}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "d765dda1650e"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x4, 0x1, 0x80}, [@network_terminal={0x7, 0x24, 0xa, 0xb, 0x7f, 0x4, 0xa6}, @mdlm={0x15, 0x24, 0x12, 0xffff}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x8, 0x1, 0x7, 0x8000, 0xff}, @obex={0x5, 0x24, 0x15, 0xc4}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0xc, 0xa4, 0x1}, @ncm={0x6, 0x24, 0x1a, 0x9, 0x6}]}], [{{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x3, 0x6, 0x2, [@generic={0x25, 0x9, "bc8e3ab02890cb238d99b5af6fcb8a15c1c8bcad407ef26602d6b69d7e9183c92eea73"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x7f, 0x0, [@generic={0x95, 0x10, "47df730e95719279c00a905b3c5e2bfce9cff379b0b9c47785c95c3eeb16da6dfdf1e497eceef02b1232e4c7eb68a04e55ee44184114455f625a29ea81c059192118130c2f7e2e6c97e70564e5000bf326fafc051d2a9ecc93bed7fed10f4c277210017a6686672bfeb57648eed20cbbf1108fb2cc2cbccaff558aa1d28264fb6081a323fc41d74de3581ee195f313eea5bc2d"}, @generic={0x76, 0x8, "ca1b1223c44a352b8f542139f5d8e86ff2cd10ddf6b644e6479bd1675882018bfbb8f9966c93db12cdd471907b7a89dcac1624255c6ba1b7e0030e8c1520a3d528cba107cb6c7a6cea710445fe0c191ba3d991d304f61fc3fbe68c6d09ccb5ef7832668d4535102d7d897cdb14daee091f3598bc"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x20, 0x9, 0x7, 0x9}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x0, 0xd, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5e}, @generic={0x29, 0x21, "a654e2eec9420b9e290104aa3524e6193e1cdf4b734217f49cca5739ed2907d0e6a72baacc4093"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x8, 0x2, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0xdcc5}, @generic={0xf5, 0x21, "65d6ad6895976d9be7dfe2aa4acb3446b58c04e8c7c5931e86d4ac12d93fc3b329b42e653ec5b254687f971927b0345aeb280551f83582a83a07d0b9e1f0faf511eaff0f7c1a82ed1e818c61d835827177b3a90123625d1e5eb51a74217de598a3159e32af00bc4a7f43363a8cac556929d124ee25752d178bc5eadff4c09ddc70a5a77c1a586b0d019c37c1647dd66b2b5b688ff813faf9ef1116b50843ce4e806333b5cfd75856c1bdc16dda5d6487bb73a26c6241a23db1e143f3c463a186ce067410fcf4ac1ad1300b2e05e4c8dc891db515707134fd19efe582a845160a76cc132f8e2b55895ea2703fd83d45dd007e22"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0x8, 0x53, 0x2, [@generic={0x8f, 0x31, "402dd76a2bc1f49f2af7a854b18ca70b4796c35851b3571095161f0a601d46677ff320641cfacddd669625da1be6d3dd81dccc205a10393204c82733408e057202af61fabacef1fa7082eee6b1f95f2180c1b456d55d27ec36243a4918c2760cfffaf0902c409a91f8af5be439bfa9f58c48800dee5d612dc5971d4ed187a2211ad49af68559300a1d8e9f32e3"}]}}]}}]}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000001080)={0xa, 0x6, 0x300, 0x0, 0x4, 0xe, 0x10, 0xa}, 0x34, &(0x7f00000010c0)={0x5, 0xf, 0x34, 0x6, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x77, 0x4, 0x3, 0xff0f, 0x10, [0xff0030, 0x0, 0xc00f, 0xff7ef0]}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x0, 0x8, 0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x1409}}, {0xd6, &(0x7f0000001180)=@string={0xd6, 0x3, "a98bea72638df6f81814ae13f36887439277eb76278ed855c5a7835b2da965221450e5ff7a0929c5a683504bea7e73ad9e1250f22613d47ba161b1904cdf2fd094f49bc59a90dc7ce3b9277052d142fe56ca1cf7fd53a4b7e52491af1d177cfbbddabc336909d63d2914c70a9002ebe84a23583f9a618d827574f33840654f597733561fc48f4c68717edb3b1800e831bd11455ae6c385f09779d8620b67c8c5f33ccdb0df31f3ce5cfda3e6998e26a99cc69ce47a9e5991d326b70e60ea5d4158a2b641cd589faaa7ceed315d893dc1f0256154"}}, {0x68, &(0x7f0000001280)=@string={0x68, 0x3, "116fb2d77b88980671789e2a685bd0f2c9ee5c44c778ca8387d2d485d7655a3310311556a068a202c5714097508f04215cc00def2cdeaa27c8272415b6eda36fa9c2851a899c2284c04e56a2e882777fbd4fd70dba51716aaa133d512e603a5bbda25aab08c5"}}]})
write$ppp(r4, &(0x7f0000001380)="32b20d5271c1bb1fabc90e81abe05ab1e1d6b501052c17b1cb449f276813776117779e7b7f8f1308c730c2744e4e11225278f8e74413e96bdbfc1f7a25d0d772ff0f45e5c0b4640d21f0792d089c290d9fa2094b91ac3ce03ff38f0d26190a466410044f76a41b3c9d17d05bdae1516957082513b6ecd05b704fe3a417a77f8149bde91b5d0dda80332ee7c37e6817ae63ebe77752f829df613d420a47da092d1c0b91b1e779513b370797", 0xab)
r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0)
ioctl$VIDIOC_S_AUDOUT(r5, 0x40345632, &(0x7f0000001480)={0x3, "9d1dc56fc752c34cd5826f27ff4df70bb8a907e3b31990793b27033dc2fa6c93", 0x3})
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000014c0)=[{{0x0, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x1}}], 0x8)
syz_open_dev$sndctrl(&(0x7f0000001500), 0x9, 0x200000)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000001580), &(0x7f00000015c0)=0x4)
ioctl$VIDIOC_QUERYMENU(r5, 0xc02c5625, &(0x7f0000001600)={0x7, 0x7ff, @name="50e7e5d1a3351d727cd169cc9b9f669fba80179694a9f9bdaddeec6452d5bbe3"})
ioctl(r6, 0x8, &(0x7f0000001640)="aae49ea723dc8c6397ea3a6d49f79c6fd58c6e65490b4b39fe886a7665196e21b07e330bade9ef72585f1960e7caa02b002c12a38cd6c96ce531eac983e52aa415600899eaa2433dc04cb9beee8457207eb1fb3d3170ae904f45c7a8849c4e160d663647c8dfa525c061f9db37b9128be4b4d95c5f5ba9297a421f3b2801a0c79682d1fc7238a436029ed0387c6de894e81e444055")
write$ppp(r6, &(0x7f0000001700)="2315fc3ca5fabef81f7f13ae2ad0d1059ffe017f3b75d4241e41c816374e9960da4c6e1fb2d556d44f8f323407c4cc4d26975b5561622f086dea296fc3e7f51788f5d2d68af35a45c8a802c9c720baa0e03aa5f98d1ee0f460fbd4eef14a80fa3075729ad3f69aff613e77fc4df6b048f0424f6845aabd2d9bb416550eb8223226a847d9089ea44dddec8ac82c96f79460426b813e7b9e29d4e80609592fae1d87b0e5366c21d11bec28a92e5d3b89", 0xaf)
r7 = syz_open_dev$evdev(&(0x7f00000017c0), 0xc, 0x0)
ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000001800)=""/70)
r8 = accept4$inet6(0xffffffffffffffff, &(0x7f0000001880)={0xa, 0x0, 0x0, @private0}, &(0x7f00000018c0)=0x1c, 0x80800)
connect$inet6(r8, &(0x7f0000001900)={0xa, 0x4e24, 0x80000001, @mcast2, 0x101}, 0x1c)
r9 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
sendmsg$xdp(r9, &(0x7f0000002a40)={&(0x7f0000001940)={0x2c, 0xb, r3, 0x2d}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000002980)="5485270eef66537c76686de6c461ce7fdc767912b2ffc6ab30d942aff406709581a1c5d28c7b193fff483ac7b5da0aa847565f4305132e4cb025d2666353f6149f6273df844b6b5da8d12e5646a5919c2af64af81156c56594af8705dea45addb8163b7e71b7fbcac64dd1511412c2f0daac", 0x72}], 0x2, 0x0, 0x0, 0x4000010}, 0x20)
ioctl$VIDIOC_G_FBUF(r5, 0x8030560a, &(0x7f0000002b80)={0x93, 0x3, &(0x7f0000002a80)="2c99f01df5ba06f74017ba9489c6cce8664ec3b3319ffa9ec916c214123c0a5c296b239d0219a925db40a7372d89dfcf5abcd2f18a581739043acf2bc9e35504141c20bf90874b96bcac28cae5b8162434ef38d805e7111520ab1899a834724d4a45f9f1c52fe720ee8345a95ba9bb6057148600ea84474bd359afdff7a5cfb2995a007c71d781a832ab7e210cb8881bc0f30d202be77baaaf57165d5ad65ace267ab00b124d522f5db8a12ce4f652a664c9bc863395167b84c315338cac074398d20403f24d17d9450973d67372274c38feb826", {0x6, 0x8000, 0x3631564e, 0x0, 0x1, 0xc, 0x2, 0x1}})
ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000002bc0))
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r10, &(0x7f0000002dc0)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002d80)={&(0x7f0000002cc0)=@newtclass={0x90, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0x8}, {0xffff, 0x1}, {0xfff1, 0xe}}, [@c_cbq={{0x8}, {0x64, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x0, 0x2, 0x0, 0x6, 0x7, 0x1, 0x5, 0x9}}, @TCA_CBQ_RATE={0x10, 0x5, {0xff, 0x2, 0x64e, 0x4, 0x7f, 0xff}}, @TCA_CBQ_RATE={0x10, 0x5, {0x4, 0x1, 0x585, 0x2, 0xc8d, 0x9}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0xe, 0x3, 0x2, 0x0, 0x0, 0x8, 0xfffffffa, 0x39000000}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x2, 0x3, 0x2, 0xe, 0x8, 0x8}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)

180.425499ms ago: executing program 2 (id=179):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="84000000742208b4755113c288794e41198569a44ffd40dd6fe451178c2b66b61003da2fe08f3537fc349c5321829e84910015315cc4429db7961ac554c3c26aca451340d8b400dafd453906efd7ea680030aee78adeb585014a18136ddc993180cc2a717ef3", @ANYRES16=r2, @ANYBLOB="07c82bbd7000fddbdf25370000000800570001000000080057000500000008005700020000000800270001000000050018013c000000050018011300000008002201ae0200000800a0009c08000008002201d10200000800a10006000000080022014e0100000800270003000000050019010b0000000800570005000000"], 0x84}, 0x1, 0x0, 0x0, 0xc004}, 0x20048001)
capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x5})
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

180.206106ms ago: executing program 3 (id=180):
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000f80), 0x46842, 0x0) (async)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) (async)
write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={<r3=>0x0, 0x6, 0x10, 0x0, 0x7}, &(0x7f0000000080)=0x18)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={r3, 0x2d}, 0x8) (async)
syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0)

179.564926ms ago: executing program 2 (id=181):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

371.399µs ago: executing program 2 (id=182):
r0 = syz_open_dev$media(&(0x7f0000000000), 0x200, 0x4000)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000020c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002100)={r1, <r3=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000021c0)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f0000002140), &(0x7f0000002180)}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000002340)={'vxcan0\x00', <r5=>0x0})
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002440)={&(0x7f0000002380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@int={0x9, 0x0, 0x0, 0x1, 0x0, 0x80, 0x0, 0x2c, 0x3}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x2e]}}, &(0x7f00000023c0)=""/92, 0x37, 0x5c, 0x101, 0x3, 0x10000}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000025c0)={0xffffffffffffffff, 0x20, &(0x7f0000002580)={&(0x7f0000002500)=""/16, 0x10, <r7=>0x0, &(0x7f0000002540)=""/15, 0xf}}, 0x10)
r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002600)={0xffffffffffffffff, 0x1000}, 0xc)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000002640)={{0x1, 0x1, 0x18, <r9=>r0}, './file0\x00'})
r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000026c0)=@generic={&(0x7f0000002680)='./file0\x00', 0x0, 0x18}, 0x18)
r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002700)={0x0, 0x2, 0x18}, 0xc)
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000002740)={0x5, 0x0, <r12=>r0})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002800)={{0x1, <r13=>0xffffffffffffffff}, &(0x7f0000002780), &(0x7f00000027c0)='%pB    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002840)={0x1, <r14=>0xffffffffffffffff}, 0x4)
r15 = bpf$PROG_LOAD(0x5, &(0x7f0000002940)={0xf, 0x7, &(0x7f0000002200)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x60000000}, @exit, @map_fd={0x18, 0xd, 0x1, 0x0, r3}, @map_fd={0x18, 0xb, 0x1, 0x0, r4}], &(0x7f0000002240)='syzkaller\x00', 0x1, 0x8f, &(0x7f0000002280)=""/143, 0x41100, 0x16, '\x00', r5, @fallback=0x37, r6, 0x8, &(0x7f0000002480)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000024c0)={0x0, 0x9, 0x8, 0x7}, 0x10, r7, 0xffffffffffffffff, 0x7, &(0x7f0000002880)=[r8, r9, r10, r11, r12, r13, r0, r14, 0xffffffffffffffff], &(0x7f00000028c0)=[{0x0, 0x2, 0x0, 0x6}, {0x0, 0x4, 0xe, 0xb}, {0x1, 0x5, 0x1, 0x5}, {0x2, 0x3, 0xc, 0x6}, {0x2, 0x4, 0xe, 0xb}, {0x2, 0x1, 0x4, 0x2}, {0x1, 0x4, 0x2, 0x8}], 0x10, 0xffffff81}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002b00)={@cgroup=r9, 0x24, 0x1, 0x2, &(0x7f0000002a00)=[0x0], 0x1, 0x0, &(0x7f0000002a40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002ac0)=[0x0, 0x0], <r16=>0x0}, 0x40)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002b40)={r12, r9, 0x31, 0x0, @val=@netkit={@void, @value=r9, @void, @void, r16}}, 0x1c)
r17 = accept4$vsock_stream(r10, &(0x7f0000002b80)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x800)
r18 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LIST_PHY(r18, &(0x7f0000002c80)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4008001)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000002cc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r19=>0x0})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r11, 0x5000943f, &(0x7f0000002ec0)={{r15}, r19, 0x1a, @unused=[0x0, 0x10000, 0x1, 0x3], @subvolid})
sendmsg$nl_route(r9, &(0x7f0000003f80)={&(0x7f0000003ec0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003f40)={&(0x7f0000003f00)=@ipv4_getnexthop={0x20, 0x6a, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x14)
r20 = dup3(r17, r6, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r20, 0x89f2, &(0x7f0000004040)={'ip6_vti0\x00', &(0x7f0000003fc0)={'syztnl1\x00', r5, 0x2f, 0x5, 0x1, 0x2, 0x40, @empty, @remote, 0x20, 0x8, 0x101, 0x2}})
r21 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r21, &(0x7f0000004080)={0x10, 0x0, 0x25dfdbfe, 0x80}, 0xc)
syz_genetlink_get_family_id$nl802154(&(0x7f00000040c0), 0xffffffffffffffff)

0s ago: executing program 2 (id=183):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x800)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3})
r3 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2)
ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f0000001a80)=0x4)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10)
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f0000000140)=ANY=[], 0xff2e)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa02, 0x870, 0x1, 0x2, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x6, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}})
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0xfffffffd, 0x0, 0x7, 0x7ffd, 0x1a, "b0bfac0000000003000018bfff4000"})
r6 = syz_open_pts(r5, 0x200)
r7 = dup3(r6, r5, 0x0)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000000c0)=0xff)
ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000040)={r7, 0x1, 0x1000, 0x1000000000000})
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:3966' (ED25519) to the list of known hosts.
[   39.667515][   T43] kauditd_printk_skb: 17 callbacks suppressed
[   39.667530][   T43] audit: type=1400 audit(1790551774.011:138): avc:  denied  { name_bind } for  pid=5717 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   39.705530][   T43] audit: type=1400 audit(1790551774.051:139): avc:  denied  { execute } for  pid=5718 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   39.706018][   T43] audit: type=1400 audit(1790551774.051:140): avc:  denied  { execute_no_trans } for  pid=5718 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   41.901833][   T43] audit: type=1400 audit(1790551776.251:141): avc:  denied  { mounton } for  pid=5718 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   41.903776][   T43] audit: type=1400 audit(1790551776.251:142): avc:  denied  { mount } for  pid=5718 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   41.905896][ T5718] cgroup: Unknown subsys name 'net'
[   41.907028][   T43] audit: type=1400 audit(1790551776.251:143): avc:  denied  { unmount } for  pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   42.041549][ T5718] cgroup: Unknown subsys name 'cpuset'
[   42.043850][ T5718] cgroup: Unknown subsys name 'rlimit'
[   42.180825][   T43] audit: type=1400 audit(1790551776.531:144): avc:  denied  { setattr } for  pid=5718 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   42.181160][   T43] audit: type=1400 audit(1790551776.531:145): avc:  denied  { create } for  pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   42.181331][   T43] audit: type=1400 audit(1790551776.531:146): avc:  denied  { write } for  pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   42.181582][   T43] audit: type=1400 audit(1790551776.531:147): avc:  denied  { read } for  pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   42.243296][ T5723] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   42.920180][ T5718] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.245530][   T43] kauditd_printk_skb: 10 callbacks suppressed
[   46.245574][   T43] audit: type=1400 audit(1790551780.591:158): avc:  denied  { execmem } for  pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   46.424189][   T43] audit: type=1400 audit(1790551780.771:159): avc:  denied  { create } for  pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   46.424594][   T43] audit: type=1400 audit(1790551780.771:160): avc:  denied  { read write } for  pid=5729 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   46.424997][   T43] audit: type=1400 audit(1790551780.771:161): avc:  denied  { open } for  pid=5729 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   46.433957][   T43] audit: type=1400 audit(1790551780.781:162): avc:  denied  { ioctl } for  pid=5729 comm="syz-executor" path="socket:[6581]" dev="sockfs" ino=6581 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   46.444894][   T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.468213][ T5735] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.468515][ T5735] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.480506][ T5738] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.481386][ T5741] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   46.482024][ T5742] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.483744][ T5742] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   46.484916][ T5742] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.485674][ T5742] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   46.487470][ T5742] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   46.487705][ T5742] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.488315][ T5741] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.488477][ T5742] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   46.489062][ T5742] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.490299][ T5735] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.490851][ T5738] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.496038][   T43] audit: type=1400 audit(1790551780.841:163): avc:  denied  { read } for  pid=5730 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   46.496672][   T43] audit: type=1400 audit(1790551780.841:164): avc:  denied  { open } for  pid=5730 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   46.499738][ T5744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.501951][   T43] audit: type=1400 audit(1790551780.851:165): avc:  denied  { mounton } for  pid=5739 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   46.505156][ T5744] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.507897][ T5744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.510796][   T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.513934][   T43] audit: type=1400 audit(1790551780.861:166): avc:  denied  { module_request } for  pid=5739 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   46.536274][   T43] audit: type=1400 audit(1790551780.881:167): avc:  denied  { sys_module } for  pid=5730 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   47.071104][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.071154][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.071241][ T5739] bridge_slave_0: entered allmulticast mode
[   47.072539][ T5739] bridge_slave_0: entered promiscuous mode
[   47.092474][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.092518][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.092576][ T5739] bridge_slave_1: entered allmulticast mode
[   47.093354][ T5739] bridge_slave_1: entered promiscuous mode
[   47.150919][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.162185][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.162227][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.162373][ T5730] bridge_slave_0: entered allmulticast mode
[   47.163089][ T5730] bridge_slave_0: entered promiscuous mode
[   47.163938][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.163977][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.164035][ T5729] bridge_slave_0: entered allmulticast mode
[   47.164938][ T5729] bridge_slave_0: entered promiscuous mode
[   47.167518][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.177595][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.177637][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.177691][ T5730] bridge_slave_1: entered allmulticast mode
[   47.178416][ T5730] bridge_slave_1: entered promiscuous mode
[   47.183007][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.183115][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.183208][ T5729] bridge_slave_1: entered allmulticast mode
[   47.184457][ T5729] bridge_slave_1: entered promiscuous mode
[   47.198376][ T5739] team0: Port device team_slave_0 added
[   47.230523][ T5739] team0: Port device team_slave_1 added
[   47.255838][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.255928][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.255970][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.256280][ T5734] bridge_slave_0: entered allmulticast mode
[   47.257595][ T5734] bridge_slave_0: entered promiscuous mode
[   47.273393][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.275109][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.275309][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.275363][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.275443][ T5734] bridge_slave_1: entered allmulticast mode
[   47.276171][ T5734] bridge_slave_1: entered promiscuous mode
[   47.295027][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.343576][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.343593][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.343614][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.346456][ T5729] team0: Port device team_slave_0 added
[   47.357253][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.358866][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.358876][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.358893][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.366996][ T5729] team0: Port device team_slave_1 added
[   47.374874][ T5730] team0: Port device team_slave_0 added
[   47.383705][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.384333][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.384345][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.384362][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.405287][ T5730] team0: Port device team_slave_1 added
[   47.406481][ T5734] team0: Port device team_slave_0 added
[   47.412785][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.412795][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.412812][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.419675][ T5734] team0: Port device team_slave_1 added
[   47.460143][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.460155][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.460167][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.460951][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.460963][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.460982][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.461558][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.461566][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.461578][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.462472][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.462482][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.462500][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.473141][ T5739] hsr_slave_0: entered promiscuous mode
[   47.473942][ T5739] hsr_slave_1: entered promiscuous mode
[   47.538695][ T5734] hsr_slave_0: entered promiscuous mode
[   47.539762][ T5734] hsr_slave_1: entered promiscuous mode
[   47.540297][ T5734] debugfs: 'hsr0' already exists in 'hsr'
[   47.540366][ T5734] Cannot create hsr debugfs directory
[   47.543143][ T5729] hsr_slave_0: entered promiscuous mode
[   47.543614][ T5729] hsr_slave_1: entered promiscuous mode
[   47.543914][ T5729] debugfs: 'hsr0' already exists in 'hsr'
[   47.543924][ T5729] Cannot create hsr debugfs directory
[   47.574360][ T5730] hsr_slave_0: entered promiscuous mode
[   47.574842][ T5730] hsr_slave_1: entered promiscuous mode
[   47.575133][ T5730] debugfs: 'hsr0' already exists in 'hsr'
[   47.575145][ T5730] Cannot create hsr debugfs directory
[   47.810409][ T5739] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.816109][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   47.816539][ T5739] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.818659][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   47.819570][ T5739] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.822888][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   47.831874][ T5739] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.833741][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   47.867284][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.867336][ T5739] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.868005][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.868062][ T5739] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.870387][ T5730] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.873088][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   47.873482][ T5730] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.875189][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   47.875549][ T5730] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.878385][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   47.879253][ T5730] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.882482][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   47.907431][  T432] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.908042][  T432] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.941382][ T5734] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.949156][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   47.953693][ T5734] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.956868][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   47.957214][ T5734] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.961295][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   47.968957][ T5734] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.973755][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   48.018896][ T5729] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   48.021654][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.022205][ T5729] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   48.023807][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.024161][ T5729] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   48.026254][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.030866][ T5729] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   48.033040][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   48.039101][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.065993][ T5739] 8021q: adding VLAN 0 to HW filter on device team0
[   48.083189][  T432] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.083238][  T432] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.087445][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.100717][  T432] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.100872][  T432] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.110751][ T5730] 8021q: adding VLAN 0 to HW filter on device team0
[   48.130800][  T432] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.130846][  T432] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.146469][ T4574] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.146516][ T4574] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.190297][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.230006][ T5734] 8021q: adding VLAN 0 to HW filter on device team0
[   48.231452][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.236987][ T4574] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.237031][ T4574] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.256500][ T4574] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.256546][ T4574] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.268068][ T5729] 8021q: adding VLAN 0 to HW filter on device team0
[   48.284428][ T4574] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.284494][ T4574] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.291463][ T4574] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.291507][ T4574] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.323145][ T5729] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   48.323160][ T5729] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.425796][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.451540][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.462366][ T5739] veth0_vlan: entered promiscuous mode
[   48.469021][ T5739] veth1_vlan: entered promiscuous mode
[   48.498317][ T5739] veth0_macvtap: entered promiscuous mode
[   48.502333][ T5730] veth0_vlan: entered promiscuous mode
[   48.512220][ T5739] veth1_macvtap: entered promiscuous mode
[   48.515528][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.523486][ T5730] veth1_vlan: entered promiscuous mode
[   48.540115][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.544121][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.549405][ T5091] Bluetooth: hci1: command tx timeout
[   48.549492][ T5733] Bluetooth: hci2: command tx timeout
[   48.549570][ T5091] Bluetooth: hci3: command tx timeout
[   48.549636][ T5743] Bluetooth: hci0: command tx timeout
[   48.571034][ T5734] veth0_vlan: entered promiscuous mode
[   48.572857][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.597302][ T5730] veth0_macvtap: entered promiscuous mode
[   48.598691][ T5734] veth1_vlan: entered promiscuous mode
[   48.609386][ T5808] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.609891][ T5808] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.615643][ T5730] veth1_macvtap: entered promiscuous mode
[   48.646443][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.651704][ T4574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.651716][ T4574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.658092][ T5734] veth0_macvtap: entered promiscuous mode
[   48.665411][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.680657][ T5729] veth0_vlan: entered promiscuous mode
[   48.683088][ T5734] veth1_macvtap: entered promiscuous mode
[   48.687667][ T4574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.687680][ T4574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.704959][ T5729] veth1_vlan: entered promiscuous mode
[   48.709576][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.709840][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.709866][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.709889][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.718654][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.721705][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.732097][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.745506][ T5729] veth0_macvtap: entered promiscuous mode
[   48.753450][ T5739] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.756617][ T5729] veth1_macvtap: entered promiscuous mode
[   48.793066][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.793077][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.812786][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.817663][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.827609][ T4574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.827624][ T4574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.845185][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.845201][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.884625][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.884639][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.912422][ T4574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.912436][ T4574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.960646][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.960660][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.978413][ T5887] FAULT_INJECTION: forcing a failure.
[   48.978413][ T5887] name failslab, interval 1, probability 0, space 0, times 1
[   48.978431][ T5887] CPU: 1 UID: 0 PID: 5887 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) 
[   48.978443][ T5887] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   48.978449][ T5887] Call Trace:
[   48.978453][ T5887]  <TASK>
[   48.978458][ T5887]  dump_stack_lvl+0x100/0x190
[   48.978481][ T5887]  should_fail_ex.cold+0x5/0xa
[   48.978497][ T5887]  should_failslab+0xc2/0x120
[   48.978513][ T5887]  __kmalloc_noprof+0xfc/0x840
[   48.978526][ T5887]  ? ___neigh_create+0x1532/0x2940
[   48.978541][ T5887]  ___neigh_create+0x1532/0x2940
[   48.978557][ T5887]  ? ip_finish_output2+0x356/0x2400
[   48.978576][ T5887]  ? __pfx____neigh_create+0x10/0x10
[   48.978590][ T5887]  ip_finish_output2+0x1d3c/0x2400
[   48.978611][ T5887]  ? __pfx_ip_finish_output2+0x10/0x10
[   48.978628][ T5887]  ? __pfx_ip_dst_mtu_maybe_forward+0x10/0x10
[   48.978645][ T5887]  ? nf_nat_ipv4_out+0xb2/0x510
[   48.978657][ T5887]  ? find_held_lock+0x2b/0x80
[   48.978675][ T5887]  __ip_finish_output.part.0+0x444/0x6f0
[   48.978694][ T5887]  ip_output+0x39b/0xc10
[   48.978712][ T5887]  ? __pfx_ip_output+0x10/0x10
[   48.978746][ T5887]  ? __ip_make_skb+0x111e/0x1f90
[   48.978758][ T5887]  ? __pfx_ip_finish_output+0x10/0x10
[   48.978776][ T5887]  ? __pfx_ip_output+0x10/0x10
[   48.978793][ T5887]  ip_push_pending_frames+0x284/0x300
[   48.978806][ T5887]  raw_sendmsg+0x1492/0x3770
[   48.978823][ T5887]  ? __pfx_raw_sendmsg+0x10/0x10
[   48.978836][ T5887]  ? avc_has_perm+0x135/0x1e0
[   48.978854][ T5887]  ? __pfx_avc_has_perm+0x10/0x10
[   48.978871][ T5887]  ? __pfx_tomoyo_check_inet_address+0x10/0x10
[   48.978901][ T5887]  ? __pfx_raw_sendmsg+0x10/0x10
[   48.978914][ T5887]  inet_sendmsg+0x11c/0x140
[   48.978927][ T5887]  __sys_sendto+0x453/0x4e0
[   48.978940][ T5887]  ? __pfx_inet_sendmsg+0x10/0x10
[   48.978952][ T5887]  ? __pfx___sys_sendto+0x10/0x10
[   48.978969][ T5887]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   48.978987][ T5887]  ? ksys_write+0x1ac/0x250
[   48.979000][ T5887]  ? __pfx_ksys_write+0x10/0x10
[   48.979014][ T5887]  __x64_sys_sendto+0xe0/0x1c0
[   48.979027][ T5887]  ? do_syscall_64+0xae/0x790
[   48.979038][ T5887]  ? lockdep_hardirqs_on+0x7d/0x110
[   48.979049][ T5887]  do_syscall_64+0x123/0x790
[   48.979061][ T5887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.979072][ T5887] RIP: 0033:0x7fcf8d99e159
[   48.979082][ T5887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   48.979092][ T5887] RSP: 002b:00007fcf8e79c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[   48.979103][ T5887] RAX: ffffffffffffffda RBX: 00007fcf8dc25fa0 RCX: 00007fcf8d99e159
[   48.979109][ T5887] RDX: 000000000000000a RSI: 0000200000000400 RDI: 0000000000000003
[   48.979116][ T5887] RBP: 00007fcf8e79c090 R08: 0000200000002400 R09: 0000000000000010
[   48.979122][ T5887] R10: 0000000000000880 R11: 0000000000000246 R12: 0000000000000001
[   48.979128][ T5887] R13: 00007fcf8dc26038 R14: 00007fcf8dc25fa0 R15: 00007ffdd124fe18
[   48.979143][ T5887]  </TASK>
[   49.000691][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.000952][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.001071][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.049170][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.068864][ T5808] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.069119][ T5808] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.069341][ T5808] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.069360][ T5808] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.069377][ T5808] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.246043][ T5904] binder_alloc: 5902: binder_alloc_buf, no vma
[   49.246990][ T5904] fuse: Bad value for 'fd'
[   49.254863][ T5905] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0
[   49.306371][ T5908] IPVS: stopping backup sync thread 5905 ...
[   49.570095][ T1476] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   49.729594][ T1476] usb 8-1: Using ep0 maxpacket: 32
[   49.731966][ T1476] usb 8-1: unable to get BOS descriptor or descriptor too short
[   49.731989][ T1476] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e
[   49.735902][ T1476] usb 8-1: string descriptor 0 read error: -22
[   49.735957][ T1476] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   49.748423][ T1476] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state.
[   49.748443][ T1476] dw2102: su3000_power_ctrl: 1, initialized 0
[   49.749997][ T1476] dvb-usb: bulk message failed: -22 (2/0)
[   49.754576][ T1476] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   49.755369][ T1476] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3)
[   49.755394][ T1476] usb 8-1: media controller created
[   49.756047][ T1476] dvb-usb: bulk message failed: -22 (6/0)
[   49.756057][ T1476] dw2102: i2c transfer failed.
[   49.756072][ T1476] dvb-usb: bulk message failed: -22 (6/0)
[   49.756078][ T1476] dw2102: i2c transfer failed.
[   49.756084][ T1476] dvb-usb: bulk message failed: -22 (6/0)
[   49.756090][ T1476] dw2102: i2c transfer failed.
[   49.756095][ T1476] dvb-usb: bulk message failed: -22 (6/0)
[   49.756101][ T1476] dw2102: i2c transfer failed.
[   49.756106][ T1476] dvb-usb: bulk message failed: -22 (6/0)
[   49.756112][ T1476] dw2102: i2c transfer failed.
[   49.756117][ T1476] dvb-usb: bulk message failed: -22 (6/0)
[   49.756123][ T1476] dw2102: i2c transfer failed.
[   49.756127][ T1476] dvb-usb: MAC address: 02:02:02:02:02:02
[   49.765021][ T1476] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   49.773842][ T1476] dvb-usb: bulk message failed: -22 (3/0)
[   49.773852][ T1476] dw2102: command 0x0e transfer failed.
[   49.773856][ T1476] dvb-usb: bulk message failed: -22 (3/0)
[   49.773862][ T1476] dw2102: command 0x0e transfer failed.
[   49.881592][ T5918] FAULT_INJECTION: forcing a failure.
[   49.881592][ T5918] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   49.881611][ T5918] CPU: 0 UID: 0 PID: 5918 Comm: syz.2.12 Not tainted syzkaller #0 PREEMPT(full) 
[   49.881623][ T5918] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   49.881629][ T5918] Call Trace:
[   49.881633][ T5918]  <TASK>
[   49.881637][ T5918]  dump_stack_lvl+0x100/0x190
[   49.881657][ T5918]  should_fail_ex.cold+0x5/0xa
[   49.881673][ T5918]  _copy_to_user+0x32/0xd0
[   49.881688][ T5918]  simple_read_from_buffer+0xcb/0x170
[   49.881704][ T5918]  proc_fail_nth_read+0x1af/0x230
[   49.881720][ T5918]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   49.881736][ T5918]  ? rw_verify_area+0xce/0x6d0
[   49.881747][ T5918]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   49.881761][ T5918]  vfs_read+0x1e4/0xb40
[   49.881774][ T5918]  ? lock_acquire+0x1d1/0x380
[   49.881786][ T5918]  ? __fget_files+0x34/0x3d0
[   49.881801][ T5918]  ? __pfx_vfs_read+0x10/0x10
[   49.881812][ T5918]  ? find_held_lock+0x2b/0x80
[   49.881828][ T5918]  ? __fget_files+0x215/0x3d0
[   49.881845][ T5918]  ? __fget_files+0x21f/0x3d0
[   49.881863][ T5918]  ksys_read+0x12a/0x250
[   49.881875][ T5918]  ? __pfx_ksys_read+0x10/0x10
[   49.881891][ T5918]  do_syscall_64+0x123/0x790
[   49.881904][ T5918]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   49.881917][ T5918] RIP: 0033:0x7f730455e98e
[   49.881926][ T5918] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   49.881940][ T5918] RSP: 002b:00007f730537efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   49.881956][ T5918] RAX: ffffffffffffffda RBX: 00007f730537f6c0 RCX: 00007f730455e98e
[   49.881967][ T5918] RDX: 000000000000000f RSI: 00007f730537f0a0 RDI: 0000000000000006
[   49.881976][ T5918] RBP: 00007f730537f090 R08: 0000000000000000 R09: 0000000000000000
[   49.881986][ T5918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   49.881995][ T5918] R13: 00007f7304826038 R14: 00007f7304825fa0 R15: 00007ffc1ad3ae08
[   49.882011][ T5918]  </TASK>
[   50.055940][ T5938] Zero length message leads to an empty skb
[   50.081768][ T1476] dvb-usb: bulk message failed: -22 (3/0)
[   50.081783][ T1476] dw2102: command 0x0e transfer failed.
[   50.081787][ T1476] dvb-usb: bulk message failed: -22 (3/0)
[   50.081793][ T1476] dw2102: command 0x0e transfer failed.
[   50.081797][ T1476] dvb-usb: bulk message failed: -22 (1/0)
[   50.081803][ T1476] dw2102: command 0x51 transfer failed.
[   50.084095][ T5904] dvb-usb: bulk message failed: -22 (3/0)
[   50.084111][ T5904] dw2102: i2c transfer failed.
[   50.132554][ T1476] DVB: Unable to find symbol ds3000_attach()
[   50.132564][ T1476] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3'
[   50.199152][ T1476] rc_core: IR keymap rc-su3000 not found
[   50.199162][ T1476] Registered IR keymap rc-empty
[   50.206793][ T1476] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0
[   50.207926][ T1476] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input5
[   50.230528][ T1476] dvb-usb: schedule remote query interval to 150 msecs.
[   50.230546][ T1476] dw2102: su3000_power_ctrl: 0, initialized 1
[   50.230556][ T1476] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected.
[   50.399619][ T1476] dvb-usb: bulk message failed: -22 (1/0)
[   50.399634][ T1476] dw2102: i2c transfer failed.
[   50.558823][   T10] dvb-usb: bulk message failed: -22 (1/0)
[   50.558843][   T10] dw2102: i2c transfer failed.
[   50.618941][ T5743] Bluetooth: hci3: command tx timeout
[   50.629514][ T5743] Bluetooth: hci2: command tx timeout
[   50.629535][ T5743] Bluetooth: hci1: command tx timeout
[   50.629547][ T5743] Bluetooth: hci0: command tx timeout
[   50.671403][ T1476] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   50.718939][   T10] dvb-usb: bulk message failed: -22 (1/0)
[   50.718959][   T10] dw2102: i2c transfer failed.
[   50.839492][ T1476] usb 5-1: Using ep0 maxpacket: 16
[   50.844413][ T1476] usb 5-1: unable to get BOS descriptor or descriptor too short
[   50.844448][ T1476] usb 5-1: New USB device found, idVendor=0582, idProduct=0060, bcdDevice= 0.40
[   50.845613][ T1476] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 8
[   50.847681][ T1476] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   50.847700][ T1476] usb 5-1: Product: syz
[   50.847712][ T1476] usb 5-1: Manufacturer: syz
[   50.847723][ T1476] usb 5-1: SerialNumber: syz
[   50.850536][ T5959] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   50.888860][ T5838] dvb-usb: bulk message failed: -22 (1/0)
[   50.888928][ T5838] dw2102: i2c transfer failed.
[   51.058777][ T5838] dvb-usb: bulk message failed: -22 (1/0)
[   51.058792][ T5838] dw2102: i2c transfer failed.
[   51.079875][ T5955] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size.
[   51.108704][ T1476] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[   51.143739][ T1476] usb 5-1: USB disconnect, device number 2
[   51.228883][   T10] dvb-usb: bulk message failed: -22 (1/0)
[   51.228912][   T10] dw2102: i2c transfer failed.
[   51.255088][ T5983] udevd[5983]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   51.399286][ T5838] dvb-usb: bulk message failed: -22 (1/0)
[   51.399305][ T5838] dw2102: i2c transfer failed.
[   51.461024][   T43] kauditd_printk_skb: 80 callbacks suppressed
[   51.461041][   T43] audit: type=1400 audit(1790551785.811:249): avc:  denied  { bind } for  pid=5991 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   51.461077][   T43] audit: type=1400 audit(1790551785.811:248): avc:  denied  { write } for  pid=5991 comm="syz.1.21" path="socket:[12685]" dev="sockfs" ino=12685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   51.492601][   T43] audit: type=1400 audit(1790551785.841:250): avc:  denied  { create } for  pid=5994 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   51.495435][   T43] audit: type=1400 audit(1790551785.841:251): avc:  denied  { bind } for  pid=5994 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   51.498408][   T43] audit: type=1400 audit(1790551785.841:252): avc:  denied  { connect } for  pid=5994 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   51.558913][ T1476] dvb-usb: bulk message failed: -22 (1/0)
[   51.558928][ T1476] dw2102: i2c transfer failed.
[   51.718819][ T1476] dvb-usb: bulk message failed: -22 (1/0)
[   51.718834][ T1476] dw2102: i2c transfer failed.
[   51.734491][   T43] audit: type=1400 audit(1790551786.081:253): avc:  denied  { bind } for  pid=5997 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   51.878830][ T1476] dvb-usb: bulk message failed: -22 (1/0)
[   51.878849][ T1476] dw2102: i2c transfer failed.
[   52.040050][ T5838] dvb-usb: bulk message failed: -22 (1/0)
[   52.040069][ T5838] dw2102: i2c transfer failed.
[   52.040379][   T43] audit: type=1400 audit(1790551786.381:254): avc:  denied  { create } for  pid=6007 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   52.042333][   T43] audit: type=1400 audit(1790551786.391:255): avc:  denied  { watch } for  pid=6007 comm="syz.1.27" path="/9" dev="tmpfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   52.042737][   T43] audit: type=1400 audit(1790551786.391:256): avc:  denied  { watch_sb watch_reads } for  pid=6007 comm="syz.1.27" path="/9" dev="tmpfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   52.045982][ T6009] ip_tables: iptables: counters copy to user failed while replacing table
[   52.055457][   T43] audit: type=1400 audit(1790551786.401:257): avc:  denied  { ioctl } for  pid=6007 comm="syz.1.27" path="socket:[11139]" dev="sockfs" ino=11139 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   52.152097][ T5838] usb 8-1: USB disconnect, device number 2
[   52.187521][ T5838] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected.
[   52.263545][ T6018] tmpfs: Bad value for 'mpol'
[   52.474798][ T6021] geneve2: entered promiscuous mode
[   52.621782][ T6034] /dev/sr0: Can't open blockdev
[   52.710542][   T66] Bluetooth: hci0: command tx timeout
[   52.710565][   T66] Bluetooth: hci1: command tx timeout
[   52.710578][   T66] Bluetooth: hci3: command tx timeout
[   52.713366][ T6038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.37'.
[   52.991047][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.189844][ T6063] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   53.191773][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.47'.
[   53.191786][ T6068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.47'.
[   53.199104][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.47'.
[   53.199117][ T6068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.47'.
[   53.211230][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   53.211256][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   53.211274][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   53.211290][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   53.351676][ T6092] syz_tun: entered allmulticast mode
[   53.580128][ T5743] Bluetooth: hci2: command tx timeout
[   53.947832][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.62'.
[   53.985677][ T6129] loop6: detected capacity change from 0 to 1
[   53.993390][ T6129] Dev loop6: unable to read RDB block 1
[   53.993418][ T6129]  loop6: unable to read partition table
[   53.993522][ T6129] loop6: partition table beyond EOD, truncated
[   53.993552][ T6129] loop_reread_partitions: partition scan of loop6 (��������6�tPΪŔ���A���8�*V^��3c) failed (rc=-5)
[   54.038877][ T1476] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   54.178816][ T1476] usb 7-1: device descriptor read/64, error -71
[   54.408853][   T25] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   54.428865][ T1476] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   54.508803][ T5844] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[   54.539776][   T25] usb 8-1: device descriptor read/64, error -71
[   54.568861][ T1476] usb 7-1: device descriptor read/64, error -71
[   54.660399][ T5844] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[   54.662640][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[   54.662654][ T5844] usb 6-1: Product: syz
[   54.662661][ T5844] usb 6-1: Manufacturer: syz
[   54.662668][ T5844] usb 6-1: SerialNumber: syz
[   54.663999][ T5844] usb 6-1: config 0 descriptor??
[   54.683246][ T1476] usb usb7-port1: attempt power cycle
[   54.778954][   T66] Bluetooth: hci1: command tx timeout
[   54.778977][   T66] Bluetooth: hci0: command tx timeout
[   54.779003][ T5743] Bluetooth: hci3: command tx timeout
[   54.789943][   T25] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   54.870190][ T6138] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[   54.877978][  T432] rtrs_client L2024: <s+>: CM error (CM event: address error, err: -ENODEV)
[   54.878364][ T6138] rtrs_client L2644: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[   54.888667][ T6151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   54.889718][ T6148] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[   54.891113][   T38] rtrs_client L2024: <s+>: CM error (CM event: address error, err: -ENODEV)
[   54.891375][ T6148] rtrs_client L2644: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[   54.894578][ T6151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   54.929082][   T25] usb 8-1: device descriptor read/64, error -71
[   54.969604][ T5521] usb 6-1: USB disconnect, device number 2
[   55.018877][ T1476] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   55.039681][   T25] usb usb8-port1: attempt power cycle
[   55.039971][ T1476] usb 7-1: device descriptor read/8, error -71
[   55.298863][ T1476] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   55.319952][ T1476] usb 7-1: device descriptor read/8, error -71
[   55.378848][   T25] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[   55.399245][   T25] usb 8-1: device descriptor read/8, error -71
[   55.439014][ T1476] usb usb7-port1: unable to enumerate USB device
[   55.562294][ T6155] cgroup2: Unknown parameter 'memory'
[   55.638853][   T25] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[   55.661069][   T25] usb 8-1: device descriptor read/8, error -71
[   55.664923][ T6167] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   55.668876][ T6167] program syz.1.73 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   55.762265][ T6175] loop7: detected capacity change from 0 to 7
[   55.769831][   T25] usb usb8-port1: unable to enumerate USB device
[   55.812390][ T6175] Dev loop7: unable to read RDB block 7
[   55.812414][ T6175]  loop7: unable to read partition table
[   55.812518][ T6175] loop7: partition table beyond EOD, truncated
[   55.815255][ T6175] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[   56.133675][ T5880] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[   56.136734][ T5880] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[   56.390692][ T5880] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[   56.602064][ T6187] overlayfs: missing 'workdir'
[   56.616130][   T43] kauditd_printk_skb: 67 callbacks suppressed
[   56.616141][   T43] audit: type=1400 audit(1790551790.961:325): avc:  denied  { read } for  pid=6186 comm="syz.0.79" name="btrfs-control" dev="devtmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   56.616163][   T43] audit: type=1400 audit(1790551790.961:326): avc:  denied  { open } for  pid=6186 comm="syz.0.79" path="/dev/btrfs-control" dev="devtmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   56.616218][   T43] audit: type=1400 audit(1790551790.961:327): avc:  denied  { ioctl } for  pid=6186 comm="syz.0.79" path="/dev/btrfs-control" dev="devtmpfs" ino=1339 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   56.616241][   T43] audit: type=1400 audit(1790551790.961:328): avc:  denied  { execute } for  pid=6186 comm="syz.0.79" path="/23/bus/blkio.bfq.io_service_bytes_recursive" dev="tmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   56.659911][   T43] audit: type=1400 audit(1790551791.011:329): avc:  denied  { create } for  pid=6188 comm="syz.0.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   56.663345][   T43] audit: type=1400 audit(1790551791.011:330): avc:  denied  { getopt } for  pid=6188 comm="syz.0.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   56.855461][ T6191] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[   56.857900][ T6191] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes"ecryptfs_key_bytes=16
[   56.857939][ T6191] Error validating options; rc = [-22]
[   56.900122][  T851] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[   56.948147][ T6181] ceph: No mds server is up or the cluster is laggy
[   57.190015][ T6202] uhci_hcd 0000:00:1d.0: remove, state 4
[   57.190083][ T6202] usb usb1: USB disconnect, device number 1
[   57.219520][ T6202] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered
[   57.232018][   T43] audit: type=1400 audit(1790551791.581:331): avc:  denied  { create } for  pid=6207 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   57.240380][   T43] audit: type=1400 audit(1790551791.591:332): avc:  denied  { ioctl } for  pid=6207 comm="syz.0.87" path="socket:[13539]" dev="sockfs" ino=13539 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   57.279473][   T43] audit: type=1400 audit(1790551791.631:333): avc:  denied  { create } for  pid=6210 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   57.280631][   T43] audit: type=1400 audit(1790551791.631:334): avc:  denied  { ioctl } for  pid=6210 comm="syz.0.88" path="/dev/ppp" dev="devtmpfs" ino=729 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   57.309130][ T6211] syz.0.88 (6211) used obsolete PPPIOCDETACH ioctl
[   57.328902][ T6209] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint
[   57.331736][ T6209] pci 0000:00:1d.0: BAR 4 [io  0xc0e0-0xc0ff]
[   57.337697][ T6209] pci 0000:00:1d.0: Adding to iommu group 7
[   57.342197][ T6209] pci 0000:00:1d.0: BAR 4 [io  0x2000-0x201f]: assigned
[   57.397236][ T6209] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 52550 usecs
[   57.466165][ T6209] uhci_hcd 0000:00:1d.0: UHCI Host Controller
[   57.480130][ T6209] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1
[   57.480291][ T6209] uhci_hcd 0000:00:1d.0: detected 2 ports
[   57.483178][ T6209] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000
[   57.485065][ T6209] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.03
[   57.489020][ T6209] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[   57.489037][ T6209] usb usb1: Product: UHCI Host Controller
[   57.489046][ T6209] usb usb1: Manufacturer: Linux syzkaller uhci_hcd
[   57.489056][ T6209] usb usb1: SerialNumber: 0000:00:1d.0
[   57.524974][ T6209] hub 1-0:1.0: USB hub found
[   57.526026][ T6209] hub 1-0:1.0: 2 ports detected
[   57.650245][ T6273] overlayfs: failed to resolve './bus': -2
[   57.660056][ T6285] overlayfs: failed to resolve './bus': -2
[   57.898376][ T6351] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.193599][ T5444] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   58.331191][ T6364] tmpfs: Bad value for 'mpol'
[   58.385223][ T6368] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96
[   58.385656][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.102'.
[   58.502194][ T6378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.106'.
[   58.542776][ T6381] binder: 6379:6381 ioctl c0306201 200000000640 returned -22
[   58.558398][ T6383] syz.0.109 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000
[   58.558422][ T6383] CPU: 3 UID: 0 PID: 6383 Comm: syz.0.109 Not tainted syzkaller #0 PREEMPT(full) 
[   58.558435][ T6383] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   58.558442][ T6383] Call Trace:
[   58.558447][ T6383]  <TASK>
[   58.558452][ T6383]  dump_stack_lvl+0x100/0x190
[   58.558472][ T6383]  dump_header+0xfb/0x606
[   58.558486][ T6383]  oom_kill_process.cold+0xd/0x380
[   58.558500][ T6383]  out_of_memory+0x340/0x14f0
[   58.558520][ T6383]  ? __pfx_out_of_memory+0x10/0x10
[   58.558540][ T6383]  mem_cgroup_out_of_memory+0xc6/0x130
[   58.558553][ T6383]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[   58.558566][ T6383]  ? find_held_lock+0x2b/0x80
[   58.558585][ T6383]  ? do_raw_spin_unlock+0x145/0x1e0
[   58.558601][ T6383]  ? _raw_spin_unlock+0x28/0x50
[   58.558618][ T6383]  try_charge_memcg+0x783/0xf60
[   58.558632][ T6383]  ? __pfx_try_charge_memcg+0x10/0x10
[   58.558649][ T6383]  ? find_held_lock+0x2b/0x80
[   58.558664][ T6383]  ? rcu_read_unlock+0x17/0x60
[   58.558674][ T6383]  ? rcu_read_unlock+0x17/0x60
[   58.558690][ T6383]  obj_cgroup_charge_pages+0x2b/0x1f0
[   58.558701][ T6383]  __memcg_slab_post_alloc_hook+0x47f/0x10c0
[   58.558737][ T6383]  ? kasan_unpoison+0x27/0x60
[   58.558754][ T6383]  __kvmalloc_node_noprof+0x750/0x9b0
[   58.558770][ T6383]  ? do_raw_spin_lock+0x128/0x260
[   58.558785][ T6383]  ? alloc_fdtable+0x110/0x2d0
[   58.558803][ T6383]  alloc_fdtable+0x110/0x2d0
[   58.558819][ T6383]  dup_fd+0x995/0xd10
[   58.558836][ T6383]  ? do_raw_spin_unlock+0x145/0x1e0
[   58.558852][ T6383]  ? _raw_spin_unlock+0x28/0x50
[   58.558869][ T6383]  ? copy_fs_struct+0x2a0/0x340
[   58.558884][ T6383]  ksys_unshare+0x7c7/0xa70
[   58.558898][ T6383]  ? __pfx_ksys_unshare+0x10/0x10
[   58.558916][ T6383]  __x64_sys_unshare+0x31/0x40
[   58.558929][ T6383]  do_syscall_64+0x123/0x790
[   58.558942][ T6383]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.558953][ T6383] RIP: 0033:0x7fcf8d99e159
[   58.558963][ T6383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   58.558973][ T6383] RSP: 002b:00007fcf8e79c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   58.558984][ T6383] RAX: ffffffffffffffda RBX: 00007fcf8dc25fa0 RCX: 00007fcf8d99e159
[   58.558991][ T6383] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020400
[   58.558997][ T6383] RBP: 00007fcf8da3506b R08: 0000000000000000 R09: 0000000000000000
[   58.559003][ T6383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   58.559009][ T6383] R13: 00007fcf8dc26038 R14: 00007fcf8dc25fa0 R15: 00007ffdd124fe18
[   58.559024][ T6383]  </TASK>
[   58.559109][ T6383] memory: usage 4kB, limit 8kB, failcnt 20
[   58.559117][ T6383] memory+swap: usage 4kB, limit 9007199254740988kB, failcnt 0
[   58.559124][ T6383] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0
[   58.559131][ T6383] Memory cgroup stats for /syz0/test:
[   58.559271][ T6383] cache 0
[   58.559276][ T6383] rss 0
[   58.559280][ T6383] rss_huge 0
[   58.559284][ T6383] shmem 0
[   58.559288][ T6383] mapped_file 0
[   58.559292][ T6383] dirty 0
[   58.559297][ T6383] writeback 0
[   58.559301][ T6383] workingset_refault_anon 0
[   58.559305][ T6383] workingset_refault_file 0
[   58.559309][ T6383] swap 0
[   58.559313][ T6383] swapcached 0
[   58.559317][ T6383] pgpgin 0
[   58.559320][ T6383] pgpgout 0
[   58.559324][ T6383] pgfault 0
[   58.559327][ T6383] pgmajfault 0
[   58.559331][ T6383] inactive_anon 0
[   58.559334][ T6383] active_anon 0
[   58.559338][ T6383] inactive_file 0
[   58.559341][ T6383] active_file 0
[   58.559345][ T6383] unevictable 0
[   58.559349][ T6383] hierarchical_memory_limit 8192
[   58.559353][ T6383] hierarchical_memsw_limit 9223372036854771712
[   58.559357][ T6383] total_cache 0
[   58.559361][ T6383] total_rss 0
[   58.559364][ T6383] total_rss_huge 0
[   58.559368][ T6383] total_shmem 0
[   58.559371][ T6383] total_mapped_file 0
[   58.559375][ T6383] total_dirty 0
[   58.559379][ T6383] total_writeback 0
[   58.559382][ T6383] total_workingset_refault_anon 0
[   58.559387][ T6383] total_workingset_refault_file 0
[   58.559391][ T6383] total_swap 0
[   58.559394][ T6383] total_swapcached 0
[   58.559398][ T6383] total_pgpgin 0
[   58.559402][ T6383] total_pgpgout 0
[   58.559405][ T6383] total_pgfault 0
[   58.559409][ T6383] total_pgmajfault 0
[   58.559413][ T6383] total_inactive_anon 0
[   58.559417][ T6383] total_active_anon 0
[   58.559421][ T6383] total_inactive_file 0
[   58.559424][ T6383] total_active_file 0
[   58.559428][ T6383] total_unevictable 0
[   58.559433][ T6383] anon_cost 0
[   58.559437][ T6383] file_cost 0
[   58.559441][ T6383] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.109,pid=6382,uid=0
[   58.560126][ T6383] Memory cgroup out of memory: Killed process 6382 (syz.0.109) total-vm:103856kB, anon-rss:1436kB, file-rss:24724kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[   58.618423][ T6388] bond1: Removing last ns target with arp_interval on
[   58.659694][ T6393] Bluetooth: MGMT ver 1.23
[   58.660811][ T6393] x_tables: ip6_tables: hashlimit.3 match: invalid size 312 (kernel) != (user) 360
[   58.681500][  T851] Process accounting resumed
[   58.809092][ T6404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   58.831461][ T6408] overlayfs: failed lookup in lower (newroot/18, name='file0', err=-40): overlapping layers
[   58.832024][ T6410] overlayfs: failed lookup in lower (newroot/18, name='bus', err=-40): overlapping layers
[   58.832508][ T6408] overlayfs: failed lookup in lower (newroot/18, name='bus', err=-40): overlapping layers
[   58.832991][ T6409] overlayfs: failed lookup in lower (newroot/18, name='bus', err=-40): overlapping layers
[   58.862305][ T6414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   59.201625][   T42] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   59.349256][   T42] usb 6-1: Using ep0 maxpacket: 8
[   59.349718][   T42] usb 6-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.40
[   59.350503][   T42] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 75, changing to 10
[   59.350518][   T42] usb 6-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   59.350530][   T42] usb 6-1: config 1 interface 0 has no altsetting 0
[   59.356105][   T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.356119][   T42] usb 6-1: Product: Ь
[   59.356126][   T42] usb 6-1: Manufacturer: ᥤ휴ӻ脏訽壩錋뾞ꨰ笽꫌溺঎淓五ἄ퇨凅ࣱk釙䧞繌诠끷蚪ր驙צּᆾ匋㛼꟧ꮳ늃⥐焠⼃鲐኉࿻⫸ﵹ擮誠껙᪯ᜣ鐥
[   59.356138][   T42] usb 6-1: SerialNumber: Ѓ
[   59.441381][ T6455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.128'.
[   59.441804][ T6455] xt_hashlimit: invalid rate
[   59.581675][   T42] usbhid 6-1:1.0: can't add hid device: -71
[   59.581767][   T42] usbhid 6-1:1.0: probe with driver usbhid failed with error -71
[   59.590479][   T42] usb 6-1: USB disconnect, device number 3
[   59.648389][ T6477] sock: sock_set_timeout: `syz.2.131' (pid 6477) tries to set negative timeout
[   59.651225][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'.
[   59.690151][ T6483] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   59.690417][ T6483] CIFS: Attempting to mount //1#7.0.0.1/�7�/�䅯��yshare
[   59.695615][ T6483] CIFS: VFS: Error connecting to socket. Aborting operation.
[   59.695696][ T6483] CIFS: VFS: cifs_mount failed w/return code = -111
[   59.728939][ T5844] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   59.890872][ T5844] usb 5-1: unable to get BOS descriptor or descriptor too short
[   59.890915][ T5844] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[   59.891820][ T5844] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   59.891836][ T5844] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   59.891864][ T5844] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[   59.891888][ T5844] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[   59.891914][ T5844] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   59.891933][ T5844] usb 5-1: config 1 interface 1 has no altsetting 0
[   59.894595][ T5844] usb 5-1: string descriptor 0 read error: -22
[   59.894691][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.948843][   T25] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   60.106071][ T6495] netlink: 48 bytes leftover after parsing attributes in process `syz.1.136'.
[   60.119650][   T25] usb 7-1: Using ep0 maxpacket: 8
[   60.120399][   T25] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[   60.121935][   T25] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   60.121947][   T25] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[   60.122021][   T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[   60.122036][   T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[   60.122055][   T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.128160][   T25] hub 7-1:1.0: bad descriptor, ignoring hub
[   60.128220][   T25] hub 7-1:1.0: probe with driver hub failed with error -5
[   60.128585][   T25] cdc_wdm 7-1:1.0: skipping garbage
[   60.128593][   T25] cdc_wdm 7-1:1.0: skipping garbage
[   60.133792][   T25] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[   60.133806][   T25] cdc_wdm 7-1:1.0: Unknown control protocol
[   60.231649][ T6507] nvme_fabrics: missing parameter 'traddr=%s'
[   60.357813][ T6518] =======================================================
[   60.357813][ T6518] WARNING: The mand mount option has been deprecated and
[   60.357813][ T6518]          and is ignored by this kernel. Remove the mand
[   60.357813][ T6518]          option from the mount to silence this warning.
[   60.357813][ T6518] =======================================================
[   60.447318][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.145'.
[   60.515607][ T5844] usb 5-1: 2:0: failed to get current value for ch 1 (-71)
[   60.520430][ T5844] usb 5-1: Warning! Unlikely small volume range (=207), linear volume or custom curve?
[   60.520443][ T5844] usb 5-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/207/1
[   60.544414][ T5844] usb 5-1: USB disconnect, device number 3
[   60.548502][ T6534] netlink: 'syz.3.147': attribute type 21 has an invalid length.
[   60.548515][ T6534] netlink: 128 bytes leftover after parsing attributes in process `syz.3.147'.
[   60.548656][ T6534] netlink: 'syz.3.147': attribute type 4 has an invalid length.
[   60.548685][ T6534] netlink: 'syz.3.147': attribute type 5 has an invalid length.
[   60.548692][ T6534] netlink: 3 bytes leftover after parsing attributes in process `syz.3.147'.
[   60.883874][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.152'.
[   60.955539][ T6557] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   60.961747][ T6557] iommufd_mock iommufd_mock1: Adding to iommu group 10
[   60.963958][ T6557] iommufd_mock iommufd_mock2: Adding to iommu group 11
[   61.145557][ T6577] fuse: Unknown parameter './file0'
[   61.163568][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'.
[   61.174858][ T6583] netlink: 'syz.3.158': attribute type 5 has an invalid length.
[   61.222693][ T6587] FAULT_INJECTION: forcing a failure.
[   61.222693][ T6587] name failslab, interval 1, probability 0, space 0, times 0
[   61.222725][ T6587] CPU: 3 UID: 0 PID: 6587 Comm: syz.3.160 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   61.222748][ T6587] Tainted: [L]=SOFTLOCKUP
[   61.222754][ T6587] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   61.222764][ T6587] Call Trace:
[   61.222769][ T6587]  <TASK>
[   61.222776][ T6587]  dump_stack_lvl+0x100/0x190
[   61.222819][ T6587]  should_fail_ex.cold+0x5/0xa
[   61.222842][ T6587]  ? __pfx_mqueue_fill_super+0x10/0x10
[   61.222879][ T6587]  should_failslab+0xc2/0x120
[   61.222904][ T6587]  ? __pfx_mqueue_fill_super+0x10/0x10
[   61.222928][ T6587]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[   61.222947][ T6587]  ? do_raw_spin_unlock+0x145/0x1e0
[   61.222969][ T6587]  ? __d_alloc+0x35/0xa50
[   61.222996][ T6587]  ? __pfx_mqueue_fill_super+0x10/0x10
[   61.223019][ T6587]  __d_alloc+0x35/0xa50
[   61.223044][ T6587]  ? __pfx_mqueue_fill_super+0x10/0x10
[   61.223066][ T6587]  d_make_root+0x3e/0x90
[   61.223082][ T6587]  mqueue_fill_super+0x16d/0x250
[   61.223106][ T6587]  get_tree_nodev+0xdd/0x190
[   61.223151][ T6587]  mqueue_get_tree+0xf1/0x130
[   61.223177][ T6587]  vfs_get_tree+0x92/0x320
[   61.223195][ T6587]  fc_mount_longterm+0x1a/0x270
[   61.223216][ T6587]  mq_init_ns+0x482/0x820
[   61.223237][ T6587]  copy_ipcs+0x3dd/0x7e0
[   61.223256][ T6587]  create_new_namespaces+0x20a/0xac0
[   61.223277][ T6587]  ? security_capable+0x80/0x260
[   61.223296][ T6587]  unshare_nsproxy_namespaces+0xf2/0x220
[   61.223318][ T6587]  ksys_unshare+0x4a2/0xa70
[   61.223338][ T6587]  ? __pfx_ksys_unshare+0x10/0x10
[   61.223365][ T6587]  __x64_sys_unshare+0x31/0x40
[   61.223384][ T6587]  do_syscall_64+0x123/0x790
[   61.223412][ T6587]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.223430][ T6587] RIP: 0033:0x7f7eba79e159
[   61.223445][ T6587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   61.223459][ T6587] RSP: 002b:00007f7ebb6de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   61.223477][ T6587] RAX: ffffffffffffffda RBX: 00007f7ebaa25fa0 RCX: 00007f7eba79e159
[   61.223488][ T6587] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008040480
[   61.223497][ T6587] RBP: 00007f7eba83506b R08: 0000000000000000 R09: 0000000000000000
[   61.223507][ T6587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   61.223516][ T6587] R13: 00007f7ebaa26038 R14: 00007f7ebaa25fa0 R15: 00007ffe9cf33bf8
[   61.223538][ T6587]  </TASK>
[   61.277274][ T6592] capability: warning: `syz.3.162' uses 32-bit capabilities (legacy support in use)
[   61.578789][ T6617] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun!
[   61.643181][ T6624] overlayfs: failed to resolve './bus': -2
[   62.191121][   T43] kauditd_printk_skb: 102 callbacks suppressed
[   62.191132][   T43] audit: type=1400 audit(1790551796.541:437): avc:  denied  { connect } for  pid=6627 comm="syz.1.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   62.381117][   T43] audit: type=1400 audit(1790551796.731:438): avc:  denied  { read } for  pid=6639 comm="syz.0.172" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[   62.381510][   T43] audit: type=1400 audit(1790551796.731:439): avc:  denied  { open } for  pid=6639 comm="syz.0.172" path="/dev/input/mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[   62.492963][   T43] audit: type=1400 audit(1790551796.841:440): avc:  denied  { setopt } for  pid=6647 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   62.493372][   T43] audit: type=1400 audit(1790551796.841:441): avc:  denied  { bind } for  pid=6647 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   62.495219][   T43] audit: type=1400 audit(1790551796.841:442): avc:  denied  { read } for  pid=6647 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   62.525900][ T6651] batman_adv: batadv0: Adding interface: dummy0
[   62.525910][ T6651] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.525923][ T6651] batman_adv: batadv0: Interface activated: dummy0
[   62.526510][   T43] audit: type=1400 audit(1790551796.871:443): avc:  denied  { write } for  pid=6650 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   62.548397][   T43] audit: type=1400 audit(1790551796.891:444): avc:  denied  { watch watch_reads } for  pid=6647 comm="syz.0.174" path="/45/file0" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[   62.554245][   T43] audit: type=1400 audit(1790551796.901:445): avc:  denied  { create } for  pid=6647 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   62.567215][   T43] audit: type=1400 audit(1790551796.911:446): avc:  denied  { sys_admin } for  pid=6647 comm="syz.0.174" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   62.592768][ T6659] batadv0: mtu less than device minimum
[   62.593726][ T6659] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   62.594206][ T6659] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   62.595019][ T6659] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   62.595505][ T6659] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   62.595980][ T6659] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   62.596459][ T6659] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   62.596952][ T6659] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   62.607572][ T6659] netlink: 'syz.1.175': attribute type 10 has an invalid length.
[   62.607749][ T6659] batadv0: entered promiscuous mode
[   62.607764][ T6659] batadv0: entered allmulticast mode
[   62.608492][ T6659] bridge0: port 3(batadv0) entered blocking state
[   62.608574][ T6659] bridge0: port 3(batadv0) entered disabled state
[   62.610975][ T6659] bridge0: port 3(batadv0) entered blocking state
[   62.611057][ T6659] bridge0: port 3(batadv0) entered forwarding state
[   62.811569][   T10] usb 7-1: USB disconnect, device number 6
[   62.958922][ T6575] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   62.958936][ T6575] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   62.998872][   T35] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[   63.087226][ T6683] ------------[ cut here ]------------
[   63.087237][ T6683] !(flags & __GFP_NOWARN)
[   63.087241][ T6683] WARNING: mm/slub.c:7022 at __kvmalloc_node_noprof+0x646/0x9b0, CPU#3: syz.2.183/6683
[   63.095126][ T6683] Modules linked in:
[   63.096985][ T6683] CPU: 3 UID: 0 PID: 6683 Comm: syz.2.183 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   63.101917][ T6683] Tainted: [L]=SOFTLOCKUP
[   63.103839][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   63.108382][ T6683] RIP: 0010:__kvmalloc_node_noprof+0x646/0x9b0
[   63.111139][ T6683] Code: c1 e8 2e 07 ff ff 4d 85 f6 0f 85 b6 fd ff ff 48 81 fb ff ff ff 7f 0f 86 4d fd ff ff 41 81 e4 00 20 00 00 0f 85 9c fd ff ff 90 <0f> 0b 90 e9 93 fd ff ff 41 be 10 00 00 00 e9 88 fd ff ff be 42 01
[   63.117170][ T6683] RSP: 0018:ffffc90006107b78 EFLAGS: 00010246
[   63.119190][ T6683] RAX: 0000000000000001 RBX: 0000008000000000 RCX: 0000008000000000
[   63.121783][ T6683] RDX: 0000000000000000 RSI: ffffffff8c623900 RDI: ffffffff8e65a938
[   63.124212][ T6683] RBP: 0000000007ffffff R08: 00000000000028c0 R09: 00000000ffffffff
[   63.126712][ T6683] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000
[   63.129287][ T6683] R13: 00000000000028c0 R14: 0000000000000000 R15: 00000000ffffffff
[   63.131767][ T6683] FS:  00007f73027f66c0(0000) GS:ffff8880d5e4f000(0000) knlGS:0000000000000000
[   63.134541][ T6683] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   63.136623][ T6683] CR2: 00007f73027f5ff8 CR3: 00000000609a0000 CR4: 0000000000352ef0
[   63.139292][ T6683] Call Trace:
[   63.140381][ T6683]  <TASK>
[   63.141386][ T6683]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[   63.143114][ T6683]  ? udmabuf_create+0x2e5/0x1110
[   63.144690][ T6683]  udmabuf_create+0x2e5/0x1110
[   63.146225][ T6683]  ? lock_acquire+0x1d1/0x380
[   63.147726][ T6683]  ? __pfx_udmabuf_create+0x10/0x10
[   63.149426][ T6683]  ? find_held_lock+0x2b/0x80
[   63.150932][ T6683]  ? __might_fault+0xc5/0x140
[   63.152421][ T6683]  ? __might_fault+0xc5/0x140
[   63.153899][ T6683]  udmabuf_ioctl+0x18f/0x300
[   63.155358][ T6683]  ? __pfx_udmabuf_ioctl+0x10/0x10
[   63.156972][ T6683]  ? selinux_file_ioctl+0x13b/0x290
[   63.158627][ T6683]  ? selinux_file_ioctl+0xb6/0x290
[   63.160379][ T6683]  ? __pfx_udmabuf_ioctl+0x10/0x10
[   63.162050][ T6683]  __x64_sys_ioctl+0x18e/0x210
[   63.163687][ T6683]  do_syscall_64+0x123/0x790
[   63.165194][ T6683]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.167872][ T6683] RIP: 0033:0x7f730459e159
[   63.169614][ T6683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   63.175591][ T6683] RSP: 002b:00007f73027f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   63.178152][ T6683] RAX: ffffffffffffffda RBX: 00007f7304826090 RCX: 00007f730459e159
[   63.180741][ T6683] RDX: 0000200000000040 RSI: 0000000040187542 RDI: 0000000000000007
[   63.183191][ T6683] RBP: 00007f730463506b R08: 0000000000000000 R09: 0000000000000000
[   63.185641][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   63.188252][ T6683] R13: 00007f7304826128 R14: 00007f7304826090 R15: 00007ffc1ad3ae08
[   63.190945][ T6683]  </TASK>
[   63.192042][ T6683] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   63.194808][ T6683] CPU: 3 UID: 0 PID: 6683 Comm: syz.2.183 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   63.198383][ T6683] Tainted: [L]=SOFTLOCKUP
[   63.200025][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   63.203813][ T6683] Call Trace:
[   63.204932][ T6683]  <TASK>
[   63.206080][ T6683]  dump_stack_lvl+0x100/0x190
[   63.207817][ T6683]  vpanic+0x553/0x970
[   63.209584][ T6683]  ? __pfx_vpanic+0x10/0x10
[   63.211194][ T6683]  panic+0xd1/0xe0
[   63.212528][ T6683]  ? __pfx_panic+0x10/0x10
[   63.214208][ T6683]  check_panic_on_warn.cold+0x19/0x34
[   63.216070][ T6683]  ? __kvmalloc_node_noprof+0x646/0x9b0
[   63.218155][ T6683]  __warn.cold+0x191/0x318
[   63.219742][ T6683]  __report_bug+0x30f/0x440
[   63.221554][ T6683]  ? __kvmalloc_node_noprof+0x646/0x9b0
[   63.223239][ T6683]  ? __pfx___report_bug+0x10/0x10
[   63.224750][ T6683]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   63.226543][ T6683]  ? policy_nodemask+0xed/0x4f0
[   63.228038][ T6683]  ? __kvmalloc_node_noprof+0x646/0x9b0
[   63.229731][ T6683]  report_bug+0xb3/0x220
[   63.231306][ T6683]  ? __kvmalloc_node_noprof+0x646/0x9b0
[   63.233639][ T6683]  handle_bug+0x16a/0x2a0
[   63.235415][ T6683]  exc_invalid_op+0x17/0x50
[   63.237242][ T6683]  asm_exc_invalid_op+0x1a/0x20
[   63.238969][ T6683] RIP: 0010:__kvmalloc_node_noprof+0x646/0x9b0
[   63.240958][ T6683] Code: c1 e8 2e 07 ff ff 4d 85 f6 0f 85 b6 fd ff ff 48 81 fb ff ff ff 7f 0f 86 4d fd ff ff 41 81 e4 00 20 00 00 0f 85 9c fd ff ff 90 <0f> 0b 90 e9 93 fd ff ff 41 be 10 00 00 00 e9 88 fd ff ff be 42 01
[   63.246934][ T6683] RSP: 0018:ffffc90006107b78 EFLAGS: 00010246
[   63.248848][ T6683] RAX: 0000000000000001 RBX: 0000008000000000 RCX: 0000008000000000
[   63.251512][ T6683] RDX: 0000000000000000 RSI: ffffffff8c623900 RDI: ffffffff8e65a938
[   63.253971][ T6683] RBP: 0000000007ffffff R08: 00000000000028c0 R09: 00000000ffffffff
[   63.256416][ T6683] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000
[   63.258896][ T6683] R13: 00000000000028c0 R14: 0000000000000000 R15: 00000000ffffffff
[   63.261848][ T6683]  ? __kvmalloc_node_noprof+0x622/0x9b0
[   63.263683][ T6683]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[   63.265452][ T6683]  ? udmabuf_create+0x2e5/0x1110
[   63.267004][ T6683]  udmabuf_create+0x2e5/0x1110
[   63.268542][ T6683]  ? lock_acquire+0x1d1/0x380
[   63.270121][ T6683]  ? __pfx_udmabuf_create+0x10/0x10
[   63.271939][ T6683]  ? find_held_lock+0x2b/0x80
[   63.273563][ T6683]  ? __might_fault+0xc5/0x140
[   63.275638][ T6683]  ? __might_fault+0xc5/0x140
[   63.277560][ T6683]  udmabuf_ioctl+0x18f/0x300
[   63.279018][ T6683]  ? __pfx_udmabuf_ioctl+0x10/0x10
[   63.280701][ T6683]  ? selinux_file_ioctl+0x13b/0x290
[   63.282351][ T6683]  ? selinux_file_ioctl+0xb6/0x290
[   63.283948][ T6683]  ? __pfx_udmabuf_ioctl+0x10/0x10
[   63.285565][ T6683]  __x64_sys_ioctl+0x18e/0x210
[   63.287071][ T6683]  do_syscall_64+0x123/0x790
[   63.288547][ T6683]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.290458][ T6683] RIP: 0033:0x7f730459e159
[   63.291861][ T6683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   63.297856][ T6683] RSP: 002b:00007f73027f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   63.300709][ T6683] RAX: ffffffffffffffda RBX: 00007f7304826090 RCX: 00007f730459e159
[   63.303640][ T6683] RDX: 0000200000000040 RSI: 0000000040187542 RDI: 0000000000000007
[   63.306095][ T6683] RBP: 00007f730463506b R08: 0000000000000000 R09: 0000000000000000
[   63.308558][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   63.311376][ T6683] R13: 00007f7304826128 R14: 00007f7304826090 R15: 00007ffc1ad3ae08
[   63.314607][ T6683]  </TASK>
[   63.316392][ T6683] Kernel Offset: disabled
[   63.318032][ T6683] Rebooting in 86400 seconds..