last executing test programs:

12.224717871s ago: executing program 1 (id=397):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
shutdown(r0, 0x2) (async)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async, rerun: 32)
r1 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
syz_clone3(&(0x7f0000000380)={0x22340200, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r1], 0x1, {r2}}, 0x58)

11.45203485s ago: executing program 1 (id=401):
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x1000, 0x0, <r0=>0xffffffffffffffff})
ioctl$FIONCLEX(r0, 0x5450)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x4, 0x101801)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0))
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000140)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0xff})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x52}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="5f9f7883dfa1"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040004}, 0x4004800)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000300)={0x48, 0x5, 0x0, 0x0, <r5=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SPACE_INFO(r5, 0xc0109414, &(0x7f0000000380)={0x4ae, 0x0, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000007440), r2)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000007680)={&(0x7f0000007400), 0xc, &(0x7f0000007640)={&(0x7f0000007480)={0x1a4, r6, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000080}, 0x40)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000007700), r2)
sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000007980)={&(0x7f00000076c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000007940)={&(0x7f0000007740)={0x1cc, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xadd}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4e, 0x3, "0fd56e0650a82046fb82f1bbd0d832473167093e18184a205ac5d4f148d49fe3c4a4d5362144bfdb52ffad7184fb33d72985a662d76d57c5fb9c98e80d124de09b2bd27d929d6795ba92"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x60}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_MEDIA={0xbc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x40}, 0x800)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DISASSOCIATE(r8, &(0x7f0000007c00)={&(0x7f00000079c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000007bc0)={&(0x7f0000007a00)={0x1a8, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x68, 0x2a, [@preq={0x82, 0x62, {{0x0, 0x0, 0x0, 0x0, 0x1}, 0x46, 0x81, 0x4, @device_b, 0x3ff, @value, 0x0, 0x9, 0x6, [{{0x0, 0x0, 0x1}, @device_a, 0xf12}, {{0x1, 0x0, 0x1}, @broadcast, 0xd}, {{}, @broadcast, 0x2}, {{0x1, 0x0, 0x1}, @broadcast, 0x3}, {{0x0, 0x0, 0x1}, @device_b}, {{}, @device_a, 0x4}]}}]}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0x1a, 0x34, @random="af86f5a1cdf51d34d27ba4e6a064196dd02214881739"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0xb4, 0x2a, [@fast_bss_trans={0x37, 0xa4, {0x2, 0x3, "a93c07bd327f884fd198a083824c47ed", "9851f94454306a8935ed6523f2f3f659b9ec6ba467ef51ee81a2893fe3377713", "8474e49bda27c8c389189f0935b96cab6fb41d3c97eaaaba43857113498b570a", [{0x4, 0x1b, "7c7cd45a60740565cd0dccdc82ea93a67598d0a3728521928c1ca9"}, {0x1, 0xe, "dae6d64a83b3a706c02aa1ba5727"}, {0x1, 0x23, "c32adabd973d9e8a4a306c0506208b2ecca27a4ea9676e87e9706bb532afb1b3025848"}]}}, @chsw_timing={0x68, 0x4, {0x0, 0x5}}, @perr={0x84, 0x2, {0x4}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6061d83263c7"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ab153660f6d9"}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5fc43d961bcfa2adbdc356873f14c50e3c47f3"}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20000}, 0x8000)
bind$bt_hci(r2, &(0x7f0000007c40)={0x1f, 0x2, 0x3}, 0x6)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000007d40)={'sit0\x00', &(0x7f0000007cc0)={'tunl0\x00', <r9=>0x0, 0x40, 0x8028, 0x92, 0x2, {{0xa, 0x4, 0x1, 0x3a, 0x28, 0x67, 0x0, 0x9, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp_addr={0x44, 0x14, 0xbf, 0x1, 0x7, [{@multicast1, 0x7f}, {@multicast2, 0xb}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000007e40)={'erspan0\x00', &(0x7f0000007d80)={'sit0\x00', <r10=>0x0, 0x8000, 0x10, 0xab20, 0x8, {{0x1c, 0x4, 0x0, 0x6, 0x70, 0x67, 0x0, 0x7, 0x29, 0x0, @empty, @multicast1, {[@rr={0x7, 0x23, 0x59, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @local, @multicast2]}, @cipso={0x86, 0x14, 0x0, [{0x1, 0x2}, {0x6, 0xc, "6a8739b758eb288aa0dc"}]}, @timestamp_addr={0x44, 0x24, 0x6a, 0x1, 0x4, [{@private=0xa010101, 0x3}, {@private=0xa010100, 0x6}, {@remote, 0x160}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000}]}]}}}}})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f0000007f00)={&(0x7f0000007c80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000007ec0)={&(0x7f0000007e80)={0x38, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044881}, 0x4000040)
ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000008000)={0x48, 0x8, r0, 0x0, 0x4, 0x92, &(0x7f0000007f40)="ef89d24ed985cd72733b7ca99ac1e3d5a9ab922bcebb5a8eccb24fa7935fd8559243d3270bb7ed288d9b20dc2fc965c28783b2eeedcf8f23977332a670db3365bd6f93beb9c35cc2abbd34a4d336cc9ffdb9a452fe2b676335a92cc42c588d9c03e79c26a4aba8b2a4f1597dd63cb8ec2519851382be4fc6f6b52daa9baa027f00b6624a484946969d47df11440939099451"})
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000008240)={&(0x7f0000008080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000008200)={&(0x7f00000080c0)={0x140, r3, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x40}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x84, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x73}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x26}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3ff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7ff}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffff3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}]}]}, @NL80211_ATTR_REG_RULES={0x78, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xa}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1ff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xa}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xd}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x28}]}, 0x140}, 0x1, 0x0, 0x0, 0x4008080}, 0x10)
close_range(r5, r5, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000008300)={{0xffffffffffffffff, <r11=>0xffffffffffffffff}, &(0x7f0000008280), &(0x7f00000082c0)='%-5lx  \x00'}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000084c0)={r11, &(0x7f0000008340)="e8bd9566cc238ef9ca8a2305fe3482a559ad9b6afd65af9ad4c677cf166cbaf0316498a66f0d1079ab2228164211922eba232d43a07ec04f2ddbe6966874367cb5f0e01d63dfb06a87d1204d24b6f3792fda5fdf82df8a568c1e7aac", &(0x7f00000083c0)=""/254, 0x4}, 0x20)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000008580)={0xa, 0x0, &(0x7f0000008540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})

10.353136774s ago: executing program 2 (id=406):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x4a, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x57, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1000, 0x0, 0xde0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x0)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x4000)
munmap(&(0x7f0000000000/0x2000)=nil, 0x2000)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r3, 0x10c, 0x6, &(0x7f0000000080)=0x2, 0x4)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x18, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0xc2, 0xfffb, 0x0, 0xffd, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x57, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1000, 0x0, 0xde0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
listen(r1, 0x0) (async)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x4000) (async)
munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) (async)
syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
setsockopt$llc_int(r3, 0x10c, 0x6, &(0x7f0000000080)=0x2, 0x4) (async)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x18, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0xc2, 0xfffb, 0x0, 0xffd, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) (async)

10.223834158s ago: executing program 1 (id=407):
unshare(0x240)
sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000002080002400000b55a0800014000000001080001400000000108000240000000070800014000000006080001400000000808000240ffffdfda0800014000e000000806"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a0000000000000000000000140001"], 0x3c}}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x301, &(0x7f00000002c0)={0xffffffffffffffff, 0x43, {0x2a00, 0x80010000, 0x0, 0x4, 0x9, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b42000003c5240f45f819e01177d3d458dd4992861ac000400", "f4bd000000801900", [0x800001, 0x9]}})
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000)
sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x86, r4, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x2}}, ["", "", ""]}, 0x24}}, 0x0)

10.049870862s ago: executing program 1 (id=411):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000040)={0x0, 0x8}) (async)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xe8)
fchown(r0, r2, 0xee00) (async)
fcntl$getflags(r0, 0x1) (async)
read(r0, &(0x7f00000001c0)=""/156, 0x9c)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x8c, r3, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4c}, @void, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'macvtap0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'team_slave_1\x00'}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000003}, 0x40800)
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000440)) (async, rerun: 64)
getsockopt(r0, 0x1, 0x5c4f, &(0x7f0000000480)=""/3, &(0x7f00000004c0)=0x3) (rerun: 64)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000500)=0x5)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000004) (async)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000680)={0x2, 0x0, 0x1007, 0xd, 0x2, {0x3, 0xfffffff0}}) (async)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000006c0), &(0x7f0000000700)=0x4) (async)
ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000740)={{0x3, 0x1, 0xcc1, 0x1, 0x5}, [{0x1, 0x200, 0x2, 0x3}, {0x5ce, 0x8, 0x0, 0xf9}, {0x10000, 0xfffffffffffffffb, 0x3, 0x53}, {0x9, 0x5b54ded0, 0x8}, {0x40, 0x0, 0x61, 0x3}, {0xcb, 0x9, 0x17, 0x4}]}) (async, rerun: 32)
accept4$tipc(r0, &(0x7f0000000840)=@id, &(0x7f0000000880)=0x10, 0x80000) (rerun: 32)
r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000900), r0)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r5, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x2)
r6 = socket$netlink(0x10, 0x3, 0x8)
ioctl$sock_SIOCBRDELBR(r6, 0x89a1, &(0x7f0000000a00)='nr0\x00') (async)
sendmsg$nl_route(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getneigh={0x14, 0x1e, 0x4, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8008000}, 0x4000)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1e0e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20000000)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c40)={@mcast1, @loopback, 0x12, 0x1a}})
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x48, 0x2, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x6}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x5}}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)=@deltclass={0x38, 0x29, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff0, 0x10}, {0xc, 0xf}, {0x6, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0xc6, 0x2}}, @tclass_kind_options=@c_ingress={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4004040) (async)
setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000f00)='^!\x00', 0x3) (async)
write$tun(r0, &(0x7f0000000f40)={@val={0x0, 0x88ca}, @val={0x3, 0x3, 0x3, 0x401, 0xd, 0x9}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @broadcast, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @empty, @mcast2}}, 0x42) (async, rerun: 32)
sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f0000001300)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001000)={0x2bc, 0x1, 0x3, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x2}}, @NFQA_VLAN={0x44, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x4}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x4}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}]}, @NFQA_EXP={0x258, 0xf, 0x0, 0x1, [@CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_NAT={0x104, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @local}}}]}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x94, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x1}, 0x4810) (async, rerun: 32)
socket$inet6(0xa, 0x6, 0x4419128d)

9.910105597s ago: executing program 1 (id=412):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000d440)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20020, &(0x7f0000000500)={[{@gid}]})

9.892622112s ago: executing program 2 (id=413):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000001940)={&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000001900)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/21, 0x15}, {&(0x7f0000001800)=""/211, 0xd3}], 0x3}, 0x1)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x3, <r2=>r0, 0x2})
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000107, 0x0, 0xc}]})
sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xfc, r3, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x0, 0x4, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3d}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x6c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x73, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24008080}, 0x10)

9.714961065s ago: executing program 2 (id=415):
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048c5)
inotify_init() (async)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x80000000)
inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x10000000) (async)
inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x10000000)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffd19) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffd19)

8.783546675s ago: executing program 2 (id=424):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0xa, 0x0, 0x8})
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001058cb65"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x1, 0x83)
fchdir(r3)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x68})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1})
r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r5, 0x0)
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa07, 0x0)
r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0x80049363, 0x0)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x8a040, 0x0)
ioctl$FBIOPUT_CON2FBMAP(r7, 0x4610, &(0x7f0000000140)={0x1, 0x2})
r8 = socket$inet6_sctp(0xa, 0x801, 0x84)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f00000001c0)={0x30, 0x400, 0x800, 0x400, 0x3, 0x9, 0x18, 0x2, {0x7, 0xfff, 0x5}, {0x7, 0x45494f3f}, {0x1, 0xffff7111, 0x1}, {0x5, 0x0, 0x1}, 0x0, 0x80, 0x3e03b41e, 0x7, 0x1, 0xffff, 0x17, 0x8, 0x1, 0x1000, 0x8001, 0x8001, 0x0, 0x0, 0x3, 0x1})
setsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0, 0xd}, 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff74, 0x19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

8.576322042s ago: executing program 2 (id=426):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=<r2=>0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000})
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0)
fallocate(r3, 0x1, 0x100000000, 0x10000)
timer_delete(r2)

8.188702645s ago: executing program 0 (id=429):
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0x2287, &(0x7f0000000c00)={'\x00', 0x9, 0xfffffffc, 0xdbae, 0xffffffff80000000, 0x3})
r1 = openat$comedi(0xffffff9c, &(0x7f00000000c0)='/dev/comedi4\x00', 0x2c83, 0x0)
ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x8, &(0x7f0000000080), 0x0, 0x4})
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_rsp={{0x18, 0xff, 0x8}, {0x2, 0x7f, 0x4, 0xfffb}}}}, 0x15)

8.090230156s ago: executing program 0 (id=431):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xfff3}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x5, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000500)={0x2, @vbi={0xadf, 0x7, 0x9, 0x494e4f4b, [0x9c, 0xffff9804], [0x5, 0x50d5], 0x13a}})
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x210000, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socket(0x400000000010, 0x3, 0x0) (async)
socket$unix(0x1, 0x5, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xfff3}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x5, 0x2) (async)
ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000500)={0x2, @vbi={0xadf, 0x7, 0x9, 0x494e4f4b, [0x9c, 0xffff9804], [0x5, 0x50d5], 0x13a}}) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async)
socket(0x400000000010, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x210000, 0x0) (async)

7.797443666s ago: executing program 0 (id=433):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000002060102000000000000000049cb61fcaba2d0d9070000000900020073797a30000000000c0007800800124000000300686173683a6e65742c6e657400000000150005000a000000050004000000000000000000"], 0x58}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000602a307556f941ee000000000000001900"/36], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r3, @ANYBLOB="200001"], 0x38}}, 0x0) (async)
r4 = socket$kcm(0x11, 0x6, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x10, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x2, 0xa}, {0xd, 0x2}, {0x2, 0xc}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x200, 0x70b925, 0x25dfdc04, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x10, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4008890) (rerun: 64)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'veth1_macvtap\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@ll={0x11, 0x17, r8, 0x1, 0xc, 0x6, @multicast}, 0x80, &(0x7f0000001e40)=[{&(0x7f00000004c0)='\x00', 0x1}, {&(0x7f0000001ec0)="caf57b458df430e9eca46d7b8d8bfe32fb1151f2c1cee943eedd5249587ea99f629045e1a599263acf06c7ed065d60260679d93d8c75e5d83dd98989b874ea744d22a0f4c146ebb12fb29c9d9f423a293b4158aa59b702989a2f98a8581f6be4181f7213aa001919e3b1b280589da2492c249b5ca3a78f3dd7aaad0e2c496a5e65d650b69237c98a803c09c4b1a65a85dfd7383e0cb1110ea10c19f4219eaf73b441cabb5c85e6b55eba031de1dac0bbefe15e531beca50745d141b48a79283b4be2e053eef8269725c2d942c06f7611d8d7edc26f03c157b7d11f062dacc2142d25c96c88c4fa568ec4df01040000000000000511e2d68b5899d576ae5d1e81ba1f0a5a0e63616144c1fc8ae71141cd01d551d848cfe66a9de738fdeac9bd56b24b8cbc1b7eba8e12fd531787fe63669c3379ef1fc4429c7f920959a762e8db8cf53ae1db75346ac272cb318e13c664c3885c64ee2e9ec640dd647cd7ebcdfb4924535bff4484f34af594a78e18d4efdf3c33f3ecdf1cd97ca6cd2928310cd58169c095a61dd1b0b1e34d652282e1b204e4867f04bb49412b68bdeb7d560a8a8e93c6dbb2b0a8a15a74ac435a7b72c4f66ee832cc6ce181e2c152c6982cfe10c55c4e91ee12aa5f1aa2dcd9539fc80a42b9bcef968958e6db043ce90df53b0cf20492c80cfd45c9c2682b796dc2", 0x1ee}, {&(0x7f0000000c80)="5cec5287bb4f3b5f702c3682b62e1123", 0x10}, {&(0x7f0000000cc0)="f75e353d57c8f56e899c58373e3f6ce338188c7b", 0x14}, {&(0x7f0000000d00)="1faf34db333035af509acf2c3c26bd6f2100f81eb51489dd7b4ae7dbe342aa6ce5ab83c06fdcdb89ea8e91d7a36f4436c281a222b7cc0da452db4095acbb60efbaf2e2107feadd88924db6a32df4ed2b5fbd4a2aee6d0912f616ec692df3991568e49e9fae8ed6ca46188504e4c7789754398a1d1255aa92725960bafeabb51bb009fb4dce7e85b6f42b323f3414303679ffa3f28fd935da3d642454b5abbd38bcf0d1563e16a723b173f44e427d39e9c0ba75e5976767b98d7e215701f019aee6b47b6b1d09d645dfe5b90517bd6b663a50", 0xd2}, {&(0x7f0000000e00)="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", 0x1000}, {&(0x7f0000001e00)="2dc15e2400a9", 0x6}], 0x7}, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r11, @ANYBLOB="b1d0c6a7027c0af7b0461764cdf3e4675ca904d1ad10111915a3d3514795434aa757fbc6325f4af2a55effc8b37808d3f274c432f24bfabcc5860bb4293a1ea44ab265c51e88f4ed1709209d6f914d12ba8293a58b811cd37b754e5f5eae2780f86608b9a816f4ad66e3106c37eeb96c815cc8e099f4afb48d464cdf7827aa2536dea5cd3f1eeb6636998397f14311c43995af2f315630ae52937f692a16cca865cf89773bb97a707418d119d1219325c724d0d0f62dbbde2fb960b17298641d8a3ac7f34b77e5651ab5dc6795b0d445828ad87b5cb3a69394737fb6115fe7ca3df91204e519eddcaef5f0445065288f599f713874b2a5a69a9ecee955994d0d759d8ddee1cb1d3d514366f362000a98a5d975d41caf955584e8d51a279758787fcd32719b570a7cd8272058f48ea67a6055b7ac3aea9931cdae0ef146fbb13f8e4af19a975ff15c"], 0x20}}, 0x0) (async, rerun: 32)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000009c0)={'gre0\x00', &(0x7f0000000940)={'tunl0\x00', <r12=>r11, 0x7800, 0x40, 0x0, 0x7, {{0x17, 0x4, 0x3, 0x0, 0x5c, 0x65, 0x0, 0x0, 0x29, 0x0, @empty, @empty, {[@rr={0x7, 0x1b, 0x4, [@broadcast, @dev={0xac, 0x14, 0x14, 0x3c}, @remote, @local, @local, @local]}, @noop, @timestamp_addr={0x44, 0x2c, 0x14, 0x1, 0x3, [{@local, 0x6}, {@loopback, 0x6}, {@multicast2, 0x80}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x808}]}]}}}}}) (rerun: 32)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000900)=ANY=[@ANYRES16=r0, @ANYRES64=r1, @ANYBLOB="0000000000000000b723000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r12, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r13, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="7638300c000000000000e900feff", 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff}, 0x50) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28)
r14 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r14, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0xe8, 0x111, 0x4b4, 0x0, 0x700, 0x2b8, 0x278, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@loopback, @private1, [], [0x0, 0x0, 0x0, 0xff], 'macvlan0\x00', 'team_slave_0\x00', {}, {0x1fe}, 0x0, 0x0, 0x0, 0x48}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x10, "f0b35f334454456b5a1bc219fb6b2168a1daee9330995069d01067dcc709"}}}, {{@ipv6={@private1, @private1, [0x0, 0xffffffff, 0xff000000, 0xff000000], [0xff, 0x0, 0xffffffff, 0xffffffff], 'ipvlan1\x00', 'wlan0\x00', {0x80f0adaf0a7b4ff8}, {0xff}, 0x1d, 0x81, 0x2, 0x30}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:dhcpd_state_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) (async)
r15 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4e00, 0x0)
ioctl$DVD_WRITE_STRUCT(r15, 0x5390, &(0x7f0000000040))

7.354741241s ago: executing program 3 (id=434):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000280)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2400c0a2)
write(r0, &(0x7f0000000080)="f2bba9f16c44a0", 0x7)
close(r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0x1, 0x3, 0x25dfdbfb, {0x0, 0x0, 0x6a00}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x90f8, 0x44f75, 0x828ab1af306a077d}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf86}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x74}}, 0x0)
getsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000000), &(0x7f0000000040)=0x4)

7.245224705s ago: executing program 3 (id=435):
syz_emit_ethernet(0x2a, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x4, 0x1c, 0x67, 0x0, 0x7, 0x1, 0x0, @rand_addr=0x64010100, @multicast1}, @address_reply={0x12, 0x0, 0x0, 0x5}}}}}, 0x0)
r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[<r1=>0x0], 0x1})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r4 = dup3(r3, r2, 0x80000)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x1104, 0x1})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000580)="b3"})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r6, 0x0)
preadv2(r6, &(0x7f0000000340)=[{&(0x7f0000002200)=""/4096, 0xcd5}, {&(0x7f0000000140)=""/113, 0x71}, {&(0x7f0000000480)=""/138, 0xfffffffffffffef9}], 0x3, 0x1ffd, 0x0, 0x1f)
r7 = socket(0x10, 0x3, 0x0)
ioctl$FICLONE(r0, 0x40049409, r0)
r8 = accept$nfc_llcp(r7, &(0x7f0000000000), &(0x7f0000000080)=0x60)
getsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000000c0), 0x10)
r9 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000a40)={0x0, &(0x7f0000000540)=[@enable_nested={0x12c, 0x18}, @rdmsr={0x66, 0x18, {0x668}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x99, 0x6, 0x8, 0x1}}, @nested_load_syzos={0x136, 0x40, {0x0, 0x2, [@in_dx={0x69, 0x20, {0x4fe5, 0x1}}]}}, @nested_amd_clgi={0x17f, 0x10}, @wr_drn={0x68, 0x20, {0x0, 0x6}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x45, 0x3, 0x401, 0x2}}, @code={0xa, 0x5b, {"66430f3881587cd1b50500000066420f38819f4cbf3eea360f080f20d835080000000f22d8c422fd37f2c4a2552d4ceb0344d8770766ba6100b000eeb9800000c00f3235004000000f30"}}, @rdmsr={0x66, 0x18, {0xdc0}}, @nested_load_syzos={0x136, 0x117, {0x2, 0xffff, [@code={0xa, 0x4f, {"0f2042b8010000000f01c1670f01c2c4a1f35df466b886000f00d866baa100b000ee654e0fc75d0036430f907b04c401fe1094a1ff56027866ba410066ed"}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_load_code={0x12e, 0x90, {0x0, "470f0766baf80cb8b8cffd81ef66bafc0cb0d5ee66430f38829f3d00000048b8108c0000000000000f23d00f21f8353000000a0f23f866b8f1000f00d866ba4000edf0833000c744240039000000c744240200000080ff2c24c744240002000000c744240210387fe5c7442406000000000f011c240f2005"}}]}}, @nested_load_syzos={0x136, 0x80, {0x1, 0x4, [@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x41d, 0xfffffffffffffffe, 0x2d, 0x6}}, @out_dx={0x6a, 0x28, {0x2719, 0x5, 0xffffffffffffffff}}]}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @uexit={0x0, 0x18, 0x6}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0xfffffffffffffff8, 0x6, 0x1}}, @nested_load_code={0x12e, 0x72, {0x2, "470f0018b935080000b80d000000ba000000000f3048b820000000000000000f23c00f21f835020004000f23f82e410fc71d070000000f2186f30f09c403fd5d81929d00004566baa100b089ee6636d39a00000000c4c1e97c07"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control16=0x2, 0x3, 0x2, 0x5}}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0x25000, 0xc743}}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x6, 0x7c151fbf}}], 0x4c4})
ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000a80)=@arm64={0x9c, 0xf, 0x6, '\x00', 0xc})
r10 = socket(0x10, 0x803, 0x0)
write(r10, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae)
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001800050700000000fedbdf251d0100000804050002040408150001000200f1df080000001a0b6e8c6211c9db05000000"], 0x34}, 0x1, 0x0, 0x0, 0x24004884}, 0x20000800)

7.216061322s ago: executing program 0 (id=436):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x66, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x30, 0x3a, 0xff, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2}}}}}}}, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44890}, 0x0)

7.127235104s ago: executing program 0 (id=437):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="1400000013000149993dde440113e90006"], 0x14}], 0x1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0xb, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x20040094)
sendmsg$802154_raw(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)="98bd80d1b51fac3cd424", 0xa}, 0x1, 0x0, 0x0, 0x81}, 0x94)

7.126819099s ago: executing program 3 (id=438):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe8800000000000000000000000001016401010000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffffac1414aa000004d53c"], 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe8800000000000000000000000001016401010000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffffac1414aa000004d53c"], 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x20000010)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x300, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8)
accept$alg(r0, 0x0, 0x0) (async)
r2 = accept$alg(r0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)="c0648de3bd619d989f56c2b46d9d2d746ec218d6c6a9b5668777b8ef68fedcbd40b1ec6974ae818a7eb1153d66dbfdd39443f6e97eb01bf432198c4cca141530f64d3c32b550482ab40bc4d7292a96f9c3585be3d3e48e83ed086f5f89b934570d15c42d53d0420f9c73269421058ba57fdbac572dbe03efb1a2bb1247db8cd05c11b2eb832ca7b8f65b0f5de80e105e5c1d92490f3ca3d1acfd1ded2bcbab36c208ac74094087d66d33e3d715f25c2d06fc0d9cb75f95ed636fe4ebaeabb6379ca5420ed48526d54cb6b1c1539e8e80467b8df022e65195", 0xd8, r2}, 0x68)

6.975296153s ago: executing program 3 (id=439):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000012c0)={0x14, 0x9, 0xa, 0x401, 0x70bd26, 0x25dfdbfd, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x60)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$nl_netfilter(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000012c0)={0x14, 0x9, 0xa, 0x401, 0x70bd26, 0x25dfdbfd, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x60) (async)

6.92155974s ago: executing program 3 (id=440):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pwritev(r0, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf93", 0xa1}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x8, 0x20000006)
chroot(&(0x7f0000000040)='./file0\x00')
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0)
r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_script(r3, &(0x7f0000000280)={'#! ', './file0', [{0x20, ']::'}, {0x20, '&'}, {0x20, ':!%,('}, {0x20, '.'}, {0x20, '\x00'}, {0x20, '\\'}, {0x20, '\x00'}, {0x20, '\''}, {}], 0xa, "b897e4da8cd60f2de5f15450458775453f39b8193efb3fb45927f7959b26de80fb098fd7b8db62cfd2938972d4d02981bda2c85afbd3377389a1be896db1002c758346aa7be1445749931b85227b7f9d10af468ae28679290ef85f059e59591d74bf9253fea16963a7a08ae890324bb746f791ffd069650185a28d32b8435bfc7d21db46222b8873b8c3c6929022e70d8fa16d5fe59372230518354c4dd87b59e4543b6706d10ad97fcebc543ff292ba4966777a999d3eb363c66e526c"}, 0xdf)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6.726164825s ago: executing program 0 (id=441):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"})
ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140))
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$TCFLSH(r4, 0x400455c8, 0x2) (async)
ioctl$TCFLSH(r4, 0x400455c8, 0x2)
ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0xffffffc0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000280)=0xfb)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0))
sendto$inet6(r4, &(0x7f0000000600)="d43696faa7a76305fb354e9072eac7b795e70adcf135dcef7ced45ad7769e07620d0b1562a683ea2180ccf3d36c38a6408cce291d48c74f143737d755c", 0x3d, 0x0, 0x0, 0x0) (async)
sendto$inet6(r4, &(0x7f0000000600)="d43696faa7a76305fb354e9072eac7b795e70adcf135dcef7ced45ad7769e07620d0b1562a683ea2180ccf3d36c38a6408cce291d48c74f143737d755c", 0x3d, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x2, 0x0, [{0x400000b0, 0x0, 0xffffffffffffffff}, {0x400000b1, 0x0, 0xfffffffffffff7f7}]}) (async)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x2, 0x0, [{0x400000b0, 0x0, 0xffffffffffffffff}, {0x400000b1, 0x0, 0xfffffffffffff7f7}]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
fcntl$lock(r5, 0x6, &(0x7f0000000100)={0x0, 0x2, 0x3})
fcntl$lock(r5, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x7, 0x3}) (async)
fcntl$lock(r5, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x7, 0x3})
fcntl$lock(r5, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x80000000000005, 0x5})
fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x0, 0x1, 0x6, 0x5})
syz_open_dev$dmmidi(&(0x7f00000005c0), 0x7, 0x10640) (async)
syz_open_dev$dmmidi(&(0x7f00000005c0), 0x7, 0x10640)
fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x2, 0x2, 0x0, 0x4000000})
ioctl$KVM_DIRTY_TLB(r5, 0x4010aeaa, &(0x7f0000000040)={0x7, 0x856})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.071079012s ago: executing program 1 (id=442):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20)
getdents64(r1, &(0x7f0000000140)=""/165, 0xa5)
sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)={0x14, 0x36, 0x107, 0x3, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140)
r2 = epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket(0xa, 0x5, 0x0)
r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x88)
r7 = openat$cgroup_int(r6, &(0x7f0000000000)='cgroup.max.depth\x00', 0x2, 0x0)
write$cgroup_int(r7, &(0x7f0000000040)=0x6, 0x12)
sendfile(r4, r7, 0x0, 0x10000a806)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100))
shutdown(r3, 0x0)
epoll_wait(r2, &(0x7f0000000280)=[{}], 0x1, 0x101)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)={0x2000200b})
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mkdirat(0xffffffffffffff9c, 0x0, 0x8)
setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0x5}, [], {0x4, 0x5}, [], {}, {0x20, 0x4}}, 0x24, 0x3)
getxattr(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0xed)
socket$kcm(0x10, 0x2, 0x10)
r8 = syz_usb_connect(0x2, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0)
syz_usb_control_io$lan78xx(r8, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})

267.813806ms ago: executing program 2 (id=443):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000206030000000000000000000000000014000780080012400000000005"], 0x4c}}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = userfaultfd(0x801)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1})
mprotect(&(0x7f0000692000/0x9000)=nil, 0x9000, 0x2)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES64=r1], 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="810902000000000000000300000008000100000000001c0007"], 0x38}, 0x1, 0x0, 0x0, 0x2008810}, 0x48080)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x400caed0, &(0x7f0000000400)={0x2, 0x0, @ioapic={0xffffffff, 0xb, 0x8, 0x9, 0x0, [{0xd, 0xe, 0x5, '\x00', 0x4}, {0xf, 0x0, 0x84, '\x00', 0x4}, {0xff, 0x7, 0xf, '\x00', 0x7f}, {0x8, 0x9f, 0x2, '\x00', 0x9}, {0x1, 0x0, 0x0, '\x00', 0x80}, {0x1, 0x8, 0x7f, '\x00', 0x7f}, {0x9, 0x0, 0xd1, '\x00', 0x4}, {0x9, 0x1, 0xc9}, {0xb8, 0x5e, 0x4, '\x00', 0x33}, {0x7, 0x3, 0x2, '\x00', 0xd}, {0x8, 0x2, 0xfc, '\x00', 0xff}, {0x5, 0xb, 0xc4, '\x00', 0x4}, {0x40, 0x0, 0x4, '\x00', 0x9}, {0x5, 0x1}, {0xfd, 0x9, 0xc5, '\x00', 0x4}, {0x9, 0xc, 0x48, '\x00', 0x9}, {0x2, 0xc, 0x0, '\x00', 0xe}, {0x7, 0x8, 0x1b, '\x00', 0x2}, {0x4, 0x4, 0x3, '\x00', 0x4}, {0x42, 0x4e, 0x5, '\x00', 0x4}, {0xf1, 0x1, 0x7, '\x00', 0xfd}, {0x78, 0x81, 0x5d, '\x00', 0x8}, {0xf, 0x10, 0xdb, '\x00', 0x5}, {0x7f, 0x63, 0x5, '\x00', 0x3}]}})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYRES32=r4, @ANYRES16=r9, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x442, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=<r12=>r11, @ANYBLOB="010700000000000000002e"], 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x0)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x3, &(0x7f0000000180)=ANY=[@ANYRES8=r12, @ANYRES16=r4], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b40)={r13, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f00000008c0)='./file2\x00', &(0x7f00000004c0)=[0x40], 0x0, 0x0, 0x1}}, 0x40)
recvmsg(r7, &(0x7f00000000c0)={&(0x7f0000000800)=@hci, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000380)=""/78, 0x4e}, {&(0x7f0000000780)=""/27, 0x1b}, {&(0x7f0000000880)=""/24, 0x18}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/192, 0xc0}], 0x5}, 0x0)

0s ago: executing program 3 (id=444):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x1000000000000058, 0x0, [{0x40000106, 0x0, 0x3}]})
syz_emit_ethernet(0x10a, &(0x7f0000000140)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x33, 0x4, 0x1, 0x4, 0xfc, 0x68, 0x0, 0x6, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@lsrr={0x83, 0x17, 0x3d, [@dev={0xac, 0x14, 0x14, 0x42}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @remote, @local]}, @cipso={0x86, 0x21, 0x3, [{0x0, 0x11, "5c5b6c2197f3849b47c6474cfb3a3a"}, {0x1, 0x4, "9296"}, {0x7, 0x3, "ab"}, {0x6, 0x3, "a7"}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0x89, 0x1, 0x2, [{@private=0xa010100, 0xc893}, {@local}, {@remote, 0x7}]}, @generic={0x44, 0xa, "b75cb6aa1e953431"}, @rr={0x7, 0x1f, 0xb8, [@broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x30}, @multicast1, @dev={0xac, 0x14, 0x14, 0x1a}, @remote, @private=0xa010102]}, @cipso={0x86, 0x36, 0x3, [{0x6, 0x12, "041b15a511747dc1171b869ef464b3c7"}, {0x2, 0x7, "0e7619edac"}, {0x5, 0x9, "1d71e21eb2f04c"}, {0x6, 0xe, "0e78ca1e30145f20a2344919"}]}]}}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x40, 0xe, {0x8, 0x4, 0x1, 0x0, 0x7, 0x65, 0x80, 0x2, 0xc, 0x7, @private=0xa010101, @private=0xa010102, {[@timestamp_addr={0x44, 0xc, 0xa1, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}]}}, "3e2fc12b01996acc"}}}}}, 0x0)

kernel console output (not intermixed with test programs):

 allmulticast mode
[   56.916657][ T5983] capability: warning: `syz.3.28' uses deprecated v2 capabilities in a way that may be insecure
[   56.960094][ T5985] netlink: 'syz.1.29': attribute type 1 has an invalid length.
[   56.964577][ T5985] netlink: 36 bytes leftover after parsing attributes in process `syz.1.29'.
[   57.064887][ T5995] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size.
[   57.333727][ T6013] lo speed is unknown, defaulting to 1000
[   57.336260][ T6013] lo speed is unknown, defaulting to 1000
[   57.341282][ T6013] lo speed is unknown, defaulting to 1000
[   57.343680][ T6013] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[   57.348658][ T6013] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[   57.353511][ T6013] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[   57.357733][ T6013] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   57.363038][ T6013] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   57.380440][ T6013] lo speed is unknown, defaulting to 1000
[   57.386148][   T40] kauditd_printk_skb: 101 callbacks suppressed
[   57.386157][   T40] audit: type=1400 audit(1781520870.261:269): avc:  denied  { create } for  pid=6015 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   57.390876][ T6013] lo speed is unknown, defaulting to 1000
[   57.394651][ T6016] netlink: 20 bytes leftover after parsing attributes in process `syz.3.36'.
[   57.396665][ T6013] lo speed is unknown, defaulting to 1000
[   57.401449][ T6013] lo speed is unknown, defaulting to 1000
[   57.408521][   T40] audit: type=1400 audit(1781520870.291:270): avc:  denied  { write } for  pid=6015 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   57.515501][   T40] audit: type=1400 audit(1781520870.391:271): avc:  denied  { setopt } for  pid=6019 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   57.594282][ T6026] netlink: 14 bytes leftover after parsing attributes in process `syz.3.40'.
[   57.616440][ T6029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32784 sclass=netlink_route_socket pid=6029 comm=syz.1.41
[   57.622250][ T6029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32784 sclass=netlink_route_socket pid=6029 comm=syz.1.41
[   57.650900][   T40] audit: type=1400 audit(1781520870.531:272): avc:  denied  { read write } for  pid=6025 comm="syz.3.40" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   57.659193][   T40] audit: type=1400 audit(1781520870.531:273): avc:  denied  { open } for  pid=6025 comm="syz.3.40" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   57.712939][   T40] audit: type=1400 audit(1781520870.591:274): avc:  denied  { create } for  pid=6039 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[   57.779459][   T40] audit: type=1400 audit(1781520870.661:275): avc:  denied  { getopt } for  pid=6025 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   57.786014][   T40] audit: type=1400 audit(1781520870.661:276): avc:  denied  { connect } for  pid=6025 comm="syz.3.40" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   57.796806][   T40] audit: type=1400 audit(1781520870.671:277): avc:  denied  { execstack } for  pid=6047 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   57.797962][ T6048] netlink: 277 bytes leftover after parsing attributes in process `syz.0.46'.
[   57.865006][   T40] audit: type=1400 audit(1781520870.741:278): avc:  denied  { view } for  pid=6052 comm="syz.1.48" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   57.882223][ T6055] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   57.885587][ T6055] block device autoloading is deprecated and will be removed.
[   57.917852][ T6059] lo speed is unknown, defaulting to 1000
[   58.327585][ T5884] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   58.337273][   T24] IPVS: starting estimator thread 0...
[   58.344954][ T6078] netlink: 36 bytes leftover after parsing attributes in process `syz.0.54'.
[   58.352019][ T6078] IPVS: lc: FWM 3 0x00000003 - no destination available
[   58.427256][ T6079] IPVS: using max 41 ests per chain, 98400 per kthread
[   58.477308][ T5884] usb 6-1: Using ep0 maxpacket: 16
[   58.481280][ T5884] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[   58.484560][ T5884] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7
[   58.488088][ T5884] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[   58.491072][ T5884] usb 6-1: config 0 interface 0 has no altsetting 0
[   58.494728][ T5884] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[   58.497688][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.500199][ T5884] usb 6-1: Product: syz
[   58.501479][ T5884] usb 6-1: Manufacturer: syz
[   58.502937][ T5884] usb 6-1: SerialNumber: syz
[   58.506710][ T5884] usb 6-1: config 0 descriptor??
[   58.561815][ T5925] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   58.715681][ T5884] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input5
[   58.720659][ T5128] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   58.726220][ T5128] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   58.730797][   T62] Bluetooth: hci0: command tx timeout
[   58.735180][ T5128] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   58.738737][ T5128] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   58.787288][ T5735] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   58.796409][ T5128] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   58.799854][ T5745] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   58.803673][ T5128] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   58.807622][ T5093] Bluetooth: hci3: command tx timeout
[   58.807645][ T5749] Bluetooth: hci2: command tx timeout
[   58.809083][   T62] Bluetooth: hci1: command tx timeout
[   58.812478][ T5128] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   58.817495][ T5128] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   58.947304][ T5735] usb 5-1: Using ep0 maxpacket: 8
[   58.955606][ T5735] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[   58.958683][ T5735] usb 5-1: config 0 has no interface number 0
[   58.961212][ T5735] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   58.965653][ T5735] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   58.972466][ T5735] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   58.976971][ T5735] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   58.977488][ T6059] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   58.982439][ T5735] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   58.982461][ T5735] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.991830][ T5735] usb 5-1: config 0 descriptor??
[   59.006873][ T5884] usb 6-1: USB disconnect, device number 2
[   59.011673][ T5735] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[   59.423680][ T6116] syz.3.63 uses obsolete (PF_INET,SOCK_PACKET)
[   60.356072][ T6149] netlink: 24 bytes leftover after parsing attributes in process `syz.2.72'.
[   60.817331][ T5749] Bluetooth: hci0: command tx timeout
[   60.888147][ T5749] Bluetooth: hci1: command tx timeout
[   60.888398][ T5093] Bluetooth: hci3: command tx timeout
[   60.897282][ T5093] Bluetooth: hci2: command tx timeout
[   61.500281][ T5735] usb 5-1: USB disconnect, device number 2
[   61.508716][ T5735] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[   61.531468][ T6152] sctp: [Deprecated]: syz.0.73 (pid 6152) Use of int in max_burst socket option deprecated.
[   61.531468][ T6152] Use struct sctp_assoc_value instead
[   61.567232][ T6154] netlink: 196 bytes leftover after parsing attributes in process `syz.0.74'.
[   61.571526][ T6154] netlink: 196 bytes leftover after parsing attributes in process `syz.0.74'.
[   61.575190][ T6154] netlink: 19 bytes leftover after parsing attributes in process `syz.0.74'.
[   61.632848][ T6155] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.74'.
[   62.487429][ T6160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.75'.
[   62.622813][ T6126] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   62.690205][ T6166] f2fs: Unknown parameter 'discardoÿÿÿ'
[   62.700748][   T40] kauditd_printk_skb: 39 callbacks suppressed
[   62.700762][   T40] audit: type=1400 audit(1781520875.581:318): avc:  denied  { read } for  pid=6168 comm="syz.2.78" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   62.723390][   T40] audit: type=1400 audit(1781520875.591:319): avc:  denied  { open } for  pid=6168 comm="syz.2.78" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   62.733341][   T40] audit: type=1400 audit(1781520875.591:320): avc:  denied  { ioctl } for  pid=6168 comm="syz.2.78" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   62.755393][   T40] audit: type=1400 audit(1781520875.631:321): avc:  denied  { write } for  pid=6174 comm="syz.2.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   62.764329][   T40] audit: type=1400 audit(1781520875.631:322): avc:  denied  { connect } for  pid=6174 comm="syz.2.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   62.773364][   T40] audit: type=1400 audit(1781520875.651:323): avc:  denied  { write } for  pid=6171 comm="syz.3.79" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   62.781202][   T40] audit: type=1400 audit(1781520875.651:324): avc:  denied  { unmount } for  pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   62.839281][   T40] audit: type=1400 audit(1781520875.721:325): avc:  denied  { append } for  pid=6189 comm="syz.3.85" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   63.117346][    T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   63.267377][    T9] usb 8-1: Using ep0 maxpacket: 8
[   63.273276][    T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[   63.282754][    T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   63.290230][    T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   63.294089][    T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   63.300733][    T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   63.305191][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.491580][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'.
[   63.495223][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.88'.
[   63.513162][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'.
[   63.513221][ T1168] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   63.516844][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.88'.
[   63.525168][    T9] usb 8-1: GET_CAPABILITIES returned 0
[   63.527681][ T1168] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   63.527717][ T1168] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   63.527750][ T1168] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   63.528447][ T6205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=6205 comm=syz.0.88
[   63.531355][    T9] usbtmc 8-1:16.0: can't read capabilities
[   63.641932][   T40] audit: type=1400 audit(1781520876.521:326): avc:  denied  { read } for  pid=6215 comm="syz.1.90" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   63.648643][   T40] audit: type=1400 audit(1781520876.521:327): avc:  denied  { open } for  pid=6215 comm="syz.1.90" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   63.875645][ T6195] usbtmc 8-1:16.0: usbtmc488_ioctl_trigger returned -71
[   63.879564][ T6229] usbtmc 8-1:16.0: usbtmc488_ioctl_trigger returned -71
[   63.929032][ T6231] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[   64.041185][ T6237] netlink: 28 bytes leftover after parsing attributes in process `syz.1.96'.
[   65.991752][ T6253] netlink: 'syz.1.101': attribute type 5 has an invalid length.
[   66.589571][ T6210] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   66.614634][    T9] usb 8-1: USB disconnect, device number 2
[   66.672353][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.104'.
[   66.675224][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'.
[   66.680172][ T6264] netlink: 'syz.3.104': attribute type 11 has an invalid length.
[   66.682903][ T6264] netlink: 'syz.3.104': attribute type 7 has an invalid length.
[   66.732906][ T6272] netlink: 28 bytes leftover after parsing attributes in process `syz.3.107'.
[   66.733579][ T6273] netlink: 28 bytes leftover after parsing attributes in process `syz.3.107'.
[   66.796334][ T6279] team0 (unregistering): Port device team_slave_0 removed
[   66.801014][ T6279] team0 (unregistering): Port device team_slave_1 removed
[   67.209921][ T6305] netlink: 48 bytes leftover after parsing attributes in process `syz.3.116'.
[   67.215109][ T6305] xt_hashlimit: size too large, truncated to 1048576
[   67.498047][ T5726] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   67.648782][ T5726] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   67.653285][ T5726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   67.657141][ T5726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   67.661053][ T5726] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   67.664925][ T5726] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   67.668426][ T5726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.673697][ T5726] usb 5-1: config 0 descriptor??
[   67.854352][ T6317] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   68.096648][ T5726] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   68.100445][   T50] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   68.248622][   T50] usb 8-1: config 0 has an invalid interface number: 50 but max is 0
[   68.251440][   T50] usb 8-1: config 0 has no interface number 0
[   68.253803][   T50] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   68.259156][   T50] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[   68.262147][   T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.265310][   T50] usb 8-1: Product: syz
[   68.266627][   T50] usb 8-1: Manufacturer: syz
[   68.268446][   T50] usb 8-1: SerialNumber: syz
[   68.273212][   T50] usb 8-1: config 0 descriptor??
[   68.280823][   T50] yurex 8-1:0.50: USB YUREX device now attached to Yurex #1
[   68.504933][   T40] kauditd_printk_skb: 40 callbacks suppressed
[   68.504943][   T40] audit: type=1400 audit(1781520881.381:368): avc:  denied  { bind } for  pid=6320 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   68.512959][   T40] audit: type=1400 audit(1781520881.381:369): avc:  denied  { write } for  pid=6320 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   68.551571][   T40] audit: type=1400 audit(1781520881.431:370): avc:  denied  { read } for  pid=6325 comm="syz.1.122" name="uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   68.559958][   T40] audit: type=1400 audit(1781520881.431:371): avc:  denied  { ioctl } for  pid=6325 comm="syz.1.122" path="/dev/uinput" dev="devtmpfs" ino=944 ioctlcmd=0x5566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   68.599132][   T40] audit: type=1400 audit(1781520881.481:372): avc:  denied  { watch } for  pid=6327 comm="syz.1.123" path="/35/bus" dev="tmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   68.606155][   T40] audit: type=1400 audit(1781520881.481:373): avc:  denied  { watch_sb watch_reads } for  pid=6327 comm="syz.1.123" path="/35/bus" dev="tmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   68.639763][   T40] audit: type=1400 audit(1781520881.521:374): avc:  denied  { name_bind } for  pid=6307 comm="syz.0.117" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   68.643294][ T5823] usb 8-1: USB disconnect, device number 3
[   68.656967][ T5823] yurex 8-1:0.50: USB YUREX #1 now disconnected
[   68.840424][ T5726] usb 5-1: USB disconnect, device number 3
[   68.867437][  T920] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   69.017290][  T920] usb 6-1: Using ep0 maxpacket: 32
[   69.021243][  T920] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[   69.027474][  T920] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[   69.031169][  T920] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[   69.034307][  T920] usb 6-1: Product: syz
[   69.036000][  T920] usb 6-1: Manufacturer: syz
[   69.038203][  T920] usb 6-1: SerialNumber: syz
[   69.042594][  T920] usb 6-1: config 0 descriptor??
[   69.044876][ T6328] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   69.048672][  T920] hub 6-1:0.0: bad descriptor, ignoring hub
[   69.051345][  T920] hub 6-1:0.0: probe with driver hub failed with error -5
[   69.307260][   T40] audit: type=1400 audit(1781520882.181:375): avc:  denied  { allowed } for  pid=6332 comm="syz.3.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   69.309564][ T6334] process 'syz.3.124' launched '/dev/fd/4/./file1' with NULL argv: empty string added
[   69.321416][   T40] audit: type=1400 audit(1781520882.201:376): avc:  denied  { execute_no_trans } for  pid=6332 comm="syz.3.124" path="/38/file1" dev="tmpfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   69.355107][ T6337] netlink: 'syz.3.125': attribute type 1 has an invalid length.
[   69.390635][   T40] audit: type=1400 audit(1781520882.271:377): avc:  denied  { write } for  pid=6340 comm="syz.3.127" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   69.578540][ T6348] syz.3.129 (6348) used greatest stack depth: 19480 bytes left
[   69.727329][ T5726] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   69.823525][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.132'.
[   69.880490][ T5726] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   69.889961][ T5726] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   69.896364][ T5726] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   69.900595][ T5726] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   69.903959][ T5726] usb 5-1: Manufacturer: syz
[   69.904381][ T6365] 8021q: VLANs not supported on ip_vti0
[   69.909488][ T5726] usb 5-1: config 0 descriptor??
[   70.002901][ T6298] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   70.069156][   T46] raw-gadget.2 gadget.1: failed to queue suspend event
[   70.100302][ T6372] netlink: 24 bytes leftover after parsing attributes in process `syz.3.136'.
[   70.134835][ T6372] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6372 comm=syz.3.136
[   70.147445][ T6328] raw-gadget.2 gadget.1: failed to queue resume event
[   70.171311][   T46] raw-gadget.2 gadget.1: failed to queue suspend event
[   70.237352][ T6328] raw-gadget.2 gadget.1: failed to queue resume event
[   70.260059][   T46] raw-gadget.2 gadget.1: failed to queue suspend event
[   70.315059][ T5726] appleir 0003:05AC:8243.0003: unknown main item tag 0x0
[   70.322231][ T5726] appleir 0003:05AC:8243.0003: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[   70.327502][ T6328] raw-gadget.2 gadget.1: failed to queue resume event
[   70.354391][ T6382] bridge_slave_1: left allmulticast mode
[   70.356686][ T6382] bridge_slave_1: left promiscuous mode
[   70.359317][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.369927][ T3585] raw-gadget.2 gadget.1: failed to queue suspend event
[   70.377897][ T6382] bridge_slave_0: left allmulticast mode
[   70.379862][ T6382] bridge_slave_0: left promiscuous mode
[   70.382371][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.437384][ T6328] raw-gadget.2 gadget.1: failed to queue resume event
[   70.480809][   T46] raw-gadget.2 gadget.1: failed to queue suspend event
[   70.528366][ T6390] vlan2: entered allmulticast mode
[   70.530630][ T6390] bridge_slave_0: entered allmulticast mode
[   70.537539][ T5735] usb 5-1: USB disconnect, device number 4
[   70.568456][ T6328] raw-gadget.2 gadget.1: failed to queue resume event
[   70.582358][ T6391] tmpfs: Cannot disable swap on remount
[   70.588141][   T46] raw-gadget.2 gadget.1: failed to queue suspend event
[   70.677532][ T6328] raw-gadget.2 gadget.1: failed to queue resume event
[   70.698214][   T46] raw-gadget.2 gadget.1: failed to queue suspend event
[   70.729469][ T6408] netlink: 16 bytes leftover after parsing attributes in process `syz.2.145'.
[   70.778955][ T6328] raw-gadget.2 gadget.1: failed to queue resume event
[   70.800821][   T12] raw-gadget.2 gadget.1: failed to queue suspend event
[   70.867372][ T6328] raw-gadget.2 gadget.1: failed to queue resume event
[   70.907075][   T88] raw-gadget.2 gadget.1: failed to queue suspend event
[   70.977550][ T6328] raw-gadget.2 gadget.1: failed to queue resume event
[   70.987242][ T5735] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   71.000757][   T46] raw-gadget.2 gadget.1: failed to queue suspend event
[   71.067539][ T6328] raw-gadget.2 gadget.1: failed to queue resume event
[   71.118204][   T46] raw-gadget.2 gadget.1: failed to queue suspend event
[   71.158708][ T5735] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[   71.161850][ T5735] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[   71.168664][ T5735] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[   71.171569][ T5735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.173720][ T6414] x_tables: duplicate underflow at hook 1
[   71.174185][ T5735] usb 5-1: Product: syz
[   71.177812][ T5735] usb 5-1: Manufacturer: syz
[   71.179885][ T5735] usb 5-1: SerialNumber: syz
[   71.183309][ T5735] usb 5-1: config 0 descriptor??
[   71.185654][ T6403] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   71.188283][ T6328] raw-gadget.2 gadget.1: failed to queue resume event
[   71.188290][ T6403] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   71.215594][   T46] raw-gadget.2 gadget.1: failed to queue suspend event
[   71.307432][ T6328] raw-gadget.2 gadget.1: failed to queue resume event
[   71.331984][ T3585] raw-gadget.2 gadget.1: failed to queue suspend event
[   71.395966][ T6396] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   71.399561][ T6396] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   71.407404][ T6328] raw-gadget.2 gadget.1: failed to queue resume event
[   71.428719][ T3585] raw-gadget.2 gadget.1: failed to queue suspend event
[   71.507314][ T6328] raw-gadget.2 gadget.1: failed to queue resume event
[   71.541152][ T3585] raw-gadget.2 gadget.1: failed to queue suspend event
[   71.617635][ T6328] raw-gadget.2 gadget.1: failed to queue resume event
[   71.638258][   T12] raw-gadget.2 gadget.1: failed to queue suspend event
[   71.714920][ T6435] netlink: 52 bytes leftover after parsing attributes in process `syz.3.153'.
[   71.759382][ T6328] raw-gadget.2 gadget.1: failed to queue disconnect event
[   71.860929][ T6445] team0 (unregistering): Port device team_slave_0 removed
[   71.865555][ T6445] team0 (unregistering): Port device team_slave_1 removed
[   71.868369][   T29] usb 6-1: USB disconnect, device number 3
[   71.896993][ T6450] netlink: 'syz.3.155': attribute type 29 has an invalid length.
[   71.986354][ T6455] kvm: user requested TSC rate below hardware speed
[   72.003936][ T5884] hid-generic 0005:0007:0007.0004: unknown main item tag 0x0
[   72.013067][ T5884] hid-generic 0005:0007:0007.0004: hidraw1: BLUETOOTH HID v0.03 Device [syz0] on aa:aa:aa:aa:aa:aa
[   72.039722][ T6459] fido_id[6459]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory
[   72.102192][ T6464] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[   72.104360][ T6464] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   72.109432][ T6464] vhci_hcd vhci_hcd.0: Device attached
[   72.214136][ T5735] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL
[   72.221480][ T5735] usb 5-1: USB disconnect, device number 5
[   72.357393][   T10] usb 41-1: new low-speed USB device number 2 using vhci_hcd
[   72.360524][  T920] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   72.487288][  T920] usb 7-1: device descriptor read/64, error -71
[   72.737244][  T920] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   72.867413][  T920] usb 7-1: device descriptor read/64, error -71
[   72.892796][ T6473] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) !
[   72.988265][  T920] usb usb7-port1: attempt power cycle
[   72.995155][ T5726] IPVS: starting estimator thread 0...
[   73.087723][ T6485] IPVS: using max 42 ests per chain, 100800 per kthread
[   73.143278][ T6491] netlink: 600 bytes leftover after parsing attributes in process `syz.3.169'.
[   73.203497][ T6500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.172'.
[   73.337235][  T920] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   73.345913][ T6509] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   73.348464][ T6509] overlayfs: failed to set xattr on upper
[   73.350562][ T6509] overlayfs: ...falling back to redirect_dir=nofollow.
[   73.352675][ T6509] overlayfs: ...falling back to metacopy=off.
[   73.355006][ T6509] overlayfs: ...falling back to index=off.
[   73.356832][ T6509] overlayfs: ...falling back to uuid=null.
[   73.360906][  T920] usb 7-1: device descriptor read/8, error -71
[   73.607264][  T920] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   73.627742][  T920] usb 7-1: device descriptor read/8, error -71
[   73.747972][  T920] usb usb7-port1: unable to enumerate USB device
[   73.871966][ T6541] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   73.877138][ T6541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56336 sclass=netlink_route_socket pid=6541 comm=syz.0.183
[   73.877287][  T920] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   73.916699][ T6544] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[   74.008006][  T920] usb 7-1: device descriptor read/64, error -71
[   74.208529][ T6549] sch_fq: defrate 4294967295 ignored.
[   74.257347][  T920] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[   74.270089][ T6550] vlan2: entered allmulticast mode
[   74.271958][ T6550] bond0: entered allmulticast mode
[   74.273713][ T6550] bond_slave_0: entered allmulticast mode
[   74.275499][ T6550] bond_slave_1: entered allmulticast mode
[   74.302111][ T6549] infiniband syz1: set active
[   74.305193][ T6549] infiniband syz1: added bond0
[   74.319984][ T6549] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   74.325580][ T6549] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   74.332087][ T6549] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   74.350562][ T6549] RDS/IB: syz1: added
[   74.352047][ T6549] smc: adding ib device syz1 with port count 1
[   74.357047][ T6549] smc:    ib device syz1 port 1 has no pnetid
[   74.397274][  T920] usb 7-1: device descriptor read/64, error -71
[   74.507944][  T920] usb usb7-port1: attempt power cycle
[   74.814228][   T40] kauditd_printk_skb: 43 callbacks suppressed
[   74.814244][   T40] audit: type=1400 audit(1781520887.691:421): avc:  denied  { map_create } for  pid=6552 comm="syz.0.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   74.824689][   T40] audit: type=1400 audit(1781520887.691:422): avc:  denied  { map_read map_write } for  pid=6552 comm="syz.0.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   74.857342][  T920] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[   74.888358][  T920] usb 7-1: device descriptor read/8, error -71
[   74.903147][   T40] audit: type=1400 audit(1781520887.781:423): avc:  denied  { ioctl } for  pid=6554 comm="syz.0.187" path="/dev/ptyq5" dev="devtmpfs" ino=132 ioctlcmd=0x5438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[   75.117890][ T6465] vhci_hcd: connection reset by peer
[   75.123703][   T46] vhci_hcd vhci_hcd.2: stop threads
[   75.125636][   T46] vhci_hcd vhci_hcd.2: release socket
[   75.128144][   T46] vhci_hcd vhci_hcd.2: disconnect device
[   75.137900][  T920] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[   75.151249][   T40] audit: type=1400 audit(1781520888.031:424): avc:  denied  { getopt } for  pid=6559 comm="syz.2.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   75.153596][ T6560] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.268953][   T40] audit: type=1400 audit(1781520888.151:425): avc:  denied  { append } for  pid=6562 comm="syz.2.189" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   75.273027][ T6563] loop5: detected capacity change from 0 to 2640
[   75.283112][ T6563] Buffer I/O error on dev loop5, logical block 0, async page read
[   75.285958][ T6563] Buffer I/O error on dev loop5, logical block 0, async page read
[   75.288578][ T6563] Buffer I/O error on dev loop5, logical block 0, async page read
[   75.291042][ T6563] Buffer I/O error on dev loop5, logical block 0, async page read
[   75.293416][ T6563] Buffer I/O error on dev loop5, logical block 0, async page read
[   75.295814][ T6563] Buffer I/O error on dev loop5, logical block 0, async page read
[   75.298876][ T6563] Buffer I/O error on dev loop5, logical block 0, async page read
[   75.301332][ T6563] Buffer I/O error on dev loop5, logical block 0, async page read
[   75.303679][ T6563] ldm_validate_partition_table(): Disk read failed.
[   75.305687][ T6563] Buffer I/O error on dev loop5, logical block 0, async page read
[   75.309020][ T6563] Buffer I/O error on dev loop5, logical block 0, async page read
[   75.311427][ T6563] Dev loop5: unable to read RDB block 0
[   75.313299][ T6563]  loop5: unable to read partition table
[   75.315095][ T6563] loop_reread_partitions: partition scan of loop5 (3„¾‚³˜) failed (rc=-5)
[   75.322995][ T6563] ldm_validate_partition_table(): Disk read failed.
[   75.325173][ T6563] Dev loop5: unable to read RDB block 0
[   75.327023][ T6563]  loop5: unable to read partition table
[   75.358892][   T40] audit: type=1400 audit(1781520888.231:426): avc:  denied  { map } for  pid=6564 comm="syz.2.190" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   75.360029][  T920] usb 7-1: device not accepting address 9, error -71
[   75.370297][  T920] usb usb7-port1: unable to enumerate USB device
[   75.641525][   T40] audit: type=1400 audit(1781520888.521:427): avc:  denied  { setopt } for  pid=6571 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   75.673539][ T6579] Failed to get privilege flags for destination (handle=0x2:0x5)
[   75.696113][   T40] audit: type=1400 audit(1781520888.571:428): avc:  denied  { getopt } for  pid=6571 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   75.716034][ T6580] lo speed is unknown, defaulting to 1000
[   75.936780][ T6589] netlink: 26 bytes leftover after parsing attributes in process `syz.1.198'.
[   75.942429][   T40] audit: type=1400 audit(1781520888.821:429): avc:  denied  { watch } for  pid=6588 comm="syz.1.198" path="/50" dev="tmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   75.949322][   T40] audit: type=1400 audit(1781520888.821:430): avc:  denied  { watch_reads } for  pid=6588 comm="syz.1.198" path="/50" dev="tmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   76.411956][ T1437] ieee802154 phy0 wpan0: encryption failed: -22
[   76.414985][ T1437] ieee802154 phy1 wpan1: encryption failed: -22
[   76.456087][ T5093] Bluetooth: hci1: Invalid handle: 0x5f00 > 0x0eff
[   76.525358][ T6528] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   76.786339][ T6643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.217'.
[   76.786368][ T6643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.217'.
[   76.962216][ T6651] SELinux: failed to load policy
[   77.013866][ T6655] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.486016][   T10] vhci_hcd vhci_hcd.2: vhci_device speed not set
[   77.690103][ T6674] netlink: 596 bytes leftover after parsing attributes in process `syz.3.225'.
[   77.820052][ T5726] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   77.972938][ T5726] usb 5-1: Using ep0 maxpacket: 8
[   77.977039][ T5726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   77.981381][ T5726] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   77.985074][ T5726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.995841][ T5726] usb 5-1: config 0 descriptor??
[   78.159972][ T6695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.229'.
[   78.205632][ T5726] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[   78.285228][ T6709] gfs2: path_lookup on c::: returned error -2
[   78.666257][   T10] usb 5-1: USB disconnect, device number 6
[   79.078335][ T6733] nbd: must specify a size in bytes for the device
[   79.244716][ T6739] netlink: 'syz.2.238': attribute type 1 has an invalid length.
[   79.247035][ T6739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.238'.
[   79.250954][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.238'.
[   79.253642][ T6739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.238'.
[   79.369501][ T6752] netlink: 'syz.0.243': attribute type 4 has an invalid length.
[   79.448694][ T6756] program syz.0.245 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   79.482566][ T6761] dlm: no locking on control device
[   79.498690][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.248'.
[   79.560751][ T6771] 9pnet_fd: p9_fd_create_unix (6771): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   79.574075][ T6773] netlink: 'syz.0.251': attribute type 1 has an invalid length.
[   79.625858][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.251'.
[   79.638471][ T6773] 8021q: adding VLAN 0 to HW filter on device bond2
[   79.788055][ T6786] netlink: 108 bytes leftover after parsing attributes in process `syz.3.254'.
[   79.839211][ T6788] bridge_slave_0: left allmulticast mode
[   79.841076][ T6788] bridge_slave_0: left promiscuous mode
[   79.842856][ T6788] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.849081][ T6788] bridge_slave_1: left allmulticast mode
[   79.851591][ T6788] bridge_slave_1: left promiscuous mode
[   79.854331][ T6788] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.863975][ T6788] bond0: (slave bond_slave_0): Releasing backup interface
[   79.869073][ T6788] bond0: (slave bond_slave_1): Releasing backup interface
[   79.875395][ T6788] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.878497][ T6788] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.883365][ T6788] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.889170][ T6788] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.892862][ T6788] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   80.000756][ T6797] NILFS (loop1): device size too small
[   80.182573][   T40] kauditd_printk_skb: 43 callbacks suppressed
[   80.182627][   T40] audit: type=1400 audit(1781520893.042:474): avc:  denied  { read } for  pid=6810 comm="syz.0.262" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   80.214689][   T40] audit: type=1326 audit(1781520893.052:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.2.260" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b0ad9ce59 code=0x0
[   80.233733][   T40] audit: type=1400 audit(1781520893.052:476): avc:  denied  { open } for  pid=6810 comm="syz.0.262" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   80.352175][ T6802] syz.1.259 (6802): drop_caches: 2
[   80.455608][   T40] audit: type=1400 audit(1781520893.315:477): avc:  denied  { read } for  pid=6819 comm="syz.1.264" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   80.706067][   T40] audit: type=1400 audit(1781520893.559:478): avc:  denied  { mounton } for  pid=6840 comm="syz.1.270" path="/proc/219/task" dev="proc" ino=18466 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   80.821763][ T6849] kvm: pic: non byte write
[   80.824945][ T6849] kvm: vcpu 0: requested 1536 ns lapic timer period limited to 200000 ns
[   80.886393][   T40] audit: type=1400 audit(1781520893.735:479): avc:  denied  { execute } for  pid=6848 comm="syz.1.272" name="file1" dev="ramfs" ino=16371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[   80.893821][   T40] audit: type=1400 audit(1781520893.735:480): avc:  denied  { execute_no_trans } for  pid=6848 comm="syz.1.272" path="/file1" dev="ramfs" ino=16371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[   81.476341][   T40] audit: type=1400 audit(1781520894.306:481): avc:  denied  { listen } for  pid=6867 comm="syz.2.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   81.483914][   T40] audit: type=1400 audit(1781520894.306:482): avc:  denied  { lock } for  pid=6867 comm="syz.2.279" path="socket:[16725]" dev="sockfs" ino=16725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   81.562026][ T6875] kvm_intel: kvm [6874]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xd
[   81.567537][ T6875] kvm_intel: kvm [6874]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xd
[   81.573101][ T6875] kvm_intel: kvm [6874]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xd
[   81.582157][ T6875] kvm_intel: kvm [6874]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xd
[   81.588998][ T6875] kvm_intel: kvm [6874]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xd
[   81.596527][ T6875] kvm_intel: kvm [6874]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xd
[   81.598864][   T40] audit: type=1400 audit(1781520894.412:483): avc:  denied  { map } for  pid=6874 comm="syz.2.280" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   81.603185][ T6875] kvm_intel: kvm [6874]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xd
[   81.614284][ T6875] kvm_intel: kvm [6874]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xd
[   81.621774][ T6875] kvm_intel: kvm [6874]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xd
[   81.627903][ T6875] kvm_intel: kvm [6874]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xd
[   82.153264][ T6923] __nla_validate_parse: 5 callbacks suppressed
[   82.153274][ T6923] netlink: 16 bytes leftover after parsing attributes in process `syz.2.294'.
[   82.158185][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.294'.
[   82.913130][ T6965] netlink: 36 bytes leftover after parsing attributes in process `syz.1.304'.
[   82.919031][ T6965] netlink: 36 bytes leftover after parsing attributes in process `syz.1.304'.
[   82.922712][ T6965] netlink: 36 bytes leftover after parsing attributes in process `syz.1.304'.
[   82.925607][ T6965] netlink: 36 bytes leftover after parsing attributes in process `syz.1.304'.
[   82.929257][ T6965] netlink: 36 bytes leftover after parsing attributes in process `syz.1.304'.
[   82.932949][ T6965] netlink: 36 bytes leftover after parsing attributes in process `syz.1.304'.
[   82.936627][ T6965] netlink: 36 bytes leftover after parsing attributes in process `syz.1.304'.
[   82.940227][ T6965] netlink: 36 bytes leftover after parsing attributes in process `syz.1.304'.
[   83.567542][ T5822] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[   83.726307][ T5822] usb 7-1: Using ep0 maxpacket: 8
[   83.730198][ T5822] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[   83.733024][ T5822] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   83.736104][ T5822] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   83.739286][ T5822] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 15648, setting to 1024
[   83.742896][ T5822] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[   83.746126][ T5822] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   83.751549][ T5822] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   83.755104][ T5822] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.975192][ T5822] usb 7-1: usb_control_msg returned -32
[   83.975514][ T6979] bond2 (unregistering): Released all slaves
[   83.976998][ T5822] usbtmc 7-1:16.0: can't read capabilities
[   84.017863][ T6982] netlink: 'syz.0.309': attribute type 10 has an invalid length.
[   84.028333][ T6982] 8021q: adding VLAN 0 to HW filter on device team0
[   84.031564][ T6982] team0: entered allmulticast mode
[   84.034565][ T6982] team_slave_0: entered allmulticast mode
[   84.036440][ T6982] team_slave_1: entered allmulticast mode
[   84.038993][ T6982] bond0: (slave team0): Enslaving as an active interface with an up link
[   84.179211][ T6985] mmap: syz.0.310 (6985) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   84.789107][ T6990] usbtmc 7-1:16.0: usb_control_msg returned -32
[   84.895864][ T7006] can0: slcan on ttyS3.
[   84.937924][ T5884] usb 7-1: USB disconnect, device number 10
[   85.090998][ T7019] 8021q: adding VLAN 0 to HW filter on device bond4
[   85.106946][ T7019] bond4 (unregistering): Released all slaves
[   85.128073][   T24] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[   85.160197][ T5822] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   85.300663][   T24] usb 8-1: config index 0 descriptor too short (expected 74, got 45)
[   85.304157][   T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64
[   85.308747][   T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64
[   85.313362][   T24] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   85.318567][   T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   85.322390][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.341029][ T5822] usb 6-1: Using ep0 maxpacket: 16
[   85.344981][ T5822] usb 6-1: config 0 has no interfaces?
[   85.349210][ T5822] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[   85.353115][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.356375][ T5822] usb 6-1: Product: syz
[   85.358125][ T5822] usb 6-1: Manufacturer: syz
[   85.360104][ T5822] usb 6-1: SerialNumber: syz
[   85.364677][ T5822] usb 6-1: config 0 descriptor??
[   85.509785][   T40] kauditd_printk_skb: 18 callbacks suppressed
[   85.509800][   T40] audit: type=1400 audit(1781520898.127:502): avc:  denied  { sqpoll } for  pid=7029 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   85.516749][ T7030] netlink: 'syz.2.322': attribute type 39 has an invalid length.
[   85.547141][   T24] usb 8-1: GET_CAPABILITIES returned 0
[   85.549406][   T24] usbtmc 8-1:16.0: can't read capabilities
[   85.624691][   T40] audit: type=1400 audit(1781520898.240:503): avc:  denied  { write } for  pid=7035 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   85.670502][   T40] audit: type=1400 audit(1781520898.277:504): avc:  denied  { write } for  pid=7038 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   85.678412][ T7006] can0 (unregistered): slcan off ttyS3.
[   85.690472][ T5822] usb 6-1: USB disconnect, device number 4
[   85.733655][   T40] audit: type=1400 audit(1781520898.333:505): avc:  denied  { setopt } for  pid=7046 comm="syz.2.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   85.735708][ T7047] Bluetooth: MGMT ver 1.23
[   85.742961][ T7047] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[   85.744766][   T40] audit: type=1400 audit(1781520898.342:506): avc:  denied  { write } for  pid=7045 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   85.797800][   T40] audit: type=1400 audit(1781520898.399:507): avc:  denied  { write } for  pid=7050 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   85.871479][   T40] audit: type=1400 audit(1781520898.464:508): avc:  denied  { write } for  pid=7052 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   85.937647][   T40] audit: type=1400 audit(1781520898.530:509): avc:  denied  { write } for  pid=7057 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   86.046833][ T7063] block nbd2: NBD_DISCONNECT
[   86.140963][    C3] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[   86.147122][ T7074] usbtmc 8-1:16.0: Unable to send data, error -71
[   86.151950][ T7074] usbtmc 8-1:16.0: INITIATE_ABORT_BULK_OUT returned 0
[   86.184826][ T7079] lo speed is unknown, defaulting to 1000
[   86.335559][   T40] audit: type=1400 audit(1781520898.894:510): avc:  denied  { mount } for  pid=7090 comm="syz.1.332" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[   86.367067][  T920] usb 8-1: USB disconnect, device number 5
[   86.446138][   T40] audit: type=1400 audit(1781520899.007:511): avc:  denied  { unlink } for  pid=7098 comm="syz.1.333" name="#9" dev="tmpfs" ino=518 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   86.456000][ T7099] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048)
[   87.004948][ T7114] x_tables: duplicate underflow at hook 3
[   87.018707][   T39] cfg80211: failed to load regulatory.db
[   87.643644][ T7132] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0
[   87.696166][ T7135] lo speed is unknown, defaulting to 1000
[   87.968820][ T7116] Process accounting resumed
[   88.022900][ T7148] ieee802154 phy0 wpan0: encryption failed: -22
[   88.026686][ T7144] overlayfs: failed to resolve '/
': -2
[   89.358544][ T7073] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   89.363239][ T7080] netlink: 'syz.0.329': attribute type 2 has an invalid length.
[   89.366551][ T7080] __nla_validate_parse: 32 callbacks suppressed
[   89.366566][ T7080] netlink: 232 bytes leftover after parsing attributes in process `syz.0.329'.
[   89.491231][ T5822] bridge0: entered promiscuous mode
[   89.608000][ T7203] binder_alloc: 7201: binder_alloc_buf, no vma
[   89.679775][ T7211] overlayfs: failed to decode file handle (len=8, type=251, flags=0, err=-22)
[   89.718751][ T7218] Cache volume key already in use (9p,syz,)
[   89.724395][ T7221] netlink: 28 bytes leftover after parsing attributes in process `syz.2.362'.
[   89.801665][ T7234] unsupported nla_type 4111
[   89.855055][ T7236] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   89.858513][ T7236] SELinux: failed to load policy
[   89.936995][ T7243] Invalid ELF header len 18
[   90.000894][ T7246] ./cgroup: Can't lookup blockdev
[   90.179730][ T7253] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.372'.
[   90.342845][ T7258] 9pnet_fd: p9_fd_create_unix (7258): problem connecting socket: ./file0: -111
[   90.585530][ T7293] Cannot find set identified by id 4 to match
[   90.677438][ T7311] tmpfs: Bad value for 'mpol'
[   90.679989][ T7310] tmpfs: Bad value for 'mpol'
[   90.702679][ T7313] bridge0: port 3(veth0_to_bridge) entered blocking state
[   90.705307][ T7313] bridge0: port 3(veth0_to_bridge) entered disabled state
[   90.707941][ T7313] veth0_to_bridge: entered allmulticast mode
[   90.711233][ T7313] veth0_to_bridge: entered promiscuous mode
[   90.713255][ T7313] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   90.715593][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'.
[   90.721811][ T7313] bridge0: port 3(veth0_to_bridge) entered blocking state
[   90.724124][ T7313] bridge0: port 3(veth0_to_bridge) entered forwarding state
[   90.733862][ T7315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.384'.
[   90.763492][ T7315] netlink: 'syz.1.384': attribute type 4 has an invalid length.
[   90.765932][ T7315] netlink: 152 bytes leftover after parsing attributes in process `syz.1.384'.
[   90.770836][ T7315] .`: renamed from bond0
[   90.785903][ T7311] lo speed is unknown, defaulting to 1000
[   91.049283][   T40] kauditd_printk_skb: 41 callbacks suppressed
[   91.049293][   T40] audit: type=1400 audit(1781520903.279:553): avc:  denied  { unmount } for  pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   91.089875][   T40] audit: type=1400 audit(1781520903.316:554): avc:  denied  { getopt } for  pid=7337 comm="syz.1.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   91.096800][ T7338] trusted_key: encrypted_key: keyword 'u' not recognized
[   91.102915][ T7338] QAT: Device 2 not found
[   91.125836][ T5836] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   91.134791][ T7338] syzkaller1: entered allmulticast mode
[   91.139617][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   91.146565][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   91.151697][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   91.156719][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   91.161847][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   91.167075][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   91.172325][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   91.177395][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   91.191797][ T7341] netlink: 56 bytes leftover after parsing attributes in process `syz.2.393'.
[   91.287708][ T5836] usb 5-1: Using ep0 maxpacket: 8
[   91.290779][ T5836] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[   91.293252][ T5836] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   91.296221][ T5836] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   91.299868][ T5836] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   91.303036][ T5836] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   91.306984][ T5836] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   91.310084][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.406602][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.395'.
[   91.536742][ T5836] usb 5-1: usb_control_msg returned -32
[   91.538501][ T5836] usbtmc 5-1:16.0: can't read capabilities
[   91.565710][   T40] audit: type=1400 audit(1781520903.761:555): avc:  denied  { write } for  pid=7351 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   91.644066][   T40] audit: type=1400 audit(1781520903.826:556): avc:  denied  { write } for  pid=7354 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   91.849371][    C0] net_ratelimit: 8041 callbacks suppressed
[   91.849384][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   91.849391][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   91.851335][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   91.854934][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   91.858389][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   91.862110][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   91.865566][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   91.869033][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   91.872541][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   91.876219][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   91.919143][ T7360] usbtmc 5-1:16.0: usb_control_msg returned -32
[   92.424328][   T40] audit: type=1400 audit(1781520904.556:557): avc:  denied  { shutdown } for  pid=7361 comm="syz.1.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   92.478621][   T40] audit: type=1400 audit(1781520904.603:558): avc:  denied  { setopt } for  pid=7366 comm="syz.2.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   92.680715][ T7363] cgroup: fork rejected by pids controller in /syz1
[   94.106404][   T40] audit: type=1800 audit(1781520906.110:559): pid=7360 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.390" name="/" dev="fuse" ino=4 res=0 errno=0
[   94.131955][ T7424] MTD: Couldn't look up '/dev/sg0': -15
[   94.131993][ T5836] usb 5-1: USB disconnect, device number 7
[   94.133715][ T7424] /dev/sg0: Can't lookup blockdev
[   94.518660][ T7435] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.407'.
[   94.529312][ T7435] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   94.563319][   T40] audit: type=1400 audit(1781520906.525:560): avc:  denied  { setopt } for  pid=7425 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   94.981357][ T7456] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[   95.827305][   T40] audit: type=1400 audit(1781520907.699:561): avc:  denied  { write } for  pid=7486 comm="syz.0.422" name="/" dev="9p" ino=72878723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   95.840372][   T40] audit: type=1400 audit(1781520907.699:562): avc:  denied  { add_name } for  pid=7486 comm="syz.0.422" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   96.848620][   T40] kauditd_printk_skb: 5 callbacks suppressed
[   96.848637][   T40] audit: type=1800 audit(1781520908.640:568): pid=7519 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.432" name="file0" dev="tmpfs" ino=653 res=0 errno=0
[   96.869054][ T7519] binder: 7518:7519 ioctl c00c620f 200000000100 returned -22
[   96.872889][   T40] audit: type=1804 audit(1781520908.659:569): pid=7519 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.432" name="/newroot/119/file0" dev="tmpfs" ino=653 res=1 errno=0
[   96.888955][ T7521] netlink: 68 bytes leftover after parsing attributes in process `syz.0.433'.
[   97.271101][    C3] net_ratelimit: 73607 callbacks suppressed
[   97.271113][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   97.271140][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   97.273144][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   97.276770][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   97.280381][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   97.283892][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   97.287478][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   97.291162][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   97.294727][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   97.298267][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   97.427454][ T7530] binder: 7529:7530 ioctl c0306201 200000000180 returned -14
[   97.442024][   T40] audit: type=1400 audit(1781520909.185:570): avc:  denied  { execute } for  pid=7529 comm="syz.3.435" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   97.456483][ T7530] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.435'.
[   97.465210][   T40] audit: type=1400 audit(1781520909.204:571): avc:  denied  { accept } for  pid=7529 comm="syz.3.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   97.483372][ T7530] netlink: 32 bytes leftover after parsing attributes in process `syz.3.435'.
[   97.547079][ T7533] policy can only be matched on NF_INET_PRE_ROUTING
[   97.547090][ T7533] unable to load match
[   97.553032][ T7533] ieee802154 phy0 wpan0: encryption failed: -22
[   97.615490][   T40] audit: type=1400 audit(1781520909.342:572): avc:  denied  { accept } for  pid=7534 comm="syz.3.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   97.934675][ T7542] kvm: pic: non byte write
[  100.373557][ T7384] syz.1.397 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  100.418334][ T7384] CPU: 3 UID: 0 PID: 7384 Comm: syz.1.397 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  100.418354][ T7384] Tainted: [L]=SOFTLOCKUP
[  100.418357][ T7384] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  100.418364][ T7384] Call Trace:
[  100.418368][ T7384]  <TASK>
[  100.418373][ T7384]  dump_stack_lvl+0x100/0x190
[  100.418390][ T7384]  dump_header+0xfb/0x606
[  100.418402][ T7384]  oom_kill_process.cold+0xd/0x330
[  100.418416][ T7384]  out_of_memory+0x340/0x14f0
[  100.418436][ T7384]  ? __pfx_out_of_memory+0x10/0x10
[  100.418458][ T7384]  mem_cgroup_out_of_memory+0xc6/0x130
[  100.418476][ T7384]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  100.418492][ T7384]  ? find_held_lock+0x2b/0x80
[  100.418506][ T7384]  ? do_raw_spin_unlock+0x145/0x1e0
[  100.418522][ T7384]  ? _raw_spin_unlock+0x28/0x50
[  100.418539][ T7384]  try_charge_memcg+0x6e5/0xdf0
[  100.418556][ T7384]  ? __pfx_try_charge_memcg+0x10/0x10
[  100.418569][ T7384]  ? find_held_lock+0x2b/0x80
[  100.418578][ T7384]  ? rcu_read_unlock+0x17/0x60
[  100.418592][ T7384]  ? rcu_read_unlock+0x17/0x60
[  100.418606][ T7384]  ? find_held_lock+0x2b/0x80
[  100.418617][ T7384]  ? rcu_read_unlock+0x17/0x60
[  100.418634][ T7384]  charge_memcg+0x19f/0x210
[  100.418648][ T7384]  __mem_cgroup_charge+0x2b/0x1c0
[  100.418664][ T7384]  shmem_alloc_and_add_folio+0x451/0xd40
[  100.418687][ T7384]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  100.418707][ T7384]  ? shmem_allowable_huge_orders+0x2bd/0x400
[  100.418721][ T7384]  shmem_get_folio_gfp+0x6ab/0x1900
[  100.418736][ T7384]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  100.418751][ T7384]  shmem_write_begin+0x1a4/0x420
[  100.418763][ T7384]  ? __pfx_shmem_write_begin+0x10/0x10
[  100.418775][ T7384]  ? balance_dirty_pages_ratelimited_flags+0x91/0x1170
[  100.418790][ T7384]  ? lockdep_hardirqs_on+0x78/0x100
[  100.418808][ T7384]  generic_perform_write+0x292/0xa40
[  100.418835][ T7384]  ? __pfx_generic_perform_write+0x10/0x10
[  100.418855][ T7384]  ? file_update_time_flags+0x373/0x500
[  100.418874][ T7384]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  100.418888][ T7384]  shmem_file_write_iter+0x10e/0x140
[  100.418902][ T7384]  __kernel_write_iter+0x2ac/0x920
[  100.418917][ T7384]  ? __pfx___kernel_write_iter+0x10/0x10
[  100.418931][ T7384]  ? __up_read+0x2c1/0x6e0
[  100.418948][ T7384]  ? dump_user_range+0x65e/0xad0
[  100.418961][ T7384]  ? copy_mc_enhanced_fast_string+0x6/0xf
[  100.418976][ T7384]  dump_user_range+0x3f9/0xad0
[  100.418991][ T7384]  ? __pfx_dump_user_range+0x10/0x10
[  100.419008][ T7384]  ? __pfx_writenote+0x10/0x10
[  100.419025][ T7384]  elf_core_dump+0x2d5f/0x3d10
[  100.419046][ T7384]  ? __pfx_elf_core_dump+0x10/0x10
[  100.419060][ T7384]  ? kasan_save_stack+0x3f/0x50
[  100.419071][ T7384]  ? kasan_save_track+0x14/0x30
[  100.419082][ T7384]  ? __kasan_kmalloc+0xaa/0xb0
[  100.419091][ T7384]  ? __kvmalloc_node_noprof+0x360/0xa00
[  100.419103][ T7384]  ? irqentry_exit+0x39e/0x970
[  100.419119][ T7384]  ? asm_exc_page_fault+0x26/0x30
[  100.419131][ T7384]  ? 0xffffffffff600000
[  100.419162][ T7384]  ? vfs_coredump+0x2947/0x5720
[  100.419174][ T7384]  vfs_coredump+0x2947/0x5720
[  100.419192][ T7384]  ? __pfx_vfs_coredump+0x10/0x10
[  100.419205][ T7384]  ? __lock_acquire+0x4a5/0x2630
[  100.419224][ T7384]  ? lock_acquire+0x1b1/0x370
[  100.419243][ T7384]  ? is_bpf_text_address+0x8a/0x1a0
[  100.419258][ T7384]  ? bpf_ksym_find+0x128/0x1c0
[  100.419278][ T7384]  ? __kernel_text_address+0xd/0x30
[  100.419292][ T7384]  ? unwind_get_return_address+0x59/0xa0
[  100.419309][ T7384]  ? arch_stack_walk+0xa6/0xf0
[  100.419329][ T7384]  ? __sigqueue_free+0xbe/0x2a0
[  100.419341][ T7384]  ? stack_trace_save+0x8e/0xc0
[  100.419352][ T7384]  ? __pfx_stack_trace_save+0x10/0x10
[  100.419384][ T7384]  ? stack_depot_save_flags+0x27/0x9d0
[  100.419398][ T7384]  ? __lock_acquire+0x4a5/0x2630
[  100.419435][ T7384]  ? proc_coredump_connector+0x2d3/0x4f0
[  100.419451][ T7384]  ? __pfx_proc_coredump_connector+0x10/0x10
[  100.419469][ T7384]  ? rcu_is_watching+0x12/0xc0
[  100.419489][ T7384]  get_signal+0x1f2a/0x21e0
[  100.419511][ T7384]  ? __pfx_get_signal+0x10/0x10
[  100.419527][ T7384]  ? __pfx_force_sig_fault+0x10/0x10
[  100.419546][ T7384]  arch_do_signal_or_restart+0x91/0x7e0
[  100.419565][ T7384]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  100.419588][ T7384]  ? rcu_is_watching+0x12/0xc0
[  100.419607][ T7384]  irqentry_exit+0x39e/0x970
[  100.419625][ T7384]  asm_exc_page_fault+0x26/0x30
[  100.419636][ T7384] RIP: 0033:0x7ff34659ce59
[  100.419649][ T7384] Code: Unable to access opcode bytes at 0x7ff34659ce2f.
[  100.419654][ T7384] RSP: 002b:00007ff3447d4fd8 EFLAGS: 00010206
[  100.419663][ T7384] RAX: 0000000000000000 RBX: 00007ff346816090 RCX: 00007ff34659ce59
[  100.419669][ T7384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000088200
[  100.419676][ T7384] RBP: 00007ff346632d6f R08: 0000000000000000 R09: 0000000000000000
[  100.419682][ T7384] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  100.419688][ T7384] R13: 00007ff346816128 R14: 00007ff346816090 R15: 00007ffc6f808998
[  100.419702][ T7384]  </TASK>
[  100.419706][ T7384] memory: usage 307200kB, limit 307200kB, failcnt 23623
[  100.755655][ T7384] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0
[  100.758255][ T7384] kmem: usage 5012kB, limit 9007199254740988kB, failcnt 0
[  100.762316][ T7384] Memory cgroup stats for /syz1:
[  100.762481][ T7384] cache 309403648
[  100.766477][ T7384] rss 20480
[  100.767525][ T7384] rss_huge 0
[  100.768630][ T7384] shmem 309403648
[  100.769903][ T7384] mapped_file 0
[  100.772194][ T7384] dirty 0
[  100.773133][ T7384] writeback 0
[  100.774276][ T7384] workingset_refault_anon 6
[  100.775788][ T7384] workingset_refault_file 258
[  100.777394][ T7384] swap 127983616
[  100.778516][ T7384] swapcached 128163840
[  100.779893][ T7384] pgpgin 160660
[  100.781732][ T7384] pgpgout 85114
[  100.782838][ T7384] pgfault 35093
[  100.785515][ T7384] pgmajfault 10
[  100.786760][ T7384] inactive_anon 36499456
[  100.788176][ T7384] active_anon 272818176
[  100.789566][ T7384] inactive_file 0
[  100.790773][ T7384] active_file 0
[  100.792181][ T7384] unevictable 0
[  100.793383][ T7384] hierarchical_memory_limit 314572800
[  100.795324][ T7384] hierarchical_memsw_limit 9223372036854771712
[  100.797415][ T7384] total_cache 309403648
[  100.798818][ T7384] total_rss 20480
[  100.800062][ T7384] total_rss_huge 0
[  100.801299][ T7384] total_shmem 309403648
[  100.802990][ T7384] total_mapped_file 0
[  100.804325][ T7384] total_dirty 0
[  100.805540][ T7384] total_writeback 0
[  100.806869][ T7384] total_workingset_refault_anon 6
[  100.808541][ T7384] total_workingset_refault_file 258
[  100.810241][ T7384] total_swap 127983616
[  100.811825][ T7384] total_swapcached 128163840
[  100.814140][ T7384] total_pgpgin 160660
[  100.815924][ T7384] total_pgpgout 85114
[  100.817444][ T7384] total_pgfault 35093
[  100.818760][ T7384] total_pgmajfault 10
[  100.820128][ T7384] total_inactive_anon 36499456
[  100.821669][ T7384] total_active_anon 272818176
[  100.823258][ T7384] total_inactive_file 0
[  100.824907][ T7384] total_active_file 0
[  100.826277][ T7384] total_unevictable 0
[  100.827669][ T7384] anon_cost 0
[  100.828824][ T7384] file_cost 0
[  100.829910][ T7384] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.397,pid=7371,uid=0
[  100.837769][ T7384] Memory cgroup out of memory: Killed process 7371 (syz.1.397) total-vm:49268kB, anon-rss:0kB, file-rss:36864kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000
[  100.851397][ T7397] syz.1.397 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  100.866370][ T7397] CPU: 1 UID: 0 PID: 7397 Comm: syz.1.397 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  100.866397][ T7397] Tainted: [L]=SOFTLOCKUP
[  100.866404][ T7397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  100.866414][ T7397] Call Trace:
[  100.866424][ T7397]  <TASK>
[  100.866432][ T7397]  dump_stack_lvl+0x100/0x190
[  100.866458][ T7397]  dump_header+0xfb/0x606
[  100.866479][ T7397]  oom_kill_process.cold+0xd/0x330
[  100.866502][ T7397]  out_of_memory+0x340/0x14f0
[  100.866536][ T7397]  ? __pfx_out_of_memory+0x10/0x10
[  100.866571][ T7397]  mem_cgroup_out_of_memory+0xc6/0x130
[  100.866600][ T7397]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  100.866627][ T7397]  ? find_held_lock+0x2b/0x80
[  100.866649][ T7397]  ? do_raw_spin_unlock+0x145/0x1e0
[  100.866676][ T7397]  ? _raw_spin_unlock+0x28/0x50
[  100.866704][ T7397]  try_charge_memcg+0x6e5/0xdf0
[  100.866729][ T7397]  ? __pfx_try_charge_memcg+0x10/0x10
[  100.866748][ T7397]  ? find_held_lock+0x2b/0x80
[  100.866763][ T7397]  ? rcu_read_unlock+0x17/0x60
[  100.866783][ T7397]  ? rcu_read_unlock+0x17/0x60
[  100.866804][ T7397]  ? find_held_lock+0x2b/0x80
[  100.866818][ T7397]  ? rcu_read_unlock+0x17/0x60
[  100.866844][ T7397]  charge_memcg+0x19f/0x210
[  100.866864][ T7397]  __mem_cgroup_charge+0x2b/0x1c0
[  100.866888][ T7397]  shmem_alloc_and_add_folio+0x451/0xd40
[  100.866921][ T7397]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  100.866950][ T7397]  ? shmem_allowable_huge_orders+0x2bd/0x400
[  100.866991][ T7397]  shmem_get_folio_gfp+0x6ab/0x1900
[  100.867012][ T7397]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  100.867036][ T7397]  shmem_write_begin+0x1a4/0x420
[  100.867055][ T7397]  ? __pfx_shmem_write_begin+0x10/0x10
[  100.867074][ T7397]  ? balance_dirty_pages_ratelimited_flags+0x91/0x1170
[  100.867095][ T7397]  ? lockdep_hardirqs_on+0x78/0x100
[  100.867122][ T7397]  generic_perform_write+0x292/0xa40
[  100.867153][ T7397]  ? __pfx_generic_perform_write+0x10/0x10
[  100.867182][ T7397]  ? file_update_time_flags+0x373/0x500
[  100.867213][ T7397]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  100.867232][ T7397]  shmem_file_write_iter+0x10e/0x140
[  100.867254][ T7397]  __kernel_write_iter+0x2ac/0x920
[  100.867274][ T7397]  ? __pfx___kernel_write_iter+0x10/0x10
[  100.867295][ T7397]  ? __up_read+0x2c1/0x6e0
[  100.867319][ T7397]  ? dump_user_range+0x65e/0xad0
[  100.867345][ T7397]  dump_user_range+0x3f9/0xad0
[  100.867388][ T7397]  ? __pfx_dump_user_range+0x10/0x10
[  100.867423][ T7397]  ? __pfx_writenote+0x10/0x10
[  100.867450][ T7397]  elf_core_dump+0x2d5f/0x3d10
[  100.867482][ T7397]  ? __pfx_elf_core_dump+0x10/0x10
[  100.867504][ T7397]  ? kasan_save_stack+0x3f/0x50
[  100.867520][ T7397]  ? kasan_save_track+0x14/0x30
[  100.867536][ T7397]  ? __kasan_kmalloc+0xaa/0xb0
[  100.867551][ T7397]  ? __kvmalloc_node_noprof+0x360/0xa00
[  100.867569][ T7397]  ? irqentry_exit+0x39e/0x970
[  100.867592][ T7397]  ? asm_exc_page_fault+0x26/0x30
[  100.867610][ T7397]  ? 0xffffffffff600000
[  100.867663][ T7397]  ? vfs_coredump+0x2947/0x5720
[  100.867682][ T7397]  vfs_coredump+0x2947/0x5720
[  100.867709][ T7397]  ? __pfx_vfs_coredump+0x10/0x10
[  100.867729][ T7397]  ? __lock_acquire+0x4a5/0x2630
[  100.867758][ T7397]  ? lock_acquire+0x1b1/0x370
[  100.867788][ T7397]  ? is_bpf_text_address+0x8a/0x1a0
[  100.867811][ T7397]  ? bpf_ksym_find+0x128/0x1c0
[  100.867840][ T7397]  ? __kernel_text_address+0xd/0x30
[  100.867862][ T7397]  ? unwind_get_return_address+0x59/0xa0
[  100.867886][ T7397]  ? arch_stack_walk+0xa6/0xf0
[  100.867915][ T7397]  ? __sigqueue_free+0xbe/0x2a0
[  100.867935][ T7397]  ? stack_trace_save+0x8e/0xc0
[  100.867953][ T7397]  ? __pfx_stack_trace_save+0x10/0x10
[  100.867973][ T7397]  ? stack_depot_save_flags+0x27/0x9d0
[  100.867991][ T7397]  ? __lock_acquire+0x4a5/0x2630
[  100.868049][ T7397]  ? proc_coredump_connector+0x2d3/0x4f0
[  100.868072][ T7397]  ? __pfx_proc_coredump_connector+0x10/0x10
[  100.868099][ T7397]  ? rcu_is_watching+0x12/0xc0
[  100.868127][ T7397]  get_signal+0x1f2a/0x21e0
[  100.868160][ T7397]  ? __pfx_get_signal+0x10/0x10
[  100.868183][ T7397]  ? __pfx_force_sig_fault+0x10/0x10
[  100.868212][ T7397]  arch_do_signal_or_restart+0x91/0x7e0
[  100.868239][ T7397]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  100.868274][ T7397]  ? rcu_is_watching+0x12/0xc0
[  100.868301][ T7397]  irqentry_exit+0x39e/0x970
[  100.868329][ T7397]  asm_exc_page_fault+0x26/0x30
[  100.868345][ T7397] RIP: 0033:0x7ff34659ce59
[  100.868363][ T7397] Code: Unable to access opcode bytes at 0x7ff34659ce2f.
[  100.868369][ T7397] RSP: 002b:00007ff3447d4fd8 EFLAGS: 00010206
[  100.868384][ T7397] RAX: 0000000000000000 RBX: 00007ff346816090 RCX: 00007ff34659ce59
[  100.868394][ T7397] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000088200
[  100.868404][ T7397] RBP: 00007ff346632d6f R08: 0000000000000000 R09: 0000000000000000
[  100.868413][ T7397] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  100.868427][ T7397] R13: 00007ff346816128 R14: 00007ff346816090 R15: 00007ffc6f808998
[  100.868450][ T7397]  </TASK>
[  101.140672][ T7371] syz.1.397 (7371) used greatest stack depth: 17400 bytes left
[  101.278406][ T7397] memory: usage 307200kB, limit 307200kB, failcnt 25875
[  101.281236][ T7397] memory+swap: usage 431944kB, limit 9007199254740988kB, failcnt 0
[  101.283855][ T7397] kmem: usage 5028kB, limit 9007199254740988kB, failcnt 0
[  101.286148][ T7397] Memory cgroup stats for /syz1:
[  101.286258][ T7397] cache 309391360
[  101.289111][ T7397] rss 20480
[  101.290188][ T7397] rss_huge 0
[  101.291389][ T7397] shmem 309391360
[  101.292546][ T7397] mapped_file 0
[  101.293769][ T7397] dirty 0
[  101.294747][ T7397] writeback 0
[  101.295843][ T7397] workingset_refault_anon 6
[  101.297523][ T7397] workingset_refault_file 258
[  101.299668][ T7397] swap 127737856
[  101.302816][ T7397] swapcached 140046336
[  101.304219][ T7397] pgpgin 169814
[  101.305434][ T7397] pgpgout 94274
[  101.306595][ T7397] pgfault 35665
[  101.307809][ T7397] pgmajfault 10
[  101.308981][ T7397] inactive_anon 99397632
[  101.310398][ T7397] active_anon 209997824
[  101.311756][ T7397] inactive_file 0
[  101.313021][ T7397] active_file 0
[  101.314167][ T7397] unevictable 0
[  101.315318][ T7397] hierarchical_memory_limit 314572800
[  101.317086][ T7397] hierarchical_memsw_limit 9223372036854771712
[  101.319116][ T7397] total_cache 309391360
[  101.320871][ T7397] total_rss 20480
[  101.322423][ T7397] total_rss_huge 0
[  101.324159][ T7397] total_shmem 309391360
[  101.325442][ T7397] total_mapped_file 0
[  101.326736][ T7397] total_dirty 0
[  101.327904][ T7397] total_writeback 0
[  101.329162][ T7397] total_workingset_refault_anon 6
[  101.330798][ T7397] total_workingset_refault_file 258
[  101.332465][ T7397] total_swap 127737856
[  101.333854][ T7397] total_swapcached 140046336
[  101.335492][ T7397] total_pgpgin 169814
[  101.337300][ T7397] total_pgpgout 94274
[  101.338657][ T7397] total_pgfault 35665
[  101.340337][ T7397] total_pgmajfault 10
[  101.342005][ T7397] total_inactive_anon 99397632
[  101.343564][ T7397] total_active_anon 209997824
[  101.345693][ T7397] total_inactive_file 0
[  101.347138][ T7397] total_active_file 0
[  101.348837][ T7397] total_unevictable 0
[  101.350182][ T7397] anon_cost 0
[  101.351341][ T7397] file_cost 0
[  101.352474][ T7397] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.397,pid=7368,uid=0
[  101.358533][ T7397] Memory cgroup out of memory: Killed process 7368 (syz.1.397) total-vm:49268kB, anon-rss:0kB, file-rss:34944kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000
[  101.440526][ T7378] syz.1.397 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  101.520109][ T7378] CPU: 2 UID: 0 PID: 7378 Comm: syz.1.397 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  101.520129][ T7378] Tainted: [L]=SOFTLOCKUP
[  101.520133][ T7378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  101.520140][ T7378] Call Trace:
[  101.520144][ T7378]  <TASK>
[  101.520148][ T7378]  dump_stack_lvl+0x100/0x190
[  101.520164][ T7378]  dump_header+0xfb/0x606
[  101.520177][ T7378]  oom_kill_process.cold+0xd/0x330
[  101.520190][ T7378]  out_of_memory+0x340/0x14f0
[  101.520211][ T7378]  ? __pfx_out_of_memory+0x10/0x10
[  101.520233][ T7378]  mem_cgroup_out_of_memory+0xc6/0x130
[  101.520251][ T7378]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  101.520268][ T7378]  ? find_held_lock+0x2b/0x80
[  101.520282][ T7378]  ? do_raw_spin_unlock+0x145/0x1e0
[  101.520299][ T7378]  ? _raw_spin_unlock+0x28/0x50
[  101.520393][ T7378]  try_charge_memcg+0x6e5/0xdf0
[  101.520411][ T7378]  ? __pfx_try_charge_memcg+0x10/0x10
[  101.520424][ T7378]  ? find_held_lock+0x2b/0x80
[  101.520434][ T7378]  ? rcu_read_unlock+0x17/0x60
[  101.520449][ T7378]  ? rcu_read_unlock+0x17/0x60
[  101.520463][ T7378]  ? find_held_lock+0x2b/0x80
[  101.520473][ T7378]  ? rcu_read_unlock+0x17/0x60
[  101.520490][ T7378]  charge_memcg+0x19f/0x210
[  101.520504][ T7378]  __mem_cgroup_charge+0x2b/0x1c0
[  101.520521][ T7378]  shmem_alloc_and_add_folio+0x451/0xd40
[  101.520544][ T7378]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  101.520564][ T7378]  ? shmem_allowable_huge_orders+0x2bd/0x400
[  101.520579][ T7378]  shmem_get_folio_gfp+0x6ab/0x1900
[  101.520593][ T7378]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  101.520608][ T7378]  shmem_write_begin+0x1a4/0x420
[  101.520621][ T7378]  ? __pfx_shmem_write_begin+0x10/0x10
[  101.520633][ T7378]  ? balance_dirty_pages_ratelimited_flags+0x91/0x1170
[  101.520647][ T7378]  ? lockdep_hardirqs_on+0x78/0x100
[  101.520666][ T7378]  generic_perform_write+0x292/0xa40
[  101.520687][ T7378]  ? __pfx_generic_perform_write+0x10/0x10
[  101.520706][ T7378]  ? file_update_time_flags+0x373/0x500
[  101.520726][ T7378]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  101.520739][ T7378]  shmem_file_write_iter+0x10e/0x140
[  101.520754][ T7378]  __kernel_write_iter+0x2ac/0x920
[  101.520768][ T7378]  ? __pfx___kernel_write_iter+0x10/0x10
[  101.520782][ T7378]  ? __up_read+0x2c1/0x6e0
[  101.520799][ T7378]  ? dump_user_range+0x65e/0xad0
[  101.520812][ T7378]  ? copy_mc_enhanced_fast_string+0x6/0xf
[  101.520828][ T7378]  dump_user_range+0x3f9/0xad0
[  101.520843][ T7378]  ? __pfx_dump_user_range+0x10/0x10
[  101.520860][ T7378]  ? __pfx_writenote+0x10/0x10
[  101.520876][ T7378]  elf_core_dump+0x2d5f/0x3d10
[  101.520898][ T7378]  ? __pfx_elf_core_dump+0x10/0x10
[  101.520912][ T7378]  ? kasan_save_stack+0x3f/0x50
[  101.520923][ T7378]  ? kasan_save_track+0x14/0x30
[  101.520933][ T7378]  ? __kasan_kmalloc+0xaa/0xb0
[  101.520943][ T7378]  ? __kvmalloc_node_noprof+0x360/0xa00
[  101.520956][ T7378]  ? irqentry_exit+0x39e/0x970
[  101.520976][ T7378]  ? asm_exc_page_fault+0x26/0x30
[  101.520988][ T7378]  ? 0xffffffffff600000
[  101.521018][ T7378]  ? vfs_coredump+0x2947/0x5720
[  101.521030][ T7378]  vfs_coredump+0x2947/0x5720
[  101.521047][ T7378]  ? __pfx_vfs_coredump+0x10/0x10
[  101.521060][ T7378]  ? __lock_acquire+0x4a5/0x2630
[  101.521080][ T7378]  ? lock_acquire+0x1b1/0x370
[  101.521099][ T7378]  ? is_bpf_text_address+0x8a/0x1a0
[  101.521114][ T7378]  ? bpf_ksym_find+0x128/0x1c0
[  101.521133][ T7378]  ? __kernel_text_address+0xd/0x30
[  101.521148][ T7378]  ? unwind_get_return_address+0x59/0xa0
[  101.521165][ T7378]  ? arch_stack_walk+0xa6/0xf0
[  101.521185][ T7378]  ? __sigqueue_free+0xbe/0x2a0
[  101.521197][ T7378]  ? stack_trace_save+0x8e/0xc0
[  101.521208][ T7378]  ? __pfx_stack_trace_save+0x10/0x10
[  101.521219][ T7378]  ? stack_depot_save_flags+0x27/0x9d0
[  101.521231][ T7378]  ? __lock_acquire+0x4a5/0x2630
[  101.521267][ T7378]  ? proc_coredump_connector+0x2d3/0x4f0
[  101.521283][ T7378]  ? __pfx_proc_coredump_connector+0x10/0x10
[  101.521313][ T7378]  ? rcu_is_watching+0x12/0xc0
[  101.521333][ T7378]  get_signal+0x1f2a/0x21e0
[  101.521354][ T7378]  ? __pfx_get_signal+0x10/0x10
[  101.521371][ T7378]  ? __pfx_force_sig_fault+0x10/0x10
[  101.521390][ T7378]  arch_do_signal_or_restart+0x91/0x7e0
[  101.521408][ T7378]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  101.521431][ T7378]  ? rcu_is_watching+0x12/0xc0
[  101.521450][ T7378]  irqentry_exit+0x39e/0x970
[  101.521468][ T7378]  asm_exc_page_fault+0x26/0x30
[  101.521479][ T7378] RIP: 0033:0x7ff34659ce59
[  101.521491][ T7378] Code: Unable to access opcode bytes at 0x7ff34659ce2f.
[  101.521496][ T7378] RSP: 002b:00007ff3447d4fd8 EFLAGS: 00010206
[  101.521505][ T7378] RAX: 0000000000000000 RBX: 00007ff346816090 RCX: 00007ff34659ce59
[  101.521512][ T7378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000088200
[  101.521518][ T7378] RBP: 00007ff346632d6f R08: 0000000000000000 R09: 0000000000000000
[  101.521524][ T7378] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  101.521530][ T7378] R13: 00007ff346816128 R14: 00007ff346816090 R15: 00007ffc6f808998
[  101.521544][ T7378]  </TASK>
[  101.521569][ T7378] memory: usage 307200kB, limit 307200kB, failcnt 26278
[  101.791998][ T7378] memory+swap: usage 397552kB, limit 9007199254740988kB, failcnt 0
[  101.794547][ T7378] kmem: usage 4760kB, limit 9007199254740988kB, failcnt 0
[  101.797660][ T7378] Memory cgroup stats for /syz1:
[  101.797742][ T7378] cache 287186944
[  101.800683][ T7378] rss 32768
[  101.801750][ T7378] rss_huge 0
[  101.802846][ T7378] shmem 287186944
[  101.810382][ T7378] mapped_file 0
[  101.811579][ T7378] dirty 0
[  101.812591][ T7378] writeback 0
[  101.816106][ T7378] workingset_refault_anon 9
[  101.817651][ T7378] workingset_refault_file 258
[  101.821530][ T7378] swap 114946048
[  101.822731][ T7378] swapcached 140668928
[  101.826448][ T7378] pgpgin 170000
[  101.827622][ T7378] pgpgout 99877
[  101.831146][ T7378] pgfault 35679
[  101.832406][ T7378] pgmajfault 13
[  101.835971][ T7378] inactive_anon 91922432
[  101.837369][ T7378] active_anon 195198976
[  101.842886][ T7378] inactive_file 0
[  101.844111][ T7378] active_file 0
[  101.853748][ T7378] unevictable 0
[  101.854813][ T7378] hierarchical_memory_limit 314572800
[  101.856612][ T7378] hierarchical_memsw_limit 9223372036854771712
[  101.858566][ T7378] total_cache 287186944
[  101.859950][ T7378] total_rss 32768
[  101.861137][ T7378] total_rss_huge 0
[  101.862342][ T7378] total_shmem 287186944
[  101.863695][ T7378] total_mapped_file 0
[  101.875406][ T7378] total_dirty 0
[  101.876602][ T7378] total_writeback 0
[  101.877889][ T7378] total_workingset_refault_anon 9
[  101.879510][ T7378] total_workingset_refault_file 258
[  101.881165][ T7378] total_swap 114946048
[  101.882498][ T7378] total_swapcached 140668928
[  101.883997][ T7378] total_pgpgin 170000
[  101.885308][ T7378] total_pgpgout 99877
[  101.897080][ T7378] total_pgfault 35679
[  101.898409][ T7378] total_pgmajfault 13
[  101.899792][ T7378] total_inactive_anon 91922432
[  101.901306][ T7378] total_active_anon 195198976
[  101.902799][ T7378] total_inactive_file 0
[  101.904141][ T7378] total_active_file 0
[  101.905467][ T7378] total_unevictable 0
[  101.906773][ T7378] anon_cost 0
[  101.918741][ T7378] file_cost 0
[  101.919890][ T7378] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.397,pid=7384,uid=0
[  101.926968][ T7378] Memory cgroup out of memory: Killed process 7384 (syz.1.397) total-vm:49268kB, anon-rss:0kB, file-rss:35520kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000
[  102.051634][ T7379] syz.1.397 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  102.083705][ T7379] CPU: 2 UID: 0 PID: 7379 Comm: syz.1.397 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  102.083725][ T7379] Tainted: [L]=SOFTLOCKUP
[  102.083729][ T7379] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  102.083735][ T7379] Call Trace:
[  102.083739][ T7379]  <TASK>
[  102.083744][ T7379]  dump_stack_lvl+0x100/0x190
[  102.083760][ T7379]  dump_header+0xfb/0x606
[  102.083773][ T7379]  oom_kill_process.cold+0xd/0x330
[  102.083787][ T7379]  out_of_memory+0x340/0x14f0
[  102.083809][ T7379]  ? __pfx_out_of_memory+0x10/0x10
[  102.083830][ T7379]  mem_cgroup_out_of_memory+0xc6/0x130
[  102.083848][ T7379]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  102.083865][ T7379]  ? find_held_lock+0x2b/0x80
[  102.083879][ T7379]  ? do_raw_spin_unlock+0x145/0x1e0
[  102.083896][ T7379]  ? _raw_spin_unlock+0x28/0x50
[  102.083912][ T7379]  try_charge_memcg+0x6e5/0xdf0
[  102.083929][ T7379]  ? __pfx_try_charge_memcg+0x10/0x10
[  102.083943][ T7379]  ? find_held_lock+0x2b/0x80
[  102.083953][ T7379]  ? rcu_read_unlock+0x17/0x60
[  102.083971][ T7379]  ? rcu_read_unlock+0x17/0x60
[  102.083985][ T7379]  ? find_held_lock+0x2b/0x80
[  102.083995][ T7379]  ? rcu_read_unlock+0x17/0x60
[  102.084012][ T7379]  charge_memcg+0x19f/0x210
[  102.084026][ T7379]  __mem_cgroup_charge+0x2b/0x1c0
[  102.084043][ T7379]  shmem_alloc_and_add_folio+0x451/0xd40
[  102.084065][ T7379]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  102.084085][ T7379]  ? shmem_allowable_huge_orders+0x2bd/0x400
[  102.084100][ T7379]  shmem_get_folio_gfp+0x6ab/0x1900
[  102.084114][ T7379]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  102.084127][ T7379]  ? timestamp_truncate+0x22e/0x2f0
[  102.084145][ T7379]  shmem_write_begin+0x1a4/0x420
[  102.084237][ T7379]  ? __pfx_shmem_write_begin+0x10/0x10
[  102.084249][ T7379]  ? rcu_is_watching+0x12/0xc0
[  102.084266][ T7379]  ? balance_dirty_pages_ratelimited_flags+0x91/0x1170
[  102.084283][ T7379]  generic_perform_write+0x292/0xa40
[  102.084304][ T7379]  ? __pfx_generic_perform_write+0x10/0x10
[  102.084320][ T7379]  ? __mark_inode_dirty+0x55c/0x1720
[  102.084335][ T7379]  ? mnt_put_write_access_file+0x4e/0x100
[  102.084350][ T7379]  ? file_update_time_flags+0x373/0x500
[  102.084370][ T7379]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  102.084383][ T7379]  shmem_file_write_iter+0x10e/0x140
[  102.084398][ T7379]  __kernel_write_iter+0x2ac/0x920
[  102.084412][ T7379]  ? __pfx___kernel_write_iter+0x10/0x10
[  102.084425][ T7379]  ? __up_read+0x2c1/0x6e0
[  102.084443][ T7379]  ? dump_user_range+0x65e/0xad0
[  102.084459][ T7379]  dump_user_range+0x3f9/0xad0
[  102.084474][ T7379]  ? __pfx_dump_user_range+0x10/0x10
[  102.084491][ T7379]  ? __pfx_writenote+0x10/0x10
[  102.084507][ T7379]  elf_core_dump+0x2d5f/0x3d10
[  102.084538][ T7379]  ? __pfx_elf_core_dump+0x10/0x10
[  102.084552][ T7379]  ? kasan_save_stack+0x3f/0x50
[  102.084564][ T7379]  ? kasan_save_track+0x14/0x30
[  102.084574][ T7379]  ? __kasan_kmalloc+0xaa/0xb0
[  102.084584][ T7379]  ? __kvmalloc_node_noprof+0x360/0xa00
[  102.084596][ T7379]  ? irqentry_exit+0x39e/0x970
[  102.084612][ T7379]  ? asm_exc_page_fault+0x26/0x30
[  102.084624][ T7379]  ? 0xffffffffff600000
[  102.084654][ T7379]  ? vfs_coredump+0x2947/0x5720
[  102.084666][ T7379]  vfs_coredump+0x2947/0x5720
[  102.084683][ T7379]  ? __pfx_vfs_coredump+0x10/0x10
[  102.084697][ T7379]  ? __lock_acquire+0x4a5/0x2630
[  102.084716][ T7379]  ? lock_acquire+0x1b1/0x370
[  102.084735][ T7379]  ? is_bpf_text_address+0x8a/0x1a0
[  102.084750][ T7379]  ? bpf_ksym_find+0x128/0x1c0
[  102.084770][ T7379]  ? __kernel_text_address+0xd/0x30
[  102.084784][ T7379]  ? unwind_get_return_address+0x59/0xa0
[  102.084801][ T7379]  ? arch_stack_walk+0xa6/0xf0
[  102.084821][ T7379]  ? __sigqueue_free+0xbe/0x2a0
[  102.084833][ T7379]  ? stack_trace_save+0x8e/0xc0
[  102.084844][ T7379]  ? __pfx_stack_trace_save+0x10/0x10
[  102.084856][ T7379]  ? stack_depot_save_flags+0x27/0x9d0
[  102.084867][ T7379]  ? __lock_acquire+0x4a5/0x2630
[  102.084903][ T7379]  ? proc_coredump_connector+0x2d3/0x4f0
[  102.084919][ T7379]  ? __pfx_proc_coredump_connector+0x10/0x10
[  102.084936][ T7379]  ? rcu_is_watching+0x12/0xc0
[  102.084955][ T7379]  get_signal+0x1f2a/0x21e0
[  102.084981][ T7379]  ? __pfx_get_signal+0x10/0x10
[  102.084997][ T7379]  ? __pfx_force_sig_fault+0x10/0x10
[  102.085016][ T7379]  arch_do_signal_or_restart+0x91/0x7e0
[  102.085035][ T7379]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  102.085058][ T7379]  ? rcu_is_watching+0x12/0xc0
[  102.085076][ T7379]  irqentry_exit+0x39e/0x970
[  102.085095][ T7379]  asm_exc_page_fault+0x26/0x30
[  102.085106][ T7379] RIP: 0033:0x7ff34659ce59
[  102.085118][ T7379] Code: Unable to access opcode bytes at 0x7ff34659ce2f.
[  102.085123][ T7379] RSP: 002b:00007ff3447d4fd8 EFLAGS: 00010206
[  102.085132][ T7379] RAX: 0000000000000000 RBX: 00007ff346816090 RCX: 00007ff34659ce59
[  102.085139][ T7379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000088200
[  102.085145][ T7379] RBP: 00007ff346632d6f R08: 0000000000000000 R09: 0000000000000000
[  102.085151][ T7379] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  102.085157][ T7379] R13: 00007ff346816128 R14: 00007ff346816090 R15: 00007ffc6f808998
[  102.085171][ T7379]  </TASK>
[  102.085175][ T7379] memory: usage 306828kB, limit 307200kB, failcnt 26690
[  102.250615][ T7379] memory+swap: usage 414868kB, limit 9007199254740988kB, failcnt 0
[  102.253224][ T7379] kmem: usage 4808kB, limit 9007199254740988kB, failcnt 0
[  102.255600][ T7379] Memory cgroup stats for /syz1:
[  102.255683][ T7379] cache 305856512
[  102.258485][ T7379] rss 81920
[  102.259580][ T7379] rss_huge 0
[  102.260607][ T7379] shmem 305856512
[  102.261827][ T7379] mapped_file 0
[  102.263018][ T7379] dirty 0
[  102.264016][ T7379] writeback 0
[  102.265145][ T7379] workingset_refault_anon 15
[  102.266699][ T7379] workingset_refault_file 258
[  102.268227][ T7379] swap 113569792
[  102.269442][ T7379] swapcached 143486976
[  102.270771][ T7379] pgpgin 182193
[  102.271936][ T7379] pgpgout 107483
[  102.273049][ T7379] pgfault 36464
[  102.274212][ T7379] pgmajfault 19
[  102.275364][ T7379] inactive_anon 65986560
[  102.276816][ T7379] active_anon 239112192
[  102.278126][ T7379] inactive_file 0
[  102.279324][ T7379] active_file 0
[  102.280488][ T7379] unevictable 0
[  102.281617][ T7379] hierarchical_memory_limit 314572800
[  102.283289][ T7379] hierarchical_memsw_limit 9223372036854771712
[  102.285261][ T7379] total_cache 305856512
[  102.286618][ T7379] total_rss 81920
[  102.419374][ T7379] total_rss_huge 0
[  102.420695][ T7379] total_shmem 305856512
[  102.429090][ T7379] total_mapped_file 0
[  102.430460][ T7379] total_dirty 0
[  102.454004][ T7379] total_writeback 0
[  102.455305][ T7379] total_workingset_refault_anon 15
[  102.463838][ T7379] total_workingset_refault_file 258
[  102.465537][ T7379] total_swap 113569792
[  102.480241][ T7379] total_swapcached 143486976
[  102.481765][ T7379] total_pgpgin 182193
[  102.496149][ T7379] total_pgpgout 107483
[  102.497510][ T7379] total_pgfault 36464
[  102.508770][ T7379] total_pgmajfault 19
[  102.510113][ T7379] total_inactive_anon 65986560
[  102.516684][ T7379] total_active_anon 239112192
[  102.518285][ T7379] total_inactive_file 0
[  102.527382][ T7379] total_active_file 0
[  102.528597][ T7379] total_unevictable 0
[  102.541894][ T7379] anon_cost 0
[  102.543111][ T7379] file_cost 0
[  102.574221][ T7379] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.397,pid=7369,uid=0
[  102.650778][ T7379] Memory cgroup out of memory: Killed process 7369 (syz.1.397) total-vm:49268kB, anon-rss:0kB, file-rss:34496kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000
[  102.698899][    C0] net_ratelimit: 74256 callbacks suppressed
[  102.698913][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  102.699037][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  102.700969][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  102.704868][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  102.708291][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  102.711918][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  102.715535][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  102.719144][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  102.722787][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  102.726495][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  102.777576][ T7551] overlay: filesystem on ./file0 not supported as upperdir
[  103.060829][ T7396] syz.1.397 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  103.077812][ T7396] CPU: 1 UID: 0 PID: 7396 Comm: syz.1.397 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  103.077830][ T7396] Tainted: [L]=SOFTLOCKUP
[  103.077834][ T7396] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  103.077845][ T7396] Call Trace:
[  103.077850][ T7396]  <TASK>
[  103.077854][ T7396]  dump_stack_lvl+0x100/0x190
[  103.077870][ T7396]  dump_header+0xfb/0x606
[  103.077883][ T7396]  oom_kill_process.cold+0xd/0x330
[  103.077896][ T7396]  out_of_memory+0x340/0x14f0
[  103.077918][ T7396]  ? __pfx_out_of_memory+0x10/0x10
[  103.077940][ T7396]  mem_cgroup_out_of_memory+0xc6/0x130
[  103.077958][ T7396]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  103.077975][ T7396]  ? find_held_lock+0x2b/0x80
[  103.077988][ T7396]  ? do_raw_spin_unlock+0x145/0x1e0
[  103.078006][ T7396]  ? _raw_spin_unlock+0x28/0x50
[  103.078023][ T7396]  try_charge_memcg+0x6e5/0xdf0
[  103.078040][ T7396]  ? __pfx_try_charge_memcg+0x10/0x10
[  103.078053][ T7396]  ? find_held_lock+0x2b/0x80
[  103.078063][ T7396]  ? rcu_read_unlock+0x17/0x60
[  103.078077][ T7396]  ? rcu_read_unlock+0x17/0x60
[  103.078091][ T7396]  ? find_held_lock+0x2b/0x80
[  103.078102][ T7396]  ? rcu_read_unlock+0x17/0x60
[  103.078118][ T7396]  charge_memcg+0x19f/0x210
[  103.078145][ T7396]  __mem_cgroup_charge+0x2b/0x1c0
[  103.078163][ T7396]  shmem_alloc_and_add_folio+0x451/0xd40
[  103.078185][ T7396]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  103.078205][ T7396]  ? shmem_allowable_huge_orders+0x2bd/0x400
[  103.078220][ T7396]  shmem_get_folio_gfp+0x6ab/0x1900
[  103.078235][ T7396]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  103.078247][ T7396]  ? timestamp_truncate+0x22e/0x2f0
[  103.078266][ T7396]  shmem_write_begin+0x1a4/0x420
[  103.078279][ T7396]  ? __pfx_shmem_write_begin+0x10/0x10
[  103.078290][ T7396]  ? rcu_is_watching+0x12/0xc0
[  103.078308][ T7396]  ? balance_dirty_pages_ratelimited_flags+0x91/0x1170
[  103.078325][ T7396]  generic_perform_write+0x292/0xa40
[  103.078346][ T7396]  ? __pfx_generic_perform_write+0x10/0x10
[  103.078362][ T7396]  ? __mark_inode_dirty+0x55c/0x1720
[  103.078376][ T7396]  ? mnt_put_write_access_file+0x4e/0x100
[  103.078393][ T7396]  ? file_update_time_flags+0x373/0x500
[  103.078412][ T7396]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  103.078426][ T7396]  shmem_file_write_iter+0x10e/0x140
[  103.078440][ T7396]  __kernel_write_iter+0x2ac/0x920
[  103.078455][ T7396]  ? __pfx___kernel_write_iter+0x10/0x10
[  103.078469][ T7396]  ? __up_read+0x2c1/0x6e0
[  103.078486][ T7396]  ? dump_user_range+0x65e/0xad0
[  103.078499][ T7396]  ? copy_mc_enhanced_fast_string+0x6/0xf
[  103.078515][ T7396]  dump_user_range+0x3f9/0xad0
[  103.078530][ T7396]  ? __pfx_dump_user_range+0x10/0x10
[  103.078548][ T7396]  ? __pfx_writenote+0x10/0x10
[  103.078565][ T7396]  elf_core_dump+0x2d5f/0x3d10
[  103.078586][ T7396]  ? __pfx_elf_core_dump+0x10/0x10
[  103.078600][ T7396]  ? kasan_save_stack+0x3f/0x50
[  103.078611][ T7396]  ? kasan_save_track+0x14/0x30
[  103.078621][ T7396]  ? __kasan_kmalloc+0xaa/0xb0
[  103.078631][ T7396]  ? __kvmalloc_node_noprof+0x360/0xa00
[  103.078644][ T7396]  ? irqentry_exit+0x39e/0x970
[  103.078660][ T7396]  ? asm_exc_page_fault+0x26/0x30
[  103.078672][ T7396]  ? 0xffffffffff600000
[  103.078704][ T7396]  ? vfs_coredump+0x2947/0x5720
[  103.078716][ T7396]  vfs_coredump+0x2947/0x5720
[  103.078734][ T7396]  ? __pfx_vfs_coredump+0x10/0x10
[  103.078747][ T7396]  ? __lock_acquire+0x4a5/0x2630
[  103.078767][ T7396]  ? lock_acquire+0x1b1/0x370
[  103.078787][ T7396]  ? is_bpf_text_address+0x8a/0x1a0
[  103.078801][ T7396]  ? bpf_ksym_find+0x128/0x1c0
[  103.078821][ T7396]  ? __kernel_text_address+0xd/0x30
[  103.078836][ T7396]  ? unwind_get_return_address+0x59/0xa0
[  103.078857][ T7396]  ? arch_stack_walk+0xa6/0xf0
[  103.078877][ T7396]  ? __sigqueue_free+0xbe/0x2a0
[  103.078889][ T7396]  ? stack_trace_save+0x8e/0xc0
[  103.078900][ T7396]  ? __pfx_stack_trace_save+0x10/0x10
[  103.078912][ T7396]  ? stack_depot_save_flags+0x27/0x9d0
[  103.078923][ T7396]  ? __lock_acquire+0x4a5/0x2630
[  103.078960][ T7396]  ? proc_coredump_connector+0x2d3/0x4f0
[  103.078976][ T7396]  ? __pfx_proc_coredump_connector+0x10/0x10
[  103.078995][ T7396]  ? rcu_is_watching+0x12/0xc0
[  103.079014][ T7396]  get_signal+0x1f2a/0x21e0
[  103.079036][ T7396]  ? __pfx_get_signal+0x10/0x10
[  103.079052][ T7396]  ? __pfx_force_sig_fault+0x10/0x10
[  103.079072][ T7396]  arch_do_signal_or_restart+0x91/0x7e0
[  103.079091][ T7396]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  103.079114][ T7396]  ? rcu_is_watching+0x12/0xc0
[  103.079133][ T7396]  irqentry_exit+0x39e/0x970
[  103.079152][ T7396]  asm_exc_page_fault+0x26/0x30
[  103.079163][ T7396] RIP: 0033:0x7ff34659ce59
[  103.079175][ T7396] Code: Unable to access opcode bytes at 0x7ff34659ce2f.
[  103.079180][ T7396] RSP: 002b:00007ff3447d4fd8 EFLAGS: 00010206
[  103.079190][ T7396] RAX: 0000000000000000 RBX: 00007ff346816090 RCX: 00007ff34659ce59
[  103.079196][ T7396] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000088200
[  103.079203][ T7396] RBP: 00007ff346632d6f R08: 0000000000000000 R09: 0000000000000000
[  103.079209][ T7396] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  103.079215][ T7396] R13: 00007ff346816128 R14: 00007ff346816090 R15: 00007ffc6f808998
[  103.079229][ T7396]  </TASK>
[  103.110793][ T5843] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  103.122004][ T7396] memory: usage 307200kB, limit 307200kB, failcnt 31427
[  103.236361][ T7396] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0
[  103.238719][ T7396] kmem: usage 4940kB, limit 9007199254740988kB, failcnt 0
[  103.240949][ T7396] Memory cgroup stats for /syz1:
[  103.241021][ T7396] cache 309284864
[  103.243831][ T7396] rss 229376
[  103.245071][ T7396] rss_huge 0
[  103.246089][ T7396] shmem 309284864
[  103.247200][ T7396] mapped_file 0
[  103.248291][ T7396] dirty 0
[  103.249208][ T7396] writeback 0
[  103.250243][ T7396] workingset_refault_anon 15
[  103.251752][ T7396] workingset_refault_file 258
[  103.253239][ T7396] swap 127995904
[  103.254490][ T7396] swapcached 171069440
[  103.256013][ T7396] pgpgin 196128
[  103.257142][ T7396] pgpgout 120563
[  103.258250][ T7396] pgfault 37434
[  103.259350][ T7396] pgmajfault 19
[  103.260433][ T7396] inactive_anon 74547200
[  103.261730][ T7396] active_anon 234958848
[  103.263087][ T7396] inactive_file 0
[  103.264597][ T7396] active_file 0
[  103.265694][ T7396] unevictable 0
[  103.266773][ T7396] hierarchical_memory_limit 314572800
[  103.268521][ T7396] hierarchical_memsw_limit 9223372036854771712
[  103.270388][ T7396] total_cache 309284864
[  103.271677][ T7396] total_rss 229376
[  103.272833][ T7396] total_rss_huge 0
[  103.274088][ T7396] total_shmem 309284864
[  103.275376][ T7396] total_mapped_file 0
[  103.276600][ T7396] total_dirty 0
[  103.277677][ T7396] total_writeback 0
[  103.278855][ T7396] total_workingset_refault_anon 15
[  103.280390][ T7396] total_workingset_refault_file 258
[  103.281972][ T7396] total_swap 127995904
[  103.283262][ T7396] total_swapcached 171069440
[  103.284961][ T7396] total_pgpgin 196128
[  103.286192][ T7396] total_pgpgout 120563
[  103.287451][ T7396] total_pgfault 37434
[  103.288672][ T7396] total_pgmajfault 19
[  103.289908][ T7396] total_inactive_anon 74547200
[  103.291378][ T7396] total_active_anon 234958848
[  103.292819][ T7396] total_inactive_file 0
[  103.294140][ T7396] total_active_file 0
[  103.295416][ T7396] total_unevictable 0
[  103.296601][ T7396] anon_cost 0
[  103.297600][ T7396] file_cost 0
[  103.298617][ T7396] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.397,pid=7370,uid=0
[  103.304345][ T7396] Memory cgroup out of memory: Killed process 7370 (syz.1.397) total-vm:49268kB, anon-rss:0kB, file-rss:34432kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000
[  103.310897][ T5843] usb 6-1: config index 0 descriptor too short (expected 74, got 45)
[  103.314589][ T5843] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64
[  103.319875][ T5843] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64
[  103.324810][ T5843] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  103.330998][ T5843] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  103.335834][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.381347][ T7393] syz.1.397 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  103.398556][ T7393] CPU: 2 UID: 0 PID: 7393 Comm: syz.1.397 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  103.398576][ T7393] Tainted: [L]=SOFTLOCKUP
[  103.398580][ T7393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  103.398587][ T7393] Call Trace:
[  103.398591][ T7393]  <TASK>
[  103.398595][ T7393]  dump_stack_lvl+0x100/0x190
[  103.398612][ T7393]  dump_header+0xfb/0x606
[  103.398625][ T7393]  oom_kill_process.cold+0xd/0x330
[  103.398638][ T7393]  out_of_memory+0x340/0x14f0
[  103.398659][ T7393]  ? __pfx_out_of_memory+0x10/0x10
[  103.398695][ T7393]  mem_cgroup_out_of_memory+0xc6/0x130
[  103.398713][ T7393]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  103.398730][ T7393]  ? find_held_lock+0x2b/0x80
[  103.398744][ T7393]  ? do_raw_spin_unlock+0x145/0x1e0
[  103.398761][ T7393]  ? _raw_spin_unlock+0x28/0x50
[  103.398778][ T7393]  try_charge_memcg+0x6e5/0xdf0
[  103.398795][ T7393]  ? __pfx_try_charge_memcg+0x10/0x10
[  103.398808][ T7393]  ? find_held_lock+0x2b/0x80
[  103.398818][ T7393]  ? rcu_read_unlock+0x17/0x60
[  103.398832][ T7393]  ? rcu_read_unlock+0x17/0x60
[  103.398846][ T7393]  ? find_held_lock+0x2b/0x80
[  103.398856][ T7393]  ? rcu_read_unlock+0x17/0x60
[  103.398873][ T7393]  charge_memcg+0x19f/0x210
[  103.398887][ T7393]  __mem_cgroup_charge+0x2b/0x1c0
[  103.398903][ T7393]  shmem_alloc_and_add_folio+0x451/0xd40
[  103.398926][ T7393]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  103.398949][ T7393]  ? shmem_allowable_huge_orders+0x2bd/0x400
[  103.398964][ T7393]  shmem_get_folio_gfp+0x6ab/0x1900
[  103.398978][ T7393]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  103.398991][ T7393]  ? timestamp_truncate+0x22e/0x2f0
[  103.399009][ T7393]  shmem_write_begin+0x1a4/0x420
[  103.399022][ T7393]  ? __pfx_shmem_write_begin+0x10/0x10
[  103.399033][ T7393]  ? rcu_is_watching+0x12/0xc0
[  103.399050][ T7393]  ? balance_dirty_pages_ratelimited_flags+0x91/0x1170
[  103.399067][ T7393]  generic_perform_write+0x292/0xa40
[  103.399088][ T7393]  ? __pfx_generic_perform_write+0x10/0x10
[  103.399104][ T7393]  ? __mark_inode_dirty+0x55c/0x1720
[  103.399119][ T7393]  ? mnt_put_write_access_file+0x4e/0x100
[  103.399135][ T7393]  ? file_update_time_flags+0x373/0x500
[  103.399154][ T7393]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  103.399168][ T7393]  shmem_file_write_iter+0x10e/0x140
[  103.399182][ T7393]  __kernel_write_iter+0x2ac/0x920
[  103.399197][ T7393]  ? __pfx___kernel_write_iter+0x10/0x10
[  103.399211][ T7393]  ? __up_read+0x2c1/0x6e0
[  103.399228][ T7393]  ? dump_user_range+0x65e/0xad0
[  103.399240][ T7393]  ? copy_mc_enhanced_fast_string+0x6/0xf
[  103.399256][ T7393]  dump_user_range+0x3f9/0xad0
[  103.399272][ T7393]  ? __pfx_dump_user_range+0x10/0x10
[  103.399289][ T7393]  ? __pfx_writenote+0x10/0x10
[  103.399306][ T7393]  elf_core_dump+0x2d5f/0x3d10
[  103.399346][ T7393]  ? __pfx_elf_core_dump+0x10/0x10
[  103.399362][ T7393]  ? kasan_save_stack+0x3f/0x50
[  103.399373][ T7393]  ? kasan_save_track+0x14/0x30
[  103.399384][ T7393]  ? __kasan_kmalloc+0xaa/0xb0
[  103.399394][ T7393]  ? __kvmalloc_node_noprof+0x360/0xa00
[  103.399405][ T7393]  ? irqentry_exit+0x39e/0x970
[  103.399496][ T7393]  ? asm_exc_page_fault+0x26/0x30
[  103.399509][ T7393]  ? 0xffffffffff600000
[  103.399541][ T7393]  ? vfs_coredump+0x2947/0x5720
[  103.399552][ T7393]  vfs_coredump+0x2947/0x5720
[  103.399570][ T7393]  ? __pfx_vfs_coredump+0x10/0x10
[  103.399584][ T7393]  ? __lock_acquire+0x4a5/0x2630
[  103.399603][ T7393]  ? lock_acquire+0x1b1/0x370
[  103.399623][ T7393]  ? is_bpf_text_address+0x8a/0x1a0
[  103.399638][ T7393]  ? bpf_ksym_find+0x128/0x1c0
[  103.399658][ T7393]  ? __kernel_text_address+0xd/0x30
[  103.399673][ T7393]  ? unwind_get_return_address+0x59/0xa0
[  103.399690][ T7393]  ? arch_stack_walk+0xa6/0xf0
[  103.399709][ T7393]  ? __sigqueue_free+0xbe/0x2a0
[  103.399722][ T7393]  ? stack_trace_save+0x8e/0xc0
[  103.399734][ T7393]  ? __pfx_stack_trace_save+0x10/0x10
[  103.399746][ T7393]  ? stack_depot_save_flags+0x27/0x9d0
[  103.399758][ T7393]  ? __lock_acquire+0x4a5/0x2630
[  103.399794][ T7393]  ? proc_coredump_connector+0x2d3/0x4f0
[  103.399811][ T7393]  ? __pfx_proc_coredump_connector+0x10/0x10
[  103.399829][ T7393]  ? rcu_is_watching+0x12/0xc0
[  103.399848][ T7393]  get_signal+0x1f2a/0x21e0
[  103.399870][ T7393]  ? __pfx_get_signal+0x10/0x10
[  103.399886][ T7393]  ? __pfx_force_sig_fault+0x10/0x10
[  103.399906][ T7393]  arch_do_signal_or_restart+0x91/0x7e0
[  103.399924][ T7393]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  103.399951][ T7393]  ? rcu_is_watching+0x12/0xc0
[  103.399972][ T7393]  irqentry_exit+0x39e/0x970
[  103.399991][ T7393]  asm_exc_page_fault+0x26/0x30
[  103.400002][ T7393] RIP: 0033:0x7ff34659ce59
[  103.400015][ T7393] Code: Unable to access opcode bytes at 0x7ff34659ce2f.
[  103.400020][ T7393] RSP: 002b:00007ff3447d4fd8 EFLAGS: 00010206
[  103.400029][ T7393] RAX: 0000000000000000 RBX: 00007ff346816090 RCX: 00007ff34659ce59
[  103.400036][ T7393] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000088200
[  103.400042][ T7393] RBP: 00007ff346632d6f R08: 0000000000000000 R09: 0000000000000000
[  103.400048][ T7393] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  103.400054][ T7393] R13: 00007ff346816128 R14: 00007ff346816090 R15: 00007ffc6f808998
[  103.400069][ T7393]  </TASK>
[  103.400109][ T7393] memory: usage 306768kB, limit 307200kB, failcnt 32107
[  103.728883][ T5843] usb 6-1: GET_CAPABILITIES returned 0
[  103.730688][ T5843] usbtmc 6-1:16.0: can't read capabilities
[  103.939217][ T7393] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0
[  103.941814][ T7393] kmem: usage 4860kB, limit 9007199254740988kB, failcnt 0
[  103.944104][ T7393] Memory cgroup stats for /syz1:
[  103.944176][ T7393] cache 309354496
[  103.949543][ T7393] rss 212992
[  103.950660][ T7393] rss_huge 0
[  103.951795][ T7393] shmem 309354496
[  103.953045][ T7393] mapped_file 0
[  103.954199][ T7393] dirty 0
[  103.955195][ T7393] writeback 0
[  103.956761][ T7393] workingset_refault_anon 15
[  103.958242][ T7393] workingset_refault_file 258
[  103.960061][ T7393] swap 127995904
[  103.961328][ T7393] swapcached 185671680
[  103.962824][ T7393] pgpgin 204743
[  103.964070][ T7393] pgpgout 129165
[  103.965268][ T7393] pgfault 37975
[  103.966430][ T7393] pgmajfault 19
[  103.968055][ T7393] inactive_anon 271151104
[  103.969457][ T7393] active_anon 38293504
[  103.970785][ T7393] inactive_file 0
[  103.971972][ T7393] active_file 0
[  103.973074][ T7393] unevictable 0
[  103.974238][ T7393] hierarchical_memory_limit 314572800
[  103.976074][ T7393] hierarchical_memsw_limit 9223372036854771712
[  103.978428][ T7393] total_cache 309354496
[  103.979812][ T7393] total_rss 212992
[  103.981090][ T7393] total_rss_huge 0
[  103.982325][ T7393] total_shmem 309354496
[  103.983699][ T7393] total_mapped_file 0
[  103.985082][ T7393] total_dirty 0
[  103.986383][ T7393] total_writeback 0
[  103.988015][ T7393] total_workingset_refault_anon 15
[  103.990532][ T7393] total_workingset_refault_file 258
[  103.992262][ T7393] total_swap 127995904
[  103.993629][ T7393] total_swapcached 185671680
[  103.995129][ T7393] total_pgpgin 204743
[  103.996535][ T7393] total_pgpgout 129165
[  103.997867][ T7393] total_pgfault 37975
[  104.001314][ T7393] total_pgmajfault 19
[  104.002618][ T7393] total_inactive_anon 271151104
[  104.004204][ T7393] total_active_anon 38293504
[  104.005710][ T7393] total_inactive_file 0
[  104.007064][ T7393] total_active_file 0
[  104.008453][ T7393] total_unevictable 0
[  104.009765][ T7393] anon_cost 0
[  104.011340][ T7393] file_cost 0
[  104.012467][ T7393] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.397,pid=7378,uid=0
[  104.018549][ T7393] Memory cgroup out of memory: Killed process 7378 (syz.1.397) total-vm:49268kB, anon-rss:0kB, file-rss:28288kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000
[  104.032501][ T7390] syz.1.397 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  104.046740][ T7390] CPU: 2 UID: 0 PID: 7390 Comm: syz.1.397 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  104.046844][ T7390] Tainted: [L]=SOFTLOCKUP
[  104.046848][ T7390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  104.046855][ T7390] Call Trace:
[  104.046859][ T7390]  <TASK>
[  104.046863][ T7390]  dump_stack_lvl+0x100/0x190
[  104.046880][ T7390]  dump_header+0xfb/0x606
[  104.046893][ T7390]  oom_kill_process.cold+0xd/0x330
[  104.046907][ T7390]  out_of_memory+0x340/0x14f0
[  104.046932][ T7390]  ? __pfx_out_of_memory+0x10/0x10
[  104.046954][ T7390]  mem_cgroup_out_of_memory+0xc6/0x130
[  104.046972][ T7390]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  104.046989][ T7390]  ? find_held_lock+0x2b/0x80
[  104.047002][ T7390]  ? do_raw_spin_unlock+0x145/0x1e0
[  104.047019][ T7390]  ? _raw_spin_unlock+0x28/0x50
[  104.047036][ T7390]  try_charge_memcg+0x6e5/0xdf0
[  104.047052][ T7390]  ? __pfx_try_charge_memcg+0x10/0x10
[  104.047066][ T7390]  ? find_held_lock+0x2b/0x80
[  104.047075][ T7390]  ? rcu_read_unlock+0x17/0x60
[  104.047089][ T7390]  ? rcu_read_unlock+0x17/0x60
[  104.047103][ T7390]  ? find_held_lock+0x2b/0x80
[  104.047114][ T7390]  ? rcu_read_unlock+0x17/0x60
[  104.047130][ T7390]  charge_memcg+0x19f/0x210
[  104.047145][ T7390]  __mem_cgroup_charge+0x2b/0x1c0
[  104.047161][ T7390]  shmem_alloc_and_add_folio+0x451/0xd40
[  104.047184][ T7390]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  104.047204][ T7390]  ? shmem_allowable_huge_orders+0x2bd/0x400
[  104.047219][ T7390]  shmem_get_folio_gfp+0x6ab/0x1900
[  104.047233][ T7390]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  104.047248][ T7390]  shmem_write_begin+0x1a4/0x420
[  104.047264][ T7390]  ? __pfx_shmem_write_begin+0x10/0x10
[  104.047276][ T7390]  ? balance_dirty_pages_ratelimited_flags+0x91/0x1170
[  104.047291][ T7390]  ? lockdep_hardirqs_on+0x78/0x100
[  104.047309][ T7390]  generic_perform_write+0x292/0xa40
[  104.047350][ T7390]  ? __pfx_generic_perform_write+0x10/0x10
[  104.047369][ T7390]  ? file_update_time_flags+0x373/0x500
[  104.047389][ T7390]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  104.047402][ T7390]  shmem_file_write_iter+0x10e/0x140
[  104.047417][ T7390]  __kernel_write_iter+0x2ac/0x920
[  104.047432][ T7390]  ? __pfx___kernel_write_iter+0x10/0x10
[  104.047445][ T7390]  ? __up_read+0x2c1/0x6e0
[  104.047462][ T7390]  ? dump_user_range+0x65e/0xad0
[  104.047475][ T7390]  ? copy_mc_enhanced_fast_string+0x6/0xf
[  104.047491][ T7390]  dump_user_range+0x3f9/0xad0
[  104.047506][ T7390]  ? __pfx_dump_user_range+0x10/0x10
[  104.047523][ T7390]  ? __pfx_writenote+0x10/0x10
[  104.047540][ T7390]  elf_core_dump+0x2d5f/0x3d10
[  104.047561][ T7390]  ? __pfx_elf_core_dump+0x10/0x10
[  104.047575][ T7390]  ? kasan_save_stack+0x3f/0x50
[  104.047586][ T7390]  ? kasan_save_track+0x14/0x30
[  104.047596][ T7390]  ? __kasan_kmalloc+0xaa/0xb0
[  104.047606][ T7390]  ? __kvmalloc_node_noprof+0x360/0xa00
[  104.047618][ T7390]  ? irqentry_exit+0x39e/0x970
[  104.047634][ T7390]  ? asm_exc_page_fault+0x26/0x30
[  104.047646][ T7390]  ? 0xffffffffff600000
[  104.047677][ T7390]  ? vfs_coredump+0x2947/0x5720
[  104.047689][ T7390]  vfs_coredump+0x2947/0x5720
[  104.047706][ T7390]  ? __pfx_vfs_coredump+0x10/0x10
[  104.047719][ T7390]  ? __lock_acquire+0x4a5/0x2630
[  104.047739][ T7390]  ? lock_acquire+0x1b1/0x370
[  104.047758][ T7390]  ? is_bpf_text_address+0x8a/0x1a0
[  104.047773][ T7390]  ? bpf_ksym_find+0x128/0x1c0
[  104.047793][ T7390]  ? __kernel_text_address+0xd/0x30
[  104.047808][ T7390]  ? unwind_get_return_address+0x59/0xa0
[  104.047825][ T7390]  ? arch_stack_walk+0xa6/0xf0
[  104.047845][ T7390]  ? __sigqueue_free+0xbe/0x2a0
[  104.047857][ T7390]  ? stack_trace_save+0x8e/0xc0
[  104.047868][ T7390]  ? __pfx_stack_trace_save+0x10/0x10
[  104.047880][ T7390]  ? stack_depot_save_flags+0x27/0x9d0
[  104.047891][ T7390]  ? __lock_acquire+0x4a5/0x2630
[  104.047930][ T7390]  ? proc_coredump_connector+0x2d3/0x4f0
[  104.047947][ T7390]  ? __pfx_proc_coredump_connector+0x10/0x10
[  104.047965][ T7390]  ? rcu_is_watching+0x12/0xc0
[  104.047984][ T7390]  get_signal+0x1f2a/0x21e0
[  104.048006][ T7390]  ? __pfx_get_signal+0x10/0x10
[  104.048022][ T7390]  ? __pfx_force_sig_fault+0x10/0x10
[  104.048042][ T7390]  arch_do_signal_or_restart+0x91/0x7e0
[  104.048060][ T7390]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  104.048083][ T7390]  ? rcu_is_watching+0x12/0xc0
[  104.048102][ T7390]  irqentry_exit+0x39e/0x970
[  104.048120][ T7390]  asm_exc_page_fault+0x26/0x30
[  104.048131][ T7390] RIP: 0033:0x7ff34659ce59
[  104.048144][ T7390] Code: Unable to access opcode bytes at 0x7ff34659ce2f.
[  104.048222][ T7390] RSP: 002b:00007ff3447d4fd8 EFLAGS: 00010206
[  104.048232][ T7390] RAX: 0000000000000000 RBX: 00007ff346816090 RCX: 00007ff34659ce59
[  104.048239][ T7390] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000088200
[  104.048245][ T7390] RBP: 00007ff346632d6f R08: 0000000000000000 R09: 0000000000000000
[  104.048251][ T7390] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  104.048258][ T7390] R13: 00007ff346816128 R14: 00007ff346816090 R15: 00007ffc6f808998
[  104.048272][ T7390]  </TASK>
[  104.048277][ T7390] memory: usage 306672kB, limit 307200kB, failcnt 34622
[  104.320325][ T7390] memory+swap: usage 418620kB, limit 9007199254740988kB, failcnt 0
[  104.323176][ T7390] kmem: usage 4860kB, limit 9007199254740988kB, failcnt 0
[  104.325641][ T7390] Memory cgroup stats for /syz1:
[  104.325724][ T7390] cache 302444544
[  104.328483][ T7390] rss 217088
[  104.329590][ T7390] rss_huge 0
[  104.330602][ T7390] shmem 302444544
[  104.332314][ T7390] mapped_file 0
[  104.333418][ T7390] dirty 0
[  104.334447][ T7390] writeback 0
[  104.336610][ T7390] workingset_refault_anon 16
[  104.338119][ T7390] workingset_refault_file 258
[  104.353607][ T7390] swap 121569280
[  104.354834][ T7390] swapcached 186535936
[  104.356096][ T7390] pgpgin 206669
[  104.357569][ T7390] pgpgout 132777
[  104.358705][ T7390] pgfault 38097
[  104.359934][ T7390] pgmajfault 20
[  104.361286][ T7390] inactive_anon 257331200
[  104.363020][ T7390] active_anon 45211648
[  104.364803][ T7390] inactive_file 0
[  104.366361][ T7390] active_file 0
[  104.367573][ T7390] unevictable 0
[  104.369804][ T7390] hierarchical_memory_limit 314572800
[  104.371857][ T7390] hierarchical_memsw_limit 9223372036854771712
[  104.373896][ T7390] total_cache 302444544
[  104.375325][ T7390] total_rss 217088
[  104.376578][ T7390] total_rss_huge 0
[  104.377789][ T7390] total_shmem 302444544
[  104.379825][ T7390] total_mapped_file 0
[  104.381094][ T7390] total_dirty 0
[  104.382239][ T7390] total_writeback 0
[  104.383464][ T7390] total_workingset_refault_anon 16
[  104.385034][ T7390] total_workingset_refault_file 258
[  104.386599][ T7390] total_swap 121569280
[  104.387826][ T7390] total_swapcached 186535936
[  104.389228][ T7390] total_pgpgin 206669
[  104.392706][ T7390] total_pgpgout 132777
[  104.394008][ T7390] total_pgfault 38097
[  104.395268][ T7390] total_pgmajfault 20
[  104.396517][ T7390] total_inactive_anon 257331200
[  104.398007][ T7390] total_active_anon 45211648
[  104.399606][ T7390] total_inactive_file 0
[  104.401419][ T7390] total_active_file 0
[  104.402713][ T7390] total_unevictable 0
[  104.403995][ T7390] anon_cost 0
[  104.405037][ T7390] file_cost 0
[  104.406073][ T7390] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.397,pid=7380,uid=0
[  104.410659][ T7390] Memory cgroup out of memory: Killed process 7380 (syz.1.397) total-vm:49268kB, anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000
[  104.454494][ T7374] syz.1.397 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  104.477367][ T7374] CPU: 1 UID: 0 PID: 7374 Comm: syz.1.397 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  104.477387][ T7374] Tainted: [L]=SOFTLOCKUP
[  104.477391][ T7374] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  104.477398][ T7374] Call Trace:
[  104.477402][ T7374]  <TASK>
[  104.477406][ T7374]  dump_stack_lvl+0x100/0x190
[  104.477426][ T7374]  dump_header+0xfb/0x606
[  104.477439][ T7374]  oom_kill_process.cold+0xd/0x330
[  104.477453][ T7374]  out_of_memory+0x340/0x14f0
[  104.477474][ T7374]  ? __pfx_out_of_memory+0x10/0x10
[  104.477495][ T7374]  mem_cgroup_out_of_memory+0xc6/0x130
[  104.477514][ T7374]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  104.477531][ T7374]  ? find_held_lock+0x2b/0x80
[  104.477544][ T7374]  ? do_raw_spin_unlock+0x145/0x1e0
[  104.477561][ T7374]  ? _raw_spin_unlock+0x28/0x50
[  104.477577][ T7374]  try_charge_memcg+0x6e5/0xdf0
[  104.477593][ T7374]  ? __pfx_try_charge_memcg+0x10/0x10
[  104.477607][ T7374]  ? find_held_lock+0x2b/0x80
[  104.477616][ T7374]  ? rcu_read_unlock+0x17/0x60
[  104.477630][ T7374]  ? rcu_read_unlock+0x17/0x60
[  104.477644][ T7374]  ? find_held_lock+0x2b/0x80
[  104.477655][ T7374]  ? rcu_read_unlock+0x17/0x60
[  104.477672][ T7374]  charge_memcg+0x19f/0x210
[  104.477686][ T7374]  __mem_cgroup_charge+0x2b/0x1c0
[  104.477702][ T7374]  shmem_alloc_and_add_folio+0x451/0xd40
[  104.477730][ T7374]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  104.477758][ T7374]  ? shmem_allowable_huge_orders+0x2bd/0x400
[  104.477784][ T7374]  shmem_get_folio_gfp+0x6ab/0x1900
[  104.477808][ T7374]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  104.477830][ T7374]  ? timestamp_truncate+0x22e/0x2f0
[  104.477850][ T7374]  shmem_write_begin+0x1a4/0x420
[  104.477862][ T7374]  ? __pfx_shmem_write_begin+0x10/0x10
[  104.477873][ T7374]  ? rcu_is_watching+0x12/0xc0
[  104.477891][ T7374]  ? balance_dirty_pages_ratelimited_flags+0x91/0x1170
[  104.477908][ T7374]  generic_perform_write+0x292/0xa40
[  104.477932][ T7374]  ? __pfx_generic_perform_write+0x10/0x10
[  104.477948][ T7374]  ? __mark_inode_dirty+0x55c/0x1720
[  104.477962][ T7374]  ? mnt_put_write_access_file+0x4e/0x100
[  104.477978][ T7374]  ? file_update_time_flags+0x373/0x500
[  104.477998][ T7374]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  104.478011][ T7374]  shmem_file_write_iter+0x10e/0x140
[  104.478026][ T7374]  __kernel_write_iter+0x2ac/0x920
[  104.478040][ T7374]  ? __pfx___kernel_write_iter+0x10/0x10
[  104.478053][ T7374]  ? __up_read+0x2c1/0x6e0
[  104.478070][ T7374]  ? dump_user_range+0x65e/0xad0
[  104.478083][ T7374]  ? copy_mc_enhanced_fast_string+0x6/0xf
[  104.478099][ T7374]  dump_user_range+0x3f9/0xad0
[  104.478115][ T7374]  ? __pfx_dump_user_range+0x10/0x10
[  104.478132][ T7374]  ? __pfx_writenote+0x10/0x10
[  104.478148][ T7374]  elf_core_dump+0x2d5f/0x3d10
[  104.478169][ T7374]  ? __pfx_elf_core_dump+0x10/0x10
[  104.478183][ T7374]  ? kasan_save_stack+0x3f/0x50
[  104.478194][ T7374]  ? kasan_save_track+0x14/0x30
[  104.478204][ T7374]  ? __kasan_kmalloc+0xaa/0xb0
[  104.478214][ T7374]  ? __kvmalloc_node_noprof+0x360/0xa00
[  104.478226][ T7374]  ? irqentry_exit+0x39e/0x970
[  104.478242][ T7374]  ? asm_exc_page_fault+0x26/0x30
[  104.478254][ T7374]  ? 0xffffffffff600000
[  104.478285][ T7374]  ? vfs_coredump+0x2947/0x5720
[  104.478296][ T7374]  vfs_coredump+0x2947/0x5720
[  104.478314][ T7374]  ? __pfx_vfs_coredump+0x10/0x10
[  104.478327][ T7374]  ? __lock_acquire+0x4a5/0x2630
[  104.478346][ T7374]  ? lock_acquire+0x1b1/0x370
[  104.478366][ T7374]  ? is_bpf_text_address+0x8a/0x1a0
[  104.478380][ T7374]  ? bpf_ksym_find+0x128/0x1c0
[  104.478400][ T7374]  ? __kernel_text_address+0xd/0x30
[  104.478415][ T7374]  ? unwind_get_return_address+0x59/0xa0
[  104.478436][ T7374]  ? arch_stack_walk+0xa6/0xf0
[  104.478456][ T7374]  ? __sigqueue_free+0xbe/0x2a0
[  104.478468][ T7374]  ? stack_trace_save+0x8e/0xc0
[  104.478479][ T7374]  ? __pfx_stack_trace_save+0x10/0x10
[  104.478491][ T7374]  ? stack_depot_save_flags+0x27/0x9d0
[  104.478502][ T7374]  ? __lock_acquire+0x4a5/0x2630
[  104.478538][ T7374]  ? proc_coredump_connector+0x2d3/0x4f0
[  104.478554][ T7374]  ? __pfx_proc_coredump_connector+0x10/0x10
[  104.478572][ T7374]  ? rcu_is_watching+0x12/0xc0
[  104.478591][ T7374]  get_signal+0x1f2a/0x21e0
[  104.478613][ T7374]  ? __pfx_get_signal+0x10/0x10
[  104.478629][ T7374]  ? __pfx_force_sig_fault+0x10/0x10
[  104.478648][ T7374]  arch_do_signal_or_restart+0x91/0x7e0
[  104.478667][ T7374]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  104.478702][ T7374]  ? rcu_is_watching+0x12/0xc0
[  104.478723][ T7374]  irqentry_exit+0x39e/0x970
[  104.478742][ T7374]  asm_exc_page_fault+0x26/0x30
[  104.478753][ T7374] RIP: 0033:0x7ff34659ce59
[  104.478765][ T7374] Code: Unable to access opcode bytes at 0x7ff34659ce2f.
[  104.478770][ T7374] RSP: 002b:00007ff3447d4fd8 EFLAGS: 00010206
[  104.478780][ T7374] RAX: 0000000000000000 RBX: 00007ff346816090 RCX: 00007ff34659ce59
[  104.478786][ T7374] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000088200
[  104.478793][ T7374] RBP: 00007ff346632d6f R08: 0000000000000000 R09: 0000000000000000
[  104.478799][ T7374] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  104.478806][ T7374] R13: 00007ff346816128 R14: 00007ff346816090 R15: 00007ffc6f808998
[  104.478820][ T7374]  </TASK>
[  104.478849][ T7374] memory: usage 306860kB, limit 307200kB, failcnt 34994
[  104.494611][ T7554] block nbd0: not configured, cannot reconfigure
[  104.614824][ T7374] memory+swap: usage 425168kB, limit 9007199254740988kB, failcnt 0
[  104.658147][ T7555] ------------[ cut here ]------------
[  104.667809][ T7555] kvm_is_error_gpa(gpa) == kvm_is_error_hva(uhva)
[  104.667818][ T7555] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1992/0x22c0, CPU#2: syz.2.443/7555
[  104.674628][ T7555] Modules linked in:
[  104.676042][ T7555] CPU: 2 UID: 0 PID: 7555 Comm: syz.2.443 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  104.679434][ T7555] Tainted: [L]=SOFTLOCKUP
[  104.680799][ T7555] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  104.684007][ T7555] RIP: 0010:__kvm_gpc_refresh+0x1992/0x22c0
[  104.685966][ T7555] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 26 08 00 00 48 8b 04 24 31 db 48 8b a8 08 01 00 00 e9 cf f0 ff ff e8 6f c5 85 00 90 <0f> 0b 90 e9 92 f7 ff ff e8 61 c5 85 00 48 85 db 0f 84 e9 ed ff ff
[  104.691981][ T7555] RSP: 0018:ffffc90004747250 EFLAGS: 00010283
[  104.693924][ T7555] RAX: 000000000000070b RBX: ffffffffffffffff RCX: ffffc9000c4a1000
[  104.696442][ T7555] RDX: 0000000000080000 RSI: ffffffff8182f911 RDI: ffff88802c3da540
[  104.698967][ T7555] RBP: ffffffffffffff01 R08: 0000000000000000 R09: 0000000000000001
[  104.701462][ T7555] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888000000000
[  104.704102][ T7555] R13: ffff888000000001 R14: ffff888000000000 R15: ffffc90004747468
[  104.706614][ T7555] FS:  00007f1b0bce36c0(0000) GS:ffff8880d657c000(0000) knlGS:0000000000000000
[  104.709425][ T7555] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  104.711553][ T7555] CR2: 000000110c397a09 CR3: 00000000352ec000 CR4: 0000000000352ef0
[  104.714139][ T7555] Call Trace:
[  104.715318][ T7555]  <TASK>
[  104.716322][ T7555]  ? find_held_lock+0x2b/0x80
[  104.717884][ T7555]  ? __pfx___mutex_lock+0x10/0x10
[  104.719889][ T7555]  ? __lock_acquire+0x4a5/0x2630
[  104.722195][ T7555]  ? __pfx___kvm_gpc_refresh+0x10/0x10
[  104.724721][ T7555]  kvm_gpc_refresh+0xc9/0x170
[  104.726925][ T7555]  kvm_xen_set_evtchn.part.0+0x168/0x230
[  104.729483][ T7555]  ? kvm_xen_set_evtchn.part.0+0x153/0x230
[  104.732116][ T7555]  kvm_xen_hvm_evtchn_send+0x22f/0x290
[  104.734574][ T7555]  ? __pfx_kvm_xen_hvm_evtchn_send+0x10/0x10
[  104.737347][ T7555]  kvm_arch_vm_ioctl+0x13ac/0x18d0
[  104.739589][ T7555]  ? arch_stack_walk+0xa6/0xf0
[  104.741792][ T7555]  ? __pfx_kvm_arch_vm_ioctl+0x10/0x10
[  104.744269][ T7555]  ? __lock_acquire+0x4a5/0x2630
[  104.746469][ T7555]  ? __lock_acquire+0x4a5/0x2630
[  104.748819][ T7555]  ? __lock_acquire+0x4a5/0x2630
[  104.751094][ T7555]  ? __lock_acquire+0x4a5/0x2630
[  104.753291][ T7555]  ? is_bpf_text_address+0x8a/0x1a0
[  104.755672][ T7555]  ? bpf_ksym_find+0x128/0x1c0
[  104.758601][ T7555]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  104.761341][ T7555]  ? is_bpf_text_address+0x94/0x1a0
[  104.763708][ T7555]  ? kernel_text_address+0x8d/0x100
[  104.766024][ T7555]  ? __pfx_widen_string+0x10/0x10
[  104.768354][ T7555]  ? __kernel_text_address+0xd/0x30
[  104.770196][ T7555]  ? unwind_get_return_address+0x59/0xa0
[  104.772082][ T7555]  ? arch_stack_walk+0xa6/0xf0
[  104.773647][ T7555]  ? tomoyo_path_number_perm+0x46d/0x580
[  104.775459][ T7555]  ? stack_trace_save+0x8e/0xc0
[  104.777173][ T7555]  ? __pfx_stack_trace_save+0x10/0x10
[  104.778965][ T7555]  ? stack_depot_save_flags+0x27/0x9d0
[  104.780939][ T7555]  ? __lock_acquire+0x4a5/0x2630
[  104.782558][ T7555]  ? tomoyo_path_number_perm+0x46d/0x580
[  104.784473][ T7555]  ? kasan_save_stack+0x3f/0x50
[  104.786065][ T7555]  ? kasan_save_stack+0x30/0x50
[  104.788035][ T7555]  ? kasan_save_track+0x14/0x30
[  104.790375][ T7555]  ? kasan_save_free_info+0x3b/0x70
[  104.792395][ T7555]  kvm_vm_ioctl+0x1564/0x4050
[  104.793997][ T7555]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  104.795671][ T7555]  ? kasan_quarantine_put+0x104/0x240
[  104.797437][ T7555]  ? lockdep_hardirqs_on+0x78/0x100
[  104.799137][ T7555]  ? find_held_lock+0x2b/0x80
[  104.800689][ T7555]  ? tomoyo_path_number_perm+0x28f/0x580
[  104.802630][ T7555]  ? tomoyo_path_number_perm+0x28f/0x580
[  104.804450][ T7555]  ? tomoyo_path_number_perm+0x188/0x580
[  104.806268][ T7555]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  104.808470][ T7555]  ? futex_wake+0x1ad/0x530
[  104.809962][ T7555]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  104.811868][ T7555]  ? do_vfs_ioctl+0x226/0x13e0
[  104.813551][ T7555]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  104.815189][ T7555]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  104.817381][ T7555]  ? __fget_files+0x215/0x3d0
[  104.818916][ T7555]  ? hook_file_ioctl_common+0x149/0x410
[  104.820778][ T7555]  ? selinux_file_ioctl+0x13b/0x290
[  104.822447][ T7555]  ? selinux_file_ioctl+0xb6/0x290
[  104.824143][ T7555]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  104.825790][ T7555]  __x64_sys_ioctl+0x18e/0x210
[  104.827433][ T7555]  do_syscall_64+0x115/0x870
[  104.828953][ T7555]  ? clear_bhb_loop+0x40/0x90
[  104.830509][ T7555]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.832406][ T7555] RIP: 0033:0x7f1b0ad9ce59
[  104.833913][ T7555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  104.840104][ T7555] RSP: 002b:00007f1b0bce3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  104.842786][ T7555] RAX: ffffffffffffffda RBX: 00007f1b0b016090 RCX: 00007f1b0ad9ce59
[  104.845396][ T7555] RDX: 0000200000000400 RSI: 00000000400caed0 RDI: 0000000000000007
[  104.848029][ T7555] RBP: 00007f1b0ae32d6f R08: 0000000000000000 R09: 0000000000000000
[  104.850600][ T7555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  104.853150][ T7555] R13: 00007f1b0b016128 R14: 00007f1b0b016090 R15: 00007fff1eb2e4b8
[  104.855792][ T7555]  </TASK>
[  104.856865][ T7555] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  104.859173][ T7555] CPU: 2 UID: 0 PID: 7555 Comm: syz.2.443 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  104.862622][ T7555] Tainted: [L]=SOFTLOCKUP
[  104.864032][ T7555] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  104.867260][ T7555] Call Trace:
[  104.868386][ T7555]  <TASK>
[  104.869382][ T7555]  dump_stack_lvl+0x100/0x190
[  104.870908][ T7555]  vpanic+0x552/0x970
[  104.872234][ T7555]  ? __pfx_vpanic+0x10/0x10
[  104.873726][ T7555]  panic+0xd1/0xe0
[  104.874972][ T7555]  ? __pfx_panic+0x10/0x10
[  104.876437][ T7555]  check_panic_on_warn.cold+0x19/0x34
[  104.878413][ T7555]  ? __kvm_gpc_refresh+0x1992/0x22c0
[  104.880228][ T7555]  __warn.cold+0x191/0x328
[  104.881681][ T7555]  __report_bug+0x296/0x3d0
[  104.883162][ T7555]  ? __kvm_gpc_refresh+0x1992/0x22c0
[  104.884884][ T7555]  ? __pfx___report_bug+0x10/0x10
[  104.886511][ T7555]  ? add_lock_to_list+0x99/0x110
[  104.888165][ T7555]  ? lockdep_unlock+0x5a/0xc0
[  104.889702][ T7555]  ? __lock_acquire+0xd73/0x2630
[  104.891389][ T7555]  ? __kvm_gpc_refresh+0x1992/0x22c0
[  104.893101][ T7555]  report_bug+0xb2/0x220
[  104.894499][ T7555]  ? __kvm_gpc_refresh+0x1992/0x22c0
[  104.896214][ T7555]  handle_bug+0x16a/0x2a0
[  104.897662][ T7555]  exc_invalid_op+0x17/0x50
[  104.899178][ T7555]  asm_exc_invalid_op+0x1a/0x20
[  104.900764][ T7555] RIP: 0010:__kvm_gpc_refresh+0x1992/0x22c0
[  104.902717][ T7555] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 26 08 00 00 48 8b 04 24 31 db 48 8b a8 08 01 00 00 e9 cf f0 ff ff e8 6f c5 85 00 90 <0f> 0b 90 e9 92 f7 ff ff e8 61 c5 85 00 48 85 db 0f 84 e9 ed ff ff
[  104.908893][ T7555] RSP: 0018:ffffc90004747250 EFLAGS: 00010283
[  104.910912][ T7555] RAX: 000000000000070b RBX: ffffffffffffffff RCX: ffffc9000c4a1000
[  104.913471][ T7555] RDX: 0000000000080000 RSI: ffffffff8182f911 RDI: ffff88802c3da540
[  104.915991][ T7555] RBP: ffffffffffffff01 R08: 0000000000000000 R09: 0000000000000001
[  104.918541][ T7555] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888000000000
[  104.921199][ T7555] R13: ffff888000000001 R14: ffff888000000000 R15: ffffc90004747468
[  104.923767][ T7555]  ? __kvm_gpc_refresh+0x1991/0x22c0
[  104.925483][ T7555]  ? find_held_lock+0x2b/0x80
[  104.927050][ T7555]  ? __pfx___mutex_lock+0x10/0x10
[  104.928755][ T7555]  ? __lock_acquire+0x4a5/0x2630
[  104.930383][ T7555]  ? __pfx___kvm_gpc_refresh+0x10/0x10
[  104.932146][ T7555]  kvm_gpc_refresh+0xc9/0x170
[  104.933639][ T7555]  kvm_xen_set_evtchn.part.0+0x168/0x230
[  104.935452][ T7555]  ? kvm_xen_set_evtchn.part.0+0x153/0x230
[  104.937403][ T7555]  kvm_xen_hvm_evtchn_send+0x22f/0x290
[  104.939158][ T7555]  ? __pfx_kvm_xen_hvm_evtchn_send+0x10/0x10
[  104.941081][ T7555]  kvm_arch_vm_ioctl+0x13ac/0x18d0
[  104.942802][ T7555]  ? arch_stack_walk+0xa6/0xf0
[  104.944363][ T7555]  ? __pfx_kvm_arch_vm_ioctl+0x10/0x10
[  104.946133][ T7555]  ? __lock_acquire+0x4a5/0x2630
[  104.947795][ T7555]  ? __lock_acquire+0x4a5/0x2630
[  104.949417][ T7555]  ? __lock_acquire+0x4a5/0x2630
[  104.951104][ T7555]  ? __lock_acquire+0x4a5/0x2630
[  104.952727][ T7555]  ? is_bpf_text_address+0x8a/0x1a0
[  104.954408][ T7555]  ? bpf_ksym_find+0x128/0x1c0
[  104.955977][ T7555]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  104.957988][ T7555]  ? is_bpf_text_address+0x94/0x1a0
[  104.959702][ T7555]  ? kernel_text_address+0x8d/0x100
[  104.961379][ T7555]  ? __pfx_widen_string+0x10/0x10
[  104.963162][ T7555]  ? __kernel_text_address+0xd/0x30
[  104.964942][ T7555]  ? unwind_get_return_address+0x59/0xa0
[  104.966767][ T7555]  ? arch_stack_walk+0xa6/0xf0
[  104.968341][ T7555]  ? tomoyo_path_number_perm+0x46d/0x580
[  104.970159][ T7555]  ? stack_trace_save+0x8e/0xc0
[  104.971809][ T7555]  ? __pfx_stack_trace_save+0x10/0x10
[  104.973530][ T7555]  ? stack_depot_save_flags+0x27/0x9d0
[  104.975278][ T7555]  ? __lock_acquire+0x4a5/0x2630
[  104.976901][ T7555]  ? tomoyo_path_number_perm+0x46d/0x580
[  104.978773][ T7555]  ? kasan_save_stack+0x3f/0x50
[  104.980377][ T7555]  ? kasan_save_stack+0x30/0x50
[  104.981949][ T7555]  ? kasan_save_track+0x14/0x30
[  104.983541][ T7555]  ? kasan_save_free_info+0x3b/0x70
[  104.985237][ T7555]  kvm_vm_ioctl+0x1564/0x4050
[  104.986820][ T7555]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  104.988542][ T7555]  ? kasan_quarantine_put+0x104/0x240
[  104.990215][ T7555]  ? lockdep_hardirqs_on+0x78/0x100
[  104.991907][ T7555]  ? find_held_lock+0x2b/0x80
[  104.993429][ T7555]  ? tomoyo_path_number_perm+0x28f/0x580
[  104.995230][ T7555]  ? tomoyo_path_number_perm+0x28f/0x580
[  104.997153][ T7555]  ? tomoyo_path_number_perm+0x188/0x580
[  104.998955][ T7555]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  105.000959][ T7555]  ? futex_wake+0x1ad/0x530
[  105.002435][ T7555]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  105.004328][ T7555]  ? do_vfs_ioctl+0x226/0x13e0
[  105.005884][ T7555]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  105.007496][ T7555]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  105.009669][ T7555]  ? __fget_files+0x215/0x3d0
[  105.011121][ T7555]  ? hook_file_ioctl_common+0x149/0x410
[  105.012839][ T7555]  ? selinux_file_ioctl+0x13b/0x290
[  105.014501][ T7555]  ? selinux_file_ioctl+0xb6/0x290
[  105.016112][ T7555]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  105.017824][ T7555]  __x64_sys_ioctl+0x18e/0x210
[  105.019326][ T7555]  do_syscall_64+0x115/0x870
[  105.020825][ T7555]  ? clear_bhb_loop+0x40/0x90
[  105.022350][ T7555]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.024235][ T7555] RIP: 0033:0x7f1b0ad9ce59
[  105.025702][ T7555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  105.031886][ T7555] RSP: 002b:00007f1b0bce3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  105.034543][ T7555] RAX: ffffffffffffffda RBX: 00007f1b0b016090 RCX: 00007f1b0ad9ce59
[  105.037120][ T7555] RDX: 0000200000000400 RSI: 00000000400caed0 RDI: 0000000000000007
[  105.039607][ T7555] RBP: 00007f1b0ae32d6f R08: 0000000000000000 R09: 0000000000000000
[  105.042154][ T7555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  105.044731][ T7555] R13: 00007f1b0b016128 R14: 00007f1b0b016090 R15: 00007fff1eb2e4b8
[  105.047434][ T7555]  </TASK>
[  105.049157][ T7555] Kernel Offset: disabled
[  105.050578][ T7555] Rebooting in 86400 seconds..