last executing test programs:

6m6.903075854s ago: executing program 0 (id=363):
r0 = socket$inet6(0xa, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), 0x0, &(0x7f0000000000))
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100", 0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x0, 0x5004)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4})

6m5.933258915s ago: executing program 0 (id=369):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='sched\x00')
read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) (async)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0)
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x101000) (async)
syz_usb_disconnect(r3) (async)
creat(0x0, 0x188)
syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000080)=ANY=[], 0x0) (async)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xc, &(0x7f0000006680)) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async)
timer_create(0x0, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
utime(&(0x7f00000003c0)='./file2\x00', &(0x7f0000000400)={0xf, 0x5})
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb40000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000080000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000001000000440005002001000000000000000000000000000000000002320000000a000000fc010000000000000000000000000000000000000400"/176], 0xfc}}, 0x0) (async)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) (async)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0)
r6 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x40000000, 0x0) (async)
ptrace(0x10, r6)
wait4(r6, 0x0, 0xa0000009, 0x0) (async)
lseek(r1, 0x1, 0x0)

6m2.925459882s ago: executing program 0 (id=388):
setreuid(0x0, 0xee00)
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)

6m2.812409869s ago: executing program 0 (id=389):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000840)=[{{&(0x7f0000000380)={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB='X'], 0x58}}], 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r3, 0x21eae}}, 0x20}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
getsockopt$llc_int(r9, 0x10c, 0x5, &(0x7f0000000200), &(0x7f0000000280)=0x4)
syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa8aaaaaaaaaaa88a84f0000030180c2000070640dac1e0101aaaa00"/50], &(0x7f0000000080)={0x0, 0x2, [0x829, 0x8cb, 0x3d, 0x66]})
socket$packet(0x11, 0x2, 0x300)
close(r8)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
sendto$packet(0xffffffffffffffff, &(0x7f0000000640)="000a18000000", 0x6, 0x4000000, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x40083, 0x100)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8)
syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r10, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}})

6m2.595865461s ago: executing program 0 (id=391):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)="bd", 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40302, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r2 = syz_clone3(&(0x7f0000001880)={0x120000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
tgkill(r2, r2, 0x21)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x4})
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)

6m2.326263837s ago: executing program 0 (id=392):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001840)={0x20, r1, 0x30d, 0x4, 0xfffffffd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44011}, 0x20000800)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
fchown(r4, 0x0, 0x0)
close(r3)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = creat(&(0x7f0000000200)='./file0\x00', 0x109)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x3b, 0x2, 0x70bd2b, 0x25dfdbfb, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x20048050)
close(r6)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc000, &(0x7f0000000380)={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x7}, 0x1c)
r8 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r8, 0xc2c45512, &(0x7f0000000340)={{0x7}, 0x0, [0x0, 0x0, 0x0, 0x1, 0x0, 0x100000, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, 0x0, 0x0, 0x6, 0x0, 0x1000000, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb8fd, 0x0, 0x0, 0x0, 0xfffffd80, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xff, 0x0, 0x2, 0x0, 0x2, 0xfffffffc]})
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r9}})
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073f56ef10647ba797a3100000000200003801c0000800c00018006000100000000000c00044000000000000000071400000011000100007d02a5de6afce5514face59b0000"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x1802848, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0/')

5m47.33531071s ago: executing program 32 (id=392):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001840)={0x20, r1, 0x30d, 0x4, 0xfffffffd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44011}, 0x20000800)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
fchown(r4, 0x0, 0x0)
close(r3)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = creat(&(0x7f0000000200)='./file0\x00', 0x109)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x3b, 0x2, 0x70bd2b, 0x25dfdbfb, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x20048050)
close(r6)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc000, &(0x7f0000000380)={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x7}, 0x1c)
r8 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r8, 0xc2c45512, &(0x7f0000000340)={{0x7}, 0x0, [0x0, 0x0, 0x0, 0x1, 0x0, 0x100000, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, 0x0, 0x0, 0x6, 0x0, 0x1000000, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb8fd, 0x0, 0x0, 0x0, 0xfffffd80, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xff, 0x0, 0x2, 0x0, 0x2, 0xfffffffc]})
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r9}})
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073f56ef10647ba797a3100000000200003801c0000800c00018006000100000000000c00044000000000000000071400000011000100007d02a5de6afce5514face59b0000"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x1802848, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0/')

6.429582374s ago: executing program 4 (id=2273):
r0 = socket$kcm(0xa, 0x3, 0x73)
r1 = io_uring_setup(0x68f7, &(0x7f00000002c0)={0x0, 0x8d0b, 0x80, 0x0, 0x8100016b})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300), &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = dup(r2)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c)
socket$key(0xf, 0x3, 0x2)
sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x4048043)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00'})
sendmsg$nl_route(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
recvmmsg$unix(r3, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/42, 0x2a}], 0x1}}, {{0x0, 0x0, &(0x7f0000001e40)}}], 0x2, 0x40000100, 0x0)
r5 = dup(r2)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10)
sendmsg$inet(r5, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f00000008c0)='G', 0x1}], 0x1}, 0x8000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c)
write$FUSE_POLL(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_FREE_MR(r6, 0x114, 0x3, &(0x7f0000000100)={{0x1, 0x7ff}, 0x18}, 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c)
close_range(r1, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[{0xc, 0x29, 0xb}], 0xc}, 0x0)

6.384038342s ago: executing program 4 (id=2274):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0}}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000001c0)='0000:00:02.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='0000:00:02.0\x00', 0xd)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x4)
write(r2, &(0x7f0000000140)='vfio-pci\x00', 0x9)
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/vfio/devices/vfio0\x00', 0x2, 0x0)
ioctl(r4, 0x9, &(0x7f00000003c0)="10000000000000006400c51400a132de")

6.351073657s ago: executing program 4 (id=2275):
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x104)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x6)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r3, &(0x7f0000000000), 0x10)

6.063080701s ago: executing program 1 (id=2277):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r0 = shmget$private(0x0, 0x800000, 0x200, &(0x7f0000800000/0x800000)=nil)
shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00')
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
read$FUSE(r1, &(0x7f0000003380)={0x2020}, 0x2020)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x106}, @l2cap_cid_signaling={{0x102}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0xd, 0xca}}, @l2cap_info_rsp={{0xb, 0x0, 0xf7}, {0x1, 0xfff, "3f95d5ed0b027988d28363bcd9853331e8cca767abca0b3b8018ee52b41c6a409f40e0d59f1567bf38ef1ff65eaff3d6592486c3422bfe60554540c2530d1da8f9fb93616cccf2109f8670cea566236cb229cc41b14d8498711be4c4d3c138c9fca66bdf354bbcba3cbc1ed87bbd8dfd9f857b8061bbb878f524c401a38cf3989c282cc4db70c6a794957639c7d883ae99d217db510ddf2c05da039492fa42710822a9dfaf6b0dfdd4a6a5002b9d8cbc8042e3f8fcdae1c70a11edbc6ea3399252900af5e8f38e21ffdea4994513dc290602db90f51f47e46792876f87ff74c1bcfe1137d9c8751a85e26365aaba948e1c462e"}}]}}, 0x10b)
r2 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0)
landlock_restrict_self(r2, 0x8)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

5.831138757s ago: executing program 1 (id=2280):
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x7fff, 0x1, 0x3, 0xd59f80, 0xb488ab32, 0x7, 0x19ef, 0x3, 0x6, 0x8027ff, 0x2800, 0x101, 0xbb6, 0x9, 0x0, {0x8, 0xfffffffb}, 0xd0, 0xc}})
mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"])
chdir(&(0x7f0000000100)='./file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x58)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf250100000006000600234e000014000200776730"], 0x30}}, 0x800)
r2 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
ioctl$LOOP_CONFIGURE(r2, 0x1277, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x3, 0x3, 0x0, 0x0, 0x11, 0x1c, "fe9ba2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b803ac9600010000000000000000000000000000000000000080000600", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000041]}})
keyctl$instantiate(0xc, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e657720656372797074667320747275737065643a73797a2050303030303030303030303030303030303133300010d3db6e3b7c99777a654b6e874519a3702a0800000000000000f9db0b691bc858c5c6fe1220b282ae3924b4ac2bfd10512251ac3016a039faeb81978592dd8ccca814c92806cb972874dfecc8793edde0d3a0ecf4fbbc0f31349e33a17c3007d5d67c4e5163eab023e4"], 0x2e, 0xfffffffffffffffa)
add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300))
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="44000000180001002cbd700000000000", @ANYRES32=r4, @ANYBLOB], 0x44}}, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r7, &(0x7f0000000900)}, 0x20)
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000140)={@mcast2, @loopback, @private1, 0x80000000, 0x2, 0xc, 0x100, 0x0, 0x90000a, r4})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0)
ftruncate(r8, 0x4a8e)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002200)={'wlan1\x00'})
r9 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/asound/card1/oss_mixer\x00', 0x242, 0x0)
writev(r9, &(0x7f0000003e80)=[{0x0}, {&(0x7f0000000b00)="3bca", 0x2}], 0x2)

4.740320498s ago: executing program 1 (id=2283):
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0)
capset(0x0, &(0x7f0000000040)={0x0, 0x7, 0xfffffff8})
r0 = gettid()
r1 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)
shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x7000)
shmctl$IPC_RMID(r1, 0x0)
shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000900)=""/147)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r2, 0x2)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x20001a, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r4 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x4205, 0x8, 0x0, 0x50}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0, &(0x7f0000000180)=<r7=>0x0)
syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r8, 0x6, 0x3, 0x0, &(0x7f0000000440))
flock(0xffffffffffffffff, 0x1)
open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

3.444573524s ago: executing program 2 (id=2285):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x80, 0x8, 0x303, 0x4, 0x0, 0x0, 0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4080)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4)

3.141413163s ago: executing program 4 (id=2286):
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1000000, 0x13, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00\x00@\x00'}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, '\x00', "c7576f78f3260c7c00", "e9be1eae", "bb10000000000001"}, 0x28)
readv(r1, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0x4000}], 0x1)

2.867217468s ago: executing program 1 (id=2288):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000)
mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x62, 0x0, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", 0x0, 0xcb95, 0x0, 0x103, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x3ff}, 0x4c)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="d7888530a45a9e", 0x200e4}, {0x0, 0xe4}], 0x2)
io_setup(0x8, &(0x7f0000000600)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}])
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000002c0)=ANY=[], 0x14}}, 0x20000000)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0x6}}, './file0\x00'})
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r5, 0xe, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048014}, 0x800)
ioctl$MON_IOCX_MFETCH(r4, 0xc00c9207, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x3})

2.368825425s ago: executing program 3 (id=2290):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0}}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000001c0)='0000:00:02.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='0000:00:02.0\x00', 0xd)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x4)
write(r2, &(0x7f0000000140)='vfio-pci\x00', 0x9)
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='0000:00:03.0\x00', 0xd)
write(0xffffffffffffffff, &(0x7f00000002c0)='0000:00:03.0\x00', 0xd)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/vfio/devices/vfio0\x00', 0x2, 0x0)
ioctl(r4, 0x9, &(0x7f00000003c0)="10000000000000006400c51400a132de")

2.343165303s ago: executing program 2 (id=2291):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x80, 0x8, 0x303, 0x4, 0x0, 0x0, 0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4080)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r4, 0x0, 0x0, 0x200)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff)
bind$inet(r1, 0x0, 0x0)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4)

2.111326624s ago: executing program 3 (id=2292):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0)
write(r0, &(0x7f0000000940)='na', 0x2)

2.033050218s ago: executing program 4 (id=2293):
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0)
capset(0x0, &(0x7f0000000040)={0x0, 0x7, 0xfffffff8})
r0 = gettid()
r1 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)
shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x7000)
shmctl$IPC_RMID(r1, 0x0)
shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000900)=""/147)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r2, 0x2)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x20001a, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r4 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x4205, 0x8, 0x0, 0x50}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0, &(0x7f0000000180)=<r7=>0x0)
syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
flock(r8, 0x1)
open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

2.002499234s ago: executing program 1 (id=2294):
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x6)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r3, &(0x7f0000000000), 0x10)

1.813797209s ago: executing program 3 (id=2295):
r0 = openat$hpet(0xffffff9c, &(0x7f0000000000), 0x101180, 0x0)
ppoll(&(0x7f00000012c0)=[{r0, 0x50}], 0x1, &(0x7f0000001300), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8}, 0x94)

1.608436574s ago: executing program 3 (id=2296):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) (fail_nth: 2)

1.239516486s ago: executing program 3 (id=2297):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
r2 = dup3(r1, r0, 0x0)
recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0)
read$FUSE(r2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182)
ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522)
ioctl$USBDEVFS_BULK(r4, 0x5523, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"})
ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0xffffffffffffffb7, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x3, 0x40, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0x3, 0x4, 0x8, 0x9, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
bind$can_raw(r5, &(0x7f0000000080), 0x10)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
close_range(r6, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0x44, 0xd5, &(0x7f0000000080)="32f95809bbb37addf0fe9eb78b050b6f66d7746b16cca2759a216990bcfde3d07afea33447665193a8c66ae1192ce8ebfaf2c0ced015009af67f8eaf52fa590daa815f86", &(0x7f0000000140)=""/213, 0x2, 0x0, 0xeb, 0x59, &(0x7f0000000240)="46a99f0ea2995717ff5f49d7d4d37cc44ae0a80e7d029f9f0f5ffe52f52b37730fd20f7d8aa8f6b87701186b46fdb2c725502315b93380cce76d1fbc63d5b70f55d47da57cbbd0765d8dba3bcd433cf77445a2c3156bc4c206570ebdc293991ed69e68a36bed30afe02069a62dcde28db13c8167fa937e22e46b452256ecefc047bc893b21105ee18f537ed6bdfab50fa37800346849d4c06b981a29aa5fcf63d8c7fe6a74cb3057a3a338e16c848cf252197056750c2c798a0f0602a42648fa272e1d48dfb76963dae1cee7d849796266d8e9ec0acbac493f1f195a008f7c91c274434a82156b47ac5dba", &(0x7f0000000340)="a080ab98a007af14e3d1cd03f33d964a635a79e824d98277cd86c1ea0ec53c92e19fdba70bf08f09c33335b5781a9c02040eb2ca888eaeccc730266ecf5aeb86b192e3a5cf66fa038e70d33ba7b89124e417f6888bb5674335", 0x2, 0x0, 0x1a}, 0x4c)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000100001070000b4da701363c5c82605000000010015000000"], 0x1c}}, 0x0)
syz_emit_ethernet(0x2c, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @multicast1}, "2200354f000000010400"}}}}, 0x0)

1.235787788s ago: executing program 2 (id=2305):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r0 = shmget$private(0x0, 0x800000, 0x200, &(0x7f0000800000/0x800000)=nil)
shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00')
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
read$FUSE(r1, &(0x7f0000003380)={0x2020}, 0x2020)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x106}, @l2cap_cid_signaling={{0x102}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0xd, 0xca}}, @l2cap_info_rsp={{0xb, 0x0, 0xf7}, {0x1, 0xfff, "3f95d5ed0b027988d28363bcd9853331e8cca767abca0b3b8018ee52b41c6a409f40e0d59f1567bf38ef1ff65eaff3d6592486c3422bfe60554540c2530d1da8f9fb93616cccf2109f8670cea566236cb229cc41b14d8498711be4c4d3c138c9fca66bdf354bbcba3cbc1ed87bbd8dfd9f857b8061bbb878f524c401a38cf3989c282cc4db70c6a794957639c7d883ae99d217db510ddf2c05da039492fa42710822a9dfaf6b0dfdd4a6a5002b9d8cbc8042e3f8fcdae1c70a11edbc6ea3399252900af5e8f38e21ffdea4994513dc290602db90f51f47e46792876f87ff74c1bcfe1137d9c8751a85e26365aaba948e1c462e"}}]}}, 0x10b)
r2 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0)
landlock_restrict_self(r2, 0x8)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000140)={0x18, 0x0, {0x4, @multicast, 'ip6_vti0\x00'}}, 0x1e)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1)
r6 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0185648, &(0x7f0000000080)={0x0, 0x1, 0x20000000, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x0, '\x00', @p_u32=0x0}})
munlockall()

644.184787ms ago: executing program 3 (id=2298):
socket(0x10, 0x4, 0x7)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
syz_genetlink_get_family_id$smc(&(0x7f0000000280), 0xffffffffffffffff)
listen(0xffffffffffffffff, 0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000500), &(0x7f0000000ac0), &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x2})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002840), r3)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000002880)={0x2c, r4, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000328bd7000fedbdf2516000000050003000900000005000300010000000c00018008000300070000000c000180080003000200000005000300010000000600030000000000"], 0x4c}}, 0x20008010)
syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00')
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x40)
syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08060001080006040003ba1aed2bd9cae000"], 0x0)

625.142708ms ago: executing program 4 (id=2299):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
write(r0, &(0x7f00000001c0)='0', 0x1)
write$cgroup_type(r0, &(0x7f0000000080), 0x9)

624.707921ms ago: executing program 2 (id=2300):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0}}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000001c0)='0000:00:02.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='0000:00:02.0\x00', 0xd)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x4)
write(r2, &(0x7f0000000140)='vfio-pci\x00', 0x9)
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='0000:00:03.0\x00', 0xd)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/vfio/devices/vfio0\x00', 0x2, 0x0)
ioctl(r4, 0x9, &(0x7f00000003c0)="10000000000000006400c51400a132de")

214.776158ms ago: executing program 2 (id=2301):
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1000000, 0x13, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00\x00@\x00'}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, '\x00', "c7576f78f3260c7c00", "e9be1eae", "bb10000000000001"}, 0x28)
readv(r1, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0x4000}], 0x1)

1.458912ms ago: executing program 2 (id=2302):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r0 = shmget$private(0x0, 0x800000, 0x200, &(0x7f0000800000/0x800000)=nil)
shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00')
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
read$FUSE(r1, &(0x7f0000003380)={0x2020}, 0x2020)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x106}, @l2cap_cid_signaling={{0x102}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0xd, 0xca}}, @l2cap_info_rsp={{0xb, 0x0, 0xf7}, {0x1, 0xfff, "3f95d5ed0b027988d28363bcd9853331e8cca767abca0b3b8018ee52b41c6a409f40e0d59f1567bf38ef1ff65eaff3d6592486c3422bfe60554540c2530d1da8f9fb93616cccf2109f8670cea566236cb229cc41b14d8498711be4c4d3c138c9fca66bdf354bbcba3cbc1ed87bbd8dfd9f857b8061bbb878f524c401a38cf3989c282cc4db70c6a794957639c7d883ae99d217db510ddf2c05da039492fa42710822a9dfaf6b0dfdd4a6a5002b9d8cbc8042e3f8fcdae1c70a11edbc6ea3399252900af5e8f38e21ffdea4994513dc290602db90f51f47e46792876f87ff74c1bcfe1137d9c8751a85e26365aaba948e1c462e"}}]}}, 0x10b)
r2 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0)
landlock_restrict_self(r2, 0x8)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

0s ago: executing program 1 (id=2311):
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1000000, 0x13, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
writev(r1, &(0x7f0000000580)=[{&(0x7f00000006c0)="581a17919cc7749e9438c65fb69e487bd1c16731510e7fc4ed9fb860505f1495ff923d587505a66033816d9d554d83669efc751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfda67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6e07473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bd25a62c560cb6383655", 0xc1}], 0x1)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, '\x00', "c7576f78f3260c7c00", "e9be1eae", "bb10000000000001"}, 0x28)
readv(r1, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0x4000}], 0x1)

kernel console output (not intermixed with test programs):

ytes leftover after parsing attributes in process `syz.2.1448'.
[  317.947221][ T5884] usb 42-1: device descriptor read/8, error -110
[  317.987475][T11954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1447'.
[  318.299535][T11962] batadv1: entered promiscuous mode
[  318.341317][ T5884] usb usb42-port1: attempt power cycle
[  318.841802][T11978] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1456'.
[  319.016164][ T5884] usb usb42-port1: unable to enumerate USB device
[  319.094201][T11992] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  319.096881][T11992] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  319.122692][T11992] vhci_hcd vhci_hcd.0: Device attached
[  319.405827][ T5884] usb 40-1: SetAddress Request (23) to port 0
[  319.409769][ T5884] usb 40-1: new SuperSpeed USB device number 23 using vhci_hcd
[  320.158707][T12015] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  320.161834][T12015] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  320.165979][T12015] vhci_hcd vhci_hcd.0: Device attached
[  320.166800][T12019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1457'.
[  320.446083][ T5828] usb 44-1: SetAddress Request (26) to port 0
[  320.448836][ T5828] usb 44-1: new SuperSpeed USB device number 26 using vhci_hcd
[  320.461596][T11993] vhci_hcd: connection reset by peer
[  320.466698][ T7849] vhci_hcd vhci_hcd.1: stop threads
[  320.470032][ T7849] vhci_hcd vhci_hcd.1: release socket
[  320.475436][ T7849] vhci_hcd vhci_hcd.1: disconnect device
[  320.689914][T12024] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1460'.
[  320.714213][T12016] vhci_hcd: connection reset by peer
[  320.717178][   T12] vhci_hcd vhci_hcd.3: stop threads
[  320.719495][   T12] vhci_hcd vhci_hcd.3: release socket
[  320.721929][   T12] vhci_hcd vhci_hcd.3: disconnect device
[  321.060883][ T5088] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  321.860797][   T42] audit: type=1400 audit(1786166660.103:2862): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=12040 comm="syz.1.1472"
[  322.025876][T12048] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  322.028705][T12048] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  322.039149][T12048] vhci_hcd vhci_hcd.0: Device attached
[  322.154320][T12059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1468'.
[  322.730988][T12051] vhci_hcd: connection closed
[  322.732238][ T5788] vhci_hcd vhci_hcd.3: stop threads
[  322.737843][ T5788] vhci_hcd vhci_hcd.3: release socket
[  322.741138][ T5788] vhci_hcd vhci_hcd.3: disconnect device
[  322.840758][T12064] input: syz1 as /devices/virtual/input/input19
[  323.106134][ T1493] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  323.280127][ T1493] usb 7-1: too many configurations: 9, using maximum allowed: 8
[  323.293719][ T1493] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  323.305136][ T1493] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  323.317836][ T1493] usb 7-1: config 0 interface 0 has no altsetting 0
[  323.325008][ T1493] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  323.345608][ T1493] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  323.365137][ T1493] usb 7-1: config 0 interface 0 has no altsetting 0
[  323.371315][ T1493] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  323.568093][ T1493] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  323.585335][ T1493] usb 7-1: config 0 interface 0 has no altsetting 0
[  323.591165][ T1493] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  323.596423][ T1493] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  323.604799][ T1493] usb 7-1: config 0 interface 0 has no altsetting 0
[  323.709520][ T1493] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  323.718473][ T1493] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  323.726987][ T1493] usb 7-1: config 0 interface 0 has no altsetting 0
[  323.733711][ T1493] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  323.786711][ T1493] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  323.791596][ T1493] usb 7-1: config 0 interface 0 has no altsetting 0
[  323.798707][ T1493] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  323.801934][ T1493] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  323.805812][ T1493] usb 7-1: config 0 interface 0 has no altsetting 0
[  323.810412][ T1493] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  323.814594][ T1493] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  324.097524][ T1493] usb 7-1: config 0 interface 0 has no altsetting 0
[  324.110641][ T1493] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  324.116352][ T1493] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  324.127257][ T1493] usb 7-1: Product: syz
[  324.129070][ T1493] usb 7-1: Manufacturer: syz
[  324.135917][ T1493] usb 7-1: SerialNumber: syz
[  324.146820][ T1493] usb 7-1: config 0 descriptor??
[  324.168557][ T1493] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0
[  324.265811][ T5987] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  324.414196][T12099] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  324.416981][T12099] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  324.421107][T12099] vhci_hcd vhci_hcd.0: Device attached
[  324.425806][ T5987] usb 9-1: Using ep0 maxpacket: 32
[  324.438327][ T5987] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  324.442874][ T5987] usb 9-1: config 0 has no interfaces?
[  324.446677][ T5987] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  324.449839][ T5987] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  324.452414][ T5987] usb 9-1: Product: syz
[  324.453733][ T5987] usb 9-1: Manufacturer: syz
[  324.456074][ T5987] usb 9-1: SerialNumber: syz
[  324.464760][T12096] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  324.467512][T12096] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  324.474995][ T5987] usb 9-1: config 0 descriptor??
[  324.544209][T12096] vhci_hcd vhci_hcd.0: Device attached
[  324.709156][ T5756] udevd[5756]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory
[  324.763738][ T5987] usb 9-1: USB disconnect, device number 18
[  324.786906][ T8336] block nbd1: Receive control failed (result -32)
[  324.787496][ T5737] usb 7-1: USB disconnect, device number 10
[  324.788978][ T5756] udevd[5756]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory
[  324.792960][   T65] block nbd1: Receive control failed (result -32)
[  324.809569][ T5737] yurex 7-1:0.0: USB YUREX #0 now disconnected
[  324.850153][T12105] vhci_hcd: connection reset by peer
[  324.853620][ T5788] vhci_hcd vhci_hcd.1: stop threads
[  324.857891][ T5788] vhci_hcd vhci_hcd.1: release socket
[  324.863153][ T5788] vhci_hcd vhci_hcd.1: disconnect device
[  324.863838][ T5884] usb 40-1: device descriptor read/8, error -110
[  325.050018][T12103] vhci_hcd: connection closed
[  325.050323][ T5788] vhci_hcd vhci_hcd.3: stop threads
[  325.054316][ T5788] vhci_hcd vhci_hcd.3: release socket
[  325.056953][ T5788] vhci_hcd vhci_hcd.3: disconnect device
[  325.276974][ T5884] usb usb40-port1: attempt power cycle
[  325.606127][ T5828] usb 44-1: device descriptor read/8, error -110
[  325.706501][T12128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1478'.
[  325.886044][ T5884] usb usb40-port1: unable to enumerate USB device
[  325.888787][T12129] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  325.891343][T12129] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  325.988066][T12129] vhci_hcd vhci_hcd.0: Device attached
[  325.996680][ T5828] usb usb44-port1: attempt power cycle
[  326.226394][ T1493] usb 46-1: SetAddress Request (26) to port 0
[  326.229308][ T1493] usb 46-1: new SuperSpeed USB device number 26 using vhci_hcd
[  326.493279][T12131] vhci_hcd: connection reset by peer
[  326.497048][ T5788] vhci_hcd vhci_hcd.4: stop threads
[  326.499670][ T5788] vhci_hcd vhci_hcd.4: release socket
[  326.502216][ T5788] vhci_hcd vhci_hcd.4: disconnect device
[  326.556482][ T5828] usb usb44-port1: unable to enumerate USB device
[  326.684701][T12148] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1483'.
[  327.345144][T12160] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1484'.
[  327.776588][T12181] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1486'.
[  327.863151][T12187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  327.872123][T12187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  328.578973][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[  328.614255][T12222] input: syz1 as /devices/virtual/input/input20
[  328.874408][T12224] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1492'.
[  328.961137][T12237] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  328.963287][T12237] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  328.966948][T12237] vhci_hcd vhci_hcd.0: Device attached
[  329.245899][ T5828] usb 40-1: SetAddress Request (27) to port 0
[  329.245960][ T5828] usb 40-1: new SuperSpeed USB device number 27 using vhci_hcd
[  329.567208][T12238] vhci_hcd: connection reset by peer
[  329.569847][   T12] vhci_hcd vhci_hcd.1: stop threads
[  329.573173][   T12] vhci_hcd vhci_hcd.1: release socket
[  329.575002][   T12] vhci_hcd vhci_hcd.1: disconnect device
[  329.993725][T12253] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  329.995655][T12253] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  330.001150][T12253] vhci_hcd vhci_hcd.0: Device attached
[  330.180303][ T5743] Bluetooth: hci2: command 0x1003 tx timeout
[  330.181260][ T5088] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  330.275716][ T5884] usb 42-1: SetAddress Request (39) to port 0
[  330.283957][ T5884] usb 42-1: new SuperSpeed USB device number 39 using vhci_hcd
[  330.449624][   T42] audit: type=1400 audit(1786166668.693:2863): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=12261 comm="syz.3.1501"
[  330.490272][T12265] input: syz1 as /devices/virtual/input/input21
[  330.631752][T12254] vhci_hcd: connection reset by peer
[  330.639992][   T12] vhci_hcd vhci_hcd.2: stop threads
[  330.642350][   T12] vhci_hcd vhci_hcd.2: release socket
[  330.649115][   T12] vhci_hcd vhci_hcd.2: disconnect device
[  331.002037][T12275] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  331.004821][T12275] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  331.019309][T12275] vhci_hcd vhci_hcd.0: Device attached
[  331.878096][T12276] vhci_hcd: connection reset by peer
[  331.883069][   T12] vhci_hcd vhci_hcd.4: stop threads
[  331.885638][   T12] vhci_hcd vhci_hcd.4: release socket
[  331.889127][ T1493] usb 46-1: device descriptor read/8, error -110
[  331.897548][   T12] vhci_hcd vhci_hcd.4: disconnect device
[  332.287115][ T1493] usb usb46-port1: attempt power cycle
[  332.396025][T12294] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  332.398182][T12294] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  332.411201][T12294] vhci_hcd vhci_hcd.0: Device attached
[  332.539512][T12298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1510'.
[  332.676587][ T5829] usb 44-1: SetAddress Request (30) to port 0
[  332.680177][ T5829] usb 44-1: new SuperSpeed USB device number 30 using vhci_hcd
[  332.876399][ T1493] usb usb46-port1: unable to enumerate USB device
[  333.030087][T12295] vhci_hcd: connection reset by peer
[  333.036077][   T12] vhci_hcd vhci_hcd.3: stop threads
[  333.038321][   T12] vhci_hcd vhci_hcd.3: release socket
[  333.042762][   T12] vhci_hcd vhci_hcd.3: disconnect device
[  333.469959][ T5088] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  333.997330][T12324] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  333.999665][T12324] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  334.004754][T12324] vhci_hcd vhci_hcd.0: Device attached
[  334.041220][T12327] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1518'.
[  334.109150][T12328] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request
[  334.223857][   T42] audit: type=1326 audit(1786166672.463:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12323 comm="syz.1.1514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000
[  334.249762][   T42] audit: type=1326 audit(1786166672.483:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12323 comm="syz.1.1514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000
[  334.265034][   T42] audit: type=1326 audit(1786166672.483:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12323 comm="syz.1.1514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000
[  334.291329][   T42] audit: type=1326 audit(1786166672.483:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12323 comm="syz.1.1514" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf706efec code=0x7ffc0000
[  334.323795][T12331] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1514'.
[  334.330305][   T42] audit: type=1326 audit(1786166672.483:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12323 comm="syz.1.1514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000
[  334.346034][ T5828] usb 40-1: device descriptor read/8, error -110
[  334.360343][   T42] audit: type=1326 audit(1786166672.483:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12323 comm="syz.1.1514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000
[  334.384774][   T42] audit: type=1326 audit(1786166672.483:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12323 comm="syz.1.1514" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706efec code=0x7ffc0000
[  334.655947][T12325] vhci_hcd: connection closed
[  334.656337][   T12] vhci_hcd vhci_hcd.2: stop threads
[  334.664598][   T12] vhci_hcd vhci_hcd.2: release socket
[  334.669475][   T12] vhci_hcd vhci_hcd.2: disconnect device
[  334.747281][ T5828] usb usb40-port1: attempt power cycle
[  335.340580][ T5828] usb usb40-port1: unable to enumerate USB device
[  335.351259][T12367] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1523'.
[  335.369583][T12365] macsec1: entered promiscuous mode
[  335.376730][ T5884] usb 42-1: device descriptor read/8, error -110
[  335.794728][T12389] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  335.796961][T12389] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  335.801082][T12389] vhci_hcd vhci_hcd.0: Device attached
[  335.844132][T12390] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1528'.
[  335.846358][ T5884] usb usb42-port1: attempt power cycle
[  336.071185][T12393] comedi comedi3: pcl818: I/O base address or length out of range
[  336.090383][T12401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1529'.
[  336.429795][T12391] vhci_hcd: connection closed
[  336.430217][ T7849] vhci_hcd vhci_hcd.3: stop threads
[  336.435385][ T7849] vhci_hcd vhci_hcd.3: release socket
[  336.438419][ T7849] vhci_hcd vhci_hcd.3: disconnect device
[  336.447948][ T5884] usb usb42-port1: unable to enumerate USB device
[  336.961994][T12416] input: syz1 as /devices/virtual/input/input22
[  337.270951][T12422] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1537'.
[  337.455675][ T5088] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  337.676309][T12439] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1540'.
[  337.696369][T12435] comedi comedi3: pcl818: I/O base address or length out of range
[  338.118557][T12450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1542'.
[  338.215649][T12457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1542'.
[  338.271349][ T5829] usb 44-1: device descriptor read/8, error -110
[  338.590699][T12471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1551'.
[  339.046833][T12494] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1547'.
[  339.076694][ T5829] usb usb44-port1: attempt power cycle
[  339.818852][ T5829] usb usb44-port1: unable to enumerate USB device
[  340.380049][T12521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1555'.
[  340.401552][T12519] comedi comedi3: pcl818: I/O base address or length out of range
[  340.582831][T12529] input: syz1 as /devices/virtual/input/input23
[  340.864594][T12535] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  340.866762][T12535] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  340.876350][T12535] vhci_hcd vhci_hcd.0: Device attached
[  340.887697][T12534] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1558'.
[  341.036285][T12543] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1559'.
[  341.176602][ T5828] usb 44-1: SetAddress Request (34) to port 0
[  341.186296][ T5828] usb 44-1: new SuperSpeed USB device number 34 using vhci_hcd
[  342.371256][T12537] vhci_hcd: connection reset by peer
[  342.373704][ T7849] vhci_hcd vhci_hcd.3: stop threads
[  342.378581][ T7849] vhci_hcd vhci_hcd.3: release socket
[  342.378658][ T7849] vhci_hcd vhci_hcd.3: disconnect device
[  342.586693][T12557] comedi comedi3: pcl818: I/O base address or length out of range
[  342.895959][T12584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1564'.
[  342.964020][T12588] input: syz1 as /devices/virtual/input/input24
[  343.214037][T12597] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1569'.
[  343.355783][T12599] comedi comedi3: pcl818: I/O base address or length out of range
[  343.434512][T12605] netlink: 'syz.4.1570': attribute type 11 has an invalid length.
[  343.546932][T12609] FAULT_INJECTION: forcing a failure.
[  343.546932][T12609] name failslab, interval 1, probability 1, space 0, times 0
[  343.557368][T12609] CPU: 1 UID: 0 PID: 12609 Comm: syz.4.1571 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  343.557399][T12609] Tainted: [L]=SOFTLOCKUP
[  343.557405][T12609] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  343.557416][T12609] Call Trace:
[  343.557423][T12609]  <TASK>
[  343.557431][T12609]  dump_stack_lvl+0x100/0x190
[  343.557463][T12609]  should_fail_ex.cold+0x5/0xa
[  343.557486][T12609]  should_failslab+0xc2/0x120
[  343.557513][T12609]  __kmalloc_cache_noprof+0x91/0x6c0
[  343.557535][T12609]  ? copy_mount_options+0x55/0x190
[  343.557565][T12609]  copy_mount_options+0x55/0x190
[  343.557591][T12609]  __ia32_sys_mount+0x1ab/0x310
[  343.557614][T12609]  ? __pfx___ia32_sys_mount+0x10/0x10
[  343.557635][T12609]  ? ksys_write+0x1ac/0x250
[  343.557653][T12609]  ? __pfx_ksys_write+0x10/0x10
[  343.557676][T12609]  __do_fast_syscall_32+0xe7/0x970
[  343.557703][T12609]  ? lockdep_hardirqs_on+0x78/0x100
[  343.557730][T12609]  do_fast_syscall_32+0x32/0x70
[  343.557756][T12609]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  343.557779][T12609] RIP: 0023:0xf70befec
[  343.557801][T12609] Code: Unable to access opcode bytes at 0xf70befc2.
[  343.557810][T12609] RSP: 002b:00000000f548c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015
[  343.557826][T12609] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000140
[  343.557837][T12609] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000080000040
[  343.557847][T12609] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  343.557857][T12609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  343.557867][T12609] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  343.557890][T12609]  </TASK>
[  343.906200][T12616] FAULT_INJECTION: forcing a failure.
[  343.906200][T12616] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  343.933510][T12616] CPU: 0 UID: 0 PID: 12616 Comm: syz.1.1574 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  343.933541][T12616] Tainted: [L]=SOFTLOCKUP
[  343.933548][T12616] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  343.933557][T12616] Call Trace:
[  343.933563][T12616]  <TASK>
[  343.933571][T12616]  dump_stack_lvl+0x100/0x190
[  343.933602][T12616]  should_fail_ex.cold+0x5/0xa
[  343.933621][T12616]  ? prepare_alloc_pages+0x16d/0x5f0
[  343.933650][T12616]  should_fail_alloc_page+0xeb/0x140
[  343.933675][T12616]  prepare_alloc_pages+0x1f0/0x5f0
[  343.933706][T12616]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  343.933735][T12616]  ? find_held_lock+0x2b/0x80
[  343.933760][T12616]  ? is_bpf_text_address+0x8a/0x1a0
[  343.933784][T12616]  ? is_bpf_text_address+0x8a/0x1a0
[  343.933810][T12616]  ? bpf_ksym_find+0x124/0x1c0
[  343.933832][T12616]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  343.933859][T12616]  ? is_bpf_text_address+0x94/0x1a0
[  343.933886][T12616]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  343.933906][T12616]  ? __kernel_text_address+0xd/0x30
[  343.933934][T12616]  ? unwind_get_return_address+0x59/0xa0
[  343.933962][T12616]  ? arch_stack_walk+0xa6/0xf0
[  343.933996][T12616]  ? __pfx_stack_trace_save+0x10/0x10
[  343.934022][T12616]  ? stack_depot_save_flags+0x27/0x9d0
[  343.934056][T12616]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  343.934091][T12616]  ? policy_nodemask+0xed/0x4f0
[  343.934120][T12616]  alloc_pages_mpol+0x1fb/0x540
[  343.934149][T12616]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  343.934179][T12616]  alloc_pages_noprof+0x1a/0x160
[  343.934193][T12616]  get_free_pages_noprof+0x10/0xb0
[  343.934208][T12616]  __kasan_populate_vmalloc+0xa0/0x210
[  343.934224][T12616]  alloc_vmap_area+0x95d/0x2bb0
[  343.934248][T12616]  ? kasan_save_track+0x14/0x30
[  343.934267][T12616]  ? __kasan_kmalloc+0xaa/0xb0
[  343.934287][T12616]  ? __pfx_alloc_vmap_area+0x10/0x10
[  343.934312][T12616]  ? __get_vm_area_node+0x101/0x330
[  343.934343][T12616]  __get_vm_area_node+0x1ca/0x330
[  343.934373][T12616]  __vmalloc_node_range_noprof+0x228/0x1630
[  343.934397][T12616]  ? bpf_prog_alloc_no_stats+0x58/0x640
[  343.934419][T12616]  ? find_held_lock+0x2b/0x80
[  343.934433][T12616]  ? process_measurement+0x4c8/0x2350
[  343.934448][T12616]  ? process_measurement+0x4c8/0x2350
[  343.934462][T12616]  ? bpf_prog_alloc_no_stats+0x58/0x640
[  343.934481][T12616]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  343.934500][T12616]  ? tomoyo_check_open_permission+0x1db/0x3c0
[  343.934521][T12616]  ? bpf_prog_alloc_no_stats+0x58/0x640
[  343.934536][T12616]  __vmalloc_node_noprof+0xad/0xf0
[  343.934553][T12616]  ? bpf_prog_alloc_no_stats+0x58/0x640
[  343.934570][T12616]  __vmalloc_noprof+0xa3/0x120
[  343.934589][T12616]  ? __pfx___vmalloc_noprof+0x10/0x10
[  343.934607][T12616]  ? rcu_is_watching+0x12/0xc0
[  343.934622][T12616]  ? apparmor_capable+0x1d7/0x4d0
[  343.934636][T12616]  bpf_prog_alloc_no_stats+0x58/0x640
[  343.934651][T12616]  ? security_capable+0x80/0x260
[  343.934665][T12616]  bpf_prog_alloc+0x3b/0x200
[  343.934679][T12616]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  343.934697][T12616]  bpf_prog_load+0x4a9/0x2fa0
[  343.934712][T12616]  ? __pfx_bpf_prog_load+0x10/0x10
[  343.934724][T12616]  ? __lock_acquire+0x49f/0x1a40
[  343.934754][T12616]  __sys_bpf+0x18dc/0x4e80
[  343.934770][T12616]  ? __pfx___sys_bpf+0x10/0x10
[  343.934783][T12616]  ? find_held_lock+0x2b/0x80
[  343.934796][T12616]  ? get_pid_task+0xfc/0x250
[  343.934810][T12616]  ? get_pid_task+0xfc/0x250
[  343.934828][T12616]  ? proc_fail_nth_write+0x9f/0x220
[  343.934846][T12616]  ? find_held_lock+0x2b/0x80
[  343.934863][T12616]  ? rcu_read_lock_any_held+0x6a/0xa0
[  343.934878][T12616]  ? find_held_lock+0x2b/0x80
[  343.934891][T12616]  ? ksys_write+0x190/0x250
[  343.934903][T12616]  ? ksys_write+0x190/0x250
[  343.934922][T12616]  ? fput+0x79/0x100
[  343.934936][T12616]  ? __ia32_sys_bpf+0xcc/0x170
[  343.934948][T12616]  __ia32_sys_bpf+0xcc/0x170
[  343.934962][T12616]  ? __do_fast_syscall_32+0x98/0x970
[  343.934981][T12616]  __do_fast_syscall_32+0xe7/0x970
[  343.934997][T12616]  ? lockdep_hardirqs_on+0x78/0x100
[  343.935014][T12616]  do_fast_syscall_32+0x32/0x70
[  343.935031][T12616]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  343.935045][T12616] RIP: 0023:0xf706efec
[  343.935061][T12616] Code: Unable to access opcode bytes at 0xf706efc2.
[  343.935069][T12616] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  343.935091][T12616] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800054c0
[  343.935100][T12616] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000
[  343.935112][T12616] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  343.935122][T12616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  343.935132][T12616] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  343.935154][T12616]  </TASK>
[  344.116317][T12616] syz.1.1574: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  344.176444][T12616] CPU: 3 UID: 0 PID: 12616 Comm: syz.1.1574 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  344.176476][T12616] Tainted: [L]=SOFTLOCKUP
[  344.176483][T12616] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  344.176494][T12616] Call Trace:
[  344.176501][T12616]  <TASK>
[  344.176508][T12616]  dump_stack_lvl+0x100/0x190
[  344.176543][T12616]  warn_alloc.cold+0x94/0xa8
[  344.176565][T12616]  ? __pfx_warn_alloc+0x10/0x10
[  344.176583][T12616]  ? lockdep_hardirqs_on+0x78/0x100
[  344.176611][T12616]  ? __get_vm_area_node+0x2cd/0x330
[  344.176641][T12616]  ? __get_vm_area_node+0x208/0x330
[  344.176670][T12616]  __vmalloc_node_range_noprof+0xccd/0x1630
[  344.176699][T12616]  ? find_held_lock+0x2b/0x80
[  344.176723][T12616]  ? process_measurement+0x4c8/0x2350
[  344.176745][T12616]  ? process_measurement+0x4c8/0x2350
[  344.176768][T12616]  ? bpf_prog_alloc_no_stats+0x58/0x640
[  344.176800][T12616]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  344.176828][T12616]  ? tomoyo_check_open_permission+0x1db/0x3c0
[  344.176860][T12616]  ? bpf_prog_alloc_no_stats+0x58/0x640
[  344.176883][T12616]  __vmalloc_node_noprof+0xad/0xf0
[  344.176909][T12616]  ? bpf_prog_alloc_no_stats+0x58/0x640
[  344.176936][T12616]  __vmalloc_noprof+0xa3/0x120
[  344.176962][T12616]  ? __pfx___vmalloc_noprof+0x10/0x10
[  344.176990][T12616]  ? rcu_is_watching+0x12/0xc0
[  344.177011][T12616]  ? apparmor_capable+0x1d7/0x4d0
[  344.177033][T12616]  bpf_prog_alloc_no_stats+0x58/0x640
[  344.177056][T12616]  ? security_capable+0x80/0x260
[  344.177078][T12616]  bpf_prog_alloc+0x3b/0x200
[  344.177098][T12616]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  344.177126][T12616]  bpf_prog_load+0x4a9/0x2fa0
[  344.177151][T12616]  ? __pfx_bpf_prog_load+0x10/0x10
[  344.177171][T12616]  ? __lock_acquire+0x49f/0x1a40
[  344.177216][T12616]  __sys_bpf+0x18dc/0x4e80
[  344.177242][T12616]  ? __pfx___sys_bpf+0x10/0x10
[  344.177263][T12616]  ? find_held_lock+0x2b/0x80
[  344.177284][T12616]  ? get_pid_task+0xfc/0x250
[  344.177304][T12616]  ? get_pid_task+0xfc/0x250
[  344.177332][T12616]  ? proc_fail_nth_write+0x9f/0x220
[  344.177358][T12616]  ? find_held_lock+0x2b/0x80
[  344.177384][T12616]  ? rcu_read_lock_any_held+0x6a/0xa0
[  344.177407][T12616]  ? find_held_lock+0x2b/0x80
[  344.177427][T12616]  ? ksys_write+0x190/0x250
[  344.177444][T12616]  ? ksys_write+0x190/0x250
[  344.177494][T12616]  ? fput+0x79/0x100
[  344.177517][T12616]  ? __ia32_sys_bpf+0xcc/0x170
[  344.177539][T12616]  __ia32_sys_bpf+0xcc/0x170
[  344.177560][T12616]  ? __do_fast_syscall_32+0x98/0x970
[  344.177586][T12616]  __do_fast_syscall_32+0xe7/0x970
[  344.177610][T12616]  ? lockdep_hardirqs_on+0x78/0x100
[  344.177635][T12616]  do_fast_syscall_32+0x32/0x70
[  344.177660][T12616]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  344.177681][T12616] RIP: 0023:0xf706efec
[  344.177704][T12616] Code: Unable to access opcode bytes at 0xf706efc2.
[  344.177711][T12616] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  344.177729][T12616] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800054c0
[  344.177739][T12616] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000
[  344.177750][T12616] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  344.177759][T12616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  344.177768][T12616] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  344.177791][T12616]  </TASK>
[  344.177910][T12616] Mem-Info:
[  344.312528][T12616] active_anon:11739 inactive_anon:8330 isolated_anon:0
[  344.312528][T12616]  active_file:6762 inactive_file:19660 isolated_file:0
[  344.312528][T12616]  unevictable:1000 dirty:280 writeback:0
[  344.312528][T12616]  slab_reclaimable:8102 slab_unreclaimable:58370
[  344.312528][T12616]  mapped:29103 shmem:15721 pagetables:1153
[  344.312528][T12616]  sec_pagetables:310 bounce:0
[  344.312528][T12616]  kernel_misc_reclaimable:0
[  344.312528][T12616]  free:43053 free_pcp:12808 free_cma:0
[  344.312579][T12616] Node 0 active_anon:24kB inactive_anon:1836kB active_file:60kB inactive_file:792kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2092kB dirty:4kB writeback:0kB shmem:1816kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8544kB pagetables:1392kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  344.312625][T12616] Node 1 active_anon:46932kB inactive_anon:31484kB active_file:26988kB inactive_file:77848kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:114420kB dirty:1116kB writeback:0kB shmem:61068kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5408kB pagetables:3220kB sec_pagetables:120kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  344.312668][T12616] Node 0 DMA free:2264kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[  344.312718][T12616] lowmem_reserve[]: 0 280 280 280 280
[  344.312752][T12616] Node 0 DMA32 free:28564kB boost:28740kB min:41516kB low:44708kB high:47900kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:1836kB active_file:60kB inactive_file:792kB unevictable:0kB writepending:4kB zspages:40kB present:1032196kB managed:287072kB mlocked:0kB bounce:0kB free_pcp:860kB local_pcp:332kB free_cma:0kB
[  344.312799][T12616] lowmem_reserve[]: 0 0 0 0 0
[  344.312826][T12616] Node 1 DMA32 free:141384kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:46932kB inactive_anon:31484kB active_file:26988kB inactive_file:77848kB unevictable:4000kB writepending:1116kB zspages:5456kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:50320kB local_pcp:10964kB free_cma:0kB
[  344.312873][T12616] lowmem_reserve[]: 0 0 0 0 0
[  344.312905][T12616] Node 0 DMA: 36*4kB (UM) 15*8kB (UM) 3*16kB (UM) 3*32kB (UM) 3*64kB (M) 1*128kB (U) 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2264kB
[  344.313103][T12616] Node 0 DMA32: 517*4kB (UME) 150*8kB (UME) 63*16kB (UM) 205*32kB (UME) 45*64kB (UME) 16*128kB (UME) 6*256kB (UM) 6*512kB (UME) 6*1024kB (M) 1*2048kB (M) 0*4096kB = 28564kB
[  344.313248][T12616] Node 1 DMA32: 644*4kB (UME) 662*8kB (UME) 559*16kB (UME) 687*32kB (UME) 284*64kB (UME) 112*128kB (UME) 36*256kB (UME) 35*512kB (UME) 8*1024kB (UME) 9*2048kB (UM) 4*4096kB (UM) = 141456kB
[  344.313393][T12616] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  344.313408][T12616] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  344.313421][T12616] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  344.313435][T12616] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  344.313448][T12616] 43193 total pagecache pages
[  344.313454][T12616] 1027 pages in swap cache
[  344.313460][T12616] Free swap  = 35768kB
[  344.313468][T12616] Total swap = 124996kB
[  344.313474][T12616] 524155 pages RAM
[  344.313480][T12616] 0 pages HighMem/MovableOnly
[  344.313486][T12616] 211494 pages reserved
[  344.313492][T12616] 0 pages cma reserved
[  344.438821][T12621] Invalid ELF header magic: != ELF
[  344.556935][T12628] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1578'.
[  344.665586][T12638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1577'.
[  345.799248][T12666] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  345.799289][T12666] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  345.807820][T12666] vhci_hcd vhci_hcd.0: Device attached
[  346.084031][T12675] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1589'.
[  346.337468][T12686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1591'.
[  346.512803][T12668] vhci_hcd: connection reset by peer
[  346.514963][ T5788] vhci_hcd vhci_hcd.3: stop threads
[  346.516835][ T5788] vhci_hcd vhci_hcd.3: release socket
[  346.519000][ T5828] usb 44-1: device descriptor read/8, error -110
[  346.519011][ T5788] vhci_hcd vhci_hcd.3: disconnect device
[  346.587540][T12694] comedi comedi3: pcl818: I/O base address or length out of range
[  346.635709][   T56] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[  346.806847][   T56] usb 7-1: config 0 has an invalid interface number: 8 but max is 0
[  346.809528][   T56] usb 7-1: config 0 has no interface number 0
[  346.811707][   T56] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  346.815294][   T56] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  346.818689][   T56] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  346.823150][   T56] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  346.826120][   T56] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  346.829255][   T56] usb 7-1: Product: syz
[  346.830935][   T56] usb 7-1: SerialNumber: syz
[  346.836020][   T56] usb 7-1: config 0 descriptor??
[  346.843017][   T56] cm109 7-1:0.8: invalid payload size 0, expected 4
[  346.847624][   T56] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input25
[  346.916298][ T5828] usb usb44-port1: attempt power cycle
[  347.044961][T12691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  347.053244][T12691] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  347.259397][T12691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  347.267474][T12691] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  347.282034][    C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  347.288112][    C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  347.290593][    C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  347.292841][   T56] usb 7-1: USB disconnect, device number 11
[  347.294777][    C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  347.294789][    C3] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  347.358837][   T56] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  347.517399][ T5828] usb usb44-port1: unable to enumerate USB device
[  347.930846][T12712] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1600'.
[  348.080011][T12719] input: syz1 as /devices/virtual/input/input26
[  348.214173][T12723] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1603'.
[  348.490517][T12733] comedi comedi3: pcl818: I/O base address or length out of range
[  349.313559][T12747] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1610'.
[  349.549416][T12757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1612'.
[  349.554066][T12757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1612'.
[  349.559659][T12757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1612'.
[  349.590522][T12757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1612'.
[  349.609529][T12757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1612'.
[  349.617915][T12757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1612'.
[  349.626570][T12757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1612'.
[  350.339225][T12778] netlink: 'syz.4.1620': attribute type 11 has an invalid length.
[  350.769679][T12791] comedi comedi3: pcl818: I/O base address or length out of range
[  351.158090][T12797] input: syz1 as /devices/virtual/input/input27
[  351.775869][ T5088] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  351.775903][ T5743] Bluetooth: hci2: command 0x1003 tx timeout
[  352.180266][T12830] FAULT_INJECTION: forcing a failure.
[  352.180266][T12830] name failslab, interval 1, probability 1, space 0, times 0
[  352.186594][T12830] CPU: 1 UID: 0 PID: 12830 Comm: syz.2.1634 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  352.186622][T12830] Tainted: [L]=SOFTLOCKUP
[  352.186628][T12830] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  352.186637][T12830] Call Trace:
[  352.186644][T12830]  <TASK>
[  352.186651][T12830]  dump_stack_lvl+0x100/0x190
[  352.186677][T12830]  should_fail_ex.cold+0x5/0xa
[  352.186698][T12830]  should_failslab+0xc2/0x120
[  352.186721][T12830]  kmem_cache_alloc_noprof+0x91/0x6a0
[  352.186764][T12830]  ? dst_alloc+0x99/0x1a0
[  352.186788][T12830]  ? __pfx_ip6_dst_gc+0x10/0x10
[  352.186808][T12830]  dst_alloc+0x99/0x1a0
[  352.186829][T12830]  ip6_rt_cache_alloc+0x1ea/0x8e0
[  352.186853][T12830]  ? __pfx_ip6_rt_cache_alloc+0x10/0x10
[  352.186880][T12830]  ip6_pol_route+0xf28/0x1310
[  352.186908][T12830]  ? __pfx_ip6_pol_route+0x10/0x10
[  352.186929][T12830]  ? __pfx_widen_string+0x10/0x10
[  352.186956][T12830]  ? string+0x201/0x4d0
[  352.186977][T12830]  ? __pfx_ip6_pol_route_output+0x10/0x10
[  352.187000][T12830]  fib6_rule_lookup+0x24c/0x720
[  352.187022][T12830]  ? put_dec+0x2e/0xc0
[  352.187036][T12830]  ? put_dec_trunc8+0x28b/0x370
[  352.187058][T12830]  ? __pfx_fib6_rule_lookup+0x10/0x10
[  352.187088][T12830]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  352.187119][T12830]  ip6_route_output_flags+0x1d0/0x650
[  352.187143][T12830]  ip6_dst_lookup_tail.constprop.0+0x95b/0x2110
[  352.187173][T12830]  ? __pfx_tomoyo_supervisor+0x10/0x10
[  352.187194][T12830]  ? __pfx_ip6_dst_lookup_tail.constprop.0+0x10/0x10
[  352.187223][T12830]  ? __lock_acquire+0x49f/0x1a40
[  352.187251][T12830]  ? snprintf+0xc7/0x100
[  352.187272][T12830]  ? __pfx_snprintf+0x10/0x10
[  352.187297][T12830]  ip6_dst_lookup_flow+0x122/0x240
[  352.187323][T12830]  ? __pfx_ip6_dst_lookup_flow+0x10/0x10
[  352.187346][T12830]  ? find_held_lock+0x2b/0x80
[  352.187366][T12830]  ? rawv6_sendmsg+0xb3c/0x4420
[  352.187385][T12830]  ? rawv6_sendmsg+0xb3c/0x4420
[  352.187409][T12830]  rawv6_sendmsg+0xe61/0x4420
[  352.187434][T12830]  ? psi_account_irqtime+0xc3a/0xc70
[  352.187458][T12830]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  352.187489][T12830]  ? __pfx___might_resched+0x10/0x10
[  352.187525][T12830]  ? aa_sk_perm+0x309/0xaa0
[  352.187563][T12830]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  352.187581][T12830]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  352.187602][T12830]  ? inet_sendmsg+0x11c/0x140
[  352.187625][T12830]  inet_sendmsg+0x11c/0x140
[  352.187650][T12830]  ____sys_sendmsg+0x9c9/0xbe0
[  352.187694][T12830]  ? __pfx_inet_sendmsg+0x10/0x10
[  352.187720][T12830]  ? __pfx_____sys_sendmsg+0x10/0x10
[  352.187747][T12830]  ___sys_sendmsg+0x190/0x1e0
[  352.187767][T12830]  ? __pfx____sys_sendmsg+0x10/0x10
[  352.187796][T12830]  ? find_held_lock+0x2b/0x80
[  352.187827][T12830]  __sys_sendmsg+0x160/0x210
[  352.187850][T12830]  ? __pfx___sys_sendmsg+0x10/0x10
[  352.187879][T12830]  ? __pfx_ksys_write+0x10/0x10
[  352.187900][T12830]  __do_fast_syscall_32+0xe7/0x970
[  352.187923][T12830]  ? lockdep_hardirqs_on+0x78/0x100
[  352.187947][T12830]  do_fast_syscall_32+0x32/0x70
[  352.187971][T12830]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  352.187992][T12830] RIP: 0023:0xf70aefec
[  352.188013][T12830] Code: Unable to access opcode bytes at 0xf70aefc2.
[  352.188021][T12830] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  352.188036][T12830] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001c00
[  352.188052][T12830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  352.188061][T12830] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  352.188070][T12830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  352.188080][T12830] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  352.188102][T12830]  </TASK>
[  353.330798][T12838] comedi comedi3: pcl818: I/O base address or length out of range
[  353.385632][ T5987] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  353.541177][ T5987] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  353.544435][ T5987] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  353.548512][ T5987] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  353.554934][ T5987] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  353.559906][ T5987] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.565514][ T5987] usb 9-1: Product: syz
[  353.566933][ T5987] usb 9-1: Manufacturer: syz
[  353.570004][ T5987] usb 9-1: SerialNumber: syz
[  353.584442][ T5987] hub 9-1:1.0: bad descriptor, ignoring hub
[  353.586847][ T5987] hub 9-1:1.0: probe with driver hub failed with error -5
[  353.607314][   T42] audit: type=1804 audit(1786166691.843:2871): pid=12853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1641" name="/newroot/414/file1/file0" dev="9p" ino=78395411 res=1 errno=0
[  353.791389][ T5987] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  353.988366][T12844] FAULT_INJECTION: forcing a failure.
[  353.988366][T12844] name failslab, interval 1, probability 1, space 0, times 0
[  353.994459][T12844] CPU: 3 UID: 0 PID: 12844 Comm: syz.4.1638 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  353.994487][T12844] Tainted: [L]=SOFTLOCKUP
[  353.994492][T12844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  353.994503][T12844] Call Trace:
[  353.994510][T12844]  <TASK>
[  353.994517][T12844]  dump_stack_lvl+0x100/0x190
[  353.994544][T12844]  should_fail_ex.cold+0x5/0xa
[  353.994567][T12844]  should_failslab+0xc2/0x120
[  353.994592][T12844]  kmem_cache_alloc_noprof+0x91/0x6a0
[  353.994615][T12844]  ? stack_trace_save+0x8e/0xc0
[  353.994639][T12844]  ? alloc_empty_file+0x5b/0x1c0
[  353.994667][T12844]  alloc_empty_file+0x5b/0x1c0
[  353.994709][T12844]  path_openat+0xe7/0x4280
[  353.994728][T12844]  ? kasan_save_track+0x14/0x30
[  353.994750][T12844]  ? __kasan_slab_alloc+0x89/0x90
[  353.994772][T12844]  ? kmem_cache_alloc_noprof+0x26b/0x6a0
[  353.994795][T12844]  ? do_getname+0x35/0x390
[  353.994816][T12844]  ? do_sys_openat2+0xc7/0x1e0
[  353.994835][T12844]  ? __ia32_compat_sys_openat+0x12d/0x210
[  353.994863][T12844]  ? do_int80_emulation+0x14b/0x720
[  353.994897][T12844]  ? __pfx_path_openat+0x10/0x10
[  353.994920][T12844]  do_file_open+0x20e/0x430
[  353.994937][T12844]  ? __lock_acquire+0x49f/0x1a40
[  353.994962][T12844]  ? __pfx_do_file_open+0x10/0x10
[  353.994994][T12844]  ? _raw_spin_unlock+0x28/0x50
[  353.995013][T12844]  ? alloc_fd+0x471/0x7a0
[  353.995035][T12844]  do_sys_openat2+0x10f/0x1e0
[  353.995055][T12844]  ? __pfx_do_sys_openat2+0x10/0x10
[  353.995076][T12844]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  353.995100][T12844]  ? __fget_files+0x21f/0x3d0
[  353.995119][T12844]  __ia32_compat_sys_openat+0x12d/0x210
[  353.995145][T12844]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  353.995168][T12844]  ? ksys_write+0x1ac/0x250
[  353.995192][T12844]  do_int80_emulation+0x14b/0x720
[  353.995217][T12844]  asm_int80_emulation+0x1a/0x20
[  353.995235][T12844] RIP: 0023:0xf71f74eb
[  353.995249][T12844] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  353.995263][T12844] RSP: 002b:00000000f54ad03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  353.995279][T12844] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f54ad100
[  353.995288][T12844] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[  353.995298][T12844] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  353.995307][T12844] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  353.995318][T12844] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  353.995339][T12844]  </TASK>
[  354.103535][T12861] Console: switching to colour dummy device 80x25
[  354.105922][   T52] usb 9-1: USB disconnect, device number 19
[  354.133840][   T52] usblp0: removed
[  354.278014][T12862] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  354.308478][T12862] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  354.311005][T12862] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  354.313390][T12862] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  354.317295][T12862] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  354.341606][T12862] pci 0000:00:01.0: Adding to iommu group 1
[  354.354814][T12862] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  354.357120][T12862] pci 0000:00:01.0: vgaarb: bridge control possible
[  354.359554][T12862] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  354.373596][T12862] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  354.377208][T12862] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  354.381577][T12862] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  354.402115][T12862] [drm] Found bochs VGA, ID 0xb0c5.
[  354.405326][T12862] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  354.431418][T12862] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[  354.601608][T12862] Console: switching to colour frame buffer device 160x50
[  354.646908][T12862] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[  354.748263][T12871] __nla_validate_parse: 31 callbacks suppressed
[  354.748280][T12871] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1647'.
[  355.706016][T12892] input: syz1 as /devices/virtual/input/input29
[  355.780627][T12896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1651'.
[  355.941876][T12894] comedi comedi3: pcl818: I/O base address or length out of range
[  356.475629][ T5987] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  356.601210][T12916] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1659'.
[  356.625760][ T5987] usb 6-1: Using ep0 maxpacket: 32
[  356.658786][ T5987] usb 6-1: unable to get BOS descriptor or descriptor too short
[  356.672605][ T5987] usb 6-1: config 14 has an invalid interface number: 57 but max is 1
[  356.681980][ T5987] usb 6-1: config 14 has an invalid interface number: 228 but max is 1
[  356.690571][ T5987] usb 6-1: config 14 has no interface number 0
[  356.693248][ T5987] usb 6-1: config 14 has no interface number 1
[  356.701739][ T5987] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  356.706091][ T5987] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  356.715516][ T5987] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  356.725771][ T5987] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  356.739696][ T5987] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  356.751831][ T5987] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  356.764226][ T5987] usb 6-1: config 14 interface 57 has no altsetting 0
[  356.767104][ T5987] usb 6-1: config 14 interface 228 has no altsetting 0
[  356.780108][ T5987] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  356.783988][ T5987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.787231][ T5987] usb 6-1: Product: syz
[  356.788980][ T5987] usb 6-1: Manufacturer: syz
[  356.790815][ T5987] usb 6-1: SerialNumber: syz
[  357.154719][T12924] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1661'.
[  357.324943][ T5987] legousbtower 6-1:14.57: interrupt endpoints not found
[  357.523230][T12932] input: syz1 as /devices/virtual/input/input30
[  357.666620][ T5987] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0
[  357.672956][ T5987] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  358.077237][ T5987] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  358.272703][ T5987] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  358.294078][ T5828] usb 6-1: USB disconnect, device number 17
[  358.297484][ T5987] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  358.303792][ T5987] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  358.312340][ T5987] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  358.318275][T12964] usb 6-1: Couldn't submit interrupt_in_urb -19
[  358.324804][ T5987] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  358.343232][ T5987] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.346131][ T5987] usb 9-1: Product: syz
[  358.347783][ T5987] usb 9-1: Manufacturer: syz
[  358.349669][ T5987] usb 9-1: SerialNumber: syz
[  358.353479][ T5828] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected
[  358.382404][ T5987] usb 9-1: config 0 descriptor??
[  358.603700][ T5987] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  358.628429][T12976] comedi comedi3: pcl818: I/O base address or length out of range
[  358.802152][ T5987] usb 9-1: USB disconnect, device number 20
[  359.130138][T12980] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1670'.
[  360.962360][T13034] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1680'.
[  361.205709][T13032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1678'.
[  361.338179][T13050] comedi comedi3: pcl818: I/O base address or length out of range
[  361.808653][T13058] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1686'.
[  361.812836][T13058] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1686'.
[  362.339194][T13080] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1690'.
[  363.286114][T13116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1697'.
[  363.309604][ T5883] hid-generic 0006:0008:0001.0010: unknown main item tag 0x0
[  363.321223][ T5883] hid-generic 0006:0008:0001.0010: unknown main item tag 0x0
[  363.324468][ T5883] hid-generic 0006:0008:0001.0010: unknown main item tag 0x0
[  363.332645][ T5883] hid-generic 0006:0008:0001.0010: item fetching failed at offset 4/8
[  363.345781][ T5883] hid-generic 0006:0008:0001.0010: probe with driver hid-generic failed with error -22
[  363.371966][T13131] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1700'.
[  364.557413][T13185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1707'.
[  364.662107][T13190] input: syz1 as /devices/virtual/input/input31
[  364.807769][T13200] jffs2: notice: (13200) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  364.826612][T13204] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1713'.
[  364.995576][ T5883] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[  365.177700][ T5883] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  365.182888][ T5883] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  365.189254][ T5883] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[  365.192567][ T5883] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.195166][ T5883] usb 9-1: Product: syz
[  365.196835][ T5883] usb 9-1: Manufacturer: syz
[  365.198485][ T5883] usb 9-1: SerialNumber: syz
[  365.531695][ T5987] usb 9-1: USB disconnect, device number 21
[  365.858383][T13222] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1720'.
[  366.012633][T13237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1721'.
[  366.156784][T13243] input: syz1 as /devices/virtual/input/input32
[  366.256988][T13246] input: syz1 as /devices/virtual/input/input33
[  366.780083][T13270] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1726'.
[  366.895781][ T5743] Bluetooth: hci2: command 0x1003 tx timeout
[  366.918695][ T5088] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  367.408276][T13286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1730'.
[  368.318516][T13314] input: syz1 as /devices/virtual/input/input34
[  368.482730][T13318] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1736'.
[  369.840557][T13336] comedi comedi3: pcl818: I/O base address or length out of range
[  370.585791][ T5743] Bluetooth: hci2: command 0x1003 tx timeout
[  370.587898][ T5088] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  370.749983][T13375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1744'.
[  370.938687][T13379] input: syz1 as /devices/virtual/input/input35
[  370.981633][T13382] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1747'.
[  371.502613][T13402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1753'.
[  371.588546][T13414] FAULT_INJECTION: forcing a failure.
[  371.588546][T13414] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  371.609111][T13414] CPU: 0 UID: 0 PID: 13414 Comm: syz.1.1755 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  371.609142][T13414] Tainted: [L]=SOFTLOCKUP
[  371.609148][T13414] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  371.609157][T13414] Call Trace:
[  371.609178][T13414]  <TASK>
[  371.609185][T13414]  dump_stack_lvl+0x100/0x190
[  371.609335][T13414]  should_fail_ex.cold+0x5/0xa
[  371.609369][T13414]  save_fsave_header+0x14c/0x2f0
[  371.609392][T13414]  ? __pfx_save_fsave_header+0x10/0x10
[  371.609418][T13414]  ? copy_fpstate_to_sigframe+0x2b8/0xae0
[  371.609439][T13414]  ? __local_bh_enable_ip+0x9e/0x120
[  371.609484][T13414]  copy_fpstate_to_sigframe+0x755/0xae0
[  371.609509][T13414]  ? __pfx_copy_fpstate_to_sigframe+0x10/0x10
[  371.609531][T13414]  ? posixtimer_deliver_signal+0x19d/0x6e0
[  371.609555][T13414]  ? x86_task_fpu+0x5f/0x90
[  371.609583][T13414]  get_sigframe+0x3fb/0x940
[  371.609606][T13414]  ? __pfx_get_sigframe+0x10/0x10
[  371.609623][T13414]  ? rcu_is_watching+0x12/0xc0
[  371.609664][T13414]  ? siginfo_layout+0x156/0x290
[  371.609688][T13414]  ia32_setup_rt_frame+0xe7/0xaf0
[  371.609716][T13414]  ? __pfx_ia32_setup_rt_frame+0x10/0x10
[  371.609737][T13414]  ? __do_sys_flock+0x314/0x4d0
[  371.609802][T13414]  ? __pfx___do_sys_flock+0x10/0x10
[  371.609825][T13414]  arch_do_signal_or_restart+0x459/0x7a0
[  371.609845][T13414]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  371.609878][T13414]  exit_to_user_mode_loop+0x139/0x6f0
[  371.609898][T13414]  ? rcu_is_watching+0x12/0xc0
[  371.609927][T13414]  __do_fast_syscall_32+0x701/0x970
[  371.610018][T13414]  ? lockdep_hardirqs_on+0x78/0x100
[  371.610044][T13414]  do_fast_syscall_32+0x32/0x70
[  371.610071][T13414]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  371.610094][T13414] RIP: 0023:0xf706efea
[  371.610110][T13414] Code: 19 85 d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 <cd> 80 5d 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  371.610127][T13414] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 000000000000008f
[  371.610155][T13414] RAX: 000000000000008f RBX: 0000000000000004 RCX: 0000000000000001
[  371.610168][T13414] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  371.610178][T13414] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  371.610188][T13414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  371.610197][T13414] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  371.610221][T13414]  </TASK>
[  371.802717][T13419] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1757'.
[  371.833964][T13403] comedi comedi3: pcl818: I/O base address or length out of range
[  372.030580][T13427] input: syz1 as /devices/virtual/input/input36
[  372.090923][T13413] comedi comedi3: pcl818: I/O base address or length out of range
[  373.789205][ T5088] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  373.794002][ T5743] Bluetooth: hci2: command 0x1003 tx timeout
[  373.982105][T13474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1764'.
[  374.439753][T13483] input: syz1 as /devices/virtual/input/input37
[  374.601699][T13486] input: syz0 as /devices/virtual/input/input38
[  376.015870][ T5743] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  376.016248][ T5088] Bluetooth: hci2: command 0x1003 tx timeout
[  376.629186][T13539] input: syz1 as /devices/virtual/input/input39
[  376.912075][T13541] comedi comedi3: pcl818: I/O base address or length out of range
[  377.835908][T13576] geneve1: entered promiscuous mode
[  378.315861][   T52] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  378.479602][   T52] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  378.483890][   T52] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  378.488023][   T52] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  378.492495][   T52] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  378.498934][   T52] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  378.502726][   T52] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.505645][   T52] usb 7-1: Product: syz
[  378.507116][   T52] usb 7-1: Manufacturer: syz
[  378.509211][   T52] usb 7-1: SerialNumber: syz
[  378.513222][   T52] usb 7-1: config 0 descriptor??
[  378.758952][   T52] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  378.825205][T13621] input: syz1 as /devices/virtual/input/input40
[  378.826631][T13622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1788'.
[  379.014655][T13628] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1791'.
[  379.021647][   T52] usb 7-1: USB disconnect, device number 12
[  379.307085][T13642] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1793'.
[  380.451743][T13676] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1804'.
[  381.187948][T13688] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1800'.
[  381.866210][T13717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1799'.
[  382.423161][T13741] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1806'.
[  382.651463][T13752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1808'.
[  382.664807][T13752] netlink: 'syz.1.1808': attribute type 30 has an invalid length.
[  382.710405][T13752] vxlan1: entered promiscuous mode
[  382.720795][T13755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1808'.
[  382.736201][T13752] vxlan1: entered allmulticast mode
[  382.741605][T13755] netlink: 'syz.1.1808': attribute type 30 has an invalid length.
[  382.804042][T13755] vxlan1: entered promiscuous mode
[  382.810122][T13755] vxlan1: entered allmulticast mode
[  382.986970][T13758] comedi comedi3: pcl818: I/O base address or length out of range
[  383.500113][T13780] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1810'.
[  384.973556][T13815] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  384.976355][T13815] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  384.985070][T13821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1813'.
[  385.008816][T13815] vhci_hcd vhci_hcd.0: Device attached
[  385.277535][ T5828] usb 44-1: SetAddress Request (38) to port 0
[  385.284964][ T5828] usb 44-1: new SuperSpeed USB device number 38 using vhci_hcd
[  385.570836][T13818] vhci_hcd: connection reset by peer
[  385.573066][ T7849] vhci_hcd vhci_hcd.3: stop threads
[  385.575362][ T7849] vhci_hcd vhci_hcd.3: release socket
[  385.578066][ T7849] vhci_hcd vhci_hcd.3: disconnect device
[  387.140053][ T5743] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  387.144523][ T5088] Bluetooth: hci2: command 0x1003 tx timeout
[  387.470604][T13864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1827'.
[  387.751986][T13875] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1825'.
[  388.093189][T13883] jffs2: notice: (13883) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  388.126698][T13883] fuse: Unknown parameter 'öW0x0000000000000003'
[  388.516616][T13892] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  388.519759][T13892] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  388.586548][T13892] vhci_hcd vhci_hcd.0: Device attached
[  389.951955][T13893] vhci_hcd: connection closed
[  389.952499][ T7849] vhci_hcd vhci_hcd.3: stop threads
[  389.974763][ T7849] vhci_hcd vhci_hcd.3: release socket
[  389.981717][ T7849] vhci_hcd vhci_hcd.3: disconnect device
[  389.991281][T13917] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  389.993635][T13917] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  389.996616][T13917] vhci_hcd vhci_hcd.0: Device attached
[  390.005686][T13944] vhci_hcd: connection closed
[  390.006019][ T7849] vhci_hcd vhci_hcd.4: stop threads
[  390.021305][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[  390.034678][ T7849] vhci_hcd vhci_hcd.4: release socket
[  390.044422][ T7849] vhci_hcd vhci_hcd.4: disconnect device
[  390.337059][ T5828] usb 44-1: device descriptor read/8, error -110
[  390.361438][T13953] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1838'.
[  390.816971][ T5828] usb usb44-port1: attempt power cycle
[  391.013579][T13968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1839'.
[  391.408001][ T5828] usb usb44-port1: unable to enumerate USB device
[  391.826581][T14007] FAULT_INJECTION: forcing a failure.
[  391.826581][T14007] name failslab, interval 1, probability 1, space 0, times 0
[  391.832129][T14007] CPU: 0 UID: 0 PID: 14007 Comm: syz.2.1846 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  391.832172][T14007] Tainted: [L]=SOFTLOCKUP
[  391.832179][T14007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  391.832190][T14007] Call Trace:
[  391.832197][T14007]  <TASK>
[  391.832208][T14007]  dump_stack_lvl+0x100/0x190
[  391.832235][T14007]  should_fail_ex.cold+0x5/0xa
[  391.832254][T14007]  should_failslab+0xc2/0x120
[  391.832281][T14007]  __kmalloc_cache_noprof+0x91/0x6c0
[  391.832302][T14007]  ? copy_mount_options+0x55/0x190
[  391.832347][T14007]  copy_mount_options+0x55/0x190
[  391.832379][T14007]  __ia32_sys_mount+0x1ab/0x310
[  391.832402][T14007]  ? __pfx___ia32_sys_mount+0x10/0x10
[  391.832423][T14007]  ? ksys_write+0x1ac/0x250
[  391.832440][T14007]  ? __pfx_ksys_write+0x10/0x10
[  391.832462][T14007]  __do_fast_syscall_32+0xe7/0x970
[  391.832489][T14007]  ? lockdep_hardirqs_on+0x78/0x100
[  391.832513][T14007]  do_fast_syscall_32+0x32/0x70
[  391.832537][T14007]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  391.832560][T14007] RIP: 0023:0xf70aefec
[  391.832582][T14007] Code: Unable to access opcode bytes at 0xf70aefc2.
[  391.832590][T14007] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015
[  391.832607][T14007] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800000c0
[  391.832619][T14007] RDX: 0000000080004500 RSI: 0000000000000000 RDI: 0000000080000440
[  391.832629][T14007] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  391.832639][T14007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  391.832649][T14007] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  391.832672][T14007]  </TASK>
[  392.105928][T13997] comedi comedi3: pcl818: I/O base address or length out of range
[  392.185720][T14011] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  392.188519][T14011] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  392.193247][T14011] vhci_hcd vhci_hcd.0: Device attached
[  392.315173][T14015] can: request_module (can-proto-3) failed.
[  392.506050][ T5884] usb 42-1: SetAddress Request (43) to port 0
[  392.512498][ T5884] usb 42-1: new SuperSpeed USB device number 43 using vhci_hcd
[  392.871754][T14012] vhci_hcd: connection reset by peer
[  392.881573][   T12] vhci_hcd vhci_hcd.2: stop threads
[  392.883951][   T12] vhci_hcd vhci_hcd.2: release socket
[  392.886658][   T12] vhci_hcd vhci_hcd.2: disconnect device
[  393.055172][T14025] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  393.057603][T14025] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  393.060514][T14025] vhci_hcd vhci_hcd.0: Device attached
[  393.067722][T14028] vhci_hcd: connection closed
[  393.068500][   T12] vhci_hcd vhci_hcd.3: stop threads
[  393.075812][   T12] vhci_hcd vhci_hcd.3: release socket
[  393.082203][   T12] vhci_hcd vhci_hcd.3: disconnect device
[  395.135806][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  395.872264][ T5743] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  395.890236][T14081] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1861'.
[  396.249736][T14093] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  396.252183][T14093] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  396.255131][T14093] vhci_hcd vhci_hcd.0: Device attached
[  396.261620][T14099] vhci_hcd: connection closed
[  396.262175][ T7849] vhci_hcd vhci_hcd.1: stop threads
[  396.277586][ T7849] vhci_hcd vhci_hcd.1: release socket
[  396.290465][ T7849] vhci_hcd vhci_hcd.1: disconnect device
[  396.435151][T14108] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12
[  397.171446][T14143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1867'.
[  397.621550][ T5884] usb 42-1: device descriptor read/8, error -110
[  397.767084][T14153] comedi comedi3: pcl818: I/O base address or length out of range
[  398.063372][T14168] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1872'.
[  398.656336][ T5884] usb usb42-port1: attempt power cycle
[  399.762578][ T5884] usb usb42-port1: unable to enumerate USB device
[  400.080506][T14188] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1875'.
[  400.728172][T14195] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1877'.
[  401.955016][T14234] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  401.957489][T14234] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  401.962088][T14234] vhci_hcd vhci_hcd.0: Device attached
[  402.225719][ T5829] usb 46-1: SetAddress Request (30) to port 0
[  402.225781][ T5829] usb 46-1: new SuperSpeed USB device number 30 using vhci_hcd
[  402.410561][T14241] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  402.410590][T14241] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  402.410855][T14241] vhci_hcd vhci_hcd.0: Device attached
[  402.705740][ T5884] usb 42-1: SetAddress Request (47) to port 0
[  402.705805][ T5884] usb 42-1: new SuperSpeed USB device number 47 using vhci_hcd
[  402.745015][T14256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1883'.
[  402.941939][T14237] geneve2: entered allmulticast mode
[  403.695590][T14246] vhci_hcd: connection reset by peer
[  403.708749][   T13] vhci_hcd vhci_hcd.2: stop threads
[  403.711116][   T13] vhci_hcd vhci_hcd.2: release socket
[  403.713355][   T13] vhci_hcd vhci_hcd.2: disconnect device
[  403.787092][T14235] vhci_hcd: connection reset by peer
[  403.795928][   T13] vhci_hcd vhci_hcd.4: stop threads
[  403.798176][   T13] vhci_hcd vhci_hcd.4: release socket
[  403.800749][   T13] vhci_hcd vhci_hcd.4: disconnect device
[  403.942997][T14263] comedi comedi3: pcl818: I/O base address or length out of range
[  404.516675][    T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  404.687709][    T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  404.694681][    T9] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  404.709812][    T9] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[  404.716196][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  404.723612][    T9] usb 6-1: Product: syz
[  404.728240][    T9] usb 6-1: Manufacturer: syz
[  404.732633][    T9] usb 6-1: SerialNumber: syz
[  405.088260][ T5828] usb 6-1: USB disconnect, device number 18
[  405.169046][T14305] comedi comedi3: pcl818: I/O base address or length out of range
[  405.443312][T14304] comedi comedi3: pcl818: I/O base address or length out of range
[  405.631552][T14311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1890'.
[  406.000728][ T1160] Bluetooth: hci2: Frame reassembly failed (-84)
[  406.132422][T14320] comedi comedi3: pcl818: I/O base address or length out of range
[  406.359986][T14326] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1894'.
[  407.227928][T14335] comedi comedi3: pcl818: I/O base address or length out of range
[  407.305635][ T5829] usb 46-1: device descriptor read/8, error -110
[  407.776298][ T5884] usb 42-1: device descriptor read/8, error -110
[  407.845428][ T5829] usb usb46-port1: attempt power cycle
[  408.015840][ T5743] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  408.028845][T14350] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1899'.
[  408.203393][ T5884] usb usb42-port1: attempt power cycle
[  408.476112][T14361] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1900'.
[  408.546742][ T5829] usb usb46-port1: unable to enumerate USB device
[  408.890595][ T5884] usb usb42-port1: unable to enumerate USB device
[  409.506787][T14396] comedi comedi3: pcl818: I/O base address or length out of range
[  409.816422][T14409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1903'.
[  409.927486][T14413] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1905'.
[  410.603797][ T5743] Bluetooth: hci4: unexpected event for opcode 0x1005
[  410.962029][   T72] Bluetooth: hci2: Frame reassembly failed (-84)
[  411.069057][T14449] netlink: 'syz.1.1908': attribute type 5 has an invalid length.
[  411.263367][T14460] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1911'.
[  411.380741][T14466] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  411.383624][T14466] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  411.420063][T14466] vhci_hcd vhci_hcd.0: Device attached
[  411.696181][ T5884] usb 44-1: SetAddress Request (42) to port 0
[  411.698998][ T5884] usb 44-1: new SuperSpeed USB device number 42 using vhci_hcd
[  411.934027][T14479] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1914'.
[  412.016391][T14468] vhci_hcd: connection reset by peer
[  412.064673][ T7849] vhci_hcd vhci_hcd.3: stop threads
[  412.077642][ T7849] vhci_hcd vhci_hcd.3: release socket
[  412.091009][ T7849] vhci_hcd vhci_hcd.3: disconnect device
[  412.984148][ T5743] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  413.556540][T14515] comedi comedi3: pcl818: I/O base address or length out of range
[  413.971258][T14535] netlink: 'syz.4.1922': attribute type 5 has an invalid length.
[  414.480271][T14553] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  414.483012][T14553] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  414.493902][T14553] vhci_hcd vhci_hcd.0: Device attached
[  414.706571][T14560] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1926'.
[  414.777881][ T5829] usb 42-1: SetAddress Request (51) to port 0
[  414.910849][ T5829] usb 42-1: new SuperSpeed USB device number 51 using vhci_hcd
[  415.410402][T14554] vhci_hcd: connection reset by peer
[  415.418235][   T13] vhci_hcd vhci_hcd.2: stop threads
[  415.430512][   T13] vhci_hcd vhci_hcd.2: release socket
[  415.479535][   T13] vhci_hcd vhci_hcd.2: disconnect device
[  415.702917][T14587] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1935'.
[  416.765133][ T5884] usb 44-1: device descriptor read/8, error -110
[  417.156290][T14595] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[  417.158815][T14595] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  417.164844][T14595] vhci_hcd vhci_hcd.0: Device attached
[  417.172303][T14603] vhci_hcd: connection closed
[  417.172726][   T13] vhci_hcd vhci_hcd.4: stop threads
[  417.183322][   T13] vhci_hcd vhci_hcd.4: release socket
[  417.188267][   T13] vhci_hcd vhci_hcd.4: disconnect device
[  417.208497][T14605] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  417.211239][T14605] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  417.220404][T14605] vhci_hcd vhci_hcd.0: Device attached
[  417.223158][T14607] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  417.225955][T14607] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  417.236282][T14607] vhci_hcd vhci_hcd.0: Device attached
[  417.267984][ T5884] usb usb44-port1: attempt power cycle
[  417.675956][ T5828] usb 40-1: SetAddress Request (31) to port 0
[  417.680300][ T5828] usb 40-1: new SuperSpeed USB device number 31 using vhci_hcd
[  417.852133][T14609] vhci_hcd: connection closed
[  417.853200][T14616] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1932'.
[  417.859897][ T5884] usb usb44-port1: unable to enumerate USB device
[  417.866640][   T13] vhci_hcd vhci_hcd.2: stop threads
[  417.874500][   T13] vhci_hcd vhci_hcd.2: release socket
[  417.890163][   T13] vhci_hcd vhci_hcd.2: disconnect device
[  418.426808][T14606] vhci_hcd: connection reset by peer
[  418.428809][   T12] vhci_hcd vhci_hcd.1: stop threads
[  418.430772][   T12] vhci_hcd vhci_hcd.1: release socket
[  418.435662][   T12] vhci_hcd vhci_hcd.1: disconnect device
[  419.329504][T14644] comedi comedi3: pcl818: I/O base address or length out of range
[  419.342377][T14660] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  419.345053][T14660] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  419.350627][T14660] vhci_hcd vhci_hcd.0: Device attached
[  419.665910][ T1493] usb 46-1: SetAddress Request (34) to port 0
[  419.680171][ T1493] usb 46-1: new SuperSpeed USB device number 34 using vhci_hcd
[  420.042687][ T5829] usb 42-1: device descriptor read/8, error -110
[  420.122727][T14662] vhci_hcd: connection reset by peer
[  420.127526][   T12] vhci_hcd vhci_hcd.4: stop threads
[  420.129896][   T12] vhci_hcd vhci_hcd.4: release socket
[  420.132406][   T12] vhci_hcd vhci_hcd.4: disconnect device
[  420.216217][T14677] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1938'.
[  420.448986][ T5829] usb usb42-port1: attempt power cycle
[  421.160947][ T5829] usb usb42-port1: unable to enumerate USB device
[  422.545562][T14722] comedi comedi3: pcl818: I/O base address or length out of range
[  422.735654][ T5828] usb 40-1: device descriptor read/8, error -110
[  423.142118][T14735] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  423.144572][T14735] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  423.212483][T14735] vhci_hcd vhci_hcd.0: Device attached
[  423.214960][ T5828] usb usb40-port1: attempt power cycle
[  423.231845][T14742] 9p: Bad value for 'rfdno'
[  423.236588][T14742] jffs2: notice: (14742) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  423.546175][   T42] audit: type=1800 audit(2000000016.129:2872): pid=14741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1948" name="file0" dev="overlay" ino=2787 res=0 errno=0
[  423.591691][T10614] usb 42-1: SetAddress Request (55) to port 0
[  423.595032][T10614] usb 42-1: new SuperSpeed USB device number 55 using vhci_hcd
[  423.972182][ T5828] usb usb40-port1: unable to enumerate USB device
[  424.056066][T14738] vhci_hcd: connection reset by peer
[  424.065318][   T13] vhci_hcd vhci_hcd.2: stop threads
[  424.067284][   T13] vhci_hcd vhci_hcd.2: release socket
[  424.069408][   T13] vhci_hcd vhci_hcd.2: disconnect device
[  424.815659][ T1493] usb 46-1: device descriptor read/8, error -110
[  425.276508][ T1493] usb usb46-port1: attempt power cycle
[  426.126227][ T1493] usb usb46-port1: unable to enumerate USB device
[  426.332469][T14818] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1957'.
[  426.947672][  T965] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  427.318202][  T965] usb 7-1: Using ep0 maxpacket: 32
[  427.323740][  T965] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  427.328211][  T965] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.341567][  T965] usb 7-1: config 0 descriptor??
[  427.354025][  T965] as10x_usb: device has been detected
[  427.361681][  T965] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  427.393873][  T965] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  427.457504][  T965] as10x_usb: error during firmware upload part1
[  427.460777][  T965] Registered device nBox DVB-T Dongle
[  427.560306][  T965] usb 7-1: USB disconnect, device number 13
[  427.780708][T14858] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1963'.
[  427.869293][  T965] Unregistered device nBox DVB-T Dongle
[  428.655674][T10614] usb 42-1: device descriptor read/8, error -110
[  429.180451][T14892] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1964'.
[  429.507212][T10614] usb usb42-port1: attempt power cycle
[  429.927701][  T965] as10x_usb: device has been disconnected
[  430.073589][T10614] usb usb42-port1: unable to enumerate USB device
[  431.298059][T14942] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  431.300240][T14942] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  431.314378][T14944] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1971'.
[  431.316140][T14942] vhci_hcd vhci_hcd.0: Device attached
[  431.607414][ T1493] usb 44-1: SetAddress Request (46) to port 0
[  431.642490][ T1493] usb 44-1: new SuperSpeed USB device number 46 using vhci_hcd
[  432.669698][T14943] vhci_hcd: connection reset by peer
[  432.672510][   T13] vhci_hcd vhci_hcd.3: stop threads
[  432.674750][   T13] vhci_hcd vhci_hcd.3: release socket
[  432.679145][   T13] vhci_hcd vhci_hcd.3: disconnect device
[  434.443602][T15025] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  434.446357][T15025] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  434.454464][T15025] vhci_hcd vhci_hcd.0: Device attached
[  434.530312][T15030] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1979'.
[  434.575609][ T5088] Bluetooth: hci2: command 0x1003 tx timeout
[  434.586501][ T5743] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  435.200341][T15026] vhci_hcd: connection closed
[  435.204379][   T13] vhci_hcd vhci_hcd.3: stop threads
[  435.210802][   T13] vhci_hcd vhci_hcd.3: release socket
[  435.214252][   T13] vhci_hcd vhci_hcd.3: disconnect device
[  435.887896][T15063] comedi comedi3: pcl818: I/O base address or length out of range
[  436.171689][T15071] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  436.174693][T15071] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  436.184645][T15071] vhci_hcd vhci_hcd.0: Device attached
[  436.499442][T10614] usb 46-1: SetAddress Request (38) to port 0
[  436.507638][T10614] usb 46-1: new SuperSpeed USB device number 38 using vhci_hcd
[  436.717437][T15072] vhci_hcd: connection reset by peer
[  436.735702][ T1493] usb 44-1: device descriptor read/8, error -110
[  436.800444][T15084] comedi comedi3: pcl818: I/O base address or length out of range
[  436.827132][ T5788] vhci_hcd vhci_hcd.4: stop threads
[  436.833526][ T5788] vhci_hcd vhci_hcd.4: release socket
[  436.840461][ T5788] vhci_hcd vhci_hcd.4: disconnect device
[  436.957116][   T42] audit: type=1800 audit(2000000029.549:2873): pid=15086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1988" name="file0" dev="overlay" ino=2921 res=0 errno=0
[  437.146833][ T1493] usb usb44-port1: attempt power cycle
[  438.550604][ T1493] usb usb44-port1: unable to enumerate USB device
[  438.876476][T15119] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1992'.
[  439.249865][T15128] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1993'.
[  440.516122][T15173] netlink: 'syz.2.1999': attribute type 4 has an invalid length.
[  440.522439][T15173] netlink: 'syz.2.1999': attribute type 4 has an invalid length.
[  440.716675][T15180] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  440.719009][T15180] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  440.728406][T15180] vhci_hcd vhci_hcd.0: Device attached
[  441.015881][ T5884] usb 40-1: SetAddress Request (35) to port 0
[  441.018774][ T5884] usb 40-1: new SuperSpeed USB device number 35 using vhci_hcd
[  441.029657][T15173] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  441.092586][T15173] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  441.615930][T10614] usb 46-1: device descriptor read/8, error -110
[  441.851726][T15181] vhci_hcd: connection reset by peer
[  441.854057][ T7849] vhci_hcd vhci_hcd.1: stop threads
[  441.857279][ T7849] vhci_hcd vhci_hcd.1: release socket
[  441.859964][ T7849] vhci_hcd vhci_hcd.1: disconnect device
[  441.955072][T15173] bridge0: left promiscuous mode
[  442.006652][ T5788] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  442.021602][ T5788] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.032287][ T5788] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  442.045945][ T5788] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.046414][T10614] usb usb46-port1: attempt power cycle
[  442.049491][ T5788] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  442.049553][ T5788] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.049573][ T5788] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  442.049592][ T5788] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.706329][T10614] usb usb46-port1: unable to enumerate USB device
[  443.916132][T15275] FAULT_INJECTION: forcing a failure.
[  443.916132][T15275] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  443.922261][T15275] CPU: 3 UID: 0 PID: 15275 Comm: syz.2.2011 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  443.922291][T15275] Tainted: [L]=SOFTLOCKUP
[  443.922298][T15275] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  443.922309][T15275] Call Trace:
[  443.922318][T15275]  <TASK>
[  443.922326][T15275]  dump_stack_lvl+0x100/0x190
[  443.922354][T15275]  should_fail_ex.cold+0x5/0xa
[  443.922377][T15275]  _copy_to_user+0x32/0xd0
[  443.922444][T15275]  simple_read_from_buffer+0xcb/0x170
[  443.922477][T15275]  proc_fail_nth_read+0x1af/0x230
[  443.922520][T15275]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  443.922547][T15275]  ? rw_verify_area+0xce/0x6d0
[  443.922573][T15275]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  443.922599][T15275]  vfs_read+0x1e4/0xb40
[  443.922620][T15275]  ? __pfx_vfs_read+0x10/0x10
[  443.922636][T15275]  ? find_held_lock+0x2b/0x80
[  443.922660][T15275]  ? __fget_files+0x215/0x3d0
[  443.922681][T15275]  ? __fget_files+0x21f/0x3d0
[  443.922706][T15275]  ksys_read+0x12a/0x250
[  443.922723][T15275]  ? __pfx_ksys_read+0x10/0x10
[  443.922754][T15275]  do_int80_emulation+0x14b/0x720
[  443.922786][T15275]  asm_int80_emulation+0x1a/0x20
[  443.922804][T15275] RIP: 0023:0xf71e74eb
[  443.922820][T15275] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  443.922836][T15275] RSP: 002b:00000000f547c4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  443.922853][T15275] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f547c5d0
[  443.922864][T15275] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  443.922874][T15275] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  443.922884][T15275] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  443.922895][T15275] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  443.922919][T15275]  </TASK>
[  444.594081][T15282] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  444.596275][T15282] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  444.624070][T15282] vhci_hcd vhci_hcd.0: Device attached
[  444.637617][T15285] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  444.640264][T15285] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  444.663440][T15285] vhci_hcd vhci_hcd.0: Device attached
[  444.906180][T10614] usb 46-1: SetAddress Request (42) to port 0
[  444.915200][T10614] usb 46-1: new SuperSpeed USB device number 42 using vhci_hcd
[  444.955509][T15283] vhci_hcd: connection closed
[  444.955916][ T7849] vhci_hcd vhci_hcd.4: stop threads
[  444.961648][ T1493] usb 42-1: SetAddress Request (59) to port 0
[  444.962838][ T7849] vhci_hcd vhci_hcd.4: release socket
[  444.966770][ T1493] usb 42-1: new SuperSpeed USB device number 59 using vhci_hcd
[  444.972117][ T7849] vhci_hcd vhci_hcd.4: disconnect device
[  445.048904][T15286] vhci_hcd: connection reset by peer
[  445.051455][   T12] vhci_hcd vhci_hcd.2: stop threads
[  445.056116][   T12] vhci_hcd vhci_hcd.2: release socket
[  445.060835][   T12] vhci_hcd vhci_hcd.2: disconnect device
[  445.091232][T15297] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  445.094698][T15297] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  445.359631][T15304] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  445.362464][T15304] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  445.368812][T15304] vhci_hcd vhci_hcd.0: Device attached
[  446.013048][T15305] vhci_hcd: connection closed
[  446.013417][   T12] vhci_hcd vhci_hcd.1: stop threads
[  446.018482][   T12] vhci_hcd vhci_hcd.1: release socket
[  446.022003][   T12] vhci_hcd vhci_hcd.1: disconnect device
[  446.095647][ T5884] usb 40-1: device descriptor read/8, error -110
[  446.280474][T15328] netlink: 'syz.2.2021': attribute type 1 has an invalid length.
[  446.295908][T15328] bond2: option mode: invalid value (9)
[  446.299413][T15328] bond2 (unregistering): Released all slaves
[  446.363446][T15333] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2020'.
[  446.441679][T15337] netlink: 'syz.2.2021': attribute type 10 has an invalid length.
[  446.444858][T15337] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2021'.
[  446.622513][ T5884] usb usb40-port1: attempt power cycle
[  446.771056][T15335] bond1: (slave dummy0): Releasing active interface
[  446.787626][T15337] dummy0: entered promiscuous mode
[  447.053059][T15369] Unknown options in mask 1001
[  447.186982][ T5884] usb usb40-port1: unable to enumerate USB device
[  447.636744][T15386] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  447.639588][T15386] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  447.665115][T15386] vhci_hcd vhci_hcd.0: Device attached
[  448.549434][T15388] vhci_hcd: connection reset by peer
[  448.552327][   T12] vhci_hcd vhci_hcd.4: stop threads
[  448.556750][   T12] vhci_hcd vhci_hcd.4: release socket
[  448.559252][   T12] vhci_hcd vhci_hcd.4: disconnect device
[  448.765275][T15418] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  448.768057][T15418] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  448.773016][T15418] vhci_hcd vhci_hcd.0: Device attached
[  448.847239][T15421] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  448.850044][T15421] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  448.885894][T15421] vhci_hcd vhci_hcd.0: Device attached
[  448.930171][T15419] vhci_hcd: connection closed
[  448.930594][   T12] vhci_hcd vhci_hcd.2: stop threads
[  448.935194][   T12] vhci_hcd vhci_hcd.2: release socket
[  448.939338][   T12] vhci_hcd vhci_hcd.2: disconnect device
[  449.198050][ T5884] usb 40-1: SetAddress Request (39) to port 0
[  449.201328][ T5884] usb 40-1: new SuperSpeed USB device number 39 using vhci_hcd
[  449.636944][T15422] vhci_hcd: connection reset by peer
[  449.642485][   T12] vhci_hcd vhci_hcd.1: stop threads
[  449.651813][   T12] vhci_hcd vhci_hcd.1: release socket
[  449.656636][   T12] vhci_hcd vhci_hcd.1: disconnect device
[  450.016789][T10614] usb 46-1: device descriptor read/8, error -110
[  450.029788][ T1493] usb 42-1: device descriptor read/8, error -110
[  450.157533][T15445] comedi comedi3: pcl818: I/O base address or length out of range
[  450.427211][T10614] usb usb46-port1: attempt power cycle
[  450.430189][ T1493] usb usb42-port1: attempt power cycle
[  450.491323][T15447] comedi comedi3: pcl818: I/O base address or length out of range
[  450.502765][T15452] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode
[  450.505173][T15452] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode
[  450.621150][   T42] audit: type=1326 audit(2000000043.209:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15453 comm="syz.1.2040" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x0
[  450.875713][T15464] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2042'.
[  450.997307][ T1493] usb usb42-port1: unable to enumerate USB device
[  451.000731][T10614] usb usb46-port1: unable to enumerate USB device
[  451.462675][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[  451.517196][T15483] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  451.519986][T15483] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  451.550988][T15483] vhci_hcd vhci_hcd.0: Device attached
[  451.835833][T10614] usb 46-1: SetAddress Request (46) to port 0
[  451.843558][T10614] usb 46-1: new SuperSpeed USB device number 46 using vhci_hcd
[  452.364175][T15516] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2047'.
[  452.454639][T15486] vhci_hcd: connection reset by peer
[  452.465201][   T12] vhci_hcd vhci_hcd.4: stop threads
[  452.469506][   T12] vhci_hcd vhci_hcd.4: release socket
[  452.479578][   T12] vhci_hcd vhci_hcd.4: disconnect device
[  452.500844][T15520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2048'.
[  453.534306][T15553] FAULT_INJECTION: forcing a failure.
[  453.534306][T15553] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  453.539745][T15553] CPU: 3 UID: 0 PID: 15553 Comm: syz.2.2052 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  453.539773][T15553] Tainted: [L]=SOFTLOCKUP
[  453.539779][T15553] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  453.539791][T15553] Call Trace:
[  453.539798][T15553]  <TASK>
[  453.539807][T15553]  dump_stack_lvl+0x100/0x190
[  453.539834][T15553]  should_fail_ex.cold+0x5/0xa
[  453.539853][T15553]  _copy_from_user+0x2e/0xd0
[  453.539878][T15553]  userfaultfd_ioctl+0xe0f/0x5990
[  453.539895][T15553]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  453.539932][T15553]  ? get_pid_task+0x106/0x250
[  453.539958][T15553]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  453.539973][T15553]  ? do_vfs_ioctl+0x226/0x13e0
[  453.539996][T15553]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  453.540025][T15553]  ? find_held_lock+0x2b/0x80
[  453.540046][T15553]  ? __fget_files+0x215/0x3d0
[  453.540061][T15553]  ? hook_file_ioctl_common+0x140/0x440
[  453.540098][T15553]  ? __fget_files+0x21f/0x3d0
[  453.540116][T15553]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  453.540135][T15553]  ? compat_ptr_ioctl+0x6e/0xa0
[  453.540156][T15553]  compat_ptr_ioctl+0x6e/0xa0
[  453.540178][T15553]  ? __pfx_compat_ptr_ioctl+0x10/0x10
[  453.540200][T15553]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  453.540227][T15553]  __do_fast_syscall_32+0xe7/0x970
[  453.540253][T15553]  ? lockdep_hardirqs_on+0x78/0x100
[  453.540279][T15553]  do_fast_syscall_32+0x32/0x70
[  453.540303][T15553]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  453.540325][T15553] RIP: 0023:0xf70aefec
[  453.540346][T15553] Code: Unable to access opcode bytes at 0xf70aefc2.
[  453.540355][T15553] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  453.540372][T15553] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c028aa05
[  453.540383][T15553] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000
[  453.540394][T15553] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  453.540403][T15553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  453.540413][T15553] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  453.540443][T15553]  </TASK>
[  454.255829][ T5884] usb 40-1: device descriptor read/8, error -110
[  454.653496][ T5884] usb usb40-port1: attempt power cycle
[  455.266600][ T5884] usb usb40-port1: unable to enumerate USB device
[  455.756040][T15595] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2059'.
[  456.528987][T15596] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  456.880056][T15604] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  457.370413][T10614] usb 46-1: device descriptor read/8, error -110
[  457.457887][T15592] can0: slcan on ttyS3.
[  457.727506][T15621] can0 (unregistered): slcan off ttyS3.
[  457.808759][T10614] usb usb46-port1: attempt power cycle
[  458.167543][T15634] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2067'.
[  458.505728][T10614] usb usb46-port1: unable to enumerate USB device
[  460.198676][T15707] overlay: Unknown parameter '/'
[  460.213853][T15707] netlink: zone id is out of range
[  460.216310][T15707] netlink: zone id is out of range
[  460.218288][T15707] netlink: zone id is out of range
[  460.361583][T15718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2080'.
[  460.441719][T15721] 
: renamed from bond0 (while UP)
[  460.455083][T15723] block2mtd: illegal erase size
[  460.463106][T15727] block2mtd: illegal erase size
[  460.559866][T15732] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2082'.
[  460.582533][T15733] fuse: Invalid rootmode
[  460.704244][T15739] FAULT_INJECTION: forcing a failure.
[  460.704244][T15739] name failslab, interval 1, probability 1, space 0, times 0
[  460.709943][T15739] CPU: 0 UID: 0 PID: 15739 Comm: syz.2.2087 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  460.709975][T15739] Tainted: [L]=SOFTLOCKUP
[  460.709984][T15739] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  460.709994][T15739] Call Trace:
[  460.710001][T15739]  <TASK>
[  460.710009][T15739]  dump_stack_lvl+0x100/0x190
[  460.710041][T15739]  should_fail_ex.cold+0x5/0xa
[  460.710067][T15739]  should_failslab+0xc2/0x120
[  460.710094][T15739]  __kmalloc_noprof+0xfc/0x820
[  460.710119][T15739]  ? rcu_is_watching+0x12/0xc0
[  460.710146][T15739]  ? tomoyo_realpath_from_path+0xb6/0x690
[  460.710182][T15739]  tomoyo_realpath_from_path+0xb6/0x690
[  460.710214][T15739]  tomoyo_path_number_perm+0x23c/0x580
[  460.710234][T15739]  ? tomoyo_path_number_perm+0x22e/0x580
[  460.710256][T15739]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  460.710277][T15739]  ? get_pid_task+0x106/0x250
[  460.710326][T15739]  ? find_held_lock+0x2b/0x80
[  460.710354][T15739]  ? __fget_files+0x215/0x3d0
[  460.710371][T15739]  ? hook_file_ioctl_common+0x140/0x440
[  460.710391][T15739]  ? __fget_files+0x215/0x3d0
[  460.710411][T15739]  ? __fget_files+0x21f/0x3d0
[  460.710430][T15739]  security_file_ioctl_compat+0xd3/0x230
[  460.710480][T15739]  __ia32_compat_sys_ioctl+0xc2/0x360
[  460.710508][T15739]  __do_fast_syscall_32+0xe7/0x970
[  460.710533][T15739]  ? lockdep_hardirqs_on+0x78/0x100
[  460.710557][T15739]  do_fast_syscall_32+0x32/0x70
[  460.710581][T15739]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  460.710606][T15739] RIP: 0023:0xf70aefec
[  460.710630][T15739] Code: Unable to access opcode bytes at 0xf70aefc2.
[  460.710639][T15739] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  460.710655][T15739] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000402c582a
[  460.710666][T15739] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000
[  460.710676][T15739] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  460.710685][T15739] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  460.710695][T15739] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  460.710716][T15739]  </TASK>
[  460.711757][T15739] ERROR: Out of memory at tomoyo_realpath_from_path.
[  460.818801][T15742] Unknown options in mask 1001
[  462.345835][T15766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2096'.
[  462.354152][T15766] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2096'.
[  462.366225][T15766] raw_sendmsg: syz.1.2096 forgot to set AF_INET. Fix it!
[  462.725950][T15781] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  462.728836][T15781] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  462.740225][T15781] vhci_hcd vhci_hcd.0: Device attached
[  463.026279][   T29] usb 44-1: SetAddress Request (50) to port 0
[  463.029374][   T29] usb 44-1: new SuperSpeed USB device number 50 using vhci_hcd
[  463.310788][T15782] vhci_hcd: connection reset by peer
[  463.315614][   T12] vhci_hcd vhci_hcd.3: stop threads
[  463.318354][   T12] vhci_hcd vhci_hcd.3: release socket
[  463.321370][   T12] vhci_hcd vhci_hcd.3: disconnect device
[  463.398617][T15792] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2102'.
[  465.358636][T15858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2113'.
[  466.060729][T15883] netlink: 'syz.2.2116': attribute type 1 has an invalid length.
[  466.121623][T15887] FAULT_INJECTION: forcing a failure.
[  466.121623][T15887] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  466.134866][T15887] CPU: 2 UID: 0 PID: 15887 Comm: syz.4.2117 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  466.134899][T15887] Tainted: [L]=SOFTLOCKUP
[  466.134905][T15887] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  466.134914][T15887] Call Trace:
[  466.134921][T15887]  <TASK>
[  466.134927][T15887]  dump_stack_lvl+0x100/0x190
[  466.134951][T15887]  should_fail_ex.cold+0x5/0xa
[  466.134969][T15887]  _copy_from_iter+0x1f4/0x1690
[  466.135015][T15887]  ? __asan_memset+0x23/0x50
[  466.135033][T15887]  ? __pfx__copy_from_iter+0x10/0x10
[  466.135059][T15887]  ? __pfx___alloc_skb+0x10/0x10
[  466.135129][T15887]  netlink_sendmsg+0x808/0xda0
[  466.135194][T15887]  ? __pfx_netlink_sendmsg+0x10/0x10
[  466.135217][T15887]  ? apparmor_socket_sendmsg+0x15b/0x270
[  466.135240][T15887]  ____sys_sendmsg+0xa4d/0xbe0
[  466.135260][T15887]  ? __pfx_netlink_sendmsg+0x10/0x10
[  466.135284][T15887]  ? __pfx_____sys_sendmsg+0x10/0x10
[  466.135316][T15887]  ___sys_sendmsg+0x190/0x1e0
[  466.135339][T15887]  ? __pfx____sys_sendmsg+0x10/0x10
[  466.135368][T15887]  ? find_held_lock+0x2b/0x80
[  466.135403][T15887]  __sys_sendmsg+0x160/0x210
[  466.135431][T15887]  ? __pfx___sys_sendmsg+0x10/0x10
[  466.135478][T15887]  ? __pfx_ksys_write+0x10/0x10
[  466.135504][T15887]  __do_fast_syscall_32+0xe7/0x970
[  466.135531][T15887]  ? lockdep_hardirqs_on+0x78/0x100
[  466.135559][T15887]  do_fast_syscall_32+0x32/0x70
[  466.135586][T15887]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  466.135611][T15887] RIP: 0023:0xf70befec
[  466.135634][T15887] Code: Unable to access opcode bytes at 0xf70befc2.
[  466.135641][T15887] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  466.135659][T15887] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001080
[  466.135672][T15887] RDX: 0000000000000810 RSI: 0000000000000000 RDI: 0000000000000000
[  466.135683][T15887] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  466.135695][T15887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  466.135706][T15887] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  466.135725][T15887]  </TASK>
[  466.389211][T15894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2120'.
[  466.413525][T15896] netlink: 'syz.4.2121': attribute type 1 has an invalid length.
[  466.902412][T15908] comedi comedi3: pcl818: I/O base address or length out of range
[  467.101071][T15912] comedi comedi3: pcl818: I/O base address or length out of range
[  467.803709][T15946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2128'.
[  468.095660][   T29] usb 44-1: device descriptor read/8, error -110
[  468.356243][T15966] Cannot find set identified by id 2 to match
[  468.429608][T15968] Unknown options in mask 1001
[  468.499220][   T29] usb usb44-port1: attempt power cycle
[  469.263884][T15975] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  469.266608][T15975] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  469.281281][T15979] netlink: 'syz.1.2139': attribute type 1 has an invalid length.
[  469.282443][T15975] vhci_hcd vhci_hcd.0: Device attached
[  469.320101][T15979] 8021q: adding VLAN 0 to HW filter on device bond0
[  469.375655][   T34] usb 9-1: new full-speed USB device number 22 using dummy_hcd
[  469.392403][T15979] bond0: (slave veth3): Enslaving as an active interface with a down link
[  469.407376][T15981] Unable to locate . in FUNC.INSTANCE
[  469.409195][T15979] netlink: 'syz.1.2139': attribute type 10 has an invalid length.
[  469.414292][T15979] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2139'.
[  469.489687][   T29] usb usb44-port1: unable to enumerate USB device
[  469.518207][T15976] vhci_hcd: connection closed
[  469.522416][   T12] vhci_hcd vhci_hcd.2: stop threads
[  469.527428][   T12] vhci_hcd vhci_hcd.2: release socket
[  469.530442][   T12] vhci_hcd vhci_hcd.2: disconnect device
[  469.534745][   T34] usb 9-1: unable to get BOS descriptor or descriptor too short
[  469.540360][   T34] usb 9-1: not running at top speed; connect to a high speed hub
[  469.545571][   T34] usb 9-1: config 14 has an invalid interface number: 57 but max is 1
[  469.549164][   T34] usb 9-1: config 14 has an invalid interface number: 228 but max is 1
[  469.552481][   T34] usb 9-1: config 14 has no interface number 0
[  469.555085][   T34] usb 9-1: config 14 has no interface number 1
[  469.556136][ T5884] usb 42-1: enqueue for inactive port 0
[  469.558480][   T34] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  469.565056][   T34] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[  469.570235][   T34] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  469.576855][   T34] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64
[  469.581674][   T34] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid maxpacket 65280, setting to 64
[  469.586548][   T34] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  469.592156][   T34] usb 9-1: config 14 interface 57 has no altsetting 0
[  469.595045][   T34] usb 9-1: config 14 interface 228 has no altsetting 0
[  469.600621][   T34] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  469.604588][   T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.608109][   T34] usb 9-1: Product: syz
[  469.609871][   T34] usb 9-1: Manufacturer: syz
[  469.611849][   T34] usb 9-1: SerialNumber: syz
[  470.138110][ T5884] usb usb42-port1: attempt power cycle
[  470.487548][   T34] legousbtower 9-1:14.57: interrupt endpoints not found
[  470.682890][T15989] comedi comedi3: pcl818: I/O base address or length out of range
[  470.786924][ T5884] usb usb42-port1: unable to enumerate USB device
[  471.559610][T16008] typec_fusb302 0-0022: supply vbus not found, using dummy regulator
[  471.592271][T16008] typec_fusb302 0-0022: failed to request gpio_int_n
[  471.647925][T16008] typec_fusb302 0-0022: probe with driver typec_fusb302 failed with error -2
[  471.655218][T16008] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22
[  471.675606][  T965] usb 7-1: new full-speed USB device number 14 using dummy_hcd
[  471.835627][  T965] usb 7-1: config 150 has an invalid interface number: 204 but max is 2
[  471.839579][T16014] Unknown options in mask 1001
[  471.841771][  T965] usb 7-1: config 150 has 2 interfaces, different from the descriptor's value: 3
[  471.851768][  T965] usb 7-1: config 150 has no interface number 0
[  471.857300][  T965] usb 7-1: config 150 interface 204 has no altsetting 0
[  471.863524][  T965] usb 7-1: config 150 interface 1 has no altsetting 0
[  471.899676][  T965] usb 7-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  471.904802][  T965] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  471.915273][  T965] usb 7-1: Product: syz
[  471.930898][  T965] usb 7-1: Manufacturer: syz
[  471.934945][  T965] usb 7-1: SerialNumber: syz
[  471.947093][   T34] legousbtower 9-1:14.228: get version request failed: -110
[  471.972677][   T34] legousbtower 9-1:14.228: probe with driver legousbtower failed with error -110
[  472.010222][T16008] typec_fusb302 1-0022: I2C/SMBus block functionality not supported!
[  472.041604][T16008] i2c i2c-1: new_device: Instantiated device typec_fusb302 at 0x22
[  472.052451][T16012] Invalid option length (1047276) for dns_resolver key
[  472.098510][ T5737] usb 9-1: USB disconnect, device number 22
[  472.292913][  T965] xr_serial 7-1:150.204: skipping garbage
[  472.308820][  T965] xr_serial 7-1:150.204: xr_serial converter detected
[  473.233148][T16040] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  473.235408][T16040] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  473.246836][T16040] vhci_hcd vhci_hcd.0: Device attached
[  473.515799][   T29] usb 46-1: SetAddress Request (50) to port 0
[  473.517942][   T29] usb 46-1: new SuperSpeed USB device number 50 using vhci_hcd
[  473.814266][T16041] vhci_hcd: connection reset by peer
[  473.817314][   T12] vhci_hcd vhci_hcd.4: stop threads
[  473.819183][ T5088] Bluetooth: hci1: unexpected event for opcode 0x4ad0
[  473.821558][   T12] vhci_hcd vhci_hcd.4: release socket
[  473.825892][   T12] vhci_hcd vhci_hcd.4: disconnect device
[  474.103845][T16060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2151'.
[  474.107664][T16060] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2151'.
[  474.111370][T16060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2151'.
[  474.114831][T16060] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2151'.
[  474.119579][T16060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2151'.
[  474.369302][  T965] xr_serial ttyUSB0: Failed to set reg 0x0e: -71
[  474.371983][  T965] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  474.397067][  T965] usb 7-1: USB disconnect, device number 14
[  474.406712][  T965] xr_serial 7-1:150.204: device disconnected
[  474.504155][T16063] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2153'.
[  476.114770][ T5088] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  476.151169][T16135] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2160'.
[  477.169569][T16164] comedi comedi3: pcl818: I/O base address or length out of range
[  477.183010][T16167] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2166'.
[  477.410882][T16182] FAULT_INJECTION: forcing a failure.
[  477.410882][T16182] name failslab, interval 1, probability 1, space 0, times 0
[  477.416026][T16182] CPU: 1 UID: 0 PID: 16182 Comm: syz.4.2168 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  477.416057][T16182] Tainted: [L]=SOFTLOCKUP
[  477.416064][T16182] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  477.416075][T16182] Call Trace:
[  477.416082][T16182]  <TASK>
[  477.416090][T16182]  dump_stack_lvl+0x100/0x190
[  477.416120][T16182]  should_fail_ex.cold+0x5/0xa
[  477.416142][T16182]  should_failslab+0xc2/0x120
[  477.416169][T16182]  kmem_cache_alloc_noprof+0x91/0x6a0
[  477.416194][T16182]  ? do_getname+0x35/0x390
[  477.416221][T16182]  do_getname+0x35/0x390
[  477.416244][T16182]  __ia32_sys_rename+0x65/0xb0
[  477.416268][T16182]  __do_fast_syscall_32+0xe7/0x970
[  477.416315][T16182]  ? lockdep_hardirqs_on+0x78/0x100
[  477.416344][T16182]  do_fast_syscall_32+0x32/0x70
[  477.416371][T16182]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  477.416394][T16182] RIP: 0023:0xf70befec
[  477.416417][T16182] Code: Unable to access opcode bytes at 0xf70befc2.
[  477.416425][T16182] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000026
[  477.416444][T16182] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 0000000080000100
[  477.416470][T16182] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  477.416481][T16182] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  477.416492][T16182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  477.416502][T16182] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  477.416526][T16182]  </TASK>
[  478.052689][T16216] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2173'.
[  478.576015][   T29] usb 46-1: device descriptor read/8, error -110
[  479.017142][   T29] usb usb46-port1: attempt power cycle
[  479.432764][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2175'.
[  479.436548][T16248] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2175'.
[  479.439910][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2175'.
[  479.443182][T16248] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2175'.
[  479.446949][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2175'.
[  479.897189][   T29] usb usb46-port1: unable to enumerate USB device
[  480.188783][T16250] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  480.191651][T16250] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  480.206901][T16250] vhci_hcd vhci_hcd.0: Device attached
[  480.285996][T16258] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  480.288912][T16258] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  480.292833][T16258] vhci_hcd vhci_hcd.0: Device attached
[  480.297016][T16255] dvmrp0: entered allmulticast mode
[  480.333213][T16252] vhci_hcd: connection closed
[  480.333748][   T12] vhci_hcd vhci_hcd.2: stop threads
[  480.341626][   T12] vhci_hcd vhci_hcd.2: release socket
[  480.344107][   T12] vhci_hcd vhci_hcd.2: disconnect device
[  480.414515][T16260] vhci_hcd: connection closed
[  480.414979][   T12] vhci_hcd vhci_hcd.4: stop threads
[  480.420746][   T12] vhci_hcd vhci_hcd.4: release socket
[  480.424159][   T12] vhci_hcd vhci_hcd.4: disconnect device
[  480.453560][T16267] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  480.453640][T16265] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2181'.
[  481.101122][T16296] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2183'.
[  481.113477][ T5088] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  481.664454][ T5088] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  482.374889][T16325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2190'.
[  482.449638][T16328] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  482.596388][T16322] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  482.599456][T16322] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  482.614094][T16322] vhci_hcd vhci_hcd.0: Device attached
[  482.885659][   T29] usb 40-1: SetAddress Request (43) to port 0
[  482.888380][   T29] usb 40-1: new SuperSpeed USB device number 43 using vhci_hcd
[  483.127425][T16330] vhci_hcd: connection reset by peer
[  483.136132][   T12] vhci_hcd vhci_hcd.1: stop threads
[  483.145494][   T12] vhci_hcd vhci_hcd.1: release socket
[  483.159476][   T12] vhci_hcd vhci_hcd.1: disconnect device
[  483.727094][T16343] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  483.729377][T16343] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  483.740243][T16343] vhci_hcd vhci_hcd.0: Device attached
[  484.095963][ T5884] usb 46-1: SetAddress Request (54) to port 0
[  484.098294][ T5884] usb 46-1: new SuperSpeed USB device number 54 using vhci_hcd
[  484.183284][T16350] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  484.186686][T16350] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  484.190892][T16351] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2196'.
[  484.199873][T16350] vhci_hcd vhci_hcd.0: Device attached
[  484.217864][T16344] vhci_hcd: connection reset by peer
[  484.223314][ T7849] vhci_hcd vhci_hcd.4: stop threads
[  484.229913][ T7849] vhci_hcd vhci_hcd.4: release socket
[  484.238203][ T7849] vhci_hcd vhci_hcd.4: disconnect device
[  484.650088][T16368] binder: 16365:16368 ioctl 400c620e 0 returned -14
[  484.983377][T16352] vhci_hcd: connection closed
[  484.983844][ T7849] vhci_hcd vhci_hcd.1: stop threads
[  484.989672][ T7849] vhci_hcd vhci_hcd.1: release socket
[  484.994761][ T7849] vhci_hcd vhci_hcd.1: disconnect device
[  485.269118][T16383] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2198'.
[  485.592532][T16386] IPv6: NLM_F_CREATE should be specified when creating new route
[  485.699767][T16388] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2200'.
[  486.151359][T16393] comedi comedi3: pcl818: I/O base address or length out of range
[  486.617716][T16405] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  486.620480][T16405] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  486.638384][T16405] vhci_hcd vhci_hcd.0: Device attached
[  486.769462][T16412] Unknown options in mask 1001
[  486.905936][ T1493] usb 42-1: SetAddress Request (67) to port 0
[  486.908500][ T1493] usb 42-1: new SuperSpeed USB device number 67 using vhci_hcd
[  487.600997][T16417] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2207'.
[  487.945982][   T29] usb 40-1: device descriptor read/8, error -110
[  488.035288][T16408] vhci_hcd: connection reset by peer
[  488.040251][   T12] vhci_hcd vhci_hcd.2: stop threads
[  488.043413][   T12] vhci_hcd vhci_hcd.2: release socket
[  488.049341][   T12] vhci_hcd vhci_hcd.2: disconnect device
[  488.158994][T16443] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  488.161753][T16443] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  488.172290][T16443] vhci_hcd vhci_hcd.0: Device attached
[  488.299390][T16444] vhci_hcd: connection closed
[  488.302420][ T5788] vhci_hcd vhci_hcd.3: stop threads
[  488.307185][ T5788] vhci_hcd vhci_hcd.3: release socket
[  488.309442][ T5788] vhci_hcd vhci_hcd.3: disconnect device
[  488.346614][   T29] usb usb40-port1: attempt power cycle
[  488.926353][   T29] usb usb40-port1: unable to enumerate USB device
[  489.099961][T16464] Unknown options in mask 1001
[  489.345707][ T5884] usb 46-1: device descriptor read/8, error -110
[  489.797193][ T5088] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  490.369088][ T5884] usb usb46-port1: attempt power cycle
[  490.477199][T16500] Unknown options in mask 1001
[  491.150028][T16519] comedi comedi3: pcl818: I/O base address or length out of range
[  491.539555][T16525] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2218'.
[  491.627606][ T5088] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  491.717826][ T5884] usb usb46-port1: unable to enumerate USB device
[  492.015733][ T1493] usb 42-1: device descriptor read/8, error -110
[  492.250198][T16563] comedi comedi3: pcl818: I/O base address or length out of range
[  492.511697][ T1493] usb usb42-port1: attempt power cycle
[  493.078744][ T1493] usb usb42-port1: unable to enumerate USB device
[  493.210195][T16593] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2228'.
[  493.795675][T16607] Unknown options in mask 1001
[  494.550523][T16616] comedi comedi3: pcl818: I/O base address or length out of range
[  494.695070][T16621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2232'.
[  495.036239][T16609] Unknown options in mask 1001
[  495.838479][ T5088] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  496.012863][T16635] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  496.015546][T16635] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  496.141985][T16635] vhci_hcd vhci_hcd.0: Device attached
[  496.419402][T16658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2242'.
[  496.465628][ T1493] usb 46-1: SetAddress Request (58) to port 0
[  496.468406][ T1493] usb 46-1: new SuperSpeed USB device number 58 using vhci_hcd
[  496.529117][T16661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2244'.
[  496.564069][T16661] erspan0: entered promiscuous mode
[  497.218716][T16662] comedi comedi3: pcl818: I/O base address or length out of range
[  497.790626][T16637] vhci_hcd: connection reset by peer
[  497.792982][ T7849] vhci_hcd vhci_hcd.4: stop threads
[  497.795025][ T7849] vhci_hcd vhci_hcd.4: release socket
[  497.798929][ T7849] vhci_hcd vhci_hcd.4: disconnect device
[  497.878116][T16672] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  497.880777][T16672] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  497.889132][T16672] vhci_hcd vhci_hcd.0: Device attached
[  497.994748][T16673] vhci_hcd: connection closed
[  497.995137][ T7849] vhci_hcd vhci_hcd.2: stop threads
[  498.000728][ T7849] vhci_hcd vhci_hcd.2: release socket
[  498.023683][ T7849] vhci_hcd vhci_hcd.2: disconnect device
[  499.551151][T16688] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2251'.
[  499.669509][ T5088] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  500.347553][T16703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2252'.
[  500.904372][T16721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2257'.
[  500.917495][T16721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2257'.
[  500.978945][T16722] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2257'.
[  501.546024][ T1493] usb 46-1: device descriptor read/8, error -110
[  501.695672][T16734] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  501.698165][T16734] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  501.709231][T16734] vhci_hcd vhci_hcd.0: Device attached
[  501.950675][ T1493] usb usb46-port1: attempt power cycle
[  501.978348][T10614] usb 40-1: SetAddress Request (47) to port 0
[  501.984580][T10614] usb 40-1: new SuperSpeed USB device number 47 using vhci_hcd
[  502.021989][T16735] vhci_hcd: connection reset by peer
[  502.031579][ T7849] vhci_hcd vhci_hcd.1: stop threads
[  502.033931][ T7849] vhci_hcd vhci_hcd.1: release socket
[  502.038666][ T7849] vhci_hcd vhci_hcd.1: disconnect device
[  502.502208][T16746] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2262'.
[  502.593461][T16742] Unknown options in mask 1001
[  503.287331][ T1493] usb usb46-port1: unable to enumerate USB device
[  503.750877][T16768] Unknown options in mask 1001
[  504.108747][ T5088] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  504.422025][T16784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2271'.
[  504.457346][T16784] erspan0: entered promiscuous mode
[  506.263183][T16807] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2278'.
qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details.
[  506.535949][T16819] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2282'.
[  506.783709][T16811] wireguard: wg0: Could not create IPv4 socket
[  506.919607][T16810] ALSA: mixer_oss: invalid OSS volume ';Ê'
[  507.351500][T16828] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  507.354475][T16828] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  507.383122][T16828] vhci_hcd vhci_hcd.0: Device attached
[  507.532893][T10614] usb 40-1: device descriptor read/8, error -110
[  507.573456][T16829] vhci_hcd: connection closed
[  507.579789][   T12] vhci_hcd vhci_hcd.4: stop threads
[  507.589192][   T12] vhci_hcd vhci_hcd.4: release socket
[  507.594816][   T12] vhci_hcd vhci_hcd.4: disconnect device
[  507.911573][T16835] Unknown options in mask 1001
[  507.962841][T10614] usb usb40-port1: attempt power cycle
[  508.562415][T10614] usb usb40-port1: unable to enumerate USB device
[  508.960495][T16837] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2285'.
[  509.161827][T16849] fuse: Bad value for 'fd'
[  510.008911][T16882] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2291'.
[  510.661843][T16898] FAULT_INJECTION: forcing a failure.
[  510.661843][T16898] name failslab, interval 1, probability 1, space 0, times 0
[  510.675750][T16898] CPU: 3 UID: 0 PID: 16898 Comm: syz.3.2296 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  510.675782][T16898] Tainted: [L]=SOFTLOCKUP
[  510.675789][T16898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  510.675801][T16898] Call Trace:
[  510.675809][T16898]  <TASK>
[  510.675816][T16898]  dump_stack_lvl+0x100/0x190
[  510.675845][T16898]  should_fail_ex.cold+0x5/0xa
[  510.675865][T16898]  should_failslab+0xc2/0x120
[  510.675891][T16898]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  510.675914][T16898]  ? __alloc_skb+0x5b7/0x710
[  510.675940][T16898]  ? __alloc_skb+0x140/0x710
[  510.675968][T16898]  __alloc_skb+0x140/0x710
[  510.675990][T16898]  ? __alloc_skb+0x5b7/0x710
[  510.676011][T16898]  ? __pfx___alloc_skb+0x10/0x10
[  510.676041][T16898]  netlink_alloc_large_skb+0x69/0x150
[  510.676067][T16898]  netlink_sendmsg+0x680/0xda0
[  510.676093][T16898]  ? __pfx_netlink_sendmsg+0x10/0x10
[  510.676116][T16898]  ? apparmor_socket_sendmsg+0x15b/0x270
[  510.676142][T16898]  ____sys_sendmsg+0xa4d/0xbe0
[  510.676161][T16898]  ? __pfx_netlink_sendmsg+0x10/0x10
[  510.676183][T16898]  ? __pfx_____sys_sendmsg+0x10/0x10
[  510.676218][T16898]  ___sys_sendmsg+0x190/0x1e0
[  510.676241][T16898]  ? __pfx____sys_sendmsg+0x10/0x10
[  510.676271][T16898]  ? find_held_lock+0x2b/0x80
[  510.676311][T16898]  __sys_sendmsg+0x160/0x210
[  510.676338][T16898]  ? __pfx___sys_sendmsg+0x10/0x10
[  510.676375][T16898]  __do_fast_syscall_32+0xe7/0x970
[  510.676404][T16898]  ? lockdep_hardirqs_on+0x78/0x100
[  510.676432][T16898]  do_fast_syscall_32+0x32/0x70
[  510.676459][T16898]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  510.676482][T16898] RIP: 0023:0xf701efec
[  510.676505][T16898] Code: Unable to access opcode bytes at 0xf701efc2.
[  510.676514][T16898] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  510.676531][T16898] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280
[  510.676543][T16898] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  510.676553][T16898] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  510.676563][T16898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  510.676574][T16898] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  510.676593][T16898]  </TASK>
[  510.911411][T16901] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  510.914321][T16901] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  510.921818][T16901] vhci_hcd vhci_hcd.0: Device attached
[  511.090699][T16902] vhci_hcd: connection closed
[  511.091460][   T12] vhci_hcd vhci_hcd.1: stop threads
[  511.096433][   T12] vhci_hcd vhci_hcd.1: release socket
[  511.098971][   T12] vhci_hcd vhci_hcd.1: disconnect device
[  511.386029][ T5088] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  512.375273][T16927] smpboot: CPU 1 is now offline
[  512.407621][ T5088] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  512.541235][T16931] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  512.554885][ T1298] ------------[ cut here ]------------
[  512.558116][ T1298] 
[  512.558125][ T1298] ======================================================
[  512.558131][ T1298] WARNING: possible circular locking dependency detected
[  512.558141][ T1298] syzkaller #0 Tainted: G             L     
[  512.558150][ T1298] ------------------------------------------------------
[  512.558155][ T1298] kworker/0:1H/1298 is trying to acquire lock:
[  512.558164][ T1298] ffffffff8eaf3f60 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80
[  512.558215][ T1298] 
[  512.558215][ T1298] but task is already holding lock:
[  512.558219][ T1298] ffff88802b23b660 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140
[  512.558253][ T1298] 
[  512.558253][ T1298] which lock already depends on the new lock.
[  512.558253][ T1298] 
[  512.558258][ T1298] 
[  512.558258][ T1298] the existing dependency chain (in reverse order) is:
[  512.558263][ T1298] 
[  512.558263][ T1298] -> #4 (&rq->__lock){-.-.}-{2:2}:
[  512.558282][ T1298]        lock_acquire+0x1b9/0x370
[  512.558295][ T1298]        _raw_spin_lock_nested+0x31/0x40
[  512.558314][ T1298]        raw_spin_rq_lock_nested+0x2c/0x140
[  512.558329][ T1298]        _task_rq_lock+0xcf/0x500
[  512.558344][ T1298]        cgroup_move_task+0x81/0x320
[  512.558364][ T1298]        css_set_move_task+0x285/0x600
[  512.558379][ T1298]        cgroup_post_fork+0x1f9/0x9a0
[  512.558400][ T1298]        copy_process+0x6b7a/0x8030
[  512.558418][ T1298]        kernel_clone+0x176/0x9d0
[  512.558434][ T1298]        user_mode_thread+0xcc/0x110
[  512.558451][ T1298]        rest_init+0x21/0x260
[  512.558464][ T1298]        start_kernel+0x48e/0x490
[  512.558535][ T1298]        x86_64_start_reservations+0x24/0x30
[  512.558559][ T1298]        x86_64_start_kernel+0x12b/0x130
[  512.558580][ T1298]        common_startup_64+0x13e/0x158
[  512.558603][ T1298] 
[  512.558603][ T1298] -> #3 (&p->pi_lock){-.-.}-{2:2}:
[  512.558623][ T1298]        lock_acquire+0x1b9/0x370
[  512.558635][ T1298]        _raw_spin_lock_irqsave+0x3a/0x60
[  512.558653][ T1298]        try_to_wake_up+0xbd/0x1c90
[  512.558668][ T1298]        __wake_up_common+0x135/0x1f0
[  512.558689][ T1298]        __wake_up+0x31/0x60
[  512.558707][ T1298]        tty_port_default_wakeup+0x47/0x60
[  512.558776][ T1298]        serial8250_tx_chars+0x68f/0x860
[  512.558799][ T1298]        serial8250_handle_irq_locked+0x770/0x9a0
[  512.558821][ T1298]        serial8250_handle_irq.part.0+0xb4/0x530
[  512.558842][ T1298]        serial8250_default_handle_irq+0xc2/0x280
[  512.558864][ T1298]        serial8250_interrupt+0xf8/0x1b0
[  512.558878][ T1298]        __handle_irq_event_percpu+0x232/0x880
[  512.558897][ T1298]        handle_irq_event+0xab/0x1e0
[  512.558913][ T1298]        handle_edge_irq+0x34c/0x950
[  512.558930][ T1298]        __common_interrupt+0xd8/0x2f0
[  512.558980][ T1298]        common_interrupt+0xb9/0xe0
[  512.558996][ T1298]        asm_common_interrupt+0x26/0x40
[  512.559011][ T1298]        pv_native_safe_halt+0xf/0x20
[  512.559029][ T1298]        default_idle+0x9/0x10
[  512.559050][ T1298]        default_idle_call+0x6c/0xb0
[  512.559072][ T1298]        do_idle+0x3a7/0x5b0
[  512.559087][ T1298]        cpu_startup_entry+0x4f/0x60
[  512.559103][ T1298]        start_secondary+0x21d/0x2d0
[  512.559119][ T1298]        common_startup_64+0x13e/0x158
[  512.559140][ T1298] 
[  512.559140][ T1298] -> #2 (&tty->write_wait){-.-.}-{3:3}:
[  512.559161][ T1298]        lock_acquire+0x1b9/0x370
[  512.559173][ T1298]        _raw_spin_lock_irqsave+0x3a/0x60
[  512.559197][ T1298]        __wake_up+0x1c/0x60
[  512.559216][ T1298]        tty_port_default_wakeup+0x47/0x60
[  512.559238][ T1298]        serial8250_tx_chars+0x68f/0x860
[  512.559259][ T1298]        serial8250_handle_irq_locked+0x770/0x9a0
[  512.559281][ T1298]        serial8250_handle_irq.part.0+0xb4/0x530
[  512.559302][ T1298]        serial8250_default_handle_irq+0xc2/0x280
[  512.559324][ T1298]        serial8250_interrupt+0xf8/0x1b0
[  512.559338][ T1298]        __handle_irq_event_percpu+0x232/0x880
[  512.559356][ T1298]        handle_irq_event+0xab/0x1e0
[  512.559373][ T1298]        handle_edge_irq+0x34c/0x950
[  512.559389][ T1298]        __common_interrupt+0xd8/0x2f0
[  512.559404][ T1298]        common_interrupt+0xb9/0xe0
[  512.559418][ T1298]        asm_common_interrupt+0x26/0x40
[  512.559434][ T1298]        _raw_spin_unlock_irqrestore+0x31/0x80
[  512.559452][ T1298]        uart_write+0x29d/0xb20
[  512.559472][ T1298]        n_tty_write+0x431/0x1160
[  512.559485][ T1298]        file_tty_write.isra.0+0x4d2/0x890
[  512.559505][ T1298]        redirected_tty_write+0xd4/0x120
[  512.559523][ T1298]        vfs_write+0x6ac/0x1050
[  512.559537][ T1298]        ksys_write+0x12a/0x250
[  512.559550][ T1298]        do_syscall_64+0x115/0x840
[  512.559570][ T1298]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.559584][ T1298] 
[  512.559584][ T1298] -> #1 (&port_lock_key){-.-.}-{3:3}:
[  512.559605][ T1298]        lock_acquire+0x1b9/0x370
[  512.559618][ T1298]        _raw_spin_lock_irqsave+0x3a/0x60
[  512.559634][ T1298]        serial8250_console_write+0x177/0x1a50
[  512.559658][ T1298]        console_flush_one_record+0x790/0xe50
[  512.559676][ T1298]        console_unlock+0x103/0x260
[  512.559693][ T1298]        vprintk_emit+0x407/0x6b0
[  512.559710][ T1298]        _printk+0xcf/0x110
[  512.559724][ T1298]        register_console.cold+0xc0/0x248
[  512.559739][ T1298]        univ8250_console_init+0x6f/0x80
[  512.559783][ T1298]        console_init+0x3d5/0x5b0
[  512.559808][ T1298]        start_kernel+0x314/0x490
[  512.559830][ T1298]        x86_64_start_reservations+0x24/0x30
[  512.559853][ T1298]        x86_64_start_kernel+0x12b/0x130
[  512.559874][ T1298]        common_startup_64+0x13e/0x158
[  512.559896][ T1298] 
[  512.559896][ T1298] -> #0 (console_owner){-.-.}-{0:0}:
[  512.559916][ T1298]        check_prev_add+0xeb/0xe60
[  512.559937][ T1298]        __lock_acquire+0x136c/0x1a40
[  512.559959][ T1298]        lock_acquire+0x1b9/0x370
[  512.559971][ T1298]        console_lock_spinning_enable+0x72/0x80
[  512.559988][ T1298]        console_flush_one_record+0x739/0xe50
[  512.560006][ T1298]        console_unlock+0x103/0x260
[  512.560023][ T1298]        vprintk_emit+0x407/0x6b0
[  512.560040][ T1298]        _printk+0xcf/0x110
[  512.560053][ T1298]        __report_bug.cold+0x34/0x141
[  512.560069][ T1298]        report_bug+0xb2/0x220
[  512.560090][ T1298]        handle_bug+0x16a/0x2a0
[  512.560113][ T1298]        exc_invalid_op+0x17/0x50
[  512.560136][ T1298]        asm_exc_invalid_op+0x1a/0x20
[  512.560150][ T1298]        update_rq_clock+0x40a/0xd20
[  512.560167][ T1298]        __schedule+0x1e2d/0x6730
[  512.560192][ T1298]        preempt_schedule_common+0x42/0xc0
[  512.560212][ T1298]        preempt_schedule_thunk+0x16/0x40
[  512.560235][ T1298]        _raw_spin_unlock_irqrestore+0x61/0x80
[  512.560254][ T1298]        snd_rawmidi_transmit+0xf1/0x130
[  512.560272][ T1298]        snd_vmidi_output_work+0x111/0x390
[  512.560296][ T1298]        process_one_work+0xa23/0x1940
[  512.560318][ T1298]        worker_thread+0x5ef/0xe50
[  512.560338][ T1298]        kthread+0x370/0x450
[  512.560358][ T1298]        ret_from_fork+0x72b/0xd50
[  512.560376][ T1298]        ret_from_fork_asm+0x1a/0x30
[  512.560397][ T1298] 
[  512.560397][ T1298] other info that might help us debug this:
[  512.560397][ T1298] 
[  512.560402][ T1298] Chain exists of:
[  512.560402][ T1298]   console_owner --> &p->pi_lock --> &rq->__lock
[  512.560402][ T1298] 
[  512.560425][ T1298]  Possible unsafe locking scenario:
[  512.560425][ T1298] 
[  512.560430][ T1298]        CPU0                    CPU1
[  512.560435][ T1298]        ----                    ----
[  512.560440][ T1298]   lock(&rq->__lock);
[  512.560450][ T1298]                                lock(&p->pi_lock);
[  512.560460][ T1298]                                lock(&rq->__lock);
[  512.560471][ T1298]   lock(console_owner);
[  512.560481][ T1298] 
[  512.560481][ T1298]  *** DEADLOCK ***
[  512.560481][ T1298] 
[  512.560485][ T1298] 5 locks held by kworker/0:1H/1298:
[  512.560495][ T1298]  #0: ffff88801bcaa540 ((wq_completion)events_highpri){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940
[  512.560540][ T1298]  #1: ffffc9000644fd08 ((work_completion)(&vmidi->output_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940
[  512.560583][ T1298]  #2: ffff88802b23b660 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140
[  512.560621][ T1298]  #3: ffffffff8ebd43a0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110
[  512.560656][ T1298]  #4: ffffffff8ebd4418 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50
[  512.560697][ T1298] 
[  512.560697][ T1298] stack backtrace:
[  512.560709][ T1298] CPU: 0 UID: 0 PID: 1298 Comm: kworker/0:1H Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  512.560733][ T1298] Tainted: [L]=SOFTLOCKUP
[  512.560739][ T1298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  512.560751][ T1298] Workqueue: events_highpri snd_vmidi_output_work
[  512.560778][ T1298] Call Trace:
[  512.560785][ T1298]  <TASK>
[  512.560793][ T1298]  dump_stack_lvl+0x100/0x190
[  512.560812][ T1298]  print_circular_bug.cold+0x178/0x1c7
[  512.560838][ T1298]  check_noncircular+0x146/0x160
[  512.560882][ T1298]  check_prev_add+0xeb/0xe60
[  512.560906][ T1298]  __lock_acquire+0x136c/0x1a40
[  512.560933][ T1298]  lock_acquire+0x1b9/0x370
[  512.560946][ T1298]  ? console_lock_spinning_enable+0x61/0x80
[  512.560966][ T1298]  ? console_lock_spinning_enable+0x4a/0x80
[  512.560987][ T1298]  console_lock_spinning_enable+0x72/0x80
[  512.561008][ T1298]  ? console_lock_spinning_enable+0x61/0x80
[  512.561030][ T1298]  console_flush_one_record+0x739/0xe50
[  512.561055][ T1298]  ? __pfx_console_flush_one_record+0x10/0x10
[  512.561079][ T1298]  ? is_printk_cpu_sync_owner+0x32/0x40
[  512.561102][ T1298]  console_unlock+0x103/0x260
[  512.561123][ T1298]  ? __pfx_console_unlock+0x10/0x10
[  512.561142][ T1298]  ? do_raw_spin_unlock+0x145/0x1e0
[  512.561163][ T1298]  ? _printk+0xcf/0x110
[  512.561179][ T1298]  vprintk_emit+0x407/0x6b0
[  512.561208][ T1298]  ? __pfx_vprintk_emit+0x10/0x10
[  512.561231][ T1298]  ? __lock_acquire+0x49f/0x1a40
[  512.561256][ T1298]  _printk+0xcf/0x110
[  512.561271][ T1298]  ? __pfx__printk+0x10/0x10
[  512.561288][ T1298]  ? __lock_acquire+0x49f/0x1a40
[  512.561314][ T1298]  ? __report_bug.cold+0x24/0x141
[  512.561331][ T1298]  ? __report_bug+0x2ab/0x440
[  512.561356][ T1298]  __report_bug.cold+0x34/0x141
[  512.561372][ T1298]  ? update_rq_clock+0x40a/0xd20
[  512.561390][ T1298]  ? __pfx___report_bug+0x10/0x10
[  512.561412][ T1298]  ? __lock_acquire+0x49f/0x1a40
[  512.561437][ T1298]  ? do_raw_spin_unlock+0x145/0x1e0
[  512.561458][ T1298]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  512.561481][ T1298]  ? update_rq_clock+0x40a/0xd20
[  512.561501][ T1298]  report_bug+0xb2/0x220
[  512.561522][ T1298]  ? update_rq_clock+0x40a/0xd20
[  512.561541][ T1298]  handle_bug+0x16a/0x2a0
[  512.561567][ T1298]  exc_invalid_op+0x17/0x50
[  512.561593][ T1298]  asm_exc_invalid_op+0x1a/0x20
[  512.561611][ T1298] RIP: 0010:update_rq_clock+0x40a/0xd20
[  512.561632][ T1298] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 58 71 e5 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00
[  512.561648][ T1298] RSP: 0018:ffffc9000644f908 EFLAGS: 00010046
[  512.561662][ T1298] RAX: 0000000000000000 RBX: ffff88802b33b600 RCX: 0000000000000001
[  512.561673][ T1298] RDX: 0000000000000046 RSI: ffffffff8e17c87c RDI: ffffffff8c3fe580
[  512.561684][ T1298] RBP: ffffc9000644fab0 R08: 0000000000000001 R09: 0000000000000001
[  512.561694][ T1298] R10: ffffffff9121b7d7 R11: 0000000000000000 R12: ffffffff9121eb84
[  512.561705][ T1298] R13: ffff88802b33c4e0 R14: ffff888029242540 R15: ffff88802b23c198
[  512.561722][ T1298]  ? update_rq_clock+0x9c/0xd20
[  512.561743][ T1298]  __schedule+0x1e2d/0x6730
[  512.561769][ T1298]  ? __pfx___schedule+0x10/0x10
[  512.561789][ T1298]  ? __wake_up+0x3f/0x60
[  512.561811][ T1298]  ? __wake_up+0x3f/0x60
[  512.561832][ T1298]  ? preempt_schedule_thunk+0x16/0x40
[  512.561860][ T1298]  preempt_schedule_common+0x42/0xc0
[  512.561884][ T1298]  preempt_schedule_thunk+0x16/0x40
[  512.561912][ T1298]  _raw_spin_unlock_irqrestore+0x61/0x80
[  512.561933][ T1298]  snd_rawmidi_transmit+0xf1/0x130
[  512.561954][ T1298]  snd_vmidi_output_work+0x111/0x390
[  512.561981][ T1298]  ? __pfx_snd_vmidi_output_work+0x10/0x10
[  512.562008][ T1298]  ? rcu_is_watching+0x12/0xc0
[  512.562031][ T1298]  process_one_work+0xa23/0x1940
[  512.562058][ T1298]  ? __pfx_process_one_work+0x10/0x10
[  512.562083][ T1298]  ? __pfx_snd_vmidi_output_work+0x10/0x10
[  512.562109][ T1298]  worker_thread+0x5ef/0xe50
[  512.562133][ T1298]  ? __pfx_worker_thread+0x10/0x10
[  512.562157][ T1298]  ? kthread+0x13a/0x450
[  512.562180][ T1298]  ? __pfx_worker_thread+0x10/0x10
[  512.562210][ T1298]  kthread+0x370/0x450
[  512.562230][ T1298]  ? __pfx_kthread+0x10/0x10
[  512.562253][ T1298]  ret_from_fork+0x72b/0xd50
[  512.562275][ T1298]  ? __pfx_ret_from_fork+0x10/0x10
[  512.562295][ T1298]  ? __switch_to+0x800/0x10f0
[  512.562320][ T1298]  ? __pfx_kthread+0x10/0x10
[  512.562341][ T1298]  ret_from_fork_asm+0x1a/0x30
[  512.562366][ T1298]  </TASK>
[  513.055483][ T1298] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0)
[  513.055499][ T1298] WARNING: kernel/sched/sched.h:1641 at update_rq_clock+0x40a/0xd20, CPU#0: kworker/0:1H/1298
[  513.062791][ T1298] Modules linked in:
[  513.064374][ T1298] CPU: 0 UID: 0 PID: 1298 Comm: kworker/0:1H Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  513.068582][ T1298] Tainted: [L]=SOFTLOCKUP
[  513.070339][ T1298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  513.074178][ T1298] Workqueue: events_highpri snd_vmidi_output_work
[  513.076613][ T1298] RIP: 0010:update_rq_clock+0x40a/0xd20
[  513.078518][ T1298] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 58 71 e5 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00
[  513.085725][ T1298] RSP: 0018:ffffc9000644f908 EFLAGS: 00010046
[  513.088145][ T1298] RAX: 0000000000000000 RBX: ffff88802b33b600 RCX: 0000000000000001
[  513.091245][ T1298] RDX: 0000000000000046 RSI: ffffffff8e17c87c RDI: ffffffff8c3fe580
[  513.094291][ T1298] RBP: ffffc9000644fab0 R08: 0000000000000001 R09: 0000000000000001
[  513.097410][ T1298] R10: ffffffff9121b7d7 R11: 0000000000000000 R12: ffffffff9121eb84
[  513.100488][ T1298] R13: ffff88802b33c4e0 R14: ffff888029242540 R15: ffff88802b23c198
[  513.103619][ T1298] FS:  0000000000000000(0000) GS:ffff888096bf3000(0000) knlGS:0000000000000000
[  513.107125][ T1298] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  513.109592][ T1298] CR2: 0000000080005000 CR3: 000000006b6a6000 CR4: 0000000000352ef0
[  513.112526][ T1298] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[  513.115571][ T1298] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  513.118398][ T1298] Call Trace:
[  513.119669][ T1298]  <TASK>
[  513.120753][ T1298]  __schedule+0x1e2d/0x6730
[  513.122564][ T1298]  ? __pfx___schedule+0x10/0x10
[  513.124491][ T1298]  ? __wake_up+0x3f/0x60
[  513.126144][ T1298]  ? __wake_up+0x3f/0x60
[  513.127847][ T1298]  ? preempt_schedule_thunk+0x16/0x40
[  513.129871][ T1298]  preempt_schedule_common+0x42/0xc0
[  513.131848][ T1298]  preempt_schedule_thunk+0x16/0x40
[  513.133938][ T1298]  _raw_spin_unlock_irqrestore+0x61/0x80
[  513.136257][ T1298]  snd_rawmidi_transmit+0xf1/0x130
[  513.138407][ T1298]  snd_vmidi_output_work+0x111/0x390
[  513.140671][ T1298]  ? __pfx_snd_vmidi_output_work+0x10/0x10
[  513.143046][ T1298]  ? rcu_is_watching+0x12/0xc0
[  513.145089][ T1298]  process_one_work+0xa23/0x1940
[  513.147049][ T1298]  ? __pfx_process_one_work+0x10/0x10
[  513.149013][ T1298]  ? __pfx_snd_vmidi_output_work+0x10/0x10
[  513.151367][ T1298]  worker_thread+0x5ef/0xe50
[  513.153397][ T1298]  ? __pfx_worker_thread+0x10/0x10
[  513.155627][ T1298]  ? kthread+0x13a/0x450
[  513.157405][ T1298]  ? __pfx_worker_thread+0x10/0x10
[  513.159621][ T1298]  kthread+0x370/0x450
[  513.161354][ T1298]  ? __pfx_kthread+0x10/0x10
[  513.163316][ T1298]  ret_from_fork+0x72b/0xd50
[  513.165270][ T1298]  ? __pfx_ret_from_fork+0x10/0x10
[  513.167413][ T1298]  ? __switch_to+0x800/0x10f0
[  513.169255][ T1298]  ? __pfx_kthread+0x10/0x10
[  513.171177][ T1298]  ret_from_fork_asm+0x1a/0x30
[  513.173242][ T1298]  </TASK>
[  513.174536][ T1298] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  513.177281][ T1298] CPU: 0 UID: 0 PID: 1298 Comm: kworker/0:1H Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  513.181660][ T1298] Tainted: [L]=SOFTLOCKUP
[  513.183521][ T1298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  513.187647][ T1298] Workqueue: events_highpri snd_vmidi_output_work
[  513.190357][ T1298] Call Trace:
[  513.191762][ T1298]  <TASK>
[  513.193027][ T1298]  dump_stack_lvl+0x100/0x190
[  513.195054][ T1298]  vpanic+0x552/0x970
[  513.196726][ T1298]  ? __pfx_vpanic+0x10/0x10
[  513.198626][ T1298]  ? lock_release+0x24d/0x310
[  513.200442][ T1298]  panic+0xd1/0xe0
[  513.202080][ T1298]  ? __pfx_panic+0x10/0x10
[  513.204033][ T1298]  ? check_panic_on_warn+0x1f/0x90
[  513.206258][ T1298]  check_panic_on_warn.cold+0x19/0x34
[  513.208533][ T1298]  ? update_rq_clock+0x40a/0xd20
[  513.210594][ T1298]  __warn.cold+0x191/0x318
[  513.212496][ T1298]  __report_bug+0x30f/0x440
[  513.214442][ T1298]  ? update_rq_clock+0x40a/0xd20
[  513.216502][ T1298]  ? __pfx___report_bug+0x10/0x10
[  513.218025][ T1298]  ? __lock_acquire+0x49f/0x1a40
[  513.219934][ T1298]  ? do_raw_spin_unlock+0x145/0x1e0
[  513.222117][ T1298]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  513.224504][ T1298]  ? update_rq_clock+0x40a/0xd20
[  513.226504][ T1298]  report_bug+0xb2/0x220
[  513.228371][ T1298]  ? update_rq_clock+0x40a/0xd20
[  513.230458][ T1298]  handle_bug+0x16a/0x2a0
[  513.232267][ T1298]  exc_invalid_op+0x17/0x50
[  513.234180][ T1298]  asm_exc_invalid_op+0x1a/0x20
[  513.236232][ T1298] RIP: 0010:update_rq_clock+0x40a/0xd20
[  513.238540][ T1298] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 58 71 e5 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00
[  513.246344][ T1298] RSP: 0018:ffffc9000644f908 EFLAGS: 00010046
[  513.248846][ T1298] RAX: 0000000000000000 RBX: ffff88802b33b600 RCX: 0000000000000001
[  513.252060][ T1298] RDX: 0000000000000046 RSI: ffffffff8e17c87c RDI: ffffffff8c3fe580
[  513.255304][ T1298] RBP: ffffc9000644fab0 R08: 0000000000000001 R09: 0000000000000001
[  513.258546][ T1298] R10: ffffffff9121b7d7 R11: 0000000000000000 R12: ffffffff9121eb84
[  513.261759][ T1298] R13: ffff88802b33c4e0 R14: ffff888029242540 R15: ffff88802b23c198
[  513.265018][ T1298]  ? update_rq_clock+0x9c/0xd20
[  513.266873][ T1298]  __schedule+0x1e2d/0x6730
[  513.268710][ T1298]  ? __pfx___schedule+0x10/0x10
[  513.270775][ T1298]  ? __wake_up+0x3f/0x60
[  513.272513][ T1298]  ? __wake_up+0x3f/0x60
[  513.274294][ T1298]  ? preempt_schedule_thunk+0x16/0x40
[  513.276579][ T1298]  preempt_schedule_common+0x42/0xc0
[  513.278807][ T1298]  preempt_schedule_thunk+0x16/0x40
[  513.280960][ T1298]  _raw_spin_unlock_irqrestore+0x61/0x80
[  513.283278][ T1298]  snd_rawmidi_transmit+0xf1/0x130
[  513.285425][ T1298]  snd_vmidi_output_work+0x111/0x390
[  513.287700][ T1298]  ? __pfx_snd_vmidi_output_work+0x10/0x10
[  513.290080][ T1298]  ? rcu_is_watching+0x12/0xc0
[  513.292220][ T1298]  process_one_work+0xa23/0x1940
[  513.294313][ T1298]  ? __pfx_process_one_work+0x10/0x10
[  513.296597][ T1298]  ? __pfx_snd_vmidi_output_work+0x10/0x10
[  513.299066][ T1298]  worker_thread+0x5ef/0xe50
[  513.301382][ T1298]  ? __pfx_worker_thread+0x10/0x10
[  513.303449][ T1298]  ? kthread+0x13a/0x450
[  513.304983][ T1298]  ? __pfx_worker_thread+0x10/0x10
[  513.307165][ T1298]  kthread+0x370/0x450
[  513.308721][ T1298]  ? __pfx_kthread+0x10/0x10
[  513.310657][ T1298]  ret_from_fork+0x72b/0xd50
[  513.312672][ T1298]  ? __pfx_ret_from_fork+0x10/0x10
[  513.314835][ T1298]  ? __switch_to+0x800/0x10f0
[  513.316742][ T1298]  ? __pfx_kthread+0x10/0x10
[  513.318643][ T1298]  ret_from_fork_asm+0x1a/0x30
[  513.320633][ T1298]  </TASK>
[  514.416198][ T1298] Shutting down cpus with NMI
[  514.418963][ T1298] Kernel Offset: disabled
[  514.420806][ T1298] Rebooting in 86400 seconds..