last executing test programs:

4m19.559552873s ago: executing program 0 (id=4457):
setns(0xc9, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf250500000008000a"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x40814)

4m19.441286544s ago: executing program 0 (id=4460):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x49, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x79, 0x7, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x9b54, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}}, &(0x7f0000000000)='GPL\x00'}, 0x94)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000183, 0x2, 0x7, 0xf2, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x8000b, 0x7, 0xfffffffffffffff8, 0x9, 0x4], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

4m18.142100371s ago: executing program 0 (id=4468):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000500)=[@request_death], 0x0, 0x0, 0x0})

4m18.082403709s ago: executing program 0 (id=4470):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x100)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20)
setxattr$security_capability(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4m17.992249073s ago: executing program 0 (id=4472):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x810, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r2, r3, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x26, 0x5, 0xffffffffc4e10885, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50)
r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f2e, 0x0, 0x3}, 0x18, 0x0)
landlock_restrict_self(r4, 0xe)
openat(0xffffffffffffff9c, 0x0, 0x60a41, 0xb3836f6d7a15f29)

4m17.712791287s ago: executing program 0 (id=4473):
fsopen(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f00000002c0), 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x2001, 0x0)
write(r1, &(0x7f0000000380)='2\x00', 0x1)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000600), 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x180)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_first_group\x00', 0x801, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_num_groups\x00', 0x1, 0x0)
write(r3, &(0x7f0000000840)='6\x00', 0x1)
symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00')

4m17.671832272s ago: executing program 32 (id=4473):
fsopen(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f00000002c0), 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x2001, 0x0)
write(r1, &(0x7f0000000380)='2\x00', 0x1)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000600), 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x180)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_first_group\x00', 0x801, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_num_groups\x00', 0x1, 0x0)
write(r3, &(0x7f0000000840)='6\x00', 0x1)
symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00')

13.573454393s ago: executing program 4 (id=7133):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0xf0}, 0x0)

13.503113254s ago: executing program 4 (id=7136):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r3=>0x0})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r4 = userfaultfd(0x801)
socket(0x9, 0x1, 0xffffffff)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5})
ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r2, 0x701, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
recvmsg(r1, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0)

13.317874911s ago: executing program 4 (id=7138):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0xd)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = fanotify_init(0x0, 0x80000)
fanotify_mark(r2, 0x60e, 0x48000030, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00')
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_def_link_policy={{0x4}, {0x2, 0x1}}}}, 0x9)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x25, &(0x7f0000000000)={0x1})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r5, 0x26, &(0x7f0000000040)={0x1, 0x1, 0x5, 0x8000000a})
syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@random="c5a500429b3a", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x20, 0x66, 0x0, 0x3, 0x11, 0x0, @empty=0xac141442, @empty=0xe0000001}, {0x4e1f, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x6, 0x100, @void}}}}}}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r6, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0xfffffffffffffe32, r3, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x29}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x24000000)
syz_emit_ethernet(0x4e, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x1000, {[@fastopen={0x1e, 0x3, '1'}]}}}}}}}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)={0x244, r3, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xed, 0x5b, "d101733cd535583ff26f1bfa39652bf021744f4bf9c55eeddafea4ccef010c43fa2f30937e51e807a0012b6743319b4e22f12c1fe3af411178781650a3b3c4a84296a9567197ee4e30228f797c9b324eec62aecd5b4168a5c826e67be1e11636915e8d635780f8c4f9988c2a25eab2306a5a52f86c64465201c76d88a40257e3c43fe8eb175be29b63f679cc9b69a40ea6258f5d0d0f728bcb6a09e51f03fa85006a048aeeaf3acd6e1076ecae513de57476efec4b65903836a2bab1d306ff19019e0b9e22ac524d52825596ca2a788a43d3163fe5ecebc705becc296a72b8b32549f3eeef3574aefe"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_MATCH={0x38, 0x5b, "fbc06c6f9860ef5e580a847c57f99652cbd695c37cf158d6abf3fe48c4709d918182a5a4f100a871485a233c7bcd43aba41a8d30"}, @NL80211_ATTR_FRAME_MATCH={0x4d, 0x5b, "2efb5690b436689d5471137570c74924a9d67ae28d56568f7014785280b6008e05b4a0daa186d033dfd2bb80c848328294f05c004ba3faac4d843e9768cb17f25a7e9c9c0a6f65ce3a"}, @NL80211_ATTR_FRAME_MATCH={0x29, 0x5b, "65fa68d57fdab98d616b9b6da9389de94dd5a493550a0ee326bc5edefe27e96fdcd6f55d1f"}, @NL80211_ATTR_FRAME_MATCH={0x63, 0x5b, "f48be4b538b22d5cc39de6eeaccdb6676275b76cdf78c16be6c41d804f27168fe6013e377c8ab4acf386b382f7569eb3ac49a3b32ae481c65a0d1d7fc6ae7c34d54d402182636a42d49dcd325eff916355453e7adc7b2f9df58859261fd92e"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x10}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}]}, 0x244}, 0x1, 0x0, 0x0, 0x1}, 0x80)

12.392991273s ago: executing program 4 (id=7155):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r2, &(0x7f0000000000)='3', 0x4e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)

12.320719072s ago: executing program 4 (id=7157):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001140)={0x34, 0x0, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88b5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x1, 0x8}, {0xe6, 0xfffe, 0x5, 0x4}}}}, 0x15)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x940}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x104}, 0x0)

12.320325171s ago: executing program 1 (id=7158):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x94, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x58, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac, {0x0, 0x4}}, 0x0, @random=0x3, 0x4400, @void, @void, @val={0x3, 0x1, 0x34}, @void, @val={0x6, 0x2, 0x3}, @val={0x5, 0x3, {0x4, 0x6e, 0xff}}, @void, @void, @void, @val={0x2d, 0x1a, {0xc, 0x0, 0x4, 0x0, {0x7, 0x1f81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x1, 0xfff, 0x8}}, @void, @void, @val={0x76, 0x6, {0x7, 0x8, 0x4, 0xe}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x94}}, 0x4880)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0)
sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x11c, r4, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000041)
r5 = timerfd_create(0x0, 0x0)
timerfd_settime(r5, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0)
read(r5, &(0x7f00000001c0)=""/169, 0xa9)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x180000000000)
clock_adjtime(0x0, &(0x7f0000000000)={0x3fe, 0xf6d, 0x0, 0x4000000000001, 0x7ffffffe, 0x0, 0x6, 0x200000000000000, 0x0, 0x100, 0xcf2c, 0x0, 0x9, 0x5, 0x3, 0xfffffffffffffff9, 0x4000000000000000, 0x0, 0x1000, 0x2000000000008, 0xb, 0x3, 0x8000000000005a, 0x3})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0303000000e1000000001100000008000300", @ANYRES32=r8, @ANYBLOB="0a000600080211000001"], 0x28}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r2, 0x808, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x101, 0xe}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x3c}}, 0x40c4)
r9 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x40001, 0x18, 0x0, 0x0, '\x00', 0x0, r10, 0x1, 0x3}, 0x50)
r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x20940, 0x1e2)
ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000000140)={r11, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x5, 0x4, "6fa715e63fee9cb07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e19b47b6669f6bdb9c400", "8bc975aabbbbe9e4cbb0e98d43a12e12538b330e6fe3bce73919393417abdc6c58f0abd4f0c29b3c71757f74bc429c808f46e9cda4584203143a0b9705fb16b6", "666f1d5f5c43005b310134ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x6, 0x61fe]}})
ioctl$LOOP_SET_STATUS(r9, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x8, 0xa, 0x7, 0x8, "b01eb45b7b42d1b78db69e4ddcbe602aceee5ab4c7351181a15d8f7a28bf04c5a4ee342b6847cb70588f8f84cf676d0afca0f2e6f4d82e4208ca4c5f7365d431", "000022d7080873366b499607be231200bc798b00", [0x6, 0x105e8]})

12.142917523s ago: executing program 4 (id=7160):
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
lseek(r0, 0x851, 0x1)

12.00377058s ago: executing program 33 (id=7160):
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
lseek(r0, 0x851, 0x1)

11.940996789s ago: executing program 1 (id=7163):
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
lseek(r0, 0x851, 0x1) (fail_nth: 1)

11.772281999s ago: executing program 1 (id=7164):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0xd, 0x3, &(0x7f0000001300)=@raw=[@map_fd={0x18, 0xa, 0x1, 0x0, r0}, @alu={0x7, 0x0, 0x9, 0x6, 0xb, 0x100, 0xfffffffffffffff4}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)=[0x0], 0x0, 0x7a, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x39, 0x8, 0x8, &(0x7f0000000500)}}, 0x10)
r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000020000000000000099aa000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000f94120e7b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003030000850000000a000000850000002a000000958bdf08f60a590dbbb208f043a728bb7a360f3558c5abc792"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x26, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x1, 0x8, 0x1, 0x3, 0x40, 0x1}, @call={0x85, 0x0, 0x0, 0xb9}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x10}, @generic={0x2, 0x4, 0x0, 0x1000}, @ldst={0x2, 0x3, 0x2, 0x8, 0x8, 0xffffffffffffffe0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_fd={0x18, 0x5, 0x1, 0x0, r1}, @ldst={0x3, 0x0, 0x2, 0x9, 0x6, 0xffffffffffffffc0, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='GPL\x00', 0x5, 0x96, &(0x7f0000000980)=""/150, 0x41000, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000a40)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000a80)={0x3, 0x6, 0x7, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[r1, r1, r1, r0], 0x0, 0x10, 0xb}, 0x94)
sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000e80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000bc0)={0x26c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc86}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x23}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa1}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffbff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa3, 0x3, "f4cb1813a2ea53b97f0f596e87aa88b6614f6a682e6771666da71387cb90974d2dd82e72d708ac1f7760e1d916ad2c9466f97f3afecd328e7091bc3e2892aea071fab309c9c01b81a0701faa22974e9a993ede5cd7f60acc76b2b41a61bd49c35510e746cd1597f2679748df468069b872c19fcb89727c0e0b183281355b38c1cc37a9a0cb742c45903ce33599f5fc6943851fcdc5f089a1691cb4e057de22"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd87}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}]}, 0x26c}}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x80}, 0x2d, 0xfffffffffffffff9)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r5)
pipe2(&(0x7f0000000500)={0x0, <r7=>0x0}, 0x0)
write(r7, &(0x7f0000000014)="0500010001000000", 0x8)
sendmsg$NET_DM_CMD_START(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x0, 0x0, {0x2}}, 0x1c}}, 0x0)
sendmsg$NET_DM_CMD_START(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, r6, 0x1}, 0x14}}, 0x0)
r8 = socket$inet(0x2, 0x2, 0x0)
sendto$inet(r8, &(0x7f0000000600)='trigger_packet', 0xe, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10)
nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '\xa9\xff\x7f\x00'}, 0x1c, 0xfffffffffffffffd)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x29, 0x3d, 0xfffffffffffffcac, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
setsockopt$inet_int(r1, 0x0, 0x21, &(0x7f0000000040)=0x6b2, 0x4)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
lseek(r1, 0x851, 0x1)

11.52284983s ago: executing program 1 (id=7168):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)

11.477103012s ago: executing program 1 (id=7169):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x188, 0x0, &(0x7f0000000b40)="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", 0x0, 0x3f95b0e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffefffc}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

11.083159161s ago: executing program 1 (id=7173):
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x1e8, 0x9, 0x7, 0x201, 0x70bd29, 0x25dfdbfe, {0xa, 0x0, 0x1}, [@nested={0x1d1, 0x111, 0x0, 0x1, [@generic="30878139a5bcb30081c568e8f7ac812ca0257eb6f8247a3b16318890df9ae2de8f054e0b83213710a38da7380a17b13572ec3a7243cf1bf77414b97ca7822db071bfff2175fcb1ede033f9ccb1fea4c5d442bf633a", @nested={0x4, 0x92}, @nested={0x4, 0x7e}, @generic="cb2618402744732bc18289f5533527e8f6e6924978eba4564963bfb536a1fbba957a8fd44a6adb92360b0838b48e1812fe8178b9166936a841936f6958908a676ee601efbe24419520034877e7597bf05ff0f5d93afefcbd18c64c54743d07288f2136768e06c05ae29059f868bc19a0faea6fb3b87b9502cb2a3cf1158fd54d10a9e10783d616f14a99e5e26397094683fefc80d5eb1315c19f857d71c5cc074af02a91a20b66edf253b5c0ff8da0d85e6d06c816c9afe7e0f37f8b47baa0575f6fa70f590723300f45c1fd24249487a2810e8af472f171b8ebf9cdd22b161bd48b6f85d9d497e1cafc38dd77ca52", @nested={0x4, 0x11d}, @generic="5872deaf946bb164fb9acf7feb86f6618b4e4bdef9624449e8107de461c513ec9fee8b85ac8c4adcd8d0e8efed1bb2e801cecf8db5a07ec4c0c5d447e35ae3d80a928f47ca537aa2b50a8cc4e7c226dce5ae3dedf2021f884c3ac1ea69018e1689cadce0dc5b77a831867e46f3ff6f5cd558ea771c25815dec7b0ea383"]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40080}, 0x4000001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

10.984756515s ago: executing program 34 (id=7173):
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x1e8, 0x9, 0x7, 0x201, 0x70bd29, 0x25dfdbfe, {0xa, 0x0, 0x1}, [@nested={0x1d1, 0x111, 0x0, 0x1, [@generic="30878139a5bcb30081c568e8f7ac812ca0257eb6f8247a3b16318890df9ae2de8f054e0b83213710a38da7380a17b13572ec3a7243cf1bf77414b97ca7822db071bfff2175fcb1ede033f9ccb1fea4c5d442bf633a", @nested={0x4, 0x92}, @nested={0x4, 0x7e}, @generic="cb2618402744732bc18289f5533527e8f6e6924978eba4564963bfb536a1fbba957a8fd44a6adb92360b0838b48e1812fe8178b9166936a841936f6958908a676ee601efbe24419520034877e7597bf05ff0f5d93afefcbd18c64c54743d07288f2136768e06c05ae29059f868bc19a0faea6fb3b87b9502cb2a3cf1158fd54d10a9e10783d616f14a99e5e26397094683fefc80d5eb1315c19f857d71c5cc074af02a91a20b66edf253b5c0ff8da0d85e6d06c816c9afe7e0f37f8b47baa0575f6fa70f590723300f45c1fd24249487a2810e8af472f171b8ebf9cdd22b161bd48b6f85d9d497e1cafc38dd77ca52", @nested={0x4, 0x11d}, @generic="5872deaf946bb164fb9acf7feb86f6618b4e4bdef9624449e8107de461c513ec9fee8b85ac8c4adcd8d0e8efed1bb2e801cecf8db5a07ec4c0c5d447e35ae3d80a928f47ca537aa2b50a8cc4e7c226dce5ae3dedf2021f884c3ac1ea69018e1689cadce0dc5b77a831867e46f3ff6f5cd558ea771c25815dec7b0ea383"]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40080}, 0x4000001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

6.248543262s ago: executing program 2 (id=7235):
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x100) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x100)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400))
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x111) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x111)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0x9360, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f00000001c0)={0x0, 0xfb, 0xfd, 0x2, 0x8, "e894e8d838cbb79ad98a664a96ef27de", "fcd38e1a7b2ede91109419acb41d6c1d1e1d4b257d556cf4577e26747044061f401c6fb842bfe6ba55d4e5f81c14288224f109f1d3c36213231cd6588eef5fbd964003ead03cf7a76a335cfe3f238004de5d69f4d01590d2080478c02becce72cced67d7374e9a749db4f1dd15218746c0aa7b16b9a7cc42ff732020bd870ef63ed634ca878e5aee4c2caad972f305159a8429b19e470a7b9e5a939998b08269187a068db1918fe7ab6d807ddba647a3c61416ac36911654dd7ff782229aa64fa0615f56d4e97abbe578760ea1c0ce9024f3ecc3de13b735936fbdbf41e91832b0137e3d17329ada"}, 0xfd, 0x3)

6.170655871s ago: executing program 2 (id=7236):
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x120, 0x9, 0x7, 0x201, 0x70bd29, 0x25dfdbfe, {0xa, 0x0, 0x1}, [@typed={0xa, 0x28, 0x0, 0x0, @str='wlan1\x00'}, @nested={0xfe, 0x111, 0x0, 0x1, [@nested={0x4, 0x92}, @nested={0x4, 0x7e}, @generic="cb2618402744732bc18289f5533527e8f6e6924978eba4564963bfb536a1fbba957a8fd44a6adb92360b0838b48e1812fe8178b9166936a841936f6958908a676ee601efbe24419520034877e7597bf05ff0f5d93afefcbd18c64c54743d07288f2136768e06c05ae29059f868bc19a0faea6fb3b87b9502cb2a3cf1158fd54d10a9e10783d616f14a99e5e26397094683fefc80d5eb1315c19f857d71c5cc074af02a91a20b66edf253b5c0ff8da0d85e6d06c816c9afe7e0f37f8b47baa0575f6fa70f590723300f45c1fd24249487a2810e8af472f171b8ebf9cdd22b161bd48b6f85d9d497e1cafc38dd77ca", @nested={0x4, 0x11d}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40080}, 0x4000001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB], 0x6f4}}, 0x0)

6.103604935s ago: executing program 2 (id=7237):
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x248, 0x9, 0x7, 0x201, 0x70bd29, 0x25dfdbfe, {0xa, 0x0, 0x1}, [@typed={0xa, 0x28, 0x0, 0x0, @str='wlan1\x00'}, @nested={0x226, 0x111, 0x0, 0x1, [@generic="30878139a5bcb30081c568e8f7ac812ca0257eb6f8247a3b16318890df9ae2de8f054e0b83213710a38da7380a17b13572ec3a7243cf1bf77414b97ca7822db071bfff2175fcb1ede033f9ccb1fea4c5d442bf633adce4975dd4e4", @nested={0x4, 0x7e}, @generic="cb2618402744732bc18289f5533527e8f6e6924978eba4564963bfb536a1fbba957a8fd44a6adb92360b0838b48e1812fe8178b9166936a841936f6958908a676ee601efbe24419520034877e7597bf05ff0f5d93afefcbd18c64c54743d07288f2136768e06c05ae29059f868bc19a0faea6fb3b87b9502cb2a3cf1158fd54d10a9e10783d616f14a99e5e26397094683fefc80d5eb1315c19f857d71c5cc074af02a91a20b66edf253b5c0ff8da0d85e6d06c816c9afe7e0f37f8b47baa0575f6fa70f590723300f45c1fd24249487a2810e8af472f171b8ebf9cdd22b161bd48b6f85d9d497e1cafc38dd77ca52", @generic="5872deaf946bb164fb9acf7feb86f6618b4e4bdef9624449e8107de461c513ec9fee8b85ac8c4adcd8d0e8efed1bb2e801cecf8db5a07ec4c0c5d447e35ae3d80a928f47ca537aa2b50a8cc4e7c226dce5ae3dedf2021f884c3ac1ea69018e1689cadce0dc5b77a831867e46f3ff6f5cd558ea771c25815dec7b0ea38399713c91ba089783398d16e72c632a6d13c2f8f2946118fc4e3703ca9c46b24be2ac5c7a3d0ecbd3a55087937e4dfc4178a5c57aed48fe21fb92986252640cc9c85491e4e4dc21436948062c3956a1b5f121c2", @nested={0x4, 0x81}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x40080}, 0x4000001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

6.042587061s ago: executing program 2 (id=7238):
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x4}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, 0x0)
syz_io_uring_submit$UBLK(r2, r3, 0x0, &(0x7f0000000600)=@ublk_start_user_recovery_sqe={0x2e, 0x44, 0x0, r0, 0xc0207510, 0x0, 0x0, 0x0, 0x1, 0x1})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

5.949319775s ago: executing program 2 (id=7239):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c)
write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', <r2=>0x0, 0x7, 0x700, 0x6, 0xff, {{0x1f, 0x4, 0x3, 0x2, 0x7c, 0x67, 0x0, 0xe, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@cipso={0x86, 0x33, 0x3, [{0x1, 0x5, "dc9345"}, {0x6, 0x5, "5725a2"}, {0x6, 0xf, "721544fac3d8bfcf1277d1a321"}, {0x7, 0x4, "029e"}, {0x0, 0x10, "3ac03a75309df1c9bada13bbc927"}]}, @timestamp={0x44, 0x14, 0xda, 0x0, 0x4, [0xc6f3, 0x2, 0x10001, 0x5]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0x20, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast2, @local, @multicast1, @local]}]}}}}})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'macvlan1\x00', &(0x7f00000009c0)=@ethtool_flash={0x26, 0x8, './file0/file0\x00'}})
r4 = fsopen(&(0x7f0000000100)='jfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000400)='gid', &(0x7f0000000740)='0\x00M\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbd\t\x00\x00\x00\x00\x00\x00\x00\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xffNh\x19\xee#\xcc\x0f\xee\xfea\xdc\x88\xcb%bW\xd35\xda=\xc6\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x90\xf4\xb7\xdf<O\x1c\xab\x17\x84\x8d\x94\x125\xf8\xc9@h\x01\xf5\xcb\x88\x01\xde\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xd00v6l\xd6,\x1e\xa0\xcc\xdb\xfdkm\b?\x839\x85\n\x02\"\xe0\xb5@>\xae\xf3\x02\x19_\xe1.f>>\xa5\xc7@\xfb\"\xab\xdb\x06\x12e\x14\x11~\xa8\xdfRL \xf0\xee>(\xb1\xa2\xe8\a\xb8-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\'\x13', 0x0)
listen(r1, 0x4)
sendmsg$sock(r0, &(0x7f00000008c0)={&(0x7f0000000400)=@l2={0x1f, 0xe, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000480)="dea50ab87ea96611e66d7ca946beb036dcd975050e39ae41538c7b642fed5eb2eb9b21feeda84175bf5533ada2cf8b1546702e6763ee53fa2288d777f3097787b87ee886ccaa60d2ff8de7844d651937dbe2379cb4f217c54f25b9be2e57f13f4fd90a1fe6", 0x65}, {&(0x7f0000000500)="61cb934ee16d2dc08a5cc7258d32bfd6af1939928b88474fa0dda4efe825aac2ee640c08c12f19374f48dd0da452ae70ce0f9a3a8e3e56ab0b2cd26ba00e728a19215c2b606d712cdd7b8c1438a4964fd67b2d9ce205a80d3ca22189b5791fe071315d0c5186676078f51fcb8de553c38439cc56476da3a4b9", 0x79}, {&(0x7f0000000580)="ff3deb57cc026cf0dda206e21fa82cf2e4aaadac210f8a4588002100b7094b95993972fc1bab331d1f8b5776e12cc35a9bb4ed5e11ef15b1b1d5261dfcddfe5256121237a5de695b44", 0x49}, {&(0x7f0000000600)="1a37ab11ae31928a3cadae90bcbfb8a61d", 0x11}, {&(0x7f0000000640)="cee56d5975f913c7eaf7736e5f787063b5cdb5aeac109f2402ec4f49a35a50b56019fd0d6f4bd6178a4d8b83f7de0db3b84cc1f4719165c986b97981404495072e91dd9f92dc9fc929b45bf388375892b49ac55cd164202ccb78317639b1a77972610fbeb866ddaf7cedff46e8e4a249f8b68279cede9317952e3b778ebeb81143de4335c269d98ab6edc9c3d6632474bc3091ea2b8e4f372f0c508c8fd4656add9e7536ac446c3eb4fcf42a864c2a2d27491432c32d86461cb3f4c458e86b07320edf55f2ff8f552ba95042c41f46529f35b0e082682ca70dad602b07f1d825308da2248c4e32dc24461af07486a1c50d0fee4b", 0xf4}, {&(0x7f0000000740)="4f98ffaf8cba87219153b96e4e35f3417fa1a243e2d7621c3510b976b027d0ff4df20f5c52136931ee0d1bdf9c1c29b9e6e3b2232b22195f5eee0f5b519aebb00605e8ff761f19ddfb5cf9c28149a53f079912cfc0f26eacf9f5818c0027695492d2a03c137171be243c146cc4eab8e86e92e4af0d58714e5c6b8a275fe372250b076d2d4f20f30389020c30e344612d7584c3eec5d355e4464302b5f24efbfc6512fe3d69a17a53", 0xa8}], 0x6, &(0x7f0000000880)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x4000040)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=@expire={0x144, 0x18, 0x100, 0x34c, 0x25dfdbff, {{{@in=@remote, @in6=@mcast2, 0x4e23, 0x5eea, 0x4e20, 0x7ff, 0x2, 0xa0, 0x20, 0x2f, r2, 0xee00}, {@in=@rand_addr=0x6, 0x4d2, 0x33}, @in6=@empty, {0x9, 0x8, 0x5, 0x6, 0x9, 0x9, 0xaf, 0x40}, {0x2, 0x0, 0x1, 0x100000001}, {0x7, 0xff, 0x4}, 0x70bd29, 0x3501, 0x2, 0x3, 0x3, 0x8}, 0x6}, [@encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e24, 0x4e23, @in6=@rand_addr=' \x01\x00'}}, @mark={0xc, 0x15, {0x35075c}}, @lifetime_val={0x24, 0x9, {0x7, 0xd, 0x7, 0x100}}]}, 0x144}, 0x1, 0x0, 0x0, 0x80}, 0x40)

5.871916479s ago: executing program 2 (id=7240):
ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000100))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0)
mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, &(0x7f0000001900)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303004000000303030303030302c00"])
utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x65, 0xea2})
ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f00000000c0)={0x1, 0x2, 0x7ff, 0x6, 0x9, 0x1})
getpgid(0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r4 = dup3(r3, r2, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r6, &(0x7f00000034c0)={0x2020}, 0x2020)
getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f00000001c0))
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="703206f1d36f891b472f9e06ab10bac6fd72da6f11fe4aa1a11c38e342d2e1fd2f3d5d16820bfd5a9bd5a8ed1e84281eee25efbdccbc535eeb45de54e4f5ccb08cb41b7d32d428548aa7e6d9753af5997db31b6902bc", @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000880006803c0004050067636d286165732900000000000000000000000000000000000014000000000102030405060708090a0b0c0d0e0f101112134700040067636d2861657329000000000000000000000000000000000000000000000000000000007f6ac7d9f19d843fd39dd1afab9e6740e087be0cea5d50769471791b8d5def00000000000000"], 0x9c}}, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r8 = fcntl$dupfd(r7, 0x406, r7)
ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
ioctl$VHOST_VDPA_GET_IOVA_RANGE(r8, 0x8010af78, &(0x7f0000000240))

2.984770262s ago: executing program 6 (id=7263):
r0 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x5, 0x2, 0x0, 0x10}) (fail_nth: 2)

2.923229945s ago: executing program 6 (id=7265):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22700, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000aea000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x61, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x48b}]}) (fail_nth: 2)

2.651500326s ago: executing program 6 (id=7267):
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000098082eba000000000700000085200fd8010000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfc, {0x60, 0x0, 0x0, r2, {0x0, 0xfff0}, {0xffff, 0xffff}, {0x14, 0xc}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x7, 0x2, @TCA_ETF_PARMS={0xffffff7f, 0x1, {0xffffffc0, 0xb, 0x1}}}}]}, 0x40}}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0)
r4 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
listen(r4, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x20040001)
close(0x3)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r6, 0x1000)
ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000})
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="141bdf", @ANYRES64], 0xb2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/12], 0x48)
ioctl$AUTOFS_IOC_FAIL(r7, 0x9361, 0x9)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@getstats={0x1c, 0x5e, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x4048885}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0xffff}, 0x19)

2.494411565s ago: executing program 6 (id=7269):
rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffd4e, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x82, 0x21)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000002c0)='virtiofs\x00', 0x0, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)

2.419999774s ago: executing program 6 (id=7271):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e0009043401"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)

729.647529ms ago: executing program 3 (id=7293):
r0 = syz_open_dev$vim2m(0x0, 0x8, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x2, @sdr={0x49433553, 0x2}})

728.359212ms ago: executing program 3 (id=7294):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) (fail_nth: 2)

651.816082ms ago: executing program 3 (id=7296):
syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040), 0x6, 0x0)
syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f00000000c0), 0x6, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
r2 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x888e, r1, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14)
sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) (fail_nth: 2)

568.658861ms ago: executing program 3 (id=7297):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2000c010)
r0 = socket(0x10, 0x800, 0x2)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000005200010000000000000000001c000015140001"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040014)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(0x3)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000700)=ANY=[@ANYRESDEC, @ANYRES16=r4, @ANYBLOB="010027bd7000000000000c0000000c0003800400050004000100180001801400020076657468305f746f5f626f6e64000000"], 0x38}, 0x1, 0x0, 0x0, 0x4004801}, 0x40800)
r5 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000640)='`', 0x1}], 0x1}, 0x41)
setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, &(0x7f0000000000), 0x4)
socket$kcm(0x2, 0x3, 0x2)
r6 = syz_open_dev$dvb_demux(&(0x7f0000000680), 0x2, 0x280200)
ioctl$DVB_DEMUX_DMX_EXPBUF(r6, 0xc00c6f3e, &(0x7f00000006c0)={0x7, 0x0, r3})
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c002000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006203300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x40000)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r9 = dup(r8)
write$UHID_INPUT(r9, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="ab46c7f097654644574903e87b5effcc8fa8667f1ef8aafbbbf1ca25087012b95c765374648c5460b08e2ee7bc608b491ab0df63a31aca71ef37d9332b1102ffbbf13f4cae6a62868e720744d8d2dc208c03b0fc8b894f5ea841d04168a383d1be5163eb9103ee86b1643de0e8904f1bd5013dfc888ecc6593dcd33e4a6345dd0843546defc751b687f7b9461d952cc15e962d9c74929288ea943492cd2227ac66cd4ef476696a24e5bf5b1475948e464bed413aadcee9b0", @ANYBLOB="a4b6f497ac931c44ed3031c266ef9926e88e605c05747f14c0ed613c9e7093da9b8f56bb53ccf0f11fd826fb0219f55faf7c2c135e8e940dd2802db1b6527b71b7ee821b7cdbcb4dbb4e5683dd8e0fd04fec1f61f29091696e5066827da71d2e93398ef0343a53e75c1f22bfc92e91bc04dd4ff28b2939b32f58318b1c23da1f8d7a58b45b5a634831aa6193f40df88354708731c01b5947"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50)
r12 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r10, r11, 0x5, 0x0, @void}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r12, r10, 0x4, r10}, 0x10)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000500)=""/230, &(0x7f0000000600)=0xe6)
setsockopt$inet_int(r2, 0x0, 0x12, 0x0, 0x0)

353.11981ms ago: executing program 3 (id=7301):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004010}, 0x80)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x28200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'dvmrp0\x00'}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x38000014}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1})
r5 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x39, @local, 0xf66e}}, 0x24)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000001c0)=r8, 0x4)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
recvfrom$rxrpc(r5, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0)
sendmsg(r9, &(0x7f00000028c0)={&(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @empty}, 0x0, 0x2, 0x2, 0x3}}, 0x80, &(0x7f0000001580)=[{&(0x7f00000004c0)="a617a17bd9aa15c520af2ca92516cb251f065e58803cb4d431d623981333b95b3d3577426faef8277cc86fa289d2911b3474c9cb0392567254b926f21135e44ae529a915445932bec0fc3f82a198830d0791cad754beaf9bd1e597e09749a127b6230eac70c8627b8e865afef2006bfe9da2e67ea78d0dbfe082000f58c506d31539fad77604fd09f441", 0x8a}, {&(0x7f0000000580)="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", 0x1000}], 0x2, &(0x7f00000015c0)=[{0x1010, 0x110, 0x50, "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"}, {0x100, 0x10, 0x7, "93f73691ece58d9eda8cab3686905a6b2eb3d8eb9b0dcfcce683bca09f5d6151a7f4c37197737a9a65239484d3f96a85e7524e4e062b98daaefdda4f289be845ea10b61e2a1d2e48a70815d8815aabdd5d74cda146b014e36f62a92388a9a77acdfd87045a56a14ce729713d2b2d8bab66e243775668cf9b72b15c2a655700b6b4d67cc9b41d16ec5405fa1b1669a1e772b67a9eab8c319a9a9e330a4e7287a0ae1b2ea542c9213636624a2d21f1e7cefd1a73b665c8b738b5dc32c733bfafa43def2f4c4d059cfce01b02d0578f78c3aed805456b2a437062694fd1453685168868e8a952ec1854b2"}, {0x48, 0x115, 0xb, "df704470cf452da6a39938e73cde82c33b145dea9f41dec705124c3ae64de8878fc6294c2cd0b37f4a97719a75e2487322b0"}, {0x110, 0x10c, 0xf5f, "092b896c4ddee855ee3ff17309760fa8a2ac1176bf44d6348bb356faef2fd895ebadee10f69314baa00b2a387744b7799dcbee4a04665af3f065fe1d95ded0e8364025ed55234ba5e7984eec8526c4a842117f7ffb4fda3f59363c3cdd15995d08f72cda0194eff0e5d4778a5444a9af84a173c68b2a125c31236860a4e7cc90d7baad8fc4487eaab31a15826541b16190eaacb2422dae909d32772b56e95d56ab1aab39796098ada6547d2f33ef6cf60cd81ae7e5add5f7974b56109e67acf34f8351ecebfd2369dfb8c7ee3dfdbebc8d677df1e8f8af920b6357f895d1f2a85813fc9cb8a9d2771389181499480fa39fb22f115b0398dad0"}, {0x28, 0x6, 0x800, "491d1791bc01913d27e2eb6a1c417e13e3ef"}, {0x58, 0x10c, 0x1, "2a2009bfc782eae7e7d4bd77707858249687ee7fe953e416d38513845f21888eea62c8ab9ae42970b508586a4d59d4a9c04f8ed08d3ae69df3b0bf9f5740ebcea8963820296a"}, {0x18, 0x101, 0x3, "5c5b3fcc"}], 0x1300}, 0x890)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00010004000000010004000000000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
setns(0xc9, 0x0)
r10 = socket(0x8, 0x5, 0x5)
setsockopt$RXRPC_SECURITY_KEY(r10, 0x110, 0x1, &(0x7f0000002900)='-{}\x00', 0x4)
ioctl$VFAT_IOCTL_READDIR_BOTH(r10, 0x400261f3, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
connect$unix(r3, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e)

281.851992ms ago: executing program 5 (id=7302):
r0 = syz_open_dev$vim2m(0x0, 0x8, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x2, @sdr={0x49433553, 0x2}})

281.641605ms ago: executing program 5 (id=7303):
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x1d8, 0x9, 0x7, 0x201, 0x70bd29, 0x25dfdbfe, {0xa, 0x0, 0x1}, [@typed={0xa, 0x28, 0x0, 0x0, @str='wlan1\x00'}, @nested={0x1b8, 0x111, 0x0, 0x1, [@generic="30878139a5bcb30081c568e8f7ac812ca0257eb6f8247a3b16318890df9ae2de8f054e0b83213710a38da7380a17b13572ec3a7243cf1bf77414b97ca7822db071bfff2175fcb1ede033f9ccb1fea4c5d442bf633adce4975dd4e4e029a9", @generic="cb2618402744732bc18289f5533527e8f6e6924978eba4564963bfb536a1fbba957a8fd44a6adb92360b0838b48e1812fe8178b9166936a841936f6958908a676ee601efbe24419520034877e7597bf05ff0f5d93afefcbd18c64c54743d07288f2136768e06c05ae29059f868bc19a0faea6fb3b87b9502cb2a3cf1158fd54d10a9e10783d616f14a99e5e26397094683fefc80d5eb1315c19f857d71c5cc074af02a91a20b66edf253b5c0ff8da0d85e6d06c816c9afe7e0f37f8b47baa0575f6fa70f59", @nested={0x4, 0x11d}, @generic="5872deaf946bb164fb9acf7feb86f6618b4e4bdef9624449e8107de461c513ec9fee8b85ac8c4adcd8d0e8efed1bb2e801cecf8db5a07ec4c0c5d447e35ae3d80a928f47ca537aa2b50a8cc4e7c226dce5ae3dedf2021f884c3ac1ea69018e1689cadce0dc5b77a831867e46f3ff6f5cd558ea771c25815dec7b0ea38399713c91ba089783398d16e72c632a6d"]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x4000001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

250.652488ms ago: executing program 5 (id=7304):
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x248, 0x9, 0x7, 0x201, 0x70bd29, 0x25dfdbfe, {0xa, 0x0, 0x1}, [@nested={0x231, 0x111, 0x0, 0x1, [@generic="30878139a5bcb30081c568e8f7ac812ca0257eb6f8247a3b16318890df9ae2de8f054e0b83213710a38da7380a17b13572ec3a7243cf1bf77414b97ca7822db071bfff2175fcb1ede033f9ccb1fea4c5d442bf633adce4975dd4e4e029a9c74532", @nested={0x4, 0x92}, @nested={0x4, 0x7e}, @generic="cb2618402744732bc18289f5533527e8f6e6924978eba4564963bfb536a1fbba957a8fd44a6adb92360b0838b48e1812fe8178b9166936a841936f6958908a676ee601efbe24419520034877e7597bf05ff0f5d93afefcbd18c64c54743d07288f2136768e06c05ae29059f868bc19a0faea6fb3b87b9502cb2a3cf1158fd54d10a9e10783d616f14a99e5e26397094683fefc80d5eb1315c19f857d71c5cc074af02a91a20b66edf253b5c0ff8da0d85e6d06c816c9afe7e0f37f8b47baa0575f6fa70f590723300f45c1fd24249487a2810e8af472f171b8ebf9cdd22b161bd48b6f85d9d497e1cafc38dd77ca52", @generic="5872deaf946bb164fb9acf7feb86f6618b4e4bdef9624449e8107de461c513ec9fee8b85ac8c4adcd8d0e8efed1bb2e801cecf8db5a07ec4c0c5d447e35ae3d80a928f47ca537aa2b50a8cc4e7c226dce5ae3dedf2021f884c3ac1ea69018e1689cadce0dc5b77a831867e46f3ff6f5cd558ea771c25815dec7b0ea38399713c91ba089783398d16e72c632a6d13c2f8f2946118fc4e3703ca9c46b24be2ac5c7a3d0ecbd3a55087937e4dfc4178a5c57aed48fe21fb92986252640cc9c85491e4e4dc21436948062c3956a1b5f121c287", @nested={0x4, 0x81}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x40080}, 0x4000001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x6f4}}, 0x0)

227.70175ms ago: executing program 3 (id=7305):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/diskstats\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x5460, &(0x7f00000003c0)) (async)
r1 = socket(0xa, 0x1, 0x0)
r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000180)="d3a2", 0x2, 0xffffffffffffffff)
keyctl$invalidate(0x15, r2) (async)
keyctl$dh_compute(0x17, &(0x7f0000000300)={0x0, r2}, 0x0, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) (async)
r3 = socket(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="010001001800000000000100180000d30000000000000000030000b700000001000000000000000000000001000000000000"], 0x0, 0x32, 0x0, 0x1}, 0x20) (async)
r4 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x244802)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000100)={0x1, 0x200, 0x8, 0x7ff, 0x0, 0x73ab}) (async)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e28, 0x1, @empty, 0x6}, 0x1c) (async)
ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000000200)={0xe70d, <r5=>r3, 'id0\x00'}) (async)
clock_gettime(0x0, &(0x7f00000027c0)={<r6=>0x0, <r7=>0x0})
recvmmsg$unix(r5, &(0x7f0000002600)=[{{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000300), 0x0, &(0x7f0000000340)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/21, 0x15}, {&(0x7f0000000400)=""/123, 0x7b}, {&(0x7f0000000480)=""/12, 0xc}], 0x3, &(0x7f0000000500)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x120}}, {{&(0x7f0000000640), 0x6e, &(0x7f0000000900)=[{&(0x7f00000006c0)=""/120, 0x78}, {&(0x7f0000000740)=""/206, 0xce}, {&(0x7f0000000840)=""/190, 0xbe}], 0x3, &(0x7f0000000940)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f00000009c0)=@abs, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/27, 0x1b}, {&(0x7f0000001a80)=""/153, 0x99}, {&(0x7f0000001b40)=""/110, 0x6e}, {&(0x7f0000001bc0)=""/168, 0xa8}], 0x5, &(0x7f0000001d00)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001d80)=""/24, 0x18}], 0x1, &(0x7f0000001e00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001e80)=""/89, 0x59}, {&(0x7f0000001f00)=""/106, 0x6a}, {&(0x7f0000001f80)=""/67, 0x43}, {&(0x7f0000002000)=""/97, 0x61}], 0x4, &(0x7f00000020c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f00000021c0), 0x6e, &(0x7f0000002440)=[{&(0x7f0000002240)=""/142, 0x8e}, {&(0x7f0000002300)}, {&(0x7f0000002340)=""/59, 0x3b}, {&(0x7f0000002380)=""/87, 0x57}, {&(0x7f0000002400)=""/33, 0x21}], 0x5, &(0x7f00000024c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}}], 0x7, 0x2020, &(0x7f0000002800)={r6, r7+10000000})

128.121727ms ago: executing program 5 (id=7306):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
socket(0x10, 0x803, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) (async)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20060094}, 0x0)
sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000056c0), 0x4)

127.782255ms ago: executing program 6 (id=7307):
bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x1000, @empty}, 0x1c)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000000)='./bus\x00')
rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='.\x02\x00')
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d)

63.283921ms ago: executing program 5 (id=7308):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r3=>0x0})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5})
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r2, 0x701, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)

0s ago: executing program 5 (id=7309):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl(r2, 0x40405514, &(0x7f0000000200)="000000000200000000000000000000004c696e6520566f6c756d65")
write(r1, &(0x7f0000000000)='3', 0x4e)
readahead(r1, 0x3, 0x200)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x439, 0x70bd2b, 0xffffffe2, {0x0, 0x0, 0xe403, 0x0, 0x243, 0x71dcb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x84}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4090}, 0x8804)

kernel console output (not intermixed with test programs):

x123/0x790
[  638.272493][T24019]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  638.272510][T24019] RIP: 0033:0x7fdbea59e159
[  638.272525][T24019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  638.272540][T24019] RSP: 002b:00007fdbeb551028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  638.272559][T24019] RAX: ffffffffffffffda RBX: 00007fdbea825fa0 RCX: 00007fdbea59e159
[  638.272570][T24019] RDX: 0000200000000040 RSI: 0000000040046109 RDI: 0000000000000003
[  638.272582][T24019] RBP: 00007fdbeb551090 R08: 0000000000000000 R09: 0000000000000000
[  638.272592][T24019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  638.272602][T24019] R13: 00007fdbea826038 R14: 00007fdbea825fa0 R15: 00007fff6dc7e1d8
[  638.272627][T24019]  </TASK>
[  638.272634][T24019] ERROR: Out of memory at tomoyo_realpath_from_path.
[  638.372546][T24026] FAULT_INJECTION: forcing a failure.
[  638.372546][T24026] name failslab, interval 1, probability 0, space 0, times 0
[  638.372566][T24026] CPU: 0 UID: 0 PID: 24026 Comm: syz.3.6930 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  638.372582][T24026] Tainted: [L]=SOFTLOCKUP
[  638.372586][T24026] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  638.372593][T24026] Call Trace:
[  638.372610][T24026]  <TASK>
[  638.372615][T24026]  dump_stack_lvl+0x100/0x190
[  638.372636][T24026]  should_fail_ex.cold+0x5/0xa
[  638.372653][T24026]  should_failslab+0xc2/0x120
[  638.372673][T24026]  __kmalloc_noprof+0xfc/0x840
[  638.372685][T24026]  ? rcu_is_watching+0x13/0xc0
[  638.372700][T24026]  ? tomoyo_realpath_from_path+0xb6/0x690
[  638.372717][T24026]  tomoyo_realpath_from_path+0xb6/0x690
[  638.372734][T24026]  tomoyo_path_number_perm+0x23c/0x580
[  638.372751][T24026]  ? tomoyo_path_number_perm+0x22e/0x580
[  638.372770][T24026]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  638.372794][T24026]  ? __lock_acquire+0x5c0/0x1f40
[  638.372812][T24026]  ? __fget_files+0x34/0x3d0
[  638.372827][T24026]  ? find_held_lock+0x2b/0x80
[  638.372842][T24026]  ? hook_file_ioctl_common+0x140/0x440
[  638.372860][T24026]  ? __fget_files+0x21f/0x3d0
[  638.372876][T24026]  security_file_ioctl+0xd3/0x230
[  638.372893][T24026]  __x64_sys_ioctl+0xb7/0x210
[  638.372906][T24026]  do_syscall_64+0x123/0x790
[  638.372923][T24026]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  638.372934][T24026] RIP: 0033:0x7fdbea59e159
[  638.372944][T24026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  638.372955][T24026] RSP: 002b:00007fdbeb551028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  638.372967][T24026] RAX: ffffffffffffffda RBX: 00007fdbea825fa0 RCX: 00007fdbea59e159
[  638.372974][T24026] RDX: 0000200000000040 RSI: 00000000c0d05640 RDI: 0000000000000003
[  638.372982][T24026] RBP: 00007fdbeb551090 R08: 0000000000000000 R09: 0000000000000000
[  638.372989][T24026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  638.372997][T24026] R13: 00007fdbea826038 R14: 00007fdbea825fa0 R15: 00007fff6dc7e1d8
[  638.373020][T24026]  </TASK>
[  638.373044][T24026] ERROR: Out of memory at tomoyo_realpath_from_path.
[  638.692874][T24031] jffs2: notice: (24031) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  638.743460][T24031] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  639.241033][T24053] overlayfs: failed to resolve './file0': -2
[  639.333523][T24065] FAULT_INJECTION: forcing a failure.
[  639.333523][T24065] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  639.333555][T24065] CPU: 3 UID: 0 PID: 24065 Comm: syz.1.6943 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  639.333581][T24065] Tainted: [L]=SOFTLOCKUP
[  639.333588][T24065] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  639.333599][T24065] Call Trace:
[  639.333606][T24065]  <TASK>
[  639.333614][T24065]  dump_stack_lvl+0x100/0x190
[  639.333645][T24065]  should_fail_ex.cold+0x5/0xa
[  639.333672][T24065]  _copy_from_user+0x2e/0xd0
[  639.333692][T24065]  copy_msghdr_from_user+0x9f/0x4c0
[  639.333722][T24065]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  639.333753][T24065]  ? _kstrtoull+0x144/0x200
[  639.333780][T24065]  ? __pfx__kstrtoull+0x10/0x10
[  639.333807][T24065]  ___sys_sendmsg+0x106/0x1e0
[  639.333835][T24065]  ? __pfx____sys_sendmsg+0x10/0x10
[  639.333871][T24065]  ? __fget_files+0x34/0x3d0
[  639.333909][T24065]  __sys_sendmmsg+0x20c/0x440
[  639.333934][T24065]  ? __pfx___sys_sendmmsg+0x10/0x10
[  639.333954][T24065]  ? ksys_write+0x190/0x250
[  639.333989][T24065]  ? fput+0x7c/0x100
[  639.334012][T24065]  ? ksys_write+0x1ac/0x250
[  639.334030][T24065]  ? __pfx_ksys_write+0x10/0x10
[  639.334053][T24065]  __x64_sys_sendmmsg+0x9c/0x100
[  639.334074][T24065]  ? lockdep_hardirqs_on+0x7d/0x110
[  639.334098][T24065]  do_syscall_64+0x123/0x790
[  639.334149][T24065]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  639.334168][T24065] RIP: 0033:0x7f823d99e159
[  639.334184][T24065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  639.334202][T24065] RSP: 002b:00007f823e827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  639.334221][T24065] RAX: ffffffffffffffda RBX: 00007f823dc25fa0 RCX: 00007f823d99e159
[  639.334233][T24065] RDX: 0000000000000001 RSI: 0000200000000bc0 RDI: 0000000000000003
[  639.334244][T24065] RBP: 00007f823e827090 R08: 0000000000000000 R09: 0000000000000000
[  639.334256][T24065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  639.334271][T24065] R13: 00007f823dc26038 R14: 00007f823dc25fa0 R15: 00007ffe21826e18
[  639.334296][T24065]  </TASK>
[  639.529133][T24080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6946'.
[  639.622028][T24086] FAULT_INJECTION: forcing a failure.
[  639.622028][T24086] name failslab, interval 1, probability 0, space 0, times 0
[  639.622059][T24086] CPU: 0 UID: 0 PID: 24086 Comm: syz.1.6949 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  639.622085][T24086] Tainted: [L]=SOFTLOCKUP
[  639.622092][T24086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  639.622103][T24086] Call Trace:
[  639.622110][T24086]  <TASK>
[  639.622118][T24086]  dump_stack_lvl+0x100/0x190
[  639.622151][T24086]  should_fail_ex.cold+0x5/0xa
[  639.622178][T24086]  should_failslab+0xc2/0x120
[  639.622197][T24086]  __kmalloc_noprof+0xfc/0x840
[  639.622212][T24086]  ? rcu_is_watching+0x13/0xc0
[  639.622232][T24086]  ? tomoyo_realpath_from_path+0xb6/0x690
[  639.622256][T24086]  tomoyo_realpath_from_path+0xb6/0x690
[  639.622284][T24086]  tomoyo_path_number_perm+0x23c/0x580
[  639.622315][T24086]  ? tomoyo_path_number_perm+0x22e/0x580
[  639.622344][T24086]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  639.622386][T24086]  ? __lock_acquire+0x5c0/0x1f40
[  639.622437][T24086]  ? __fget_files+0x34/0x3d0
[  639.622462][T24086]  ? find_held_lock+0x2b/0x80
[  639.622488][T24086]  ? hook_file_ioctl_common+0x140/0x440
[  639.622518][T24086]  ? __fget_files+0x21f/0x3d0
[  639.622543][T24086]  security_file_ioctl+0xd3/0x230
[  639.622566][T24086]  __x64_sys_ioctl+0xb7/0x210
[  639.622587][T24086]  do_syscall_64+0x123/0x790
[  639.622615][T24086]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  639.622635][T24086] RIP: 0033:0x7f823d99e159
[  639.622650][T24086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  639.622667][T24086] RSP: 002b:00007f823e827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  639.622686][T24086] RAX: ffffffffffffffda RBX: 00007f823dc25fa0 RCX: 00007f823d99e159
[  639.622699][T24086] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  639.622710][T24086] RBP: 00007f823e827090 R08: 0000000000000000 R09: 0000000000000000
[  639.622722][T24086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  639.622734][T24086] R13: 00007f823dc26038 R14: 00007f823dc25fa0 R15: 00007ffe21826e18
[  639.622760][T24086]  </TASK>
[  639.622859][T24086] ERROR: Out of memory at tomoyo_realpath_from_path.
[  639.860702][T24101] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6955'.
[  639.864082][T24103] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  639.917285][T24106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6957'.
[  639.917410][T24106] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6957'.
[  639.918151][T18369] Bluetooth: hci3: Frame reassembly failed (-84)
[  639.938437][T24101] kvm: user requested TSC rate below hardware speed
[  640.059810][T24108] romfs: unable to set blocksize
[  640.059810][T24108] 
[  640.081585][ T1042] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[  640.096676][T24111] EXT4-fs (nbd3): unable to read superblock
[  640.132444][T24115] FAULT_INJECTION: forcing a failure.
[  640.132444][T24115] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  640.132465][T24115] CPU: 1 UID: 0 PID: 24115 Comm: syz.3.6961 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  640.132481][T24115] Tainted: [L]=SOFTLOCKUP
[  640.132485][T24115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  640.132492][T24115] Call Trace:
[  640.132497][T24115]  <TASK>
[  640.132501][T24115]  dump_stack_lvl+0x100/0x190
[  640.132521][T24115]  should_fail_ex.cold+0x5/0xa
[  640.132538][T24115]  _copy_to_user+0x32/0xd0
[  640.132551][T24115]  simple_read_from_buffer+0xcb/0x170
[  640.132566][T24115]  proc_fail_nth_read+0x1af/0x230
[  640.132580][T24115]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  640.132595][T24115]  ? rw_verify_area+0xce/0x6d0
[  640.132611][T24115]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  640.132625][T24115]  vfs_read+0x1e4/0xb40
[  640.132636][T24115]  ? lock_acquire+0x1d1/0x380
[  640.132648][T24115]  ? __fget_files+0x34/0x3d0
[  640.132662][T24115]  ? __pfx_vfs_read+0x10/0x10
[  640.132671][T24115]  ? find_held_lock+0x2b/0x80
[  640.132687][T24115]  ? __fget_files+0x215/0x3d0
[  640.132703][T24115]  ? __fget_files+0x21f/0x3d0
[  640.132720][T24115]  ksys_read+0x12a/0x250
[  640.132731][T24115]  ? __pfx_ksys_read+0x10/0x10
[  640.132742][T24115]  ? fput+0x7c/0x100
[  640.132759][T24115]  do_syscall_64+0x123/0x790
[  640.132775][T24115]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  640.132787][T24115] RIP: 0033:0x7fdbea55e98e
[  640.132797][T24115] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  640.132808][T24115] RSP: 002b:00007fdbeb550fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  640.132820][T24115] RAX: ffffffffffffffda RBX: 00007fdbeb5516c0 RCX: 00007fdbea55e98e
[  640.132827][T24115] RDX: 000000000000000f RSI: 00007fdbeb5510a0 RDI: 0000000000000004
[  640.132834][T24115] RBP: 00007fdbeb551090 R08: 0000000000000000 R09: 0000000000000000
[  640.132841][T24115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  640.132848][T24115] R13: 00007fdbea826038 R14: 00007fdbea825fa0 R15: 00007fff6dc7e1d8
[  640.132863][T24115]  </TASK>
[  640.248774][ T1042] usb 6-1: Using ep0 maxpacket: 32
[  640.249359][ T1042] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  640.250427][ T1042] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  640.250465][ T1042] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  640.250487][ T1042] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  640.250509][ T1042] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  640.252746][ T1042] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  640.252765][ T1042] usb 6-1: Product: syz
[  640.252778][ T1042] usb 6-1: Manufacturer: syz
[  640.252790][ T1042] usb 6-1: SerialNumber: syz
[  640.262386][    C3] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  640.304698][ T1042] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input76
[  640.372781][T24133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6967'.
[  640.372894][T24133] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6967'.
[  640.490186][ T1042] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  640.490199][ T1042]  (id 0x00)
[  640.521414][T24140] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280
[  640.536932][ T1042] rc_core: IR keymap rc-imon-pad not found
[  640.536943][ T1042] Registered IR keymap rc-empty
[  640.537025][ T1042] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  640.537034][ T1042] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  640.557460][ T1042] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0
[  640.558563][ T1042] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input77
[  640.562769][ T1042] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:57> initialized
[  640.603125][T24143] FAULT_INJECTION: forcing a failure.
[  640.603125][T24143] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  640.603155][T24143] CPU: 2 UID: 0 PID: 24143 Comm: syz.3.6970 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  640.603181][T24143] Tainted: [L]=SOFTLOCKUP
[  640.603187][T24143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  640.603196][T24143] Call Trace:
[  640.603200][T24143]  <TASK>
[  640.603205][T24143]  dump_stack_lvl+0x100/0x190
[  640.603242][T24143]  should_fail_ex.cold+0x5/0xa
[  640.603260][T24143]  _copy_from_user+0x2e/0xd0
[  640.603273][T24143]  copy_msghdr_from_user+0x9f/0x4c0
[  640.603291][T24143]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  640.603310][T24143]  ? _kstrtoull+0x144/0x200
[  640.603323][T24143]  ? __pfx__kstrtoull+0x10/0x10
[  640.603340][T24143]  ___sys_sendmsg+0x106/0x1e0
[  640.603361][T24143]  ? __pfx____sys_sendmsg+0x10/0x10
[  640.603384][T24143]  ? __fget_files+0x34/0x3d0
[  640.603408][T24143]  __sys_sendmmsg+0x20c/0x440
[  640.603424][T24143]  ? __pfx___sys_sendmmsg+0x10/0x10
[  640.603442][T24143]  ? ksys_write+0x190/0x250
[  640.603474][T24143]  ? fput+0x7c/0x100
[  640.603494][T24143]  ? ksys_write+0x1ac/0x250
[  640.603509][T24143]  ? __pfx_ksys_write+0x10/0x10
[  640.603532][T24143]  __x64_sys_sendmmsg+0x9c/0x100
[  640.603553][T24143]  ? lockdep_hardirqs_on+0x7d/0x110
[  640.603571][T24143]  do_syscall_64+0x123/0x790
[  640.603587][T24143]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  640.603600][T24143] RIP: 0033:0x7fdbea59e159
[  640.603614][T24143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  640.603630][T24143] RSP: 002b:00007fdbeb530028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  640.603668][T24143] RAX: ffffffffffffffda RBX: 00007fdbea826090 RCX: 00007fdbea59e159
[  640.603682][T24143] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004
[  640.603694][T24143] RBP: 00007fdbeb530090 R08: 0000000000000000 R09: 0000000000000000
[  640.603706][T24143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  640.603732][T24143] R13: 00007fdbea826128 R14: 00007fdbea826090 R15: 00007fff6dc7e1d8
[  640.603756][T24143]  </TASK>
[  640.739896][ T1042] usb 6-1: USB disconnect, device number 57
[  640.761376][T24099] netlink: zone id is out of range
[  640.761385][T24099] netlink: zone id is out of range
[  640.761400][T24099] netlink: zone id is out of range
[  640.761404][T24099] netlink: zone id is out of range
[  640.761408][T24099] netlink: zone id is out of range
[  640.761527][T24099] netlink: zone id is out of range
[  640.761539][T24099] netlink: zone id is out of range
[  640.780019][T24151] jffs2: notice: (24151) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 1 orphan) found.
[  641.537211][ T5837] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[  641.689101][ T5837] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  641.690169][ T5837] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  641.690194][ T5837] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  641.690218][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  641.692820][ T5837] usb 6-1: config 0 descriptor??
[  641.898079][ T1042] usb 6-1: USB disconnect, device number 58
[  641.967518][ T5087] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  641.967533][   T66] Bluetooth: hci3: command 0x1003 tx timeout
[  642.222930][T24189] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1'
[  642.222958][T24189] CPU: 3 UID: 0 PID: 24189 Comm: syz.2.6984 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  642.222986][T24189] Tainted: [L]=SOFTLOCKUP
[  642.222995][T24189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  642.223008][T24189] Call Trace:
[  642.223016][T24189]  <TASK>
[  642.223025][T24189]  dump_stack_lvl+0x100/0x190
[  642.223077][T24189]  sysfs_warn_dup.cold+0x1c/0x28
[  642.223110][T24189]  sysfs_create_dir_ns+0x24b/0x2b0
[  642.223141][T24189]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  642.223166][T24189]  ? find_held_lock+0x2b/0x80
[  642.223192][T24189]  ? kobject_add_internal+0x25f/0x930
[  642.223227][T24189]  ? kobject_add_internal+0x25f/0x930
[  642.223260][T24189]  ? class_dir_child_ns_type+0xd/0x60
[  642.223287][T24189]  kobject_add_internal+0x2c8/0x930
[  642.223327][T24189]  kobject_add+0x16a/0x1e0
[  642.223346][T24189]  ? __pfx_kobject_add+0x10/0x10
[  642.223369][T24189]  ? get_device_parent+0x1b3/0x4c0
[  642.223392][T24189]  ? kobject_put+0xb9/0x640
[  642.223428][T24189]  device_add+0x294/0x1970
[  642.223455][T24189]  ? lockdep_init_map_type+0x5c/0x250
[  642.223477][T24189]  ? __pfx_device_add+0x10/0x10
[  642.223503][T24189]  ? lockdep_init_map_type+0x5c/0x250
[  642.223526][T24189]  ? __init_waitqueue_head+0xca/0x150
[  642.223555][T24189]  tty_register_device_attr+0x388/0x7f0
[  642.223578][T24189]  ? lockdep_init_map_type+0x5c/0x250
[  642.223600][T24189]  ? __pfx_tty_register_device_attr+0x10/0x10
[  642.223628][T24189]  ? tty_port_init+0x156/0x1c0
[  642.223668][T24189]  gsm_activate_mux+0x155/0x2a0
[  642.223691][T24189]  gsmld_ioctl+0xbbc/0x15c0
[  642.223724][T24189]  ? kasan_quarantine_put+0x104/0x240
[  642.223747][T24189]  ? __pfx_gsmld_ioctl+0x10/0x10
[  642.223793][T24189]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  642.223817][T24189]  ? __pfx_pty_unix98_ioctl+0x10/0x10
[  642.223850][T24189]  ? __pfx_gsmld_ioctl+0x10/0x10
[  642.223874][T24189]  tty_ioctl+0x11b4/0x1640
[  642.223897][T24189]  ? __pfx_tty_ioctl+0x10/0x10
[  642.223916][T24189]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[  642.223941][T24189]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  642.223967][T24189]  ? __fget_files+0x34/0x3d0
[  642.224002][T24189]  ? selinux_file_ioctl+0x13b/0x290
[  642.224021][T24189]  ? selinux_file_ioctl+0xb6/0x290
[  642.224043][T24189]  ? __pfx_tty_ioctl+0x10/0x10
[  642.224065][T24189]  __x64_sys_ioctl+0x18e/0x210
[  642.224087][T24189]  do_syscall_64+0x123/0x790
[  642.224146][T24189]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  642.224168][T24189] RIP: 0033:0x7f801ad9e159
[  642.224184][T24189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  642.224203][T24189] RSP: 002b:00007f801bc5a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  642.224225][T24189] RAX: ffffffffffffffda RBX: 00007f801b026090 RCX: 00007f801ad9e159
[  642.224239][T24189] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003
[  642.224252][T24189] RBP: 00007f801ae3503b R08: 0000000000000000 R09: 0000000000000000
[  642.224265][T24189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  642.224278][T24189] R13: 00007f801b026128 R14: 00007f801b026090 R15: 00007ffe5fe81638
[  642.224310][T24189]  </TASK>
[  642.224333][T24189] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory.
[  642.337573][ T1042] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[  642.488237][ T1042] usb 6-1: Using ep0 maxpacket: 8
[  642.489026][ T1042] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  642.490018][ T1042] usb 6-1: config 0 has an invalid interface number: 52 but max is 0
[  642.490038][ T1042] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  642.490054][ T1042] usb 6-1: config 0 has no interface number 0
[  642.490077][ T1042] usb 6-1: config 0 interface 52 has no altsetting 0
[  642.490102][ T1042] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  642.496386][ T1042] usb 6-1: config 0 descriptor??
[  642.667793][   T10] usb 8-1: new high-speed USB device number 39 using dummy_hcd
[  642.838262][   T10] usb 8-1: New USB device found, idVendor=0403, idProduct=d071, bcdDevice=b7.54
[  642.839153][   T10] usb 8-1: config 7 has an invalid interface number: 129 but max is 2
[  642.839168][   T10] usb 8-1: config 7 contains an unexpected descriptor of type 0x1, skipping
[  642.839177][   T10] usb 8-1: config 7 has an invalid interface number: 43 but max is 2
[  642.839188][   T10] usb 8-1: config 7 contains an unexpected descriptor of type 0x1, skipping
[  642.839197][   T10] usb 8-1: config 7 has an invalid interface number: 65 but max is 2
[  642.839208][   T10] usb 8-1: config 7 has no interface number 0
[  642.839216][   T10] usb 8-1: config 7 has no interface number 1
[  642.839224][   T10] usb 8-1: config 7 has no interface number 2
[  642.839250][   T10] usb 8-1: config 7 interface 129 altsetting 3 endpoint 0x8 has invalid maxpacket 1431, setting to 1024
[  642.839265][   T10] usb 8-1: config 7 interface 129 altsetting 3 has a duplicate endpoint with address 0x8, skipping
[  642.839277][   T10] usb 8-1: config 7 interface 129 altsetting 3 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  642.839290][   T10] usb 8-1: config 7 interface 129 altsetting 3 has a duplicate endpoint with address 0x8, skipping
[  642.839302][   T10] usb 8-1: config 7 interface 129 altsetting 3 has an endpoint descriptor with address 0xA7, changing to 0x87
[  642.839315][   T10] usb 8-1: config 7 interface 129 altsetting 3 endpoint 0x87 has an invalid bInterval 157, changing to 11
[  642.839327][   T10] usb 8-1: config 7 interface 129 altsetting 3 endpoint 0x87 has invalid maxpacket 34283, setting to 1024
[  642.839340][   T10] usb 8-1: config 7 interface 129 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[  642.839350][   T10] usb 8-1: config 7 interface 129 altsetting 3 has a duplicate endpoint with address 0x8, skipping
[  642.839361][   T10] usb 8-1: config 7 interface 129 altsetting 3 has 9 endpoint descriptors, different from the interface descriptor's value: 8
[  642.839379][   T10] usb 8-1: config 7 interface 43 altsetting 6 has an endpoint descriptor with address 0x19, changing to 0x9
[  642.839391][   T10] usb 8-1: config 7 interface 43 altsetting 6 bulk endpoint 0x9 has invalid maxpacket 64
[  642.839404][   T10] usb 8-1: config 7 interface 43 altsetting 6 has a duplicate endpoint with address 0xC, skipping
[  642.839415][   T10] usb 8-1: config 7 interface 43 altsetting 6 endpoint 0x4 has invalid maxpacket 7558, setting to 64
[  642.839428][   T10] usb 8-1: config 7 interface 43 altsetting 6 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  642.839445][   T10] usb 8-1: config 7 interface 65 altsetting 241 has an endpoint descriptor with address 0x11, changing to 0x1
[  642.839457][   T10] usb 8-1: config 7 interface 65 altsetting 241 has a duplicate endpoint with address 0x1, skipping
[  642.839468][   T10] usb 8-1: config 7 interface 65 altsetting 241 has a duplicate endpoint with address 0x1, skipping
[  642.839480][   T10] usb 8-1: config 7 interface 65 altsetting 241 has a duplicate endpoint with address 0x9, skipping
[  642.839491][   T10] usb 8-1: config 7 interface 65 altsetting 241 endpoint 0xD has an invalid bInterval 233, changing to 7
[  642.839504][   T10] usb 8-1: config 7 interface 65 altsetting 241 has a duplicate endpoint with address 0x8, skipping
[  642.839516][   T10] usb 8-1: config 7 interface 65 altsetting 241 has a duplicate endpoint with address 0xE, skipping
[  642.839526][   T10] usb 8-1: config 7 interface 65 altsetting 241 has an invalid descriptor for endpoint zero, skipping
[  642.839542][   T10] usb 8-1: config 7 interface 65 altsetting 241 has a duplicate endpoint with address 0xD, skipping
[  642.839559][   T10] usb 8-1: config 7 interface 65 altsetting 241 has a duplicate endpoint with address 0x8, skipping
[  642.839575][   T10] usb 8-1: config 7 interface 65 altsetting 241 has an invalid descriptor for endpoint zero, skipping
[  642.839594][   T10] usb 8-1: config 7 interface 65 altsetting 241 has a duplicate endpoint with address 0xE, skipping
[  642.839613][   T10] usb 8-1: config 7 interface 65 altsetting 241 has an invalid descriptor for endpoint zero, skipping
[  642.839630][   T10] usb 8-1: config 7 interface 129 has no altsetting 0
[  642.839646][   T10] usb 8-1: config 7 interface 43 has no altsetting 0
[  642.839659][   T10] usb 8-1: config 7 interface 65 has no altsetting 0
[  642.843600][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  642.843613][   T10] usb 8-1: Product: 彪疡哭艼櫉垰ꊌ旺ꠡᱡ䠇鄧駃漳᪖븘瘠㣫莬镫峐⠍䟟ꝷ◯䎑솭흢宑税䡩∼覄嶁⎕ㅆ峓밢ᱦ湻溰㼠ﴴꋠ爗ꤢ튾篥ⴈ촣댔瘍쯦ౝ䍝뿱淅Ⓑ臾㖤᫈蔢褐㩹쮇Გ썋속ﾟ軑῜鼵骼ﲅ닇㞅㍾闑䃝뚝䒓鈏뻕鸥夦ꖯ鈻㌚൒ᚆ帋읪瀽웝䈼量쑏䖒靯
[  642.843631][   T10] usb 8-1: Manufacturer: 붳鉂幵ප㩀᳛䎂燢⌢身髠汿䘣䉨蜰콹㊂䐸訥鱴윴סּ䚑媛͈᥽酱蓌썲蘷罾䢣
[  642.843652][   T10] usb 8-1: SerialNumber: 旤噇앿係艢渼䖃㙗镦豏⧉亮ἐℍ浤퉭䓅휿翘凍
[  642.845505][T24204] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  642.845829][T24204] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  642.908388][ T5816] usb 6-1: USB disconnect, device number 59
[  642.995827][T24217] overlayfs: workdir and upperdir must reside under the same mount
[  643.050672][   T10] ftdi_sio 8-1:7.129: FTDI USB Serial Device converter detected
[  643.051264][   T10] ftdi_sio ttyUSB0: unknown device type: 0xb754
[  643.056274][   T10] ftdi_sio 8-1:7.43: FTDI USB Serial Device converter detected
[  643.056927][   T10] ftdi_sio ttyUSB1: unknown device type: 0xb754
[  643.059778][   T10] ftdi_sio 8-1:7.65: FTDI USB Serial Device converter detected
[  643.060245][   T10] ftdi_sio ttyUSB2: unknown device type: 0xb754
[  643.064227][   T10] usb 8-1: USB disconnect, device number 39
[  643.067887][   T10] ftdi_sio 8-1:7.129: device disconnected
[  643.070655][   T10] ftdi_sio 8-1:7.43: device disconnected
[  643.072892][   T10] ftdi_sio 8-1:7.65: device disconnected
[  643.468699][   T43] kauditd_printk_skb: 26 callbacks suppressed
[  643.468722][   T43] audit: type=1400 audit(1789694783.478:2714): avc:  denied  { append } for  pid=24218 comm="syz.1.6995" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  643.644592][T24224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6997'.
[  643.644640][T24224] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6997'.
[  643.790123][ T1855] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[  643.898718][T24236] hugetlbfs: Unknown parameter '/dev/sequencer2'
[  643.898996][T24236] hugetlbfs: Unknown parameter '/dev/sequencer2'
[  643.899171][T24236] hugetlbfs: Unknown parameter '/dev/sequencer2'
[  643.899341][T24236] hugetlbfs: Unknown parameter '/dev/sequencer2'
[  643.899519][T24236] hugetlbfs: Unknown parameter '/dev/sequencer2'
[  643.899733][T24236] hugetlbfs: Unknown parameter '/dev/sequencer2'
[  643.899911][T24236] hugetlbfs: Unknown parameter '/dev/sequencer2'
[  643.900078][T24236] hugetlbfs: Unknown parameter '/dev/sequencer2'
[  643.900273][T24236] hugetlbfs: Unknown parameter '/dev/sequencer2'
[  643.900447][T24236] hugetlbfs: Unknown parameter '/dev/sequencer2'
[  643.900626][T24236] hugetlbfs: Unknown parameter '/dev/sequencer2'
[  643.900793][T24236] hugetlbfs: Unknown parameter '/dev/sequencer2'
[  643.900964][T24236] hugetlbfs: Unknown parameter '/dev/sequencer2'
[  643.901138][T24236] hugetlbfs: Unknown parameter '/dev/sequencer2'
[  643.901364][T24236] hugetlbfs: Unknown parameter '/dev/sequencer2'
[  643.901536][T24236] hugetlbfs: Unknown parameter '/dev/sequencer2'
[  643.901710][T24236] hugetlbfs: Unknown parameter '/dev/sequencer2'
[  643.901974][T24236] hugetlbfs: Unknown parameter '/dev/sequencer2'
[  643.902152][T24236] hugetlbfs: Unknown parameter '/dev/sequencer2'
[  643.902321][T24236] hugetlbfs: Unknown parameter '/dev/sequencer2'
[  643.902495][T24236] hugetlbfs: Unknown parameter '/dev/sequencer2'
[  643.902662][T24236] hugetlbfs: Unknown parameter '/dev/sequencer2'
[  643.902836][T24236] hugetlbfs: Unknown parameter '/dev/sequencer2'
[  643.903011][T24236] hugetlbfs: Unknown parameter '/dev/sequencer2'
[  643.903183][T24236] hugetlbfs: Unknown parameter '/dev/sequencer2'
[  643.903354][T24236] hugetlbfs: Unknown parameter '/dev/sequencer2'
[  643.903526][T24236] hugetlbfs: Unknown parameter '/dev/sequencer2'
[  643.903721][T24236] hugetlbfs: Unknown parameter '/dev/sequencer2'
[  643.903905][T24236] hugetlbfs: Unknown parameter '/dev/sequencer2'
[  643.904422][T24236] hugetlbfs: Unknown parameter '/dev/sequencer2'
[  643.959579][ T1855] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  643.968441][ T1855] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  643.968472][ T1855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  643.994548][ T1855] as10x_usb: device has been detected
[  643.994862][ T1855] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  644.001430][ T1855] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  644.012813][ T1855] as10x_usb: error during firmware upload part1
[  644.013086][ T1855] Registered device Abilis Systems DVB-Titan
[  644.309706][T24248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7004'.
[  644.309769][T24248] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7004'.
[  644.544497][T24255] xt_hashlimit: size too large, truncated to 1048576
[  644.661138][T24260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7008'.
[  644.661185][T24260] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7008'.
[  644.748760][ T1855] usb 6-1: USB disconnect, device number 60
[  644.787013][ T1855] Unregistered device Abilis Systems DVB-Titan
[  644.789552][T24266] FAULT_INJECTION: forcing a failure.
[  644.789552][T24266] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  644.789573][T24266] CPU: 3 UID: 0 PID: 24266 Comm: syz.3.7011 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  644.789589][T24266] Tainted: [L]=SOFTLOCKUP
[  644.789593][T24266] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  644.789600][T24266] Call Trace:
[  644.789604][T24266]  <TASK>
[  644.789609][T24266]  dump_stack_lvl+0x100/0x190
[  644.789630][T24266]  should_fail_ex.cold+0x5/0xa
[  644.789646][T24266]  _copy_from_user+0x2e/0xd0
[  644.789658][T24266]  copy_msghdr_from_user+0x9f/0x4c0
[  644.789689][T24266]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  644.789710][T24266]  ? lock_acquire+0x1d1/0x380
[  644.789722][T24266]  ? get_pid_task+0x2a/0x250
[  644.789738][T24266]  ___sys_sendmsg+0x106/0x1e0
[  644.789755][T24266]  ? __pfx____sys_sendmsg+0x10/0x10
[  644.789772][T24266]  ? get_pid_task+0x106/0x250
[  644.789792][T24266]  ? find_held_lock+0x2b/0x80
[  644.789815][T24266]  __sys_sendmsg+0x160/0x210
[  644.789829][T24266]  ? __pfx___sys_sendmsg+0x10/0x10
[  644.789849][T24266]  do_syscall_64+0x123/0x790
[  644.789865][T24266]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  644.789877][T24266] RIP: 0033:0x7fdbea59e159
[  644.789886][T24266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  644.789898][T24266] RSP: 002b:00007fdbeb551028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  644.789909][T24266] RAX: ffffffffffffffda RBX: 00007fdbea825fa0 RCX: 00007fdbea59e159
[  644.789917][T24266] RDX: 000000000004c810 RSI: 0000200000001280 RDI: 0000000000000003
[  644.789924][T24266] RBP: 00007fdbeb551090 R08: 0000000000000000 R09: 0000000000000000
[  644.789931][T24266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  644.789938][T24266] R13: 00007fdbea826038 R14: 00007fdbea825fa0 R15: 00007fff6dc7e1d8
[  644.789953][T24266]  </TASK>
[  644.790444][ T1855] as10x_usb: device has been disconnected
[  644.936852][   T43] audit: type=1400 audit(1789694784.938:2715): avc:  denied  { write } for  pid=24268 comm="syz.3.7012" name="/" dev="9p" ino=73941749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  644.941398][   T43] audit: type=1400 audit(1789694784.948:2716): avc:  denied  { lock } for  pid=24268 comm="syz.3.7012" path="/434/file0/blkio.bfq.io_merged_recursive" dev="9p" ino=73941783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  645.211121][T24281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7015'.
[  645.211191][T24281] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7015'.
[  645.334953][T24289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7019'.
[  645.368861][   T43] audit: type=1400 audit(1789694785.378:2717): avc:  denied  { setopt } for  pid=24290 comm="syz.1.7020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  645.445451][T24303] input: syz0 as /devices/virtual/input/input78
[  645.509681][T24305] FAULT_INJECTION: forcing a failure.
[  645.509681][T24305] name failslab, interval 1, probability 0, space 0, times 0
[  645.509702][T24305] CPU: 3 UID: 0 PID: 24305 Comm: syz.3.7024 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  645.509718][T24305] Tainted: [L]=SOFTLOCKUP
[  645.509730][T24305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  645.509754][T24305] Call Trace:
[  645.509760][T24305]  <TASK>
[  645.509764][T24305]  dump_stack_lvl+0x100/0x190
[  645.509785][T24305]  should_fail_ex.cold+0x5/0xa
[  645.509801][T24305]  should_failslab+0xc2/0x120
[  645.509816][T24305]  __kmalloc_noprof+0xfc/0x840
[  645.509827][T24305]  ? rcu_is_watching+0x13/0xc0
[  645.509843][T24305]  ? tomoyo_realpath_from_path+0xb6/0x690
[  645.509859][T24305]  tomoyo_realpath_from_path+0xb6/0x690
[  645.509876][T24305]  tomoyo_path_number_perm+0x23c/0x580
[  645.509900][T24305]  ? tomoyo_path_number_perm+0x22e/0x580
[  645.509926][T24305]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  645.509964][T24305]  ? __lock_acquire+0x5c0/0x1f40
[  645.509991][T24305]  ? __fget_files+0x34/0x3d0
[  645.510013][T24305]  ? find_held_lock+0x2b/0x80
[  645.510038][T24305]  ? hook_file_ioctl_common+0x140/0x440
[  645.510067][T24305]  ? __fget_files+0x21f/0x3d0
[  645.510093][T24305]  security_file_ioctl+0xd3/0x230
[  645.510113][T24305]  __x64_sys_ioctl+0xb7/0x210
[  645.510126][T24305]  do_syscall_64+0x123/0x790
[  645.510142][T24305]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  645.510155][T24305] RIP: 0033:0x7fdbea59e159
[  645.510165][T24305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  645.510176][T24305] RSP: 002b:00007fdbeb551028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  645.510188][T24305] RAX: ffffffffffffffda RBX: 00007fdbea825fa0 RCX: 00007fdbea59e159
[  645.510195][T24305] RDX: 0000000000000000 RSI: 0000000043403d05 RDI: 0000000000000003
[  645.510202][T24305] RBP: 00007fdbeb551090 R08: 0000000000000000 R09: 0000000000000000
[  645.510209][T24305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  645.510216][T24305] R13: 00007fdbea826038 R14: 00007fdbea825fa0 R15: 00007fff6dc7e1d8
[  645.510233][T24305]  </TASK>
[  645.510282][T24305] ERROR: Out of memory at tomoyo_realpath_from_path.
[  645.553917][   T43] audit: type=1400 audit(1789694785.558:2718): avc:  denied  { bind } for  pid=24306 comm="syz.3.7025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  645.556629][   T43] audit: type=1400 audit(1789694785.558:2719): avc:  denied  { listen } for  pid=24306 comm="syz.3.7025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  645.556933][   T43] audit: type=1400 audit(1789694785.558:2720): avc:  denied  { write } for  pid=24306 comm="syz.3.7025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  645.618363][ T1042] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[  645.778889][ T1042] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  645.781204][ T1042] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  645.781224][ T1042] usb 6-1: Product: syz
[  645.781231][ T1042] usb 6-1: Manufacturer: syz
[  645.781239][ T1042] usb 6-1: SerialNumber: syz
[  646.023778][T24330] bond4: entered promiscuous mode
[  646.108562][ T1855] usb 8-1: new high-speed USB device number 40 using dummy_hcd
[  646.241048][T24341] FAULT_INJECTION: forcing a failure.
[  646.241048][T24341] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  646.241080][T24341] CPU: 0 UID: 0 PID: 24341 Comm: syz.2.7037 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  646.241104][T24341] Tainted: [L]=SOFTLOCKUP
[  646.241110][T24341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  646.241121][T24341] Call Trace:
[  646.241127][T24341]  <TASK>
[  646.241135][T24341]  dump_stack_lvl+0x100/0x190
[  646.241163][T24341]  should_fail_ex.cold+0x5/0xa
[  646.241188][T24341]  _copy_from_user+0x2e/0xd0
[  646.241206][T24341]  copy_msghdr_from_user+0x9f/0x4c0
[  646.241233][T24341]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  646.241264][T24341]  ? lock_acquire+0x1d1/0x380
[  646.241281][T24341]  ? get_pid_task+0x2a/0x250
[  646.241306][T24341]  ___sys_sendmsg+0x106/0x1e0
[  646.241332][T24341]  ? __pfx____sys_sendmsg+0x10/0x10
[  646.241356][T24341]  ? get_pid_task+0x106/0x250
[  646.241386][T24341]  ? find_held_lock+0x2b/0x80
[  646.241423][T24341]  __sys_sendmsg+0x160/0x210
[  646.241444][T24341]  ? __pfx___sys_sendmsg+0x10/0x10
[  646.241477][T24341]  do_syscall_64+0x123/0x790
[  646.241502][T24341]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  646.241520][T24341] RIP: 0033:0x7f801ad9e159
[  646.241535][T24341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  646.241551][T24341] RSP: 002b:00007f801bc7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  646.241569][T24341] RAX: ffffffffffffffda RBX: 00007f801b025fa0 RCX: 00007f801ad9e159
[  646.241581][T24341] RDX: 0000000000004000 RSI: 00002000000005c0 RDI: 0000000000000003
[  646.241592][T24341] RBP: 00007f801bc7b090 R08: 0000000000000000 R09: 0000000000000000
[  646.241603][T24341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  646.241613][T24341] R13: 00007f801b026038 R14: 00007f801b025fa0 R15: 00007ffe5fe81638
[  646.241637][T24341]  </TASK>
[  646.259271][ T1855] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  646.260198][ T1855] usb 8-1: config 0 has an invalid descriptor of length 164, skipping remainder of the config
[  646.260216][ T1855] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  646.260242][ T1855] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  646.262293][ T1855] usb 8-1: config 0 descriptor??
[  646.285699][T24343] program syz.2.7038 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  646.323996][T24345] FAULT_INJECTION: forcing a failure.
[  646.323996][T24345] name failslab, interval 1, probability 0, space 0, times 0
[  646.324027][T24345] CPU: 3 UID: 0 PID: 24345 Comm: syz.2.7039 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  646.324052][T24345] Tainted: [L]=SOFTLOCKUP
[  646.324059][T24345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  646.324071][T24345] Call Trace:
[  646.324078][T24345]  <TASK>
[  646.324086][T24345]  dump_stack_lvl+0x100/0x190
[  646.324153][T24345]  should_fail_ex.cold+0x5/0xa
[  646.324180][T24345]  should_failslab+0xc2/0x120
[  646.324204][T24345]  __kmalloc_noprof+0xfc/0x840
[  646.324223][T24345]  ? rcu_is_watching+0x13/0xc0
[  646.324253][T24345]  ? tomoyo_realpath_from_path+0xb6/0x690
[  646.324281][T24345]  tomoyo_realpath_from_path+0xb6/0x690
[  646.324309][T24345]  tomoyo_path_number_perm+0x23c/0x580
[  646.324338][T24345]  ? tomoyo_path_number_perm+0x22e/0x580
[  646.324370][T24345]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  646.324409][T24345]  ? __lock_acquire+0x5c0/0x1f40
[  646.324442][T24345]  ? __fget_files+0x34/0x3d0
[  646.324465][T24345]  ? find_held_lock+0x2b/0x80
[  646.324490][T24345]  ? hook_file_ioctl_common+0x140/0x440
[  646.324520][T24345]  ? __fget_files+0x21f/0x3d0
[  646.324547][T24345]  security_file_ioctl+0xd3/0x230
[  646.324569][T24345]  __x64_sys_ioctl+0xb7/0x210
[  646.324591][T24345]  do_syscall_64+0x123/0x790
[  646.324619][T24345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  646.324638][T24345] RIP: 0033:0x7f801ad9e159
[  646.324654][T24345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  646.324672][T24345] RSP: 002b:00007f801bc7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  646.324690][T24345] RAX: ffffffffffffffda RBX: 00007f801b025fa0 RCX: 00007f801ad9e159
[  646.324703][T24345] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000003
[  646.324715][T24345] RBP: 00007f801bc7b090 R08: 0000000000000000 R09: 0000000000000000
[  646.324726][T24345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  646.324737][T24345] R13: 00007f801b026038 R14: 00007f801b025fa0 R15: 00007ffe5fe81638
[  646.324764][T24345]  </TASK>
[  646.324818][T24345] ERROR: Out of memory at tomoyo_realpath_from_path.
[  646.324833][T24345] program syz.2.7039 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  646.828457][T24353] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  647.443127][   T43] audit: type=1400 audit(1789694787.447:2721): avc:  granted  { setsecparam } for  pid=24361 comm="syz.2.7046" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  647.670084][T24376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7052'.
[  647.860968][   T66] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  647.861941][   T66] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  647.862900][   T66] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  647.865040][   T66] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  647.865784][   T66] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  648.317267][T24378] bridge0: port 1(bridge_slave_0) entered blocking state
[  648.317359][T24378] bridge0: port 1(bridge_slave_0) entered disabled state
[  648.317448][T24378] bridge_slave_0: entered allmulticast mode
[  648.323361][T24378] bridge_slave_0: entered promiscuous mode
[  648.326048][T24378] bridge0: port 2(bridge_slave_1) entered blocking state
[  648.326118][T24378] bridge0: port 2(bridge_slave_1) entered disabled state
[  648.326376][T24378] bridge_slave_1: entered allmulticast mode
[  648.328031][T24378] bridge_slave_1: entered promiscuous mode
[  648.347595][T24378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  648.349327][T24378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  648.365251][ T1042] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  648.365300][ T1042] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  648.365317][ T1042] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  648.385870][T24378] team0: Port device team_slave_0 added
[  648.388246][ T1042] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[  648.390615][T24378] team0: Port device team_slave_1 added
[  648.397055][ T1042] usb 6-1: USB disconnect, device number 61
[  648.427469][ T5747] udevd[5747]: setting owner of /dev/bus/usb/006/061 to uid=0, gid=0 failed: No such file or directory
[  648.439824][T24378] batman_adv: batadv0: Adding interface: batadv_slave_0
[  648.439841][T24378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  648.439854][T24378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  648.440827][T24378] batman_adv: batadv0: Adding interface: batadv_slave_1
[  648.440841][T24378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  648.440855][T24378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  648.456506][T24398] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  648.456518][T24398] overlayfs: missing 'lowerdir'
[  648.491304][   T43] audit: type=1400 audit(1789694788.497:2722): avc:  denied  { create } for  pid=24400 comm="syz.4.7056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  648.493130][   T43] audit: type=1400 audit(1789694788.497:2723): avc:  denied  { create } for  pid=24400 comm="syz.4.7056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  648.493168][   T43] audit: type=1400 audit(1789694788.497:2724): avc:  denied  { write } for  pid=24400 comm="syz.4.7056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  648.493201][   T43] audit: type=1400 audit(1789694788.497:2725): avc:  denied  { read } for  pid=24400 comm="syz.4.7056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  648.494632][   T43] audit: type=1400 audit(1789694788.497:2726): avc:  denied  { write } for  pid=24400 comm="syz.4.7056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  648.503026][T24378] hsr_slave_0: entered promiscuous mode
[  648.503521][T24378] hsr_slave_1: entered promiscuous mode
[  648.503871][T24378] debugfs: 'hsr0' already exists in 'hsr'
[  648.503884][T24378] Cannot create hsr debugfs directory
[  648.516938][   T43] audit: type=1400 audit(1789694788.507:2727): avc:  denied  { read write } for  pid=17193 comm="syz-executor" name="loop4" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  648.517637][   T43] audit: type=1400 audit(1789694788.507:2728): avc:  denied  { open } for  pid=17193 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  648.517678][   T43] audit: type=1400 audit(1789694788.507:2729): avc:  denied  { ioctl } for  pid=17193 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  648.522395][   T43] audit: type=1400 audit(1789694788.527:2730): avc:  denied  { allowed } for  pid=24402 comm="syz.4.7057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  648.523049][   T43] audit: type=1400 audit(1789694788.527:2731): avc:  denied  { create } for  pid=24402 comm="syz.4.7057" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  648.601467][T24406] FAULT_INJECTION: forcing a failure.
[  648.601467][T24406] name failslab, interval 1, probability 0, space 0, times 0
[  648.601489][T24406] CPU: 3 UID: 0 PID: 24406 Comm: syz.1.7058 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  648.601505][T24406] Tainted: [L]=SOFTLOCKUP
[  648.601510][T24406] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  648.601516][T24406] Call Trace:
[  648.601521][T24406]  <TASK>
[  648.601526][T24406]  dump_stack_lvl+0x100/0x190
[  648.601546][T24406]  should_fail_ex.cold+0x5/0xa
[  648.601562][T24406]  should_failslab+0xc2/0x120
[  648.601577][T24406]  __kmalloc_noprof+0xfc/0x840
[  648.601588][T24406]  ? rcu_is_watching+0x13/0xc0
[  648.601604][T24406]  ? tomoyo_realpath_from_path+0xb6/0x690
[  648.601621][T24406]  tomoyo_realpath_from_path+0xb6/0x690
[  648.601637][T24406]  tomoyo_path_number_perm+0x23c/0x580
[  648.601655][T24406]  ? tomoyo_path_number_perm+0x22e/0x580
[  648.601676][T24406]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  648.601699][T24406]  ? __lock_acquire+0x5c0/0x1f40
[  648.601718][T24406]  ? __fget_files+0x34/0x3d0
[  648.601732][T24406]  ? find_held_lock+0x2b/0x80
[  648.601747][T24406]  ? hook_file_ioctl_common+0x140/0x440
[  648.601765][T24406]  ? __fget_files+0x21f/0x3d0
[  648.601780][T24406]  security_file_ioctl+0xd3/0x230
[  648.601794][T24406]  __x64_sys_ioctl+0xb7/0x210
[  648.601806][T24406]  do_syscall_64+0x123/0x790
[  648.601823][T24406]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.601835][T24406] RIP: 0033:0x7f823d99e159
[  648.601845][T24406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  648.601856][T24406] RSP: 002b:00007f823e827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  648.601868][T24406] RAX: ffffffffffffffda RBX: 00007f823dc25fa0 RCX: 00007f823d99e159
[  648.601875][T24406] RDX: 00002000000001c0 RSI: 00000000400448e6 RDI: 0000000000000004
[  648.601882][T24406] RBP: 00007f823e827090 R08: 0000000000000000 R09: 0000000000000000
[  648.601889][T24406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  648.601896][T24406] R13: 00007f823dc26038 R14: 00007f823dc25fa0 R15: 00007ffe21826e18
[  648.601910][T24406]  </TASK>
[  648.601915][T24406] ERROR: Out of memory at tomoyo_realpath_from_path.
[  648.704547][T24378] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  648.715547][T24411] __nla_validate_parse: 1 callbacks suppressed
[  648.715559][T24411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7061'.
[  648.715768][T24411] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7061'.
[  648.822968][T24378] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  648.894434][T24378] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  648.898944][   T10] usb 8-1: USB disconnect, device number 40
[  649.053263][T24378] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  649.328212][T24378] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  649.336863][T24378] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  649.338247][T24378] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  649.343108][T24378] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  649.344222][T24378] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  649.353503][T24378] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  649.354444][T24378] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  649.365566][T24378] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  649.481643][T24378] 8021q: adding VLAN 0 to HW filter on device bond0
[  649.497386][T24378] 8021q: adding VLAN 0 to HW filter on device team0
[  649.509479][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state
[  649.509619][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state
[  649.524758][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state
[  649.524864][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state
[  649.568437][T24462] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.7078'.
[  649.823795][T24479] FAULT_INJECTION: forcing a failure.
[  649.823795][T24479] name failslab, interval 1, probability 0, space 0, times 0
[  649.823830][T24479] CPU: 0 UID: 0 PID: 24479 Comm: syz.3.7084 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  649.823855][T24479] Tainted: [L]=SOFTLOCKUP
[  649.823862][T24479] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  649.823872][T24479] Call Trace:
[  649.823879][T24479]  <TASK>
[  649.823887][T24479]  dump_stack_lvl+0x100/0x190
[  649.823919][T24479]  should_fail_ex.cold+0x5/0xa
[  649.823946][T24479]  should_failslab+0xc2/0x120
[  649.823970][T24479]  __kmalloc_noprof+0xfc/0x840
[  649.823988][T24479]  ? rcu_is_watching+0x13/0xc0
[  649.824017][T24479]  ? tomoyo_realpath_from_path+0xb6/0x690
[  649.824044][T24479]  tomoyo_realpath_from_path+0xb6/0x690
[  649.824108][T24479]  tomoyo_path_number_perm+0x23c/0x580
[  649.824138][T24479]  ? tomoyo_path_number_perm+0x22e/0x580
[  649.824168][T24479]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  649.824206][T24479]  ? __lock_acquire+0x5c0/0x1f40
[  649.824239][T24479]  ? __fget_files+0x34/0x3d0
[  649.824262][T24479]  ? find_held_lock+0x2b/0x80
[  649.824286][T24479]  ? hook_file_ioctl_common+0x140/0x440
[  649.824316][T24479]  ? __fget_files+0x21f/0x3d0
[  649.824343][T24479]  security_file_ioctl+0xd3/0x230
[  649.824365][T24479]  __x64_sys_ioctl+0xb7/0x210
[  649.824385][T24479]  do_syscall_64+0x123/0x790
[  649.824412][T24479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  649.824431][T24479] RIP: 0033:0x7fdbea59e159
[  649.824447][T24479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  649.824464][T24479] RSP: 002b:00007fdbeb551028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  649.824484][T24479] RAX: ffffffffffffffda RBX: 00007fdbea825fa0 RCX: 00007fdbea59e159
[  649.824497][T24479] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  649.824508][T24479] RBP: 00007fdbeb551090 R08: 0000000000000000 R09: 0000000000000000
[  649.824520][T24479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  649.824530][T24479] R13: 00007fdbea826038 R14: 00007fdbea825fa0 R15: 00007fff6dc7e1d8
[  649.824556][T24479]  </TASK>
[  649.824564][T24479] ERROR: Out of memory at tomoyo_realpath_from_path.
[  649.959417][ T5087] Bluetooth: hci3: command tx timeout
[  650.094057][T24378] 8021q: adding VLAN 0 to HW filter on device batadv0
[  650.131094][T24498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7088'.
[  650.156506][T24378] veth0_vlan: entered promiscuous mode
[  650.168659][T24378] veth1_vlan: entered promiscuous mode
[  650.218871][T24378] veth0_macvtap: entered promiscuous mode
[  650.223365][T24378] veth1_macvtap: entered promiscuous mode
[  650.234853][T24378] batman_adv: batadv0: Interface activated: batadv_slave_0
[  650.240300][T24378] batman_adv: batadv0: Interface activated: batadv_slave_1
[  650.270238][T12664] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  650.270273][T12664] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  650.270292][T12664] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  650.270310][T12664] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  651.021891][T24500] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  651.024031][T24500] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  651.044528][T24500] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  651.052234][T24500] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  651.052646][T24500] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  651.057259][T24500] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  651.104450][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  651.104464][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  651.136768][T24509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7092'.
[  651.136845][T24509] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7092'.
[  651.151011][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  651.151031][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  651.319918][T17601] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[  651.368814][T24524] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7098'.
[  651.482569][T17601] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  651.483560][T17601] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  651.483586][T17601] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  651.483623][T17601] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  651.483657][T17601] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  651.488915][T17601] usb 6-1: config 0 descriptor??
[  651.645232][T24534] netlink: 'syz.2.7102': attribute type 6 has an invalid length.
[  651.718199][T24534] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint
[  651.749518][T24534] pci 0000:00:00.0: Adding to iommu group 0
[  652.071276][T24545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7107'.
[  652.075508][T24545] batadv0: entered promiscuous mode
[  652.081739][T24545] macsec1: entered promiscuous mode
[  652.081966][T24545] macsec1: entered allmulticast mode
[  652.081976][T24545] batadv0: entered allmulticast mode
[  652.083847][T24545] 8021q: adding VLAN 0 to HW filter on device macsec1
[  652.085560][T24545] batadv0: left allmulticast mode
[  652.085654][T24545] batadv0: left promiscuous mode
[  652.132825][T17601] usbhid 6-1:0.0: can't add hid device: -71
[  652.132930][T17601] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  652.137371][T17601] usb 6-1: USB disconnect, device number 62
[  652.360206][ T5087] Bluetooth: hci1: command 0x0c1a tx timeout
[  652.733087][T24565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7112'.
[  652.733182][T24565] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7112'.
[  653.079918][ T5087] Bluetooth: hci3: command 0x040f tx timeout
[  653.544762][   T43] kauditd_printk_skb: 657 callbacks suppressed
[  653.544783][   T43] audit: type=1400 audit(1789694793.546:3387): avc:  denied  { map_read map_write } for  pid=24528 comm="syz.3.7100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  653.549225][   T43] audit: type=1400 audit(1789694793.546:3388): avc:  denied  { prog_load } for  pid=24528 comm="syz.3.7100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  653.549648][   T43] audit: type=1400 audit(1789694793.546:3389): avc:  denied  { bpf } for  pid=24528 comm="syz.3.7100" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  653.582751][   T43] audit: type=1400 audit(1789694793.586:3390): avc:  denied  { create } for  pid=24528 comm="syz.3.7100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  653.583614][   T43] audit: type=1400 audit(1789694793.586:3391): avc:  denied  { create } for  pid=24528 comm="syz.3.7100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  653.584752][   T43] audit: type=1400 audit(1789694793.586:3392): avc:  denied  { ioctl } for  pid=24528 comm="syz.3.7100" path="socket:[137100]" dev="sockfs" ino=137100 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  653.586340][   T43] audit: type=1400 audit(1789694793.586:3393): avc:  denied  { write } for  pid=24528 comm="syz.3.7100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  653.587520][   T43] audit: type=1400 audit(1789694793.586:3394): avc:  denied  { map_create } for  pid=24528 comm="syz.3.7100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  653.637045][   T43] audit: type=1400 audit(1789694793.636:3395): avc:  denied  { read write } for  pid=19680 comm="syz-executor" name="loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  653.637360][   T43] audit: type=1400 audit(1789694793.636:3396): avc:  denied  { read write open } for  pid=19680 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  653.891105][T24593] FAULT_INJECTION: forcing a failure.
[  653.891105][T24593] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  653.891140][T24593] CPU: 2 UID: 0 PID: 24593 Comm: syz.3.7121 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  653.891165][T24593] Tainted: [L]=SOFTLOCKUP
[  653.891172][T24593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  653.891183][T24593] Call Trace:
[  653.891191][T24593]  <TASK>
[  653.891198][T24593]  dump_stack_lvl+0x100/0x190
[  653.891229][T24593]  should_fail_ex.cold+0x5/0xa
[  653.891256][T24593]  _copy_from_user+0x2e/0xd0
[  653.891275][T24593]  copy_msghdr_from_user+0x9f/0x4c0
[  653.891303][T24593]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  653.891342][T24593]  ___sys_sendmsg+0x106/0x1e0
[  653.891369][T24593]  ? __pfx____sys_sendmsg+0x10/0x10
[  653.891407][T24593]  ? find_held_lock+0x2b/0x80
[  653.891448][T24593]  __sys_sendmsg+0x160/0x210
[  653.891471][T24593]  ? __pfx___sys_sendmsg+0x10/0x10
[  653.891506][T24593]  do_syscall_64+0x123/0x790
[  653.891534][T24593]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  653.891553][T24593] RIP: 0033:0x7fdbea59e159
[  653.891569][T24593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  653.891588][T24593] RSP: 002b:00007fdbeb551028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  653.891608][T24593] RAX: ffffffffffffffda RBX: 00007fdbea825fa0 RCX: 00007fdbea59e159
[  653.891621][T24593] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000003
[  653.891633][T24593] RBP: 00007fdbeb551090 R08: 0000000000000000 R09: 0000000000000000
[  653.891644][T24593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  653.891654][T24593] R13: 00007fdbea826038 R14: 00007fdbea825fa0 R15: 00007fff6dc7e1d8
[  653.891679][T24593]  </TASK>
[  654.365566][T24614] FAULT_INJECTION: forcing a failure.
[  654.365566][T24614] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  654.365598][T24614] CPU: 0 UID: 0 PID: 24614 Comm: syz.1.7131 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  654.365622][T24614] Tainted: [L]=SOFTLOCKUP
[  654.365628][T24614] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  654.365639][T24614] Call Trace:
[  654.365645][T24614]  <TASK>
[  654.365652][T24614]  dump_stack_lvl+0x100/0x190
[  654.365687][T24614]  should_fail_ex.cold+0x5/0xa
[  654.365707][T24614]  ? prepare_alloc_pages+0x16d/0x5b0
[  654.365730][T24614]  should_fail_alloc_page+0xeb/0x140
[  654.365752][T24614]  prepare_alloc_pages+0x1f0/0x5b0
[  654.365777][T24614]  __alloc_frozen_pages_noprof+0x1e9/0x3300
[  654.365805][T24614]  ? find_held_lock+0x2b/0x80
[  654.365828][T24614]  ? is_bpf_text_address+0x8a/0x1a0
[  654.365849][T24614]  ? is_bpf_text_address+0x8a/0x1a0
[  654.365870][T24614]  ? bpf_ksym_find+0x128/0x1c0
[  654.365894][T24614]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  654.365921][T24614]  ? is_bpf_text_address+0x94/0x1a0
[  654.365942][T24614]  ? kernel_text_address+0x8d/0x100
[  654.365968][T24614]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  654.365994][T24614]  ? arch_stack_walk+0xa6/0xf0
[  654.366025][T24614]  ? stack_trace_save+0x8e/0xc0
[  654.366049][T24614]  ? __pfx_stack_trace_save+0x10/0x10
[  654.366076][T24614]  ? is_bpf_text_address+0x8a/0x1a0
[  654.366100][T24614]  ? kasan_save_stack+0x3f/0x50
[  654.366118][T24614]  ? kasan_save_stack+0x30/0x50
[  654.366136][T24614]  ? kasan_save_track+0x14/0x30
[  654.366153][T24614]  ? __kasan_slab_alloc+0x89/0x90
[  654.366171][T24614]  ? kmem_cache_alloc_noprof+0x269/0x6a0
[  654.366188][T24614]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  654.366209][T24614]  ? policy_nodemask+0xed/0x4f0
[  654.366233][T24614]  alloc_pages_mpol+0x201/0x550
[  654.366255][T24614]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  654.366299][T24614]  alloc_pages_noprof+0x1a/0x160
[  654.366326][T24614]  pte_alloc_one+0x1c/0x3d0
[  654.366351][T24614]  __pte_alloc+0x6d/0x380
[  654.366370][T24614]  ? __pfx___pte_alloc+0x10/0x10
[  654.366393][T24614]  do_anonymous_page+0x1307/0x2050
[  654.366419][T24614]  ? find_held_lock+0x2b/0x80
[  654.366440][T24614]  ? __pmd_alloc+0x3f6/0x950
[  654.366460][T24614]  ? __pmd_alloc+0x3f6/0x950
[  654.366480][T24614]  ? __pfx_do_anonymous_page+0x10/0x10
[  654.366502][T24614]  ? do_raw_spin_unlock+0x145/0x1e0
[  654.366524][T24614]  ? _raw_spin_unlock+0x28/0x50
[  654.366543][T24614]  ? __pmd_alloc+0x3fb/0x950
[  654.366564][T24614]  __handle_mm_fault+0x1ff3/0x2f60
[  654.366593][T24614]  ? __pfx___handle_mm_fault+0x10/0x10
[  654.366614][T24614]  ? __pfx_mt_find+0x10/0x10
[  654.366650][T24614]  ? find_vma+0xbf/0x140
[  654.366672][T24614]  ? __pfx_find_vma+0x10/0x10
[  654.366692][T24614]  handle_mm_fault+0x363/0xa20
[  654.366720][T24614]  do_user_addr_fault+0x745/0x12f0
[  654.366747][T24614]  exc_page_fault+0x6f/0xd0
[  654.366769][T24614]  asm_exc_page_fault+0x26/0x30
[  654.366785][T24614] RIP: 0010:_copy_from_user+0x93/0xd0
[  654.366803][T24614] Code: bf e1 fc 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 59 00 55 fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 <f3> a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 e5 b9
[  654.366820][T24614] RSP: 0018:ffffc90003657b18 EFLAGS: 00050297
[  654.366835][T24614] RAX: 0000000000000001 RBX: 0000200000000340 RCX: 000000000000000c
[  654.366846][T24614] RDX: 0000000000000001 RSI: 0000200000000340 RDI: ffffc90003657c48
[  654.366857][T24614] RBP: 000000000000000c R08: 0000000000000001 R09: fffff520006caf8a
[  654.366868][T24614] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000
[  654.366878][T24614] R13: ffffc90003657c48 R14: 0000000000000001 R15: 000000000000000c
[  654.366899][T24614]  ? _copy_from_user+0x87/0xd0
[  654.366916][T24614]  mctp_ioctl_tag_copy_from_user+0xad/0x340
[  654.366942][T24614]  ? __pfx_mctp_ioctl_tag_copy_from_user+0x10/0x10
[  654.366967][T24614]  ? kasan_quarantine_put+0x104/0x240
[  654.366989][T24614]  mctp_ioctl+0x3de/0x6e0
[  654.367015][T24614]  ? __pfx_mctp_ioctl+0x10/0x10
[  654.367038][T24614]  ? tomoyo_path_number_perm+0x188/0x580
[  654.367071][T24614]  sock_do_ioctl+0x118/0x280
[  654.367096][T24614]  ? __pfx_sock_do_ioctl+0x10/0x10
[  654.367117][T24614]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  654.367141][T24614]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  654.367157][T24614]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[  654.367180][T24614]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  654.367204][T24614]  sock_ioctl+0x599/0x6b0
[  654.367229][T24614]  ? __pfx_sock_ioctl+0x10/0x10
[  654.367261][T24614]  ? selinux_file_ioctl+0x13b/0x290
[  654.367278][T24614]  ? selinux_file_ioctl+0xb6/0x290
[  654.367298][T24614]  ? __pfx_sock_ioctl+0x10/0x10
[  654.367322][T24614]  __x64_sys_ioctl+0x18e/0x210
[  654.367342][T24614]  do_syscall_64+0x123/0x790
[  654.367364][T24614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  654.367383][T24614] RIP: 0033:0x7f823d99e159
[  654.367398][T24614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  654.367413][T24614] RSP: 002b:00007f823e827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  654.367430][T24614] RAX: ffffffffffffffda RBX: 00007f823dc25fa0 RCX: 00007f823d99e159
[  654.367442][T24614] RDX: 0000200000000340 RSI: 00000000000089e2 RDI: 0000000000000003
[  654.367453][T24614] RBP: 00007f823e827090 R08: 0000000000000000 R09: 0000000000000000
[  654.367464][T24614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  654.367475][T24614] R13: 00007f823dc26038 R14: 00007f823dc25fa0 R15: 00007ffe21826e18
[  654.367499][T24614]  </TASK>
[  654.441099][ T5087] Bluetooth: hci1: command 0x0c1a tx timeout
[  654.921471][T24642] random: crng reseeded on system resumption
[  655.044223][T24648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7142'.
[  655.044297][T24648] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7142'.
[  655.170200][   T66] Bluetooth: hci3: command 0x040f tx timeout
[  655.594297][T24675] PKCS8: Unsupported PKCS#8 version
[  655.697929][T24682] FAULT_INJECTION: forcing a failure.
[  655.697929][T24682] name failslab, interval 1, probability 0, space 0, times 0
[  655.697960][T24682] CPU: 0 UID: 0 PID: 24682 Comm: syz.2.7154 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  655.697984][T24682] Tainted: [L]=SOFTLOCKUP
[  655.697990][T24682] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  655.698000][T24682] Call Trace:
[  655.698007][T24682]  <TASK>
[  655.698014][T24682]  dump_stack_lvl+0x100/0x190
[  655.698043][T24682]  should_fail_ex.cold+0x5/0xa
[  655.698068][T24682]  should_failslab+0xc2/0x120
[  655.698086][T24682]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[  655.698100][T24682]  ? proc_alloc_inode+0x25/0x200
[  655.698117][T24682]  ? __pfx_proc_alloc_inode+0x10/0x10
[  655.698134][T24682]  proc_alloc_inode+0x25/0x200
[  655.698149][T24682]  alloc_inode+0x68/0x250
[  655.698160][T24682]  new_inode+0x22/0x1c0
[  655.698172][T24682]  proc_pid_make_inode+0x22/0x160
[  655.698188][T24682]  proc_pident_instantiate+0x85/0x310
[  655.698206][T24682]  proc_pident_lookup+0x1e3/0x270
[  655.698224][T24682]  ? __pfx_proc_tid_base_lookup+0x10/0x10
[  655.698240][T24682]  lookup_open+0xa79/0x1990
[  655.698264][T24682]  path_openat+0xa2c/0x2440
[  655.698280][T24682]  ? __pfx_path_openat+0x10/0x10
[  655.698319][T24682]  do_file_open+0x20e/0x430
[  655.698336][T24682]  ? __pfx_do_file_open+0x10/0x10
[  655.698356][T24682]  ? __pfx_kfree_link+0x10/0x10
[  655.698372][T24682]  ? _raw_spin_unlock+0x28/0x50
[  655.698385][T24682]  ? alloc_fd+0x471/0x7a0
[  655.698403][T24682]  do_sys_openat2+0x10f/0x1e0
[  655.698419][T24682]  ? __pfx_do_sys_openat2+0x10/0x10
[  655.698439][T24682]  __x64_sys_openat+0x12d/0x210
[  655.698455][T24682]  ? __pfx___x64_sys_openat+0x10/0x10
[  655.698476][T24682]  do_syscall_64+0x123/0x790
[  655.698492][T24682]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  655.698504][T24682] RIP: 0033:0x7fd46075e98e
[  655.698514][T24682] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  655.698525][T24682] RSP: 002b:00007fd46158bf98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  655.698538][T24682] RAX: ffffffffffffffda RBX: 00007fd46158c6c0 RCX: 00007fd46075e98e
[  655.698545][T24682] RDX: 0000000000000002 RSI: 00007fd460834942 RDI: ffffffffffffff9c
[  655.698552][T24682] RBP: 00007fd46083503b R08: 0000000000000000 R09: 0000000000000000
[  655.698559][T24682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  655.698566][T24682] R13: 00007fd460a26038 R14: 00007fd460a25fa0 R15: 00007ffc2159fe18
[  655.698581][T24682]  </TASK>
[  655.773782][T17193] syz_tun (unregistering): left allmulticast mode
[  655.773910][T17193] syz_tun (unregistering): left promiscuous mode
[  655.773977][T17193] bridge0: port 1(syz_tun) entered disabled state
[  655.844272][T24687] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  655.997726][T12661] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  655.997762][T12661] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  656.077750][    C0] blk_print_req_error: 46 callbacks suppressed
[  656.077771][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  656.077843][    C0] buffer_io_error: 266 callbacks suppressed
[  656.077854][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  656.077879][    C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  656.077935][    C0] Buffer I/O error on dev loop6, logical block 1, async page read
[  656.077952][    C0] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  656.078007][    C0] Buffer I/O error on dev loop6, logical block 2, async page read
[  656.078023][    C0] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  656.078079][    C0] Buffer I/O error on dev loop6, logical block 3, async page read
[  656.078095][    C0] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  656.078150][    C0] Buffer I/O error on dev loop6, logical block 4, async page read
[  656.078167][    C0] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  656.078223][    C0] Buffer I/O error on dev loop6, logical block 5, async page read
[  656.078239][    C0] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  656.078294][    C0] Buffer I/O error on dev loop6, logical block 6, async page read
[  656.079176][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  656.079226][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  656.079273][    C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  656.079320][    C0] Buffer I/O error on dev loop6, logical block 1, async page read
[  656.079363][    C0] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  656.079410][    C0] Buffer I/O error on dev loop6, logical block 2, async page read
[  656.083309][ T5141] ldm_validate_partition_table(): Disk read failed.
[  656.090844][ T5141] Dev loop6: unable to read RDB block 0
[  656.099937][ T5141]  loop6: unable to read partition table
[  656.100143][ T5141] loop6: partition table beyond EOD, truncated
[  656.192941][T12661] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  656.192964][T12661] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  656.198927][T24693] FAULT_INJECTION: forcing a failure.
[  656.198927][T24693] name failslab, interval 1, probability 0, space 0, times 0
[  656.198961][T24693] CPU: 2 UID: 0 PID: 24693 Comm: syz.1.7163 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  656.198987][T24693] Tainted: [L]=SOFTLOCKUP
[  656.198994][T24693] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  656.199006][T24693] Call Trace:
[  656.199012][T24693]  <TASK>
[  656.199021][T24693]  dump_stack_lvl+0x100/0x190
[  656.199053][T24693]  should_fail_ex.cold+0x5/0xa
[  656.199081][T24693]  should_failslab+0xc2/0x120
[  656.199105][T24693]  __kvmalloc_node_noprof+0x113/0x9b0
[  656.199118][T24691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7162'.
[  656.199128][T24693]  ? lock_acquire+0x1d1/0x380
[  656.199149][T24693]  ? traverse.part.0.constprop.0+0x397/0x650
[  656.199178][T24693]  traverse.part.0.constprop.0+0x397/0x650
[  656.199209][T24693]  seq_lseek+0x2fb/0x430
[  656.199236][T24693]  full_proxy_llseek+0x123/0x190
[  656.199243][T24691] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7162'.
[  656.199262][T24693]  ksys_lseek+0xf3/0x1b0
[  656.199290][T24693]  do_syscall_64+0x123/0x790
[  656.199317][T24693]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  656.199337][T24693] RIP: 0033:0x7f823d99e159
[  656.199353][T24693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  656.199370][T24693] RSP: 002b:00007f823e827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000008
[  656.199389][T24693] RAX: ffffffffffffffda RBX: 00007f823dc25fa0 RCX: 00007f823d99e159
[  656.199402][T24693] RDX: 0000000000000001 RSI: 0000000000000851 RDI: 0000000000000003
[  656.199433][T24693] RBP: 00007f823e827090 R08: 0000000000000000 R09: 0000000000000000
[  656.199444][T24693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  656.199455][T24693] R13: 00007f823dc26038 R14: 00007f823dc25fa0 R15: 00007ffe21826e18
[  656.199483][T24693]  </TASK>
[  656.247677][ T5087] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  656.258898][ T5087] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  656.264455][ T5087] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  656.265465][ T5087] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  656.271579][ T5087] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  656.376544][T12661] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  656.376576][T12661] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  656.419831][T24703] trusted_key: encrypted_key: insufficient parameters specified
[  656.420747][T24703] trusted_key: encrypted_key: keylen parameter is missing
[  656.491927][T12661] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  656.491955][T12661] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  656.521350][   T66] Bluetooth: hci1: command 0x0c1a tx timeout
[  656.610795][T24715] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7167'.
[  657.223929][ T5087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  657.250885][T21113] Bluetooth: hci3: command 0x040f tx timeout
[  657.251091][ T5087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  657.253745][ T5087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  657.259121][ T5087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  657.259762][ T5087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  657.408769][T12661] bond0 (unregistering): Released all slaves
[  657.417482][T12661] bond1 (unregistering): Released all slaves
[  657.432246][ T5443] 8021q: adding VLAN 0 to HW filter on device eth2
[  657.727071][T24766] tipc: Started in network mode
[  657.727089][T24766] tipc: Node identity ffffffff000000000000ffffffffffff, cluster identity 4711
[  657.727114][T24766] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  657.902346][ T5443] 8021q: adding VLAN 0 to HW filter on device eth3
[  657.970436][T12661] hsr_slave_0: left promiscuous mode
[  657.976554][T12661] hsr_slave_1: left promiscuous mode
[  657.981362][T12661] veth1_macvtap: left promiscuous mode
[  657.981394][T12661] veth0_macvtap: left promiscuous mode
[  657.981482][T12661] veth1_vlan: left promiscuous mode
[  657.981551][T12661] veth0_vlan: left promiscuous mode
[  658.370399][ T5087] Bluetooth: hci0: command tx timeout
[  658.388847][T24694] bridge0: port 1(bridge_slave_0) entered blocking state
[  658.388925][T24694] bridge0: port 1(bridge_slave_0) entered disabled state
[  658.389022][T24694] bridge_slave_0: entered allmulticast mode
[  658.398577][T24694] bridge_slave_0: entered promiscuous mode
[  658.422062][T24694] bridge0: port 2(bridge_slave_1) entered blocking state
[  658.422291][T24694] bridge0: port 2(bridge_slave_1) entered disabled state
[  658.422351][T24694] bridge_slave_1: entered allmulticast mode
[  658.423130][T24694] bridge_slave_1: entered promiscuous mode
[  658.465043][T24694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  658.466631][T24694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  658.493851][T24694] team0: Port device team_slave_0 added
[  658.513511][T24694] team0: Port device team_slave_1 added
[  658.575139][   T43] kauditd_printk_skb: 1096 callbacks suppressed
[  658.575153][   T43] audit: type=1400 audit(1789695054.629:4488): avc:  denied  { create } for  pid=24800 comm="syz.3.7193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  658.576845][   T43] audit: type=1400 audit(1789695054.629:4489): avc:  denied  { ioctl } for  pid=24800 comm="syz.3.7193" path="socket:[142457]" dev="sockfs" ino=142457 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  658.577198][   T43] audit: type=1400 audit(1789695054.629:4490): avc:  denied  { write } for  pid=24800 comm="syz.3.7193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  658.585779][   T43] audit: type=1400 audit(1789695054.639:4491): avc:  denied  { create } for  pid=24801 comm="syz.2.7194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  658.585846][T24803] FAULT_INJECTION: forcing a failure.
[  658.585846][T24803] name failslab, interval 1, probability 0, space 0, times 0
[  658.585872][T24803] CPU: 3 UID: 0 PID: 24803 Comm: syz.2.7194 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  658.585897][T24803] Tainted: [L]=SOFTLOCKUP
[  658.585903][T24803] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  658.585915][T24803] Call Trace:
[  658.585921][T24803]  <TASK>
[  658.585929][T24803]  dump_stack_lvl+0x100/0x190
[  658.585961][T24803]  should_fail_ex.cold+0x5/0xa
[  658.585988][T24803]  should_failslab+0xc2/0x120
[  658.586011][T24803]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[  658.586033][T24803]  ? sock_alloc_inode+0x26/0x2c0
[  658.586059][T24803]  ? __pfx_sock_alloc_inode+0x10/0x10
[  658.586084][T24803]  sock_alloc_inode+0x26/0x2c0
[  658.586107][T24803]  ? __pfx_sock_alloc_inode+0x10/0x10
[  658.586135][T24803]  alloc_inode+0x68/0x250
[  658.586154][T24803]  sock_alloc+0x44/0x280
[  658.586175][T24803]  ? security_socket_create+0x7f/0x250
[  658.586204][T24803]  __sock_create+0xc2/0x860
[  658.586234][T24803]  __sys_socket+0x14d/0x260
[  658.586260][T24803]  ? fput+0x7c/0x100
[  658.586282][T24803]  ? __pfx___sys_socket+0x10/0x10
[  658.586308][T24803]  ? ksys_write+0x1ac/0x250
[  658.586325][T24803]  ? __pfx_ksys_write+0x10/0x10
[  658.586348][T24803]  __x64_sys_socket+0x72/0xb0
[  658.586373][T24803]  ? lockdep_hardirqs_on+0x7d/0x110
[  658.586398][T24803]  do_syscall_64+0x123/0x790
[  658.586424][T24803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  658.586442][T24803] RIP: 0033:0x7fd46079e159
[  658.586458][T24803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  658.586474][T24803] RSP: 002b:00007fd46158c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  658.586493][T24803] RAX: ffffffffffffffda RBX: 00007fd460a25fa0 RCX: 00007fd46079e159
[  658.586504][T24803] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 000000000000000a
[  658.586515][T24803] RBP: 00007fd46158c090 R08: 0000000000000000 R09: 0000000000000000
[  658.586526][T24803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  658.586537][T24803] R13: 00007fd460a26038 R14: 00007fd460a25fa0 R15: 00007ffc2159fe18
[  658.586562][T24803]  </TASK>
[  658.586571][T24803] socket: no more sockets
[  658.587675][   T43] audit: type=1400 audit(1789695054.639:4492): avc:  denied  { read write } for  pid=19680 comm="syz-executor" name="loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  658.588978][   T43] audit: type=1400 audit(1789695054.639:4493): avc:  denied  { read write open } for  pid=19680 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  658.589020][   T43] audit: type=1400 audit(1789695054.639:4494): avc:  denied  { ioctl } for  pid=19680 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  658.599497][T24694] batman_adv: batadv0: Adding interface: batadv_slave_0
[  658.599509][T24694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  658.599522][T24694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  658.613675][   T43] audit: type=1400 audit(1789695054.669:4495): avc:  denied  { read } for  pid=24804 comm="syz.3.7195" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  658.613724][   T43] audit: type=1400 audit(1789695054.669:4496): avc:  denied  { open } for  pid=24804 comm="syz.3.7195" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  658.614189][   T43] audit: type=1400 audit(1789695054.669:4497): avc:  denied  { ioctl } for  pid=24804 comm="syz.3.7195" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  658.625036][T24694] batman_adv: batadv0: Adding interface: batadv_slave_1
[  658.625048][T24694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  658.625062][T24694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  658.646918][T12661] IPVS: stop unused estimator thread 0...
[  658.744908][T24694] hsr_slave_0: entered promiscuous mode
[  658.754120][T24694] hsr_slave_1: entered promiscuous mode
[  658.754743][T24694] debugfs: 'hsr0' already exists in 'hsr'
[  658.754761][T24694] Cannot create hsr debugfs directory
[  658.933468][T12661] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  658.935047][T24823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7199'.
[  658.988273][T24826] overlay: filesystem on ./file0 not supported as upperdir
[  658.989282][T24818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7199'.
[  659.040895][T24823] team0: Port device team_slave_0 removed
[  659.085611][ T5443] 8021q: adding VLAN 0 to HW filter on device eth4
[  659.194163][T12661] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  659.320401][   T66] Bluetooth: hci1: command tx timeout
[  659.321392][ T5087] Bluetooth: hci3: command 0x040f tx timeout
[  659.339646][T12661] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  659.385844][T24850] JFS: charset not found
[  659.386508][T24850] Unsupported ieee802154 address type: 0
[  659.402494][T24738] bridge0: port 1(bridge_slave_0) entered blocking state
[  659.402616][T24738] bridge0: port 1(bridge_slave_0) entered disabled state
[  659.402682][T24738] bridge_slave_0: entered allmulticast mode
[  659.403403][T24738] bridge_slave_0: entered promiscuous mode
[  659.422790][T24738] bridge0: port 2(bridge_slave_1) entered blocking state
[  659.422844][T24738] bridge0: port 2(bridge_slave_1) entered disabled state
[  659.422945][T24738] bridge_slave_1: entered allmulticast mode
[  659.424046][T24738] bridge_slave_1: entered promiscuous mode
[  659.501496][T12661] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  659.519854][T24738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  659.530934][T24738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  659.580793][T24738] team0: Port device team_slave_0 added
[  659.589956][T24738] team0: Port device team_slave_1 added
[  659.627638][T24738] batman_adv: batadv0: Adding interface: batadv_slave_0
[  659.627656][T24738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  659.627678][T24738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  659.635351][T24738] batman_adv: batadv0: Adding interface: batadv_slave_1
[  659.635367][T24738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  659.635388][T24738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  659.782798][T24869] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  659.783090][T24869] SELinux: failed to load policy
[  659.825166][ T5443] 8021q: adding VLAN 0 to HW filter on device eth5
[  659.867729][T24738] hsr_slave_0: entered promiscuous mode
[  659.868664][T24738] hsr_slave_1: entered promiscuous mode
[  659.869191][T24738] debugfs: 'hsr0' already exists in 'hsr'
[  659.869208][T24738] Cannot create hsr debugfs directory
[  659.961404][T24694] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  659.969601][T24694] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  660.007899][T24694] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  660.018764][T24694] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  660.039340][T24694] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  660.041681][T24694] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  660.064271][T12661] bridge_slave_1: left allmulticast mode
[  660.064300][T12661] bridge_slave_1: left promiscuous mode
[  660.064488][T12661] bridge0: port 2(bridge_slave_1) entered disabled state
[  660.070540][T12661] bridge_slave_0: left allmulticast mode
[  660.070564][T12661] bridge_slave_0: left promiscuous mode
[  660.070728][T12661] bridge0: port 1(bridge_slave_0) entered disabled state
[  660.265755][T12661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  660.268022][T12661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  660.268957][T12661] bond0 (unregistering): Released all slaves
[  660.289362][T24694] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  660.293821][T24694] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  660.440488][ T5087] Bluetooth: hci0: command tx timeout
[  660.655477][T24694] 8021q: adding VLAN 0 to HW filter on device bond0
[  660.696415][T24922] FAULT_INJECTION: forcing a failure.
[  660.696415][T24922] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  660.696445][T24922] CPU: 1 UID: 0 PID: 24922 Comm: syz.2.7224 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  660.696466][T24922] Tainted: [L]=SOFTLOCKUP
[  660.696472][T24922] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  660.696482][T24922] Call Trace:
[  660.696488][T24922]  <TASK>
[  660.696494][T24922]  dump_stack_lvl+0x100/0x190
[  660.696530][T24922]  should_fail_ex.cold+0x5/0xa
[  660.696556][T24922]  _copy_from_iter+0x1f4/0x1690
[  660.696580][T24922]  ? __asan_memset+0x23/0x50
[  660.696597][T24922]  ? __pfx__copy_from_iter+0x10/0x10
[  660.696612][T24922]  ? __pfx___alloc_skb+0x10/0x10
[  660.696641][T24922]  netlink_sendmsg+0x808/0xda0
[  660.696663][T24922]  ? __pfx_netlink_sendmsg+0x10/0x10
[  660.696682][T24922]  ? selinux_socket_sendmsg+0x198/0x2f0
[  660.696714][T24922]  ____sys_sendmsg+0xa4d/0xbe0
[  660.696736][T24922]  ? __pfx_netlink_sendmsg+0x10/0x10
[  660.696753][T24922]  ? __pfx_____sys_sendmsg+0x10/0x10
[  660.696778][T24922]  ? lock_acquire+0x1d1/0x380
[  660.696795][T24922]  ? get_pid_task+0x2a/0x250
[  660.696819][T24922]  ___sys_sendmsg+0x190/0x1e0
[  660.696840][T24922]  ? __pfx____sys_sendmsg+0x10/0x10
[  660.696858][T24922]  ? get_pid_task+0x106/0x250
[  660.696877][T24922]  ? find_held_lock+0x2b/0x80
[  660.696901][T24922]  __sys_sendmsg+0x160/0x210
[  660.696914][T24922]  ? __pfx___sys_sendmsg+0x10/0x10
[  660.696934][T24922]  do_syscall_64+0x123/0x790
[  660.696951][T24922]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.696963][T24922] RIP: 0033:0x7fd46079e159
[  660.696974][T24922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  660.696985][T24922] RSP: 002b:00007fd46158c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  660.696997][T24922] RAX: ffffffffffffffda RBX: 00007fd460a25fa0 RCX: 00007fd46079e159
[  660.697004][T24922] RDX: 0200000000000000 RSI: 0000200000000f00 RDI: 0000000000000003
[  660.697011][T24922] RBP: 00007fd46158c090 R08: 0000000000000000 R09: 0000000000000000
[  660.697018][T24922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  660.697025][T24922] R13: 00007fd460a26038 R14: 00007fd460a25fa0 R15: 00007ffc2159fe18
[  660.697039][T24922]  </TASK>
[  660.734601][T12661] hsr_slave_0: left promiscuous mode
[  660.737270][T12661] hsr_slave_1: left promiscuous mode
[  660.738078][T12661] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  660.738100][T12661] batman_adv: batadv0: Removing interface: batadv_slave_0
[  660.742876][T12661] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  660.742895][T12661] batman_adv: batadv0: Removing interface: batadv_slave_1
[  660.751328][T12661] veth1_macvtap: left promiscuous mode
[  660.751373][T12661] veth0_macvtap: left promiscuous mode
[  660.751453][T12661] veth1_vlan: left promiscuous mode
[  660.751504][T12661] veth0_vlan: left promiscuous mode
[  660.939376][T12661] team0 (unregistering): Port device team_slave_1 removed
[  661.017259][ T5443] 8021q: adding VLAN 0 to HW filter on device eth6
[  661.106412][T24694] 8021q: adding VLAN 0 to HW filter on device team0
[  661.106735][T24738] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  661.118746][T24738] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  661.125356][T24738] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  661.150581][T24738] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  661.152304][T18369] bridge0: port 1(bridge_slave_0) entered blocking state
[  661.152396][T18369] bridge0: port 1(bridge_slave_0) entered forwarding state
[  661.165212][T18369] bridge0: port 2(bridge_slave_1) entered blocking state
[  661.165304][T18369] bridge0: port 2(bridge_slave_1) entered forwarding state
[  661.172546][T24738] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  661.203865][T24738] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  661.214384][T24738] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  661.226574][T24738] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  661.359415][T24940] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.7228'.
[  661.400278][ T5087] Bluetooth: hci3: command 0x040f tx timeout
[  661.400304][ T5087] Bluetooth: hci1: command tx timeout
[  661.433077][T24945] bridge0: port 1(syz_tun) entered blocking state
[  661.433206][T24945] bridge0: port 1(syz_tun) entered disabled state
[  661.433337][T24945] syz_tun: entered allmulticast mode
[  661.435908][T24945] syz_tun: entered promiscuous mode
[  661.436708][T24945] bridge0: port 1(syz_tun) entered blocking state
[  661.436838][T24945] bridge0: port 1(syz_tun) entered forwarding state
[  661.542248][T24738] 8021q: adding VLAN 0 to HW filter on device bond0
[  661.554725][T24951] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.7231'.
[  661.679340][T24738] 8021q: adding VLAN 0 to HW filter on device team0
[  661.728285][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state
[  661.728387][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state
[  661.759917][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state
[  661.760006][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state
[  661.768328][ T5443] 8021q: adding VLAN 0 to HW filter on device eth7
[  661.885214][T24972] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.7236'.
[  661.930718][ T1855] usb 8-1: new high-speed USB device number 41 using dummy_hcd
[  662.028002][T24694] 8021q: adding VLAN 0 to HW filter on device batadv0
[  662.085005][ T1855] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  662.100083][ T1855] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  662.100110][ T1855] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  662.115233][ T1855] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  662.115249][ T1855] usb 8-1: Product: syz
[  662.115257][ T1855] usb 8-1: Manufacturer: syz
[  662.115264][ T1855] usb 8-1: SerialNumber: syz
[  662.221367][ T5443] 8021q: adding VLAN 0 to HW filter on device eth8
[  662.229317][T24999] tmpfs: Bad value for 'mode'
[  662.308220][T24738] 8021q: adding VLAN 0 to HW filter on device batadv0
[  662.414859][T24694] veth0_vlan: entered promiscuous mode
[  662.426003][T24694] veth1_vlan: entered promiscuous mode
[  662.479661][T24694] veth0_macvtap: entered promiscuous mode
[  662.489117][T24694] veth1_macvtap: entered promiscuous mode
[  662.506297][T24694] batman_adv: batadv0: Interface activated: batadv_slave_0
[  662.514624][T24694] batman_adv: batadv0: Interface activated: batadv_slave_1
[  662.531829][ T5087] Bluetooth: hci0: command tx timeout
[  662.580718][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  662.580977][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  662.580998][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  662.581016][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  662.651081][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  662.651096][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  662.679804][T24738] veth0_vlan: entered promiscuous mode
[  662.703581][ T5443] 8021q: adding VLAN 0 to HW filter on device eth9
[  662.723304][T17966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  662.723325][T17966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  662.725085][T24738] veth1_vlan: entered promiscuous mode
[  662.768574][T24738] veth0_macvtap: entered promiscuous mode
[  662.781109][T24738] veth1_macvtap: entered promiscuous mode
[  662.800711][T24738] batman_adv: batadv0: Interface activated: batadv_slave_0
[  662.814565][T24738] batman_adv: batadv0: Interface activated: batadv_slave_1
[  662.931519][T12664] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  662.931944][T12664] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  662.932117][T12664] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  662.971506][T18469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  662.971528][T18469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  662.990397][T12661] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  663.032189][T18469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  663.032217][T18469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  663.163192][T25033] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7174'.
[  663.480685][ T5087] Bluetooth: hci1: command tx timeout
[  663.480715][   T66] Bluetooth: hci3: command 0x040f tx timeout
[  663.894619][   T43] kauditd_printk_skb: 1862 callbacks suppressed
[  663.894639][   T43] audit: type=1400 audit(1789695059.949:6358): avc:  denied  { unmount } for  pid=24694 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  663.898258][   T43] audit: type=1400 audit(1789695059.949:6359): avc:  denied  { read write } for  pid=24694 comm="syz-executor" name="loop5" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  663.898552][   T43] audit: type=1400 audit(1789695059.949:6360): avc:  denied  { open } for  pid=24694 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  663.898795][   T43] audit: type=1400 audit(1789695059.949:6361): avc:  denied  { ioctl } for  pid=24694 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  663.926874][   T43] audit: type=1400 audit(1789695059.979:6362): avc:  denied  { create } for  pid=25044 comm="syz.5.7244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  663.928876][   T43] audit: type=1400 audit(1789695059.979:6363): avc:  denied  { write } for  pid=25044 comm="syz.5.7244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  663.930620][   T43] audit: type=1400 audit(1789695059.989:6364): avc:  denied  { create } for  pid=25044 comm="syz.5.7244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  663.931723][   T43] audit: type=1400 audit(1789695059.989:6365): avc:  denied  { setopt } for  pid=25044 comm="syz.5.7244" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  663.932034][   T43] audit: type=1400 audit(1789695059.989:6366): avc:  denied  { write } for  pid=25044 comm="syz.5.7244" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  663.952557][   T43] audit: type=1400 audit(1789695060.009:6367): avc:  denied  { read write } for  pid=24694 comm="syz-executor" name="loop5" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  664.008568][T25048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7245'.
[  664.382912][T25053] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.7246'.
[  664.602927][ T5087] Bluetooth: hci0: command tx timeout
[  664.620133][T25068] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7253'.
[  664.693850][ T5823] usb 8-1: USB disconnect, device number 41
[  664.779020][T25078] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.7256'.
[  664.910294][   T42] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  664.926001][T25084] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7260'.
[  665.056912][T25092] FAULT_INJECTION: forcing a failure.
[  665.056912][T25092] name failslab, interval 1, probability 0, space 0, times 0
[  665.056943][T25092] CPU: 3 UID: 0 PID: 25092 Comm: syz.6.7263 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  665.056968][T25092] Tainted: [L]=SOFTLOCKUP
[  665.056975][T25092] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  665.056986][T25092] Call Trace:
[  665.056992][T25092]  <TASK>
[  665.057000][T25092]  dump_stack_lvl+0x100/0x190
[  665.057037][T25092]  should_fail_ex.cold+0x5/0xa
[  665.057063][T25092]  should_failslab+0xc2/0x120
[  665.057087][T25092]  __kmalloc_noprof+0xfc/0x840
[  665.057107][T25092]  ? tomoyo_encode2+0xfb/0x3c0
[  665.057133][T25092]  tomoyo_encode2+0xfb/0x3c0
[  665.057157][T25092]  tomoyo_encode+0x29/0x50
[  665.057177][T25092]  tomoyo_realpath_from_path+0x18c/0x690
[  665.057204][T25092]  tomoyo_path_number_perm+0x23c/0x580
[  665.057231][T25092]  ? tomoyo_path_number_perm+0x22e/0x580
[  665.057261][T25092]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  665.057299][T25092]  ? __lock_acquire+0x5c0/0x1f40
[  665.057330][T25092]  ? __fget_files+0x34/0x3d0
[  665.057353][T25092]  ? find_held_lock+0x2b/0x80
[  665.057375][T25092]  ? hook_file_ioctl_common+0x140/0x440
[  665.057404][T25092]  ? __fget_files+0x21f/0x3d0
[  665.057427][T25092]  security_file_ioctl+0xd3/0x230
[  665.057449][T25092]  __x64_sys_ioctl+0xb7/0x210
[  665.057469][T25092]  do_syscall_64+0x123/0x790
[  665.057513][T25092]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  665.057532][T25092] RIP: 0033:0x7f2cb1b9e159
[  665.057548][T25092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  665.057564][T25092] RSP: 002b:00007f2cb2ab9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  665.057583][T25092] RAX: ffffffffffffffda RBX: 00007f2cb1e25fa0 RCX: 00007f2cb1b9e159
[  665.057595][T25092] RDX: 0000200000000080 RSI: 00000000c0405665 RDI: 0000000000000003
[  665.057607][T25092] RBP: 00007f2cb2ab9090 R08: 0000000000000000 R09: 0000000000000000
[  665.057618][T25092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  665.057628][T25092] R13: 00007f2cb1e26038 R14: 00007f2cb1e25fa0 R15: 00007fff640469b8
[  665.057654][T25092]  </TASK>
[  665.057699][T25092] ERROR: Out of memory at tomoyo_realpath_from_path.
[  665.061449][   T42] usb 10-1: Using ep0 maxpacket: 8
[  665.065731][   T42] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  665.067333][   T42] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[  665.067363][   T42] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  665.067396][   T42] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  665.067421][   T42] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  665.067444][   T42] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  665.067467][   T42] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  665.067491][   T42] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  665.067516][   T42] usb 10-1: config 168 interface 0 has no altsetting 0
[  665.070885][   T42] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[  665.070914][   T42] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  665.070945][   T42] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  665.070970][   T42] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  665.070992][   T42] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  665.071016][   T42] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  665.071040][   T42] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  665.071065][   T42] usb 10-1: config 168 interface 0 has no altsetting 0
[  665.072577][   T42] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[  665.072605][   T42] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  665.072638][   T42] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  665.072662][   T42] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  665.072684][   T42] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  665.072706][   T42] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  665.072730][   T42] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  665.072760][   T42] usb 10-1: config 168 interface 0 has no altsetting 0
[  665.087314][   T42] usb 10-1: string descriptor 0 read error: -22
[  665.087425][   T42] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  665.112046][   T42] adutux 10-1:168.0: ADU100  now attached to /dev/usb/adutux2
[  665.216806][T25099] FAULT_INJECTION: forcing a failure.
[  665.216806][T25099] name failslab, interval 1, probability 0, space 0, times 0
[  665.216827][T25099] CPU: 0 UID: 0 PID: 25099 Comm: syz.6.7265 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  665.216843][T25099] Tainted: [L]=SOFTLOCKUP
[  665.216847][T25099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  665.216854][T25099] Call Trace:
[  665.216858][T25099]  <TASK>
[  665.216863][T25099]  dump_stack_lvl+0x100/0x190
[  665.216883][T25099]  should_fail_ex.cold+0x5/0xa
[  665.216900][T25099]  should_failslab+0xc2/0x120
[  665.216915][T25099]  __kmalloc_noprof+0xfc/0x840
[  665.216926][T25099]  ? __pfx_dynamic_dname+0x10/0x10
[  665.216938][T25099]  ? tomoyo_encode2+0xfb/0x3c0
[  665.216954][T25099]  tomoyo_encode2+0xfb/0x3c0
[  665.216969][T25099]  tomoyo_encode+0x29/0x50
[  665.216981][T25099]  tomoyo_realpath_from_path+0x18c/0x690
[  665.216998][T25099]  tomoyo_path_number_perm+0x23c/0x580
[  665.217015][T25099]  ? tomoyo_path_number_perm+0x22e/0x580
[  665.217033][T25099]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  665.217056][T25099]  ? __lock_acquire+0x5c0/0x1f40
[  665.217075][T25099]  ? __fget_files+0x34/0x3d0
[  665.217089][T25099]  ? find_held_lock+0x2b/0x80
[  665.217105][T25099]  ? hook_file_ioctl_common+0x140/0x440
[  665.217122][T25099]  ? __fget_files+0x21f/0x3d0
[  665.217138][T25099]  security_file_ioctl+0xd3/0x230
[  665.217151][T25099]  __x64_sys_ioctl+0xb7/0x210
[  665.217163][T25099]  do_syscall_64+0x123/0x790
[  665.217196][T25099]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  665.217208][T25099] RIP: 0033:0x7f2cb1b9e159
[  665.217217][T25099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  665.217229][T25099] RSP: 002b:00007f2cb2a98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  665.217240][T25099] RAX: ffffffffffffffda RBX: 00007f2cb1e26090 RCX: 00007f2cb1b9e159
[  665.217248][T25099] RDX: 00002000000001c0 RSI: 000000004008ae89 RDI: 0000000000000005
[  665.217255][T25099] RBP: 00007f2cb2a98090 R08: 0000000000000000 R09: 0000000000000000
[  665.217261][T25099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  665.217268][T25099] R13: 00007f2cb1e26128 R14: 00007f2cb1e26090 R15: 00007fff640469b8
[  665.217283][T25099]  </TASK>
[  665.217355][T25099] ERROR: Out of memory at tomoyo_realpath_from_path.
[  665.311579][   T42] usb 10-1: USB disconnect, device number 2
[  665.404724][T25105] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7267'.
[  665.556884][T25108] No source specified
[  665.560433][ T5087] Bluetooth: hci1: command tx timeout
[  665.565599][T25108] FAULT_INJECTION: forcing a failure.
[  665.565599][T25108] name failslab, interval 1, probability 0, space 0, times 0
[  665.565633][T25108] CPU: 3 UID: 0 PID: 25108 Comm: syz.6.7269 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  665.565660][T25108] Tainted: [L]=SOFTLOCKUP
[  665.565667][T25108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  665.565679][T25108] Call Trace:
[  665.565686][T25108]  <TASK>
[  665.565695][T25108]  dump_stack_lvl+0x100/0x190
[  665.565727][T25108]  should_fail_ex.cold+0x5/0xa
[  665.565757][T25108]  should_failslab+0xc2/0x120
[  665.565784][T25108]  __kmalloc_noprof+0xfc/0x840
[  665.565806][T25108]  ? __memcg_list_lru_alloc+0x418/0x680
[  665.565838][T25108]  __memcg_list_lru_alloc+0x418/0x680
[  665.565865][T25108]  ? xa_load+0x149/0x2c0
[  665.565898][T25108]  ? __pfx___memcg_list_lru_alloc+0x10/0x10
[  665.565931][T25108]  ? rcu_read_unlock+0x17/0x60
[  665.565965][T25108]  memcg_list_lru_alloc+0xd3/0x100
[  665.565998][T25108]  __memcg_slab_post_alloc_hook+0x27b/0x1270
[  665.566035][T25108]  ? kasan_save_track+0x14/0x30
[  665.566060][T25108]  kmem_cache_alloc_lru_noprof+0x4f6/0x6a0
[  665.566081][T25108]  ? proc_alloc_inode+0x25/0x200
[  665.566109][T25108]  ? __pfx_proc_alloc_inode+0x10/0x10
[  665.566137][T25108]  proc_alloc_inode+0x25/0x200
[  665.566168][T25108]  alloc_inode+0x68/0x250
[  665.566189][T25108]  new_inode+0x22/0x1c0
[  665.566211][T25108]  proc_get_inode+0x1d/0x780
[  665.566239][T25108]  proc_fill_super+0x566/0x870
[  665.566272][T25108]  ? __pfx_proc_fill_super+0x10/0x10
[  665.566301][T25108]  get_tree_nodev+0xdd/0x190
[  665.566322][T25108]  vfs_get_tree+0x92/0x320
[  665.566349][T25108]  path_mount+0x7d0/0x24c0
[  665.566382][T25108]  ? __pfx_path_mount+0x10/0x10
[  665.566408][T25108]  ? lockdep_hardirqs_on+0x7d/0x110
[  665.566455][T25108]  ? putname+0xb1/0x110
[  665.566480][T25108]  ? kmem_cache_free+0x127/0x6c0
[  665.566520][T25108]  ? __x64_sys_mount+0x293/0x310
[  665.566548][T25108]  __x64_sys_mount+0x293/0x310
[  665.566577][T25108]  ? __pfx___x64_sys_mount+0x10/0x10
[  665.566612][T25108]  do_syscall_64+0x123/0x790
[  665.566640][T25108]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  665.566662][T25108] RIP: 0033:0x7f2cb1b9e159
[  665.566679][T25108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  665.566699][T25108] RSP: 002b:00007f2cb2ab9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  665.566722][T25108] RAX: ffffffffffffffda RBX: 00007f2cb1e25fa0 RCX: 00007f2cb1b9e159
[  665.566736][T25108] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000000
[  665.566748][T25108] RBP: 00007f2cb1c3503b R08: 0000000000000000 R09: 0000000000000000
[  665.566762][T25108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  665.566776][T25108] R13: 00007f2cb1e26038 R14: 00007f2cb1e25fa0 R15: 00007fff640469b8
[  665.566805][T25108]  </TASK>
[  665.566862][T25108] proc_fill_super: get root inode failed
[  665.828468][T25119] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  665.891849][T17601] usb 11-1: new high-speed USB device number 2 using dummy_hcd
[  666.025146][T25125] FAULT_INJECTION: forcing a failure.
[  666.025146][T25125] name failslab, interval 1, probability 0, space 0, times 0
[  666.025167][T25125] CPU: 1 UID: 0 PID: 25125 Comm: syz.5.7276 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  666.025182][T25125] Tainted: [L]=SOFTLOCKUP
[  666.025187][T25125] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  666.025193][T25125] Call Trace:
[  666.025198][T25125]  <TASK>
[  666.025202][T25125]  dump_stack_lvl+0x100/0x190
[  666.025222][T25125]  should_fail_ex.cold+0x5/0xa
[  666.025238][T25125]  should_failslab+0xc2/0x120
[  666.025253][T25125]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  666.025265][T25125]  ? __alloc_skb+0x5b7/0x710
[  666.025278][T25125]  ? __alloc_skb+0x140/0x710
[  666.025292][T25125]  __alloc_skb+0x140/0x710
[  666.025303][T25125]  ? __alloc_skb+0x5b7/0x710
[  666.025314][T25125]  ? __pfx___alloc_skb+0x10/0x10
[  666.025330][T25125]  netlink_alloc_large_skb+0x69/0x150
[  666.025343][T25125]  netlink_sendmsg+0x680/0xda0
[  666.025357][T25125]  ? __pfx_netlink_sendmsg+0x10/0x10
[  666.025370][T25125]  ? selinux_socket_sendmsg+0x198/0x2f0
[  666.025392][T25125]  ____sys_sendmsg+0xa4d/0xbe0
[  666.025407][T25125]  ? __pfx_netlink_sendmsg+0x10/0x10
[  666.025419][T25125]  ? __pfx_____sys_sendmsg+0x10/0x10
[  666.025439][T25125]  ? lock_acquire+0x1d1/0x380
[  666.025450][T25125]  ? get_pid_task+0x2a/0x250
[  666.025467][T25125]  ___sys_sendmsg+0x190/0x1e0
[  666.025485][T25125]  ? __pfx____sys_sendmsg+0x10/0x10
[  666.025501][T25125]  ? get_pid_task+0x106/0x250
[  666.025521][T25125]  ? find_held_lock+0x2b/0x80
[  666.025545][T25125]  __sys_sendmsg+0x160/0x210
[  666.025559][T25125]  ? __pfx___sys_sendmsg+0x10/0x10
[  666.025579][T25125]  do_syscall_64+0x123/0x790
[  666.025595][T25125]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  666.025612][T25125] RIP: 0033:0x7f3dfc99e159
[  666.025622][T25125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  666.025633][T25125] RSP: 002b:00007f3dfd8f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  666.025644][T25125] RAX: ffffffffffffffda RBX: 00007f3dfcc25fa0 RCX: 00007f3dfc99e159
[  666.025651][T25125] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004
[  666.025658][T25125] RBP: 00007f3dfd8f2090 R08: 0000000000000000 R09: 0000000000000000
[  666.025665][T25125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  666.025672][T25125] R13: 00007f3dfcc26038 R14: 00007f3dfcc25fa0 R15: 00007ffed5423d98
[  666.025686][T25125]  </TASK>
[  666.072129][T17601] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  666.073204][T17601] usb 11-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  666.073243][T17601] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  666.077267][T17601] usb 11-1: config 0 descriptor??
[  666.081190][T17601] usbhid 11-1:0.0: couldn't find an input interrupt endpoint
[  666.289085][T17601] usb 11-1: USB disconnect, device number 2
[  666.665261][T25141] __nla_validate_parse: 3 callbacks suppressed
[  666.665279][T25141] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7283'.
[  666.665294][T25141] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7283'.
[  666.730422][ T6052] usb 11-1: new high-speed USB device number 3 using dummy_hcd
[  666.910447][ T6052] usb 11-1: Using ep0 maxpacket: 8
[  666.915072][ T6052] usb 11-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  666.926174][ T6052] usb 11-1: config 0 has an invalid interface number: 52 but max is 0
[  666.926198][ T6052] usb 11-1: config 0 has no interface number 0
[  666.926230][ T6052] usb 11-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  666.926257][ T6052] usb 11-1: config 0 interface 52 has no altsetting 0
[  666.926288][ T6052] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  666.935862][ T6052] usb 11-1: config 0 descriptor??
[  667.155126][ T6052] usbhid 11-1:0.52: couldn't find an input interrupt endpoint
[  667.355318][ T6052] usb 11-1: USB disconnect, device number 3
[  667.440125][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  667.441329][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  667.614559][T25183] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7300'.
[  667.614631][T25183] netlink: 3 bytes leftover after parsing attributes in process `syz.5.7300'.
[  667.925187][T25202] jffs2: notice: (25202) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 1 orphan) found.
[  668.049157][T25208] FAULT_INJECTION: forcing a failure.
[  668.049157][T25208] name failslab, interval 1, probability 0, space 0, times 0
[  668.049189][T25208] CPU: 3 UID: 0 PID: 25208 Comm: syz.5.7309 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  668.049214][T25208] Tainted: [L]=SOFTLOCKUP
[  668.049221][T25208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  668.049232][T25208] Call Trace:
[  668.049237][T25208]  <TASK>
[  668.049244][T25208]  dump_stack_lvl+0x100/0x190
[  668.049288][T25208]  should_fail_ex.cold+0x5/0xa
[  668.049314][T25208]  should_failslab+0xc2/0x120
[  668.049358][T25208]  __kmalloc_cache_noprof+0x91/0x6d0
[  668.049387][T25208]  ? snd_midi_event_new+0x6f/0x210
[  668.049413][T25208]  snd_midi_event_new+0x6f/0x210
[  668.049434][T25208]  snd_virmidi_output_open+0x106/0x670
[  668.049459][T25208]  open_substream+0x480/0x970
[  668.049488][T25208]  rawmidi_open_priv+0x595/0x6f0
[  668.049520][T25208]  snd_rawmidi_open+0x4b4/0xb90
[  668.049547][T25208]  ? __pfx_snd_rawmidi_open+0x10/0x10
[  668.049572][T25208]  ? __pfx_default_wake_function+0x10/0x10
[  668.049594][T25208]  ? lock_acquire+0x1d1/0x380
[  668.049611][T25208]  ? kobject_get_unless_zero+0x156/0x200
[  668.049642][T25208]  ? __pfx_snd_rawmidi_open+0x10/0x10
[  668.049665][T25208]  snd_open+0x201/0x450
[  668.049685][T25208]  ? __pfx_snd_open+0x10/0x10
[  668.049709][T25208]  chrdev_open+0x234/0x6a0
[  668.049734][T25208]  ? __pfx_chrdev_open+0x10/0x10
[  668.049758][T25208]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  668.049787][T25208]  do_dentry_open+0x6ab/0x14d0
[  668.049805][T25208]  ? __pfx_chrdev_open+0x10/0x10
[  668.049835][T25208]  vfs_open+0x82/0x3f0
[  668.049862][T25208]  path_openat+0x19fa/0x2440
[  668.049888][T25208]  ? __pfx_path_openat+0x10/0x10
[  668.049918][T25208]  do_file_open+0x20e/0x430
[  668.049943][T25208]  ? __pfx_do_file_open+0x10/0x10
[  668.049980][T25208]  ? _raw_spin_unlock+0x28/0x50
[  668.050000][T25208]  ? alloc_fd+0x471/0x7a0
[  668.050030][T25208]  do_sys_openat2+0x10f/0x1e0
[  668.050055][T25208]  ? _
** replaying previous printk message **
[  668.050055][T25208]  ? __pfx_do_sys_openat2+0x10/0x10
[  668.050092][T25208]  __x64_sys_openat+0x12d/0x210
[  668.050119][T25208]  ? __pfx___x64_sys_openat+0x10/0x10
[  668.050155][T25208]  do_syscall_64+0x123/0x790
[  668.050183][T25208]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  668.050203][T25208] RIP: 0033:0x7f3dfc95e98e
[  668.050221][T25208] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  668.050242][T25208] RSP: 002b:00007f3dfd8f1b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  668.050272][T25208] RAX: ffffffffffffffda RBX: 00007f3dfd8f26c0 RCX: 00007f3dfc95e98e
[  668.050287][T25208] RDX: 0000000000143102 RSI: 00007f3dfd8f1c00 RDI: ffffffffffffff9c
[  668.050301][T25208] RBP: 00007f3dfd8f1c00 R08: 0000000000000000 R09: 0000000000000000
[  668.050314][T25208] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  668.050328][T25208] R13: 00007f3dfcc26038 R14: 00007f3dfcc25fa0 R15: 00007ffed5423d98
[  668.050357][T25208]  </TASK>
[  668.119579][   T10] skbuff: __skb_pull(len=234)
[  668.119595][   T10] skb len=2760 data_len=2760 headroom=0 headlen=0 tailroom=0
[  668.119595][   T10] end-tail=384 mac=(234,14) mac_len=14 net=(248,40) trans=288
[  668.119595][   T10] shinfo(txflags=0 nr_frags=1 gso(size=1428 type=16 segs=2))
[  668.119595][   T10] csum(0x100120 start=288 offset=16 ip_summed=3 complete_sw=0 valid=1 level=0)
[  668.119595][   T10] hash(0xab022ac8 sw=0 l4=1) proto=0x86dd pkttype=0 iif=27
[  668.119595][   T10] priority=0x0 mark=0x0 alloc_cpu=0 vlan_all=0x0
[  668.119595][   T10] encapsulation=0 inner(proto=0x0000, mac=0, net=0, trans=0)
[  668.119675][   T10] skb frag:     00000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.119688][   T10] skb frag:     00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.119701][   T10] skb frag:     00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.119714][   T10] skb frag:     00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.119727][   T10] skb frag:     00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.119739][   T10] skb frag:     00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.119752][   T10] skb frag:     00000060: 2e 2f 66 69 6c 65 30 00 00 00 00 00 00 00 00 00
[  668.119765][   T10] skb frag:     00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.119777][   T10] skb frag:     00000080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.119790][   T10] skb frag:     00000090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.119802][   T10] skb frag:     000000a0: 6a 66 66 73 32 00 00 00 00 00 00 00 00 00 00 00
[  668.119815][   T10] skb frag:     000000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.119827][   T10] skb frag:     000000c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.119839][   T10] skb frag:     000000d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.119851][   T10] skb frag:     000000e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.119864][   T10] skb frag:     000000f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.119876][   T10] skb frag:     00000100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.119889][   T10] skb frag:     00000110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.119902][   T10] skb frag:     00000120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.120753][   T10] ------------[ cut here ]------------
[  668.120763][   T10] kernel BUG at ./include/linux/skbuff.h:2847!
[  668.120785][   T10] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
[  668.253390][   T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  668.259482][   T10] Tainted: [L]=SOFTLOCKUP
[  668.261253][   T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  668.265271][   T10] Workqueue: events net_dm_packet_work
[  668.267469][   T10] RIP: 0010:skb_pull.cold+0x29/0x2b
[  668.269638][   T10] Code: 0b e8 8b b2 9c 00 44 89 65 70 89 de 48 c7 c7 20 cd 38 8d e8 d9 e5 b2 ff 31 d2 48 89 ee 48 c7 c7 60 cd 38 8d e8 08 3e 26 08 90 <0f> 0b e8 60 b2 9c 00 4c 89 e2 be 01 00 00 00 48 c7 c7 e0 f7 ca 90
[  668.277957][   T10] RSP: 0018:ffffc900000d79f0 EFLAGS: 00010286
[  668.280417][   T10] RAX: 0000000000000000 RBX: 00000000000000ea RCX: 0000000000000000
[  668.281532][ T1042] skbuff: __skb_pull(len=234)
[  668.281546][ T1042] skb len=2856 data_len=2856 headroom=0 headlen=0 tailroom=0
[  668.281546][ T1042] end-tail=384 mac=(234,14) mac_len=14 net=(248,40) trans=288
[  668.281546][ T1042] shinfo(txflags=0 nr_frags=1 gso(size=1428 type=16 segs=2))
[  668.281546][ T1042] csum(0x100120 start=288 offset=16 ip_summed=3 complete_sw=0 valid=1 level=0)
[  668.281546][ T1042] hash(0xab022ac8 sw=0 l4=1) proto=0x86dd pkttype=0 iif=27
[  668.281546][ T1042] priority=0x0 mark=0x0 alloc_cpu=0 vlan_all=0x0
[  668.281546][ T1042] encapsulation=0 inner(proto=0x0000, mac=0, net=0, trans=0)
[  668.281620][ T1042] skb frag:     00000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.281632][ T1042] skb frag:     00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.281644][ T1042] skb frag:     00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.281657][ T1042] skb frag:     00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.281669][ T1042] skb frag:     00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.281685][ T1042] skb frag:     00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.281697][ T1042] skb frag:     00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.281710][ T1042] skb frag:     00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.281722][ T1042] skb frag:     00000080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.281734][ T1042] skb frag:     00000090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.281747][ T1042] skb frag:     000000a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.281759][ T1042] skb frag:     000000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.281771][ T1042] skb frag:     000000c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.281784][ T1042] skb frag:     000000d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.281796][ T1042] skb frag:     000000e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.281808][ T1042] skb frag:     000000f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.281821][ T1042] skb frag:     00000100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.281833][ T1042] skb frag:     00000110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.281846][ T1042] skb frag:     00000120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  668.282515][ T1042] ------------[ cut here ]------------
[  668.282524][ T1042] kernel BUG at ./include/linux/skbuff.h:2847!
[  668.375440][   T10] RDX: ffff88801eeda580 RSI: ffffffff816f5fbe RDI: ffff88801eeda580
[  668.378611][   T10] RBP: ffff888038a7e640 R08: 0000000000000001 R09: 0000000000000000
[  668.381790][   T10] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000ac8
[  668.384982][   T10] R13: 00000000000009de R14: 0000000000000ac8 R15: ffff888038a7e640
[  668.388320][   T10] FS:  0000000000000000(0000) GS:ffff8880d5b5c000(0000) knlGS:0000000000000000
[  668.391893][   T10] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  668.394658][   T10] CR2: 00007f3dfcbed158 CR3: 000000002c5c9000 CR4: 0000000000352ef0
[  668.397969][   T10] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002
[  668.401315][   T10] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  668.404663][   T10] Call Trace:
[  668.406102][   T10]  <TASK>
[  668.407370][   T10]  net_dm_packet_work+0xafd/0x1290
[  668.409569][   T10]  ? register_lock_class+0x3f/0x7b0
[  668.411772][   T10]  ? __pfx_net_dm_packet_work+0x10/0x10
[  668.414087][   T10]  ? __lock_acquire+0x5c0/0x1f40
[  668.416161][   T10]  ? lock_acquire+0x1d1/0x380
[  668.417660][   T10]  ? process_one_work+0xa2c/0x1b10
[  668.419303][   T10]  ? process_one_work+0x906/0x1b10
[  668.421361][   T10]  ? process_one_work+0x906/0x1b10
[  668.423570][   T10]  ? process_one_work+0xac7/0x1b10
[  668.425781][   T10]  process_one_work+0xac7/0x1b10
[  668.427806][   T10]  ? __pfx_process_one_work+0x10/0x10
[  668.429475][   T10]  ? lock_acquire+0x1d1/0x380
[  668.431245][   T10]  ? __pfx_net_dm_packet_work+0x10/0x10
[  668.433506][   T10]  worker_thread+0x5ef/0xe50
[  668.435376][   T10]  ? kthread+0x13a/0x450
[  668.437009][   T10]  ? __pfx_worker_thread+0x10/0x10
[  668.438981][   T10]  kthread+0x373/0x450
[  668.440688][   T10]  ? __pfx_kthread+0x10/0x10
[  668.442797][   T10]  ret_from_fork+0x730/0xd60
[  668.444636][   T10]  ? __pfx_ret_from_fork+0x10/0x10
[  668.446812][   T10]  ? __switch_to+0x800/0x10f0
[  668.448620][   T10]  ? __pfx_kthread+0x10/0x10
[  668.450140][   T10]  ret_from_fork_asm+0x1a/0x30
[  668.451702][   T10]  </TASK>
[  668.452775][   T10] Modules linked in:
[  668.454109][ T1042] Oops: invalid opcode: 0000 [#2] SMP KASAN NOPTI
[  668.456396][ T1042] CPU: 3 UID: 0 PID: 1042 Comm: kworker/3:3 Tainted: G      D      L      syzkaller #0 PREEMPT(full) 
[  668.456836][   T10] ---[ end trace 0000000000000000 ]---
[  668.463758][ T1042] Tainted: [D]=DIE, [L]=SOFTLOCKUP
[  668.465981][ T1042] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  668.472137][ T1042] Workqueue: events net_dm_packet_work
[  668.475353][ T1042] RIP: 0010:skb_pull.cold+0x29/0x2b
[  668.477640][ T1042] Code: 0b e8 8b b2 9c 00 44 89 65 70 89 de 48 c7 c7 20 cd 38 8d e8 d9 e5 b2 ff 31 d2 48 89 ee 48 c7 c7 60 cd 38 8d e8 08 3e 26 08 90 <0f> 0b e8 60 b2 9c 00 4c 89 e2 be 01 00 00 00 48 c7 c7 e0 f7 ca 90
[  668.485634][ T1042] RSP: 0018:ffffc9000566f9f0 EFLAGS: 00010286
[  668.488169][ T1042] RAX: 0000000000000000 RBX: 00000000000000ea RCX: 0000000000000000
[  668.491527][ T1042] RDX: ffff888026412580 RSI: ffffffff816f5fbe RDI: ffff888026412580
[  668.494753][ T1042] RBP: ffff88802c072b40 R08: 0000000000000001 R09: 0000000000000000
[  668.497941][ T1042] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000b28
[  668.501326][ T1042] R13: 0000000000000a3e R14: 0000000000000b28 R15: ffff88802c072b40
[  668.504713][ T1042] FS:  0000000000000000(0000) GS:ffff8880d5e5c000(0000) knlGS:0000000000000000
[  668.508583][ T1042] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  668.511633][ T1042] CR2: 0000200001000000 CR3: 000000000eb96000 CR4: 0000000000352ef0
[  668.515190][ T1042] Call Trace:
[  668.516680][ T1042]  <TASK>
[  668.517991][ T1042]  net_dm_packet_work+0xafd/0x1290
[  668.520236][ T1042]  ? do_raw_spin_unlock+0x145/0x1e0
[  668.522661][ T1042]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  668.525303][ T1042]  ? __pfx_net_dm_packet_work+0x10/0x10
[  668.527734][ T1042]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  668.529849][ T1042]  ? debug_object_deactivate+0x2e4/0x3b0
[  668.532343][ T1042]  ? rcu_is_watching+0x13/0xc0
[  668.534333][ T1042]  ? debug_object_deactivate+0x2e4/0x3b0
[  668.536814][ T1042]  ? lock_release+0x24d/0x310
[  668.538861][ T1042]  ? __pfx_debug_object_deactivate+0x10/0x10
[  668.541321][ T1042]  ? rcu_is_watching+0x13/0xc0
[  668.543427][ T1042]  ? lock_acquire+0x31e/0x380
[  668.545445][ T1042]  ? process_one_work+0x906/0x1b10
[  668.547696][ T1042]  ? rcu_is_watching+0x13/0xc0
[  668.549982][ T1042]  ? process_one_work+0x906/0x1b10
[  668.552194][ T1042]  ? process_one_work+0xac7/0x1b10
[  668.555018][ T1042]  process_one_work+0xac7/0x1b10
[  668.557492][ T1042]  ? __pfx_process_one_work+0x10/0x10
[  668.560035][ T1042]  ? kthread_data+0x53/0xc0
[  668.561666][ T1042]  ? __pfx_net_dm_packet_work+0x10/0x10
[  668.563503][ T1042]  worker_thread+0x5ef/0xe50
[  668.565081][ T1042]  ? __pfx_worker_thread+0x10/0x10
[  668.566838][ T1042]  ? kthread+0x13a/0x450
[  668.568266][ T1042]  ? __pfx_worker_thread+0x10/0x10
[  668.569946][ T1042]  kthread+0x373/0x450
[  668.571341][ T1042]  ? __pfx_kthread+0x10/0x10
[  668.572893][ T1042]  ret_from_fork+0x730/0xd60
[  668.574431][ T1042]  ? __pfx_ret_from_fork+0x10/0x10
[  668.576122][ T1042]  ? __switch_to+0x800/0x10f0
[  668.577834][ T1042]  ? __pfx_kthread+0x10/0x10
[  668.579826][ T1042]  ret_from_fork_asm+0x1a/0x30
[  668.581829][ T1042]  </TASK>
[  668.583162][ T1042] Modules linked in:
[  668.585449][ T1042] ---[ end trace 0000000000000000 ]---
[  668.590789][ T1042] RIP: 0010:skb_pull.cold+0x29/0x2b
[  668.590822][ T1042] Code: 0b e8 8b b2 9c 00 44 89 65 70 89 de 48 c7 c7 20 cd 38 8d e8 d9 e5 b2 ff 31 d2 48 89 ee 48 c7 c7 60 cd 38 8d e8 08 3e 26 08 90 <0f> 0b e8 60 b2 9c 00 4c 89 e2 be 01 00 00 00 48 c7 c7 e0 f7 ca 90
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  668.590838][ T1042] RSP: 0018:ffffc900000d79f0 EFLAGS: 00010286
[  668.590848][ T1042] RAX: 0000000000000000 RBX: 00000000000000ea RCX: 0000000000000000
[  668.590856][ T1042] RDX: ffff88801eeda580 RSI: ffffffff816f5fbe RDI: ffff88801eeda580
[  668.590864][ T1042] RBP: ffff888038a7e640 R08: 0000000000000001 R09: 0000000000000000
[  668.590872][ T1042] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000ac8
[  668.590879][ T1042] R13: 00000000000009de R14: 0000000000000ac8 R15: ffff888038a7e640
[  668.590887][ T1042] FS:  0000000000000000(0000) GS:ffff8880d5e5c000(0000) knlGS:0000000000000000
[  668.590913][ T1042] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  668.590923][ T1042] CR2: 0000200001000000 CR3: 000000000eb96000 CR4: 0000000000352ef0
[  668.590933][ T1042] Kernel panic - not syncing: Fatal exception
[  669.769332][ T1042] Shutting down cpus with NMI
[  669.772047][ T1042] Kernel Offset: disabled
[  669.773845][ T1042] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:48:40  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85b08405 RDI=ffffffff9bc68ca0 RBP=ffffffff9bc68c60 RSP=ffffc900000d7198
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6b726f776b203a43
R12=0000000000000000 R13=0000000000000035 R14=0000000000000008 R15=ffffc900000d74b0
RIP=ffffffff85b0842f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5b5c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f3dfcbed158 CR3=000000002c5c9000 CR4=00352ef0
DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000080202040 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 676e697a65657266 5f666c65732e7265
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed5424286
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed5424286 00007ffed542428c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3dfca3561e
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3dfca3565e
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3dfca357c2
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3dfca35650
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00656b616873646e 6148006c61697469 6e4900656c676e61 6d006574756f7262
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 0000000000000020
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000003 RCX=ffffffff81ff5693 RDX=0000000000000001
RSI=ffffffff81ff566e RDI=ffff88802346a580 RBP=ffff88806a743ca0 RSP=ffffc90003a77548
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=ffffed100468d763 R13=0000000000000003 R14=ffffed100d4e8795 R15=0000000000000001
RIP=ffffffff820c1620 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5c5c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000001b34121ff8 CR3=00000000229e4000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000100001 Opmask01=000000000000001f Opmask02=00000000ffff7fdf Opmask03=0000000000040000
Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f68637461772f76 6564752f6e75722f
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f42da11e80
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f42da0bf30
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7495f1b20
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326875ed37483 73732682014d2d59
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4851af6c56469257 737373762c31a978
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 772f766564752f6e 75722f00646c6f2e 68637461772f7665 64752f6e75722f00
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 520a534041500a4b 50570a0041494a0b 4d465144520a5340 41500a4b50570a00
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3b22dc1f2535e124 000055f172e29834 0000000000000021 0000000000000036
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7766736c6d612c38 2c312c30722c4339 312c3739312c3938 312c3838312c3538
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c3937312c3136 312c3131312c3031 312c32452c34442c 30442c45412c3841
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c34412c42382c30 382c33372c32372c 31376b2c34312c32 2c312c30652d3033
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4442654344464670 3243353176333030 30623a7475706e69 3d5341494c41444f
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 512c3800612c312c 00302c3231312c31 31312c3031000000 32303732323d4d4e
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 37003000392c302c 002c2c302c2c0031 30302c3000000000 32303700323d4d45
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=ffff888065ffcb00
RSI=ffffffff81ff566e RDI=ffff888065ffcb00 RBP=ffff88806a443c80 RSP=ffffc90006c478a0
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffffffff81d743a9
R12=ffffed100cbffc13 R13=0000000000000003 R14=ffffed100d488791 R15=0000000000000001
RIP=ffffffff81ff5674 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5d5c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f5f67176708 CR3=0000000029c08000 CR4=00352ef0
DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbeb35d560
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff6dc7e6c6
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff6dc7e6c6 00007fff6dc7e6cc
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbea63561e
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbea63565e
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbea6357c2
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbea635650
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbea7f2600 00007fdbea7f25e0 00007fdbea7f25e8 00007fdbea7f2618
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000b000c0008
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbea7f25f8 00007fdbea7f25c8 00007fdbea7f2600 00007fdbea7f25e0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000001 RDX=ffff88801f280000
RSI=ffffffff81ea4a67 RDI=ffff88801f280000 RBP=ffffc90000137da8 RSP=ffffc90000137a48
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=303178302f303120
R12=0000000000000000 R13=1ffff92000026f53 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81ea4a69 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5e5c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000200001000000 CR3=0000000022a52000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000010001 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff64046ea6
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff64046ea6 00007fff64046eac
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2cb1c3561e
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2cb1c3565e
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2cb1c357c2
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2cb1c35650
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2cb1df25f8 00007f2cb1df25c8 00007f2cb1df2600 00007f2cb1df25e0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000170
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000