last executing test programs:

5.268837223s ago: executing program 2 (id=1063):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
socket(0x2b, 0x3, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53})
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x1)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
write$uinput_user_dev(r3, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x3, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x5, 0xfffffffe, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x4e, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x9, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10001, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x1, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x9, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xe, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
unshare(0x22020600)
move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x24020000)
read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/117, 0x75)
syz_emit_ethernet(0x7a, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff0000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, 0x0, 0x40088c0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f00000000c0)=@x86={0x7, 0x6, 0xa, 0x0, 0x7, 0x8, 0x3, 0x7, 0x5, 0xfc, 0x8, 0x6, 0x0, 0x9, 0x20000000, 0xe, 0x40, 0x9, 0x6, '\x00', 0x2, 0x8})
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x70, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x5000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4806}, 0x0)

4.817580143s ago: executing program 2 (id=1066):
r0 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000001000/0x3000)=nil, 0xc000)
msync(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x4)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r2, &(0x7f0000000000)='3', 0x4e)
mount(0x0, 0x0, 0x0, 0x2100000, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000)
ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000040)="e6ff181a57fd2aad9002a10851ef26e959dc136372f3d10d3a584ab3c62d945853e5459b0651e9df71628924de28213a0cd26a59eb110bcc75e16e8b76921c8563d763e25344a7d0e61070afd7303bca9746753252e7425dfb17ad1c4997870ecac7a29a9d368e5d8bec1c52e7b69a6b12d989", 0x73}, {&(0x7f0000000140)="271410ac97e51c618739ba7f45cbc1f102d16860182bf113bfe6e74080ef399da82a5c4636dd9e22fcff84eac8180118eacda5fe097e32173f32634e16e9b2f8d2072ef7a95dd9ae7f437f21ebc15be344eabd54401aac1b1b", 0x59}, {&(0x7f00000001c0)="919054ddc0607d83b0cdaf2d5c42eab2c386be2fd72906ca430cacb74c46778834ca0b173dc9b35c8bc840961d83f47d8b78dda073378cdef13c63c588b3f500120d98112f8a4d215d89cf0e82fda5cd9e20beec228cd7ed92", 0x59}, {&(0x7f0000000240)="698933a58d11e2049dc0c39906d631b53c62377fa0519f7cff0e89c2818d25258189424bd07c8ca1bff33697a1be3ad0e6000f8f03fd691799c7421eea481dc2cba64c5cbdacb999d44d65094c9fe793e36c087d59e38e24a43e852ef9bcb293c1ddfb07da", 0x65}, {&(0x7f00000002c0)="43284c4b7d897336877bb2442a5d489a4e9aee735870bde3ab62511378e1bbba31e7d742e9e8f6fa21d5c02b", 0x2c}, {&(0x7f0000000340)="47518ec2fc48409832b3c5630a87782d91ded76f798e387a5281d7c11611cd20c758b91559a4e3e2bd52eb94ce4d6e4898be300d8a8d24742d7b48a48d5a7a445f7daf0ffcfa0f66208007bcb00841a7b1177074ad3f9998f90f2501f01a9793f159bd3e7d2dfd526d13bff9dcc2127b229af6a0cfc544bfec884e2cd43f70769c35f5de838ee78a67ed18afe2", 0x8d}], 0x6, &(0x7f0000000440)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x3}}], 0x20}, 0x40000)
r5 = openat$nvram(0xffffff9c, &(0x7f00000000c0), 0x4400, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000004c0), &(0x7f0000000500)=0x4)

4.579431311s ago: executing program 2 (id=1067):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="2b6bf00000003801000038010000000000000000000000000000ffff00000000")
openat(0xffffffffffffff9c, &(0x7f0000000400)='./dummy\x00', 0x42, 0x1ff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x400000000001, 0x0)
setpriority(0x0, 0x0, 0x200002a14b56)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000080)={0x0, 0x80001, 0x80000004})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000001c0)={<r2=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000000c0)={r2, 0x1, r1, 0x3, 0x80000})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000280)={r2, 0x5, 0x4000003})

3.648366255s ago: executing program 2 (id=1070):
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040991100b00000000000010902200001010080320904000002000000000705810200020007050202"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/gnss0\x00', 0x40800, 0x0)
close(0x4)

3.277993389s ago: executing program 0 (id=1073):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
socket(0x2b, 0x3, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12)
ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1)
ioctl$UI_DEV_CREATE(r2, 0x5501)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x3, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x5, 0xfffffffe, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x4e, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x9, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10001, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x1, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x9, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xe, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
unshare(0x22020600)
move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
read$hiddev(r2, &(0x7f0000000040)=""/117, 0x75)
syz_emit_ethernet(0x7a, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff0000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, 0x0, 0x40088c0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)=@x86={0x7, 0x6, 0xa, 0x0, 0x7, 0x8, 0x3, 0x7, 0x5, 0xfc, 0x8, 0x6, 0x0, 0x9, 0x20000000, 0xe, 0x40, 0x9, 0x6, '\x00', 0x2, 0x8})
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x70, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x5000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4806}, 0x0)

3.028434924s ago: executing program 1 (id=1074):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x8000)

2.649131527s ago: executing program 3 (id=1075):
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
timer_settime(0x0, 0x0, &(0x7f0000000040)={{r0, r1+60000000}, {0x0, 0x3938700}}, &(0x7f0000000080))
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={<r4=>0x0, 0x3}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={r4, @in={{0x2, 0x4e23, @local}}, 0x2, 0xe, 0x9, 0x1, 0x24, 0x4, 0x3}, 0x9c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, &(0x7f0000000200))
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40010480}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r6, 0x504, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x48000)
r7 = openat$null(0xffffff9c, &(0x7f0000000380), 0x4000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r5)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r8, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x800}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r5)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000580)={'vxcan1\x00', <r10=>0x0})
getsockname$packet(r7, &(0x7f00000005c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000640)={'team0\x00', <r12=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000680)={'vxcan1\x00', <r13=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', <r14=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000700)={'vxcan0\x00', <r15=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl0\x00', <r16=>0x0, 0x29, 0x9, 0x5, 0x5, 0x8, @local, @private1, 0x8000, 0x2d055ac0cd51b9, 0x89e6, 0x4}})
getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000800)={<r17=>0x0, @private}, &(0x7f0000000840)=0xc)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000900)={'gre0\x00', &(0x7f0000000880)={'syztnl0\x00', <r18=>0x0, 0x10, 0x1, 0x1, 0x8000, {{0xa, 0x4, 0x0, 0x7, 0x28, 0x66, 0x0, 0xf, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x14, 0x4c, 0x1, 0xf, [{@remote, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}]}}}}})
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000940)={<r19=>0x0, @rand_addr, @dev}, &(0x7f0000000980)=0xc)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000a40)={'sit0\x00', &(0x7f00000009c0)={'syztnl0\x00', <r20=>0x0, 0x8000, 0x700, 0xe62, 0xf4a3, {{0x14, 0x4, 0x3, 0x4, 0x50, 0x68, 0x0, 0x8, 0x29, 0x0, @loopback, @local, {[@end, @end, @lsrr={0x83, 0x17, 0x9e, [@dev={0xac, 0x14, 0x14, 0x2f}, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x14}]}, @timestamp={0x44, 0x20, 0xb6, 0x0, 0x4, [0x5, 0x1, 0x8, 0x1, 0x0, 0x1, 0x1]}, @noop, @noop]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000b00)={'syztnl0\x00', &(0x7f0000000a80)={'syztnl1\x00', <r21=>0x0, 0x4, 0x6, 0xf7, 0xa43, 0x26, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x80, 0x8, 0x1, 0x4}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b40)={'syztnl0\x00', <r22=>0x0, 0x2f, 0x6, 0xa, 0x9, 0x21, @local, @remote, 0x7800, 0x1, 0x66, 0x10001}})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r7, &(0x7f0000000e40)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c00)={0x200, r9, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x24044080}, 0x0)
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000003500)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0xe0}, 0x0, 0x0, 0x401, 0xfb6, 0x2, 0x8, 0x2, 0x6, 0x3ff, 0x3})

2.568482256s ago: executing program 1 (id=1076):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010002000000fcdbdf25310003000c000180080001"], 0x20}}, 0x4000000)

2.568072406s ago: executing program 0 (id=1077):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
openat$tun(0xffffffffffffff9c, 0x0, 0xa000, 0x0)
getpgid(0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00')
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x840000000002, 0x3, 0x100)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
read(r0, &(0x7f0000000040)=""/148, 0xffffff96)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
recvmmsg(0xffffffffffffffff, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x100, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
keyctl$dh_compute(0x17, &(0x7f00000003c0), &(0x7f0000000680)=""/133, 0x85, &(0x7f0000000640)={&(0x7f0000000540)={'sha512-neon\x00'}, &(0x7f0000000580)="17e0fbfa1cd0113367a30dc17913a6baa401add72c6476e9fa079fa52bb65d180f077f7eecdccb4727dfd20578aad9f306ea71b3203a9a691bdeda9149024ca4af6da29f18ecaa1bd99639a25f914583293891bc8d4bf383942854f25d1bc952a06f575f45eaf843984940ff20d3b0987a16ff81d16e3bc94f032333aba00aaf99537847d31af9ffc897acb0ef39426e19370a8c5cc7ba157bbcf744ccf78f5ecdb254c5a3c4ab1d", 0xa8})
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0xa}, 0xffffffffffffffff, 0x6}}, 0x48)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r2)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x4000)

2.567915731s ago: executing program 1 (id=1078):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0x9, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0)
r1 = getpgid(0xffffffffffffffff)
prlimit64(r1, 0xe, &(0x7f0000000380)={0x1ff, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
listen(0xffffffffffffffff, 0x5)
r3 = msgget$private(0x0, 0x193)
msgsnd(r3, &(0x7f0000000240)=ANY=[@ANYRES16], 0x8, 0x0)
msgsnd(r3, &(0x7f0000000d40)=ANY=[@ANYBLOB="03"], 0x3f9, 0x0)
msgrcv(r3, &(0x7f0000001240)={0x0, ""/147}, 0x9b, 0x3, 0x2000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff000000000000000000000000000000000000b6f22e1a14ac30f54264c2896c871e62f92b3d29f1cae884ff5c9ca2b76e0070f998943e6916b8f9334ef5f702aff741b34e7f1a5621278feb79a98cecf429eaa64621dea91d6f5b58e4e76590d3321b70528b47962f4499908e22a2b129ab0d144a593da10ae81455c9b61c509cb5247a6d5fc956aa0a25", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
ioperm(0x2, 0x6, 0x0)
close(r7)
openat$kvm(0xffffff9c, &(0x7f0000000080), 0x20000, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000092870000000000000000732738120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0)

2.56253155s ago: executing program 3 (id=1079):
socket(0x2b, 0x1, 0x1) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async)
socket$inet(0x2, 0x3, 0x9)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1a7) (async)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x104)
write(r1, &(0x7f0000000000)='3', 0x4e) (async, rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x10, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) (async, rerun: 32)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
recvmmsg(r2, &(0x7f0000002dc0)=[{{&(0x7f0000000040)=@x25={0x9, @remote}, 0x80, &(0x7f0000002640)=[{&(0x7f0000000180)=""/87, 0x57}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000001340)=""/11, 0xb}, {&(0x7f0000001380)=""/186, 0xba}, {&(0x7f0000001440)=""/4, 0x4}, {&(0x7f0000001480)=""/4094, 0xffe}, {&(0x7f0000002480)=""/141, 0x8d}, {&(0x7f0000002540)=""/254, 0xfe}], 0x8, &(0x7f0000002680)=""/201, 0xc9}, 0x7}, {{&(0x7f0000002780)=@pppol2tpin6, 0x80, &(0x7f0000002980)=[{&(0x7f0000002800)=""/58, 0x3a}, {&(0x7f0000002e40)=""/117, 0x75}, {&(0x7f0000002900)=""/118, 0x76}], 0x3, &(0x7f00000029c0)}, 0xd4c}, {{&(0x7f0000002a00)=@caif=@rfm, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002a80)=""/8, 0x8}, {&(0x7f0000002ac0)=""/176, 0xb0}], 0x2, &(0x7f0000002bc0)=""/83, 0x53}, 0x1ff}, {{&(0x7f0000002c40)=@tipc=@id, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002cc0)=""/53, 0x35}], 0x1, &(0x7f0000002d40)=""/77, 0x4d}, 0x8}], 0x4, 0x22, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0) (rerun: 64)
openat(0xffffffffffffffff, &(0x7f0000000140)='root/proc/sys\x00', 0x10000, 0x0) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r3, &(0x7f0000001380)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)="14", 0x1}], 0x1, &(0x7f0000000280)=[@init={0x14}], 0x14, 0x8001}], 0x1, 0x40) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0)
read(r4, 0x0, 0x0) (async, rerun: 32)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) (async, rerun: 32)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 32)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 32)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0, 0x1c1, 0x6}, 0x18) (async)
r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
write$binfmt_register(r5, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x46]}, 0x34)

2.364851255s ago: executing program 2 (id=1080):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x5)
fchdir(r1)
openat(r1, &(0x7f00000000c0)='.\x00', 0x0, 0x88)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
lseek(r2, 0x200, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
getsockopt$sock_buf(r3, 0x1, 0x1f, 0xffffffffffffffff, &(0x7f0000000040)=0x5a)

2.364086009s ago: executing program 0 (id=1081):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
openat$binderfs(0xffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x800, 0x0)
socket$inet(0x2, 0x2, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0x4000040)
pipe2(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/sysname\x00', 0x2, 0x0)
write(r4, &(0x7f0000000500)="84801dc070eb3d02050b03b7b765146d6bdd78cb2c2bb145f9cbdffe40737978", 0x20)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=<r5=>0x0)
syz_ublk_setup_queues(r1, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x10, 0x4, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x29b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x3e7}}], 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)

1.919123267s ago: executing program 2 (id=1082):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x100)
sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), r3)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dbdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4)
io_setup(0x80, &(0x7f0000000000))
io_setup(0x3ff, &(0x7f0000000500)=<r5=>0x0)
io_destroy(r5)
io_getevents(r5, 0x3, 0x0, 0x0, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000000020))
r7 = syz_open_pts(r6, 0x2)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xf)
ioctl(r7, 0x400455c8, 0x0)
write(r6, &(0x7f0000000100)="040e0401030c01040e0401031001", 0xe)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r8, 0x400448c9, &(0x7f0000000001))
ioctl$sock_bt_hci(r8, 0x400448ca, &(0x7f0000000001))
ioctl$sock_bt_hci(r8, 0x400448c9, 0x0)
ioctl$sock_bt_hci(r8, 0x400448ca, 0x0)
nanosleep(&(0x7f0000000200)={0x1}, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000009c0)='\x00', 0x1, 0x40000, &(0x7f0000000340)={0x11, 0x10, r4, 0x1, 0x2, 0x6, @remote}, 0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtaction={0xc4, 0x30, 0x1, 0x7ffffd, 0x0, {}, [{0xb0, 0x1, [@m_mirred={0xac, 0x3, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x7ff, 0x8, 0xc, 0x8}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000001, 0x3, 0x4, 0x9, 0x81}, 0x1, r4}}]}, {0x3d, 0x6, "7659bef25d65bc5c8fc85ff7733441970901b59fe62730db2bc3a6328b868a3c7fee5aaaed4c309fce13ee715cf95c157b8d43630cf7d03cf9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4004}, 0x4004010)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)

507.861077ms ago: executing program 3 (id=1083):
r0 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x20280, 0x0)
ioctl$CDROMCLOSETRAY(r0, 0x5319)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000040)={{<r1=>0x0, 0x6, 0x8, 0x5, 0x8, 0x7, 0x101, 0x4, 0x1000, 0xed5, 0x5, 0x7fffffffffffffff, 0x5, 0x8d22, 0x44d7}})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001040)={{r1, 0x800, 0x2, 0x8, 0x9, 0x7, 0x100, 0xba3, 0xfffffffe, 0x3, 0x2, 0x5, 0x9, 0xfde6, 0x6}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002040), r2)
r3 = syz_open_dev$video(&(0x7f0000002080), 0x9, 0x10000)
r4 = openat$full(0xffffff9c, &(0x7f00000020c0), 0x10400, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r4, 0x89ea, &(0x7f0000002100))
r5 = add_key$user(&(0x7f0000002140), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)="dc5ac3649d761aa6362099f355ea08464da44c69b2e1e6c3e1c5f5c0adcc874b4cc89c01bd32fa1108bcddca1c7e8d09187e5c66c163c3b54d1b8279acdd1ba69e342b7ec685407bc785c9ff0810839cb5ed3322e8750e32f4efde7423f7fdc0dfbc8601d43089686618d18a0f0c7a735e24e3098381e30fca879a5c1e022e647b37f0d465231af1185f3a9c1b8c741977", 0x91, 0xfffffffffffffffd)
r6 = add_key$user(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x3}, &(0x7f0000002300)="383425227033029898fa89961ab2fa0ef6d9ad8f1d61287f9b53e0263548d6f8289128f535a25079ef7f653fbdf615acd8fa26b1bb966985a3885b0eb8e618e51fa91890dd2d17456161c43e768703d87f72a022", 0x54, 0xffffffffffffffff)
r7 = add_key(&(0x7f0000002380)='syzkaller\x00', &(0x7f00000023c0)={'syz', 0x2}, &(0x7f0000002400)="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", 0x1000, 0xfffffffffffffffb)
keyctl$dh_compute(0x17, &(0x7f0000003400)={r5, r6, r7}, &(0x7f0000003440)=""/45, 0x2d, &(0x7f0000003540)={&(0x7f0000003480)={'cbcmac-aes-neon\x00'}, &(0x7f00000034c0)="ad16bd1f6eb87c1bbaade8663629210c01198410417bdf0a2b0e9c83f91ea79bd0aba8af958d49489ca7709e415309d9a241112d14d8995e81eeb2da3032254542fb4c95d191084a0a5ccb4ce2bcd9d6f83a441949a118adda960d5ddfd2db87b47d51662490feb5482da08a6321e8fdb8c8", 0x72})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000003640)={'sit0\x00', &(0x7f0000003580)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x80, 0x0, [{@loopback}, {@loopback}, {@initdev}, {@multicast2}, {}, {@remote}, {@private}, {@initdev}]}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003700)={r4, 0x58, &(0x7f0000003680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003740)={0x0, 0x8, 0x81, 0x0, @vifc_lcl_ifindex=r8, @remote}, 0x10)
write(r0, &(0x7f0000003780)="b67d621b69fda11ca8f7a2a763099eb637c7ce539c7ca6", 0x17)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003840)={r4, 0x58, &(0x7f00000037c0)={0x0, <r9=>0x0}}, 0x10)
r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003880)={r9, 0x1, 0x10}, 0xc)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003940)={r4, 0x58, &(0x7f00000038c0)}, 0x10)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(r4, 0xc0207511, &(0x7f0000003980)={0x0, 0xffff, 0x0, 0x0, <r11=>0xffffffffffffffff})
prctl$PR_SCHED_CORE(0x3e, 0x0, r11, 0x2, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000003a00)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000003b00)=0xe4)
quotactl_fd$Q_GETQUOTA(r10, 0xffffffff80000702, r12, &(0x7f0000003b40))
ptrace$ARCH_SET_GS(0x1e, r11, &(0x7f0000003bc0), 0x1001)
r13 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r14 = syz_open_dev$dri(&(0x7f0000003c00), 0xa3, 0x200000)
chdir(&(0x7f0000003c40)='./file0\x00')
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007740)=[{{&(0x7f0000003cc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004f40)=[{&(0x7f0000003d40)}, {&(0x7f0000003d80)="90c33c577bca103397fbd8d2f7607dd62c7d0e1f7338c7c9c260e3109b93f807eb1afb55d0abfa9089f9f18f0f52bc1639562c4bebba34acc3cf9f99f7f630b9d14b9f6fc1e81ff22c7d4a34d1583b6a36f4034b5d27b2ae89d406ca28967ee127717739c458f5b3786f4619cfa111da77333279d1232161e0a9e1fbb24cfba3bed39f23f8923ceb747cab0f3e5daab39ff493a60ec839581bea8c0b7d5d4306184e947c507206fa5e356321d64ff38d1688d192eed7bd81361c0b4f33f44fa488bc0c07852fc7c89f4bef53386134ec3d4a0e77b7f0767379e8", 0xda}, {&(0x7f0000003e80)="18ab8cc0cd02daa8ecb3bab569a8a084462fa4c1e16d1a3f79b928efbfce208078ae095d6851d9dcddb744829bfec549276edb7d718d40d7281d9a9cc85f9767d7990ee9c6ae9da284d7b569b8744634fc7fc57c057dd159f9116ecd5bf52c7b795bf52597e3727883b7f11ae9619c3aaa293d2b897911523ffc1f8837c46a3ffa6efb58e6b0bff76c3c2a2b634578b62e6814cc3cc6442929d453210e5ff03a162fc0572d91a365e0408062374dce52c9dc351518bceee369d0075b771bdd056698522019c0b20eb2f54213035748b4664a71640972d4c4295467e2983229acfc49d55a6bc9f7fe078ac5d8ceac6f4d1eeaf3184e4dcbdb9ebeb0d2101e9b180708db32ab3d2f5fcce49c46e6fdd6837e9bc36c291556c5d468f392e9e5b6a4620e59b8e2579096b0778792c89e792f17584eaef77d4dc0c00534792e25a99aff00a0d75d4d257b98256109772a8992d217bded9060e82877a20d37497da12707a6aab535298d8de0cc28444b340ad1e6208b7f302024ad17382a45304d4cfd0d84ba0167e1f5dc6373941a610abbcabdd09a78670524f8be36ff8a0f73e00baf35542fc79197f023b95d4c139e6e43f62c681683797d5e9a8d044f01d144c48382ad80b5877dd7025bfc85a6acec3641d0ce4623641edac1617e1719ce80df324772e3dc42362dbadccdd628b202cabed7c0098de59b1b20696a6fbac95fbc49c2a8c7b771465e178a332c7d1f5df8c3baa7cfc5524cf79825ff87d2f17b33c784b31200a566c9cbcec628f50bbc0598f025e2897545685331ada39e17d26d7ebbe00bbafe027c8888a58069825e0bceeb3debe6d40415f10b9e4a60cac2a13d5ed78af06a08d4db325877dfe901e857ab678b224f69064609bce8126cb5827ff07ef4d10afc01655bbbc643f597746ce8022b8ea7b81df9fe0f5d79f8719363cbba612704a8a8d073a0b7ff56a8dd8a74b259ad99eb90019286b9413f19e79eec5200faf6f100168ca8eeb19d0befeec0ae36f9c7dabcd422e4344910ebe7a43c29b4f7e35b8b17ec8de15c9184ae474714aea9206c5f010efedc3619ec18fa7e2eee9b314b7c5ba0cba1bd891c28987ed7c183a654b02e1fe6ab475b25c39115dac0907860feeddb3803de1ba5e17e38e9bd84d56a8f1e33b15f5a1eb7b84e6e4a91ac81744cf2190a7b500e65f05872d42f5985d9a13b385bb69e049a6513aa1ee8281534d1f98e528447364d403c01ca01a0472fdc3ccec4415d958e63f7b0644ae2b3e6197ecd9c84878b9bcddace9e75711ecbbc079ad5e9eced8f96750dbf5f78b32351435b078687028a43aa20b84ac10f2d204bdeaae934a07db084352ae7833a26cc5c2ad6d2ed4b1000082a6c83201fa4083940d2d83bfe9b1874a8c21517eea33e2f693c453e05dba8b73fb590ba1bdb19c216779c553d9d34e49c77dc40411190195f5a127aa45ce3446295b268198fe5095ff0cc72024d9fab45ff8d49007e570b2ba58c57349166945f5cfe25ae52225f6bf251d15efad829f11bc5ffba02256ceb0ada115ce9768f0f78d776479c94b65c88c445afcaafb201398ca0a0e4f12b6e65d8d5fbfd5d1fbb7ae43a740dcdf6f9152476c26a14c5f013cba70710fbab03f6b94c199b27531d93eebf281b394b2b713a9b59f91989bbd95874739b5345ad1a3e6b4af85e82b2f8a6347dc9145de2a568504aa4c8a282aba8b5c9e40852a35589d33589d45cebc14d37ec416cd51812e93ea3ce90f1861e3d8e1d200a64f40615ced273080176d450bdd00c9d3d3fc6b53db0993e7372a0dc9563c4ac8d62cd76f3fd1b28a997f624752cd11222a0189c51948cfbd0976390a95a1aa572b24da16a7ef13c60597bf95523bd5379f05fee9d421b36a3bd1453e2803a690eec4c4fe3560d42203ea0c5e66c1a04336ac740f3fe75e3f4befd1309c2c3f73581fe454d61d8632d8ac2bd32f55012111119ad34fabe8e73fa7c0a5c9b73faa82efcf4401ca4e94caead97a012972f2e5c6251d804d1ea969eae3f6f34750e5255a7c249014a518c5dea33de4d15d78ca063b84206af0c08a19b21bb694fc3a3af66ed9f9e8be1c96d844cefe5a620d717e5b21f62998085c036a4011d06bf3a729c9a74d970a95e8ffc8f5c59d928a43adef2035d69e815c1d64d04e0214ff845c54eb8c8f4445f2cbc61ecc2830f8a374b021670ae9f5dd37e795f9bf82d3cf97206e7629494253c1a83af4d6353e5448a89a0069665e5226f93e8f962edbcb6359ef478ebd375594ecf6ebe9afc7f8589a28d808af2df981ae006f7fd34648e7c41e450e2ba468970662d98a8cd57254e71479b0084a82d180cbdb14c5c3eb69e71e1c66152edcff9a1b9afbed3669b80ce533bf5ceda6874ad52a337031b383674aec27a61fa0e7625870bc92b6adb19ed7213b0fd53c6e98bd3c23f4046f27938b43f63cfc78385d696c93645bcb9d4ddb009b251d2dd382b5300e05223ced132cbbb89ec9d18aff6cc1d5651ebacac38f46df3f96538e87003f8ad1fd5be794a3dfbbceb9b0e670acbcdf57e319dad16995d9096c60ad4722bd0cad6b3dfc11f37a0450a8b1f21b666a008ce464fe2b1a9b6f2861b4379a8a0cf57c748ec5a585b130e97dcb9722c63f4969f2c836b724e8db75f451535e332326a275e4dfb7da0a8a83389d5bd8f0cd70a1fd47c2aced6704cb351a91a19c0473e1a7fa5c7b8ef39d760dd24266d2f7b04c64c9ea53cb3fdfc05100122db21f319ccc0b2ea6324607e160c7a2e5b1a6da76b6de2782a7323a56f1ff8227fe74a03fead6920674e4a76dd8715831c8024d55152609fad3373cdd6c9438de2710ac3df74b8ad14fa54f2ff008074d83deb2f0eaf861fa9379da61f8b4c571e2a422ba9a6936ef5393ebf8057506bc7be18cf3abf3877bc50ec07c58c362f23741a90992e988a4db4253f59034b57c457d2f0a2ed9992e181d020cbcbc1c322d36c604240e3ea568b1a5f511617d3d6027af8fc0227df5db6c4fb2358b206770d84448fe4f2d1243a43d1168b027721a5b542f45eaa4f12ed4e480607084e1c2b05054619478312316a0571ef6b2dc967239a245f092e67be869ebc824cb70f669268c17c813c9ab49fd0715e5ed0919abbef99524a5577e4ae535dae265a345317a10bfaea245d7b56ddecf9905e4f1890185b24fbda68024fce1f0ba02140cecc801307f1d1817394c6bba6c2e546922fdd297af5860050ef23cd67742dc77b75ee4a47e6fbce6bb2fea02d0171de2af36e9584c080e009e93b124641db3f8afd59162d39712bfbb4bbcf48120dc5ecaa604c5202763a56667611363c77abc437241470becb5d9c0abdbee37ab7903f2abe4befed1bdec47f14c589fe87d6ceaf9acdba7b711c5972b09631bfbdd2440203762d92086a82cbda98206074a3f1708bf6d420c987b33358d32528beb4bc33d34b96fbf92dc823f021b56914ce98bfebe310b9628a7bcd1d7a76f5791a03fd319544e8f48b276bfe1587934203c304e34de74ec7f5208ce2dd326bb6670c5d37758824b8facec7092f9613a91e9656aa9700ecb4caa1dab0ac43320d51bcd293ccb2ad2d857e7099d6bdc99e0639abfc9edc6558ab61ce062f4795cf483423e15c2dbf106ff211211e984f8159292ef21bffa527cf2b80c7c328c95d5b635f4fac76cce6a49ec98a8512d5f47fcfb08ad405ff17708f49657691ab15b596f446d39b906802fa422a480a3b99e1d26ad364df5de3551c84ff6b15f5c646ef9eea5a063237c10861383dcd61e331ecd59b320fb8dfbc90c124dee47824cb75e213798f66014a58d3fe2394e84a92211c76142e80528447287506388840164991bbed0aef17194f76f0762d7d6c869f488c1687160d2fcff9828917feb5e7b906f941f83661b5436893e9e58187e16c11a450bd0c37e965d338f99ac4dc1141317a09a12f547250409733f9fb4174e42594104eef47e2244ee1f8358d5a38c229454fe932dd3d5ab52bb456a2ca225fd62fdb46521c8bc5cffe1baef69f99e941891616d90d2a1ffa9fd2634a0a2b28e473579d484e5a3964853148f71c86aeadda05c98c006760b217cdebbf73902a843e8db9965ed3b4f9e3584a7c1ac4d540005825603eec3e589745acf034504448b41793775d3375c4308050da26cfdc4c22ed3485f2362306d35b1a5b23e9039af783375bc39e551592e29e4c798abddf686501495e17045beefe05c05f0ec6e35e76697c0b708c000d2236ea4fb188a3beb9a890808ffba992a3e98ca1a75845fccd62c1be14e99c3bb812a4354415405c3a4bb63a000d56f5ee63ae9275d02c148ac304bacf3f6ebb0e287215457115bad8f8437b6f4e2264688c77911e3da5772c9eb027fdca3c925e200d0ad680964cb800ff4ceb53cffe952e571435ef94d98903caa3af04cfa6e205719cc6febbb02604cbcdcccad33b42fae6fe5632ab4cb76a2238623566e25e63ba07a8b40ce06c4dca0650e5d6177ba8cbd644f2c75cfffd4c2f696c061cbf0f094c98b093f42be47a1cfcfd004943564459f67f662128ed4cf68280897d65072f10b9dd4a6e93139f5dbee17f5e9c1d372d4cf5914447c3e49f7b9b03c703f3cc064eadb03d64a8a13d14d2c43edb83191c3b8724d5ce71884c11512087761b0e58178a6bbe8c33630c16e8e8bfd0a15d3757618c548bba9e3b8128835d2d76a3c5dc068c1a1f7ada1d0a4630e4e88b95f9b58dfe2c42ee06734a68d0ac7c67425f4a2436e76f62ff666a655d2678dfa7ee77e724e609c537e9b2be8cc999590b695666699e7ab9573df4ef9c02a0dd46e580eb92cbff154badf21baccc70d0541fc17f77fb35e9485f9217611b39012ddd677ee4e727be6a56cb20e4f1c5724764bf857bde72d90a774e630cd97f0a1935747c23ea927432d456618231913b73cb08a45a6bebb4eeb35635975668257bc03b3d1cd8272a727312b8c4d7a81938fb038cf5e969a701d1ddd4334973f4281c4a9662c8d0dc06d4b3d802458eb6aae9f888a9120a5364be6f17247ba1d13ef75cb182eff5e7f702612b7aca5e1c1ae7f436c9f256d519b53fdd168163eed6b28bbf6502839b864ba90a54531bd3db4782594cb8d5d26f956ef3fa73960808e9b78f2103493120144f07a115381c15ec04b7445f32c0ff37f708b37a2c48ec8139827bf4627e73277d62aaaa2b13f38b5796a56bc44390bafb147f1458e761735c67f6a499e6104529ceaac03b460b045efdcb9de7270b55a99b1f79201d867c53545f04e13d7dba7b1e0aeedef0a6df34302d49ee5d41ff9f299cc52c783ac9feb4f011d60dec51e9bd18f6ba232d2374471e8825f230c359e9cf407f73ef7cedcae8f5e6b6d76a3ee4f0f3597d40c0ccde8b8eac4af802d2b322459cd210a1695fa9d100564ae73ff8958983d0e2f7d4a61f15039544b6e3e18a17e8954967dc857b11b53a74945143a51a752ff5245f3cfdc9ab24d99a1d6d4830d635ef17cea62e1a295d1f80e68e7b718ea4602074234dad37ad3d37fc37c771b795546d4d900cd019d1fb81607a66e1f1d00dc887c69c9b6f3c9b7d6dae479336c10ca91856c2e85acab7db23ccc1fc7b9a47ab97924f6606984c7bab87f5229fe23582ec82e4d5621e10be143664b9d22c86dce3bdf3d9be397b71a91820aacc24d627cbc6fc2d5f390a341a4cf50c958097fb4976af26fa1e6d7f684bd851f7e80194a2592e46479049fbe33dda95b2c6d7af0169a95bcef12d26ce4abd6ffd", 0x1000}, {&(0x7f0000004e80)="3cf0c81d02df1f4e6355e5b4810f9e1945c3ca9486ef0aa11cd64ffdaefe911d35f17f473f7508576ea8b8323020914cf3d26fe4b9b60b5269858c180e9d4c40bac204cda5b1f98c7320b2d6e6811ee89f78b9386e8e1c8e980a0a1c43cd9bbdd2f61243942eaf9e627602258dd27c48a3178262a533863a5e77fbc9d0c7839987edc82037f5884588c201636611088e02650e97bac96026cf1d3f57048484ff3bb995989727ac9c824d9d2d3fb5ce393a30e116", 0xb4}], 0x4, &(0x7f0000004fc0)=[@rights={{0x14, 0x1, 0x1, [r13, r0]}}, @rights={{0x24, 0x1, 0x1, [r14, r14, r14, 0xffffffffffffffff, r13, r2]}}], 0x38, 0x24000800}}, {{&(0x7f0000005000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000007300)=[{&(0x7f0000005080)="e5964e5e181e4550b1189eb3cb4096664fa9f62287474949b98fb8765b872d948eed25c47064f20b16d8d9e5927fec8deabad73959ce1f29389d19c8d87e049171f8c6ebe3d584b673441090a6b2d0f2d8985628d734317f38f5d94a47b44a8fcefc65a5f8228966cc46d45ea9d449be54c393221cca4701", 0x78}, {&(0x7f0000005100)="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", 0x1000}, {&(0x7f0000006100)="a3bcad28deda33500348f93ad8008b79deb5e4fe1f3928945fc26ae88088074b9f", 0x21}, {&(0x7f0000006140)="089f00db2bb272f3d1bbefb4eec9", 0xe}, {&(0x7f0000006180)="0c8d06723135aaa2446271065d6f599b2b506ab3168c682b605704647c6e56cdfa6bba632b8a002066d7715d7c40484da305e973ba569028fc4106fe8efe7aa2d0d0c70daa432ac34408a0650cbee6114bd46ee84b4e7d578889535321fb18e95e656a06d4bc69f6fa5d736b99", 0x6d}, {&(0x7f0000006200)="499c3cf2955857f86a407ffbb508a6b5d97b946b3edb7ce72249cbd43b819785e934c55a52d1879ffec2a4571a59ce5b1c0f97ee6e892e3aa292f12228ca2defa209b58a7b280568ea2eb124ecec2ff251ee6e17dabbaa7b5c0f13262bfb5dbe1782333058c35c87fb36b9fca21eda0db25800528c3bff007087bd99d48ca7da5539f451205d5c6eee23e8818338f20f9858c6b33570168b888ed3655805c89caffaf5f7fcdd83819b13411446c6639b130c99d5bc36c35af6e632cd0e56da39312d606ed82cc63543fd4741cc40d9", 0xcf}, {&(0x7f0000006300)="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", 0x1000}], 0x7, &(0x7f0000007640)=[@cred={{0x18, 0x1, 0x2, {r11, r12}}}, @rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff, r13]}}, @cred={{0x18, 0x1, 0x2, {r11, r12}}}, @rights={{0x24, 0x1, 0x1, [r3, r14, r0, r0, r14, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, r12}}}, @rights={{0x20, 0x1, 0x1, [r4, r14, r2, 0xffffffffffffffff, r4]}}, @cred={{0x18, 0x1, 0x2, {0x0, r12}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r14]}}], 0xd0, 0xc004}}], 0x2, 0x8104)

493.295367ms ago: executing program 1 (id=1084):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x88)
fchdir(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@sha1={0x1, "bed90c5a5948f62d43ad4d0feffa1f4892feedbf"}, 0x15, 0x3)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0xfffffedb, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0)

397.043494ms ago: executing program 3 (id=1085):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xa, 0x80000000, 0x1}, 0x50) (fail_nth: 1)

288.882747ms ago: executing program 1 (id=1086):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
socket(0x2b, 0x3, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12)
ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1)
ioctl$UI_DEV_CREATE(r2, 0x5501)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x3, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x5, 0xfffffffe, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x4e, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x9, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10001, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x1, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x9, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xe, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
unshare(0x22020600)
move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
read$hiddev(r2, &(0x7f0000000040)=""/117, 0x75)
syz_emit_ethernet(0x7a, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff0000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, 0x0, 0x40088c0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)=@x86={0x7, 0x6, 0xa, 0x0, 0x7, 0x8, 0x3, 0x7, 0x5, 0xfc, 0x8, 0x6, 0x0, 0x9, 0x20000000, 0xe, 0x40, 0x9, 0x6, '\x00', 0x2, 0x8})
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x70, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x5000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4806}, 0x0)

288.599113ms ago: executing program 3 (id=1087):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3a}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1c}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48c1}, 0x1)
r2 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000080)={0xa, 0x1, 0x0, {0x1}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
creat(&(0x7f0000000080)='./proc\x00', 0x40)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r3, &(0x7f0000000000)='3', 0x4e)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xa, 0x80000000, 0x1}, 0x50)

223.883191ms ago: executing program 0 (id=1088):
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write(r0, &(0x7f0000000040)='transport=tcp,traddr=127trsvcid=8009,nqn=', 0x29)

119.187581ms ago: executing program 0 (id=1089):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
openat$tun(0xffffffffffffff9c, 0x0, 0xa000, 0x0)
getpgid(0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00')
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x840000000002, 0x3, 0x100)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
read(r0, &(0x7f0000000040)=""/148, 0xffffff96)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
recvmmsg(0xffffffffffffffff, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x100, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
keyctl$dh_compute(0x17, &(0x7f00000003c0), &(0x7f0000000680)=""/133, 0x85, &(0x7f0000000640)={&(0x7f0000000540)={'sha512-neon\x00'}, &(0x7f0000000580)="17e0fbfa1cd0113367a30dc17913a6baa401add72c6476e9fa079fa52bb65d180f077f7eecdccb4727dfd20578aad9f306ea71b3203a9a691bdeda9149024ca4af6da29f18ecaa1bd99639a25f914583293891bc8d4bf383942854f25d1bc952a06f575f45eaf843984940ff20d3b0987a16ff81d16e3bc94f032333aba00aaf99537847d31af9ffc897acb0ef39426e19370a8c5cc7ba157bbcf744ccf78f5ecdb254c5a3c4ab1d", 0xa8})
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0xa}, 0xffffffffffffffff, 0x6}}, 0x48)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r2)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x4000)

67.650973ms ago: executing program 0 (id=1090):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000000)={0x0, 0x40, 0x3f, 0x30315559, 0x1, [], [0x20000000, 0x0, 0x1000010, 0x20000], [0x0, 0x40002, 0xfffffffe], [0x0, 0x10000000000000]})
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x0)
r3 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x5c, 0x160, 0x134, 0x3e0, 0x240, 0x228, 0x25a, 0x240, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [0x0, 0xffffff00], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xec, 0x134, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x24}, {0x0, "d176"}}, @common=@unspec=@state={{0x24}, {0xfffffffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x4}, [0x0, 0x0, 0xff000000], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x364)
rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
readv(r0, &(0x7f0000000d00)=[{&(0x7f00000003c0)=""/129, 0x81}, {&(0x7f0000000540)}, {&(0x7f0000000580)=""/57, 0x39}, {&(0x7f00000005c0)=""/248, 0xf8}, {&(0x7f0000000880)=""/223, 0xdf}, {&(0x7f0000000bc0)=""/68, 0x44}, {&(0x7f0000000c40)=""/58, 0x3a}, {&(0x7f0000000c80)=""/75, 0x4b}], 0x8)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000b32f1d192adfeb17123b9ad9bdab7cd6a13371090effa2dc18eae2859b927c0eada1758d25", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r6, @ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$unix(r7, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r9 = syz_open_dev$sndpcmp(&(0x7f0000001740), 0x27, 0x50000)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r9, 0xc0884123, 0x0)

67.085672ms ago: executing program 1 (id=1091):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fea000/0x7000)=nil, 0x0}, 0x68)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000100000000010"], 0x48)
r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', <r3=>0x0, 0x2f, 0x5, 0x5, 0xfffffffe, 0x5, @mcast2, @dev={0xfe, 0x80, '\x00', 0x42}, 0x7800, 0x8, 0x9, 0x4}})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, <r4=>0x0}, 0x6)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
quotactl_fd$Q_GETINFO(r5, 0x1, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r4, 0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', <r6=>r3, 0x4, 0x5, 0x8, 0x0, 0x28, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x8, 0xeaa, 0xfffffffc}})
socket$kcm(0x11, 0x7, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES64=r3, @ANYRESDEC=r0, @ANYRES8=r4], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x24, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b95}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000072"], &(0x7f0000000000)='GPL\x00', 0x294, 0x0, 0x0, 0x40f03, 0x18, '\x00', r3, @fallback=0xa80817989c3d8e01, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r8, 0x800442d3, &(0x7f0000000180)={0x3, 0x8, 0xcc1, @empty, 'veth0_to_batadv\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0)
pwritev(r9, &(0x7f0000000000)=[{&(0x7f0000000680)="b5", 0x1}], 0x1, 0x2ffffc, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000800000000009d716d001200000018000180140002006e070064657673696d300000000000000800090000000000"], 0x34}}, 0x0)
symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00')
r12 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r12, &(0x7f00000005c0)='usbip-vudc.0', 0xc)
write(r12, &(0x7f00000004c0)='\n', 0x1)

0s ago: executing program 3 (id=1092):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
r1 = openat$sndtimer(0xffffff9c, &(0x7f00000000c0), 0x14dc6e9494c85369)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000100))
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28000, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x527040, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff7ffc}]})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
inotify_init()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, r2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
dup(r3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000340)={<r7=>0xffffffffffffffff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
splice(r7, 0x0, r8, 0x0, 0x88000cc, 0x0)

kernel console output (not intermixed with test programs):

7246] RIP: 0023:0xf7f44fec
[  114.940643][ T7246] Code: Unable to access opcode bytes at 0xf7f44fc2.
[  114.940651][ T7246] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  114.940670][ T7246] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000440
[  114.940682][ T7246] RDX: 0000000000000022 RSI: 0000000000000000 RDI: 0000000000000000
[  114.940696][ T7246] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  114.940707][ T7246] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  114.940718][ T7246] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  114.940745][ T7246]  </TASK>
[  116.282812][ T5826] usb 6-1: USB disconnect, device number 14
[  116.336175][ T7256] input: syz0 as /devices/virtual/input/input36
[  116.526257][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.390'.
[  116.865088][ T7283] input: syz0 as /devices/virtual/input/input38
[  117.048425][   T68] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  117.186785][ T7291] overlayfs: failed to resolve './file1': -2
[  117.275187][   T68] usb 8-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  117.280145][   T68] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  117.280169][   T68] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  117.280200][   T68] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.725582][ T7295] Unknown vers= option specified: 3.0/
[  117.725582][ T7295] 
[  117.725788][ T7295] CIFS: VFS: Unknown vers= option specified: 3.0/
[  117.818056][ T5524] usb 8-1: USB disconnect, device number 13
[  118.302680][ T7311] input: syz0 as /devices/virtual/input/input40
[  120.237003][ T7338] tipc: Started in network mode
[  120.237016][ T7338] tipc: Node identity 4, cluster identity 4711
[  120.237023][ T7338] tipc: Node number set to 4
[  120.292494][ T7340] input: syz0 as /devices/virtual/input/input41
[  120.368378][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.417'.
[  120.372020][ T7346] netlink: 72 bytes leftover after parsing attributes in process `syz.2.417'.
[  120.499925][ T6477] Bluetooth: hci4: Frame reassembly failed (-84)
[  120.817621][  T853] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  120.979423][  T853] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  120.980261][  T853] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  120.980275][  T853] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  120.980295][  T853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.251650][   T68] usb 6-1: USB disconnect, device number 15
[  122.413046][ T7379] FAULT_INJECTION: forcing a failure.
[  122.413046][ T7379] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  122.413194][ T7379] CPU: 3 UID: 0 PID: 7379 Comm: syz.0.427 Not tainted syzkaller #0 PREEMPT(full) 
[  122.413214][ T7379] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  122.413224][ T7379] Call Trace:
[  122.413229][ T7379]  <TASK>
[  122.413236][ T7379]  dump_stack_lvl+0x100/0x190
[  122.413263][ T7379]  should_fail_ex.cold+0x5/0xa
[  122.413285][ T7379]  _copy_from_user+0x2e/0xd0
[  122.413306][ T7379]  move_addr_to_kernel+0x65/0x170
[  122.413326][ T7379]  __sys_sendto+0x1b8/0x4e0
[  122.413346][ T7379]  ? __pfx___sys_sendto+0x10/0x10
[  122.413372][ T7379]  ? lock_acquire+0x1d1/0x380
[  122.413410][ T7379]  __ia32_compat_sys_socketcall+0x59a/0x770
[  122.413429][ T7379]  ? __fget_files+0x21f/0x3d0
[  122.413448][ T7379]  ? __pfx___ia32_compat_sys_socketcall+0x10/0x10
[  122.413503][ T7379]  do_int80_emulation+0x166/0x650
[  122.413533][ T7379]  asm_int80_emulation+0x1a/0x20
[  122.413551][ T7379] RIP: 0023:0xf71175ab
[  122.413564][ T7379] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  122.413580][ T7379] RSP: 002b:00000000f53cc37c EFLAGS: 00000246 ORIG_RAX: 0000000000000066
[  122.413596][ T7379] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f53cc424
[  122.413607][ T7379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  122.413617][ T7379] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  122.413626][ T7379] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000
[  122.413636][ T7379] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  122.413658][ T7379]  </TASK>
[  122.557562][ T5733] Bluetooth: hci4: command 0x1003 tx timeout
[  122.557709][ T5735] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  122.630155][ T7381] input: syz0 as /devices/virtual/input/input42
[  123.279467][ T7408] input: syz0 as /devices/virtual/input/input43
[  123.367841][ T7410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.435'.
[  123.647383][   T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  123.787725][   T10] usb 5-1: device descriptor read/64, error -71
[  124.037458][   T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  124.153831][ T7437] input: syz0 as /devices/virtual/input/input44
[  124.187435][   T10] usb 5-1: device descriptor read/64, error -71
[  124.297597][   T10] usb usb5-port1: attempt power cycle
[  124.637495][   T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  124.657978][   T10] usb 5-1: device descriptor read/8, error -71
[  124.907310][   T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  124.927771][   T10] usb 5-1: device descriptor read/8, error -71
[  125.015868][   T43] audit: type=1326 audit(1789803825.901:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.2.450" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000
[  125.016136][   T43] audit: type=1326 audit(1789803825.901:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.2.450" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000
[  125.018063][   T43] audit: type=1326 audit(1789803825.901:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.2.450" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000
[  125.032782][   T43] audit: type=1326 audit(1789803825.921:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.2.450" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000
[  125.032814][   T43] audit: type=1326 audit(1789803825.921:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.2.450" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702efec code=0x7ffc0000
[  125.032996][   T43] audit: type=1326 audit(1789803825.921:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.2.450" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000
[  125.033210][   T43] audit: type=1326 audit(1789803825.921:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.2.450" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000
[  125.033368][   T43] audit: type=1326 audit(1789803825.921:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.2.450" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000
[  125.033399][   T43] audit: type=1326 audit(1789803825.921:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.2.450" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702efec code=0x7ffc0000
[  125.033428][   T43] audit: type=1326 audit(1789803825.921:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.2.450" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000
[  125.047653][   T10] usb usb5-port1: unable to enumerate USB device
[  125.361277][ T7456] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.12800.0), cmd(10)
[  125.555743][ T7463] input: syz0 as /devices/virtual/input/input45
[  125.877842][ T5806] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  126.047772][ T5806] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  126.051425][ T5806] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  126.051462][ T5806] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  126.051537][ T5806] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.051556][ T5806] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  126.052536][ T5806] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  126.052547][ T5806] usb 6-1: Manufacturer: syz
[  126.053751][ T5806] usb 6-1: config 0 descriptor??
[  126.471391][ T7465] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.777945][ T5806] usbhid 6-1:0.0: can't add hid device: -71
[  126.778000][ T5806] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  126.785734][ T5806] usb 6-1: USB disconnect, device number 16
[  127.416469][ T7492] input: syz0 as /devices/virtual/input/input46
[  127.815362][ T7510] netlink: 'syz.0.473': attribute type 1 has an invalid length.
[  127.815381][ T7510] netlink: 224 bytes leftover after parsing attributes in process `syz.0.473'.
[  128.232210][ T7522] input: syz0 as /devices/virtual/input/input47
[  129.207092][ T5826] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  129.377552][ T5826] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  129.378365][ T5826] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  129.378379][ T5826] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  129.378396][ T5826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.585777][ T5806] usb 6-1: USB disconnect, device number 17
[  130.011456][ T7548] jffs2: notice: (7548) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  130.155851][ T7553] capability: warning: `syz.1.485' uses 32-bit capabilities (legacy support in use)
[  130.940077][ T7565] loop4: detected capacity change from 0 to 7
[  130.943018][ T7565] Dev loop4: unable to read RDB block 7
[  130.943038][ T7565]  loop4: unable to read partition table
[  130.943129][ T7565] loop4: partition table beyond EOD, truncated
[  130.943196][ T7565] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[  131.340824][ T7582] input: syz0 as /devices/virtual/input/input48
[  131.597004][   T73] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  131.747958][   T73] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  131.749052][   T73] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  131.749066][   T73] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  131.749084][   T73] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.030670][   T73] usb 7-1: USB disconnect, device number 15
[  132.317896][ T1438] ieee802154 phy0 wpan0: encryption failed: -22
[  133.514725][ T7635] netlink: 48 bytes leftover after parsing attributes in process `syz.2.511'.
[  133.546228][ T7635] nvme_tcp: malformed address passed: 127trsvcid=8009:8009
[  133.564320][ T7633] netlink: 36 bytes leftover after parsing attributes in process `syz.3.510'.
[  133.570415][ T7633] netlink: 20 bytes leftover after parsing attributes in process `syz.3.510'.
[  133.570775][ T7633] cgroup: Invalid name
[  134.101515][ T7648] kvm: pic: level sensitive irq not supported
[  134.101566][ T7651] Invalid argument reading file caps for ./file0
[  134.102765][ T7648] kvm: pic: non byte write
[  134.314602][ T7656] netlink: 44 bytes leftover after parsing attributes in process `syz.0.517'.
[  134.587432][ T7667] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 1, id = 0
[  134.612922][ T7668] block nbd2: shutting down sockets
[  134.746965][ T5806] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  134.927266][ T5806] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  134.928332][ T5806] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 84, changing to 10
[  134.928356][ T5806] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17152, setting to 1024
[  134.928375][ T5806] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  134.928407][ T5806] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.931563][ T5806] usb 6-1: config 0 descriptor??
[  135.368278][ T5806] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  135.902812][ T7684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.903669][ T7684] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.172774][   T10] usb 6-1: USB disconnect, device number 18
[  136.536677][ T5811] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  136.686690][ T5811] usb 5-1: device descriptor read/64, error -71
[  137.003770][ T5811] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  137.136691][ T5811] usb 5-1: device descriptor read/64, error -71
[  137.176669][ T5819] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  137.247154][ T5811] usb usb5-port1: attempt power cycle
[  137.327110][ T5819] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  137.327936][ T5819] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  137.327950][ T5819] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  137.329530][ T5819] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.329542][ T5819] usb 7-1: Product: syz
[  137.329554][ T5819] usb 7-1: Manufacturer: syz
[  137.329561][ T5819] usb 7-1: SerialNumber: syz
[  137.526953][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.534'.
[  137.551945][ T7711] netlink: 'syz.2.532': attribute type 22 has an invalid length.
[  137.551963][ T7711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'.
[  137.552019][ T7711] bond0: option ad_select: unable to set because the bond device is up
[  137.560992][ T5819] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  137.587745][ T5811] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  137.617182][ T5811] usb 5-1: device descriptor read/8, error -71
[  137.762857][ T7711] fuse: Bad value for 'fd'
[  137.866827][ T5811] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  137.887323][ T5811] usb 5-1: device descriptor read/8, error -71
[  137.997028][ T5811] usb usb5-port1: unable to enumerate USB device
[  138.221041][ T7726] overlayfs: missing 'lowerdir'
[  138.225313][ T7726] jffs2: notice: (7726) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  139.324492][ T7734] input: syz0 as /devices/virtual/input/input51
[  139.379201][ T7740] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  139.379216][ T7740] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  139.415678][ T7738] netlink: 14 bytes leftover after parsing attributes in process `syz.0.540'.
[  139.415709][ T7737] netlink: 14 bytes leftover after parsing attributes in process `syz.0.540'.
[  139.419401][ T7742] FAULT_INJECTION: forcing a failure.
[  139.419401][ T7742] name fail_futex, interval 1, probability 0, space 0, times 1
[  139.419465][ T7742] CPU: 3 UID: 0 PID: 7742 Comm: syz.1.542 Not tainted syzkaller #0 PREEMPT(full) 
[  139.419478][ T7742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  139.419485][ T7742] Call Trace:
[  139.419489][ T7742]  <TASK>
[  139.419493][ T7742]  dump_stack_lvl+0x100/0x190
[  139.419511][ T7742]  should_fail_ex.cold+0x5/0xa
[  139.419524][ T7742]  ? kmem_cache_free+0x43b/0x6c0
[  139.419543][ T7742]  get_futex_key+0x1d0/0x14f0
[  139.419561][ T7742]  ? __pfx_get_futex_key+0x10/0x10
[  139.419595][ T7742]  futex_wake+0xf4/0x5e0
[  139.419610][ T7742]  ? __pfx_futex_wake+0x10/0x10
[  139.419626][ T7742]  ? __call_rcu_common.constprop.0+0x3f2/0x9b0
[  139.419650][ T7742]  do_futex+0x2b2/0x440
[  139.419661][ T7742]  ? __pfx_do_futex+0x10/0x10
[  139.419673][ T7742]  ? kmem_cache_free+0x43b/0x6c0
[  139.419690][ T7742]  ? percpu_counter_add_batch+0xb9/0x230
[  139.419708][ T7742]  __ia32_sys_futex_time32+0x2f4/0x470
[  139.419723][ T7742]  ? __pfx___ia32_sys_futex_time32+0x10/0x10
[  139.419741][ T7742]  __do_fast_syscall_32+0x13a/0x8b0
[  139.419758][ T7742]  ? lockdep_hardirqs_on+0x7d/0x110
[  139.419775][ T7742]  do_fast_syscall_32+0x32/0x70
[  139.419791][ T7742]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  139.419805][ T7742] RIP: 0023:0xf707efec
[  139.419818][ T7742] Code: Unable to access opcode bytes at 0xf707efc2.
[  139.419823][ T7742] RSP: 002b:00000000f546d5cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0
[  139.419834][ T7742] RAX: ffffffffffffffda RBX: 00000000f7474f8c RCX: 0000000000000081
[  139.419841][ T7742] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473
[  139.419847][ T7742] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000
[  139.419854][ T7742] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000
[  139.419860][ T7742] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  139.419873][ T7742]  </TASK>
[  139.760439][ T7753] input: syz0 as /devices/virtual/input/input52
[  139.766766][ T7753] netlink: 830 bytes leftover after parsing attributes in process `syz.1.545'.
[  139.770019][  T853] bond_slave_0: entered promiscuous mode
[  139.770048][  T853] bond_slave_1: entered promiscuous mode
[  139.923024][ T5811] usb 7-1: USB disconnect, device number 16
[  139.924676][ T5811] usblp0: removed
[  140.249244][ T7767] input: syz0 as /devices/virtual/input/input53
[  140.266459][   T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  140.396606][   T10] usb 6-1: device descriptor read/64, error -71
[  140.536454][ T7778] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  140.536488][ T7778] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  140.646426][   T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  140.786554][   T10] usb 6-1: device descriptor read/64, error -71
[  140.896658][   T10] usb usb6-port1: attempt power cycle
[  141.236476][   T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  141.257043][   T10] usb 6-1: device descriptor read/8, error -71
[  141.387297][ T7786] batman_adv: batadv0: Adding interface: syzkaller0
[  141.387311][ T7786] batman_adv: batadv0: Interface activated: syzkaller0
[  141.414791][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.557'.
[  141.416183][ T7788] netlink: 28 bytes leftover after parsing attributes in process `syz.3.557'.
[  141.416198][ T7788] netlink: 28 bytes leftover after parsing attributes in process `syz.3.557'.
[  141.416205][ T7788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.557'.
[  141.464601][ T7790] input: syz0 as /devices/virtual/input/input54
[  141.497637][   T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  141.517226][   T10] usb 6-1: device descriptor read/8, error -71
[  141.626470][   T10] usb usb6-port1: unable to enumerate USB device
[  142.645257][ T7826] batman_adv: batadv0: Adding interface: syzkaller0
[  142.645273][ T7826] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem.
[  142.645301][ T7826] batman_adv: batadv0: Interface activated: syzkaller0
[  142.676622][ T5524] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  142.836987][ T5524] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  142.837919][ T5524] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  142.837939][ T5524] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  142.837967][ T5524] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.886355][   T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  143.036379][   T10] usb 5-1: Using ep0 maxpacket: 16
[  143.037186][   T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  143.039860][   T10] usb 5-1: config 1 interface 0 altsetting 44 bulk endpoint 0x82 has invalid maxpacket 1023
[  143.039884][   T10] usb 5-1: config 1 interface 0 altsetting 44 has an invalid descriptor for endpoint zero, skipping
[  143.039900][   T10] usb 5-1: config 1 interface 0 altsetting 44 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  143.039921][   T10] usb 5-1: config 1 interface 0 has no altsetting 0
[  143.045534][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.045556][   T10] usb 5-1: Product: syz
[  143.045567][   T10] usb 5-1: Manufacturer: syz
[  143.045578][   T10] usb 5-1: SerialNumber: syz
[  143.099411][ T7835] jffs2: notice: (7835) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  143.108541][   T68] usb 7-1: USB disconnect, device number 17
[  143.272185][ T7826] netlink: 'syz.0.569': attribute type 16 has an invalid length.
[  143.272330][ T7826] netlink: 'syz.0.569': attribute type 17 has an invalid length.
[  143.272354][ T7826] lo: left promiscuous mode
[  143.275202][ T7826] tunl0: left promiscuous mode
[  143.276143][ T7826] gre0: left promiscuous mode
[  143.277018][ T7826] gretap0: left promiscuous mode
[  143.277985][ T7826] erspan0: left promiscuous mode
[  143.278822][ T7826] ip_vti0: left promiscuous mode
[  143.281072][ T7826] ip6_vti0: left promiscuous mode
[  143.281860][ T7826] sit0: left promiscuous mode
[  143.282510][ T7826] ip6tnl0: left promiscuous mode
[  143.283184][ T7826] ip6gre0: left promiscuous mode
[  143.283830][ T7826] syz_tun: left promiscuous mode
[  143.284724][ T7826] ip6gretap0: left promiscuous mode
[  143.285701][ T7826] bridge0: left promiscuous mode
[  143.287242][ T7826] vcan0: left promiscuous mode
[  143.288037][ T7826] bond0: left promiscuous mode
[  143.289467][ T7826] team0: left promiscuous mode
[  143.292354][ T7826] nlmon0: left promiscuous mode
[  143.293187][ T7826] batadv0: left promiscuous mode
[  143.294679][ T7826] vxcan0: left promiscuous mode
[  143.295073][ T7826] vxcan1: left promiscuous mode
[  143.295464][ T7826] veth0: left promiscuous mode
[  143.296052][ T7826] veth1: left promiscuous mode
[  143.296741][ T7826] wg0: left promiscuous mode
[  143.297173][ T7826] wg1: left promiscuous mode
[  143.297647][ T7826] wg2: left promiscuous mode
[  143.298172][ T7826] veth0_to_bridge: left promiscuous mode
[  143.299186][ T7826] veth1_to_bridge: left promiscuous mode
[  143.300192][ T7826] veth0_to_bond: left promiscuous mode
[  143.300588][ T7826] bond_slave_0: left promiscuous mode
[  143.301063][ T7826] veth1_to_bond: left promiscuous mode
[  143.301472][ T7826] bond_slave_1: left promiscuous mode
[  143.301951][ T7826] veth0_to_team: left promiscuous mode
[  143.302309][ T7826] team_slave_0: left promiscuous mode
[  143.302650][ T7826] veth1_to_team: left promiscuous mode
[  143.302895][ T7826] team_slave_1: left promiscuous mode
[  143.303230][ T7826] veth0_to_batadv: left promiscuous mode
[  143.303460][ T7826] batadv_slave_0: left promiscuous mode
[  143.303684][ T7826] veth1_to_batadv: left promiscuous mode
[  143.303920][ T7826] batadv_slave_1: left promiscuous mode
[  143.304140][ T7826] xfrm0: left promiscuous mode
[  143.304428][ T7826] veth0_to_hsr: left promiscuous mode
[  143.304879][ T7826] veth1_to_hsr: left promiscuous mode
[  143.305428][ T7826] hsr0: left promiscuous mode
[  143.306113][ T7826] veth1_virt_wifi: left promiscuous mode
[  143.306451][ T7826] veth0_virt_wifi: left promiscuous mode
[  143.306679][ T7826] virt_wifi0: left promiscuous mode
[  143.307453][ T7826] vlan0: left promiscuous mode
[  143.307813][ T7826] vlan1: left promiscuous mode
[  143.308119][ T7826] macvlan0: left promiscuous mode
[  143.308415][ T7826] macvlan1: left promiscuous mode
[  143.308731][ T7826] ipvlan0: left promiscuous mode
[  143.308986][ T7826] ipvlan1: left promiscuous mode
[  143.309819][ T7826] macvtap0: left promiscuous mode
[  143.310178][ T7826] macsec0: left promiscuous mode
[  143.310452][ T7826] geneve0: left promiscuous mode
[  143.310769][ T7826] geneve1: left promiscuous mode
[  143.311118][ T7826] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  143.311357][ T7826] netdevsim netdevsim0 netdevsim1: left promiscuous mode
[  143.311569][ T7826] netdevsim netdevsim0 netdevsim2: left promiscuous mode
[  143.311793][ T7826] netdevsim netdevsim0 netdevsim3: left promiscuous mode
[  143.312030][ T7826] mac80211_hwsim hwsim7 wlan0: left promiscuous mode
[  143.312343][ T7826] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[  143.319041][ T5882] lo speed is unknown, defaulting to 1000
[  143.322362][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  143.331876][ T7825] batman_adv: batadv0: Interface deactivated: syzkaller0
[  143.340211][   T10] usb 5-1: USB disconnect, device number 24
[  143.364707][ T7825] batman_adv: batadv0: Removing interface: syzkaller0
[  143.817313][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.022101][ T7862] binder_alloc: 7861: binder_alloc_buf, no vma
[  144.304603][ T7876] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  144.456195][  T853] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  144.606314][  T853] usb 5-1: device descriptor read/64, error -71
[  144.647027][   T73] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  144.796946][   T73] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  144.798185][   T73] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  144.798200][   T73] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  144.798217][   T73] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.856196][  T853] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  144.986303][  T853] usb 5-1: device descriptor read/64, error -71
[  145.105300][   T73] usb 6-1: USB disconnect, device number 23
[  145.106510][  T853] usb usb5-port1: attempt power cycle
[  145.343498][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.589'.
[  145.451234][ T7905] smc: net device vlan1 applied user defined pnetid SYZ2
[  145.456212][  T853] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  145.476952][  T853] usb 5-1: device descriptor read/8, error -71
[  145.720636][ T7913] input: syz0 as /devices/virtual/input/input55
[  145.736175][  T853] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  145.766638][  T853] usb 5-1: device descriptor read/8, error -71
[  145.842178][ T7917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.596'.
[  145.877491][  T853] usb usb5-port1: unable to enumerate USB device
[  146.320942][ T7943] input: syz0 as /devices/virtual/input/input56
[  147.553926][ T7969] input: syz0 as /devices/virtual/input/input57
[  147.957528][ T5882] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  148.086000][ T5882] usb 6-1: device descriptor read/64, error -71
[  148.326054][ T5882] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  148.466006][ T5882] usb 6-1: device descriptor read/64, error -71
[  148.576467][ T5882] usb usb6-port1: attempt power cycle
[  148.916004][ T5882] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  148.936514][ T5882] usb 6-1: device descriptor read/8, error -71
[  149.176025][ T5882] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  149.208166][ T5882] usb 6-1: device descriptor read/8, error -71
[  149.251154][ T8007] FAULT_INJECTION: forcing a failure.
[  149.251154][ T8007] name failslab, interval 1, probability 0, space 0, times 0
[  149.251181][ T8007] CPU: 0 UID: 0 PID: 8007 Comm: syz.3.626 Not tainted syzkaller #0 PREEMPT(full) 
[  149.251200][ T8007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  149.251210][ T8007] Call Trace:
[  149.251217][ T8007]  <TASK>
[  149.251223][ T8007]  dump_stack_lvl+0x100/0x190
[  149.251247][ T8007]  should_fail_ex.cold+0x5/0xa
[  149.251269][ T8007]  should_failslab+0xc2/0x120
[  149.251291][ T8007]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[  149.251312][ T8007]  ? alloc_inode+0x183/0x250
[  149.251340][ T8007]  alloc_inode+0x183/0x250
[  149.251359][ T8007]  iget_locked+0x1d9/0x6d0
[  149.251384][ T8007]  ? __pfx_iget_locked+0x10/0x10
[  149.251405][ T8007]  ? kernfs_root+0xee/0x2a0
[  149.251424][ T8007]  ? kernfs_root+0xee/0x2a0
[  149.251448][ T8007]  kernfs_get_inode+0x46/0x470
[  149.251467][ T8007]  kernfs_iop_lookup+0x1a7/0x2d0
[  149.251485][ T8007]  __lookup_slow+0x155/0x320
[  149.251512][ T8007]  lookup_slow+0x50/0x70
[  149.251534][ T8007]  link_path_walk+0x1377/0x1cc0
[  149.251561][ T8007]  path_openat+0x1ac/0x2440
[  149.251584][ T8007]  ? __pfx_path_openat+0x10/0x10
[  149.251605][ T8007]  do_file_open+0x20e/0x430
[  149.251627][ T8007]  ? __pfx_do_file_open+0x10/0x10
[  149.251664][ T8007]  ? _raw_spin_unlock+0x28/0x50
[  149.251685][ T8007]  ? alloc_fd+0x471/0x7a0
[  149.251707][ T8007]  do_sys_openat2+0x10f/0x1e0
[  149.251728][ T8007]  ? __pfx_do_sys_openat2+0x10/0x10
[  149.251753][ T8007]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  149.251783][ T8007]  __ia32_compat_sys_openat+0x12d/0x210
[  149.251808][ T8007]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  149.251827][ T8007]  ? fput+0x7c/0x100
[  149.251846][ T8007]  ? ksys_write+0x1ac/0x250
[  149.251863][ T8007]  ? __pfx_ksys_write+0x10/0x10
[  149.251884][ T8007]  __do_fast_syscall_32+0x13a/0x8b0
[  149.251908][ T8007]  ? lockdep_hardirqs_on+0x7d/0x110
[  149.251933][ T8007]  do_fast_syscall_32+0x32/0x70
[  149.251955][ T8007]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  149.251976][ T8007] RIP: 0023:0xf7f44fec
[  149.251994][ T8007] Code: Unable to access opcode bytes at 0xf7f44fc2.
[  149.252001][ T8007] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127
[  149.252018][ T8007] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000080
[  149.252029][ T8007] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[  149.252038][ T8007] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  149.252048][ T8007] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  149.252057][ T8007] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  149.252085][ T8007]  </TASK>
[  149.329888][ T5882] usb usb6-port1: unable to enumerate USB device
[  150.924349][ T8040] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  150.924678][ T8041] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  151.019072][ T8042] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  151.019140][ T8042] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  151.033103][ T8042] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  151.052330][ T8042] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  151.052401][ T8042] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  151.055417][ T8049] netlink: 40 bytes leftover after parsing attributes in process `syz.2.640'.
[  151.057771][ T8042] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  151.068501][ T8042] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  151.068640][ T8042] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  151.073929][ T8042] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  151.078061][ T8042] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  151.078141][ T8042] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  151.079650][ T8042] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  151.180234][ T8057] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.642'.
[  151.446130][ T7828] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  151.575913][ T7828] usb 7-1: device descriptor read/64, error -71
[  151.827946][ T7828] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  151.839077][ T8067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.645'.
[  151.965768][ T7828] usb 7-1: device descriptor read/64, error -71
[  152.087097][ T7828] usb usb7-port1: attempt power cycle
[  152.425799][ T7828] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  152.446494][ T7828] usb 7-1: device descriptor read/8, error -71
[  152.685972][ T7828] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  152.708013][ T7828] usb 7-1: device descriptor read/8, error -71
[  152.815910][ T7828] usb usb7-port1: unable to enumerate USB device
[  153.035895][ T5735] Bluetooth: hci1: command 0x0c1a tx timeout
[  153.115862][ T5735] Bluetooth: hci2: command 0x0c1a tx timeout
[  153.115920][ T5735] Bluetooth: hci3: command 0x0c1a tx timeout
[  153.115949][ T5735] Bluetooth: hci0: command 0x0c1a tx timeout
[  153.210360][ T8072] FAULT_INJECTION: forcing a failure.
[  153.210360][ T8072] name fail_futex, interval 1, probability 0, space 0, times 0
[  153.210382][ T8072] CPU: 2 UID: 0 PID: 8072 Comm: syz.1.647 Not tainted syzkaller #0 PREEMPT(full) 
[  153.210397][ T8072] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  153.210404][ T8072] Call Trace:
[  153.210408][ T8072]  <TASK>
[  153.210413][ T8072]  dump_stack_lvl+0x100/0x190
[  153.210432][ T8072]  should_fail_ex.cold+0x5/0xa
[  153.210447][ T8072]  get_futex_key+0x1d0/0x14f0
[  153.210466][ T8072]  ? __pfx_get_futex_key+0x10/0x10
[  153.210486][ T8072]  ? find_held_lock+0x2b/0x80
[  153.210499][ T8072]  ? do_mprotect_pkey+0x412/0xdd0
[  153.210515][ T8072]  ? do_mprotect_pkey+0x412/0xdd0
[  153.210532][ T8072]  futex_wake+0xf4/0x5e0
[  153.210544][ T8072]  ? up_write+0x2dc/0x5b0
[  153.210562][ T8072]  ? __pfx_futex_wake+0x10/0x10
[  153.210595][ T8072]  ? __pfx_do_mprotect_pkey+0x10/0x10
[  153.210616][ T8072]  do_futex+0x2b2/0x440
[  153.210627][ T8072]  ? __pfx_do_futex+0x10/0x10
[  153.210639][ T8072]  ? fdget_raw+0x12b/0x1b0
[  153.210656][ T8072]  ? do_compat_fcntl64+0x232/0x720
[  153.210674][ T8072]  __ia32_sys_futex_time32+0x2f4/0x470
[  153.210689][ T8072]  ? xfd_validate_state+0x129/0x190
[  153.210708][ T8072]  ? __pfx___ia32_sys_futex_time32+0x10/0x10
[  153.210727][ T8072]  __do_fast_syscall_32+0x13a/0x8b0
[  153.210746][ T8072]  do_fast_syscall_32+0x32/0x70
[  153.210763][ T8072]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  153.210777][ T8072] RIP: 0023:0xf707efec
[  153.210791][ T8072] Code: Unable to access opcode bytes at 0xf707efc2.
[  153.210796][ T8072] RSP: 002b:00000000f546d5cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0
[  153.210808][ T8072] RAX: ffffffffffffffda RBX: 00000000f7474f8c RCX: 0000000000000081
[  153.210815][ T8072] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473
[  153.210821][ T8072] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000
[  153.210828][ T8072] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  153.210834][ T8072] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  153.210847][ T8072]  </TASK>
[  153.566656][ T8077] wg2 speed is unknown, defaulting to 1000
[  153.571865][ T8075] loop9: detected capacity change from 0 to 255852544
[  153.801360][ T8077] lo speed is unknown, defaulting to 1000
[  155.075669][   T68] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  155.110804][ T8110] overlayfs: failed to resolve './file1': -2
[  155.115976][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout
[  155.195722][ T5733] Bluetooth: hci0: command 0x0c1a tx timeout
[  155.195755][ T5733] Bluetooth: hci3: command 0x0c1a tx timeout
[  155.195776][ T5733] Bluetooth: hci2: command 0x0c1a tx timeout
[  155.236296][   T68] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  155.237558][   T68] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  155.237579][   T68] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  155.237613][   T68] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.552121][ T5882] usb 6-1: USB disconnect, device number 28
[  155.667485][ T8136] program syz.0.662 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  156.405570][ T5827] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  156.557567][ T5827] usb 6-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00
[  156.561679][ T5827] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  156.561696][ T5827] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  156.564531][ T5827] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  156.564548][ T5827] usb 6-1: Product: syz
[  156.564555][ T5827] usb 6-1: Manufacturer: syz
[  156.583353][ T5827] iuu_phoenix 6-1:1.0: iuu_phoenix converter detected
[  156.585243][ T5827] usb 6-1: iuu_phoenix converter now attached to ttyUSB0
[  156.781621][ T5826] usb 6-1: USB disconnect, device number 29
[  156.788306][ T5826] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0
[  156.788606][ T5826] iuu_phoenix 6-1:1.0: device disconnected
[  157.064475][ T8174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.673'.
[  157.116794][ T5882] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  157.195514][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout
[  157.275546][ T5882] usb 5-1: Using ep0 maxpacket: 8
[  157.275609][ T5742] Bluetooth: hci2: command 0x0c1a tx timeout
[  157.275641][ T5742] Bluetooth: hci3: command 0x0c1a tx timeout
[  157.275664][ T5742] Bluetooth: hci0: command 0x0c1a tx timeout
[  157.277072][ T5882] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  157.278005][ T5882] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  157.278024][ T5882] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  157.278039][ T5882] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  157.278053][ T5882] usb 5-1: config 250 has no interface number 0
[  157.278129][ T5882] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  157.278150][ T5882] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  157.278167][ T5882] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 45
[  157.278184][ T5882] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  157.278203][ T5882] usb 5-1: config 250 interface 228 has no altsetting 0
[  157.279776][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  157.279793][ T5882] usb 5-1: Product: syz
[  157.279804][ T5882] usb 5-1: SerialNumber: syz
[  157.285359][ T5882] hub 5-1:250.228: bad descriptor, ignoring hub
[  157.285473][ T5882] hub 5-1:250.228: probe with driver hub failed with error -5
[  157.487625][ T5882] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 29 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  157.555528][   T35] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  157.615074][ T8180] comedi comedi3: comedi_config --init_data is deprecated
[  157.652117][ T8182] loop0: detected capacity change from 0 to 32768
[  157.686599][ T8182] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  157.716695][   T35] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  157.717589][   T35] usb 6-1: config 0 has an invalid interface number: 50 but max is 0
[  157.717608][   T35] usb 6-1: config 0 has no interface number 0
[  157.717636][   T35] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  157.719321][   T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.719334][   T35] usb 6-1: Product: syz
[  157.719341][   T35] usb 6-1: Manufacturer: syz
[  157.719348][   T35] usb 6-1: SerialNumber: syz
[  157.721204][   T35] usb 6-1: config 0 descriptor??
[  157.743515][ T6480] IPVS: starting estimator thread 0...
[  157.768895][    C3] usblp0: nonzero read bulk status received: -71
[  157.769897][   T35] yurex 6-1:0.50: USB YUREX device now attached to Yurex #1
[  157.806021][ T5882] usb 5-1: USB disconnect, device number 29
[  157.808339][ T5882] usblp0: removed
[  157.855551][ T8184] IPVS: using max 29 ests per chain, 69600 per kthread
[  157.878649][ T8189] input: syz0 as /devices/virtual/input/input58
[  157.929486][ T5827] usb 6-1: USB disconnect, device number 30
[  157.931830][ T8178] netlink: 'syz.1.675': attribute type 1 has an invalid length.
[  157.932594][ T5827] yurex 6-1:0.50: USB YUREX #1 now disconnected
[  157.960109][ T8178] bond2: entered promiscuous mode
[  157.961155][ T8178] 8021q: adding VLAN 0 to HW filter on device bond2
[  158.002577][ T8178] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  158.002593][ T8178] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  158.002602][ T8178] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  158.565519][ T5882] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  158.647773][ T8195] wg2 speed is unknown, defaulting to 1000
[  158.716067][ T5882] usb 5-1: device descriptor read/64, error -71
[  158.746234][ T8195] lo speed is unknown, defaulting to 1000
[  158.955484][ T5882] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  159.085443][ T5882] usb 5-1: device descriptor read/64, error -71
[  159.195750][ T5882] usb usb5-port1: attempt power cycle
[  159.275537][ T5735] Bluetooth: hci1: command 0x0c1a tx timeout
[  159.565427][ T5882] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  159.595900][ T5882] usb 5-1: device descriptor read/8, error -71
[  159.835419][ T5882] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  159.857560][ T5882] usb 5-1: device descriptor read/8, error -71
[  159.966086][ T5882] usb usb5-port1: unable to enumerate USB device
[  160.131706][ T8211] synth uevent: /devices/pci0000:00/0000:00:02.0: unknown uevent action string
[  160.131775][ T8211] e1000e 0000:00:02.0: uevent: failed to send synthetic uevent: -22
[  160.132309][ T8212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.684'.
[  160.176009][ T8212] overlay: filesystem on ./file1 not supported as upperdir
[  161.031094][ T8229] input: syz0 as /devices/virtual/input/input59
[  161.355311][ T5735] Bluetooth: hci1: command 0x0c1a tx timeout
[  161.716786][ T8236] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800
[  161.788538][ T8241] vcan1: entered promiscuous mode
[  161.788623][ T8241] vcan1: entered allmulticast mode
[  162.029240][ T8254] FAULT_INJECTION: forcing a failure.
[  162.029240][ T8254] name failslab, interval 1, probability 0, space 0, times 0
[  162.029262][ T8254] CPU: 3 UID: 0 PID: 8254 Comm: syz.2.699 Not tainted syzkaller #0 PREEMPT(full) 
[  162.029276][ T8254] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  162.029283][ T8254] Call Trace:
[  162.029287][ T8254]  <TASK>
[  162.029292][ T8254]  dump_stack_lvl+0x100/0x190
[  162.029339][ T8254]  should_fail_ex.cold+0x5/0xa
[  162.029355][ T8254]  should_failslab+0xc2/0x120
[  162.029371][ T8254]  kmem_cache_alloc_noprof+0x92/0x6a0
[  162.029383][ T8254]  ? __pfx_vma_merge_new_range+0x10/0x10
[  162.029401][ T8254]  ? vm_area_dup+0x27/0x9d0
[  162.029420][ T8254]  vm_area_dup+0x27/0x9d0
[  162.029437][ T8254]  copy_vma+0x73e/0x1100
[  162.029449][ T8254]  ? __pfx_copy_vma+0x10/0x10
[  162.029463][ T8254]  ? rcu_is_watching+0x13/0xc0
[  162.029480][ T8254]  ? __pfx_do_vmi_align_munmap+0x10/0x10
[  162.029496][ T8254]  ? find_held_lock+0x2b/0x80
[  162.029507][ T8254]  ? finish_task_switch.isra.0+0x2bd/0x10d0
[  162.029528][ T8254]  copy_vma_and_data+0x23f/0x780
[  162.029540][ T8254]  ? __pfx_copy_vma_and_data+0x10/0x10
[  162.029554][ T8254]  ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[  162.029566][ T8254]  ? rcu_is_watching+0x13/0xc0
[  162.029576][ T8254]  ? percpu_counter_add_batch+0xb9/0x230
[  162.029593][ T8254]  ? __vm_enough_memory+0x184/0x390
[  162.029608][ T8254]  move_vma+0x4ef/0x1280
[  162.029620][ T8254]  ? __pfx_move_vma+0x10/0x10
[  162.029629][ T8254]  ? cap_mmap_addr+0x4b/0x120
[  162.029642][ T8254]  ? security_mmap_addr+0x71/0x1e0
[  162.029658][ T8254]  ? __get_unmapped_area+0x255/0x3e0
[  162.029673][ T8254]  ? vrm_set_new_addr+0x1f5/0x2a0
[  162.029691][ T8254]  mremap_to+0x234/0x4c0
[  162.029701][ T8254]  ? __pfx_mremap_to+0x10/0x10
[  162.029715][ T8254]  __do_sys_mremap+0xc70/0x1780
[  162.029725][ T8254]  ? futex_wait+0x11e/0x370
[  162.029740][ T8254]  ? __pfx_futex_wait+0x10/0x10
[  162.029755][ T8254]  ? __pfx___do_sys_mremap+0x10/0x10
[  162.029766][ T8254]  ? percpu_counter_add_batch+0xb9/0x230
[  162.029784][ T8254]  ? do_futex+0x190/0x440
[  162.029795][ T8254]  ? __pfx_do_futex+0x10/0x10
[  162.029805][ T8254]  ? fd_install+0x223/0x580
[  162.029821][ T8254]  ? xfd_validate_state+0x129/0x190
[  162.029843][ T8254]  __do_fast_syscall_32+0x13a/0x8b0
[  162.029862][ T8254]  do_fast_syscall_32+0x32/0x70
[  162.029878][ T8254]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  162.029893][ T8254] RIP: 0023:0xf702efec
[  162.029906][ T8254] Code: Unable to access opcode bytes at 0xf702efc2.
[  162.029911][ T8254] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000a3
[  162.029924][ T8254] RAX: ffffffffffffffda RBX: 0000000080001000 RCX: 0000000000003000
[  162.029931][ T8254] RDX: 0000000000003021 RSI: 0000000000000003 RDI: 0000000080ffd000
[  162.029943][ T8254] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  162.029950][ T8254] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  162.029956][ T8254] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  162.029971][ T8254]  </TASK>
[  162.054806][ T5733] Bluetooth: hci4: status 0x01
[  162.056476][ T5733] Bluetooth: hci4: unexpected event for opcode 0x0c03
[  162.056538][ T5733] Bluetooth: hci4: unexpected cc 0x1003 length: 1 < 9
[  162.057283][ T5735] Bluetooth: hci4: Opcode 0x1003 failed: -38
[  162.086659][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.700'.
[  162.087158][ T8256] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.435276][ T7828] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  162.606773][ T7828] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  162.607654][ T7828] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  162.607688][ T7828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.611845][ T7828] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected
[  162.612071][ T7828] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81
[  162.612117][ T7828] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1
[  162.613040][ T7828] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84
[  162.613099][ T7828] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2
[  162.625451][ T7828] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  162.629818][ T7828] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88
[  162.629878][ T7828] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6
[  162.632648][ T7828] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  163.165166][   T73] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  163.293565][ T8278] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  163.315944][   T73] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[  163.316964][   T73] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  163.316999][   T73] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  163.318989][   T73] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.319007][   T73] usb 5-1: Product: syz
[  163.319019][   T73] usb 5-1: Manufacturer: syz
[  163.319029][   T73] usb 5-1: SerialNumber: syz
[  163.625417][   T73] usb 6-1: USB disconnect, device number 31
[  163.634165][   T73] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  163.635163][ T5827] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  163.644801][   T73] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  163.645209][   T73] keyspan 6-1:1.0: device disconnected
[  163.786302][ T8293] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[  163.786701][ T5827] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  163.787807][ T5827] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  163.787826][ T5827] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  163.787854][ T5827] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.814670][ T8293] syz.0.706 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  163.998133][ T7828] usb 7-1: USB disconnect, device number 22
[  164.638629][ T5827] usb 5-1: USB disconnect, device number 34
[  164.693203][ T8329] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint
[  164.710670][ T8329] pci 0000:00:00.0: Adding to iommu group 0
[  164.787608][   T43] kauditd_printk_skb: 1964 callbacks suppressed
[  164.787748][   T43] audit: type=1326 audit(2000000034.621:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.2.718" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000
[  164.787780][   T43] audit: type=1326 audit(2000000034.621:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.2.718" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000
[  164.788874][   T43] audit: type=1326 audit(2000000034.621:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.2.718" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702efec code=0x7ffc0000
[  164.789509][   T43] audit: type=1326 audit(2000000034.621:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.2.718" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000
[  164.789553][   T43] audit: type=1326 audit(2000000034.621:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.2.718" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000
[  164.789824][   T43] audit: type=1326 audit(2000000034.621:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.2.718" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000
[  164.789912][   T43] audit: type=1326 audit(2000000034.621:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.2.718" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000
[  164.789987][   T43] audit: type=1326 audit(2000000034.621:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.2.718" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000
[  164.790131][   T43] audit: type=1326 audit(2000000034.621:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.2.718" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000
[  164.790217][   T43] audit: type=1326 audit(2000000034.621:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.2.718" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000
[  165.293085][ T8358] netlink: 'syz.0.729': attribute type 1 has an invalid length.
[  165.305845][ T8358] bond1: entered promiscuous mode
[  165.306540][ T8358] 8021q: adding VLAN 0 to HW filter on device bond1
[  165.365999][ T5827] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  165.522750][ T8371] /dev/sr0: Can't open blockdev
[  165.525693][ T5827] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  165.526508][ T5827] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  165.526520][ T5827] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  165.526536][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.731847][ T7828] usb 6-1: USB disconnect, device number 32
[  166.167924][ T8384] input: syz0 as /devices/virtual/input/input63
[  166.584981][ T5827] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  166.714935][ T5827] usb 6-1: device descriptor read/64, error -71
[  166.955253][ T5827] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  167.097198][ T5827] usb 6-1: device descriptor read/64, error -71
[  167.159000][ T8399] input: syz0 as /devices/virtual/input/input64
[  167.206197][ T5827] usb usb6-port1: attempt power cycle
[  167.392407][ T8417] input: syz0 as /devices/virtual/input/input65
[  167.564982][ T5827] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  167.585477][ T5827] usb 6-1: device descriptor read/8, error -71
[  167.824915][ T5827] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  167.845618][ T5827] usb 6-1: device descriptor read/8, error -71
[  167.955316][ T5827] usb usb6-port1: unable to enumerate USB device
[  168.162342][ T8423] input: syz0 as /devices/virtual/input/input66
[  168.168295][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  168.194931][ T8425] input: syz0 as /devices/virtual/input/input67
[  168.351514][ T8432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.752'.
[  168.578933][ T8444] input: syz0 as /devices/virtual/input/input68
[  168.682027][ T8445] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[  168.682046][ T8445] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  168.684010][ T8445] vhci_hcd vhci_hcd.0: Device attached
[  168.855688][ T8445] rdma_rxe: rxe_newlink: failed to add wg2
[  168.964837][ T5882] usb 38-1: SetAddress Request (2) to port 0
[  168.964873][ T5882] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd
[  169.288439][ T8447] vhci_hcd: connection reset by peer
[  169.288605][   T13] vhci_hcd vhci_hcd.0: stop threads
[  169.288619][   T13] vhci_hcd vhci_hcd.0: release socket
[  169.288644][   T13] vhci_hcd vhci_hcd.0: disconnect device
[  169.453498][ T8450] input: syz0 as /devices/virtual/input/input69
[  169.774824][ T7828] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  169.945749][ T7828] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[  169.946928][ T7828] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  169.946944][ T7828] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  169.948990][ T7828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.949003][ T7828] usb 7-1: Product: syz
[  169.949010][ T7828] usb 7-1: Manufacturer: syz
[  169.949018][ T7828] usb 7-1: SerialNumber: syz
[  169.953515][ T8453] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  169.953568][ T8453] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  169.955571][ T7828] usbserial_generic 7-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  169.955588][ T7828] usbserial_generic 7-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  169.955612][ T7828] usbserial_generic 7-1:1.0: generic converter detected
[  169.964271][ T7828] usb 7-1: generic converter now attached to ttyUSB0
[  170.168923][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  170.168979][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  170.169078][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  170.169113][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  170.169356][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  170.169389][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  170.169538][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  170.169577][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  170.169698][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  170.169731][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  170.169943][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  170.169976][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  170.170110][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  170.170287][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  170.170455][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  170.170492][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  170.170612][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  170.170658][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  170.170880][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  170.170914][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  170.171043][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  170.194766][ T5826] usb 7-1: USB disconnect, device number 23
[  170.201579][ T5826] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[  170.202945][ T5826] usbserial_generic 7-1:1.0: device disconnected
[  170.516959][ T5806] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  170.679191][ T8468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.763'.
[  170.685329][ T5806] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  170.686240][ T5806] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  170.686255][ T5806] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  170.686272][ T5806] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.701237][ T8468] overlay: filesystem on ./file1 not supported as upperdir
[  170.760186][ T8470] input: syz0 as /devices/virtual/input/input70
[  170.986623][ T5806] usb 5-1: USB disconnect, device number 35
[  171.423211][ T8475] FAULT_INJECTION: forcing a failure.
[  171.423211][ T8475] name failslab, interval 1, probability 0, space 0, times 0
[  171.423233][ T8475] CPU: 3 UID: 0 PID: 8475 Comm: syz.2.765 Not tainted syzkaller #0 PREEMPT(full) 
[  171.423248][ T8475] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  171.423255][ T8475] Call Trace:
[  171.423260][ T8475]  <TASK>
[  171.423265][ T8475]  dump_stack_lvl+0x100/0x190
[  171.423284][ T8475]  should_fail_ex.cold+0x5/0xa
[  171.423301][ T8475]  should_failslab+0xc2/0x120
[  171.423318][ T8475]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[  171.423332][ T8475]  ? __d_alloc+0x35/0xa50
[  171.423348][ T8475]  __d_alloc+0x35/0xa50
[  171.423365][ T8475]  d_alloc+0x4a/0x1e0
[  171.423380][ T8475]  lookup_one_qstr_excl+0x171/0x250
[  171.423397][ T8475]  start_dirop+0x59/0xb0
[  171.423409][ T8475]  simple_start_creating+0xf9/0x110
[  171.423422][ T8475]  ? __pfx_simple_start_creating+0x10/0x10
[  171.423435][ T8475]  ? mntput+0x70/0xa0
[  171.423446][ T8475]  ? simple_pin_fs+0xa3/0x190
[  171.423457][ T8475]  debugfs_start_creating.part.0+0x9f/0x180
[  171.423473][ T8475]  __debugfs_create_file+0x86/0x4d0
[  171.423489][ T8475]  debugfs_create_file_full+0x41/0x60
[  171.423504][ T8475]  kvm_dev_ioctl+0x1560/0x1b50
[  171.423520][ T8475]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  171.423536][ T8475]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  171.423547][ T8475]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  171.423566][ T8475]  __do_fast_syscall_32+0x13a/0x8b0
[  171.423586][ T8475]  do_fast_syscall_32+0x32/0x70
[  171.423602][ T8475]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  171.423616][ T8475] RIP: 0023:0xf702efec
[  171.423629][ T8475] Code: Unable to access opcode bytes at 0xf702efc2.
[  171.423634][ T8475] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  171.423646][ T8475] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000ae01
[  171.423654][ T8475] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  171.423662][ T8475] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  171.423668][ T8475] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  171.423675][ T8475] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  171.423688][ T8475]  </TASK>
[  171.968837][ T8491] input: syz0 as /devices/virtual/input/input71
[  172.754610][ T5826] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  172.818434][ T8496] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.905015][ T5826] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  172.905843][ T5826] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  172.905863][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.905881][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  172.905891][ T5826] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  172.906642][ T5826] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  172.906654][ T5826] usb 5-1: Manufacturer: syz
[  172.907872][ T5826] usb 5-1: config 0 descriptor??
[  173.024469][ T8500] syzkaller1: entered promiscuous mode
[  173.024489][ T8500] syzkaller1: entered allmulticast mode
[  173.309539][ T8505] netlink: 20 bytes leftover after parsing attributes in process `syz.1.774'.
[  173.481812][ T8494] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.763102][ T5826] usbhid 5-1:0.0: can't add hid device: -71
[  173.763160][ T5826] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  173.766484][ T5826] usb 5-1: USB disconnect, device number 36
[  173.994775][ T5882] usb 38-1: device descriptor read/8, error -110
[  174.058186][   T43] kauditd_printk_skb: 29 callbacks suppressed
[  174.058198][   T43] audit: type=1326 audit(2000000043.892:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8509 comm="syz.1.775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  174.058307][   T43] audit: type=1326 audit(2000000043.892:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8509 comm="syz.1.775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  174.059439][   T43] audit: type=1326 audit(2000000043.892:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8509 comm="syz.1.775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  174.059462][   T43] audit: type=1326 audit(2000000043.892:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8509 comm="syz.1.775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  174.059481][   T43] audit: type=1326 audit(2000000043.892:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8509 comm="syz.1.775" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707efec code=0x7ffc0000
[  174.059500][   T43] audit: type=1326 audit(2000000043.892:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8509 comm="syz.1.775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  174.059519][   T43] audit: type=1326 audit(2000000043.892:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8509 comm="syz.1.775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  174.059822][   T43] audit: type=1326 audit(2000000043.892:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8509 comm="syz.1.775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  174.059921][   T43] audit: type=1326 audit(2000000043.892:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8509 comm="syz.1.775" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707efec code=0x7ffc0000
[  174.060068][   T43] audit: type=1326 audit(2000000043.892:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8509 comm="syz.1.775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  174.244049][ T8513] input: syz0 as /devices/virtual/input/input72
[  174.397714][ T5882] usb usb38-port1: attempt power cycle
[  174.479163][ T7828] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  174.776308][ T7828] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  174.817120][ T7828] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  174.817138][ T7828] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  174.817157][ T7828] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.252020][ T8524] ima: policy update failed
[  175.331902][ T5882] usb usb38-port1: unable to enumerate USB device
[  175.578127][ T5826] usb 7-1: USB disconnect, device number 24
[  176.103549][ T8527] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  176.152126][ T8535] input: syz0 as /devices/virtual/input/input73
[  176.187802][ T8527] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  176.187865][ T8527] overlayfs: failed to look up (tracing) for ino (-66)
[  176.417910][ T8542] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint
[  176.451713][ T8542] pci 0000:00:00.0: Adding to iommu group 0
[  176.811196][ T8549] cgroup: fork rejected by pids controller in /syz1
[  177.879614][ T8601] 9p: Bad value for 'rfdno'
[  178.296797][ T8610] ima: policy update failed
[  178.598843][ T8613] FAULT_INJECTION: forcing a failure.
[  178.598843][ T8613] name failslab, interval 1, probability 0, space 0, times 0
[  178.598875][ T8613] CPU: 1 UID: 0 PID: 8613 Comm: syz.1.793 Not tainted syzkaller #0 PREEMPT(full) 
[  178.598899][ T8613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  178.598911][ T8613] Call Trace:
[  178.598918][ T8613]  <TASK>
[  178.598926][ T8613]  dump_stack_lvl+0x100/0x190
[  178.598959][ T8613]  should_fail_ex.cold+0x5/0xa
[  178.598984][ T8613]  should_failslab+0xc2/0x120
[  178.599009][ T8613]  __kmalloc_cache_noprof+0x91/0x6d0
[  178.599039][ T8613]  ? kvm_dev_ioctl+0x13ee/0x1b50
[  178.599064][ T8613]  kvm_dev_ioctl+0x13ee/0x1b50
[  178.599091][ T8613]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  178.599121][ T8613]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  178.599142][ T8613]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  178.599175][ T8613]  __do_fast_syscall_32+0x13a/0x8b0
[  178.599208][ T8613]  do_fast_syscall_32+0x32/0x70
[  178.599238][ T8613]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  178.599263][ T8613] RIP: 0023:0xf707efec
[  178.599284][ T8613] Code: Unable to access opcode bytes at 0xf707efc2.
[  178.599292][ T8613] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  178.599310][ T8613] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000ae01
[  178.599321][ T8613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  178.599332][ T8613] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  178.599343][ T8613] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  178.599354][ T8613] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  178.599379][ T8613]  </TASK>
[  179.008324][ T8620] IPVS: lc: FWM 3 0x00000003 - no destination available
[  180.222206][ T8662] netlink: 'syz.1.802': attribute type 1 has an invalid length.
[  180.238215][ T8662] bond3: entered promiscuous mode
[  180.238471][ T8662] 8021q: adding VLAN 0 to HW filter on device bond3
[  180.433366][ T8662] 8021q: adding VLAN 0 to HW filter on device bond3
[  180.438864][ T8662] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  180.439016][ T8662] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  180.514988][ T8662] bond3: (slave ip6gre1): making interface the new active one
[  180.515067][ T8662] ip6gre1: entered promiscuous mode
[  180.522631][ T8662] bond3: (slave ip6gre1): Enslaving as an active interface with an up link
[  180.874563][   T68] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  180.891831][ T8684] /dev/sg0: Can't lookup blockdev
[  181.024716][   T68] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  181.025653][   T68] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  181.025689][   T68] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  181.025722][   T68] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.068896][ T5827] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER)
[  181.073277][ T5827] libceph: mon0 (1)[c::]:6789 socket error on write
[  181.085948][ T8695] ceph: No mds server is up or the cluster is laggy
[  181.181888][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.813'.
[  181.216950][ T8705] syzkaller0: entered promiscuous mode
[  181.216964][ T8705] syzkaller0: entered allmulticast mode
[  181.238572][  T853] usb 6-1: USB disconnect, device number 37
[  181.604165][ T5827] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  181.784971][ T5827] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  181.786034][ T5827] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  181.786056][ T5827] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  181.786085][ T5827] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.086974][  T853] usb 7-1: USB disconnect, device number 25
[  182.365526][ T8734] input: syz0 as /devices/virtual/input/input74
[  182.664115][   T10] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  182.814988][   T10] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  182.815950][   T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  182.815970][   T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  182.815995][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.156380][   T73] usb 6-1: USB disconnect, device number 38
[  183.773853][ T8745] ahci 0000:00:1f.2: Using 48-bit DMA addresses
[  184.034140][ T5827] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  184.184775][ T5827] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  184.185646][ T5827] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  184.185684][ T5827] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  184.185717][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.224100][  T853] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  184.374038][  T853] usb 5-1: Using ep0 maxpacket: 8
[  184.377186][  T853] usb 5-1: unable to get BOS descriptor or descriptor too short
[  184.377236][  T853] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[  184.377254][  T853] usb 5-1: no configurations
[  184.377260][  T853] usb 5-1: can't read configurations, error -22
[  184.401420][ T5827] usb 6-1: USB disconnect, device number 39
[  184.857768][ T8768] input: syz0 as /devices/virtual/input/input75
[  184.871029][ T8769] input: syz0 as /devices/virtual/input/input76
[  184.982544][ T8774] batman_adv: batadv0: Interface deactivated: macvlan2
[  184.982567][ T8774] batman_adv: batadv0: Removing interface: macvlan2
[  184.983605][ T8773] input: syz0 as /devices/virtual/input/input77
[  184.989037][ T8774] batman_adv: batadv0: Interface deactivated: syzkaller0
[  184.989059][ T8774] batman_adv: batadv0: Removing interface: syzkaller0
[  185.031707][   T43] kauditd_printk_skb: 543 callbacks suppressed
[  185.031721][   T43] audit: type=1326 audit(2000000054.863:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8775 comm="syz.1.836" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  185.031821][   T43] audit: type=1326 audit(2000000054.863:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8775 comm="syz.1.836" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  185.032250][   T43] audit: type=1326 audit(2000000054.863:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8775 comm="syz.1.836" exe="/syz-executor" sig=0 arch=40000003 syscall=76 compat=1 ip=0xf707efec code=0x7ffc0000
[  185.032354][   T43] audit: type=1326 audit(2000000054.863:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8775 comm="syz.1.836" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  185.032462][   T43] audit: type=1326 audit(2000000054.863:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8775 comm="syz.1.836" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  185.033679][   T43] audit: type=1326 audit(2000000054.863:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8775 comm="syz.1.836" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf707efec code=0x7ffc0000
[  185.034340][   T43] audit: type=1326 audit(2000000054.863:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8775 comm="syz.1.836" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  185.034440][   T43] audit: type=1326 audit(2000000054.873:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8775 comm="syz.1.836" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  185.034908][   T43] audit: type=1326 audit(2000000054.873:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8775 comm="syz.1.836" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707efec code=0x7ffc0000
[  185.035208][   T43] audit: type=1326 audit(2000000054.873:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8775 comm="syz.1.836" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  185.566723][ T8799] openvswitch: netlink: Flow key attribute not present in set flow.
[  186.086609][ T8807] block nbd3: NBD_DISCONNECT
[  186.086876][ T8807] block nbd3: Send disconnect failed -32
[  186.100411][ T8808] nbd3: detected capacity change from 0 to 18
[  186.101436][ T8806] wg2 speed is unknown, defaulting to 1000
[  186.106043][ T5108] block nbd3: Send control failed (result -32)
[  186.106082][ T5108] block nbd3: Request send failed, requeueing
[  186.106094][ T5108] block nbd3: Disconnected due to user request.
[  186.106375][ T5108] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  186.106419][ T5108] Buffer I/O error on dev nbd3, logical block 0, async page read
[  186.109927][ T5108] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  186.109950][ T5108] Buffer I/O error on dev nbd3, logical block 0, async page read
[  186.111783][ T5108] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  186.111803][ T5108] Buffer I/O error on dev nbd3, logical block 0, async page read
[  186.111882][ T5108] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  186.111898][ T5108] Buffer I/O error on dev nbd3, logical block 0, async page read
[  186.111959][ T5108] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  186.111975][ T5108] Buffer I/O error on dev nbd3, logical block 0, async page read
[  186.112048][ T5108] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  186.112064][ T5108] Buffer I/O error on dev nbd3, logical block 0, async page read
[  186.112194][ T5108] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  186.112210][ T5108] Buffer I/O error on dev nbd3, logical block 0, async page read
[  186.112278][ T5108] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  186.112294][ T5108] Buffer I/O error on dev nbd3, logical block 0, async page read
[  186.112313][ T6316] ldm_validate_partition_table(): Disk read failed.
[  186.112363][ T5108] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  186.112379][ T5108] Buffer I/O error on dev nbd3, logical block 0, async page read
[  186.112436][ T5108] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  186.112451][ T5108] Buffer I/O error on dev nbd3, logical block 0, async page read
[  186.112644][ T6316] Dev nbd3: unable to read RDB block 0
[  186.112814][ T6316]  nbd3: unable to read partition table
[  186.112933][ T6316] nbd3: partition table beyond EOD, truncated
[  186.120222][ T6316] ldm_validate_partition_table(): Disk read failed.
[  186.120466][ T6316] Dev nbd3: unable to read RDB block 0
[  186.120606][ T6316]  nbd3: unable to read partition table
[  186.120692][ T6316] nbd3: partition table beyond EOD, truncated
[  186.216672][ T8806] lo speed is unknown, defaulting to 1000
[  186.315431][   T68] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  186.464323][   T68] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  186.465319][   T68] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  186.465335][   T68] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  186.465361][   T68] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.543289][ T8817] futex_wake_op: syz.2.846 tries to shift op by 144; fix this program
[  186.584272][ T8820] input: syz0 as /devices/virtual/input/input78
[  186.800637][ T5826] usb 5-1: USB disconnect, device number 39
[  187.833104][ T8846] netlink: 20 bytes leftover after parsing attributes in process `syz.2.857'.
[  188.219515][ T8853] netlink: 'syz.0.858': attribute type 10 has an invalid length.
[  188.316825][ T8853] team0 (unregistering): Port device team_slave_0 removed
[  188.372853][ T8853] team0 (unregistering): Port device team_slave_1 removed
[  189.050755][ T8875] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12
[  189.323519][ T8884] syzkaller1: entered promiscuous mode
[  189.323540][ T8884] syzkaller1: entered allmulticast mode
[  190.090191][ T8900] FAULT_INJECTION: forcing a failure.
[  190.090191][ T8900] name failslab, interval 1, probability 0, space 0, times 0
[  190.090214][ T8900] CPU: 0 UID: 0 PID: 8900 Comm: syz.1.873 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  190.090231][ T8900] Tainted: [L]=SOFTLOCKUP
[  190.090235][ T8900] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  190.090242][ T8900] Call Trace:
[  190.090246][ T8900]  <TASK>
[  190.090251][ T8900]  dump_stack_lvl+0x100/0x190
[  190.090272][ T8900]  should_fail_ex.cold+0x5/0xa
[  190.090288][ T8900]  should_failslab+0xc2/0x120
[  190.090338][ T8900]  kmem_cache_alloc_noprof+0x92/0x6a0
[  190.090353][ T8900]  ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  190.090373][ T8900]  __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  190.090393][ T8900]  mmu_topup_memory_caches+0x25/0x170
[  190.090406][ T8900]  kvm_mmu_load+0xe8/0x2580
[  190.090426][ T8900]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[  190.090443][ T8900]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[  190.090461][ T8900]  ? __pfx_kvm_mmu_load+0x10/0x10
[  190.090480][ T8900]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[  190.090498][ T8900]  ? kvm_check_and_inject_events+0x896/0x1050
[  190.090520][ T8900]  vcpu_run+0x395d/0x5e80
[  190.090559][ T8900]  ? vmx_vcpu_load_vmcs+0x21d/0x760
[  190.090580][ T8900]  ? __pfx_vcpu_run+0x10/0x10
[  190.090613][ T8900]  ? lock_acquire+0x1d1/0x380
[  190.090630][ T8900]  ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0
[  190.090645][ T8900]  ? fpu_swap_kvm_fpstate+0x217/0x460
[  190.090659][ T8900]  ? __local_bh_enable_ip+0xa5/0x120
[  190.090680][ T8900]  ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0
[  190.090693][ T8900]  kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0
[  190.090710][ T8900]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  190.090723][ T8900]  ? lock_acquire+0x1d1/0x380
[  190.090739][ T8900]  ? do_raw_write_lock+0x11e/0x260
[  190.090750][ T8900]  ? find_held_lock+0x2b/0x80
[  190.090762][ T8900]  ? kvm_vcpu_ioctl+0x1531/0x1700
[  190.090776][ T8900]  ? kvm_vcpu_ioctl+0x1531/0x1700
[  190.090799][ T8900]  kvm_vcpu_ioctl+0x730/0x1700
[  190.090815][ T8900]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  190.090830][ T8900]  ? tomoyo_path_number_perm+0x188/0x580
[  190.090850][ T8900]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  190.090868][ T8900]  ? get_pid_task+0x106/0x250
[  190.090884][ T8900]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  190.090902][ T8900]  ? do_vfs_ioctl+0x226/0x13e0
[  190.090921][ T8900]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  190.090943][ T8900]  ? __fget_files+0x34/0x3d0
[  190.090974][ T8900]  kvm_vcpu_compat_ioctl+0x20f/0x3c0
[  190.090990][ T8900]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  190.091005][ T8900]  ? __fget_files+0x21f/0x3d0
[  190.091021][ T8900]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  190.091037][ T8900]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  190.091058][ T8900]  __do_fast_syscall_32+0x13a/0x8b0
[  190.091077][ T8900]  ? lockdep_hardirqs_on+0x7d/0x110
[  190.091095][ T8900]  do_fast_syscall_32+0x32/0x70
[  190.091114][ T8900]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  190.091129][ T8900] RIP: 0023:0xf707efec
[  190.091143][ T8900] Code: Unable to access opcode bytes at 0xf707efc2.
[  190.091149][ T8900] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  190.091161][ T8900] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80
[  190.091168][ T8900] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  190.091175][ T8900] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  190.091182][ T8900] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  190.091189][ T8900] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  190.091206][ T8900]  </TASK>
[  190.227576][ T8903] netlink: 'syz.1.874': attribute type 5 has an invalid length.
[  190.227597][ T8903] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.874'.
[  190.428195][ T8903] kAFS: No cell specified
[  190.763620][ T5882] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  190.823675][  T853] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  190.913613][ T5882] usb 6-1: Using ep0 maxpacket: 16
[  190.914544][ T5882] usb 6-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00
[  190.915730][ T5882] usb 6-1: config 0 interface 0 has no altsetting 0
[  190.915760][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.918283][ T5882] usb 6-1: config 0 descriptor??
[  190.984350][  T853] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  190.985499][  T853] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  190.985532][  T853] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.200283][ T7828] usb 7-1: USB disconnect, device number 26
[  191.553288][ T5882] input: HID 258a:6a88 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:258A:6A88.0004/input/input79
[  191.621465][ T8933] batman_adv: batadv0: Adding interface: syzkaller0
[  191.621482][ T8933] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem.
[  191.621508][ T8933] batman_adv: batadv0: Interface activated: syzkaller0
[  191.626711][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.882'.
[  191.626847][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.882'.
[  191.635292][ T8932] batman_adv: batadv0: Interface deactivated: syzkaller0
[  191.656819][ T8932] batman_adv: batadv0: Removing interface: syzkaller0
[  192.028037][ T8940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.884'.
[  192.354227][ T5882] itetech 0003:258A:6A88.0004: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.1-1/input0
[  192.356963][ T5882] usb 6-1: USB disconnect, device number 40
[  192.469113][ T8956] FAULT_INJECTION: forcing a failure.
[  192.469113][ T8956] name failslab, interval 1, probability 0, space 0, times 0
[  192.469146][ T8956] CPU: 0 UID: 0 PID: 8956 Comm: syz.3.888 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  192.469198][ T8956] Tainted: [L]=SOFTLOCKUP
[  192.469205][ T8956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  192.469215][ T8956] Call Trace:
[  192.469221][ T8956]  <TASK>
[  192.469228][ T8956]  dump_stack_lvl+0x100/0x190
[  192.469272][ T8956]  should_fail_ex.cold+0x5/0xa
[  192.469296][ T8956]  should_failslab+0xc2/0x120
[  192.469320][ T8956]  kmem_cache_alloc_noprof+0x92/0x6a0
[  192.469348][ T8956]  ? do_timer_create+0x209/0x1460
[  192.469373][ T8956]  do_timer_create+0x209/0x1460
[  192.469394][ T8956]  ? do_futex+0x190/0x440
[  192.469411][ T8956]  ? __pfx_do_timer_create+0x10/0x10
[  192.469430][ T8956]  ? __pfx_do_futex+0x10/0x10
[  192.469449][ T8956]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  192.469482][ T8956]  __ia32_compat_sys_timer_create+0x193/0x1c0
[  192.469504][ T8956]  ? __pfx___ia32_compat_sys_timer_create+0x10/0x10
[  192.469525][ T8956]  ? xfd_validate_state+0x129/0x190
[  192.469563][ T8956]  __do_fast_syscall_32+0x13a/0x8b0
[  192.469590][ T8956]  ? lockdep_hardirqs_on+0x7d/0x110
[  192.469618][ T8956]  do_fast_syscall_32+0x32/0x70
[  192.469645][ T8956]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  192.469668][ T8956] RIP: 0023:0xf7f44fec
[  192.469687][ T8956] Code: Unable to access opcode bytes at 0xf7f44fc2.
[  192.469695][ T8956] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000103
[  192.469715][ T8956] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000
[  192.469725][ T8956] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  192.469735][ T8956] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  192.469745][ T8956] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  192.469756][ T8956] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  192.469780][ T8956]  </TASK>
[  192.470454][ T8956] syzkaller1: entered promiscuous mode
[  192.470470][ T8956] syzkaller1: entered allmulticast mode
[  192.497351][ T8949] fido_id[8949]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb6/report_descriptor': No such file or directory
[  192.664587][ T8965] binder: 8959:8965 ioctl c0306201 800001c0 returned -14
[  192.902443][ T5742] Bluetooth: hci4: status 0x01
[  192.903670][ T5742] Bluetooth: hci4: unexpected event for opcode 0x0c03
[  192.907316][ T5742] Bluetooth: hci4: unexpected cc 0x1003 length: 1 < 9
[  192.910682][ T5735] Bluetooth: hci4: Opcode 0x1003 failed: -38
[  192.943501][   T42] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  193.117167][   T42] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  193.118012][   T42] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  193.118033][   T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.330356][ T5811] usb 5-1: USB disconnect, device number 40
[  193.517661][ T8962] Bluetooth: hci1: Opcode 0x0c03 failed: -4
[  193.518085][ T8971] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  193.645716][ T8981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.893'.
[  193.645756][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'.
[  193.663589][ T8979] JFS: charset not found
[  193.666763][   T43] kauditd_printk_skb: 60 callbacks suppressed
[  193.666782][   T43] audit: type=1400 audit(2000000063.503:2643): apparmor="STATUS" info="unsupported interface version" error=-93 profile="unconfined" pid=8977 comm="syz.3.894" offset=16
[  193.754951][ T1438] ieee802154 phy0 wpan0: encryption failed: -22
[  193.916704][ T5882] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  193.989992][   T43] audit: type=1800 audit(2000000063.823:2644): pid=8986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.896" name="file0" dev="overlay" ino=1253 res=0 errno=0
[  194.083679][ T5882] usb 6-1: Using ep0 maxpacket: 32
[  194.087343][ T5882] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  194.090596][ T8992] netlink: 'syz.2.897': attribute type 10 has an invalid length.
[  194.093830][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.154042][ T5882] usb 6-1: config 0 descriptor??
[  194.205073][ T8992] team0 (unregistering): Port device team_slave_0 removed
[  194.214850][ T5882] as10x_usb: device has been detected
[  194.217579][ T5882] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  194.231720][ T5882] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  194.263497][ T5811] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  194.279500][ T8992] team0 (unregistering): Port device team_slave_1 removed
[  194.414802][ T5811] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  194.415964][ T5811] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  194.415996][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.435603][ T5882] as10x_usb: error during firmware upload part1
[  194.437347][ T5882] Registered device nBox DVB-T Dongle
[  194.452251][ T5882] usb 6-1: USB disconnect, device number 41
[  194.540771][ T5882] Unregistered device nBox DVB-T Dongle
[  194.544740][ T5882] as10x_usb: device has been disconnected
[  194.629840][ T5811] usb 5-1: USB disconnect, device number 41
[  195.646989][ T5742] Bluetooth: hci4: status 0x01
[  195.649965][ T5742] Bluetooth: hci4: unexpected event for opcode 0x0c03
[  195.654288][ T5742] Bluetooth: hci4: unexpected cc 0x1003 length: 1 < 9
[  195.655927][ T5735] Bluetooth: hci4: Opcode 0x1003 failed: -38
[  196.314143][   T42] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  196.344272][ T9007] Bluetooth: hci1: Opcode 0x0c03 failed: -4
[  196.344681][ T9011] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  196.404177][ T5882] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  196.475826][   T42] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  196.476741][   T42] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  196.476763][   T42] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  196.476777][   T42] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  196.476809][   T42] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  196.478212][   T42] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  196.478230][   T42] usb 6-1: Product: syz
[  196.478242][   T42] usb 6-1: Manufacturer: syz
[  196.503236][   T42] cdc_wdm 6-1:1.0: skipping garbage
[  196.503255][   T42] cdc_wdm 6-1:1.0: skipping garbage
[  196.504565][   T42] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  196.504581][   T42] cdc_wdm 6-1:1.0: Unknown control protocol
[  196.556049][ T5882] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  196.557982][ T5882] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  196.558005][ T5882] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  196.558035][ T5882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.689084][ T9020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.689510][ T9020] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.858154][ T5882] usb 7-1: USB disconnect, device number 27
[  197.407376][ T9038] netlink: 28 bytes leftover after parsing attributes in process `syz.3.907'.
[  198.924330][ T9054] netlink: 32 bytes leftover after parsing attributes in process `syz.0.912'.
[  198.927724][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.912'.
[  198.975730][ T9054] input: syz0 as /devices/virtual/input/input80
[  198.982550][ T9054] binder: BINDER_SET_CONTEXT_MGR already set
[  198.982562][ T9054] binder: 9053:9054 ioctl 4018620d 80000040 returned -16
[  198.982997][ T9054] binder: 9053:9054 unknown command 0
[  198.983011][ T9054] binder: 9053:9054 ioctl c0306201 80000880 returned -22
[  199.311235][ T5827] usb 6-1: USB disconnect, device number 42
[  199.413494][ T9063] openvswitch: netlink: Flow key attribute not present in set flow.
[  199.733109][ T5827] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  199.894320][ T5827] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  199.895426][ T5827] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  199.895446][ T5827] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  199.895473][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.164923][ T5826] usb 6-1: USB disconnect, device number 43
[  201.497917][ T9104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.923'.
[  201.497938][ T9104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.923'.
[  201.776875][ T9100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.921'.
[  203.070874][ T5742] Bluetooth: hci4: status 0x01
[  203.073530][ T5742] Bluetooth: hci4: unexpected event for opcode 0x0c03
[  203.073603][ T5742] Bluetooth: hci4: unexpected cc 0x1003 length: 1 < 9
[  203.080465][ T5735] Bluetooth: hci4: Opcode 0x1003 failed: -38
[  204.104432][ T9114] Bluetooth: hci1: Opcode 0x0c03 failed: -4
[  204.104705][ T9121] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  204.154730][ T9136] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  204.154746][ T9136] overlayfs: failed to set xattr on upper
[  204.154750][ T9136] overlayfs: ...falling back to redirect_dir=nofollow.
[  204.154754][ T9136] overlayfs: ...falling back to index=off.
[  204.154758][ T9136] overlayfs: ...falling back to uuid=null.
[  204.212557][ T9138] input: syz0 as /devices/virtual/input/input81
[  204.552990][   T42] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[  204.704361][   T42] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  204.705390][   T42] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  204.705412][   T42] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  204.705440][   T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.042582][ T5883] usb 7-1: USB disconnect, device number 28
[  207.805617][ T9158] smpboot: CPU 1 is now offline
[  208.168822][   T43] audit: type=1400 audit(2000000078.004:2645): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9169 comm="syz.3.942"
[  208.236789][ T9172] overlay: ./file1 is not a directory
[  208.258696][ T9174] nvme_fabrics: unknown parameter or missing value 'traddr=' in ctrl creation request
[  208.789923][ T9191] batman_adv: batadv0: Adding interface: syzkaller0
[  208.789935][ T9191] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem.
[  208.789952][ T9191] batman_adv: batadv0: Interface activated: syzkaller0
[  208.806549][ T5882] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  208.809722][ T9189] batman_adv: batadv0: Interface deactivated: syzkaller0
[  208.827118][ T9189] batman_adv: batadv0: Removing interface: syzkaller0
[  208.953400][ T5882] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  209.142810][ T5882] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  209.142838][ T5882] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  209.142869][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.694955][ T5882] usb 6-1: USB disconnect, device number 44
[  209.982533][   T42] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  210.133276][   T42] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  210.134267][   T42] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  210.134287][   T42] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  210.134318][   T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.351033][   T42] usb 5-1: USB disconnect, device number 42
[  210.417853][ T9206] nvme_fabrics: unknown parameter or missing value 'traddr=' in ctrl creation request
[  211.360474][   T43] audit: type=1326 audit(2000000081.194:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9211 comm="syz.3.954" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f44fec code=0x0
[  212.052370][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  212.256727][ T5811] usb 5-1: new full-speed USB device number 43 using dummy_hcd
[  212.404895][ T5811] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[  212.408637][ T5811] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  212.430458][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.430558][ T5811] usb 5-1: Product: syz
[  212.430652][ T5811] usb 5-1: Manufacturer: syz
[  212.430719][ T5811] usb 5-1: SerialNumber: syz
[  212.458736][ T5811] usb 5-1: config 0 descriptor??
[  212.489731][ T5811] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state.
[  212.490224][ T5811] dvb-usb: bulk message failed: -22 (3/0)
[  212.528954][ T5811] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  212.532004][ T5811] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device)
[  212.532231][ T5811] usb 5-1: media controller created
[  212.544551][ T5811] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  212.571817][ T5811] dvb-usb: bulk message failed: -22 (6/0)
[  212.572177][ T5811] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device'
[  212.586103][ T5811] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input82
[  212.597437][ T5811] dvb-usb: schedule remote query interval to 150 msecs.
[  212.597767][ T5811] dvb-usb: bulk message failed: -22 (3/0)
[  212.612905][ T5811] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected.
[  212.684456][   T42] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[  212.699127][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.957'.
[  212.748855][ T5811] usb 5-1: USB disconnect, device number 43
[  212.757799][   T35] dvb-usb: bulk message failed: -22 (1/0)
[  212.757999][   T35] dvb-usb: error while querying for an remote control event.
[  212.843244][   T42] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  212.844151][   T42] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  212.844172][   T42] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  212.844200][   T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.948475][ T5811] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected.
[  213.114762][ T7828] usb 7-1: USB disconnect, device number 29
[  213.510621][ T9233] nvme_fabrics: missing parameter 'nqn=%s'
[  215.525451][ T9263] netlink: 64 bytes leftover after parsing attributes in process `syz.2.971'.
[  215.535300][ T9264] nvme_fabrics: missing parameter 'nqn=%s'
[  215.587756][ T9268] tipc: New replicast peer: 255.255.255.255
[  215.588151][ T9268] tipc: Enabled bearer <udp:syz2>, priority 10
[  216.551459][ T9291] input: syz0 as /devices/virtual/input/input83
[  217.463977][ T9304] nvme_fabrics: missing parameter 'nqn=%s'
[  217.693614][ T9309] tmpfs: Unknown parameter '0x0000000000000003'
[  217.876412][ T9311] syzkaller0: entered promiscuous mode
[  217.876429][ T9311] syzkaller0: entered allmulticast mode
[  217.999070][ T9313] FAULT_INJECTION: forcing a failure.
[  217.999070][ T9313] name failslab, interval 1, probability 0, space 0, times 0
[  217.999092][ T9313] CPU: 0 UID: 0 PID: 9313 Comm: syz.0.986 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  217.999107][ T9313] Tainted: [L]=SOFTLOCKUP
[  217.999112][ T9313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  217.999119][ T9313] Call Trace:
[  217.999123][ T9313]  <TASK>
[  217.999128][ T9313]  dump_stack_lvl+0x100/0x190
[  217.999151][ T9313]  should_fail_ex.cold+0x5/0xa
[  217.999166][ T9313]  should_failslab+0xc2/0x120
[  217.999182][ T9313]  __kmalloc_cache_node_noprof+0x94/0x720
[  217.999196][ T9313]  ? kfree+0x22b/0x6d0
[  217.999212][ T9313]  ? blk_mq_init_tags+0x8c/0x300
[  217.999231][ T9313]  blk_mq_init_tags+0x8c/0x300
[  217.999249][ T9313]  blk_mq_alloc_map_and_rqs+0x244/0xe30
[  217.999268][ T9313]  ? blk_mq_update_queue_map+0x227/0x3a0
[  217.999280][ T9313]  blk_mq_alloc_tag_set+0x848/0x1330
[  217.999301][ T9313]  loop_add+0x3b7/0xb60
[  217.999313][ T9313]  ? __pfx_loop_add+0x10/0x10
[  217.999332][ T9313]  ? __fget_files+0x34/0x3d0
[  217.999345][ T9313]  ? find_held_lock+0x2b/0x80
[  217.999356][ T9313]  ? __fget_files+0x215/0x3d0
[  217.999369][ T9313]  loop_control_ioctl+0xae/0x620
[  217.999382][ T9313]  ? __pfx_loop_control_ioctl+0x10/0x10
[  217.999397][ T9313]  ? __pfx_loop_control_ioctl+0x10/0x10
[  217.999410][ T9313]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  217.999429][ T9313]  __do_fast_syscall_32+0x13a/0x8b0
[  217.999445][ T9313]  ? lockdep_hardirqs_on+0x7d/0x110
[  217.999463][ T9313]  do_fast_syscall_32+0x32/0x70
[  217.999481][ T9313]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  217.999494][ T9313] RIP: 0023:0xf6fdefec
[  217.999508][ T9313] Code: Unable to access opcode bytes at 0xf6fdefc2.
[  217.999513][ T9313] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  217.999525][ T9313] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000004c80
[  217.999533][ T9313] RDX: 00000000ffffffe4 RSI: 0000000000000000 RDI: 0000000000000000
[  217.999540][ T9313] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  217.999546][ T9313] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  217.999552][ T9313] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  217.999594][ T9313]  </TASK>
[  217.999689][ T9313] blk-mq: reduced tag depth (128 -> 64)
[  218.854291][ T9326] nvme_fabrics: missing parameter 'nqn=%s'
[  219.534050][ T9346] input: syz0 as /devices/virtual/input/input85
[  219.572093][   T42] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  219.723447][   T42] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  219.724516][   T42] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  219.724536][   T42] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  219.724568][   T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.063444][   T42] usb 6-1: USB disconnect, device number 45
[  220.899643][   T43] audit: type=1326 audit(2000000090.735:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9351 comm="syz.1.999" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  220.899717][   T43] audit: type=1326 audit(2000000090.735:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9351 comm="syz.1.999" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  220.919841][   T43] audit: type=1326 audit(2000000090.755:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9351 comm="syz.1.999" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf707efec code=0x7ffc0000
[  221.105233][   T43] audit: type=1326 audit(2000000090.945:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9351 comm="syz.1.999" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  221.105279][   T43] audit: type=1326 audit(2000000090.945:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9351 comm="syz.1.999" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  221.105313][   T43] audit: type=1326 audit(2000000090.945:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.1.999" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71b75ab code=0x7ffc0000
[  221.145696][ T9358] batman_adv: batadv0: Adding interface: syzkaller0
[  221.145712][ T9358] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem.
[  221.145737][ T9358] batman_adv: batadv0: Interface activated: syzkaller0
[  221.150227][ T9357] batman_adv: batadv0: Interface deactivated: syzkaller0
[  221.197728][   T43] audit: type=1326 audit(2000000091.035:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9351 comm="syz.1.999" exe="/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf707efec code=0x7ffc0000
[  221.198276][   T43] audit: type=1326 audit(2000000091.035:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9351 comm="syz.1.999" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  221.198972][   T43] audit: type=1326 audit(2000000091.035:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9351 comm="syz.1.999" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  221.200374][   T43] audit: type=1326 audit(2000000091.035:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9351 comm="syz.1.999" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707f008 code=0x7ffc0000
[  221.206860][ T9357] batman_adv: batadv0: Removing interface: syzkaller0
[  223.063640][ T9385] ubi0: attaching mtd0
[  223.072280][ T9385] ubi0: scanning is finished
[  223.072308][ T9385] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  223.139757][ T9387] nvme_fabrics: missing parameter 'nqn=%s'
[  223.240025][ T9385] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  223.661824][ T5882] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  223.812668][ T5882] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  223.813777][ T5882] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  223.813815][ T5882] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  223.813835][ T5882] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[  223.813867][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.817578][ T9400] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  223.830627][ T5882] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected
[  223.830919][ T5882] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1
[  223.832453][ T5882] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84
[  223.832522][ T5882] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2
[  223.869795][ T5882] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  223.875279][ T5882] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88
[  223.875346][ T5882] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6
[  223.888917][ T5882] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  224.253907][ T5882] usb 6-1: USB disconnect, device number 46
[  224.631780][ T7828] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  224.653346][ T5882] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  224.654821][ T5882] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  224.655286][ T5882] keyspan 6-1:1.0: device disconnected
[  224.782930][ T7828] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  224.784104][ T7828] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  224.784127][ T7828] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  224.784158][ T7828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.962003][ T9414] overlay: ./file1 is not a directory
[  225.106625][ T5827] usb 5-1: USB disconnect, device number 44
[  225.332460][ T9420] nvme_fabrics: unknown parameter or missing value 'nqn' in ctrl creation request
[  226.282758][ T7828] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  226.432524][ T7828] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  226.433446][ T7828] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  226.433460][ T7828] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  226.433477][ T7828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.777658][   T35] usb 5-1: USB disconnect, device number 45
[  227.329394][ T9445] nvme_fabrics: unknown parameter or missing value 'nqn' in ctrl creation request
[  227.353594][   T43] kauditd_printk_skb: 7 callbacks suppressed
[  227.353610][   T43] audit: type=1400 audit(2000000097.195:2664): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9441 comm="syz.1.1027"
[  227.358821][ T9444] overlay: ./file1 is not a directory
[  228.032984][ T5882] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  228.136492][   T43] audit: type=1807 audit(2000000097.965:2665): action=measure func=F res=0
[  228.137498][   T43] audit: type=1802 audit(2000000097.965:2666): pid=9460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.1035" res=0 errno=0
[  228.182374][ T5882] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  228.183351][ T5882] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  228.183370][ T5882] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  228.183399][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.202394][ T9459] ima: policy update failed
[  228.205391][   T43] audit: type=1802 audit(2000000098.035:2667): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1035" res=0 errno=0
[  228.337421][ T9465] IPVS: lc: FWM 3 0x00000003 - no destination available
[  228.402156][ T5882] usb 6-1: USB disconnect, device number 47
[  228.991596][ T9484] FAULT_INJECTION: forcing a failure.
[  228.991596][ T9484] name failslab, interval 1, probability 0, space 0, times 0
[  228.991628][ T9484] CPU: 2 UID: 0 PID: 9484 Comm: syz.1.1043 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  228.991653][ T9484] Tainted: [L]=SOFTLOCKUP
[  228.991660][ T9484] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  228.991671][ T9484] Call Trace:
[  228.991678][ T9484]  <TASK>
[  228.991685][ T9484]  dump_stack_lvl+0x100/0x190
[  228.991717][ T9484]  should_fail_ex.cold+0x5/0xa
[  228.991741][ T9484]  should_failslab+0xc2/0x120
[  228.991767][ T9484]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[  228.991790][ T9484]  ? find_held_lock+0x2b/0x80
[  228.991811][ T9484]  ? sock_alloc_inode+0x26/0x2c0
[  228.991843][ T9484]  ? __pfx_sock_alloc_inode+0x10/0x10
[  228.991873][ T9484]  sock_alloc_inode+0x26/0x2c0
[  228.991899][ T9484]  ? __pfx_sock_alloc_inode+0x10/0x10
[  228.991924][ T9484]  alloc_inode+0x68/0x250
[  228.991949][ T9484]  sock_alloc+0x44/0x280
[  228.991970][ T9484]  ? security_socket_create+0x7f/0x250
[  228.991992][ T9484]  __sock_create+0xc2/0x860
[  228.992014][ T9484]  __sys_socket+0x14d/0x260
[  228.992030][ T9484]  ? xfd_validate_state+0x129/0x190
[  228.992055][ T9484]  ? __pfx___sys_socket+0x10/0x10
[  228.992079][ T9484]  __ia32_sys_socket+0x72/0xb0
[  228.992096][ T9484]  ? lockdep_hardirqs_on+0x7d/0x110
[  228.992138][ T9484]  __do_fast_syscall_32+0x13a/0x8b0
[  228.992173][ T9484]  do_fast_syscall_32+0x32/0x70
[  228.992201][ T9484]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  228.992224][ T9484] RIP: 0023:0xf707efec
[  228.992245][ T9484] Code: Unable to access opcode bytes at 0xf707efc2.
[  228.992261][ T9484] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167
[  228.992282][ T9484] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003
[  228.992295][ T9484] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000
[  228.992308][ T9484] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  228.992320][ T9484] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  228.992332][ T9484] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  228.992358][ T9484]  </TASK>
[  228.992484][ T9484] socket: no more sockets
[  229.441891][   T43] audit: type=1804 audit(2000000099.275:2668): pid=9490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=measuring_policy cause=store_entry comm="syz.1.1046" name="ima_policy_written" res=0 errno=-17
[  229.442023][   T43] audit: type=1807 audit(2000000099.275:2669): action=measure func=F res=0
[  229.442183][   T43] audit: type=1802 audit(2000000099.275:2670): pid=9490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.1046" res=0 errno=0
[  229.500742][ T9489] ima: policy update failed
[  229.501024][   T43] audit: type=1802 audit(2000000099.325:2671): pid=9489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1046" res=0 errno=0
[  229.901058][ T9509] tipc: Cannot configure node identity twice
[  229.990266][ T5735] Bluetooth: hci4: status 0x01
[  229.991054][ T5735] Bluetooth: hci4: unexpected event for opcode 0x0c03
[  229.991145][ T5735] Bluetooth: hci4: unexpected cc 0x1003 length: 1 < 9
[  229.991279][ T5733] Bluetooth: hci4: Opcode 0x1003 failed: -38
[  230.473490][   T42] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[  230.607491][ T9506] Bluetooth: hci1: Opcode 0x0c03 failed: -4
[  230.608755][ T9510] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  230.609213][ T9522] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  230.614851][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.643007][   T42] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  230.643927][   T42] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  230.643945][   T42] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  230.643969][   T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.695074][   T43] audit: type=1326 audit(2000000100.525:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9530 comm="syz.3.1055" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44fec code=0x7ffc0000
[  230.697524][   T43] audit: type=1326 audit(2000000100.525:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9530 comm="syz.3.1055" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44fec code=0x7ffc0000
[  230.853091][  T853] usb 6-1: USB disconnect, device number 48
[  230.875040][ T5733] Bluetooth: hci2: unexpected event for opcode 0x1002
[  230.932870][ T9540] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[  231.352459][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.415480][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1069'.
[  231.530504][ T9556] input: syz0 as /devices/virtual/input/input88
[  231.709344][ T9558] wg2 speed is unknown, defaulting to 1000
[  231.834716][ T9558] lo speed is unknown, defaulting to 1000
[  232.030670][ T9567] FAULT_INJECTION: forcing a failure.
[  232.030670][ T9567] name failslab, interval 1, probability 0, space 0, times 0
[  232.030695][ T9567] CPU: 2 UID: 0 PID: 9567 Comm: syz.2.1066 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  232.030712][ T9567] Tainted: [L]=SOFTLOCKUP
[  232.030716][ T9567] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  232.030723][ T9567] Call Trace:
[  232.030729][ T9567]  <TASK>
[  232.030734][ T9567]  dump_stack_lvl+0x100/0x190
[  232.030754][ T9567]  should_fail_ex.cold+0x5/0xa
[  232.030771][ T9567]  should_failslab+0xc2/0x120
[  232.030787][ T9567]  __kvmalloc_node_noprof+0x113/0x9b0
[  232.030804][ T9567]  ? sbitmap_init_node+0x1cc/0x720
[  232.030820][ T9567]  sbitmap_init_node+0x1cc/0x720
[  232.030832][ T9567]  ? __kmalloc_cache_node_noprof+0x2f1/0x720
[  232.030847][ T9567]  sbitmap_queue_init_node+0x40/0x4a0
[  232.030862][ T9567]  blk_mq_init_tags+0x184/0x300
[  232.030896][ T9567]  blk_mq_alloc_map_and_rqs+0x244/0xe30
[  232.030917][ T9567]  ? blk_mq_update_queue_map+0x227/0x3a0
[  232.030930][ T9567]  blk_mq_alloc_tag_set+0x848/0x1330
[  232.030952][ T9567]  loop_add+0x3b7/0xb60
[  232.030966][ T9567]  ? __pfx_loop_add+0x10/0x10
[  232.030986][ T9567]  ? __fget_files+0x34/0x3d0
[  232.031004][ T9567]  ? find_held_lock+0x2b/0x80
[  232.031023][ T9567]  ? __fget_files+0x215/0x3d0
[  232.031051][ T9567]  loop_control_ioctl+0xae/0x620
[  232.031077][ T9567]  ? __pfx_loop_control_ioctl+0x10/0x10
[  232.031103][ T9567]  ? __pfx_loop_control_ioctl+0x10/0x10
[  232.031126][ T9567]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  232.031152][ T9567]  __do_fast_syscall_32+0x13a/0x8b0
[  232.031170][ T9567]  ? lockdep_hardirqs_on+0x7d/0x110
[  232.031187][ T9567]  do_fast_syscall_32+0x32/0x70
[  232.031205][ T9567]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  232.031221][ T9567] RIP: 0023:0xf702efec
[  232.031235][ T9567] Code: Unable to access opcode bytes at 0xf702efc2.
[  232.031240][ T9567] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  232.031252][ T9567] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000004c80
[  232.031259][ T9567] RDX: 0000000007000000 RSI: 0000000000000000 RDI: 0000000000000000
[  232.031266][ T9567] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  232.031272][ T9567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  232.031279][ T9567] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  232.031293][ T9567]  </TASK>
[  232.033165][ T9567] blk-mq: reduced tag depth (128 -> 64)
[  232.088328][ T9569] usb usb8: usbfs: process 9569 (syz.2.1066) did not claim interface 0 before use
[  232.283030][ T9573] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(15756075.20447232.20447232), cmd(3)
[  232.392548][   T43] kauditd_printk_skb: 15 callbacks suppressed
[  232.392561][   T43] audit: type=1326 audit(2000000102.225:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9572 comm="syz.2.1067" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7fc00000
[  232.425473][ T5742] Bluetooth: hci4: status 0x01
[  232.426991][ T5742] Bluetooth: hci4: unexpected event for opcode 0x0c03
[  232.427097][ T5742] Bluetooth: hci4: unexpected cc 0x1003 length: 1 < 9
[  232.432568][ T5733] Bluetooth: hci4: Opcode 0x1003 failed: -38
[  233.066481][ T9570] Bluetooth: hci1: Opcode 0x0c03 failed: -4
[  233.066709][ T9577] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  233.113061][   T43] audit: type=1326 audit(2000000102.945:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9572 comm="syz.2.1067" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7fc00000
[  233.401221][ T5882] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  233.427132][ T9592] 9p: Bad value for 'rfdno'
[  233.427906][ T9593] ip6tnl0: entered promiscuous mode
[  233.430112][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1071'.
[  233.430459][ T9592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1071'.
[  233.528652][ T9595] input: syz0 as /devices/virtual/input/input89
[  233.561820][ T5882] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  233.563654][ T5882] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  233.563676][ T5882] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  233.563706][ T5882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.824670][ T5882] usb 7-1: USB disconnect, device number 30
[  233.850839][ T9599] netlink: 'syz.1.1074': attribute type 1 has an invalid length.
[  234.144690][ T9599] 8021q: adding VLAN 0 to HW filter on device bond4
[  234.185914][ T9600] bond4: (slave syz_tun): Enslaving as a backup interface with an up link
[  234.721903][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  236.473916][ T9638] FAULT_INJECTION: forcing a failure.
[  236.473916][ T9638] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  236.473939][ T9638] CPU: 0 UID: 0 PID: 9638 Comm: syz.3.1085 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  236.473955][ T9638] Tainted: [L]=SOFTLOCKUP
[  236.473959][ T9638] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  236.473965][ T9638] Call Trace:
[  236.473969][ T9638]  <TASK>
[  236.473973][ T9638]  dump_stack_lvl+0x100/0x190
[  236.473991][ T9638]  should_fail_ex.cold+0x5/0xa
[  236.474005][ T9638]  _copy_from_user+0x2e/0xd0
[  236.474021][ T9638]  __sys_bpf+0x2f5/0x4a30
[  236.474037][ T9638]  ? __pfx___sys_bpf+0x10/0x10
[  236.474048][ T9638]  ? lock_acquire+0x1d1/0x380
[  236.474063][ T9638]  ? get_pid_task+0x2a/0x250
[  236.474074][ T9638]  ? find_held_lock+0x2b/0x80
[  236.474085][ T9638]  ? get_pid_task+0xfc/0x250
[  236.474096][ T9638]  ? get_pid_task+0xfc/0x250
[  236.474109][ T9638]  ? proc_fail_nth_write+0x9f/0x220
[  236.474121][ T9638]  ? find_held_lock+0x2b/0x80
[  236.474135][ T9638]  ? rcu_read_lock_any_held+0x6a/0x90
[  236.474147][ T9638]  ? find_held_lock+0x2b/0x80
[  236.474158][ T9638]  ? ksys_write+0x190/0x250
[  236.474169][ T9638]  ? ksys_write+0x190/0x250
[  236.474180][ T9638]  ? lock_acquire+0x1d1/0x380
[  236.474203][ T9638]  ? fput+0x7c/0x100
[  236.474217][ T9638]  ? __ia32_sys_bpf+0xcc/0x170
[  236.474228][ T9638]  __ia32_sys_bpf+0xcc/0x170
[  236.474240][ T9638]  ? __do_fast_syscall_32+0xb3/0x8b0
[  236.474258][ T9638]  __do_fast_syscall_32+0x13a/0x8b0
[  236.474274][ T9638]  ? lockdep_hardirqs_on+0x7d/0x110
[  236.474291][ T9638]  do_fast_syscall_32+0x32/0x70
[  236.474308][ T9638]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  236.474322][ T9638] RIP: 0023:0xf7f44fec
[  236.474334][ T9638] Code: Unable to access opcode bytes at 0xf7f44fc2.
[  236.474339][ T9638] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  236.474350][ T9638] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800000c0
[  236.474357][ T9638] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000
[  236.474363][ T9638] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  236.474369][ T9638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  236.474375][ T9638] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  236.474388][ T9638]  </TASK>
[  236.617422][ T5742] Bluetooth: hci4: status 0x01
[  236.618944][ T5742] Bluetooth: hci4: unexpected event for opcode 0x0c03
[  236.619741][ T5742] Bluetooth: hci4: unexpected cc 0x1003 length: 1 < 9
[  236.622582][ T5733] Bluetooth: hci4: Opcode 0x1003 failed: -38
[  236.660666][ T9642] nvme_fabrics: unknown parameter or missing value 'nqn=' in ctrl creation request
[  236.710530][ T9640] input: syz0 as /devices/virtual/input/input90
[  236.865235][ T9652] ==================================================================
[  236.865250][ T9652] BUG: KASAN: global-out-of-bounds in usb_copy_descriptors+0x18d/0x320
[  236.865287][ T9652] Read of size 192 at addr ffffffff9bca3120 by task syz.1.1091/9652
[  236.865303][ T9652] 
[  236.865314][ T9652] CPU: 0 UID: 0 PID: 9652 Comm: syz.1.1091 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  236.865358][ T9652] Tainted: [L]=SOFTLOCKUP
[  236.865365][ T9652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  236.865377][ T9652] Call Trace:
[  236.865383][ T9652]  <TASK>
[  236.865391][ T9652]  dump_stack_lvl+0x100/0x190
[  236.865414][ T9652]  print_report+0x13d/0x4b0
[  236.865439][ T9652]  ? __virt_addr_valid+0x239/0x430
[  236.865468][ T9652]  ? usb_copy_descriptors+0x18d/0x320
[  236.865494][ T9652]  kasan_report+0xdf/0x1c0
[  236.865523][ T9652]  ? usb_copy_descriptors+0x18d/0x320
[  236.865551][ T9652]  kasan_check_range+0x10f/0x1e0
[  236.865575][ T9652]  __asan_memcpy+0x23/0x60
[  236.865592][ T9652]  usb_copy_descriptors+0x18d/0x320
[  236.865619][ T9652]  usb_assign_descriptors+0xd2/0x470
[  236.865644][ T9652]  f_audio_bind+0x243a/0x3950
[  236.865668][ T9652]  ? __pfx_f_audio_bind+0x10/0x10
[  236.865685][ T9652]  usb_add_function+0x219/0x890
[  236.865700][ T9652]  ? composite_dev_prepare+0x1a1/0x420
[  236.865719][ T9652]  configfs_composite_bind+0xd83/0x1960
[  236.865737][ T9652]  ? kernfs_create_link+0x1bd/0x240
[  236.865755][ T9652]  gadget_bind_driver+0x28c/0xbf0
[  236.865776][ T9652]  ? __pfx_gadget_bind_driver+0x10/0x10
[  236.865797][ T9652]  really_probe+0x241/0xa60
[  236.865839][ T9652]  __driver_probe_device+0x210/0x460
[  236.865862][ T9652]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  236.865889][ T9652]  driver_probe_device+0x4a/0x140
[  236.865913][ T9652]  __driver_attach+0x21f/0x5b0
[  236.865936][ T9652]  ? __pfx___driver_attach+0x10/0x10
[  236.865958][ T9652]  bus_for_each_dev+0x13e/0x1d0
[  236.865976][ T9652]  ? __pfx_bus_for_each_dev+0x10/0x10
[  236.865995][ T9652]  ? bus_add_driver+0x2b5/0x5b0
[  236.866017][ T9652]  bus_add_driver+0x305/0x5b0
[  236.866036][ T9652]  driver_register+0x1e2/0x360
[  236.866059][ T9652]  usb_gadget_register_driver_owner+0x132/0x210
[  236.866081][ T9652]  gadget_dev_desc_UDC_store+0x1b0/0x2e0
[  236.866106][ T9652]  configfs_write_iter+0x302/0x4e0
[  236.866129][ T9652]  vfs_write+0x6af/0x1050
[  236.866146][ T9652]  ? __pfx_configfs_write_iter+0x10/0x10
[  236.866168][ T9652]  ? __pfx_vfs_write+0x10/0x10
[  236.866185][ T9652]  ? find_held_lock+0x2b/0x80
[  236.866208][ T9652]  ksys_write+0x12a/0x250
[  236.866225][ T9652]  ? __pfx_ksys_write+0x10/0x10
[  236.866244][ T9652]  __do_fast_syscall_32+0x13a/0x8b0
[  236.866269][ T9652]  ? lockdep_hardirqs_on+0x7d/0x110
[  236.866293][ T9652]  do_fast_syscall_32+0x32/0x70
[  236.866318][ T9652]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  236.866339][ T9652] RIP: 0023:0xf707efec
[  236.866356][ T9652] Code: Unable to access opcode bytes at 0xf707efc2.
[  236.866365][ T9652] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  236.866382][ T9652] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800005c0
[  236.866393][ T9652] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000
[  236.866404][ T9652] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  236.866418][ T9652] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  236.866429][ T9652] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  236.866445][ T9652]  </TASK>
[  236.866451][ T9652] 
[  236.866455][ T9652] The buggy address belongs to the variable:
[  236.866461][ T9652]  ac_header_desc+0x0/0x40
[  236.866485][ T9652] 
[  236.866489][ T9652] The buggy address belongs to the physical page:
[  236.866496][ T9652] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1bca3
[  236.866506][ T9652] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff)
[  236.866529][ T9652] raw: 00fff00000002000 ffffea00006f28c8 ffffea00006f28c8 0000000000000000
[  236.866539][ T9652] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  236.866546][ T9652] page dumped because: kasan: bad access detected
[  236.866552][ T9652] page_owner info is not present (never set?)
[  236.866556][ T9652] 
[  236.866559][ T9652] Memory state around the buggy address:
[  236.866564][ T9652]  ffffffff9bca3000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  236.866572][ T9652]  ffffffff9bca3080: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9
[  236.866580][ T9652] >ffffffff9bca3100: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9
[  236.866586][ T9652]                                   ^
[  236.866592][ T9652]  ffffffff9bca3180: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9
[  236.866600][ T9652]  ffffffff9bca3200: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 f9 f9 f9
[  236.866606][ T9652] ==================================================================
[  236.866826][ T9652] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  237.032343][ T9652] CPU: 0 UID: 0 PID: 9652 Comm: syz.1.1091 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  237.036498][ T9652] Tainted: [L]=SOFTLOCKUP
[  237.038196][ T9652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  237.042170][ T9652] Call Trace:
[  237.043506][ T9652]  <TASK>
[  237.044699][ T9652]  dump_stack_lvl+0x100/0x190
[  237.046569][ T9652]  vpanic+0x553/0x970
[  237.048162][ T9652]  ? __pfx_vpanic+0x10/0x10
[  237.049979][ T9652]  ? usb_copy_descriptors+0x18d/0x320
[  237.052108][ T9652]  panic+0xd1/0xe0
[  237.053622][ T9652]  ? __pfx_panic+0x10/0x10
[  237.055419][ T9652]  ? usb_copy_descriptors+0x18d/0x320
[  237.057540][ T9652]  ? preempt_schedule_common+0x3c/0xb0
[  237.059726][ T9652]  check_panic_on_warn.cold+0x19/0x34
[  237.061945][ T9652]  end_report.part.0+0x3a/0x90
[  237.064118][ T9652]  kasan_report.cold+0xe/0x18
[  237.066403][ T9652]  ? usb_copy_descriptors+0x18d/0x320
[  237.068707][ T9652]  kasan_check_range+0x10f/0x1e0
[  237.070680][ T9652]  __asan_memcpy+0x23/0x60
[  237.072439][ T9652]  usb_copy_descriptors+0x18d/0x320
[  237.074502][ T9652]  usb_assign_descriptors+0xd2/0x470
[  237.076590][ T9652]  f_audio_bind+0x243a/0x3950
[  237.078461][ T9652]  ? __pfx_f_audio_bind+0x10/0x10
[  237.080445][ T9652]  usb_add_function+0x219/0x890
[  237.082413][ T9652]  ? composite_dev_prepare+0x1a1/0x420
[  237.084557][ T9652]  configfs_composite_bind+0xd83/0x1960
[  237.086747][ T9652]  ? kernfs_create_link+0x1bd/0x240
[  237.088790][ T9652]  gadget_bind_driver+0x28c/0xbf0
[  237.090808][ T9652]  ? __pfx_gadget_bind_driver+0x10/0x10
[  237.092981][ T9652]  really_probe+0x241/0xa60
[  237.094823][ T9652]  __driver_probe_device+0x210/0x460
[  237.096909][ T9652]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  237.099307][ T9652]  driver_probe_device+0x4a/0x140
[  237.101390][ T9652]  __driver_attach+0x21f/0x5b0
[  237.103300][ T9652]  ? __pfx___driver_attach+0x10/0x10
[  237.105565][ T9652]  bus_for_each_dev+0x13e/0x1d0
[  237.107732][ T9652]  ? __pfx_bus_for_each_dev+0x10/0x10
[  237.110050][ T9652]  ? bus_add_driver+0x2b5/0x5b0
[  237.112330][ T9652]  bus_add_driver+0x305/0x5b0
[  237.114467][ T9652]  driver_register+0x1e2/0x360
[  237.116774][ T9652]  usb_gadget_register_driver_owner+0x132/0x210
[  237.119307][ T9652]  gadget_dev_desc_UDC_store+0x1b0/0x2e0
[  237.121591][ T9652]  configfs_write_iter+0x302/0x4e0
[  237.123688][ T9652]  vfs_write+0x6af/0x1050
[  237.125474][ T9652]  ? __pfx_configfs_write_iter+0x10/0x10
[  237.127713][ T9652]  ? __pfx_vfs_write+0x10/0x10
[  237.129651][ T9652]  ? find_held_lock+0x2b/0x80
[  237.131557][ T9652]  ksys_write+0x12a/0x250
[  237.133346][ T9652]  ? __pfx_ksys_write+0x10/0x10
[  237.135379][ T9652]  __do_fast_syscall_32+0x13a/0x8b0
[  237.137528][ T9652]  ? lockdep_hardirqs_on+0x7d/0x110
[  237.139739][ T9652]  do_fast_syscall_32+0x32/0x70
[  237.141869][ T9652]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  237.144455][ T9652] RIP: 0023:0xf707efec
[  237.146130][ T9652] Code: Unable to access opcode bytes at 0xf707efc2.
[  237.148892][ T9652] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  237.152263][ T9652] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800005c0
[  237.155546][ T9652] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000
[  237.158776][ T9652] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  237.161905][ T9652] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  237.165122][ T9652] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  237.168359][ T9652]  </TASK>
[  237.170297][ T9652] Kernel Offset: disabled
[  237.172020][ T9652] Rebooting in 86400 seconds..

VM DIAGNOSIS:
07:45:37  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85aeb445 RDI=ffffffff9bc571e0 RBP=ffffffff9bc571a0 RSP=ffffc90002ddef20
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6666666666666652
R12=0000000000000000 R13=0000000000000032 R14=0000000000000007 R15=ffffc90002ddf238
RIP=ffffffff85aeb46f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888096960000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f4b91ff4 CR3=000000004e818000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000012000000000 0000000300000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801cf0cb00
RSI=ffffffff81b65e9e RDI=ffff88801cf0cb00 RBP=0000000000000001 RSP=ffffc9000047fdf8
R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=0000000000000000
RIP=ffffffff81b65e9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096a60000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000561d23f5a918 CR3=000000000eb96000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000004d000000000 0000001100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=000000000005e400 RCX=0000000000000002 RDX=ffff888029850000
RSI=ffffffff8260b866 RDI=ffff888029850000 RBP=1ffff920008a7e84 RSP=ffffc9000453f420
R8 =0000000000000006 R9 =ffffffffffffffff R10=000000000005e400 R11=0000000000000001
R12=ffffffffffffffff R13=0000000001793780 R14=000000000000c00a R15=000800000005e4de
RIP=ffffffff8260b866 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888096b60000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000562786347000 CR3=0000000062a28000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 2e7a797300000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000003 RBX=ffffffff9bc3d5c8 RCX=0000000000000100 RDX=00000000ffffffff
RSI=0000000000000004 RDI=ffffffff9bc3d5c8 RBP=ffffffff9bc3d5d0 RSP=ffffc900005f7c70
R8 =00000000000171dd R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001
R12=1ffff920000bef90 R13=ffffffff9bc3d5d8 R14=ffff888028d85300 R15=1ffff920000befa8
RIP=ffffffff827da840 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888096c60000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00000000f733bb04 CR3=000000006d211000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000