last executing test programs:

30.644577135s ago: executing program 0 (id=642):
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0, 0x1c1, 0x6}, 0x18)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x119)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet6(0xa, 0x3, 0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x200)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8)
unshare(0x6a040000)
ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000020601010000000000000000010000001400078008001240000000050500140009000000050005000a0000000900020073797a31000000000500040000000000050001000600000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
write$binfmt_register(r4, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x46]}, 0x34)

27.60639129s ago: executing program 0 (id=652):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0)
r0 = socket(0x200000000000011, 0x2, 0xd)
bind$packet(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000004140)={0x2020}, 0x2020)
pread64(r3, &(0x7f0000000040)=""/107, 0x6b, 0xab7f)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
r4 = epoll_create(0x9)
setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f00000003c0)=[{0x3, 0x2, {0x0, 0xf0}, {0x2, 0xff, 0x2}, 0xfe, 0xff}], 0x20)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
r5 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_inet_SIOCSARP(r5, 0x8955, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000000)={{0x2, 0x1000, @local}, {0x7, @local}, 0x52, {0x2, 0x2000, @private=0xa010102}, 'syz_tun\x00'})
dup(0xffffffffffffffff)

27.407140053s ago: executing program 0 (id=653):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

27.139734462s ago: executing program 0 (id=656):
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota')
lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0xee00)
chown(0x0, 0x0, 0xee01)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_emit_ethernet(0xde, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60f900f500a80600fe8000000000000000000000000000aafe80000000", @ANYRES32=0x41424344, @ANYBLOB], 0x0)
faccessat2(0xffffffffffffffff, 0x0, 0xc4, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
socket$unix(0x1, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7, 0xd44, 0x6})
clock_gettime(0x0, &(0x7f0000000180)={<r1=>0x0, <r2=>0x0})
pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0x9, 0x1ce, 0x7fff, 0x2}, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, &(0x7f00000001c0)={r1, r2+60000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x1000, 0x8]}, 0x8})
fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=.27.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00')

25.968563745s ago: executing program 0 (id=665):
r0 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)="35fc3a12f45d48e3120ec76bfe8d5ba7449af3c59c81f374329851daf843e48e30428c737ad0d7b957d1ab7dba23ca87748421", 0x33)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000010c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x6200}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x100}, 0x40080d0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x2d, 0x107, 0x0, 0x25dfdbff, {0x9, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'bridge0\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f0000000000)="09000000e70014000000d97bfbf788a83baa88a8000081000000810000999900", 0x20, 0x40810, &(0x7f0000000540)={0x11, 0x3, r7, 0x1, 0x8, 0x6, @local}, 0x14)
sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=@mpls_newroute={0xb8, 0x18, 0x100, 0x70bd25, 0x25dfdbfe, {0x1c, 0x14, 0x0, 0x3, 0x0, 0x3, 0xfd, 0xb, 0x800}, [@RTA_OIF={0x8}, @RTA_NEWDST={0x84, 0x13, [{0x1}, {0x7}, {0x3c, 0x0, 0x1}, {0x2}, {0xc0}, {0xc9f5, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x3}, {0xe0}, {0x49a3, 0x0, 0x1}, {0x6, 0x0, 0x1}, {}, {0x7}, {0x1}, {0x401, 0x0, 0x1}, {}, {0x3}, {0x40}, {0x3, 0x0, 0x1}, {0x1000, 0x0, 0x1}, {0x6d96, 0x0, 0x1}, {0x800}, {0x1}, {0x401}, {0x4, 0x0, 0x1}, {0x401, 0x0, 0x1}, {0xa9}, {0x9}, {0x4}, {0x4}, {0xa140, 0x0, 0x1}, {0x5}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x4}, @RTA_OIF={0x8, 0x4, r7}]}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x5, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfa, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x710}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0)

25.968249585s ago: executing program 0 (id=666):
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0, 0x1c1, 0x6}, 0x18)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x119)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet6(0xa, 0x3, 0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x200)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8)
unshare(0x6a040000)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0)
ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000020601010000000000000000010000001400078008001240000000050500140009000000050005000a0000000900020073797a31000000000500040000000000050001000600000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
write$binfmt_register(r4, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x46]}, 0x34)

10.717842622s ago: executing program 32 (id=666):
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0, 0x1c1, 0x6}, 0x18)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x119)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet6(0xa, 0x3, 0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x200)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8)
unshare(0x6a040000)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0)
ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000020601010000000000000000010000001400078008001240000000050500140009000000050005000a0000000900020073797a31000000000500040000000000050001000600000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
write$binfmt_register(r4, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x46]}, 0x34)

5.893489993s ago: executing program 4 (id=759):
socket$inet_udp(0x2, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x51, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004004)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
r0 = getpgrp(0xffffffffffffffff)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x6, 0xe, 0x10001, 0x80000001, 0xff, 0x3, 0x800, 0x8, 0x100}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r1 = openat$cuse(0xffffff9c, &(0x7f00000003c0), 0x2, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000180)={0x1f, 0x10, @any, 0x0, 0x1}, 0xe)
connect$bt_l2cap(r2, &(0x7f0000000540)={0x1f, 0xfff7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x14}, 0xfffc, 0x1}, 0xe)
write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="270000000300000000000000000000000100000000000000ffff"], 0x27)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r4 = add_key$fscrypt_provisioning(&(0x7f0000000100), &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000000000000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f40028a123e39dfd77a457fd8d3b16f1a3f9083096dce64936524a589dbe9ca09a818759abf407c566130595295ad8f381db2984ddbed46c27cfcba058c1ad086b711404b37ec7710cb5e6f05dd91043f691ebf2096eeb9d29e0be643e676e1d9acfc3de8196fb3631d676634c5d42634349973875ff4596e973369dcb0ad0a3316e4bf7bb82f404aa422901cfe50f31b612f18c0e2e6f1028621ab3c804ed62892615a5b35c01164e70bf9499756"], 0x48, 0xfffffffffffffff8)
keyctl$revoke(0x3, r4)
sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0)
ioctl$BTRFS_IOC_ENCODED_WRITE(0xffffffffffffffff, 0x40789440, &(0x7f0000001340)={&(0x7f0000001300)=[{&(0x7f0000000300)="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", 0x159}], 0x1, 0xfffffffffffffff3, 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4, 0x5})
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400f9ff04080102000000000000000003000000050003003a0000000600024089140000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[@ANYBLOB="1c0000005e0001002dbd7000fddbdb2500000000", @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xce21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8c0}, 0x0)

4.807614549s ago: executing program 4 (id=765):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0)
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getrlimit(0xe, &(0x7f0000002040))
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00')
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, {0xecd8, 0x0, 0x3002, 0x0, 0x0, 0x8, 0x2}})
pread64(r3, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1e, 0x2, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000480), 0x4)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x20, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xbf, 0x4023}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x404c010}, 0x26040888)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4400c800)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
write(r0, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502007000040600666c61677300070200000000020000000002", 0x36)

3.863658237s ago: executing program 1 (id=768):
syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bond0\x00'})
ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af25, &(0x7f0000000080)=0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d000000000d00000000000000020000000000000000000000000000000010000000000000010000000000000000000000000000000000000000000007000000000000000000000009020000000000000000000009000000000b0000000000000a02000000000067a1457ec4dbaae5ccdec7145042a34ced770d0c608e25db5bb42c4403242ee496a4c4e7abbc3d67b2c492be6d403bb747852b44a445d16598fec2a854a9e5c64ded65232f46d1"], 0x0, 0x96}, 0x28)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x19, &(0x7f0000000e40)=ANY=[@ANYBLOB="18010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000d522200001000000cc4b1000ffffffff7f55feff04000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x0, 0x0, 0x3ff, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r3 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x66, 0x33, 0x30, 0x64, 0x30, 0x31, 0x30, 0x30, 0x30, 0x38, 0x61, 0x30, 0x25, 0x34, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x1000040}, 0x48, r2)
r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$search(0xa, r4, &(0x7f0000000340)='keyring\x00', &(0x7f0000000640)={'syz', 0x1}, r3)
r5 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0)
write$uinput_user_dev(r5, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac03}, 0x40, [0x10, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0xfffffe5d, 0x2, 0x8001, 0x1, 0xfffffffd, 0x8000, 0x4, 0x1, 0x2, 0x6, 0x3, 0x4, 0x6a90, 0x0, 0x4e3, 0x1, 0x7fff, 0x5, 0x0, 0x2, 0x0, 0xe, 0x8000, 0x1, 0x9d, 0x10000080, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0xd61, 0xb, 0x7, 0x7, 0x7, 0x2, 0x3, 0x3, 0xff, 0x1, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0x8, 0xfffff7fb, 0x3, 0x100, 0x5, 0xb], [0x7, 0x9d2, 0x7fffffff, 0x800, 0x3, 0x9, 0x7, 0x8, 0x5, 0x80000001, 0x80008, 0x40, 0x6, 0x8, 0x80001005, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x100000, 0x800, 0x2, 0x3, 0x7, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x10004, 0xfffffc04, 0x1, 0x4, 0x3ff, 0x6, 0x7f, 0x3, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0xfffffff8, 0x1, 0xe8, 0xffff8000, 0x4, 0xb, 0x4, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0x80008, 0x7fffffff, 0x6], [0x1, 0xd, 0x7, 0x58c, 0xfffffff, 0xb0, 0x8, 0x5, 0x2, 0x4, 0x9, 0x7, 0x7, 0x3, 0x4, 0xe, 0x8001, 0xfffffffe, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x1, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x391a0b76, 0x2, 0x8000, 0x13, 0x5, 0x7, 0x1, 0x10, 0xb8, 0x6, 0x80000001, 0x8001, 0x3, 0x1b9, 0x8a7, 0x1, 0x8, 0x3, 0x1, 0x1, 0x4, 0x3, 0x74da, 0xec9, 0x140, 0x5, 0x3, 0x6, 0x1, 0x7fff, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x3, 0xb, 0x2, 0xffff, 0x0, 0x9, 0x80000000, 0xffff, 0xb7, 0x6, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0xe, 0x3ff, 0x1, 0xdf76, 0x63, 0x80000000, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x10001, 0x4, 0x2, 0x0, 0x2, 0x6b2, 0x9, 0xcd5e, 0x59, 0x9, 0x1, 0x6, 0x6, 0x5, 0x1, 0x20, 0x4, 0xd, 0x6, 0x1, 0x6, 0x2, 0x2, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x1, 0x5, 0xfffffffb]}, 0x45c)
getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000700)={{{@in=@broadcast, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@initdev}}}, &(0x7f00000000c0)=0xe4)
r7 = getpgrp(0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='wchan\x00')
pread64(r8, &(0x7f0000001400)=""/4108, 0x100c, 0x7)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ptrace$getregset(0x4204, 0x0, 0x207, &(0x7f00000005c0)={&(0x7f0000000240)=""/35, 0x23})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0)
syz_pidfd_open(r7, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@empty, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000500)=0xe4)
sendmsg$nl_generic(r5, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000001040)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="ef00001400", @ANYRES32=r7, @ANYBLOB="e239704af39815d1f9040035800400b2800400a08004004f8004008f800800cb00", @ANYRES32, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB='\b\x00`\x00', @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="189d6c3c20747d90b39a00fb6d3528efc59f460228d906f3b5a95bd0ebbca39d1604bee7db51030c8ce40ae0dff41bf71e81066125e7cb4643f11035e8a5211734b70b5c544f5c17cd7f7dc01f3b9ca331cdb8ac68f3e7946082c25b8290a3e3da046ccbe4041284c281d293afa201eb6232cdec33fadf9c1d33d1ff0400f48000000c00e900f80d00000000000014001400ff010000000000000000000000000001"], 0x2860}, 0x1, 0x0, 0x0, 0x20000891}, 0x40080)

3.842438381s ago: executing program 4 (id=769):
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0, 0x1c1, 0x6}, 0x18)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x119)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet6(0xa, 0x3, 0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x200)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0)
ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000020601010000000000000000010000001400078008001240000000050500140009000000050005000a0000000900020073797a31000000000500040000000000050001000600000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
write$binfmt_register(r4, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x46]}, 0x34)

3.007355056s ago: executing program 4 (id=773):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2a, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa}, {0x0, 0x3}}}, 0xb8}}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8004, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_GET_TSC_KHZ_vm(r3, 0xaea3)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20)
syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x11e, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430)
mkdir(&(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/trace_options\x00', 0x2, 0x0)
close(0x3)
r5 = syz_io_uring_setup(0x5c65, &(0x7f0000000580)={0x0, 0x3, 0x10000, 0x8000001, 0x1db}, &(0x7f0000000180)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0, &(0x7f0000000640)=<r8=>0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x9)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt(r9, 0x84, 0x7f, &(0x7f0000000000)="1a0000000980ffff", 0x8)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
syz_io_uring_submit(r6, r7, r8, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x2000, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x4, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0)

2.451256231s ago: executing program 4 (id=776):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0)
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getrlimit(0xe, &(0x7f0000002040))
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00')
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, {0xecd8, 0x0, 0x3002, 0x0, 0x0, 0x8, 0x2}})
pread64(r3, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1e, 0x2, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x20, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xbf, 0x4023}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x404c010}, 0x26040888)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4400c800)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
write(r0, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502007000040600666c61677300070200000000020000000002", 0x36)

2.239225922s ago: executing program 3 (id=777):
pselect6(0x40, &(0x7f0000001380)={0x6, 0xfffffffffffffffa, 0x9, 0x5d7, 0x6, 0x8, 0xc444}, &(0x7f00000013c0)={0xf, 0x9, 0x400, 0x9, 0x6, 0xb, 0x4ea2, 0x400}, 0x0, 0x0, 0x0)

2.1586353s ago: executing program 3 (id=778):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10000, &(0x7f0000006680))
munlockall()
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0xf8, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63ca4}, [@IFLA_PROP_LIST={0x90, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pim6reg\x00'}, {0x14, 0x35, 'wlan0\x00'}, {0x14, 0x35, 'veth0_to_batadv\x00'}, {0x14, 0x35, 'ip_vti0\x00'}, {0x14, 0x35, 'team_slave_0\x00'}, {0x14, 0x35, 'netpci0\x00'}, {0x14, 0x35, 'veth1_to_hsr\x00'}]}, @IFLA_PORT_SELF={0x14, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xd, 0x2, 'mptcp_pm\x00'}]}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_PORT_SELF={0x2c, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_PROFILE={0x9, 0x2, '{\'],\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "bd85944615b131a6fd3cd843f4f46ee8"}]}]}, 0xf8}}, 0x8000)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

2.070206056s ago: executing program 3 (id=779):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setscheduler(r0, 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000500)={0x0, 0x80000001})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
r4 = openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x80040, 0x0)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0)
r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x12}, 0x48, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x4, r5, r5, r5, 0x0)
r6 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v2to_da_alloc', 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x1)
syz_open_procfs(r0, &(0x7f0000000040)='stat\x00')
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000002060103000000000000000005000000140007800800084000000052080006400000000609000261be1b6fd8480f31006f797a31000000000500040000000000050005000a000000"], 0x4c}}, 0x4000)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c0003"], 0xcd0}}, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x1, 0x7800, 0x3, 0x5, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x3, 0x2, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100}}}})

1.479439236s ago: executing program 4 (id=781):
r0 = socket(0x10, 0x80002, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x40400, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x10001}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
socket$inet6_icmp(0xa, 0x2, 0x3a)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x90, 0x0, 0x2, {0x0, 0x3, 0xbd18, 0x5cd3f9da, 0x7, 0x7f, {0x1, 0x5, 0x7, 0x6, 0x0, 0xf, 0xa734, 0x200, 0x7, 0xc890c63e415ce913, 0x101, 0x0, 0x0, 0xffff0000, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300), 0xc)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
mount$fuse(0x0, 0x0, 0x0, 0x50000, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r6, 0x0, r5, 0x0, 0x6, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r7, r7, 0x0, 0x200000)
syz_emit_vhci(&(0x7f00000006c0)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e0000001800028014001d"], 0x48}}, 0x0)

1.17328393s ago: executing program 3 (id=785):
syz_emit_vhci(&(0x7f0000000100)=ANY=[], 0x22)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/notes', 0x800, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x7, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x2000000000003ff, 0x2], 0x2000, 0x200206})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
r0 = add_key$fscrypt_provisioning(&(0x7f0000003040), &(0x7f0000003080)={'syz', 0x1}, &(0x7f00000030c0)=ANY=[@ANYBLOB="02"], 0x18, 0xffffffffffffffff)
keyctl$set_timeout(0xf, r0, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x3a)
sendto$inet6(r1, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000400)='pkcs7_test\x00', &(0x7f00000001c0)=@chain={'key_or_keyring:', r0})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

1.089610442s ago: executing program 2 (id=787):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x78}}}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4040800)
r3 = syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2)
ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000000)={0x98f907, 0x401, @name="c19607bb3c2cd1b6e9e52eb2f45e2ad0ec3327718daa97a12691f5d76843bf94"})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf042bbd7000fddbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000010)

979.488597ms ago: executing program 2 (id=788):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)='\b', 0x1}], 0x1, 0x0, 0x0, 0x804}], 0x1, 0x4048091)
sendmsg$alg(r1, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000900)="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", 0x1000}], 0x1, 0x0, 0x0, 0x48044}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd0010000000004000700070100000807f3007500fcff0000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

929.606467ms ago: executing program 2 (id=789):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd0010000000004000700070100000807f3007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94) (fail_nth: 6)

866.292578ms ago: executing program 2 (id=790):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000280)={0x13, 0x10, 0x7, {0x0, 0xffffffffffffffff, 0x2}}, 0x707e2e624c663dae)

865.635956ms ago: executing program 3 (id=791):
unshare(0x40000000)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @loopback}})
ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1})
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
syslog(0x2, &(0x7f0000001640)=""/153, 0x99)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410073697700140033006c6f00"/56], 0x38}}, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000180)={0x16, 0x110, 0xfa00, {r3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e23, @loopback}}}, 0x118)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
read(r4, 0x0, 0x0)
r5 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0xee01, r6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1848"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r7 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_freezer_state(r7, &(0x7f0000000140)='THAWED\x00', 0x7)
write$P9_RXATTRWALK(r2, &(0x7f0000000340)={0xf, 0x1f, 0x1, 0x8}, 0xf)
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x1}, r3}}, 0x120)
umount2(&(0x7f0000000380)='./proc\x00', 0x8)

864.82387ms ago: executing program 2 (id=792):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000080)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x18, r1, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x28, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x4}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c011}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r3=>0x0, 0x4, 0x5, 0x4a, 0x2, 0x11, @dev={0xfe, 0x80, '\x00', 0x36}, @empty, 0x10, 0x7, 0x1, 0x7}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'ip6_vti0\x00', <r4=>0x0, 0x2f, 0x7, 0xf, 0x9, 0x916f8c05250ac526, @local, @loopback, 0x7, 0x40, 0x3, 0x7}})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wg2\x00', <r5=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl0\x00', <r6=>0x0, 0x4, 0x7, 0x9, 0xfffffffa, 0x8, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x700, 0x6, 0x7}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg2\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'veth0\x00', <r8=>0x0})
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x2, 0x8, 0x22, 0xff}, {0x4, 0x2, 0x3, 0xa159, 0xffe, 0x9}, 0x3, 0x6, 0x41e}}]}}]}, 0x58}}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000500)={<r11=>0x0, @multicast2, @broadcast}, &(0x7f0000000540)=0xc)
r12 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000340)={'vxcan1\x00', <r13=>0x0})
sendto$packet(r12, &(0x7f0000000040)="18", 0x1, 0x20008884, &(0x7f0000000080)={0x11, 0xd, r13, 0x1, 0xfd, 0x6, @multicast}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r16=>0x0})
sendmsg$nl_route_sched(r15, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r16, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)={&(0x7f00000005c0)={0x2c0, r1, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe7e463aab4ff3c94}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x11}, 0x0)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
getcwd(0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88a2c87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0)

778.354398ms ago: executing program 1 (id=793):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000001640)=ANY=[@ANYBLOB="9feb010020000000010000001800000019000000010000000000000001"], 0x0, 0x3a, 0x0, 0x1, 0x6}, 0x28)
r0 = fsopen(&(0x7f0000000180)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
acct(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00')
r1 = fsmount(r0, 0x0, 0x0)
renameat2(r1, &(0x7f0000000100)='./bus\x00', r1, &(0x7f0000000140)='./file0\x00', 0x4)
r2 = syz_open_procfs(0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async)
r3 = fsmount(r0, 0x1, 0xf8) (async)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r4 = openat(r3, &(0x7f0000000080)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x10b) (async)
write(r4, &(0x7f00000000c0)='+', 0x1) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000040)={0x1ff, 0x0, 0xeeef0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) (async)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f00000000c0), 0x4) (async)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}, 0x9, 0x8, 0x4, 0xfffff43e, 0x97}, &(0x7f0000004480)=0x98) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x8, 0xc0000)
ioctl$MON_IOCH_MFLUSH(r7, 0x9208, 0x9)
r8 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) (async)
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000008, 0x8031, r2, 0x23c54000) (async)
read(r8, &(0x7f0000000380)=""/184, 0xb8) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) (async)
ioctl$UFFDIO_CONTINUE(r8, 0xc020aa07, &(0x7f00000004c0)={{&(0x7f0000c02000/0x1000)=nil, 0x1000}, 0x1}) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@deltfilter={0x2c, 0x2d, 0x20, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0x1}, {0xe, 0xc}, {0x8, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x5f0d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)

730.091391ms ago: executing program 1 (id=794):
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB], 0x22)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/notes', 0x800, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x7, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x2000000000003ff, 0x2], 0x2000, 0x200206})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
r0 = add_key$fscrypt_provisioning(&(0x7f0000003040), &(0x7f0000003080)={'syz', 0x1}, &(0x7f00000030c0)=ANY=[@ANYBLOB="02"], 0x18, 0xffffffffffffffff)
keyctl$set_timeout(0xf, r0, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x3a)
sendto$inet6(r1, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000400)='pkcs7_test\x00', &(0x7f00000001c0)=@chain={'key_or_keyring:', r0})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

666.489488ms ago: executing program 1 (id=795):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/bmAttributes\x00', 0x1, 0x0)
write(r0, &(0x7f00000004c0)='0x80', 0xfdef)

617.471818ms ago: executing program 1 (id=796):
connect$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x4e21, 0x80000001, @loopback, 0x9}, 0x1c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x7fffe, {0x0, 0x0, 0x0, r7, {}, {0x1, 0xb}, {0x4, 0xfff3}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048800}, 0x20000000)
sendto$packet(r6, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x24, 0x301, 0x70bd2b, 0x25dfdbfd, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x404c896}, 0x840)
r10 = openat$hwrng(0xffffff9c, &(0x7f00000000c0), 0x48082, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', <r11=>0x0, 0x7800, 0x700, 0x6, 0x10, {{0x25, 0x4, 0x2, 0x11, 0x94, 0x65, 0x0, 0xce, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0x52, 0x3, 0x7, [{@empty, 0x9}, {@local, 0x2}, {@broadcast, 0x4}]}, @cipso={0x86, 0x4b, 0x3, [{0x6, 0xf, "12df7d7af6c411e9635ce9f8c2"}, {0x2, 0x2}, {0x0, 0x11, "24d443d051101f9a269e67d1bdcd68"}, {0x4, 0x4, "896a"}, {0x0, 0xa, "a4f390364227012d"}, {0x6, 0xe, "215b728cf4056bb9b31e79cf"}, {0x1, 0x2}, {0x3, 0x5, 'p^ '}]}, @rr={0x7, 0x7, 0x65, [@remote]}, @generic={0x82, 0x10, "06bc9d6f171b85ba33e6ccca5fe4"}]}}}}})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=<r12=>0x0, &(0x7f00000003c0)=0x4)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', <r13=>0x0, 0x29, 0x3, 0x6, 0x101, 0x42, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7810, 0x80, 0x5, 0x6}})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r16=>0x0})
sendmsg$nl_route(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6000000010000104fcfffffffcdbdf2500000000b19c4f54ef980abf37d0a41e00e13f2288adf990ad79c71a437a369bda6cf615fd24f33815fcc65ceff99867d9d899708ee3c18b6f21235fa42de92d012d3b69be597bb5d8548cda7e3fce684ee4c3fe6435b2f0d869184caf94040000b74842cd1d7bacb7796790f8f7c81612accface804fd479d", @ANYRES32=0x0, @ANYBLOB="00000000000000003800128009000100766c616e00000000280002801c0004800c00010086050000070000000c0001000600000000000000060001000300000008000500", @ANYRES32=r16, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r10, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000700)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf2506000000440001801400020073797a6b616c6c6572300000000000000800030005000000080003000100000014000200726f736530000000000000000000000008000300010000002000018008000100", @ANYRES32=r11, @ANYBLOB="14000200626f6e645f736c6176655f31000000006000018008000300000000000800030003000000080003000100000014000200000000000000000000000000000000000800030002000000080003000200000008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="b9ef51afae1f50c8191e1f01029805e1b3bc41e3a7d85bcfd20f21b60bae79a0f16c5e5cd298934c0652981989160bed7e951ac2d4d98bec3f808390386a34343d0492fa485fab3018ad0adffb4a9cbb2ae4f019b232bd186ee8cad90eec1f2aa0f62f8a6d893f247daa3d368eb6d13104c3d75b178c703cd4a6048d059e58197af0cfde02179be440ea1eebd73025fe79f691d45f67e1a6ff3345fa714cadfa57f67a7023fd9bbac053b22dc89a97921cbd1c54093837ef5994dde8e87b76297ea38e84d41911da1cf37f24c06a730025a91c", @ANYRES32=r16, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)

469.312078ms ago: executing program 3 (id=797):
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='net_prio.prioidx\x00', 0x275a, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
landlock_create_ruleset(&(0x7f0000000000)={0x40, 0x3, 0x3, 0x0, 0x0, 0x2}, 0x30, 0x1)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x88020, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000095, 0x0, 0xfffffffffffffffd}]})
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x3, 0xffffffffffffffff, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67f, 0x6, 0xf3b8, 0xfffffffffffffffe, 0x800000000001000, 0x400, 0x4002004c4, 0x8, 0x1, 0x2000000097, 0x10, 0x0, 0x5, 0x7, 0x8, 0x8], 0xeeee8000, 0x402})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 6)

347.739772ms ago: executing program 2 (id=798):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$DVB_DVR_DMX_DQBUF(0xffffffffffffffff, 0xc0186f40, &(0x7f0000000040)={0x1, 0x20000000, 0x9, 0xb, 0x8, 0x6})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x1, 0x0, 0xff, 0x0, 0x9, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x5, 0x50, 0x40, 0x5, 0x4, 0x5, 0x7}], 0xffffffff})
openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r3)
sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES16=r4], 0x1b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd7, 0xfffffffffffffffc, 0x5e, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x1, 0x0, 0x3, 0x400000000, 0x4000000], 0x80a0000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socket(0x2a, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000240))
connect$unix(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x20040011}}], 0x1, 0x80)
sched_setattr(0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/bmAttributes\x00', 0x1, 0x0)
write(r6, &(0x7f00000004c0)='0x80', 0x4)

0s ago: executing program 1 (id=799):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502007000040600666c6167730007020000000002000000000200000000", 0x3a) (fail_nth: 5)

kernel console output (not intermixed with test programs):

15: 0000000000000000
[   96.531640][ T6680]  </TASK>
[   96.839957][ T6694] FAULT_INJECTION: forcing a failure.
[   96.839957][ T6694] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   96.844524][ T6694] CPU: 3 UID: 0 PID: 6694 Comm: syz.0.214 Not tainted syzkaller #0 PREEMPT(full) 
[   96.844550][ T6694] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   96.844557][ T6694] Call Trace:
[   96.844561][ T6694]  <TASK>
[   96.844565][ T6694]  dump_stack_lvl+0x100/0x190
[   96.844587][ T6694]  should_fail_ex.cold+0x5/0xa
[   96.844601][ T6694]  _copy_from_user+0x2e/0xd0
[   96.844614][ T6694]  sctp_setsockopt+0x8cc/0xb370
[   96.844631][ T6694]  ? __pfx_aa_sk_perm+0x10/0x10
[   96.844646][ T6694]  ? __pfx_sctp_setsockopt+0x10/0x10
[   96.844663][ T6694]  ? aa_sock_opt_perm+0xff/0x1b0
[   96.844681][ T6694]  ? sock_common_setsockopt+0x2e/0xf0
[   96.844694][ T6694]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   96.844708][ T6694]  do_sock_setsockopt+0xf3/0x1d0
[   96.844722][ T6694]  __sys_setsockopt+0x119/0x190
[   96.844734][ T6694]  __ia32_sys_setsockopt+0xbc/0x160
[   96.844744][ T6694]  ? __do_fast_syscall_32+0xb3/0x8b0
[   96.844756][ T6694]  ? lockdep_hardirqs_on+0x7d/0x110
[   96.844785][ T6694]  __do_fast_syscall_32+0x13a/0x8b0
[   96.844796][ T6694]  ? lockdep_hardirqs_on+0x7d/0x110
[   96.844808][ T6694]  do_fast_syscall_32+0x32/0x70
[   96.844819][ T6694]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   96.844833][ T6694] RIP: 0023:0xf7f84fec
[   96.844845][ T6694] Code: Unable to access opcode bytes at 0xf7f84fc2.
[   96.844850][ T6694] RSP: 002b:00000000f540450c EFLAGS: 00000292 ORIG_RAX: 000000000000016e
[   96.844861][ T6694] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000084
[   96.844867][ T6694] RDX: 0000000000000009 RSI: 0000000080000840 RDI: 000000000000009c
[   96.844873][ T6694] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   96.844879][ T6694] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   96.844885][ T6694] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   96.844898][ T6694]  </TASK>
[   97.781805][ T5741] Bluetooth: hci0: Opcode 0x206a failed: -110
[   97.797647][   T64] Bluetooth: hci0: command 0x206a tx timeout
[   97.801117][ T5741] Bluetooth: hci0: Opcode 0x206a failed: -110
[   98.921466][ T6720] netlink: 'syz.0.222': attribute type 10 has an invalid length.
[   98.980747][ T6720] .`: (slave veth0_to_bond): Enslaving as an active interface with an up link
[   99.588326][ T6731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.225'.
[   99.811807][ T1472] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   99.865021][ T5741] Bluetooth: hci0: command 0x206a tx timeout
[   99.971976][ T1472] usb 6-1: Using ep0 maxpacket: 16
[   99.978255][ T1472] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   99.986108][ T1472] usb 6-1: config 0 has no interfaces?
[   99.995285][ T6737] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  100.009966][ T1472] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.017639][ T1472] usb 6-1: Product: syz
[  100.020976][ T1472] usb 6-1: Manufacturer: syz
[  100.026977][ T1472] usb 6-1: SerialNumber: syz
[  100.078169][ T1472] usb 6-1: config 0 descriptor??
[  100.297042][ T1472] usb 6-1: USB disconnect, device number 6
[  100.582752][ T6745] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  100.585610][ T6745] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  100.589833][ T6745] vhci_hcd vhci_hcd.0: Device attached
[  100.605961][ T6747] vhci_hcd: connection closed
[  100.610246][ T5812] vhci_hcd vhci_hcd.2: stop threads
[  100.615906][ T5812] vhci_hcd vhci_hcd.2: release socket
[  100.618248][ T5812] vhci_hcd vhci_hcd.2: disconnect device
[  102.021805][ T5741] Bluetooth: hci2: Opcode 0x206a failed: -110
[  102.024368][ T5741] Bluetooth: hci2: command 0x0c1a tx timeout
[  102.088124][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.235'.
[  102.162842][ T6761] sctp_transport_update_pmtu: 106 callbacks suppressed
[  102.162859][ T6761] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  102.170325][ T6761] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  102.177245][ T6761] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  102.182669][ T6761] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  102.196595][ T6761] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  102.202491][ T6761] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  102.208211][ T6761] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  102.212821][ T6761] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  102.217084][ T6761] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  102.221686][ T6761] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  102.263550][ T6764] netlink: 'syz.3.234': attribute type 10 has an invalid length.
[  102.418380][ T6764] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  103.154727][ T6772] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  103.501717][ T1472] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  103.661806][ T1472] usb 5-1: Using ep0 maxpacket: 16
[  103.664172][ T1472] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  103.668264][ T1472] usb 5-1: config 0 has no interfaces?
[  103.672316][ T1472] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.675419][ T1472] usb 5-1: Product: syz
[  103.677083][ T1472] usb 5-1: Manufacturer: syz
[  103.678902][ T1472] usb 5-1: SerialNumber: syz
[  103.686548][ T1472] usb 5-1: config 0 descriptor??
[  103.895309][ T1472] usb 5-1: USB disconnect, device number 2
[  104.659313][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.245'.
[  104.901837][ T5741] Bluetooth: hci0: command 0x206a tx timeout
[  104.904507][   T64] Bluetooth: hci0: Opcode 0x206a failed: -110
[  104.986738][ T6806] netlink: 'syz.0.246': attribute type 10 has an invalid length.
[  105.371527][ T6812] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  106.181756][   T50] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  106.333555][   T50] usb 5-1: Using ep0 maxpacket: 16
[  106.351721][   T50] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  106.367947][   T50] usb 5-1: config 0 has no interfaces?
[  106.402628][   T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.407237][   T50] usb 5-1: Product: syz
[  106.413054][   T50] usb 5-1: Manufacturer: syz
[  106.414590][   T50] usb 5-1: SerialNumber: syz
[  106.455915][   T50] usb 5-1: config 0 descriptor??
[  106.706664][   T50] usb 5-1: USB disconnect, device number 3
[  107.381819][ T5741] Bluetooth: hci2: command 0x0c1a tx timeout
[  107.383593][   T64] Bluetooth: hci2: Opcode 0x206a failed: -110
[  108.844455][ T6844] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  109.259169][ T6857] netlink: 'syz.2.260': attribute type 10 has an invalid length.
[  109.276011][ T6857] .`: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  110.501771][ T5827] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  110.519208][ T6884] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  110.751665][ T5741] Bluetooth: hci1: Opcode 0x206a failed: -110
[  110.751912][   T64] Bluetooth: hci1: command 0x0c1a tx timeout
[  110.758333][ T5741] Bluetooth: hci1: Opcode 0x206a failed: -110
[  111.271659][ T5827] usb 5-1: Using ep0 maxpacket: 16
[  111.332582][ T5827] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  111.846527][ T5827] usb 5-1: config 0 has no interfaces?
[  111.860602][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.866069][ T5827] usb 5-1: Product: syz
[  111.867302][ T5827] usb 5-1: Manufacturer: syz
[  111.871716][ T5827] usb 5-1: SerialNumber: syz
[  111.880690][ T5827] usb 5-1: config 0 descriptor??
[  112.138082][ T6899] FAULT_INJECTION: forcing a failure.
[  112.138082][ T6899] name failslab, interval 1, probability 0, space 0, times 0
[  112.142658][ T6899] CPU: 3 UID: 0 PID: 6899 Comm: syz.3.275 Not tainted syzkaller #0 PREEMPT(full) 
[  112.142673][ T6899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  112.142679][ T6899] Call Trace:
[  112.142683][ T6899]  <TASK>
[  112.142688][ T6899]  dump_stack_lvl+0x100/0x190
[  112.142721][ T6899]  should_fail_ex.cold+0x5/0xa
[  112.142736][ T6899]  should_failslab+0xc2/0x120
[  112.142753][ T6899]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  112.142768][ T6899]  ? __alloc_skb+0x5b7/0x710
[  112.142778][ T6899]  ? __alloc_skb+0x140/0x710
[  112.142790][ T6899]  __alloc_skb+0x140/0x710
[  112.142799][ T6899]  ? __alloc_skb+0x5b7/0x710
[  112.142808][ T6899]  ? __pfx___alloc_skb+0x10/0x10
[  112.142818][ T6899]  ? ref_tracker_alloc+0x307/0x590
[  112.142850][ T6899]  alloc_skb_with_frags+0xdd/0x760
[  112.142867][ T6899]  sock_alloc_send_pskb+0x801/0x980
[  112.142888][ T6899]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  112.142907][ T6899]  ? __pfx_ieee802154_get_dev+0x10/0x10
[  112.142929][ T6899]  ? aa_sk_perm+0x30c/0xaa0
[  112.142945][ T6899]  dgram_sendmsg+0x5ec/0xf50
[  112.142959][ T6899]  ? __pfx_dgram_sendmsg+0x10/0x10
[  112.142971][ T6899]  ? aa_sock_msg_perm.isra.0+0x103/0x1c0
[  112.142983][ T6899]  ? apparmor_socket_sendmsg+0x15b/0x270
[  112.142996][ T6899]  ____sys_sendmsg+0xa4d/0xbe0
[  112.143009][ T6899]  ? __pfx_ieee802154_sock_sendmsg+0x10/0x10
[  112.143028][ T6899]  ? __pfx_____sys_sendmsg+0x10/0x10
[  112.143044][ T6899]  ? _kstrtoull+0x13c/0x1f0
[  112.143058][ T6899]  ? __pfx__kstrtoull+0x10/0x10
[  112.143073][ T6899]  ___sys_sendmsg+0x190/0x1e0
[  112.143089][ T6899]  ? __pfx____sys_sendmsg+0x10/0x10
[  112.143103][ T6899]  ? __lock_acquire+0x4c5/0x1ec0
[  112.143130][ T6899]  __sys_sendmmsg+0x309/0x440
[  112.143143][ T6899]  ? __pfx___sys_sendmmsg+0x10/0x10
[  112.143153][ T6899]  ? find_held_lock+0x2b/0x80
[  112.143172][ T6899]  ? __mutex_unlock_slowpath+0x35d/0x930
[  112.143190][ T6899]  ? fput+0x7c/0x100
[  112.143204][ T6899]  ? ksys_write+0x1ac/0x250
[  112.143217][ T6899]  __ia32_compat_sys_sendmmsg+0x9d/0x100
[  112.143238][ T6899]  ? lockdep_hardirqs_on+0x7d/0x110
[  112.143248][ T6899]  __do_fast_syscall_32+0x13a/0x8b0
[  112.143260][ T6899]  ? lockdep_hardirqs_on+0x7d/0x110
[  112.143271][ T6899]  do_fast_syscall_32+0x32/0x70
[  112.143283][ T6899]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  112.143297][ T6899] RIP: 0023:0xf7f05fec
[  112.143311][ T6899] Code: Unable to access opcode bytes at 0xf7f05fc2.
[  112.143316][ T6899] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159
[  112.143327][ T6899] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800196c0
[  112.143333][ T6899] RDX: 0000000004000050 RSI: 000000000400c010 RDI: 0000000000000000
[  112.143339][ T6899] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  112.143345][ T6899] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  112.143350][ T6899] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  112.143363][ T6899]  </TASK>
[  112.471758][ T6906] netlink: 'syz.1.276': attribute type 10 has an invalid length.
[  112.484173][ T6906] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  112.821735][   T64] Bluetooth: hci1: command 0x0c1a tx timeout
[  113.194098][   T10] usb 5-1: USB disconnect, device number 4
[  113.470555][ T6920] FAULT_INJECTION: forcing a failure.
[  113.470555][ T6920] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  113.474934][ T6920] CPU: 1 UID: 0 PID: 6920 Comm: syz.0.280 Not tainted syzkaller #0 PREEMPT(full) 
[  113.474961][ T6920] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  113.474968][ T6920] Call Trace:
[  113.474972][ T6920]  <TASK>
[  113.474976][ T6920]  dump_stack_lvl+0x100/0x190
[  113.474994][ T6920]  should_fail_ex.cold+0x5/0xa
[  113.475008][ T6920]  _copy_to_user+0x32/0xd0
[  113.475021][ T6920]  simple_read_from_buffer+0xcb/0x170
[  113.475035][ T6920]  proc_fail_nth_read+0x1af/0x230
[  113.475048][ T6920]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  113.475059][ T6920]  ? rw_verify_area+0xce/0x6d0
[  113.475076][ T6920]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  113.475087][ T6920]  vfs_read+0x1e4/0xb40
[  113.475099][ T6920]  ? __pfx_vfs_read+0x10/0x10
[  113.475108][ T6920]  ? find_held_lock+0x2b/0x80
[  113.475124][ T6920]  ? __fget_files+0x215/0x3d0
[  113.475140][ T6920]  ? __fget_files+0x21f/0x3d0
[  113.475154][ T6920]  ksys_read+0x12a/0x250
[  113.475165][ T6920]  ? __pfx_ksys_read+0x10/0x10
[  113.475179][ T6920]  do_int80_emulation+0x166/0x650
[  113.475193][ T6920]  asm_int80_emulation+0x1a/0x20
[  113.475204][ T6920] RIP: 0023:0xf71874eb
[  113.475213][ T6920] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  113.475223][ T6920] RSP: 002b:00000000f54044bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  113.475234][ T6920] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f54045d0
[  113.475240][ T6920] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  113.475246][ T6920] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  113.475251][ T6920] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  113.475257][ T6920] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  113.475270][ T6920]  </TASK>
[  113.921780][   T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  114.054081][   T10] usb 5-1: device descriptor read/64, error -71
[  114.224818][ T6941] netlink: 'syz.3.287': attribute type 10 has an invalid length.
[  114.491711][   T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  114.521747][ T5164] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  114.621759][   T10] usb 5-1: device descriptor read/64, error -71
[  114.671641][ T5164] usb 6-1: Using ep0 maxpacket: 16
[  114.674381][ T5164] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  114.677975][ T5164] usb 6-1: config 0 has no interfaces?
[  114.681351][ T5164] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.685218][ T5164] usb 6-1: Product: syz
[  114.687083][ T5164] usb 6-1: Manufacturer: syz
[  114.689155][ T5164] usb 6-1: SerialNumber: syz
[  114.695823][ T5164] usb 6-1: config 0 descriptor??
[  114.732666][   T10] usb usb5-port1: attempt power cycle
[  115.071839][   T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  115.092843][   T10] usb 5-1: device descriptor read/8, error -71
[  115.331765][   T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  115.352385][   T10] usb 5-1: device descriptor read/8, error -71
[  115.472029][   T10] usb usb5-port1: unable to enumerate USB device
[  115.551797][ T5741] Bluetooth: hci0: command 0x206a tx timeout
[  115.551802][   T64] Bluetooth: hci0: Opcode 0x206a failed: -110
[  115.840915][ T6948] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  116.432816][ T6965] netlink: 'syz.2.297': attribute type 10 has an invalid length.
[  117.151474][ T6969] Console: switching to colour dummy device 80x25
[  117.157638][ T5936] usb 6-1: USB disconnect, device number 7
[  117.204152][ T6974] FAULT_INJECTION: forcing a failure.
[  117.204152][ T6974] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  117.210975][ T6974] CPU: 1 UID: 0 PID: 6974 Comm: syz.0.299 Not tainted syzkaller #0 PREEMPT(full) 
[  117.211002][ T6974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  117.211013][ T6974] Call Trace:
[  117.211021][ T6974]  <TASK>
[  117.211035][ T6974]  dump_stack_lvl+0x100/0x190
[  117.211064][ T6974]  should_fail_ex.cold+0x5/0xa
[  117.211089][ T6974]  _copy_from_iter+0x1f4/0x1690
[  117.211143][ T6974]  ? __pfx__copy_from_iter+0x10/0x10
[  117.211163][ T6974]  ? trace_kmalloc+0xeb/0x110
[  117.211189][ T6974]  ? __kasan_kmalloc+0xaa/0xb0
[  117.211214][ T6974]  ? __kmalloc_noprof+0x345/0x820
[  117.211238][ T6974]  ? kernfs_fop_write_iter+0x26a/0x5f0
[  117.211269][ T6974]  kernfs_fop_write_iter+0x186/0x5f0
[  117.211294][ T6974]  vfs_write+0x6af/0x1050
[  117.211315][ T6974]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  117.211345][ T6974]  ? __pfx_vfs_write+0x10/0x10
[  117.211361][ T6974]  ? find_held_lock+0x2b/0x80
[  117.211405][ T6974]  ksys_write+0x12a/0x250
[  117.211423][ T6974]  ? __pfx_ksys_write+0x10/0x10
[  117.211440][ T6974]  ? ksys_write+0x1ac/0x250
[  117.211458][ T6974]  ? __pfx_ksys_write+0x10/0x10
[  117.211482][ T6974]  __do_fast_syscall_32+0x13a/0x8b0
[  117.211502][ T6974]  ? lockdep_hardirqs_on+0x7d/0x110
[  117.211522][ T6974]  do_fast_syscall_32+0x32/0x70
[  117.211542][ T6974]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  117.211578][ T6974] RIP: 0023:0xf7f84fec
[  117.211602][ T6974] Code: Unable to access opcode bytes at 0xf7f84fc2.
[  117.211610][ T6974] RSP: 002b:00000000f542550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  117.211629][ T6974] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 00000000800001c0
[  117.211640][ T6974] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  117.211652][ T6974] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  117.211662][ T6974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  117.211673][ T6974] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  117.211692][ T6974]  </TASK>
[  117.414257][ T6980] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  117.861684][   T64] Bluetooth: hci0: Opcode 0x206a failed: -110
[  117.861704][ T5741] Bluetooth: hci0: command 0x206a tx timeout
[  118.460235][ T6995] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  118.487915][ T6995] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref]
[  118.491352][ T6995] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff]
[  118.496722][ T6995] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  118.501219][ T6995] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  118.515301][ T6995] pci 0000:00:01.0: Adding to iommu group 1
[  118.523225][ T6995] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  118.525484][ T6995] pci 0000:00:01.0: vgaarb: bridge control possible
[  118.527594][ T6995] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  118.537480][ T6995] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  118.545809][ T6995] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  118.553245][ T6995] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  118.568595][ T6995] [drm] Found bochs VGA, ID 0xb0c5.
[  118.570283][ T6995] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  118.589858][ T6995] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[  118.686433][ T6995] Console: switching to colour frame buffer device 160x50
[  118.714064][ T6995] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[  119.183294][ T7004] netlink: 'syz.0.308': attribute type 10 has an invalid length.
[  119.381830][ T5741] Bluetooth: hci2: command 0x0c1a tx timeout
[  119.381877][ T5735] Bluetooth: hci2: Opcode 0x206a failed: -110
[  119.721224][ T7012] netlink: 36 bytes leftover after parsing attributes in process `syz.0.311'.
[  119.740034][ T7010] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  119.743066][   T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  119.814303][ T7016] Console: switching to colour dummy device 80x25
[  119.891818][   T10] usb 7-1: Using ep0 maxpacket: 16
[  119.894481][   T10] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  119.898344][   T10] usb 7-1: config 0 has no interfaces?
[  119.902843][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.906341][   T10] usb 7-1: Product: syz
[  119.908532][   T10] usb 7-1: Manufacturer: syz
[  119.910474][   T10] usb 7-1: SerialNumber: syz
[  119.910789][ T7019] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  119.919351][   T10] usb 7-1: config 0 descriptor??
[  119.944865][ T7019] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  119.947489][ T7019] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  119.951363][ T7019] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  119.963400][ T7019] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  119.974697][ T7019] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 15519 usecs
[  120.013089][ T7019] pci 0000:00:01.0: Adding to iommu group 1
[  120.052866][ T7019] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  120.055755][ T7019] pci 0000:00:01.0: vgaarb: bridge control possible
[  120.058500][ T7019] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  120.088956][ T7019] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  120.098960][ T7019] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  120.106715][ T7019] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  120.115011][   T42] audit: type=1400 audit(1787273254.885:136): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=7024 comm="syz.1.317"
[  120.116205][ T7019] [drm] Found bochs VGA, ID 0xb0c5.
[  120.121383][ T7019] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  120.156088][ T7019] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[  120.294143][ T7019] Console: switching to colour frame buffer device 160x50
[  120.346032][ T7019] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[  120.428005][ T7032] netlink: 'syz.1.319': attribute type 10 has an invalid length.
[  120.536970][   T61] usb 7-1: USB disconnect, device number 5
[  120.766435][ T5735] Bluetooth: hci0: Received unexpected HCI Event 0x00
[  120.957828][ T7036] netlink: 36 bytes leftover after parsing attributes in process `syz.0.321'.
[  121.176552][ T7042] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  121.781708][ T5735] Bluetooth: hci0: command 0x206a tx timeout
[  121.786185][ T5741] Bluetooth: hci0: Opcode 0x206a failed: -110
[  122.144203][ T7068] netlink: 'syz.0.331': attribute type 10 has an invalid length.
[  122.577897][ T7070] netlink: 36 bytes leftover after parsing attributes in process `syz.3.332'.
[  123.091709][ T5164] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  123.231685][   T64] Bluetooth: hci1: Opcode 0x206a failed: -110
[  123.231709][ T5741] Bluetooth: hci1: command 0x0c1a tx timeout
[  123.261651][ T5164] usb 7-1: Using ep0 maxpacket: 16
[  123.268609][ T5164] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  123.273790][ T5164] usb 7-1: config 0 has no interfaces?
[  123.277539][ T5164] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.280143][ T5164] usb 7-1: Product: syz
[  123.281502][ T5164] usb 7-1: Manufacturer: syz
[  123.283369][ T5164] usb 7-1: SerialNumber: syz
[  123.288958][ T5164] usb 7-1: config 0 descriptor??
[  123.509722][   T61] usb 7-1: USB disconnect, device number 6
[  125.310585][ T7105] netlink: 36 bytes leftover after parsing attributes in process `syz.1.344'.
[  125.486094][ T7109] netlink: 'syz.2.343': attribute type 10 has an invalid length.
[  126.771797][ T6970] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  126.931731][ T6970] usb 7-1: Using ep0 maxpacket: 16
[  126.933947][ T6970] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  126.937294][ T6970] usb 7-1: config 0 has no interfaces?
[  126.940679][ T6970] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.943590][ T6970] usb 7-1: Product: syz
[  126.945028][ T6970] usb 7-1: Manufacturer: syz
[  126.946618][ T6970] usb 7-1: SerialNumber: syz
[  126.953037][ T6970] usb 7-1: config 0 descriptor??
[  127.013302][ T7134] netlink: 36 bytes leftover after parsing attributes in process `syz.1.353'.
[  127.022387][ T5741] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  127.163072][ T6970] usb 7-1: USB disconnect, device number 7
[  128.092809][ T7142] netlink: 'syz.3.356': attribute type 10 has an invalid length.
[  129.408884][ T7164] Bluetooth: hci0: invalid length 0, exp 2 for type 7
[  129.742032][ T7179] netlink: 'syz.2.367': attribute type 10 has an invalid length.
[  129.791792][ T5936] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  129.971697][ T5936] usb 5-1: Using ep0 maxpacket: 16
[  129.977182][ T5936] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  129.985250][ T5936] usb 5-1: config 0 has no interfaces?
[  129.994435][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.999908][ T5936] usb 5-1: Product: syz
[  130.001863][ T5936] usb 5-1: Manufacturer: syz
[  130.004679][ T5936] usb 5-1: SerialNumber: syz
[  130.009933][ T5936] usb 5-1: config 0 descriptor??
[  131.158734][ T7194] Bluetooth: hci0: invalid length 0, exp 2 for type 7
[  131.273204][ T5741] Bluetooth: hci1: unexpected event for opcode 0x0407
[  131.402272][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.375'.
[  131.408043][ T7205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.375'.
[  131.557339][ T7207] netlink: 'syz.1.377': attribute type 10 has an invalid length.
[  132.590966][ T5936] usb 5-1: USB disconnect, device number 9
[  132.625197][ T1434] ieee802154 phy0 wpan0: encryption failed: -22
[  132.671720][ T1434] ieee802154 phy1 wpan1: encryption failed: -22
[  133.607227][ T7233] netlink: 'syz.1.383': attribute type 13 has an invalid length.
[  133.624575][ T7237] netlink: 36 bytes leftover after parsing attributes in process `syz.3.386'.
[  133.758931][ T7239] Bluetooth: hci0: invalid length 0, exp 2 for type 7
[  133.872263][ T7245] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  134.172081][ T7248] netlink: 'syz.3.387': attribute type 10 has an invalid length.
[  134.671779][  T850] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  134.859454][  T850] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  134.868386][  T850] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  134.875129][  T850] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0
[  134.879293][  T850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.059911][  T850] usb 6-1: USB2VGA dongle found at address 8
[  135.196425][  T850] usb 6-1: Allocated 8 output buffers
[  135.274705][ T7252] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request
[  135.736040][ T7276] bond1: entered promiscuous mode
[  135.760947][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.396'.
[  135.861882][   T64] Bluetooth: hci1: command 0x0c1a tx timeout
[  135.862444][ T5741] Bluetooth: hci1: Opcode 0x206a failed: -110
[  135.958632][ T7288] netlink: 36 bytes leftover after parsing attributes in process `syz.3.401'.
[  136.335143][ T7294] netlink: 'syz.1.399': attribute type 10 has an invalid length.
[  137.604174][ T7307] netlink: 'syz.0.405': attribute type 3 has an invalid length.
[  138.526205][ T7317] sctp_transport_update_pmtu: 48 callbacks suppressed
[  138.526264][ T7317] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  138.532619][ T7317] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  138.536864][ T7317] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  138.541192][ T7317] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  138.546098][ T7317] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  138.549667][ T7317] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  138.553664][ T7317] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  138.557759][ T7317] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  138.561782][ T7317] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  138.566147][ T7317] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  139.049503][ T7326] netlink: 36 bytes leftover after parsing attributes in process `syz.2.410'.
[  139.386441][ T7333] netlink: 'syz.2.412': attribute type 10 has an invalid length.
[  140.715109][ T7347] Driver unsupported XDP return value 0 on prog  (id 54) dev N/A, expect packet loss!
[  141.082471][ T7355] netlink: 36 bytes leftover after parsing attributes in process `syz.3.420'.
[  141.765434][ T7371] netlink: 'syz.2.423': attribute type 10 has an invalid length.
[  142.031687][ T5735] Bluetooth: hci0: command 0x206a tx timeout
[  142.035247][ T5741] Bluetooth: hci0: Opcode 0x206a failed: -110
[  142.101791][   T64] Bluetooth: hci2: Opcode 0x206a failed: -110
[  142.104363][   T64] Bluetooth: hci2: command 0x0c1a tx timeout
[  143.044355][ T7379] FAULT_INJECTION: forcing a failure.
[  143.044355][ T7379] name failslab, interval 1, probability 0, space 0, times 0
[  143.050747][ T7379] CPU: 3 UID: 0 PID: 7379 Comm: syz.3.426 Not tainted syzkaller #0 PREEMPT(full) 
[  143.050770][ T7379] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  143.050779][ T7379] Call Trace:
[  143.050785][ T7379]  <TASK>
[  143.050791][ T7379]  dump_stack_lvl+0x100/0x190
[  143.050914][ T7379]  should_fail_ex.cold+0x5/0xa
[  143.050945][ T7379]  should_failslab+0xc2/0x120
[  143.051005][ T7379]  kmem_cache_alloc_lru_noprof+0x8d/0x6a0
[  143.051033][ T7379]  ? start_dirop+0x79/0xb0
[  143.051055][ T7379]  ? alloc_inode+0x68/0x250
[  143.051078][ T7379]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  143.051115][ T7379]  alloc_inode+0x68/0x250
[  143.051135][ T7379]  new_inode+0x22/0x1c0
[  143.051157][ T7379]  __debugfs_create_file+0xd8/0x4d0
[  143.051180][ T7379]  debugfs_create_file_full+0x41/0x60
[  143.051201][ T7379]  ref_tracker_dir_debugfs+0x19e/0x2e0
[  143.051247][ T7379]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  143.051285][ T7379]  ? lockdep_init_map_type+0x5c/0x250
[  143.051312][ T7379]  ? __pfx_tun_setup+0x10/0x10
[  143.051391][ T7379]  alloc_netdev_mqs+0x314/0x15c0
[  143.051424][ T7379]  ? bpf_lsm_capable+0x9/0x10
[  143.051445][ T7379]  __tun_chr_ioctl+0x197b/0x4880
[  143.051460][ T7379]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  143.051486][ T7379]  ? __pfx___tun_chr_ioctl+0x10/0x10
[  143.051504][ T7379]  ? hook_file_ioctl_common+0x140/0x440
[  143.051542][ T7379]  ? __fget_files+0x21f/0x3d0
[  143.051562][ T7379]  ? __pfx_tun_chr_compat_ioctl+0x10/0x10
[  143.051594][ T7379]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  143.051619][ T7379]  __do_fast_syscall_32+0x13a/0x8b0
[  143.051681][ T7379]  ? lockdep_hardirqs_on+0x7d/0x110
[  143.051697][ T7379]  do_fast_syscall_32+0x32/0x70
[  143.051714][ T7379]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  143.051732][ T7379] RIP: 0023:0xf7f05fec
[  143.051751][ T7379] Code: Unable to access opcode bytes at 0xf7f05fc2.
[  143.051764][ T7379] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  143.051781][ T7379] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000400454ca
[  143.051790][ T7379] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000
[  143.051798][ T7379] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  143.051806][ T7379] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  143.051815][ T7379] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  143.051835][ T7379]  </TASK>
[  143.140273][ T7379] debugfs: out of free dentries, can not create file 'netdev@ffff8880145dc700'
[  143.163230][ T7382] Bluetooth: hci0: unsupported parameter 255
[  143.165486][ T7382] Bluetooth: hci0: unsupported parameter 255
[  143.326849][ T7389] netlink: 36 bytes leftover after parsing attributes in process `syz.3.430'.
[  144.042499][ T7406] netlink: 'syz.0.434': attribute type 10 has an invalid length.
[  144.139934][ T5827] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  144.292434][ T5827] usb 8-1: Using ep0 maxpacket: 16
[  144.298259][ T5827] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  144.301810][ T5827] usb 8-1: config 0 has no interfaces?
[  144.305662][ T5827] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.309401][ T5827] usb 8-1: Product: syz
[  144.311226][ T5827] usb 8-1: Manufacturer: syz
[  144.313836][ T5827] usb 8-1: SerialNumber: syz
[  144.319702][ T5827] usb 8-1: config 0 descriptor??
[  144.852520][ T7424] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  145.317497][ T7434] Bluetooth: hci0: unsupported parameter 255
[  145.319704][ T7434] Bluetooth: hci0: unsupported parameter 255
[  145.721807][ T7443] netlink: 'syz.1.447': attribute type 10 has an invalid length.
[  145.828869][ T7444] hpfs: hpfs_map_sector(): read error
[  146.123124][ T7448] XFS (nullb0): Invalid superblock magic number
[  146.417151][ T5827] usb 8-1: USB disconnect, device number 6
[  146.501800][ T5741] Bluetooth: hci2: Opcode 0x206a failed: -110
[  146.504443][ T5741] Bluetooth: hci2: command 0x0c1a tx timeout
[  147.221691][   T64] Bluetooth: hci1: Opcode 0x206a failed: -110
[  147.222981][ T5750] Bluetooth: hci1: command 0x0c1a tx timeout
[  147.702223][   T42] audit: type=1400 audit(1787273282.465:137): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7484 comm="syz.3.456" name="p" offset=53
[  148.204241][ T7493] FAULT_INJECTION: forcing a failure.
[  148.204241][ T7493] name failslab, interval 1, probability 0, space 0, times 0
[  148.208322][ T7493] CPU: 0 UID: 0 PID: 7493 Comm: syz.3.461 Not tainted syzkaller #0 PREEMPT(full) 
[  148.208337][ T7493] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  148.208344][ T7493] Call Trace:
[  148.208348][ T7493]  <TASK>
[  148.208353][ T7493]  dump_stack_lvl+0x100/0x190
[  148.208371][ T7493]  should_fail_ex.cold+0x5/0xa
[  148.208385][ T7493]  should_failslab+0xc2/0x120
[  148.208401][ T7493]  kmem_cache_alloc_noprof+0x91/0x6a0
[  148.208416][ T7493]  ? alloc_empty_file+0x5b/0x1c0
[  148.208445][ T7493]  alloc_empty_file+0x5b/0x1c0
[  148.208459][ T7493]  path_openat+0xdb/0x2440
[  148.208474][ T7493]  ? __pfx_path_openat+0x10/0x10
[  148.208489][ T7493]  do_file_open+0x20e/0x430
[  148.208503][ T7493]  ? __pfx_do_file_open+0x10/0x10
[  148.208524][ T7493]  ? alloc_fd+0x471/0x7a0
[  148.208558][ T7493]  ? do_getname+0x191/0x390
[  148.208575][ T7493]  do_sys_openat2+0x10f/0x1e0
[  148.208591][ T7493]  ? __pfx_do_sys_openat2+0x10/0x10
[  148.208607][ T7493]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  148.208620][ T7493]  ? __fget_files+0x21f/0x3d0
[  148.208633][ T7493]  __ia32_compat_sys_open+0xfe/0x1c0
[  148.208648][ T7493]  ? __pfx___ia32_compat_sys_open+0x10/0x10
[  148.208663][ T7493]  ? fput+0x7c/0x100
[  148.208676][ T7493]  ? ksys_write+0x1ac/0x250
[  148.208686][ T7493]  ? __pfx_ksys_write+0x10/0x10
[  148.208699][ T7493]  __do_fast_syscall_32+0x13a/0x8b0
[  148.208711][ T7493]  ? lockdep_hardirqs_on+0x7d/0x110
[  148.208723][ T7493]  do_fast_syscall_32+0x32/0x70
[  148.208735][ T7493]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  148.208749][ T7493] RIP: 0023:0xf7f05fec
[  148.208764][ T7493] Code: Unable to access opcode bytes at 0xf7f05fc2.
[  148.208769][ T7493] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000005
[  148.208780][ T7493] RAX: ffffffffffffffda RBX: 0000000080000640 RCX: 0000000000000241
[  148.208787][ T7493] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000
[  148.208793][ T7493] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  148.208799][ T7493] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  148.208804][ T7493] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  148.208817][ T7493]  </TASK>
[  148.501701][ T5735] Bluetooth: hci0: Opcode 0x206a failed: -110
[  148.504145][ T5735] Bluetooth: hci0: command 0x206a tx timeout
[  148.651935][ T6970] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  148.738723][ T7507] netlink: 'syz.0.462': attribute type 10 has an invalid length.
[  148.801691][ T6970] usb 7-1: Using ep0 maxpacket: 16
[  148.804413][ T6970] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  148.808980][ T6970] usb 7-1: config 0 has no interfaces?
[  148.814073][ T6970] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.821426][ T6970] usb 7-1: Product: syz
[  148.823303][ T6970] usb 7-1: Manufacturer: syz
[  148.831275][ T6970] usb 7-1: SerialNumber: syz
[  148.842280][ T6970] usb 7-1: config 0 descriptor??
[  149.407450][   T34] usb 7-1: USB disconnect, device number 8
[  149.538220][ T7523] netlink: 'syz.1.469': attribute type 3 has an invalid length.
[  149.542893][ T7523] netlink: 224 bytes leftover after parsing attributes in process `syz.1.469'.
[  150.492912][ T7548] netlink: 'syz.1.478': attribute type 10 has an invalid length.
[  150.696384][ T7556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.483'.
[  150.704860][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'.
[  150.726125][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.479'.
[  150.742854][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.479'.
[  150.886651][ T7564] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  150.991714][ T5750] Bluetooth: hci1: command 0x0c1a tx timeout
[  150.993886][ T5735] Bluetooth: hci1: Opcode 0x206a failed: -110
[  152.323529][ T7597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.493'.
[  152.743066][ T7605] netlink: 'syz.2.496': attribute type 10 has an invalid length.
[  153.053338][ T7609] netlink: 20 bytes leftover after parsing attributes in process `syz.3.497'.
[  153.277933][   T42] audit: type=1400 audit(1787273288.045:138): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7599 comm="syz.0.495" name="p" offset=53
[  154.282265][ T7633] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  154.406560][ T7633] FAULT_INJECTION: forcing a failure.
[  154.406560][ T7633] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  154.410830][ T7633] CPU: 2 UID: 0 PID: 7633 Comm: syz.3.506 Not tainted syzkaller #0 PREEMPT(full) 
[  154.410847][ T7633] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  154.410853][ T7633] Call Trace:
[  154.410858][ T7633]  <TASK>
[  154.410862][ T7633]  dump_stack_lvl+0x100/0x190
[  154.410882][ T7633]  should_fail_ex.cold+0x5/0xa
[  154.410895][ T7633]  _copy_from_iter+0x1f4/0x1690
[  154.410923][ T7633]  ? __pfx__copy_from_iter+0x10/0x10
[  154.410934][ T7633]  ? trace_kmalloc+0xeb/0x110
[  154.410950][ T7633]  ? __kasan_kmalloc+0xaa/0xb0
[  154.410965][ T7633]  ? __kmalloc_noprof+0x345/0x820
[  154.410979][ T7633]  ? kernfs_fop_write_iter+0x26a/0x5f0
[  154.411005][ T7633]  kernfs_fop_write_iter+0x186/0x5f0
[  154.411023][ T7633]  vfs_write+0x6af/0x1050
[  154.411035][ T7633]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  154.411052][ T7633]  ? __pfx_vfs_write+0x10/0x10
[  154.411062][ T7633]  ? find_held_lock+0x2b/0x80
[  154.411087][ T7633]  ksys_write+0x12a/0x250
[  154.411097][ T7633]  ? __pfx_ksys_write+0x10/0x10
[  154.411107][ T7633]  ? ksys_write+0x1ac/0x250
[  154.411118][ T7633]  ? __pfx_ksys_write+0x10/0x10
[  154.411131][ T7633]  __do_fast_syscall_32+0x13a/0x8b0
[  154.411144][ T7633]  ? lockdep_hardirqs_on+0x7d/0x110
[  154.411155][ T7633]  do_fast_syscall_32+0x32/0x70
[  154.411167][ T7633]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  154.411181][ T7633] RIP: 0023:0xf7f05fec
[  154.411194][ T7633] Code: Unable to access opcode bytes at 0xf7f05fc2.
[  154.411199][ T7633] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  154.411210][ T7633] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000a00
[  154.411216][ T7633] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000
[  154.411222][ T7633] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  154.411228][ T7633] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  154.411234][ T7633] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  154.411247][ T7633]  </TASK>
[  154.562256][ T7645] FAULT_INJECTION: forcing a failure.
[  154.562256][ T7645] name failslab, interval 1, probability 0, space 0, times 0
[  154.566279][ T7645] CPU: 3 UID: 0 PID: 7645 Comm: syz.3.509 Not tainted syzkaller #0 PREEMPT(full) 
[  154.566295][ T7645] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  154.566303][ T7645] Call Trace:
[  154.566307][ T7645]  <TASK>
[  154.566312][ T7645]  dump_stack_lvl+0x100/0x190
[  154.566331][ T7645]  should_fail_ex.cold+0x5/0xa
[  154.566344][ T7645]  should_failslab+0xc2/0x120
[  154.566361][ T7645]  __kmalloc_noprof+0xfc/0x820
[  154.566374][ T7645]  ? __pfx_dynamic_dname+0x10/0x10
[  154.566392][ T7645]  ? tomoyo_encode2+0xfb/0x3c0
[  154.566423][ T7645]  tomoyo_encode2+0xfb/0x3c0
[  154.566440][ T7645]  tomoyo_encode+0x29/0x50
[  154.566454][ T7645]  tomoyo_realpath_from_path+0x18c/0x690
[  154.566473][ T7645]  tomoyo_path_number_perm+0x23c/0x580
[  154.566486][ T7645]  ? tomoyo_path_number_perm+0x22e/0x580
[  154.566514][ T7645]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  154.566528][ T7645]  ? get_pid_task+0x106/0x250
[  154.566556][ T7645]  ? find_held_lock+0x2b/0x80
[  154.566579][ T7645]  ? __fget_files+0x215/0x3d0
[  154.566596][ T7645]  ? hook_file_ioctl_common+0x140/0x440
[  154.566619][ T7645]  ? __fget_files+0x215/0x3d0
[  154.566642][ T7645]  ? __fget_files+0x21f/0x3d0
[  154.566663][ T7645]  security_file_ioctl_compat+0xd3/0x230
[  154.566685][ T7645]  __ia32_compat_sys_ioctl+0xc2/0x360
[  154.566705][ T7645]  __do_fast_syscall_32+0x13a/0x8b0
[  154.566718][ T7645]  ? lockdep_hardirqs_on+0x7d/0x110
[  154.566729][ T7645]  do_fast_syscall_32+0x32/0x70
[  154.566741][ T7645]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  154.566755][ T7645] RIP: 0023:0xf7f05fec
[  154.566770][ T7645] Code: Unable to access opcode bytes at 0xf7f05fc2.
[  154.566775][ T7645] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  154.566786][ T7645] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000ae41
[  154.566793][ T7645] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  154.566799][ T7645] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  154.566805][ T7645] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  154.566811][ T7645] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  154.566834][ T7645]  </TASK>
[  154.566860][ T7645] ERROR: Out of memory at tomoyo_realpath_from_path.
[  154.613869][ T7648] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  154.656723][   T42] audit: type=1326 audit(1787273289.425:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.2.507" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000
[  154.663692][   T42] audit: type=1326 audit(1787273289.425:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.2.507" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000
[  154.670374][   T42] audit: type=1326 audit(1787273289.425:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.2.507" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71374eb code=0x7ffc0000
[  154.677330][   T42] audit: type=1326 audit(1787273289.425:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.2.507" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000
[  154.684654][   T42] audit: type=1326 audit(1787273289.425:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.2.507" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000
[  154.691469][   T42] audit: type=1326 audit(1787273289.435:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.2.507" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f32fec code=0x7ffc0000
[  154.698401][   T42] audit: type=1326 audit(1787273289.435:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.2.507" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000
[  154.707106][   T42] audit: type=1326 audit(1787273289.435:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.2.507" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000
[  154.715442][   T42] audit: type=1326 audit(1787273289.435:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.2.507" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf7f32fec code=0x7ffc0000
[  154.808790][ T7650] netlink: 'syz.1.508': attribute type 10 has an invalid length.
[  154.915800][ T7654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.511'.
[  155.198029][ T7659] FAULT_INJECTION: forcing a failure.
[  155.198029][ T7659] name failslab, interval 1, probability 0, space 0, times 0
[  155.203135][ T7659] CPU: 3 UID: 0 PID: 7659 Comm: syz.0.512 Not tainted syzkaller #0 PREEMPT(full) 
[  155.203151][ T7659] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  155.203158][ T7659] Call Trace:
[  155.203164][ T7659]  <TASK>
[  155.203169][ T7659]  dump_stack_lvl+0x100/0x190
[  155.203188][ T7659]  should_fail_ex.cold+0x5/0xa
[  155.203201][ T7659]  should_failslab+0xc2/0x120
[  155.203218][ T7659]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  155.203233][ T7659]  ? __alloc_skb+0x5b7/0x710
[  155.203244][ T7659]  ? __alloc_skb+0x140/0x710
[  155.203255][ T7659]  __alloc_skb+0x140/0x710
[  155.203264][ T7659]  ? __alloc_skb+0x5b7/0x710
[  155.203273][ T7659]  ? __pfx___alloc_skb+0x10/0x10
[  155.203287][ T7659]  netlink_alloc_large_skb+0x69/0x150
[  155.203317][ T7659]  netlink_sendmsg+0x680/0xda0
[  155.203335][ T7659]  ? __pfx_netlink_sendmsg+0x10/0x10
[  155.203352][ T7659]  ? apparmor_socket_sendmsg+0x15b/0x270
[  155.203367][ T7659]  ____sys_sendmsg+0xa4d/0xbe0
[  155.203381][ T7659]  ? __pfx_netlink_sendmsg+0x10/0x10
[  155.203397][ T7659]  ? __pfx_____sys_sendmsg+0x10/0x10
[  155.203416][ T7659]  ___sys_sendmsg+0x190/0x1e0
[  155.203432][ T7659]  ? __pfx____sys_sendmsg+0x10/0x10
[  155.203452][ T7659]  ? find_held_lock+0x2b/0x80
[  155.203476][ T7659]  __sys_sendmsg+0x160/0x210
[  155.203488][ T7659]  ? __pfx___sys_sendmsg+0x10/0x10
[  155.203502][ T7659]  ? __pfx_ksys_write+0x10/0x10
[  155.203517][ T7659]  __do_fast_syscall_32+0x13a/0x8b0
[  155.203529][ T7659]  ? lockdep_hardirqs_on+0x7d/0x110
[  155.203541][ T7659]  do_fast_syscall_32+0x32/0x70
[  155.203553][ T7659]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  155.203567][ T7659] RIP: 0023:0xf7f84fec
[  155.203581][ T7659] Code: Unable to access opcode bytes at 0xf7f84fc2.
[  155.203585][ T7659] RSP: 002b:00000000f540450c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  155.203598][ T7659] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080004380
[  155.203604][ T7659] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  155.203610][ T7659] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  155.203616][ T7659] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  155.203622][ T7659] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  155.203640][ T7659]  </TASK>
[  155.334876][ T7663] netlink: 'syz.2.513': attribute type 5 has an invalid length.
[  155.337442][ T7663] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.513'.
[  156.342039][   T64] Bluetooth: hci1: command 0x0c1a tx timeout
[  156.354219][ T5735] Bluetooth: hci1: Opcode 0x206a failed: -110
[  157.461802][ T5750] Bluetooth: hci2: Opcode 0x206a failed: -110
[  157.472199][ T5750] Bluetooth: hci2: command 0x0c1a tx timeout
[  158.575858][ T1165] IPVS: starting estimator thread 0...
[  158.632733][ T7710] FAULT_INJECTION: forcing a failure.
[  158.632733][ T7710] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  158.638397][ T7710] CPU: 3 UID: 0 PID: 7710 Comm: syz.0.526 Not tainted syzkaller #0 PREEMPT(full) 
[  158.638413][ T7710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  158.638420][ T7710] Call Trace:
[  158.638424][ T7710]  <TASK>
[  158.638429][ T7710]  dump_stack_lvl+0x100/0x190
[  158.638447][ T7710]  should_fail_ex.cold+0x5/0xa
[  158.638460][ T7710]  _copy_to_user+0x32/0xd0
[  158.638487][ T7710]  simple_read_from_buffer+0xcb/0x170
[  158.638514][ T7710]  proc_fail_nth_read+0x1af/0x230
[  158.638528][ T7710]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  158.638540][ T7710]  ? rw_verify_area+0xce/0x6d0
[  158.638557][ T7710]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  158.638568][ T7710]  vfs_read+0x1e4/0xb40
[  158.638580][ T7710]  ? __pfx_vfs_read+0x10/0x10
[  158.638589][ T7710]  ? find_held_lock+0x2b/0x80
[  158.638606][ T7710]  ? __fget_files+0x215/0x3d0
[  158.638620][ T7710]  ? __fget_files+0x21f/0x3d0
[  158.638635][ T7710]  ksys_read+0x12a/0x250
[  158.638646][ T7710]  ? __pfx_ksys_read+0x10/0x10
[  158.638661][ T7710]  do_int80_emulation+0x166/0x650
[  158.638675][ T7710]  asm_int80_emulation+0x1a/0x20
[  158.638686][ T7710] RIP: 0023:0xf71874eb
[  158.638695][ T7710] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  158.638705][ T7710] RSP: 002b:00000000f54464bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  158.638717][ T7710] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54465d0
[  158.638723][ T7710] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  158.638729][ T7710] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  158.638735][ T7710] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  158.638740][ T7710] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  158.638753][ T7710]  </TASK>
[  158.691775][ T7702] IPVS: using max 44 ests per chain, 105600 per kthread
[  158.696025][ T7704] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  158.749717][ T7714] IPVS: Error connecting to the multicast addr
[  158.784750][ T7715] netlink: 'syz.2.525': attribute type 10 has an invalid length.
[  159.573551][ T7734] ip6gretap0: entered promiscuous mode
[  160.081525][ T7743] ip6gretap0: entered promiscuous mode
[  160.152232][ T7745] FAULT_INJECTION: forcing a failure.
[  160.152232][ T7745] name failslab, interval 1, probability 0, space 0, times 0
[  160.156960][ T7745] CPU: 2 UID: 0 PID: 7745 Comm: syz.0.537 Not tainted syzkaller #0 PREEMPT(full) 
[  160.156976][ T7745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  160.156983][ T7745] Call Trace:
[  160.156987][ T7745]  <TASK>
[  160.156992][ T7745]  dump_stack_lvl+0x100/0x190
[  160.157010][ T7745]  should_fail_ex.cold+0x5/0xa
[  160.157023][ T7745]  should_failslab+0xc2/0x120
[  160.157040][ T7745]  __kmalloc_cache_noprof+0x91/0x6b0
[  160.157052][ T7745]  ? kasan_quarantine_put+0x104/0x240
[  160.157064][ T7745]  ? lockdep_hardirqs_on+0x7d/0x110
[  160.157075][ T7745]  ? udmabuf_create+0xc0/0x12a0
[  160.157113][ T7745]  udmabuf_create+0xc0/0x12a0
[  160.157126][ T7745]  ? __lock_acquire+0x4c5/0x1ec0
[  160.157141][ T7745]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  160.157159][ T7745]  ? __pfx_udmabuf_create+0x10/0x10
[  160.157172][ T7745]  ? find_held_lock+0x2b/0x80
[  160.157193][ T7745]  ? __might_fault+0xc5/0x140
[  160.157211][ T7745]  ? __might_fault+0xc5/0x140
[  160.157237][ T7745]  udmabuf_ioctl+0x18f/0x300
[  160.157258][ T7745]  ? __pfx_udmabuf_ioctl+0x10/0x10
[  160.157279][ T7745]  ? find_held_lock+0x2b/0x80
[  160.157309][ T7745]  ? __fget_files+0x21f/0x3d0
[  160.157326][ T7745]  ? __pfx_udmabuf_ioctl+0x10/0x10
[  160.157339][ T7745]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  160.157364][ T7745]  __do_fast_syscall_32+0x13a/0x8b0
[  160.157376][ T7745]  ? lockdep_hardirqs_on+0x7d/0x110
[  160.157388][ T7745]  do_fast_syscall_32+0x32/0x70
[  160.157400][ T7745]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  160.157414][ T7745] RIP: 0023:0xf7f84fec
[  160.157427][ T7745] Code: Unable to access opcode bytes at 0xf7f84fc2.
[  160.157432][ T7745] RSP: 002b:00000000f53c450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  160.157444][ T7745] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000040187542
[  160.157451][ T7745] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000
[  160.157457][ T7745] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  160.157462][ T7745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  160.157469][ T7745] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  160.157481][ T7745]  </TASK>
[  160.780935][ T7756] netlink: 'syz.2.540': attribute type 10 has an invalid length.
[  161.105565][ T7757] netlink: 20 bytes leftover after parsing attributes in process `syz.0.541'.
[  161.508541][   T42] kauditd_printk_skb: 24 callbacks suppressed
[  161.508649][   T42] audit: type=1400 audit(1787273296.275:172): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7766 comm="syz.3.545" name="p" offset=53
[  161.541976][   T64] Bluetooth: hci0: command 0x206a tx timeout
[  161.546586][ T5750] Bluetooth: hci0: Opcode 0x206a failed: -110
[  162.300130][ T7782] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  162.320831][ T7782] bond0 (unregistering): Released all slaves
[  163.301936][ T5735] Bluetooth: hci1: Opcode 0x206a failed: -110
[  163.303972][ T5735] Bluetooth: hci1: command 0x0c1a tx timeout
[  163.635723][ T7807] netlink: 'syz.3.555': attribute type 10 has an invalid length.
[  163.953272][   T42] audit: type=1400 audit(1787273298.705:173): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7809 comm="syz.1.559" name="p" offset=53
[  164.060827][   T42] audit: type=1400 audit(1787273298.825:174): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7812 comm="syz.2.560" name="p" offset=53
[  165.541781][ T5735] Bluetooth: hci2: Opcode 0x206a failed: -110
[  165.542035][ T5750] Bluetooth: hci2: command 0x0c1a tx timeout
[  166.595263][ T7839] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.007065][ T7840] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.170928][ T7840] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.407318][ T7840] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.676689][   T42] audit: type=1400 audit(1787273302.445:175): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7843 comm="syz.2.569" name="p" offset=53
[  167.770596][ T5812] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.773769][ T5812] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.821916][ T5812] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.824689][ T5812] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.073551][   T42] audit: type=1326 audit(1787273302.845:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7846 comm="syz.1.570" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x0
[  168.417081][ T7853] netlink: 'syz.0.571': attribute type 10 has an invalid length.
[  168.811918][ T1472] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  168.992568][ T1472] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00
[  168.997126][ T1472] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  169.000526][ T1472] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  169.005166][ T1472] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  169.008308][ T1472] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64
[  169.011445][ T1472] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64
[  169.014819][ T1472] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64
[  169.017925][ T1472] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64
[  169.020964][ T1472] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64
[  169.024286][ T1472] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  169.027381][ T1472] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  169.030353][ T1472] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  169.033610][ T1472] usb 7-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 14
[  169.039487][ T1472] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.042259][ T1472] usb 7-1: Product: syz
[  169.043581][ T1472] usb 7-1: Manufacturer: syz
[  169.045125][ T1472] usb 7-1: SerialNumber: syz
[  169.052008][ T7855] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  169.055553][ T7855] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  169.058686][ T7855] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  169.066480][ T7855] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  169.070133][ T7855] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  169.079931][ T7855] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  169.084820][ T7855] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  169.092262][ T7855] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  169.102303][ T1472] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected
[  169.231785][ T5735] Bluetooth: hci2: Opcode 0x206a failed: -110
[  169.234538][ T5735] Bluetooth: hci2: command 0x0c1a tx timeout
[  169.353604][ T7863] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  169.805276][ T1472] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 7
[  170.172676][ T7882] netlink: 'syz.3.578': attribute type 10 has an invalid length.
[  170.529772][   T42] audit: type=1400 audit(1787273305.155:177): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7878 comm="syz.2.579" name="p" offset=53
[  170.869872][   T42] audit: type=1400 audit(1787273305.635:178): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7885 comm="syz.3.581" name="p" offset=53
[  171.151677][   T64] Bluetooth: hci3: command 0x0c1a tx timeout
[  171.151854][ T5750] Bluetooth: hci3: Opcode 0x206a failed: -110
[  171.459468][ T1472] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 5
[  171.538822][ T1472] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  171.612168][ T1472] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 3
[  171.616120][ T1472] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 4
[  171.622854][ T1472] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6
[  171.631693][ T5750] Bluetooth: hci0: command 0x206a tx timeout
[  171.633283][ T5735] Bluetooth: hci0: Opcode 0x206a failed: -110
[  171.653701][ T1472] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  171.807282][ T1472] usb 7-1: USB disconnect, device number 9
[  172.233178][ T7898] netlink: 'syz.3.584': attribute type 10 has an invalid length.
[  172.376353][ T1472] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  172.428462][ T1472] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  172.445707][ T1472] keyspan 7-1:1.0: device disconnected
[  172.614421][ T7906] block nbd1: NBD_DISCONNECT
[  172.722467][   T61] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  172.882117][   T61] usb 5-1: Using ep0 maxpacket: 16
[  172.884254][   T61] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  172.887768][   T61] usb 5-1: config 0 has no interfaces?
[  172.892930][   T61] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.895597][   T61] usb 5-1: Product: syz
[  172.897086][   T61] usb 5-1: Manufacturer: syz
[  172.898719][   T61] usb 5-1: SerialNumber: syz
[  172.902585][   T61] usb 5-1: config 0 descriptor??
[  172.925707][   T42] audit: type=1400 audit(1787273307.695:179): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7918 comm="syz.3.593" name="p" offset=53
[  174.501823][ T5735] Bluetooth: hci2: Opcode 0x206a failed: -110
[  174.503272][ T5750] Bluetooth: hci2: command 0x0c1a tx timeout
[  175.456334][ T5936] usb 5-1: USB disconnect, device number 10
[  175.873520][ T7943] netlink: 'syz.0.599': attribute type 10 has an invalid length.
[  177.102355][   T42] audit: type=1400 audit(1787273311.875:180): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7960 comm="syz.1.604" name="p" offset=53
[  177.621814][ T5735] Bluetooth: hci3: command 0x0c1a tx timeout
[  177.642216][ T5750] Bluetooth: hci3: Opcode 0x206a failed: -110
[  179.000354][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.609'.
[  179.559207][ T7983] netlink: 'syz.3.608': attribute type 10 has an invalid length.
[  179.610060][ T7988] netlink: 'syz.2.610': attribute type 10 has an invalid length.
[  180.393740][   T42] audit: type=1400 audit(1787273315.165:181): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7997 comm="syz.2.614" name="p" offset=53
[  180.421710][ T5735] Bluetooth: hci2: command 0x0c1a tx timeout
[  180.423816][ T5750] Bluetooth: hci2: Opcode 0x206a failed: -110
[  181.783225][ T8022] futex_wake_op: syz.0.623 tries to shift op by 144; fix this program
[  181.915938][ T8023] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:0
[  181.927775][ T5750] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  182.334647][ T8031] netlink: 'syz.2.624': attribute type 10 has an invalid length.
[  182.817344][   T42] audit: type=1400 audit(1787273317.585:182): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=8035 comm="syz.1.626" name="p" offset=53
[  186.978799][ T8068] netlink: 'syz.0.635': attribute type 10 has an invalid length.
[  187.656075][ T8077] netlink: 'syz.3.637': attribute type 10 has an invalid length.
[  187.999861][ T8083] block nbd0: NBD_DISCONNECT
[  189.506416][ T8102] netlink: 'syz.2.645': attribute type 10 has an invalid length.
[  190.299272][ T8105] netlink: 'syz.1.646': attribute type 10 has an invalid length.
[  190.507530][   T42] audit: type=1400 audit(1787273325.275:183): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=8109 comm="syz.2.648" name="p" offset=53
[  191.397962][ T8118] netlink: 'syz.3.651': attribute type 10 has an invalid length.
[  191.473234][ T8126] capability: warning: `syz.1.654' uses 32-bit capabilities (legacy support in use)
[  191.482235][   T42] audit: type=1400 audit(1787273326.255:184): apparmor="STATUS" operation="profile_load" info="not policy admin" error=-13 profile="unconfined" pid=8125 comm="syz.1.654"
[  191.626308][ T8133] MTD: Couldn't look up './dev/mtdblock0': -2
[  191.900327][ T8139] jffs2: notice: (8139) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  192.362167][ T8150] netlink: 'syz.2.662': attribute type 10 has an invalid length.
[  192.661146][ T5936] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  192.716240][ T8155] netlink: 'syz.0.665': attribute type 5 has an invalid length.
[  192.785887][   T42] audit: type=1807 audit(1787273327.555:185): action=measure func=FILE_CHECK res=1
[  192.787854][ T8151] ima: policy update completed
[  192.791151][   T42] audit: type=1802 audit(1787273327.555:186): pid=8151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.1.664" res=1 errno=0
[  192.812164][ T5936] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  192.816495][ T5936] usb 8-1: config 1 has an invalid interface number: 7 but max is 0
[  192.819262][ T5936] usb 8-1: config 1 has no interface number 0
[  192.821219][ T5936] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  192.825653][ T5936] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  192.829280][ T5936] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  192.835460][ T5936] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.838114][ T5936] usb 8-1: Product: syz
[  192.839497][ T5936] usb 8-1: Manufacturer: syz
[  192.841013][ T5936] usb 8-1: SerialNumber: syz
[  192.845623][ T8148] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  192.845624][   T42] audit: type=1800 audit(1787273327.615:187): pid=7478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=140747 res=0 errno=0
[  192.847487][   T42] audit: type=1800 audit(1787273327.615:188): pid=7478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=140779 res=0 errno=0
[  192.861421][   T42] audit: type=1800 audit(1787273327.615:189): pid=7478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=140754 res=0 errno=0
[  192.867703][   T42] audit: type=1800 audit(1787273327.615:190): pid=7478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=140755 res=0 errno=0
[  192.943303][   T42] audit: type=1800 audit(1787273327.715:191): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15653 res=0 errno=0
[  192.952609][   T42] audit: type=1800 audit(1787273327.725:192): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15653 res=0 errno=0
[  193.051276][ T8148] FAULT_INJECTION: forcing a failure.
[  193.051276][ T8148] name failslab, interval 1, probability 0, space 0, times 0
[  193.056525][ T8148] CPU: 3 UID: 0 PID: 8148 Comm: syz.3.663 Not tainted syzkaller #0 PREEMPT(full) 
[  193.056550][ T8148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  193.056561][ T8148] Call Trace:
[  193.056567][ T8148]  <TASK>
[  193.056576][ T8148]  dump_stack_lvl+0x100/0x190
[  193.056606][ T8148]  should_fail_ex.cold+0x5/0xa
[  193.056628][ T8148]  should_failslab+0xc2/0x120
[  193.056652][ T8148]  __kmalloc_noprof+0xfc/0x820
[  193.056679][ T8148]  ? tomoyo_encode2+0xfb/0x3c0
[  193.056710][ T8148]  tomoyo_encode2+0xfb/0x3c0
[  193.056737][ T8148]  tomoyo_encode+0x29/0x50
[  193.056763][ T8148]  tomoyo_realpath_from_path+0x18c/0x690
[  193.056795][ T8148]  tomoyo_path_number_perm+0x23c/0x580
[  193.056818][ T8148]  ? tomoyo_path_number_perm+0x22e/0x580
[  193.056840][ T8148]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  193.056872][ T8148]  ? find_held_lock+0x2b/0x80
[  193.056888][ T8148]  ? __fget_files+0x215/0x3d0
[  193.056899][ T8148]  ? hook_file_ioctl_common+0x140/0x440
[  193.056913][ T8148]  ? __fget_files+0x215/0x3d0
[  193.056926][ T8148]  ? __fget_files+0x21f/0x3d0
[  193.056939][ T8148]  security_file_ioctl_compat+0xd3/0x230
[  193.056955][ T8148]  __ia32_compat_sys_ioctl+0xc2/0x360
[  193.056974][ T8148]  __do_fast_syscall_32+0x13a/0x8b0
[  193.056986][ T8148]  ? lockdep_hardirqs_on+0x7d/0x110
[  193.056998][ T8148]  do_fast_syscall_32+0x32/0x70
[  193.057010][ T8148]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  193.057031][ T8148] RIP: 0023:0xf7f05fec
[  193.057050][ T8148] Code: Unable to access opcode bytes at 0xf7f05fc2.
[  193.057058][ T8148] RSP: 002b:00000000f53c4464 EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  193.057076][ T8148] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040045506
[  193.057087][ T8148] RDX: 0000000000000000 RSI: 00000000f7397ff4 RDI: 0000000000000000
[  193.057097][ T8148] RBP: 000000000015830c R08: 0000000000000000 R09: 0000000000000000
[  193.057107][ T8148] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  193.057117][ T8148] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  193.057135][ T8148]  </TASK>
[  193.057147][ T8148] ERROR: Out of memory at tomoyo_realpath_from_path.
[  193.133081][ T8148] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  193.353902][ T6970] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  193.364007][ T5936] sierra_net 8-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07
[  193.448360][ T8169] jffs2: notice: (8169) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  193.511698][ T6970] usb 7-1: Using ep0 maxpacket: 16
[  193.513896][ T6970] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  193.517914][ T6970] usb 7-1: config 0 has no interfaces?
[  193.525350][ T6970] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.527791][ T6970] usb 7-1: Product: syz
[  193.531920][ T6970] usb 7-1: Manufacturer: syz
[  193.533558][ T6970] usb 7-1: SerialNumber: syz
[  193.550606][ T5936] sierra_net 8-1:1.7 wwan0: Submit SYNC failed -71
[  193.555637][ T6970] usb 7-1: config 0 descriptor??
[  193.557422][ T5936] sierra_net 8-1:1.7 wwan0: Send SYNC failed, status -71
[  193.561862][ T5936] sierra_net 8-1:1.7 wwan0: Submit SYNC failed -71
[  193.570098][ T5936] sierra_net 8-1:1.7 wwan0: Send SYNC failed, status -71
[  193.598153][ T5936] usb 8-1: USB disconnect, device number 7
[  193.623602][ T5936] sierra_net 8-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem
[  193.734756][ T5936] sierra_net 8-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19
[  194.036750][ T1434] ieee802154 phy0 wpan0: encryption failed: -22
[  194.039379][ T1434] ieee802154 phy1 wpan1: encryption failed: -22
[  194.224427][ T5884] usb 7-1: USB disconnect, device number 10
[  194.285901][ T8179] FAULT_INJECTION: forcing a failure.
[  194.285901][ T8179] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  194.289995][ T8179] CPU: 2 UID: 0 PID: 8179 Comm: syz.3.676 Not tainted syzkaller #0 PREEMPT(full) 
[  194.290010][ T8179] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  194.290016][ T8179] Call Trace:
[  194.290021][ T8179]  <TASK>
[  194.290025][ T8179]  dump_stack_lvl+0x100/0x190
[  194.290043][ T8179]  should_fail_ex.cold+0x5/0xa
[  194.290057][ T8179]  _copy_to_user+0x32/0xd0
[  194.290071][ T8179]  simple_read_from_buffer+0xcb/0x170
[  194.290085][ T8179]  proc_fail_nth_read+0x1af/0x230
[  194.290097][ T8179]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  194.290109][ T8179]  ? rw_verify_area+0xce/0x6d0
[  194.290125][ T8179]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  194.290136][ T8179]  vfs_read+0x1e4/0xb40
[  194.290148][ T8179]  ? __pfx_vfs_read+0x10/0x10
[  194.290158][ T8179]  ? find_held_lock+0x2b/0x80
[  194.290174][ T8179]  ? __fget_files+0x215/0x3d0
[  194.290188][ T8179]  ? __fget_files+0x21f/0x3d0
[  194.290203][ T8179]  ksys_read+0x12a/0x250
[  194.290213][ T8179]  ? __pfx_ksys_read+0x10/0x10
[  194.290227][ T8179]  do_int80_emulation+0x166/0x650
[  194.290242][ T8179]  asm_int80_emulation+0x1a/0x20
[  194.290253][ T8179] RIP: 0023:0xf71074eb
[  194.290262][ T8179] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  194.290273][ T8179] RSP: 002b:00000000f53c64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  194.290284][ T8179] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53c65d0
[  194.290290][ T8179] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  194.290296][ T8179] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  194.290302][ T8179] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  194.290308][ T8179] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  194.290321][ T8179]  </TASK>
[  195.244719][ T8200] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  195.626499][   T42] kauditd_printk_skb: 36 callbacks suppressed
[  195.626742][   T42] audit: type=1400 audit(1787273330.375:229): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=8202 comm="syz.3.685" name="p" offset=53
[  195.898455][   T42] audit: type=1800 audit(1787273330.665:230): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15782 res=0 errno=0
[  196.501962][ T5735] Bluetooth: hci1: command 0x0c1a tx timeout
[  196.517977][ T5750] Bluetooth: hci1: Opcode 0x206a failed: -110
[  196.801696][   T42] audit: type=1800 audit(1787273331.565:231): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15782 res=0 errno=0
[  196.946643][   T42] audit: type=1800 audit(1787273331.715:232): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15782 res=0 errno=0
[  197.039212][   T42] audit: type=1800 audit(1787273331.805:233): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=141044 res=0 errno=0
[  197.044087][   T42] audit: type=1800 audit(1787273331.815:234): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=141056 res=0 errno=0
[  197.069842][   T42] audit: type=1800 audit(1787273331.815:235): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=141068 res=0 errno=0
[  197.130366][   T42] audit: type=1800 audit(1787273331.895:236): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15653 res=0 errno=0
[  197.141838][ T5750] Bluetooth: hci2: command 0x0c1a tx timeout
[  197.144511][   T64] Bluetooth: hci2: Opcode 0x206a failed: -110
[  197.168191][   T42] audit: type=1800 audit(1787273331.935:237): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15653 res=0 errno=0
[  197.218761][   T42] audit: type=1800 audit(1787273331.985:238): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15653 res=0 errno=0
[  197.245722][ T8219] jffs2: notice: (8219) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  197.424848][ T8226] tmpfs: Bad value for 'nr_inodes'
[  197.508604][ T8227] netlink: 'syz.3.694': attribute type 10 has an invalid length.
[  199.734761][ T8261] jffs2: notice: (8261) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  200.485354][ T8271] FAULT_INJECTION: forcing a failure.
[  200.485354][ T8271] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  200.489953][ T8271] CPU: 2 UID: 0 PID: 8271 Comm: syz.3.709 Not tainted syzkaller #0 PREEMPT(full) 
[  200.489976][ T8271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  200.489987][ T8271] Call Trace:
[  200.489994][ T8271]  <TASK>
[  200.490001][ T8271]  dump_stack_lvl+0x100/0x190
[  200.490029][ T8271]  should_fail_ex.cold+0x5/0xa
[  200.490051][ T8271]  _copy_from_user+0x2e/0xd0
[  200.490072][ T8271]  copy_mount_options+0x76/0x190
[  200.490097][ T8271]  __ia32_sys_mount+0x1ab/0x310
[  200.490120][ T8271]  ? __pfx___ia32_sys_mount+0x10/0x10
[  200.490141][ T8271]  ? ksys_write+0x1ac/0x250
[  200.490159][ T8271]  ? __pfx_ksys_write+0x10/0x10
[  200.490181][ T8271]  __do_fast_syscall_32+0x13a/0x8b0
[  200.490202][ T8271]  ? lockdep_hardirqs_on+0x7d/0x110
[  200.490222][ T8271]  do_fast_syscall_32+0x32/0x70
[  200.490240][ T8271]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  200.490265][ T8271] RIP: 0023:0xf7f05fec
[  200.490284][ T8271] Code: Unable to access opcode bytes at 0xf7f05fc2.
[  200.490291][ T8271] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015
[  200.490306][ T8271] RAX: ffffffffffffffda RBX: 0000000080000300 RCX: 0000000080000200
[  200.490316][ T8271] RDX: 0000000080000400 RSI: 0000000000000000 RDI: 0000000080000800
[  200.490326][ T8271] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  200.490335][ T8271] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  200.490344][ T8271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  200.490365][ T8271]  </TASK>
[  200.547433][ T8271] jffs2: notice: (8271) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  200.762870][ T8280] netlink: 'syz.2.711': attribute type 10 has an invalid length.
[  200.763874][   T42] kauditd_printk_skb: 22 callbacks suppressed
[  200.763886][   T42] audit: type=1400 audit(1787273335.535:261): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=8278 comm="syz.3.712" name="p" offset=53
[  201.055050][   T42] audit: type=1800 audit(1787273335.825:262): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0
[  201.978046][   T42] audit: type=1800 audit(1787273336.745:263): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15653 res=0 errno=0
[  202.000054][   T42] audit: type=1800 audit(1787273336.765:264): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15782 res=0 errno=0
[  202.039460][   T42] audit: type=1800 audit(1787273336.805:265): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0
[  202.049416][ T8291] jffs2: notice: (8291) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  202.064127][ T8291] FAULT_INJECTION: forcing a failure.
[  202.064127][ T8291] name failslab, interval 1, probability 0, space 0, times 0
[  202.091881][ T8291] CPU: 3 UID: 0 PID: 8291 Comm: syz.1.716 Not tainted syzkaller #0 PREEMPT(full) 
[  202.091908][ T8291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  202.091918][ T8291] Call Trace:
[  202.091924][ T8291]  <TASK>
[  202.091931][ T8291]  dump_stack_lvl+0x100/0x190
[  202.091959][ T8291]  should_fail_ex.cold+0x5/0xa
[  202.091980][ T8291]  should_failslab+0xc2/0x120
[  202.092004][ T8291]  __kmalloc_noprof+0xfc/0x820
[  202.092025][ T8291]  ? rcu_is_watching+0x13/0xc0
[  202.092050][ T8291]  ? tomoyo_realpath_from_path+0xb6/0x690
[  202.092081][ T8291]  tomoyo_realpath_from_path+0xb6/0x690
[  202.092112][ T8291]  tomoyo_path_number_perm+0x23c/0x580
[  202.092132][ T8291]  ? tomoyo_path_number_perm+0x22e/0x580
[  202.092152][ T8291]  ? print_kernel_ident+0x10/0x40
[  202.092177][ T8291]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  202.092208][ T8291]  ? __lock_acquire+0x4c5/0x1ec0
[  202.092242][ T8291]  ? current_check_access_path+0x269/0x430
[  202.092268][ T8291]  ? __pfx_current_check_access_path+0x10/0x10
[  202.092320][ T8291]  ? d_alloc_parallel+0x9f6/0x14c0
[  202.092354][ T8291]  tomoyo_path_mknod+0x164/0x190
[  202.092373][ T8291]  ? __pfx_tomoyo_path_mknod+0x10/0x10
[  202.092391][ T8291]  ? __d_lookup+0x25c/0x4a0
[  202.092416][ T8291]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  202.092440][ T8291]  security_path_mknod+0x161/0x300
[  202.092472][ T8291]  may_o_create+0x30/0x3a0
[  202.092502][ T8291]  lookup_open+0xe35/0x1990
[  202.092538][ T8291]  path_openat+0xa2c/0x2440
[  202.092563][ T8291]  ? __pfx_path_openat+0x10/0x10
[  202.092590][ T8291]  do_file_open+0x20e/0x430
[  202.092614][ T8291]  ? __pfx_do_file_open+0x10/0x10
[  202.092654][ T8291]  ? _raw_spin_unlock+0x28/0x50
[  202.092678][ T8291]  ? alloc_fd+0x471/0x7a0
[  202.092707][ T8291]  do_sys_openat2+0x10f/0x1e0
[  202.092733][ T8291]  ? __pfx_do_sys_openat2+0x10/0x10
[  202.092761][ T8291]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  202.092785][ T8291]  __ia32_compat_sys_openat+0x12d/0x210
[  202.092811][ T8291]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  202.092836][ T8291]  ? fput+0x7c/0x100
[  202.092857][ T8291]  ? ksys_write+0x1ac/0x250
[  202.092874][ T8291]  ? __pfx_ksys_write+0x10/0x10
[  202.092897][ T8291]  __do_fast_syscall_32+0x13a/0x8b0
[  202.092917][ T8291]  ? lockdep_hardirqs_on+0x7d/0x110
[  202.092935][ T8291]  do_fast_syscall_32+0x32/0x70
[  202.092955][ T8291]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  202.092978][ T8291] RIP: 0023:0xf70aefec
[  202.092999][ T8291] Code: Unable to access opcode bytes at 0xf70aefc2.
[  202.093007][ T8291] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127
[  202.093026][ T8291] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000500
[  202.093037][ T8291] RDX: 0000000000000042 RSI: 00000000000001ff RDI: 0000000000000000
[  202.093047][ T8291] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  202.093057][ T8291] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  202.093066][ T8291] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  202.093089][ T8291]  </TASK>
[  202.093098][ T8291] ERROR: Out of memory at tomoyo_realpath_from_path.
[  202.251092][   T42] audit: type=1800 audit(1787273336.985:266): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15653 res=0 errno=0
[  202.353706][   T42] audit: type=1800 audit(1787273337.095:267): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0
[  202.406111][ T8299] Bluetooth: hci0: invalid length 0, exp 2 for type 7
[  202.500383][   T42] audit: type=1800 audit(1787273337.265:268): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0
[  202.543632][   T42] audit: type=1800 audit(1787273337.315:269): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0
[  202.751729][   T42] audit: type=1800 audit(1787273337.405:270): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0
[  203.063186][ T8308] jffs2: notice: (8308) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  203.389698][ T8312] netlink: 'syz.1.730': attribute type 10 has an invalid length.
[  203.972182][ T1488] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  204.164022][ T1488] usb 8-1: Using ep0 maxpacket: 16
[  204.212462][ T1488] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  204.224539][ T1488] usb 8-1: config 0 has no interfaces?
[  204.257253][ T1488] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.264912][ T1488] usb 8-1: Product: syz
[  204.271475][ T1488] usb 8-1: Manufacturer: syz
[  204.278260][ T1488] usb 8-1: SerialNumber: syz
[  204.337779][ T1488] usb 8-1: config 0 descriptor??
[  205.779970][   T42] kauditd_printk_skb: 16 callbacks suppressed
[  205.780009][   T42] audit: type=1400 audit(1787273340.545:287): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=8333 comm="syz.2.726" name="p" offset=53
[  206.485383][   T42] audit: type=1800 audit(1787273341.255:288): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15524 res=0 errno=0
[  206.829891][ T8340] jffs2: notice: (8340) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  206.923529][ T8343] jffs2: notice: (8343) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  207.111640][   T42] audit: type=1800 audit(1787273341.875:289): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15653 res=0 errno=0
[  207.128524][ T1488] usb 8-1: USB disconnect, device number 8
[  207.176523][   T42] audit: type=1400 audit(1787273341.935:290): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=8345 comm="syz.2.733" name="p" offset=53
[  207.385493][   T42] audit: type=1800 audit(1787273342.155:291): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15653 res=0 errno=0
[  207.549855][   T42] audit: type=1800 audit(1787273342.315:292): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15782 res=0 errno=0
[  207.964654][ T8349] jffs2: notice: (8349) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  208.239564][   T42] audit: type=1800 audit(1787273343.005:293): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15653 res=0 errno=0
[  208.305581][   T42] audit: type=1800 audit(1787273343.055:294): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15653 res=0 errno=0
[  208.313218][   T42] audit: type=1800 audit(1787273343.065:295): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15782 res=0 errno=0
[  208.380701][   T42] audit: type=1800 audit(1787273343.145:296): pid=7478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=141930 res=0 errno=0
[  208.396984][ T5735] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  208.409584][ T5735] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  208.415987][ T5735] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  208.428050][ T5735] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  208.443510][ T5735] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  208.563619][ T5813] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.672950][ T5813] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.770728][ T5813] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.859949][ T8362] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.862471][ T8362] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.865108][ T8362] bridge_slave_0: entered allmulticast mode
[  208.868066][ T8362] bridge_slave_0: entered promiscuous mode
[  208.893142][ T5813] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.900850][ T8362] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.903461][ T8362] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.905810][ T8362] bridge_slave_1: entered allmulticast mode
[  208.908464][ T8362] bridge_slave_1: entered promiscuous mode
[  208.926792][ T8362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  208.931738][ T8362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  208.948464][ T8362] team0: Port device team_slave_0 added
[  208.951791][ T8362] team0: Port device team_slave_1 added
[  208.966799][ T8362] batman_adv: batadv0: Adding interface: batadv_slave_0
[  208.969044][ T8362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  208.977076][ T8362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  208.985397][ T8362] batman_adv: batadv0: Adding interface: batadv_slave_1
[  208.991163][ T8362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  208.999744][ T8362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  209.080901][ T8362] hsr_slave_0: entered promiscuous mode
[  209.083366][ T8362] hsr_slave_1: entered promiscuous mode
[  209.085841][ T8362] debugfs: 'hsr0' already exists in 'hsr'
[  209.087596][ T8362] Cannot create hsr debugfs directory
[  209.149900][ T5813] bridge_slave_1: left allmulticast mode
[  209.152400][ T5813] bridge_slave_1: left promiscuous mode
[  209.157147][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.164117][ T5813] bridge_slave_0: left allmulticast mode
[  209.166684][ T5813] bridge_slave_0: left promiscuous mode
[  209.168845][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.551017][ T8384] block nbd1: NBD_DISCONNECT
[  209.684711][ T5813] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  209.691266][ T5813] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  209.699446][ T5813] .` (unregistering): (slave veth0_to_bond): Releasing backup interface
[  209.704434][ T5813] .` (unregistering): Released all slaves
[  210.002517][ T8362] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  210.012051][ T8362] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  210.014832][ T8362] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  210.026092][ T8362] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  210.031497][ T5448] 8021q: adding VLAN 0 to HW filter on device eth3
[  210.037699][ T8362] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  210.045215][ T8362] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  210.047928][ T8362] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  210.056595][ T8362] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  210.126960][ T8362] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.139477][ T8362] 8021q: adding VLAN 0 to HW filter on device team0
[  210.145349][  T116] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.147462][  T116] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.154014][  T116] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.156209][  T116] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.216569][ T8411] netlink: 'syz.2.743': attribute type 10 has an invalid length.
[  210.261684][   T64] Bluetooth: hci0: Opcode 0x206a failed: -110
[  210.263648][ T5735] Bluetooth: hci0: command 0x206a tx timeout
[  210.283976][ T5813] hsr_slave_0: left promiscuous mode
[  210.286367][ T5813] hsr_slave_1: left promiscuous mode
[  210.288719][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  210.291147][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_0
[  210.294967][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  210.297433][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_1
[  210.305933][ T5813] veth1_macvtap: left promiscuous mode
[  210.307819][ T5813] veth0_macvtap: left promiscuous mode
[  210.309663][ T5813] veth1_vlan: left promiscuous mode
[  210.313516][ T5813] veth0_vlan: left promiscuous mode
[  210.469611][ T5813] team0 (unregistering): Port device team_slave_1 removed
[  210.477082][ T5813] team0 (unregistering): Port device team_slave_0 removed
[  210.504102][ T5735] Bluetooth: hci3: command tx timeout
[  210.544036][ T5448] 8021q: adding VLAN 0 to HW filter on device eth2
[  210.713722][ T5448] 8021q: adding VLAN 0 to HW filter on device eth4
[  210.737715][ T8362] 8021q: adding VLAN 0 to HW filter on device batadv0
[  210.892166][ T8362] veth0_vlan: entered promiscuous mode
[  210.897495][ T8362] veth1_vlan: entered promiscuous mode
[  210.917631][ T8362] veth0_macvtap: entered promiscuous mode
[  210.920806][   T42] kauditd_printk_skb: 35 callbacks suppressed
[  210.920819][   T42] audit: type=1800 audit(1787273345.685:332): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15653 res=0 errno=0
[  210.921558][ T8362] veth1_macvtap: entered promiscuous mode
[  210.951851][ T8362] batman_adv: batadv0: Interface activated: batadv_slave_0
[  210.956690][ T5448] 8021q: adding VLAN 0 to HW filter on device eth5
[  210.968658][ T8362] batman_adv: batadv0: Interface activated: batadv_slave_1
[  210.995724][   T42] audit: type=1800 audit(1787273345.765:333): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15653 res=0 errno=0
[  211.019046][   T42] audit: type=1800 audit(1787273345.785:334): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=25878 res=0 errno=0
[  211.032212][   T42] audit: type=1800 audit(1787273345.785:335): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26004 res=0 errno=0
[  211.035742][ T5813] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.040386][   T42] audit: type=1800 audit(1787273345.785:336): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26191 res=0 errno=0
[  211.046065][ T5813] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.053913][   T42] audit: type=1800 audit(1787273345.805:337): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=148263 res=0 errno=0
[  211.055587][ T5813] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  211.066216][ T5813] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  211.089930][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.093822][   T42] audit: type=1800 audit(1787273345.855:338): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=148389 res=0 errno=0
[  211.102856][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.119547][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.122541][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.159367][   T42] audit: type=1800 audit(1787273345.925:339): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0
[  211.179746][   T42] audit: type=1800 audit(1787273345.945:340): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0
[  211.279679][   T42] audit: type=1800 audit(1787273346.045:341): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0
[  212.173645][ T8474] netlink: 24 bytes leftover after parsing attributes in process `syz.4.754'.
[  212.179163][ T8474] netlink: 16 bytes leftover after parsing attributes in process `syz.4.754'.
[  212.226997][ T8476] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  212.239204][ T8473] netlink: 'syz.2.753': attribute type 10 has an invalid length.
[  212.410844][ T8483] FAULT_INJECTION: forcing a failure.
[  212.410844][ T8483] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  212.415789][ T8483] CPU: 1 UID: 0 PID: 8483 Comm: syz.4.757 Not tainted syzkaller #0 PREEMPT(full) 
[  212.415813][ T8483] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  212.415823][ T8483] Call Trace:
[  212.415829][ T8483]  <TASK>
[  212.415836][ T8483]  dump_stack_lvl+0x100/0x190
[  212.415863][ T8483]  should_fail_ex.cold+0x5/0xa
[  212.415880][ T8483]  _copy_to_user+0x32/0xd0
[  212.415900][ T8483]  simple_read_from_buffer+0xcb/0x170
[  212.415922][ T8483]  proc_fail_nth_read+0x1af/0x230
[  212.415940][ T8483]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  212.415958][ T8483]  ? rw_verify_area+0xce/0x6d0
[  212.415976][ T8483]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  212.415986][ T8483]  vfs_read+0x1e4/0xb40
[  212.416001][ T8483]  ? __pfx_vfs_read+0x10/0x10
[  212.416010][ T8483]  ? find_held_lock+0x2b/0x80
[  212.416027][ T8483]  ? __fget_files+0x215/0x3d0
[  212.416042][ T8483]  ? __fget_files+0x21f/0x3d0
[  212.416057][ T8483]  ksys_read+0x12a/0x250
[  212.416068][ T8483]  ? __pfx_ksys_read+0x10/0x10
[  212.416082][ T8483]  do_int80_emulation+0x166/0x650
[  212.416096][ T8483]  asm_int80_emulation+0x1a/0x20
[  212.416107][ T8483] RIP: 0023:0xf71a74eb
[  212.416117][ T8483] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  212.416127][ T8483] RSP: 002b:00000000f543c4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  212.416138][ T8483] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f543c5d0
[  212.416145][ T8483] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  212.416151][ T8483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  212.416156][ T8483] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  212.416162][ T8483] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  212.416176][ T8483]  </TASK>
[  212.592195][   T64] Bluetooth: hci3: command tx timeout
[  212.602258][ T8488] mmap: syz.4.758 (8488) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  212.983268][ T5735] Bluetooth: hci2: Opcode 0x206a failed: -110
[  212.986075][   T64] Bluetooth: hci2: command 0x0c1a tx timeout
[  212.988605][ T5735] Bluetooth: hci2: Opcode 0x206a failed: -110
[  214.673827][ T5735] Bluetooth: hci3: command tx timeout
[  215.061713][ T5735] Bluetooth: hci2: command 0x0c1a tx timeout
[  215.115933][ T8550] binder: 8549:8550 unknown command 0
[  215.117764][ T8550] binder: 8549:8550 ioctl c0306201 80000000 returned -22
[  215.210010][ T8554] binder: 8553:8554 ioctl 4018620d 0 returned -22
[  215.674911][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.773'.
[  215.912918][ T8561] FAULT_INJECTION: forcing a failure.
[  215.912918][ T8561] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  215.917904][ T8561] CPU: 2 UID: 0 PID: 8561 Comm: syz.3.774 Not tainted syzkaller #0 PREEMPT(full) 
[  215.917920][ T8561] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  215.917926][ T8561] Call Trace:
[  215.917931][ T8561]  <TASK>
[  215.917936][ T8561]  dump_stack_lvl+0x100/0x190
[  215.917955][ T8561]  should_fail_ex.cold+0x5/0xa
[  215.917966][ T8561]  ? prepare_alloc_pages+0x16d/0x5f0
[  215.917984][ T8561]  should_fail_alloc_page+0xeb/0x140
[  215.918001][ T8561]  prepare_alloc_pages+0x1f0/0x5f0
[  215.918020][ T8561]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  215.918036][ T8561]  ? find_held_lock+0x2b/0x80
[  215.918052][ T8561]  ? is_bpf_text_address+0x8a/0x1a0
[  215.918064][ T8561]  ? is_bpf_text_address+0x8a/0x1a0
[  215.918075][ T8561]  ? bpf_ksym_find+0x124/0x1c0
[  215.918090][ T8561]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  215.918108][ T8561]  ? is_bpf_text_address+0x94/0x1a0
[  215.918120][ T8561]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  215.918133][ T8561]  ? __kernel_text_address+0xd/0x30
[  215.918144][ T8561]  ? unwind_get_return_address+0x59/0xa0
[  215.918155][ T8561]  ? arch_stack_walk+0xa6/0xf0
[  215.918177][ T8561]  ? __pfx_stack_trace_save+0x10/0x10
[  215.918195][ T8561]  ? stack_depot_save_flags+0x27/0x9f0
[  215.918209][ T8561]  ? __lock_acquire+0x4c5/0x1ec0
[  215.918222][ T8561]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  215.918235][ T8561]  ? policy_nodemask+0xed/0x4f0
[  215.918253][ T8561]  alloc_pages_mpol+0x1fb/0x540
[  215.918269][ T8561]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  215.918284][ T8561]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  215.918302][ T8561]  alloc_pages_noprof+0x1a/0x160
[  215.918313][ T8561]  get_free_pages_noprof+0x10/0xb0
[  215.918327][ T8561]  __kasan_populate_vmalloc+0xa0/0x210
[  215.918344][ T8561]  alloc_vmap_area+0x95d/0x2bb0
[  215.918363][ T8561]  ? kasan_save_track+0x14/0x30
[  215.918377][ T8561]  ? __kasan_kmalloc+0xaa/0xb0
[  215.918390][ T8561]  ? __pfx_alloc_vmap_area+0x10/0x10
[  215.918406][ T8561]  ? __get_vm_area_node+0x124/0x350
[  215.918423][ T8561]  __get_vm_area_node+0x1ed/0x350
[  215.918441][ T8561]  __vmalloc_node_range_noprof+0x228/0x1630
[  215.918458][ T8561]  ? vhost_task_create+0x1db/0x370
[  215.918468][ T8561]  ? find_held_lock+0x2b/0x80
[  215.918487][ T8561]  ? vhost_task_create+0x1db/0x370
[  215.918501][ T8561]  ? __memcg_slab_post_alloc_hook+0x74c/0x1160
[  215.918519][ T8561]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  215.918540][ T8561]  ? trace_kmem_cache_alloc+0xdd/0x100
[  215.918559][ T8561]  ? vhost_task_create+0x1db/0x370
[  215.918569][ T8561]  __vmalloc_node_noprof+0xad/0xf0
[  215.918585][ T8561]  ? vhost_task_create+0x1db/0x370
[  215.918597][ T8561]  copy_process+0x803/0x8370
[  215.918620][ T8561]  ? __pfx_copy_process+0x10/0x10
[  215.918634][ T8561]  ? __kasan_kmalloc+0xaa/0xb0
[  215.918648][ T8561]  ? lockdep_init_map_type+0x5c/0x250
[  215.918661][ T8561]  ? lockdep_init_map_type+0x5c/0x250
[  215.918674][ T8561]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  215.918688][ T8561]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  215.918707][ T8561]  vhost_task_create+0x1db/0x370
[  215.918718][ T8561]  ? __pfx_vhost_task_create+0x10/0x10
[  215.918728][ T8561]  ? register_lock_class+0x3f/0x7b0
[  215.918744][ T8561]  ? __pfx_vhost_task_fn+0x10/0x10
[  215.918756][ T8561]  ? __pfx___mutex_lock+0x10/0x10
[  215.918773][ T8561]  kvm_mmu_post_init_vm+0x1b3/0x360
[  215.918790][ T8561]  kvm_arch_vcpu_ioctl_run+0x66/0x1960
[  215.918806][ T8561]  ? kvm_vcpu_ioctl+0x1531/0x1700
[  215.918822][ T8561]  kvm_vcpu_ioctl+0x730/0x1700
[  215.918835][ T8561]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  215.918847][ T8561]  ? tomoyo_path_number_perm+0x188/0x580
[  215.918863][ T8561]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  215.918881][ T8561]  ? get_pid_task+0x106/0x250
[  215.918900][ T8561]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  215.918913][ T8561]  ? do_vfs_ioctl+0x226/0x13e0
[  215.918931][ T8561]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  215.918953][ T8561]  kvm_vcpu_compat_ioctl+0x20f/0x3c0
[  215.918966][ T8561]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  215.918978][ T8561]  ? __fget_files+0x21f/0x3d0
[  215.918993][ T8561]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  215.919006][ T8561]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  215.919025][ T8561]  __do_fast_syscall_32+0x13a/0x8b0
[  215.919037][ T8561]  ? lockdep_hardirqs_on+0x7d/0x110
[  215.919048][ T8561]  do_fast_syscall_32+0x32/0x70
[  215.919060][ T8561]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  215.919074][ T8561] RIP: 0023:0xf7f05fec
[  215.919087][ T8561] Code: Unable to access opcode bytes at 0xf7f05fc2.
[  215.919092][ T8561] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  215.919104][ T8561] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 000000000000ae80
[  215.919110][ T8561] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  215.919116][ T8561] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  215.919122][ T8561] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  215.919128][ T8561] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  215.919141][ T8561]  </TASK>
[  215.919276][ T8561] syz.3.774: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null)
[  216.045036][   T42] kauditd_printk_skb: 26 callbacks suppressed
[  216.045056][   T42] audit: type=1800 audit(1787273350.815:368): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.772" name="/" dev="fuse" ino=1 res=0 errno=0
[  216.046734][ T8561] ,cpuset=/,mems_allowed=0-1
[  216.105578][ T8561] CPU: 0 UID: 0 PID: 8561 Comm: syz.3.774 Not tainted syzkaller #0 PREEMPT(full) 
[  216.105593][ T8561] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  216.105600][ T8561] Call Trace:
[  216.105605][ T8561]  <TASK>
[  216.105610][ T8561]  dump_stack_lvl+0x100/0x190
[  216.105628][ T8561]  warn_alloc.cold+0x94/0xa8
[  216.105640][ T8561]  ? __pfx_warn_alloc+0x10/0x10
[  216.105653][ T8561]  ? lockdep_hardirqs_on+0x7d/0x110
[  216.105667][ T8561]  ? __get_vm_area_node+0x2f0/0x350
[  216.105688][ T8561]  ? __get_vm_area_node+0x22b/0x350
[  216.105707][ T8561]  __vmalloc_node_range_noprof+0xccd/0x1630
[  216.105724][ T8561]  ? find_held_lock+0x2b/0x80
[  216.105743][ T8561]  ? vhost_task_create+0x1db/0x370
[  216.105758][ T8561]  ? __memcg_slab_post_alloc_hook+0x74c/0x1160
[  216.105776][ T8561]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  216.105796][ T8561]  ? trace_kmem_cache_alloc+0xdd/0x100
[  216.105814][ T8561]  ? vhost_task_create+0x1db/0x370
[  216.105824][ T8561]  __vmalloc_node_noprof+0xad/0xf0
[  216.105840][ T8561]  ? vhost_task_create+0x1db/0x370
[  216.105852][ T8561]  copy_process+0x803/0x8370
[  216.105874][ T8561]  ? __pfx_copy_process+0x10/0x10
[  216.105888][ T8561]  ? __kasan_kmalloc+0xaa/0xb0
[  216.105903][ T8561]  ? lockdep_init_map_type+0x5c/0x250
[  216.105917][ T8561]  ? lockdep_init_map_type+0x5c/0x250
[  216.105930][ T8561]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  216.105943][ T8561]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  216.105974][ T8561]  vhost_task_create+0x1db/0x370
[  216.105986][ T8561]  ? __pfx_vhost_task_create+0x10/0x10
[  216.105996][ T8561]  ? register_lock_class+0x3f/0x7b0
[  216.106016][ T8561]  ? __pfx_vhost_task_fn+0x10/0x10
[  216.106028][ T8561]  ? __pfx___mutex_lock+0x10/0x10
[  216.106044][ T8561]  kvm_mmu_post_init_vm+0x1b3/0x360
[  216.106060][ T8561]  kvm_arch_vcpu_ioctl_run+0x66/0x1960
[  216.106076][ T8561]  ? kvm_vcpu_ioctl+0x1531/0x1700
[  216.106092][ T8561]  kvm_vcpu_ioctl+0x730/0x1700
[  216.106105][ T8561]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  216.106117][ T8561]  ? tomoyo_path_number_perm+0x188/0x580
[  216.106132][ T8561]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  216.106146][ T8561]  ? get_pid_task+0x106/0x250
[  216.106165][ T8561]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  216.106178][ T8561]  ? do_vfs_ioctl+0x226/0x13e0
[  216.106196][ T8561]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  216.106218][ T8561]  kvm_vcpu_compat_ioctl+0x20f/0x3c0
[  216.106231][ T8561]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  216.106243][ T8561]  ? __fget_files+0x21f/0x3d0
[  216.106258][ T8561]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  216.106271][ T8561]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  216.106289][ T8561]  __do_fast_syscall_32+0x13a/0x8b0
[  216.106301][ T8561]  ? lockdep_hardirqs_on+0x7d/0x110
[  216.106313][ T8561]  do_fast_syscall_32+0x32/0x70
[  216.106325][ T8561]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  216.106339][ T8561] RIP: 0023:0xf7f05fec
[  216.106352][ T8561] Code: Unable to access opcode bytes at 0xf7f05fc2.
[  216.106357][ T8561] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  216.106367][ T8561] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 000000000000ae80
[  216.106373][ T8561] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  216.106379][ T8561] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  216.106385][ T8561] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  216.106391][ T8561] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  216.106405][ T8561]  </TASK>
[  216.106498][ T8561] Mem-Info:
[  216.121653][   T42] audit: type=1800 audit(1787273350.885:369): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15653 res=0 errno=0
[  216.123156][ T8561] active_anon:7261 inactive_anon:68 isolated_anon:0
[  216.123156][ T8561]  active_file:518 inactive_file:44942 isolated_file:0
[  216.123156][ T8561]  unevictable:1000 dirty:297 writeback:0
[  216.123156][ T8561]  slab_reclaimable:7185 slab_unreclaimable:53102
[  216.123156][ T8561]  mapped:25544 shmem:1508 pagetables:1364
[  216.123156][ T8561]  sec_pagetables:298 bounce:0
[  216.123156][ T8561]  kernel_misc_reclaimable:0
[  216.123156][ T8561]  free:32681 free_pcp:15193 free_cma:0
[  216.133905][   T42] audit: type=1800 audit(1787273350.905:370): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0
[  216.135549][ T8561] Node 0 active_anon:256kB inactive_anon:56kB active_file:12kB inactive_file:8kB unevictable:3496kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:8kB writeback:0kB shmem:3496kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8960kB pagetables:1512kB sec_pagetables:1108kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  216.250120][ T8561] Node 1 active_anon:38288kB inactive_anon:216kB active_file:2060kB inactive_file:179760kB unevictable:504kB isolated(anon):0kB isolated(file):0kB mapped:111748kB dirty:1180kB writeback:0kB shmem:11936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5192kB pagetables:3944kB sec_pagetables:84kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  216.273607][ T8561] Node 0 DMA free:1968kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:232kB local_pcp:32kB free_cma:0kB
[  216.282889][ T8561] lowmem_reserve[]: 0 279 279 279 279
[  216.284908][ T8561] Node 0 DMA32 free:15796kB boost:0kB min:12648kB low:15808kB high:18968kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1712kB inactive_anon:56kB active_file:12kB inactive_file:8kB unevictable:3496kB writepending:8kB zspages:0kB present:1032196kB managed:285924kB mlocked:0kB bounce:0kB free_pcp:9512kB local_pcp:3112kB free_cma:0kB
[  216.295290][ T8561] lowmem_reserve[]: 0 0 0 0 0
[  216.296904][ T8561] Node 1 DMA32 free:116816kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38888kB inactive_anon:216kB active_file:2060kB inactive_file:179760kB unevictable:504kB writepending:1180kB zspages:1808kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:39916kB local_pcp:13632kB free_cma:0kB
[  216.307299][ T8561] lowmem_reserve[]: 0 0 0 0 0
[  216.308840][ T8561] Node 0 DMA: 78*4kB (U) 5*8kB (UM) 1*16kB (M) 4*32kB (U) 3*64kB (UM) 0*128kB 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 1968kB
[  216.313481][ T8561] Node 0 DMA32: 16*4kB (UE) 55*8kB (UME) 21*16kB (UE) 82*32kB (UME) 32*64kB (UE) 10*128kB (UME) 3*256kB (ME) 6*512kB (ME) 3*1024kB (M) 1*2048kB (M) 0*4096kB = 15752kB
[  216.318818][ T8561] Node 1 DMA32: 135*4kB (UME) 65*8kB (UME) 31*16kB (UME) 83*32kB (UME) 59*64kB (UME) 76*128kB (UME) 63*256kB (UME) 38*512kB (UME) 24*1024kB (UM) 11*2048kB (UME) 4*4096kB (M) = 116788kB
[  216.324785][ T8561] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  216.327826][ T8561] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  216.330938][ T8561] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  216.334482][ T8561] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  216.337861][ T8561] 50090 total pagecache pages
[  216.339622][ T8561] 286 pages in swap cache
[  216.341484][ T8561] Free swap  = 121780kB
[  216.344211][ T8561] Total swap = 124996kB
[  216.345837][ T8561] 524155 pages RAM
[  216.347232][ T8561] 0 pages HighMem/MovableOnly
[  216.348957][ T8561] 211781 pages reserved
[  216.350500][ T8561] 0 pages cma reserved
[  216.381727][   T42] audit: type=1400 audit(1787273351.125:371): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=8566 comm="syz.4.776" name="p" offset=53
[  216.471894][   T42] audit: type=1800 audit(1787273351.245:372): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15782 res=0 errno=0
[  216.500668][   T42] audit: type=1800 audit(1787273351.265:373): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15782 res=0 errno=0
[  216.518445][ T8573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.778'.
[  216.530126][ T8573] netlink: 'syz.3.778': attribute type 10 has an invalid length.
[  216.533375][ T8573] netlink: 40 bytes leftover after parsing attributes in process `syz.3.778'.
[  216.536187][ T8573] dummy0: entered promiscuous mode
[  216.560484][   T42] audit: type=1800 audit(1787273351.325:374): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15782 res=0 errno=0
[  216.713298][ T8569] netlink: 'syz.2.775': attribute type 10 has an invalid length.
[  216.743835][ T5735] Bluetooth: hci3: command tx timeout
[  217.247647][   T42] audit: type=1800 audit(1787273352.015:375): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15653 res=0 errno=0
[  217.264951][   T42] audit: type=1800 audit(1787273352.025:376): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15911 res=0 errno=0
[  217.285298][   T42] audit: type=1800 audit(1787273352.055:377): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15653 res=0 errno=0
[  217.451718][ T8593] netlink: 'syz.4.781': attribute type 29 has an invalid length.
[  217.493010][   T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  217.496891][   T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  217.500573][   T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  217.504888][   T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  217.641214][ T8602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.787'.
[  217.926712][ T8616] Process accounting resumed
[  218.021704][ T8610] lo speed is unknown, defaulting to 1000
[  218.029029][ T8610] lo speed is unknown, defaulting to 1000
[  218.039964][ T8610] lo speed is unknown, defaulting to 1000
[  218.045223][ T8610] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  218.051021][ T8610] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  218.056831][ T8610] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  218.062871][ T8610] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  218.076598][ T8610] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  218.080001][ T8614] ucma_write: process 646 (syz.3.791) changed security contexts after opening file descriptor, this is not allowed.
[  218.119031][ T8610] lo speed is unknown, defaulting to 1000
[  218.122965][ T8610] lo speed is unknown, defaulting to 1000
[  218.126248][ T8610] lo speed is unknown, defaulting to 1000
[  218.130938][ T8610] lo speed is unknown, defaulting to 1000
[  218.135159][ T8610] lo speed is unknown, defaulting to 1000
[  218.238388][ T8633] syzkaller0: entered promiscuous mode
[  218.240202][ T8633] syzkaller0: entered allmulticast mode
[  218.263534][ T8633] netlink: 64 bytes leftover after parsing attributes in process `syz.1.796'.
[  218.264327][ T8635] FAULT_INJECTION: forcing a failure.
[  218.264327][ T8635] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  218.271018][ T8635] CPU: 1 UID: 0 PID: 8635 Comm: syz.3.797 Not tainted syzkaller #0 PREEMPT(full) 
[  218.271034][ T8635] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  218.271041][ T8635] Call Trace:
[  218.271046][ T8635]  <TASK>
[  218.271050][ T8635]  dump_stack_lvl+0x100/0x190
[  218.271069][ T8635]  should_fail_ex.cold+0x5/0xa
[  218.271080][ T8635]  ? prepare_alloc_pages+0x16d/0x5f0
[  218.271098][ T8635]  should_fail_alloc_page+0xeb/0x140
[  218.271114][ T8635]  prepare_alloc_pages+0x1f0/0x5f0
[  218.271133][ T8635]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  218.271149][ T8635]  ? find_held_lock+0x2b/0x80
[  218.271164][ T8635]  ? is_bpf_text_address+0x8a/0x1a0
[  218.271176][ T8635]  ? is_bpf_text_address+0x8a/0x1a0
[  218.271187][ T8635]  ? bpf_ksym_find+0x124/0x1c0
[  218.271202][ T8635]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  218.271221][ T8635]  ? is_bpf_text_address+0x94/0x1a0
[  218.271232][ T8635]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  218.271246][ T8635]  ? __kernel_text_address+0xd/0x30
[  218.271257][ T8635]  ? unwind_get_return_address+0x59/0xa0
[  218.271268][ T8635]  ? arch_stack_walk+0xa6/0xf0
[  218.271290][ T8635]  ? __pfx_stack_trace_save+0x10/0x10
[  218.271307][ T8635]  ? stack_depot_save_flags+0x27/0x9f0
[  218.271321][ T8635]  ? __lock_acquire+0x4c5/0x1ec0
[  218.271334][ T8635]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  218.271347][ T8635]  ? policy_nodemask+0xed/0x4f0
[  218.271364][ T8635]  alloc_pages_mpol+0x1fb/0x540
[  218.271381][ T8635]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  218.271396][ T8635]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  218.271428][ T8635]  alloc_pages_noprof+0x1a/0x160
[  218.271439][ T8635]  get_free_pages_noprof+0x10/0xb0
[  218.271453][ T8635]  __kasan_populate_vmalloc+0xa0/0x210
[  218.271470][ T8635]  alloc_vmap_area+0x95d/0x2bb0
[  218.271490][ T8635]  ? kasan_save_track+0x14/0x30
[  218.271504][ T8635]  ? __kasan_kmalloc+0xaa/0xb0
[  218.271517][ T8635]  ? __pfx_alloc_vmap_area+0x10/0x10
[  218.271532][ T8635]  ? __get_vm_area_node+0x124/0x350
[  218.271550][ T8635]  __get_vm_area_node+0x1ed/0x350
[  218.271568][ T8635]  __vmalloc_node_range_noprof+0x228/0x1630
[  218.271590][ T8635]  ? vhost_task_create+0x1db/0x370
[  218.271600][ T8635]  ? find_held_lock+0x2b/0x80
[  218.271632][ T8635]  ? vhost_task_create+0x1db/0x370
[  218.271646][ T8635]  ? __memcg_slab_post_alloc_hook+0x74c/0x1160
[  218.271664][ T8635]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  218.271685][ T8635]  ? trace_kmem_cache_alloc+0xdd/0x100
[  218.271703][ T8635]  ? vhost_task_create+0x1db/0x370
[  218.271713][ T8635]  __vmalloc_node_noprof+0xad/0xf0
[  218.271729][ T8635]  ? vhost_task_create+0x1db/0x370
[  218.271741][ T8635]  copy_process+0x803/0x8370
[  218.271764][ T8635]  ? __pfx_copy_process+0x10/0x10
[  218.271778][ T8635]  ? __kasan_kmalloc+0xaa/0xb0
[  218.271792][ T8635]  ? lockdep_init_map_type+0x5c/0x250
[  218.271805][ T8635]  ? lockdep_init_map_type+0x5c/0x250
[  218.271818][ T8635]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  218.271832][ T8635]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  218.271850][ T8635]  vhost_task_create+0x1db/0x370
[  218.271861][ T8635]  ? __pfx_vhost_task_create+0x10/0x10
[  218.271871][ T8635]  ? register_lock_class+0x3f/0x7b0
[  218.271887][ T8635]  ? __pfx_vhost_task_fn+0x10/0x10
[  218.271899][ T8635]  ? __pfx___mutex_lock+0x10/0x10
[  218.271915][ T8635]  kvm_mmu_post_init_vm+0x1b3/0x360
[  218.271931][ T8635]  kvm_arch_vcpu_ioctl_run+0x66/0x1960
[  218.271947][ T8635]  ? kvm_vcpu_ioctl+0x1531/0x1700
[  218.271963][ T8635]  kvm_vcpu_ioctl+0x730/0x1700
[  218.271976][ T8635]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  218.271988][ T8635]  ? tomoyo_path_number_perm+0x188/0x580
[  218.272003][ T8635]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  218.272016][ T8635]  ? get_pid_task+0x106/0x250
[  218.272035][ T8635]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  218.272047][ T8635]  ? do_vfs_ioctl+0x226/0x13e0
[  218.272065][ T8635]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  218.272087][ T8635]  kvm_vcpu_compat_ioctl+0x20f/0x3c0
[  218.272100][ T8635]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  218.272113][ T8635]  ? __fget_files+0x21f/0x3d0
[  218.272127][ T8635]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  218.272140][ T8635]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  218.272158][ T8635]  __do_fast_syscall_32+0x13a/0x8b0
[  218.272170][ T8635]  ? lockdep_hardirqs_on+0x7d/0x110
[  218.272182][ T8635]  do_fast_syscall_32+0x32/0x70
[  218.272194][ T8635]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  218.272207][ T8635] RIP: 0023:0xf7f05fec
[  218.272240][ T8635] Code: Unable to access opcode bytes at 0xf7f05fc2.
[  218.272245][ T8635] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  218.272257][ T8635] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 000000000000ae80
[  218.272263][ T8635] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  218.272269][ T8635] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  218.272275][ T8635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  218.272280][ T8635] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  218.272294][ T8635]  </TASK>
[  218.548998][ T8637] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  218.657688][ T8642] FAULT_INJECTION: forcing a failure.
[  218.657688][ T8642] name failslab, interval 1, probability 0, space 0, times 0
[  218.666837][ T8642] CPU: 0 UID: 0 PID: 8642 Comm: syz.1.799 Not tainted syzkaller #0 PREEMPT(full) 
[  218.666854][ T8642] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  218.666860][ T8642] Call Trace:
[  218.666864][ T8642]  <TASK>
[  218.666869][ T8642]  dump_stack_lvl+0x100/0x190
[  218.666888][ T8642]  should_fail_ex.cold+0x5/0xa
[  218.666901][ T8642]  should_failslab+0xc2/0x120
[  218.666918][ T8642]  __kmalloc_noprof+0xfc/0x820
[  218.666946][ T8642]  ? kasan_save_track+0x14/0x30
[  218.666961][ T8642]  ? aa_str_alloc+0x4a/0xb0
[  218.666975][ T8642]  aa_str_alloc+0x4a/0xb0
[  218.666985][ T8642]  aa_policy_init+0x1cd/0x240
[  218.667000][ T8642]  aa_alloc_profile+0xd1/0x520
[  218.667016][ T8642]  unpack_profile+0x3ed/0x4510
[  218.667030][ T8642]  ? is_bpf_text_address+0x8a/0x1a0
[  218.667043][ T8642]  ? bpf_ksym_find+0x124/0x1c0
[  218.667057][ T8642]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  218.667076][ T8642]  ? is_bpf_text_address+0x94/0x1a0
[  218.667087][ T8642]  ? kernel_text_address+0x8d/0x100
[  218.667099][ T8642]  ? __pfx_unpack_profile+0x10/0x10
[  218.667113][ T8642]  ? arch_stack_walk+0xa6/0xf0
[  218.667177][ T8642]  ? stack_trace_save+0x8e/0xc0
[  218.667189][ T8642]  ? __pfx_stack_trace_save+0x10/0x10
[  218.667210][ T8642]  ? aa_unpack_str+0xae/0x2b0
[  218.667226][ T8642]  aa_unpack+0x39e/0x1240
[  218.667245][ T8642]  ? __pfx_aa_unpack+0x10/0x10
[  218.667264][ T8642]  ? __lock_acquire+0x4c5/0x1ec0
[  218.667279][ T8642]  aa_replace_profiles+0x176/0x31c0
[  218.667298][ T8642]  ? __might_fault+0xc5/0x140
[  218.667310][ T8642]  ? __might_fault+0xc5/0x140
[  218.667321][ T8642]  ? __pfx_aa_replace_profiles+0x10/0x10
[  218.667338][ T8642]  ? _copy_from_user+0x59/0xd0
[  218.667352][ T8642]  policy_update+0x20b/0x340
[  218.667369][ T8642]  profile_load+0xaa/0x1a0
[  218.667384][ T8642]  vfs_write+0x2aa/0x1050
[  218.667396][ T8642]  ? __pfx_profile_load+0x10/0x10
[  218.667412][ T8642]  ? __pfx_vfs_write+0x10/0x10
[  218.667421][ T8642]  ? find_held_lock+0x2b/0x80
[  218.667436][ T8642]  ? __fget_files+0x215/0x3d0
[  218.667454][ T8642]  ? __fget_files+0x21f/0x3d0
[  218.667476][ T8642]  ksys_write+0x12a/0x250
[  218.667498][ T8642]  ? __pfx_ksys_write+0x10/0x10
[  218.667515][ T8642]  ? ksys_write+0x1ac/0x250
[  218.667531][ T8642]  ? __pfx_ksys_write+0x10/0x10
[  218.667556][ T8642]  __do_fast_syscall_32+0x13a/0x8b0
[  218.667577][ T8642]  ? lockdep_hardirqs_on+0x7d/0x110
[  218.667597][ T8642]  do_fast_syscall_32+0x32/0x70
[  218.667610][ T8642]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  218.667624][ T8642] RIP: 0023:0xf70aefec
[  218.667638][ T8642] Code: Unable to access opcode bytes at 0xf70aefc2.
[  218.667642][ T8642] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  218.667654][ T8642] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400
[  218.667661][ T8642] RDX: 000000000000003a RSI: 0000000000000000 RDI: 0000000000000000
[  218.667667][ T8642] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  218.667673][ T8642] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  218.667679][ T8642] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  218.667692][ T8642]  </TASK>
[  218.667787][ T8642] ------------[ cut here ]------------
[  218.768885][ T8642] AppArmor WARN aa_policy_destroy: (((!list_empty(&policy->profiles) && (&policy->profiles)->prev != ((void *) 0x122 + (0xdead000000000000UL))))): 
[  218.768898][ T8642] WARNING: security/apparmor/lib.c:509 at aa_policy_destroy+0x78/0x1f0, CPU#0: syz.1.799/8642
[  218.776664][ T8642] Modules linked in:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  218.778077][ T8642] CPU: 0 UID: 0 PID: 8642 Comm: syz.1.799 Not tainted syzkaller #0 PREEMPT(full) 
[  218.781047][ T8642] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  218.784297][ T8642] RIP: 0010:aa_policy_destroy+0x7f/0x1f0
[  218.786071][ T8642] Code: 00 0f 85 88 01 00 00 48 b8 22 01 00 00 00 00 ad de 48 39 43 28 74 18 e8 df b4 31 fd 48 8d 3d e8 f6 74 0c 48 c7 c6 c0 12 57 8c <67> 48 0f b9 3a e8 c7 b4 31 fd 48 8d 6b 10 48 b8 00 00 00 00 00 fc
[  218.792107][ T8642] RSP: 0000:ffffc900064df678 EFLAGS: 00010293
[  218.794199][ T8642] RAX: 0000000000000000 RBX: ffff88801460f800 RCX: 0000000000000000
[  218.796688][ T8642] RDX: ffff88802a84cb00 RSI: ffffffff8c5712c0 RDI: ffffffff914d7da0
[  218.799157][ T8642] RBP: ffff88801460f820 R08: 0000000000000005 R09: 0000000000000000
[  218.801710][ T8642] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
[  218.804135][ T8642] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000dc0
[  218.806672][ T8642] FS:  0000000000000000(0000) GS:ffff8880969bd000(0063) knlGS:00000000f549db40
[  218.809440][ T8642] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  218.811500][ T8642] CR2: 00000000f70af000 CR3: 000000006090f000 CR4: 0000000000352ef0
[  218.814897][ T8642] Call Trace:
[  218.815996][ T8642]  <TASK>
[  218.816935][ T8642]  aa_free_profile+0x82/0xca0
[  218.818436][ T8642]  ? aa_str_alloc+0x90/0xb0
[  218.819883][ T8642]  aa_alloc_profile+0x3ae/0x520
[  218.821438][ T8642]  unpack_profile+0x3ed/0x4510
[  218.823082][ T8642]  ? is_bpf_text_address+0x8a/0x1a0
[  218.824735][ T8642]  ? bpf_ksym_find+0x124/0x1c0
[  218.826394][ T8642]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  218.828464][ T8642]  ? is_bpf_text_address+0x94/0x1a0
[  218.830109][ T8642]  ? kernel_text_address+0x8d/0x100
[  218.831808][ T8642]  ? __pfx_unpack_profile+0x10/0x10
[  218.833458][ T8642]  ? arch_stack_walk+0xa6/0xf0
[  218.835013][ T8642]  ? stack_trace_save+0x8e/0xc0
[  218.836603][ T8642]  ? __pfx_stack_trace_save+0x10/0x10
[  218.838295][ T8642]  ? aa_unpack_str+0xae/0x2b0
[  218.839788][ T8642]  aa_unpack+0x39e/0x1240
[  218.841171][ T8642]  ? __pfx_aa_unpack+0x10/0x10
[  218.842792][ T8642]  ? __lock_acquire+0x4c5/0x1ec0
[  218.844400][ T8642]  aa_replace_profiles+0x176/0x31c0
[  218.846046][ T8642]  ? __might_fault+0xc5/0x140
[  218.847656][ T8642]  ? __might_fault+0xc5/0x140
[  218.849252][ T8642]  ? __pfx_aa_replace_profiles+0x10/0x10
[  218.851065][ T8642]  ? _copy_from_user+0x59/0xd0
[  218.852710][ T8642]  policy_update+0x20b/0x340
[  218.854196][ T8642]  profile_load+0xaa/0x1a0
[  218.855651][ T8642]  vfs_write+0x2aa/0x1050
[  218.857073][ T8642]  ? __pfx_profile_load+0x10/0x10
[  218.858715][ T8642]  ? __pfx_vfs_write+0x10/0x10
[  218.860237][ T8642]  ? find_held_lock+0x2b/0x80
[  218.861787][ T8642]  ? __fget_files+0x215/0x3d0
[  218.863279][ T8642]  ? __fget_files+0x21f/0x3d0
[  218.864784][ T8642]  ksys_write+0x12a/0x250
[  218.866153][ T8642]  ? __pfx_ksys_write+0x10/0x10
[  218.867714][ T8642]  ? ksys_write+0x1ac/0x250
[  218.869287][ T8642]  ? __pfx_ksys_write+0x10/0x10
[  218.870845][ T8642]  __do_fast_syscall_32+0x13a/0x8b0
[  218.872680][ T8642]  ? lockdep_hardirqs_on+0x7d/0x110
[  218.874324][ T8642]  do_fast_syscall_32+0x32/0x70
[  218.875852][ T8642]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  218.877827][ T8642] RIP: 0023:0xf70aefec
[  218.879150][ T8642] Code: Unable to access opcode bytes at 0xf70aefc2.
[  218.881204][ T8642] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  218.883836][ T8642] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400
[  218.886312][ T8642] RDX: 000000000000003a RSI: 0000000000000000 RDI: 0000000000000000
[  218.888783][ T8642] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  218.891510][ T8642] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  218.894058][ T8642] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  218.896561][ T8642]  </TASK>
[  218.897540][ T8642] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  218.899789][ T8642] CPU: 0 UID: 0 PID: 8642 Comm: syz.1.799 Not tainted syzkaller #0 PREEMPT(full) 
[  218.902669][ T8642] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  218.905805][ T8642] Call Trace:
[  218.906895][ T8642]  <TASK>
[  218.907822][ T8642]  dump_stack_lvl+0x100/0x190
[  218.909478][ T8642]  vpanic+0x553/0x970
[  218.910757][ T8642]  ? __pfx_vpanic+0x10/0x10
[  218.912528][ T8642]  panic+0xd1/0xe0
[  218.913729][ T8642]  ? __pfx_panic+0x10/0x10
[  218.915171][ T8642]  check_panic_on_warn.cold+0x19/0x34
[  218.916879][ T8642]  ? aa_policy_destroy+0x78/0x1f0
[  218.918469][ T8642]  __warn.cold+0x191/0x318
[  218.919887][ T8642]  __report_bug+0x30f/0x440
[  218.921336][ T8642]  ? aa_policy_destroy+0x78/0x1f0
[  218.922946][ T8642]  ? __pfx___report_bug+0x10/0x10
[  218.924544][ T8642]  ? irqentry_exit+0x24d/0xa10
[  218.926063][ T8642]  report_bug_entry+0xe2/0x290
[  218.927586][ T8642]  ? aa_policy_destroy+0x7f/0x1f0
[  218.929184][ T8642]  handle_bug+0x1cd/0x2a0
[  218.930559][ T8642]  exc_invalid_op+0x17/0x50
[  218.932002][ T8642]  asm_exc_invalid_op+0x1a/0x20
[  218.933593][ T8642] RIP: 0010:aa_policy_destroy+0x7f/0x1f0
[  218.935385][ T8642] Code: 00 0f 85 88 01 00 00 48 b8 22 01 00 00 00 00 ad de 48 39 43 28 74 18 e8 df b4 31 fd 48 8d 3d e8 f6 74 0c 48 c7 c6 c0 12 57 8c <67> 48 0f b9 3a e8 c7 b4 31 fd 48 8d 6b 10 48 b8 00 00 00 00 00 fc
[  218.941351][ T8642] RSP: 0000:ffffc900064df678 EFLAGS: 00010293
[  218.943283][ T8642] RAX: 0000000000000000 RBX: ffff88801460f800 RCX: 0000000000000000
[  218.945762][ T8642] RDX: ffff88802a84cb00 RSI: ffffffff8c5712c0 RDI: ffffffff914d7da0
[  218.948249][ T8642] RBP: ffff88801460f820 R08: 0000000000000005 R09: 0000000000000000
[  218.950711][ T8642] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
[  218.953175][ T8642] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000dc0
[  218.955903][ T8642]  ? aa_policy_destroy+0x71/0x1f0
[  218.957540][ T8642]  aa_free_profile+0x82/0xca0
[  218.959035][ T8642]  ? aa_str_alloc+0x90/0xb0
[  218.960482][ T8642]  aa_alloc_profile+0x3ae/0x520
[  218.962086][ T8642]  unpack_profile+0x3ed/0x4510
[  218.963599][ T8642]  ? is_bpf_text_address+0x8a/0x1a0
[  218.965260][ T8642]  ? bpf_ksym_find+0x124/0x1c0
[  218.966718][ T8642]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  218.968644][ T8642]  ? is_bpf_text_address+0x94/0x1a0
[  218.970278][ T8642]  ? kernel_text_address+0x8d/0x100
[  218.971917][ T8642]  ? __pfx_unpack_profile+0x10/0x10
[  218.973563][ T8642]  ? arch_stack_walk+0xa6/0xf0
[  218.975106][ T8642]  ? stack_trace_save+0x8e/0xc0
[  218.976787][ T8642]  ? __pfx_stack_trace_save+0x10/0x10
[  218.978515][ T8642]  ? aa_unpack_str+0xae/0x2b0
[  218.980038][ T8642]  aa_unpack+0x39e/0x1240
[  218.981269][ T8642]  ? __pfx_aa_unpack+0x10/0x10
[  218.982603][ T8642]  ? __lock_acquire+0x4c5/0x1ec0
[  218.984025][ T8642]  aa_replace_profiles+0x176/0x31c0
[  218.985667][ T8642]  ? __might_fault+0xc5/0x140
[  218.987177][ T8642]  ? __might_fault+0xc5/0x140
[  218.988663][ T8642]  ? __pfx_aa_replace_profiles+0x10/0x10
[  218.990417][ T8642]  ? _copy_from_user+0x59/0xd0
[  218.991925][ T8642]  policy_update+0x20b/0x340
[  218.993393][ T8642]  profile_load+0xaa/0x1a0
[  218.994820][ T8642]  vfs_write+0x2aa/0x1050
[  218.996186][ T8642]  ? __pfx_profile_load+0x10/0x10
[  218.998125][ T8642]  ? __pfx_vfs_write+0x10/0x10
[  218.999649][ T8642]  ? find_held_lock+0x2b/0x80
[  219.001142][ T8642]  ? __fget_files+0x215/0x3d0
[  219.002629][ T8642]  ? __fget_files+0x21f/0x3d0
[  219.004109][ T8642]  ksys_write+0x12a/0x250
[  219.005476][ T8642]  ? __pfx_ksys_write+0x10/0x10
[  219.007010][ T8642]  ? ksys_write+0x1ac/0x250
[  219.008470][ T8642]  ? __pfx_ksys_write+0x10/0x10
[  219.009997][ T8642]  __do_fast_syscall_32+0x13a/0x8b0
[  219.011628][ T8642]  ? lockdep_hardirqs_on+0x7d/0x110
[  219.013258][ T8642]  do_fast_syscall_32+0x32/0x70
[  219.014802][ T8642]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  219.016787][ T8642] RIP: 0023:0xf70aefec
[  219.018114][ T8642] Code: Unable to access opcode bytes at 0xf70aefc2.
[  219.020197][ T8642] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  219.022799][ T8642] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400
[  219.025248][ T8642] RDX: 000000000000003a RSI: 0000000000000000 RDI: 0000000000000000
[  219.027725][ T8642] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  219.030217][ T8642] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  219.032702][ T8642] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  219.035190][ T8642]  </TASK>
[  219.036827][ T8642] Kernel Offset: disabled
[  219.038207][ T8642] Rebooting in 86400 seconds..