last executing test programs:

3.890177879s ago: executing program 1 (id=188):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000004000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004140)=ANY=[@ANYBLOB="140000001000000100000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100b4030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000041c0)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000004240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd0300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4)
write$P9_RREADLINK(r3, &(0x7f0000000780)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10)
cachestat(r3, &(0x7f00000007c0)={0x1, 0x5}, &(0x7f00000042c0), 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid() (async)
sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) (async)
sched_setaffinity(r4, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) (async)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x80186803, 0x0) (async)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x2a}, 0x94) (async)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)

3.434738301s ago: executing program 0 (id=190):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001d00)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x0, 0x2}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r2 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000001e00)="8907040400", 0x5) (async, rerun: 64)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001e40)='veth1\x00', 0x10) (async, rerun: 64)
sendmmsg$inet(r2, &(0x7f0000001e80)=[{{&(0x7f0000001ec0)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0)

3.386060059s ago: executing program 0 (id=191):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000680)={0x82, 0x0, 0x0, 0x0})
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r3=>0x0})
r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
setns(r4, 0x8000000)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r3, 0xfffffffffffffffd, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r6, 0x2, {0x1, 0xf0}}, 0x18)
r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x2]}, 0x8, 0x0)
io_setup(0x206, &(0x7f0000000280)=<r8=>0x0)
io_submit(r8, 0x1, &(0x7f00000002c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}])
ioctl$UI_SET_LEDBIT(r7, 0x40045569, 0x0)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r7)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x94, r9, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9b}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x94}, 0x1, 0x0, 0x0, 0xc00c}, 0x4048040)
execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)={[&(0x7f0000000ec0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xbf\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x19\x16h\x83\x94y<yN\xfbXh[\xe9\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xf0!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\x01\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccM\x8c\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00']})

3.018539924s ago: executing program 0 (id=194):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000500))
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000040)={0x9, 0x3913000, 0x4c, 0xffff})
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = add_key(0x0, 0x0, &(0x7f0000000300)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e", 0x10b, 0x0)
add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00220f00000083090000002b2fd682"], 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000280), 0x0, 0x0)
ioctl$HIDIOCGPHYS(r2, 0x80404812, &(0x7f00000002c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x402e831, 0xffffffffffffffff, 0xf6d0d000)
add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r1)
memfd_create(&(0x7f0000000100)='/dev/sda1\x00', 0x3)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r3 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x400)
ioctl$BLKFLSBUF(r3, 0x1261, 0x0)
syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT, 0x2)
ioctl$BLKFLSBUF(r3, 0x1261, 0x0)
mremap(&(0x7f00007dd000/0x2000)=nil, 0x2000, 0x1000, 0x4, &(0x7f00004af000/0x1000)=nil)
utimes(0x0, 0x0)

2.806882895s ago: executing program 1 (id=196):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000680)={0x82, 0x0, 0x0, 0x0})
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r3=>0x0})
r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
setns(r4, 0x8000000)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r3, 0xfffffffffffffffd, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r6, 0x2, {0x1, 0xf0}}, 0x18)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x2]}, 0x8, 0x0)
io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}])
ioctl$UI_SET_LEDBIT(r7, 0x40045569, 0x0)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r7)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x94, r8, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9b}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x94}, 0x1, 0x0, 0x0, 0xc00c}, 0x4048040)
execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)={[&(0x7f0000000ec0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xbf\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x19\x16h\x83\x94y<yN\xfbXh[\xe9\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xf0!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\x01\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccM\x8c\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00']})

2.619035906s ago: executing program 1 (id=200):
request_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000300)={'syz', 0x1}, 0xfffffffffffffffe, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000005c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000640)="94", 0xf000}, {0x0}], 0x2)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2001, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_open_dev$vim2m(&(0x7f0000000680), 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18)
process_vm_writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000700)=""/89, 0x59}], 0x1, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/2, 0x2}], 0x1, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000151000/0x2000)=nil, 0x2000, &(0x7f0000000800)='\x00')
r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000280)={r4, 0x0, 0x0, 0x0, 0xfffffffffffffffe})
io_uring_setup(0x243f, &(0x7f0000000200)={0x0, 0xfffffff9, 0x42, 0x2, 0xfffbfffc})

2.249365391s ago: executing program 2 (id=201):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xd0}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f000001f880)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (fail_nth: 2)

2.200419598s ago: executing program 2 (id=202):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000680)={0x82, 0x0, 0x0, 0x0})
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r3=>0x0})
r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
setns(r4, 0x8000000)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r3, 0xfffffffffffffffd, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00'})
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x2]}, 0x8, 0x0)
io_setup(0x206, &(0x7f0000000280)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f00000002c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}])
ioctl$UI_SET_LEDBIT(r6, 0x40045569, 0x0)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r6)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x94, r8, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9b}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x94}, 0x1, 0x0, 0x0, 0xc00c}, 0x4048040)
execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)={[&(0x7f0000000ec0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xbf\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x19\x16h\x83\x94y<yN\xfbXh[\xe9\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xf0!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\x01\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccM\x8c\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00']})

1.97982505s ago: executing program 2 (id=203):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xd0}}, 0x0)
capset(&(0x7f0000000540)={0x20071026}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001180), 0x0, 0x10, &(0x7f00000011c0), 0xfffffffffffffdb9}, 0x48)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./work\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./lower/file1\x00', 0x42, 0x1ff)
mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000300)='overlay\x00', 0x0, &(0x7f0000000340)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00')
unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt/file1\x00', 0x0)
umount2(&(0x7f0000000400)='./mnt\x00', 0x0)
mount(0x0, &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480)='overlay\x00', 0x0, &(0x7f00000004c0)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00')
syz_emit_ethernet(0x4a, &(0x7f000001f880)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

1.979576708s ago: executing program 2 (id=204):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ppoll(&(0x7f00000000c0)=[{r0, 0xa180}], 0x1, 0x0, 0x0, 0x0)
r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2)
r2 = dup(r1)
ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f045, 0x100})
read$FUSE(r2, &(0x7f0000002840)={0x2020}, 0x2020)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
ioctl(r3, 0x40186f40, &(0x7f0000000800))

1.899717772s ago: executing program 3 (id=205):
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc01c586a, &(0x7f0000000100)={<r0=>0xffffffffffffffff, &(0x7f0000000000)='\xe5%\x00', 0x8000, &(0x7f0000000040)={@_ha_fsid={[0x8, 0x2]}, {0x101, 0x3, 0x8, 0x3}}, 0x5, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x9})
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000440)={{&(0x7f0000000140)=[{0x6, 0x6, 0x9, {0x9, 0x5}, 0x1, 0x4}, {0x6, 0x8, 0x1, {0x0, 0x9cb8}, 0x2, 0xb908}, {0x7, 0x1, 0x6, {0x5, 0x6}, 0x2, 0x7, 0x4}, {0x0, 0x9, 0x10000, {0x6, 0x5f}, 0xfff, 0x4, 0x8}, {0x401, 0x7, 0x8, {0x7, 0x8}, 0x7ff, 0x2, 0x8000}], 0x5, 0x40, 0x6, 0x100000000}, {&(0x7f0000000280)=[{0x4, 0x4}, {0x0, 0x9}, {0x7}, {0x5, 0x8}, {0x2, 0xffffffff}], 0x5, 0x10, 0x1000, 0xa2}, {&(0x7f0000000300)=[0xfff, 0x4], 0x2, 0x8, 0x5, 0x3}, {&(0x7f0000000340)=[{0x3, 0x2, 0xfffffffffffffffd, 0x8, 0xfff}, {0x731, 0x3, 0xffffffffffffffd7, 0x7ff, 0xe317}, {0x9, 0x1, 0xfff, 0x57, 0x1}, {0x8, 0x7fffffff, 0x6, 0x8, 0xc0}], 0x4, 0x28, 0x81, 0x40}, {&(0x7f0000000400)=[0x5, 0xd9], 0x2, 0x8, 0x4, 0x7}})
ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f00000004c0)={{r0}, "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"})
openat$kvm(0xffffff9c, &(0x7f00000014c0), 0x1000, 0x0)
r1 = add_key$fscrypt_provisioning(&(0x7f0000001500), &(0x7f0000001540)={'syz', 0x3}, &(0x7f0000001580)={0x2, 0x0, @a}, 0x48, 0x0)
r2 = add_key$keyring(&(0x7f0000001600), &(0x7f0000001640)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$reject(0x13, r1, 0x1, 0xb, r2)
ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000001680)={0xe, "9f95c96fbb2951c4a3aa05e42c647e50a6ab7ed1c7266ca4fd8367ea8699701861c9462573d6b4c9c55ad5564b21451599fe15d33b45d0814a8579bc073bc7a8a999fb972ec9a013ac81b955911bfef18aadae31a5425e0c314ad4b7960c4393d143cf753a4ce540f707ec6a397f527892f5a9112ab140acddba611e7d1ff6a4"})
openat$sequencer(0xffffff9c, &(0x7f0000001740), 0xfe3d645a18b9c183, 0x0)
ioctl$GET_DISK_INFO(r0, 0x80140912, &(0x7f0000001780)={0x7})
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, &(0x7f0000001800)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000017c0)=@new_dev={0x3, 0x761}}}, &(0x7f0000001880)=<r4=>0x0)
syz_ublk_setup_queues(r0, 0x0, &(0x7f0000001940)={0x0, 0x75a2, 0x10000, 0x0, 0x128, 0x0, r0}, &(0x7f00000019c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd42d, 0x2000, 0x1, 0x2de, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc004, 0x0, 0x0, 0x126, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x97fb, 0x400, 0x0, 0x320, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b14, 0x10, 0x2, 0x184, 0x0, r0}, <r5=>0xffffffffffffffff}], 0x4, &(0x7f0000002c40)={0x2e, 0xb, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, '\x00', {0x1, 0x4d2, 0x0, &(0x7f0000001c40)=@buf_4k="f53a8a5f91112ac5a8aeaf116c60253fe7fd7ea14951186df9c76374a31d6e774397563f49ed06b7972855ad86076835aaa6aacb7caeca73499283bf928840587c4fddd9796564d5ed4848d850cf1590df828fb066c2742e85c962827e0a3744de60f2c690204c5691ec1847744a075ac1d7850b4b8b08a2748fb622ac0dfd6227bd6396d6c67f4bf67197f3f60b1025fbdb9f757dda55bd4ba58064d7bc5f2462f41ab2e23d57c1fa77f13dca8a30e402cd537fa2b5ec8232fff8652ee35e5d5b18b0d41013808a4b921a7020711eff4376ff781b4595adf8556aa9166803569f93e0fc21c0d2df828896273a5f3dc9b21dc7f9737e1af759f6451e3af42effef0f445d08f6dd842ee02c25a9e11c04cfc99b9ac18495c475f639d0d686bd830aca823cedcadf31acc558a69b52a15a0d6d3a3a6ab17cb6606f538b2da25a531ce403b610c4c8e6643ce77743dfa7c719168619acf3eccd7065b692295370428c3746670ccc8174e950d4855ac6842e8771282677b69d76bab4c5717e03b350f85a0a5e1e29c9579262df6fedcb3d67ff082fdc907233741a3cccbef65b395208cd8600cb2e41287b28ac7149728e6507c43395b60db2cfadaf91dee495b2087f4157cfad5233eb1c5d9e64be122f075f540152937211b207d0887e9cd416509ced77ae8000192e1613a00b06288bcbbfd325d6a512dbb5b277199a62dbc7d29caa92da8acd35cea41a5cb618dde115a6459bf0018c343e7b741573abee095f4af31ce2587bc86c78a6a16c7e11fa53379bab782703e79fe485317fb231bd4f96683b8722794571e559ec293f7f86d3a9a81ae32a40927c736d8f06b2eda09c02a475182bd6b9957c1f7723f24f93573f0bd990b924397a3b4cc477a3c93ec8c6deb072137d6e349e10624c79e7395ef7a225870de99c12e9152171f82e23bab6dde1a841f44821bd62141c8d0bec18d5987eedc3405cc7f2deab2b7b81b76dc6fa8ac4b5036344bbc6f60529ecf073df044da25bb6f5a87ad2804b71bc7556c4c3ead81812bd07239ec37f89adfa112b3b62f588d6bd64d4977778c7654cedc0da850814fcd3d52da4b4e32593bfc99ff029358f774f67cd9d808b99773b3d2e5619ac04811780d195e435e4caed4cd6496b3828ed29c1c2e24fb8d582689ae71898cd38fae26a287aad6cdff0fb6f6c5d61ae063d719e672b77271d6d7e76e2ee0523da08c5c05d9f9339e7cef16f669e3f369cc19b2e8bb5f04eaaafd29e22c247c65b9955e54094f35fca45234b3600191a239034cea3f19c90efd33a5542fa59364bd5d0014ed18d6551a0f63dd03df78e9c2ec2b98673f43e70fe4d78501c008ab944b54517c66406f200b03fdeee20027a537a1ef981377509dc3ce8ceea636bcb240d880b5a416e16af23755ff4a07a4b4c87d843f05cbadbc30003dfb23c2e23caff398d8108c1ea56cb54b1f4703c16c7cc8184be829879d89b3f0bf7bfd787c3626bc56c013e9ec97f9b912fa8ad1f15341e505a14810afa1b8a394ef7ec38411c3fd463ee55e0604e286e0def3ddf14af95e141151048a6c2981afe38ec7b3b0b16b9c4e19005ff8324bb7ede06b00e46413572123e28f02e3c63828097b2652e13d52d216e5fa4020a3acd3a6fc94338396b7113a5918894b9b371883b9468011a28901bdb1075a6e4fd5dde8477dd52436fded84052f23df8e14655236555c33ed9fe96e78d03568d8429adb9aff2bff092dc3e08cf30c8761e8f603380e887182e5ccdb05d423a338bf47170546836f79e2ccc3a9c3a69d952409de26f946d443a580ceac5c7dbd59b5e9fff6f8091f11739ac8342a1c3914e3cb82640790b88477bc3ac84694b7b4358991b8d7d6bdd3d45b773fb131f445f7c07c1c0dc1d58bd14d99e2f050c46c69c4380c3f6a6f0d74bdbb6ba2d4e0e02f415043ab2e9dc3996253aa4087062884333c763cba3d9b3394f7b08403db17bd52ae388c78e18d61aa8f609153d0585cebba984db26f0f624e5f7f0c83fea22d29a7369acad60b419def2958df8011715208e7905076945a0b839498eeb89d20380b88d3c9eafe20218c00f4461a396217df2e400844ff3c94c409660a27850cbef085204d8ff85853c094df27bfe7737aa84c4b4b72b0acaedbd8498977d2ee52abd46256985c92b911dda92773a164acf3910314df4b82f967ce813402bf29be8584324c6a9b87c3f9e83f2e0a2806f3e3279ba9705097ff1cd89c1511a65a6c4643f9a0576377fb3cd231e897e38fff7520d47b560481aceb5612f08ebf902cb664ac22f3371df0dc50c8682000273312ccb06336e9bbc2f9e123f477b59481abb8ac6366845b578ee4487dbcee0238249f8bde6df72eb9cb3f1249f77537cbbf3eaa11bfa54e479c6573ef0adf712107a8719418fa1ca292699582512ff4f029cca841cc02d2631bd39ccb3a708b00a31c7d37dd422f54140b13d80c52617b82f571214597c1538ace5996adc468b3bb94b8a3e4371982bcd91e2ac2f70ff733eecc6cfdfbc26a6fd322b7c95da0d6aa19a9868d963a16ce40f178b58806c6d348fd47026f24f1623803ea1c4559f55974b02155885f6840ece4c68ff31e0a3bf1b01d3c661d7304f0fc4f5dd0ed71719cd7692a3a303b950078cf8dbbfd5e166e67a8cf0b95504947c3d05a34998013ae7dcb4466c1d634f67cf17d13cba9971a5d78e7bea5f68b4085eba8ad4f363a838f6a374aefc29730163cb3b4ae8e543261515a3f34c89ccb8fd6b651496fc7ee99091f2462f9b34f4a54df3a20c164b2c71f67b25c705cd2e09bbae55331665676d5ecff97da139fe767e2e7c329393f956ec54efcaec4a55ef430594e1c03d0b7e030b7d620d287425838dafe1ffa566f9eaf35c4f8bc05b89e3c345908eec44f42f147f7560ef8b1eb44e995bc6f7de39474bdb7b627b2871bb2179fd5e5135132364ef3f90ad8323b6f29045a7a79c23029adec1ffd2004a4ae036db656773d22dde904e94b4e7a74124c238945d3e37fb5bcf352194e27fc60f268e0ff298346f441f4fd2eda8bc69f83f32f1445fad866cc2abbbe741487297407bed122c3ddc98fbdb2cf1755a7820319858a2423d6ddaf361ca4c928ae2043a413bf28bdb765dbec101ebfbc0e96467e0fd474118c402d253f5a7ba76a65066d339e15160df91375466180d758514f670efa12b9ed6a385726be6c1da445e52ff7c8c50df355e408b7dde6ff56696814fd5abde277957f0f729646764d37a9fc05b87bea7888cbd86762419809be312472d587160b45d3ab13399bc3fc6bcffa38c8ecb5c0d6a411dbb13b9a837e239322db6644a6da07a28eb7547eefffc7dcbfff332db667333098f91b4ac7abadfa91a522d42b1e904374cc7df643c1b312dda2ef5a7105efd3b1930ab6dd8467b93c39ec6085a62933673522c4981be9794ca3c4774060b6247b98a33aa47a378e33a0813ff033e6f2b2a3bb56a3786f748b12518d5e010ddadb1d2d88a66a1d91ca8216d17cb2fb3c3567d29016433fd691ae423f55f302036a25c77d247e20aff44deb8e0dcc9f1a0086e76c80059075a182798cf1284a0aee56d498d158f473742a2a2658329aaca5736dbda5a7b2d7ecebe3c7019bf868b2b1d0ab5587587b50b88f8b523ad54c254a42ed42ef11729ad94c6cf30aedbdceb31103a6d43ef933685e4b7b0fc342d671102fcaecbc3fa7038346755ea038750609bcb7baedd7d7065ec1dcec3c3bfcaea1a986fbf4b6d965f465d57315f6426d8e594b2d576f724b8683df2ecda5fb742a2678f5244dae5f8b1ea6c4aa123e4f775e33b11043f3c675f490ee4cd6219bad57d8a7e7fdd4baedb40de948d03e012e3f68efabf8ba6f05c1431af46fe4194519f998c30e80e4056dd5ceb7f85b0fe3a92f9a366eeae7992a96122dbdc1de4a5e969885df812711c9578d7a51d917ec8efe832f25ffc5b6505a905e66bfa77f82c9150d0822acd7e18c341ebacb553f6c53ec25b2ac50fd70072ec137c33e694b005be48c0975de9d8475a02bada611ab3e8256206cbd8339c73b52046c2ac0c5499bf436b1f86651a16f188b20bd6066993301a99a54e5fadbf45e22cebb8c56e451b6e39042f0d74a98b4939e3e46bb67c820678c607c0fbba92e392fee217ac51b1790285ef1576a73309967270ebd949c984719049421e8be6728d992be575dfb9dc03326e42c6bd42ee5cf3ce664f386a279a2f78f08c2ae3cbd9cac0761f12c02799ba9b976d732eeb5f2fed022ae51520f386d549b03fef22f2d7dc47bb519138312bf5ee98b5c3699567508fed8de16b9801257120d3e803d05947e90076e07ba4851530451687b3983dd3025fce6b6c78a498e54a487604412ade555bf93b2b760fe90436309322b6d8aab8db9310be8d9f503ec5a238fa0a2951291a0cf07f7a2d63a74521136306b40c3922e4e0f7860ec1ece944c0bbe0e8e7b161e4c0aee958e1bf796d46d00e4af66d1de3cdd179c1fde53022fe4e9ede12b899a793acb30d8cd7f0aa956ecec40e1c84ef4045af886aa6c672dc6171a8756d99a40dc3f5a9c5b197098e6ec3ed35f66023bd364d691f8b118a8101b9470e67d60f83d7bdf975d548be8947f2b1b05528f588b84b5222d989594d8da2a2d254917c2aef05eb38bfb5fbe11306e94dbf83cc55d174988a3ffc7d8226824f3cce1a6b0dbfb646dc664fb460ece4e23c3e78fb356b2194e22961f55c86f42c8f729becfe537ab9fa754136c7fbb53f64714fff5f2ad9efa19366590c6f3f9a7e942264f108d0febce5b79d47568c89f240124dff507cd69369514b087e5e7dad38cb72b46222548ddaaf2b2f6d7133dfadef2340ea74f82fe2316680c203f4dea773db2c8e68d7aad52c8b24b82800f9c5a1be099a778c40294aa5cbdc317ad063b64432ac6436ee85bcb7fb8e6c48aedf01cabfa76944097270ddebbb5a7cb2a33c7c92f73a7c7694359dd3bbe59db2c4e35916fc9dc5b97190daa11c46d4c85ca6da6e8b3d3b679880bd62e400138dac9e5b019b7f4e2e574a9c6d6fad32cec29f3da95903e2db51fd3e6cde1a50b68c078492a7ef2f37699132803ab7a4585c503822cf26bc2c4f9c90e1bcb5e12eb958b10cf1da5002abb53158b9d3928720c2e0379155cfde39482ac2a2d7902a6b2203cf890af66fdcb99fa018afd472f2b6f2c8a3d69107d97fd8fea0bc327f0d0636df2d06ba39d7222630719750893aa62b4fb6fa5dfd6612c588369baeadba3a839ab92eb915707765862fe2792914d2923e84c8db34854b5e09d1913eb4f347963cb8ba2622d7c97d72db7654f910c4c178a8ff4b0382dfb7aef90550e9d0870a4d0cb83761a7b633eb729af7554c6c7705ca092a9caa1b26496fe055f14d4ce71f1e13a8e22d0b5c1ed48c76812751ac1ef6454400c661d90b315de2282fe65d73f6c2236eeddb7e40252528b78d9b8b5c50a164057f271b7a72ec67fa8151d9f06e214895b5a8ea1e835e8836c03682a011dc130fb8a696445fa321520bed18b1ab29e00edab7ca5044f2135f44d62fc386cfe65dbe911a8b84faeb13eaedec5ee938b8bb69cedc5ef2cd4ba51bf9058a5ae601307a0dea21e5b0fbc1d839065528a69bf064bf1f35c8d11943cf1e2c8c6ab7ea9fcc0dbfbb13b8d4ba3c61d1e2ba5a5b4486d053dc684f3e778066fcf85e0c4700d202f8eae30f5501e93304aceda12e2d34e86079b2eee3f85dacb399b5e3630d8e32dbeb137293bcf70b7611"}}, &(0x7f0000002cc0))
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_ublk_setup_queues(r0, r4, &(0x7f00000018c0)={0x0, 0xc2ea, 0x40, 0x2, 0x3, 0x0, r0}, &(0x7f0000002d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa636, 0x1000, 0x0, 0x36c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x290c, 0x40, 0x3, 0x1a3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7828, 0x2, 0x2, 0x157}}, {0x0, 0x0, <r7=>0xffffffffffffffff, {0x0, 0xde59, 0x200, 0x2, 0x88, 0x0, r5}}], 0x4, &(0x7f0000003f80)={0x2e, 0x40, 0x0, <r8=>r0, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x4}, 0x0, r6, '\x00', {0x1, 0x538, 0x0, &(0x7f0000002f80)=@buf_1k="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"}}, &(0x7f0000004000))
getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000004040), &(0x7f0000004080)=0x4)
ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r0, 0xc0106450, &(0x7f00000040c0)={<r9=>0x0, 0x1d48bca657e4656, 0x2})
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000004100)={r9})
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000004140), r10)
ioctl$SIOCX25CALLACCPTAPPRV(r3, 0x89e8)
socket$inet(0x2, 0x80000, 0x7)
ioctl$BTRFS_IOC_RM_DEV(r8, 0x5000940b, &(0x7f0000004180)={{r7}, "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"})
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r11, &(0x7f0000005280)={&(0x7f0000005180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000005240)={&(0x7f00000051c0)={0x70, 0x5, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x8000)
write$P9_RVERSION(r0, &(0x7f00000052c0)={0x15, 0x65, 0xffff, 0x6, 0x8, '9P2000.u'}, 0x15)
ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000005300)=0xc)
r12 = openat$null(0xffffff9c, &(0x7f0000005340), 0x400000, 0x0)
ioctl$VHOST_SET_OWNER(r12, 0xaf01, 0x0)
ioctl$PPPIOCSFLAGS1(r12, 0x40047459, &(0x7f0000005380)=0x4000)

1.758015252s ago: executing program 3 (id=206):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000000000007e000000000000005504000017ffff162500000017ffff17ce040000000000007b0a00fe000000002d04000000000000d6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236ed200073826593c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f6260a483632a2ab447f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d172ab29967e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f522df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb520400000000000000c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399fa5ee0b41e14a6fe6894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014fa841061e63d40f4e536314beda5738fee012365f963b2a85e7d8075c333475b9f0284405e30700000041285fbe0bdd37220e31d4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe8c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68ad9fa2b2528798df1c36fc438d9c98f168490b41e158bb2e2d8ed19d44b9cce67c79f9f7bfae7ebe09e441745c592ce69c522b5136be09ed1b97ea3d5b317508df23e92c56fc2eb74d27d3861d91745b8fb9f6cc20e9f8b174000c62c4a2b212332a073fc5d0be7347e41454cb27e081c43e92ae7f9f046600db85d945a4666b588629ce0809d5c8506308688db21ec04d365497bf902126ca2ec1589f1423"], &(0x7f0000001d40)='GPL\x00'}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'team_slave_1\x00', @random="c34562e21e20"})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}, 0x1, 0x0, 0x0, 0x20000841}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r9, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendto$packet(r9, &(0x7f0000000540)="f4efe0430444425a1a9942a2f606", 0xe, 0x0, &(0x7f0000000640)={0x11, 0x4, r12, 0x1, 0xff, 0x6, @remote}, 0x14)
r13 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r13, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)
sendmmsg$inet(r13, &(0x7f0000000080), 0x4000095, 0x0)
setsockopt$sock_int(r13, 0x1, 0x5, &(0x7f0000000240)=0x9, 0x4)
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=@newqdisc={0xc88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc5c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x1, 0x400, 0x0, 0x2, 0x2}, {0x7f, 0xfc6065576eb3e04d, 0x401, 0x1, 0x9, 0x10000}, 0x8, 0x7, 0xd2d}}, @TCA_TBF_PBURST={0x8, 0x7, 0xdc6}, @TCA_TBF_PBURST={0x8, 0x7, 0x22fe}, @TCA_TBF_BURST={0x8, 0x6, 0x81}, @TCA_TBF_PTAB={0x404, 0x3, [0x7, 0x2, 0x120000, 0x80000000, 0x3ff, 0x2, 0x5, 0x5, 0x1, 0x8, 0x8001, 0x101, 0x1, 0xfffffffa, 0x92, 0x9, 0x7fff, 0x2, 0xa63, 0x7, 0x3, 0x6, 0x400, 0x5, 0x5, 0xf, 0xfffffffd, 0x9, 0x6, 0x3, 0x3ff, 0x90000000, 0xffffff00, 0x407, 0x4, 0x0, 0x5, 0xa5, 0xfffffffc, 0xfff, 0x0, 0x10, 0x66, 0x7, 0x4, 0xfffffffa, 0x8, 0x80000001, 0xfff, 0x8, 0x101, 0x800, 0x7, 0x5, 0x5, 0x2, 0x2, 0x4, 0x6, 0x80000000, 0x3e, 0x5, 0x5, 0x4, 0x100, 0x6, 0x5, 0x3, 0x9, 0x7, 0x100, 0x9, 0x9, 0xfffffffc, 0x3, 0x6, 0xd, 0x2, 0xc0, 0xc3d, 0xfffffffa, 0xb, 0x6b8, 0x9, 0xfffffff9, 0xd2, 0x9, 0x1, 0xb, 0x2, 0x7f, 0x4, 0x7, 0x2, 0xfffffffe, 0x2, 0x2, 0x81c6, 0x1, 0xffffffff, 0x8, 0x7, 0x8, 0x7, 0x800, 0x101, 0x4, 0xffff, 0x8001, 0x90, 0x6, 0x5, 0x6, 0x400, 0x0, 0x247, 0x8, 0x0, 0x1, 0xc05, 0xffffff3f, 0x0, 0x1, 0x7, 0x8, 0x3ff, 0x4, 0x52fd5f30, 0x7, 0xd1, 0x6, 0xd51, 0x1, 0x9, 0x6871, 0x2, 0x6, 0x0, 0x9, 0x800, 0x101, 0x0, 0x9fc3, 0xd, 0x4, 0xee, 0x8e, 0x2f3, 0xc7de, 0x401, 0x9, 0x8, 0x8, 0x781, 0x1, 0x2, 0x7f, 0x40, 0x6, 0x4, 0xc9, 0x6, 0x4, 0xf, 0x9, 0xd93, 0x2, 0x6, 0x3d5, 0xfffffffe, 0x7, 0xe467, 0x4, 0x10000, 0x1000, 0x7, 0x9, 0x5, 0x81, 0x7, 0x0, 0x2, 0xe, 0x3e2c3a51, 0xc7, 0x3, 0x3, 0x8, 0x81, 0xfffffff5, 0x7, 0x5, 0x1, 0xd, 0xf, 0x2, 0x2, 0x8, 0x1, 0xee, 0x4, 0x0, 0x5, 0x8, 0x4, 0x1, 0xd, 0x4, 0x8001, 0x7, 0x1000, 0x80000000, 0x0, 0x7ff, 0x0, 0x8f, 0x9c, 0x9, 0x8, 0x200, 0x2, 0x7, 0x1, 0x7, 0x1, 0xb, 0x101, 0x6, 0x3921fec9, 0x6, 0x4, 0xb, 0x200, 0x1ff, 0x5, 0x7fff, 0xc9f, 0x2, 0x66f, 0x2550c8cd, 0x6, 0x80000001, 0x9, 0x40, 0x7, 0x10, 0x8000, 0x7f, 0x7, 0x80b, 0x5d153cd, 0x1ecb, 0xfffffff4, 0x79, 0x7fffffff, 0x9]}, @TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x5, 0x1ff, 0x40, 0x0, 0x4, 0x7, 0x69a, 0x0, 0x8, 0x200, 0x0, 0x6, 0x49e4, 0x5, 0x9, 0x0, 0xffffffff, 0x8, 0xa3f, 0xfffffffa, 0xd8f, 0xaaea, 0x0, 0x5, 0x8, 0x3, 0x6f, 0x1, 0x3, 0xffffffff, 0x4, 0x81, 0x4, 0x90dd, 0xfff, 0x63, 0x9, 0x533cc9fe, 0x1000, 0x7, 0x9, 0x6, 0x2, 0xa, 0x0, 0x8, 0x5, 0x7, 0x9, 0x7, 0x3, 0x3, 0x8, 0x1fc00000, 0x7, 0x0, 0x2, 0x0, 0x1, 0x117a, 0x0, 0x86, 0x6, 0xffff8001, 0x6, 0x800, 0x1, 0x4, 0x3, 0x4, 0x0, 0x3, 0x5, 0x1, 0x10000, 0x6b8, 0x81, 0x9dc, 0xff, 0xd, 0xfffffffe, 0x6, 0x6, 0x2, 0x8, 0x6, 0x80b2, 0xf, 0x2, 0x9, 0x6, 0xd374, 0x1, 0x63, 0x6, 0x1000, 0x1b, 0x8c6d, 0x0, 0xf, 0x7, 0x4b4, 0x8, 0x80, 0x7, 0x5, 0x400000, 0x1ff, 0xffff, 0x7, 0x7, 0x4, 0x2, 0x7, 0x4, 0x4, 0xf, 0x6, 0x76, 0xfff, 0x9, 0x2, 0x5, 0x5, 0x8, 0x9, 0x5, 0xfffffffd, 0x758, 0x8, 0x0, 0x1ec, 0x3, 0x7fff, 0x0, 0xa, 0x8, 0xe, 0x3, 0x5, 0x7ff, 0x1, 0xc, 0x6, 0x1, 0x9, 0x81, 0x1, 0x8, 0x0, 0x9, 0x7, 0x4051, 0xf, 0x6317, 0x0, 0x0, 0xf, 0xfffffff3, 0x0, 0x7, 0x6, 0x8000, 0x401, 0x80, 0x10, 0x2, 0x8, 0x2, 0xfff, 0x4, 0x8000, 0x8, 0x8, 0x9, 0x8, 0x8, 0x80d, 0x0, 0x6, 0x9ee, 0xa, 0x9, 0x2, 0x6, 0x4, 0x9, 0x8, 0x9, 0x6, 0x81f771a7, 0x1ff, 0x8, 0x4, 0xe25e, 0xbf04, 0x7, 0x2, 0xa3, 0xffff, 0xfffffff4, 0x5ce9, 0x20000, 0x800, 0x3, 0x3, 0x40, 0x4, 0x8001, 0x80000000, 0xc8a, 0x3, 0x8, 0x4, 0x7b, 0x8, 0x4, 0x7, 0xb16, 0x9, 0x9, 0x9, 0x2, 0x4, 0xff, 0x73, 0x0, 0xb, 0xaa75, 0x7ff, 0x2, 0x9, 0x7, 0x9, 0x9, 0x3, 0xfffffff9, 0x0, 0xfffffffe, 0x0, 0x1, 0x1391, 0x0, 0x3, 0x9, 0x3, 0x8, 0x7, 0x0, 0x1, 0x3, 0x80000000, 0x4, 0x5]}, @TCA_TBF_RTAB={0x404, 0x2, [0x5, 0x2, 0x0, 0x401, 0x9eb, 0x8, 0xffff08a3, 0x40, 0x6, 0x1ff, 0x2, 0x5, 0x4a, 0xc000, 0x2, 0x9, 0x3, 0x1, 0x2, 0x7fffffff, 0x4, 0x1, 0x3, 0x1, 0x6, 0xd98, 0x80000000, 0x10, 0x5, 0x7, 0x7, 0x1, 0x7, 0x9, 0x0, 0x80000000, 0xfffffffd, 0x3, 0x3, 0x1ff, 0x0, 0x2, 0xc4, 0xf2, 0x1, 0x2878, 0x90, 0x5, 0xc, 0x2, 0x1, 0x3, 0x1, 0x0, 0x80, 0x2, 0x4, 0x2, 0x30000000, 0x4, 0xec, 0xd, 0x3bc, 0xda, 0x3, 0x6, 0x7, 0x2, 0x265, 0x6, 0xe, 0x8, 0x4, 0x5, 0xffff, 0x6, 0x6, 0x8, 0x3, 0xfffff000, 0xa936, 0x7fffffff, 0xfda, 0xa2, 0x7, 0x33, 0x6, 0xa5, 0xe, 0x4, 0x6, 0xffff, 0x800, 0x80000, 0xffff, 0x6, 0x2, 0x7, 0x1d, 0x200, 0x53, 0x7, 0x1, 0x2, 0x6, 0xfffffffb, 0x4, 0x8, 0x1f, 0x7fffffff, 0x0, 0x3, 0x10001, 0x5c, 0x2, 0xb10, 0x8001, 0x7, 0x1, 0x1000, 0x4, 0xb46, 0x4, 0xcd, 0x7fffffff, 0x1, 0x4, 0x800, 0x8, 0x9, 0x8000, 0x686d7d3c, 0x1, 0x7, 0x6, 0x100, 0x5, 0x0, 0x9, 0x6, 0x0, 0x2, 0x3, 0x4, 0x0, 0x4, 0x10000, 0x0, 0x1, 0x561, 0x5, 0xfffffffe, 0x3, 0x1, 0xfffffffd, 0x1, 0x10000, 0x80, 0x9, 0x3ff, 0x6, 0x10000, 0x2, 0x80000001, 0x6, 0x9, 0x8, 0x7, 0x8, 0x7, 0x7, 0xd8, 0x0, 0xfffff25e, 0x5, 0x1, 0x7fff, 0x9, 0x0, 0xc, 0x80, 0x4, 0x2, 0x0, 0x401, 0x4, 0x7, 0x6e, 0x0, 0x2, 0x4, 0x9, 0x7, 0x3, 0x19, 0x6, 0x5, 0x3, 0x13, 0x9, 0x4, 0x3, 0x8, 0xec, 0x2, 0x7, 0x7, 0x8, 0x4, 0x4ad5, 0xf, 0x4, 0x6, 0x10001, 0x7, 0x0, 0x7, 0xffff2b67, 0x4, 0x3, 0x7, 0x9, 0x6, 0xffffffff, 0x2, 0x4, 0xf, 0x1ff, 0x5, 0x7, 0xa, 0x5, 0x40, 0x2, 0x4, 0x21, 0x2, 0x449, 0x6e7b, 0x7, 0x6, 0xff, 0x3, 0x6, 0x4, 0x2, 0x8, 0x5, 0x0, 0x3, 0x400, 0x1, 0xcfa, 0x0, 0x1, 0x10001]}, @TCA_TBF_RATE64={0xc, 0x4, 0x7b446e8b214b5387}]}}]}, 0xc88}, 0x1, 0x0, 0x0, 0x4081}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)

1.640417038s ago: executing program 2 (id=207):
shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xbffffe0000000001, 0xfa11, 0x5}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x7, 0x5000, 0x2000, &(0x7f00009f2000/0x2000)=nil})
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000001}, 0xc4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x102)
write$UHID_INPUT(r3, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
clock_gettime(0x5, 0x0)
setitimer(0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0), 0x4000000004002, 0x0)
r7 = dup(r6)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199)
mmap(&(0x7f0000863000/0x3000)=nil, 0x3000, 0xb, 0x13, r7, 0x2000)
ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000740)={0xf000, 0x118000})

1.570376456s ago: executing program 1 (id=208):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000200)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bic', 0x3)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000340), 0x4)
sendto$inet(r0, &(0x7f0000000380), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f00000003c0)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0xfffe, @rand_addr=0x64010100}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x4000)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x1407, 0x800, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x4004800)

1.509788514s ago: executing program 3 (id=209):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000001d40)='GPL\x00'}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'team_slave_1\x00', @random="c34562e21e20"})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}, 0x1, 0x0, 0x0, 0x20000841}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r9, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendto$packet(r9, &(0x7f0000000540)="f4efe0430444425a1a9942a2f606", 0xe, 0x0, &(0x7f0000000640)={0x11, 0x4, r12, 0x1, 0xff, 0x6, @remote}, 0x14)
r13 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r13, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)
sendmmsg$inet(r13, &(0x7f0000000080), 0x4000095, 0x0)
setsockopt$sock_int(r13, 0x1, 0x5, &(0x7f0000000240)=0x9, 0x4)
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=@newqdisc={0xc88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc5c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x1, 0x400, 0x0, 0x2, 0x2}, {0x7f, 0xfc6065576eb3e04d, 0x401, 0x1, 0x9, 0x10000}, 0x8, 0x7, 0xd2d}}, @TCA_TBF_PBURST={0x8, 0x7, 0xdc6}, @TCA_TBF_PBURST={0x8, 0x7, 0x22fe}, @TCA_TBF_BURST={0x8, 0x6, 0x81}, @TCA_TBF_PTAB={0x404, 0x3, [0x7, 0x2, 0x120000, 0x80000000, 0x3ff, 0x2, 0x5, 0x5, 0x1, 0x8, 0x8001, 0x101, 0x1, 0xfffffffa, 0x92, 0x9, 0x7fff, 0x2, 0xa63, 0x7, 0x3, 0x6, 0x400, 0x5, 0x5, 0xf, 0xfffffffd, 0x9, 0x6, 0x3, 0x3ff, 0x90000000, 0xffffff00, 0x407, 0x4, 0x0, 0x5, 0xa5, 0xfffffffc, 0xfff, 0x0, 0x10, 0x66, 0x7, 0x4, 0xfffffffa, 0x8, 0x80000001, 0xfff, 0x8, 0x101, 0x800, 0x7, 0x5, 0x5, 0x2, 0x2, 0x4, 0x6, 0x80000000, 0x3e, 0x5, 0x5, 0x4, 0x100, 0x6, 0x5, 0x3, 0x9, 0x7, 0x100, 0x9, 0x9, 0xfffffffc, 0x3, 0x6, 0xd, 0x2, 0xc0, 0xc3d, 0xfffffffa, 0xb, 0x6b8, 0x9, 0xfffffff9, 0xd2, 0x9, 0x1, 0xb, 0x2, 0x7f, 0x4, 0x7, 0x2, 0xfffffffe, 0x2, 0x2, 0x81c6, 0x1, 0xffffffff, 0x8, 0x7, 0x8, 0x7, 0x800, 0x101, 0x4, 0xffff, 0x8001, 0x90, 0x6, 0x5, 0x6, 0x400, 0x0, 0x247, 0x8, 0x0, 0x1, 0xc05, 0xffffff3f, 0x0, 0x1, 0x7, 0x8, 0x3ff, 0x4, 0x52fd5f30, 0x7, 0xd1, 0x6, 0xd51, 0x1, 0x9, 0x6871, 0x2, 0x6, 0x0, 0x9, 0x800, 0x101, 0x0, 0x9fc3, 0xd, 0x4, 0xee, 0x8e, 0x2f3, 0xc7de, 0x401, 0x9, 0x8, 0x8, 0x781, 0x1, 0x2, 0x7f, 0x40, 0x6, 0x4, 0xc9, 0x6, 0x4, 0xf, 0x9, 0xd93, 0x2, 0x6, 0x3d5, 0xfffffffe, 0x7, 0xe467, 0x4, 0x10000, 0x1000, 0x7, 0x9, 0x5, 0x81, 0x7, 0x0, 0x2, 0xe, 0x3e2c3a51, 0xc7, 0x3, 0x3, 0x8, 0x81, 0xfffffff5, 0x7, 0x5, 0x1, 0xd, 0xf, 0x2, 0x2, 0x8, 0x1, 0xee, 0x4, 0x0, 0x5, 0x8, 0x4, 0x1, 0xd, 0x4, 0x8001, 0x7, 0x1000, 0x80000000, 0x0, 0x7ff, 0x0, 0x8f, 0x9c, 0x9, 0x8, 0x200, 0x2, 0x7, 0x1, 0x7, 0x1, 0xb, 0x101, 0x6, 0x3921fec9, 0x6, 0x4, 0xb, 0x200, 0x1ff, 0x5, 0x7fff, 0xc9f, 0x2, 0x66f, 0x2550c8cd, 0x6, 0x80000001, 0x9, 0x40, 0x7, 0x10, 0x8000, 0x7f, 0x7, 0x80b, 0x5d153cd, 0x1ecb, 0xfffffff4, 0x79, 0x7fffffff, 0x9]}, @TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x5, 0x1ff, 0x40, 0x0, 0x4, 0x7, 0x69a, 0x0, 0x8, 0x200, 0x0, 0x6, 0x49e4, 0x5, 0x9, 0x0, 0xffffffff, 0x8, 0xa3f, 0xfffffffa, 0xd8f, 0xaaea, 0x0, 0x5, 0x8, 0x3, 0x6f, 0x1, 0x3, 0xffffffff, 0x4, 0x81, 0x4, 0x90dd, 0xfff, 0x63, 0x9, 0x533cc9fe, 0x1000, 0x7, 0x9, 0x6, 0x2, 0xa, 0x0, 0x8, 0x5, 0x7, 0x9, 0x7, 0x3, 0x3, 0x8, 0x1fc00000, 0x7, 0x0, 0x2, 0x0, 0x1, 0x117a, 0x0, 0x86, 0x6, 0xffff8001, 0x6, 0x800, 0x1, 0x4, 0x3, 0x4, 0x0, 0x3, 0x5, 0x1, 0x10000, 0x6b8, 0x81, 0x9dc, 0xff, 0xd, 0xfffffffe, 0x6, 0x6, 0x2, 0x8, 0x6, 0x80b2, 0xf, 0x2, 0x9, 0x6, 0xd374, 0x1, 0x63, 0x6, 0x1000, 0x1b, 0x8c6d, 0x0, 0xf, 0x7, 0x4b4, 0x8, 0x80, 0x7, 0x5, 0x400000, 0x1ff, 0xffff, 0x7, 0x7, 0x4, 0x2, 0x7, 0x4, 0x4, 0xf, 0x6, 0x76, 0xfff, 0x9, 0x2, 0x5, 0x5, 0x8, 0x9, 0x5, 0xfffffffd, 0x758, 0x8, 0x0, 0x1ec, 0x3, 0x7fff, 0x0, 0xa, 0x8, 0xe, 0x3, 0x5, 0x7ff, 0x1, 0xc, 0x6, 0x1, 0x9, 0x81, 0x1, 0x8, 0x0, 0x9, 0x7, 0x4051, 0xf, 0x6317, 0x0, 0x0, 0xf, 0xfffffff3, 0x0, 0x7, 0x6, 0x8000, 0x401, 0x80, 0x10, 0x2, 0x8, 0x2, 0xfff, 0x4, 0x8000, 0x8, 0x8, 0x9, 0x8, 0x8, 0x80d, 0x0, 0x6, 0x9ee, 0xa, 0x9, 0x2, 0x6, 0x4, 0x9, 0x8, 0x9, 0x6, 0x81f771a7, 0x1ff, 0x8, 0x4, 0xe25e, 0xbf04, 0x7, 0x2, 0xa3, 0xffff, 0xfffffff4, 0x5ce9, 0x20000, 0x800, 0x3, 0x3, 0x40, 0x4, 0x8001, 0x80000000, 0xc8a, 0x3, 0x8, 0x4, 0x7b, 0x8, 0x4, 0x7, 0xb16, 0x9, 0x9, 0x9, 0x2, 0x4, 0xff, 0x73, 0x0, 0xb, 0xaa75, 0x7ff, 0x2, 0x9, 0x7, 0x9, 0x9, 0x3, 0xfffffff9, 0x0, 0xfffffffe, 0x0, 0x1, 0x1391, 0x0, 0x3, 0x9, 0x3, 0x8, 0x7, 0x0, 0x1, 0x3, 0x80000000, 0x4, 0x5]}, @TCA_TBF_RTAB={0x404, 0x2, [0x5, 0x2, 0x0, 0x401, 0x9eb, 0x8, 0xffff08a3, 0x40, 0x6, 0x1ff, 0x2, 0x5, 0x4a, 0xc000, 0x2, 0x9, 0x3, 0x1, 0x2, 0x7fffffff, 0x4, 0x1, 0x3, 0x1, 0x6, 0xd98, 0x80000000, 0x10, 0x5, 0x7, 0x7, 0x1, 0x7, 0x9, 0x0, 0x80000000, 0xfffffffd, 0x3, 0x3, 0x1ff, 0x0, 0x2, 0xc4, 0xf2, 0x1, 0x2878, 0x90, 0x5, 0xc, 0x2, 0x1, 0x3, 0x1, 0x0, 0x80, 0x2, 0x4, 0x2, 0x30000000, 0x4, 0xec, 0xd, 0x3bc, 0xda, 0x3, 0x6, 0x7, 0x2, 0x265, 0x6, 0xe, 0x8, 0x4, 0x5, 0xffff, 0x6, 0x6, 0x8, 0x3, 0xfffff000, 0xa936, 0x7fffffff, 0xfda, 0xa2, 0x7, 0x33, 0x6, 0xa5, 0xe, 0x4, 0x6, 0xffff, 0x800, 0x80000, 0xffff, 0x6, 0x2, 0x7, 0x1d, 0x200, 0x53, 0x7, 0x1, 0x2, 0x6, 0xfffffffb, 0x4, 0x8, 0x1f, 0x7fffffff, 0x0, 0x3, 0x10001, 0x5c, 0x2, 0xb10, 0x8001, 0x7, 0x1, 0x1000, 0x4, 0xb46, 0x4, 0xcd, 0x7fffffff, 0x1, 0x4, 0x800, 0x8, 0x9, 0x8000, 0x686d7d3c, 0x1, 0x7, 0x6, 0x100, 0x5, 0x0, 0x9, 0x6, 0x0, 0x2, 0x3, 0x4, 0x0, 0x4, 0x10000, 0x0, 0x1, 0x561, 0x5, 0xfffffffe, 0x3, 0x1, 0xfffffffd, 0x1, 0x10000, 0x80, 0x9, 0x3ff, 0x6, 0x10000, 0x2, 0x80000001, 0x6, 0x9, 0x8, 0x7, 0x8, 0x7, 0x7, 0xd8, 0x0, 0xfffff25e, 0x5, 0x1, 0x7fff, 0x9, 0x0, 0xc, 0x80, 0x4, 0x2, 0x0, 0x401, 0x4, 0x7, 0x6e, 0x0, 0x2, 0x4, 0x9, 0x7, 0x3, 0x19, 0x6, 0x5, 0x3, 0x13, 0x9, 0x4, 0x3, 0x8, 0xec, 0x2, 0x7, 0x7, 0x8, 0x4, 0x4ad5, 0xf, 0x4, 0x6, 0x10001, 0x7, 0x0, 0x7, 0xffff2b67, 0x4, 0x3, 0x7, 0x9, 0x6, 0xffffffff, 0x2, 0x4, 0xf, 0x1ff, 0x5, 0x7, 0xa, 0x5, 0x40, 0x2, 0x4, 0x21, 0x2, 0x449, 0x6e7b, 0x7, 0x6, 0xff, 0x3, 0x6, 0x4, 0x2, 0x8, 0x5, 0x0, 0x3, 0x400, 0x1, 0xcfa, 0x0, 0x1, 0x10001]}, @TCA_TBF_RATE64={0xc, 0x4, 0x7b446e8b214b5387}]}}]}, 0xc88}, 0x1, 0x0, 0x0, 0x4081}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)

1.362285983s ago: executing program 2 (id=210):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000340)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202"], 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0)
link(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='./bus\x00')
chdir(&(0x7f0000000000)='./cgroup\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchown(r3, 0x0, 0xee01)
fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0xfffffffb)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x14e174135c0b87af)
openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/ttyUSB0\x00', 0x2, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8b4fae93401029b4, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

1.342535812s ago: executing program 3 (id=211):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000680)={0x82, 0x0, 0x0, 0x0})
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r3=>0x0})
r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
setns(r4, 0x8000000)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r3, 0xfffffffffffffffd, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00'})
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x2]}, 0x8, 0x0)
io_setup(0x206, &(0x7f0000000280)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f00000002c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}])
ioctl$UI_SET_LEDBIT(r6, 0x40045569, 0x0)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r6)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x94, r8, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9b}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x94}, 0x1, 0x0, 0x0, 0xc00c}, 0x4048040)
execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)={[&(0x7f0000000ec0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xbf\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x19\x16h\x83\x94y<yN\xfbXh[\xe9\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xf0!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\x01\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccM\x8c\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00']})

1.188845233s ago: executing program 3 (id=212):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180302, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000140), 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x7, &(0x7f0000000380)=0x9, 0x4)
ioctl$I2C_PEC(r3, 0x708, 0x40)
ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000180)={0x1, 0x7, 0x1, &(0x7f00000001c0)={0x5, "1d27f0db2e1f25eff995475188afe0eb42ab697116a5e88a5000"}})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000000080)="17000000020001000003be8c5e687a8a6a003300020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfccebf6ba00085d024f0298e9e90554062a", 0xb8)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0xa, 0x0, 0x0, 0xc8}}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, 0x0)
sendmsg(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="cbc63a2b34115536844e5ceee322c936dc42bea5f0c8e068c13f16dde4dfdbf9fb368728a9fa470b72", 0x29}, {&(0x7f0000000400)="2b49381446e52b16a5995d990b8ac6417c93632c6ebe0c29320fbef0129b38c4a6c5a3f70c9141ee4e650bf9108cd972870b46f7c6f194e67fa521f491306d73a220cd11bcc4dbc59bfe845009f20f334609c50b6986032909db3fef477bc01b2fe01e3f0d9dc31d726a2e989c3cd33365a79000de69efcac920be7265de9993", 0x80}], 0x2, &(0x7f00000004c0)=[{0x20, 0x10b, 0x0, "50dab0fc67fdd536ea2ca34fe9b636bfa4124e47"}, {0x40, 0x102, 0x8, "b844e9ba98812870b48b6d50ab793bda3df41341df9ca5c63242ff7bc84761abae16d303e1d49c3e19b6813200573b68986485"}, {0xb8, 0x115, 0x1, "f83b895f4416303debe7199af4ffb31c075db7b36bafa6adcf74c7da9af36b356461b2f71aa63bbf375d8c7d612471cf0aa512c976ffa34dd2aa69e3b87fb94633dbbac497b7993f9e1a81970431b1520cc9c1c94ec8ee5b752c62cb4a11b2315e856cf088b916fe9abc18a74b9589a919d02dc42a31d4ea490f77e8f0f2e346ab77c76ad4a1b7b9059bca70f8f5de4a5f76176c7841d22ffad6a90fe5529bae5535d411c1851d7811"}, {0x68, 0x10f, 0x3, "415cbb171533b4c303a4a298b836ea72b5ac106cb6b1dc385f5ef16ea2641f42bc0a315533d30522dc4cb0842aa20f60124096ce713b45086672caa191f67487261aaca8e6faa83e310dd2d03fc8806e62f3934bec29fa0fc965"}, {0x54, 0x1, 0x7, "9ec84ed5ba938c981eeb6d23867d00891ead61d794132624b1e1a4e2c96fad4d5c27f232504c4c06d7e47241d5dd8d5ef0b5ced434aaf3aaed5788123f13f3a67c6268515edac3"}, {0x60, 0x84, 0x3, "265d02d23a5b2ca590deb4d03a4148d3d05e8d77ab2f42766a384ef173507dad3ce5a6fc1c16556a67da050d655e7fa992d60239e42db06b6f28f851b45a3a41ce6f007a391b54772a65422ef8c099dea0"}, {0x40, 0x10c, 0x9, "6bef5d1ef8bf2c8aa8cba19376dab9316c2c9c96d01c45fc210fe10d92b7def9dd65bbda630501463b7a4d4b6081c5f1da2952"}, {0xa8, 0x107, 0x7fffffff, "76f55da54ef77e751c397520287eb72d0605e192319840f331f1fb098851bb38af5552c9c739036128e3381159c6aa179abfdf25c473931a938eef6c128c52f99c728e21f9660be8d27f4d5d124d0ba55a85134d8bb83cb52c6a9ca329e1e85756433191647b02455d8de0de00d2a09d33b0137448032bc0516d079ebddf9dab84ef8f719fd4513283fe46b5d45440e038f23e45fbe790f5645f42"}, {0x50, 0x102, 0xf, "9708b48cf1f77235bef0e7ad2a879c0c1881b3ab97a0c067b21f592c937cb186eb73d8d26e15a36d6d950755386d95e0b01f6def77185be0af5be8263237604114"}], 0x36c}, 0x200008c0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x500, 0x320, 0x1e0, 0x3f, 0x80000001, 0x1, 0x20, 0x4, {0x1000004}, {0x5}, {0x0, 0x0, 0x3}, {0x0, 0xffffffff}, 0x0, 0x100, 0x48f5, 0xffffffff, 0x0, 0x0, 0x3ffe, 0x6, 0x0, 0xfffffffd, 0x0, 0x800, 0x4, 0x1, 0x0, 0x9})

1.04055821s ago: executing program 0 (id=213):
syz_usb_connect(0x6, 0x371, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000540)='./sys\x00', 0x0)
read$usbfs(0xffffffffffffffff, &(0x7f0000000600)=""/234, 0xea)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
getrusage(0x0, &(0x7f0000000100))
socket$nl_generic(0x10, 0x3, 0x10)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='ping', 0x4, 0x0, 0x0, 0x0)
openat$sndtimer(0xffffff9c, 0x0, 0x20480)
write(r1, &(0x7f00000000c0)='1\x00', 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e3", 0x48)

1.040290047s ago: executing program 3 (id=214):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180302, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x500, 0x320, 0x1e0, 0x3f, 0x80000001, 0x1, 0x20, 0x4, {0x1000004}, {0x5}, {0x0, 0x0, 0x3}, {0x0, 0xffffffff}, 0x0, 0x100, 0x48f5, 0xffffffff, 0x0, 0x0, 0x3ffe, 0x6, 0x0, 0xfffffffd, 0x0, 0x800, 0x4, 0x1, 0x0, 0x9})

640.512029ms ago: executing program 1 (id=215):
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./cfg\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
rmdir(&(0x7f0000000140)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00') (fail_nth: 2)

640.244676ms ago: executing program 1 (id=216):
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x34, 0x49, 0x4f, 0x40, 0x1a0a, 0x102, 0x9c8d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfe, 0x4e, 0x0, 0xc7, "", [{{0x9, 0x4, 0xd5, 0x9, 0x0, 0x4e, 0x32, 0x89, 0x5}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$video(&(0x7f0000000100), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x3, 0xff, 0x34324152, 0x7, 0xa, [{0x419, 0x9}, {0xfffffff9}, {0x3ff, 0x8}, {0x5, 0x4aa}, {0x1, 0xfdfdffff}, {0xfffffffb, 0x8e}, {0x1, 0x8}, {0xf, 0x4}], 0x3, 0x3, 0x3, 0x2}})
io_setup(0x6, &(0x7f0000000240)=<r2=>0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r3, 0x540a, 0x0)
r4 = eventfd2(0x83, 0x80001)
io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x80, r4, &(0x7f0000000300)="31ce", 0x2, 0xfbe, 0x0, 0x3}])
socket$packet(0x11, 0x2, 0x300)
socket$netlink(0x10, 0x3, 0x10)
bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x25dfdafc, 0x80000}, 0xc)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbff, 0x4}, 0xc)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42004}, 0x80000)
ioctl$VT_DISALLOCATE(r3, 0x5608)
openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd1e, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_KEY_MPLS_TTL={0x0, 0x43, 0x10}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8848}, 0xc880)
add_key(&(0x7f0000000600)='asymmetric\x00', 0x0, &(0x7f0000000640)="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", 0x114, 0xfffffffffffffffe)
sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000420001000200000000000000030100004242000050000100aabbccddeee1aabbccddeee286dd600000000014064020010db8000000000000404a0000000120010db800000000000000000000000204d2005000f531566aa9757b9102100000000000000004000200"], 0xc8}, 0x1, 0x0, 0x0, 0x140}, 0x240000c5)
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f0000000880)={0x54, 0xf, 0x8, {0x4de, 0x1}, {0xf, 0xae}, @cond=[{0x5, 0xfb9, 0x4, 0x101, 0x5, 0x5cdb}, {0x2, 0xe, 0x2, 0x3, 0x0, 0x2}]})
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r9, 0x5600, &(0x7f00000008c0))
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000092b1eccef624dca969ad1eea6458064543c99f70f1aa82d280a7e5dba32994584c9d4647acdac28a311da2c52fb4f68ed15f3775902da4295a029e4c142318b8bb6cefc8a1bc6961b50d396030631abdbc7827fb8fdf94e9"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000008b80)={0x1, 0xf, &(0x7f0000008c40)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x14}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000008d80)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

139.358164ms ago: executing program 0 (id=217):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000000000007e000000000000005504000017ffff162500000017ffff17ce040000000000007b0a00fe000000002d04000000000000d6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236ed200073826593c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f6260a483632a2ab447f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d172ab29967e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f522df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb520400000000000000c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399fa5ee0b41e14a6fe6894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014fa841061e63d40f4e536314beda5738fee012365f963b2a85e7d8075c333475b9f0284405e30700000041285fbe0bdd37220e31d4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe8c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68ad9fa2b2528798df1c36fc438d9c98f168490b41e158bb2e2d8ed19d44b9cce67c79f9f7bfae7ebe09e441745c592ce69c522b5136be09ed1b97ea3d5b317508df23e92c56fc2eb74d27d3861d91745b8fb9f6cc20e9f8b174000c62c4a2b212332a073fc5d0be7347e41454cb27e081c43e92ae7f9f046600db85d945a4666b588629ce0809d5c8506308688db21ec04d365497bf902126ca2ec1589f1423"], &(0x7f0000001d40)='GPL\x00'}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'team_slave_1\x00', @random="c34562e21e20"})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}, 0x1, 0x0, 0x0, 0x20000841}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r9, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendto$packet(r9, &(0x7f0000000540)="f4efe0430444425a1a9942a2f606", 0xe, 0x0, &(0x7f0000000640)={0x11, 0x4, r12, 0x1, 0xff, 0x6, @remote}, 0x14)
r13 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r13, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)
sendmmsg$inet(r13, &(0x7f0000000080), 0x4000095, 0x0)
setsockopt$sock_int(r13, 0x1, 0x5, &(0x7f0000000240)=0x9, 0x4)
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=@newqdisc={0xc88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc5c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x1, 0x400, 0x0, 0x2, 0x2}, {0x7f, 0xfc6065576eb3e04d, 0x401, 0x1, 0x9, 0x10000}, 0x8, 0x7, 0xd2d}}, @TCA_TBF_PBURST={0x8, 0x7, 0xdc6}, @TCA_TBF_PBURST={0x8, 0x7, 0x22fe}, @TCA_TBF_BURST={0x8, 0x6, 0x81}, @TCA_TBF_PTAB={0x404, 0x3, [0x7, 0x2, 0x120000, 0x80000000, 0x3ff, 0x2, 0x5, 0x5, 0x1, 0x8, 0x8001, 0x101, 0x1, 0xfffffffa, 0x92, 0x9, 0x7fff, 0x2, 0xa63, 0x7, 0x3, 0x6, 0x400, 0x5, 0x5, 0xf, 0xfffffffd, 0x9, 0x6, 0x3, 0x3ff, 0x90000000, 0xffffff00, 0x407, 0x4, 0x0, 0x5, 0xa5, 0xfffffffc, 0xfff, 0x0, 0x10, 0x66, 0x7, 0x4, 0xfffffffa, 0x8, 0x80000001, 0xfff, 0x8, 0x101, 0x800, 0x7, 0x5, 0x5, 0x2, 0x2, 0x4, 0x6, 0x80000000, 0x3e, 0x5, 0x5, 0x4, 0x100, 0x6, 0x5, 0x3, 0x9, 0x7, 0x100, 0x9, 0x9, 0xfffffffc, 0x3, 0x6, 0xd, 0x2, 0xc0, 0xc3d, 0xfffffffa, 0xb, 0x6b8, 0x9, 0xfffffff9, 0xd2, 0x9, 0x1, 0xb, 0x2, 0x7f, 0x4, 0x7, 0x2, 0xfffffffe, 0x2, 0x2, 0x81c6, 0x1, 0xffffffff, 0x8, 0x7, 0x8, 0x7, 0x800, 0x101, 0x4, 0xffff, 0x8001, 0x90, 0x6, 0x5, 0x6, 0x400, 0x0, 0x247, 0x8, 0x0, 0x1, 0xc05, 0xffffff3f, 0x0, 0x1, 0x7, 0x8, 0x3ff, 0x4, 0x52fd5f30, 0x7, 0xd1, 0x6, 0xd51, 0x1, 0x9, 0x6871, 0x2, 0x6, 0x0, 0x9, 0x800, 0x101, 0x0, 0x9fc3, 0xd, 0x4, 0xee, 0x8e, 0x2f3, 0xc7de, 0x401, 0x9, 0x8, 0x8, 0x781, 0x1, 0x2, 0x7f, 0x40, 0x6, 0x4, 0xc9, 0x6, 0x4, 0xf, 0x9, 0xd93, 0x2, 0x6, 0x3d5, 0xfffffffe, 0x7, 0xe467, 0x4, 0x10000, 0x1000, 0x7, 0x9, 0x5, 0x81, 0x7, 0x0, 0x2, 0xe, 0x3e2c3a51, 0xc7, 0x3, 0x3, 0x8, 0x81, 0xfffffff5, 0x7, 0x5, 0x1, 0xd, 0xf, 0x2, 0x2, 0x8, 0x1, 0xee, 0x4, 0x0, 0x5, 0x8, 0x4, 0x1, 0xd, 0x4, 0x8001, 0x7, 0x1000, 0x80000000, 0x0, 0x7ff, 0x0, 0x8f, 0x9c, 0x9, 0x8, 0x200, 0x2, 0x7, 0x1, 0x7, 0x1, 0xb, 0x101, 0x6, 0x3921fec9, 0x6, 0x4, 0xb, 0x200, 0x1ff, 0x5, 0x7fff, 0xc9f, 0x2, 0x66f, 0x2550c8cd, 0x6, 0x80000001, 0x9, 0x40, 0x7, 0x10, 0x8000, 0x7f, 0x7, 0x80b, 0x5d153cd, 0x1ecb, 0xfffffff4, 0x79, 0x7fffffff, 0x9]}, @TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x5, 0x1ff, 0x40, 0x0, 0x4, 0x7, 0x69a, 0x0, 0x8, 0x200, 0x0, 0x6, 0x49e4, 0x5, 0x9, 0x0, 0xffffffff, 0x8, 0xa3f, 0xfffffffa, 0xd8f, 0xaaea, 0x0, 0x5, 0x8, 0x3, 0x6f, 0x1, 0x3, 0xffffffff, 0x4, 0x81, 0x4, 0x90dd, 0xfff, 0x63, 0x9, 0x533cc9fe, 0x1000, 0x7, 0x9, 0x6, 0x2, 0xa, 0x0, 0x8, 0x5, 0x7, 0x9, 0x7, 0x3, 0x3, 0x8, 0x1fc00000, 0x7, 0x0, 0x2, 0x0, 0x1, 0x117a, 0x0, 0x86, 0x6, 0xffff8001, 0x6, 0x800, 0x1, 0x4, 0x3, 0x4, 0x0, 0x3, 0x5, 0x1, 0x10000, 0x6b8, 0x81, 0x9dc, 0xff, 0xd, 0xfffffffe, 0x6, 0x6, 0x2, 0x8, 0x6, 0x80b2, 0xf, 0x2, 0x9, 0x6, 0xd374, 0x1, 0x63, 0x6, 0x1000, 0x1b, 0x8c6d, 0x0, 0xf, 0x7, 0x4b4, 0x8, 0x80, 0x7, 0x5, 0x400000, 0x1ff, 0xffff, 0x7, 0x7, 0x4, 0x2, 0x7, 0x4, 0x4, 0xf, 0x6, 0x76, 0xfff, 0x9, 0x2, 0x5, 0x5, 0x8, 0x9, 0x5, 0xfffffffd, 0x758, 0x8, 0x0, 0x1ec, 0x3, 0x7fff, 0x0, 0xa, 0x8, 0xe, 0x3, 0x5, 0x7ff, 0x1, 0xc, 0x6, 0x1, 0x9, 0x81, 0x1, 0x8, 0x0, 0x9, 0x7, 0x4051, 0xf, 0x6317, 0x0, 0x0, 0xf, 0xfffffff3, 0x0, 0x7, 0x6, 0x8000, 0x401, 0x80, 0x10, 0x2, 0x8, 0x2, 0xfff, 0x4, 0x8000, 0x8, 0x8, 0x9, 0x8, 0x8, 0x80d, 0x0, 0x6, 0x9ee, 0xa, 0x9, 0x2, 0x6, 0x4, 0x9, 0x8, 0x9, 0x6, 0x81f771a7, 0x1ff, 0x8, 0x4, 0xe25e, 0xbf04, 0x7, 0x2, 0xa3, 0xffff, 0xfffffff4, 0x5ce9, 0x20000, 0x800, 0x3, 0x3, 0x40, 0x4, 0x8001, 0x80000000, 0xc8a, 0x3, 0x8, 0x4, 0x7b, 0x8, 0x4, 0x7, 0xb16, 0x9, 0x9, 0x9, 0x2, 0x4, 0xff, 0x73, 0x0, 0xb, 0xaa75, 0x7ff, 0x2, 0x9, 0x7, 0x9, 0x9, 0x3, 0xfffffff9, 0x0, 0xfffffffe, 0x0, 0x1, 0x1391, 0x0, 0x3, 0x9, 0x3, 0x8, 0x7, 0x0, 0x1, 0x3, 0x80000000, 0x4, 0x5]}, @TCA_TBF_RTAB={0x404, 0x2, [0x5, 0x2, 0x0, 0x401, 0x9eb, 0x8, 0xffff08a3, 0x40, 0x6, 0x1ff, 0x2, 0x5, 0x4a, 0xc000, 0x2, 0x9, 0x3, 0x1, 0x2, 0x7fffffff, 0x4, 0x1, 0x3, 0x1, 0x6, 0xd98, 0x80000000, 0x10, 0x5, 0x7, 0x7, 0x1, 0x7, 0x9, 0x0, 0x80000000, 0xfffffffd, 0x3, 0x3, 0x1ff, 0x0, 0x2, 0xc4, 0xf2, 0x1, 0x2878, 0x90, 0x5, 0xc, 0x2, 0x1, 0x3, 0x1, 0x0, 0x80, 0x2, 0x4, 0x2, 0x30000000, 0x4, 0xec, 0xd, 0x3bc, 0xda, 0x3, 0x6, 0x7, 0x2, 0x265, 0x6, 0xe, 0x8, 0x4, 0x5, 0xffff, 0x6, 0x6, 0x8, 0x3, 0xfffff000, 0xa936, 0x7fffffff, 0xfda, 0xa2, 0x7, 0x33, 0x6, 0xa5, 0xe, 0x4, 0x6, 0xffff, 0x800, 0x80000, 0xffff, 0x6, 0x2, 0x7, 0x1d, 0x200, 0x53, 0x7, 0x1, 0x2, 0x6, 0xfffffffb, 0x4, 0x8, 0x1f, 0x7fffffff, 0x0, 0x3, 0x10001, 0x5c, 0x2, 0xb10, 0x8001, 0x7, 0x1, 0x1000, 0x4, 0xb46, 0x4, 0xcd, 0x7fffffff, 0x1, 0x4, 0x800, 0x8, 0x9, 0x8000, 0x686d7d3c, 0x1, 0x7, 0x6, 0x100, 0x5, 0x0, 0x9, 0x6, 0x0, 0x2, 0x3, 0x4, 0x0, 0x4, 0x10000, 0x0, 0x1, 0x561, 0x5, 0xfffffffe, 0x3, 0x1, 0xfffffffd, 0x1, 0x10000, 0x80, 0x9, 0x3ff, 0x6, 0x10000, 0x2, 0x80000001, 0x6, 0x9, 0x8, 0x7, 0x8, 0x7, 0x7, 0xd8, 0x0, 0xfffff25e, 0x5, 0x1, 0x7fff, 0x9, 0x0, 0xc, 0x80, 0x4, 0x2, 0x0, 0x401, 0x4, 0x7, 0x6e, 0x0, 0x2, 0x4, 0x9, 0x7, 0x3, 0x19, 0x6, 0x5, 0x3, 0x13, 0x9, 0x4, 0x3, 0x8, 0xec, 0x2, 0x7, 0x7, 0x8, 0x4, 0x4ad5, 0xf, 0x4, 0x6, 0x10001, 0x7, 0x0, 0x7, 0xffff2b67, 0x4, 0x3, 0x7, 0x9, 0x6, 0xffffffff, 0x2, 0x4, 0xf, 0x1ff, 0x5, 0x7, 0xa, 0x5, 0x40, 0x2, 0x4, 0x21, 0x2, 0x449, 0x6e7b, 0x7, 0x6, 0xff, 0x3, 0x6, 0x4, 0x2, 0x8, 0x5, 0x0, 0x3, 0x400, 0x1, 0xcfa, 0x0, 0x1, 0x10001]}, @TCA_TBF_RATE64={0xc, 0x4, 0x7b446e8b214b5387}]}}]}, 0xc88}, 0x1, 0x0, 0x0, 0x4081}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)

0s ago: executing program 0 (id=218):
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
syz_io_uring_setup(0x111, 0x0, 0x0, 0x0, &(0x7f0000000140)) (async)
syz_io_uring_setup(0x111, 0x0, 0x0, 0x0, &(0x7f0000000140))
signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x0, 0xc]}, 0x8, 0x0)
r0 = fsopen(&(0x7f00000022c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0xa)
fchdir(r1)
open(&(0x7f0000002300)='./bus\x00', 0x1031c2, 0x0) (async)
r2 = open(&(0x7f0000002300)='./bus\x00', 0x1031c2, 0x0)
ftruncate(r2, 0x2007ffb)
r3 = open(&(0x7f0000002340)='.\x00', 0x0, 0x0)
fcntl$notify(r3, 0x402, 0x8000003d)
fcntl$setsig(r3, 0xa, 0x21) (async)
fcntl$setsig(r3, 0xa, 0x21)
fcntl$lock(0xffffffffffffffff, 0x25, 0x0) (async)
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002400), 0x42, 0x0)
write$dsp(r4, &(0x7f0000002440)="5cba91a4", 0xffffffd9) (async)
write$dsp(r4, &(0x7f0000002440)="5cba91a4", 0xffffffd9)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x1000, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000200)=0x4, 0x4)
connect$inet(r5, &(0x7f0000000240)={0x2, 0x4e20, @broadcast}, 0x10) (async)
connect$inet(r5, &(0x7f0000000240)={0x2, 0x4e20, @broadcast}, 0x10)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
sendmmsg$inet(r5, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000002480)={{0x0, 0x989680}, {0x77359400}}, 0x0)
ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0)
ioctl$SNDCTL_DSP_STEREO(r4, 0xc0045003, &(0x7f0000002500)=0x1) (async)
ioctl$SNDCTL_DSP_STEREO(r4, 0xc0045003, &(0x7f0000002500)=0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
io_pgetevents(0x0, 0x7, 0x4, &(0x7f0000000080)=[{}, {}, {}, {}], 0x0, &(0x7f0000000180)={&(0x7f0000000100)={[0xc, 0x2]}, 0x8})
openat(0xffffffffffffff9c, &(0x7f0000002380)='./bus\x00', 0x88882, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000002380)='./bus\x00', 0x88882, 0x0)
io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

v[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   37.819337][ T5782] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   37.819360][ T5782] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   37.836020][ T5782] RDS/IB: rxe0: added
[   37.836130][ T5782] smc: adding ib device rxe0 with port count 1
[   37.836164][ T5782] smc:    ib device rxe0 port 1 has no pnetid
[   37.843301][   T60] rxe_eth0 speed is unknown, defaulting to 1000
[   37.848179][ T5782] rxe_eth0 speed is unknown, defaulting to 1000
[   37.944562][ T5782] rxe_eth0 speed is unknown, defaulting to 1000
[   38.057700][ T5782] rxe_eth0 speed is unknown, defaulting to 1000
[   38.105552][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.105923][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.105994][ T5784] bridge_slave_0: entered allmulticast mode
[   38.106766][ T5784] bridge_slave_0: entered promiscuous mode
[   38.142017][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.142091][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.142153][ T5784] bridge_slave_1: entered allmulticast mode
[   38.145243][ T5784] bridge_slave_1: entered promiscuous mode
[   38.161310][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.161381][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.161445][ T5794] bridge_slave_0: entered allmulticast mode
[   38.162205][ T5794] bridge_slave_0: entered promiscuous mode
[   38.176655][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.176755][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.176816][ T5783] bridge_slave_0: entered allmulticast mode
[   38.177549][ T5783] bridge_slave_0: entered promiscuous mode
[   38.182008][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.182049][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.182154][ T5794] bridge_slave_1: entered allmulticast mode
[   38.182847][ T5794] bridge_slave_1: entered promiscuous mode
[   38.190850][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.198095][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.200015][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.207428][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.207525][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.207588][ T5783] bridge_slave_1: entered allmulticast mode
[   38.208351][ T5783] bridge_slave_1: entered promiscuous mode
[   38.210437][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.244068][ T5782] rxe_eth0 speed is unknown, defaulting to 1000
[   38.248545][ T5784] team0: Port device team_slave_0 added
[   38.250097][ T5794] team0: Port device team_slave_0 added
[   38.253168][ T5794] team0: Port device team_slave_1 added
[   38.273454][ T5784] team0: Port device team_slave_1 added
[   38.287152][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.306451][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.307046][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.307055][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.307070][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.308564][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.308573][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.308587][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.318912][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.318927][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.318947][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.319890][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.319898][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.319916][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.354425][ T5783] team0: Port device team_slave_0 added
[   38.378065][ T5783] team0: Port device team_slave_1 added
[   38.406155][ T5794] hsr_slave_0: entered promiscuous mode
[   38.406667][ T5794] hsr_slave_1: entered promiscuous mode
[   38.410342][ T5784] hsr_slave_0: entered promiscuous mode
[   38.410749][ T5784] hsr_slave_1: entered promiscuous mode
[   38.411029][ T5784] debugfs: 'hsr0' already exists in 'hsr'
[   38.411038][ T5784] Cannot create hsr debugfs directory
[   38.422972][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.422982][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.422996][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.439005][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.439016][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.439030][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.535618][ T5783] hsr_slave_0: entered promiscuous mode
[   38.536282][ T5783] hsr_slave_1: entered promiscuous mode
[   38.536820][ T5783] debugfs: 'hsr0' already exists in 'hsr'
[   38.536833][ T5783] Cannot create hsr debugfs directory
[   38.735375][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   38.739860][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   38.774309][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   38.777279][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   38.794969][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.795137][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.795220][ T5782] bridge_slave_0: entered allmulticast mode
[   38.796467][ T5782] bridge_slave_0: entered promiscuous mode
[   38.798066][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   38.802226][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   38.811556][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.811642][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.811727][ T5782] bridge_slave_1: entered allmulticast mode
[   38.812697][ T5782] bridge_slave_1: entered promiscuous mode
[   38.819568][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   38.823888][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   38.840718][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.851493][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.866840][ T5794] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   38.873228][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   38.886666][ T5794] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   38.891882][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   38.892438][ T5794] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   38.895959][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   38.897260][ T5782] team0: Port device team_slave_0 added
[   38.898628][ T5782] team0: Port device team_slave_1 added
[   38.913589][ T5794] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   38.917322][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   38.918810][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.918860][ T5784] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.919084][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.919133][ T5784] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.942048][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.942060][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.942075][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.944676][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.945611][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.985102][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.985118][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.985140][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.028473][ T5782] hsr_slave_0: entered promiscuous mode
[   39.028982][ T5782] hsr_slave_1: entered promiscuous mode
[   39.029344][ T5782] debugfs: 'hsr0' already exists in 'hsr'
[   39.029359][ T5782] Cannot create hsr debugfs directory
[   39.029494][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   39.033602][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.034295][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   39.040141][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.042234][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   39.048032][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.048960][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   39.053059][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   39.191513][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.246665][ T5784] 8021q: adding VLAN 0 to HW filter on device team0
[   39.264512][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   39.268784][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.269696][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   39.274685][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.280943][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.281082][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.289417][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   39.294177][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.294629][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   39.296512][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   39.307936][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.312266][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.312310][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.326305][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.355081][ T5783] 8021q: adding VLAN 0 to HW filter on device team0
[   39.369082][ T5794] 8021q: adding VLAN 0 to HW filter on device team0
[   39.378370][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.378454][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.403324][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.403415][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.405053][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.405131][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.410048][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.410152][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.483103][   T67] Bluetooth: hci0: command tx timeout
[   39.483238][   T67] Bluetooth: hci3: command tx timeout
[   39.483301][   T67] Bluetooth: hci1: command tx timeout
[   39.483432][ T5147] Bluetooth: hci2: command tx timeout
[   39.522072][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.546853][ T5782] 8021q: adding VLAN 0 to HW filter on device team0
[   39.555538][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.555626][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.566155][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.566231][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.836365][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.847279][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.875921][ T5784] veth0_vlan: entered promiscuous mode
[   39.877884][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.889520][ T5784] veth1_vlan: entered promiscuous mode
[   39.893318][ T5794] veth0_vlan: entered promiscuous mode
[   39.901372][ T5794] veth1_vlan: entered promiscuous mode
[   39.910476][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.928465][ T5784] veth0_macvtap: entered promiscuous mode
[   39.932780][ T5784] veth1_macvtap: entered promiscuous mode
[   39.943898][ T5794] veth0_macvtap: entered promiscuous mode
[   39.950794][ T5783] veth0_vlan: entered promiscuous mode
[   39.953024][ T5794] veth1_macvtap: entered promiscuous mode
[   39.959440][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.962427][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.972763][ T5783] veth1_vlan: entered promiscuous mode
[   39.982932][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.985795][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.013672][ T5782] veth0_vlan: entered promiscuous mode
[   40.039743][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.039759][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.045498][ T5782] veth1_vlan: entered promiscuous mode
[   40.057204][ T5783] veth0_macvtap: entered promiscuous mode
[   40.059135][ T5783] veth1_macvtap: entered promiscuous mode
[   40.073033][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.073047][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.091892][ T5875] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.092122][ T5875] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.092308][ T5875] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.093035][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.098127][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.113522][ T5875] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.113624][ T5875] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.113690][ T5875] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.119139][   T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.119152][   T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.135425][ T5782] veth0_macvtap: entered promiscuous mode
[   40.144976][  T117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.144993][  T117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.145611][ T5782] veth1_macvtap: entered promiscuous mode
[   40.155522][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.155733][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.155946][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.156214][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.156327][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.156483][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.191466][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.193613][ T5784] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   40.194293][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.204296][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.204317][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.210857][ T5784] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   40.222149][ T5784] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   40.225692][ T5784] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   40.239004][ T5784] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   40.249317][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.249339][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.255303][ T5875] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.255540][ T5875] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.255711][ T5875] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.255932][ T5875] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.306656][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.306677][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.324792][ T5944] jffs2: notice: (5944) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   40.333466][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.333485][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.467609][ T5950] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   40.529050][ T5957] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5
[   40.594740][ T5956] Console: switching to colour dummy device 80x25
[   40.628202][ T5964] syz.2.6 uses obsolete (PF_INET,SOCK_PACKET)
[   40.790660][ T5962] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[   40.808831][ T5962] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref]
[   40.809012][ T5962] pci 0000:00:01.0: BAR 2 [mem 0xfeaf6000-0xfeaf6fff]
[   40.810198][ T5962] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[   40.810795][ T5962] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[   40.827313][ T5962] pci 0000:00:01.0: Adding to iommu group 1
[   40.830928][ T5962] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[   40.830942][ T5962] pci 0000:00:01.0: vgaarb: bridge control possible
[   40.830950][ T5962] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[   40.869894][ T5962] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[   40.876122][ T5962] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[   40.881213][ T5962] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[   40.890400][ T5962] [drm] Found bochs VGA, ID 0xb0c5.
[   40.890412][ T5962] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[   40.919224][ T5962] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[   41.065358][ T5969] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   41.182270][ T5962] Console: switching to colour frame buffer device 160x50
[   41.215220][ T5962] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[   41.566365][ T5789] Bluetooth: hci1: command tx timeout
[   41.566410][ T5789] Bluetooth: hci3: command tx timeout
[   41.566462][ T5789] Bluetooth: hci0: command tx timeout
[   41.566622][ T5147] Bluetooth: hci2: command tx timeout
[   41.599102][ T5980] Console: switching to colour dummy device 80x25
[   41.650466][ T5982] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[   41.664978][ T5982] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[   41.665198][ T5982] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[   41.665585][ T5982] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[   41.666787][ T5982] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[   41.704733][ T5982] pci 0000:00:01.0: Adding to iommu group 1
[   41.711181][ T5982] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[   41.711209][ T5982] pci 0000:00:01.0: vgaarb: bridge control possible
[   41.711238][ T5982] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[   41.726609][ T5982] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[   41.726800][ T5982] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[   41.728933][ T5982] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[   41.742174][ T5982] [drm] Found bochs VGA, ID 0xb0c5.
[   41.742197][ T5982] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[   41.771021][ T5982] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[   42.112039][ T5981] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10'.
[   42.142164][ T5982] Console: switching to colour frame buffer device 160x50
[   42.227247][ T5982] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[   43.204345][ T5998] Invalid ELF header magic: != ELF
[   43.347917][ T6003] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   43.641662][ T5147] Bluetooth: hci2: command tx timeout
[   43.641685][ T5147] Bluetooth: hci0: command tx timeout
[   43.641698][ T5147] Bluetooth: hci3: command tx timeout
[   43.641711][ T5147] Bluetooth: hci1: command tx timeout
[   44.004994][ T6019] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20'.
[   44.167583][ T6021] Invalid ELF header magic: != ELF
[   44.213568][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'.
[   44.306294][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'.
[   44.382255][ T6027] Console: switching to colour dummy device 80x25
[   44.470673][ T6028] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[   44.508774][ T6028] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[   44.511437][ T6028] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[   44.512344][ T6028] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[   44.512874][ T6028] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[   44.537567][ T6028] pci 0000:00:01.0: Adding to iommu group 1
[   44.545278][ T6028] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[   44.545294][ T6028] pci 0000:00:01.0: vgaarb: bridge control possible
[   44.545302][ T6028] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[   44.560324][ T6028] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[   44.563821][ T6028] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[   44.564865][ T6028] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[   44.582870][ T6028] [drm] Found bochs VGA, ID 0xb0c5.
[   44.582883][ T6028] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[   44.588311][ T6033] comedi: valid board names for 8255 driver are:
[   44.588322][ T6033]  8255
[   44.588327][ T6033] comedi: valid board names for vmk80xx driver are:
[   44.588332][ T6033]  vmk80xx
[   44.588336][ T6033] comedi: valid board names for usbduxsigma driver are:
[   44.588341][ T6033]  usbduxsigma
[   44.588345][ T6033] comedi: valid board names for usbduxfast driver are:
[   44.588350][ T6033]  usbduxfast
[   44.588354][ T6033] comedi: valid board names for usbdux driver are:
[   44.588359][ T6033]  usbdux
[   44.588362][ T6033] comedi: valid board names for ni6501 driver are:
[   44.588367][ T6033]  ni6501
[   44.588371][ T6033] comedi: valid board names for dt9812 driver are:
[   44.588376][ T6033]  dt9812
[   44.588379][ T6033] comedi: valid board names for ni_labpc_cs driver are:
[   44.588384][ T6033]  ni_labpc_cs
[   44.588388][ T6033] comedi: valid board names for ni_daq_700 driver are:
[   44.588397][ T6033]  ni_daq_700
[   44.588401][ T6033] comedi: valid board names for labpc_pci driver are:
[   44.588406][ T6033]  labpc_pci
[   44.588410][ T6033] comedi: valid board names for adl_pci9118 driver are:
[   44.588415][ T6033]  pci9118dg
[   44.588418][ T6033]  pci9118hg
[   44.588422][ T6033]  pci9118hr
[   44.588426][ T6033] comedi: valid board names for 8255_pci driver are:
[   44.588431][ T6033]  8255_pci
[   44.588434][ T6033] comedi: valid board names for s526 driver are:
[   44.588439][ T6033]  s526
[   44.588443][ T6033] comedi: valid board names for multiq3 driver are:
[   44.588448][ T6033]  multiq3
[   44.588453][ T6033] comedi: valid board names for pcmuio driver are:
[   44.588458][ T6033]  pcmuio48
[   44.588462][ T6033]  pcmuio96
[   44.588466][ T6033] comedi: valid board names for pcmmio driver are:
[   44.588471][ T6033]  pcmmio
[   44.588475][ T6033] comedi: valid board names for pcmda12 driver are:
[   44.588480][ T6033]  pcmda12
[   44.588484][ T6033] comedi: valid board names for pcmad driver are:
[   44.588489][ T6033]  pcmad12
[   44.588493][ T6033]  pcmad16
[   44.588497][ T6033] comedi: valid board names for ni_labpc driver are:
[   44.588502][ T6033]  lab-pc-1200
[   44.588506][ T6033]  lab-pc-1200ai
[   44.588510][ T6033]  lab-pc+
[   44.588514][ T6033] comedi: valid board names for atmio16 driver are:
[   44.588519][ T6033]  atmio16
[   44.588523][ T6033]  atmio16d
[   44.588527][ T6033] comedi: valid board names for ni_at_ao driver are:
[   44.588533][ T6033]  at-ao-6
[   44.588537][ T6033]  at-ao-10
[   44.588541][ T6033] comedi: valid board names for ni_at_a2150 driver are:
[   44.588547][ T6033]  ni_at_a2150
[   44.588551][ T6033] comedi: valid board names for adq12b driver are:
[   44.588556][ T6033]  adq12b
[   44.588560][ T6033] comedi: valid board names for mpc624 driver are:
[   44.588565][ T6033]  mpc624
[   44.588570][ T6033] comedi: valid board names for c6xdigio driver are:
[   44.588575][ T6033]  c6xdigio
[   44.588579][ T6033] comedi: valid board names for aio_iiro_16 driver are:
[   44.588584][ T6033]  aio_iiro_16
[   44.588588][ T6033] comedi: valid board names for aio_aio12_8 driver are:
[   44.588594][ T6033]  aio_aio12_8
[   44.588598][ T6033]  aio_ai12_8
[   44.588602][ T6033]  aio_ao12_4
[   44.588606][ T6033] comedi: valid board names for fl512 driver are:
[   44.588646][ T6033]  fl512
[   44.588651][ T6033] comedi: valid board names for dmm32at driver are:
[   44.588656][ T6033]  dmm32at
[   44.588660][ T6033] comedi: valid board names for dt282x driver are:
[   44.588665][ T6033]  dt2821
[   44.588669][ T6033]  dt2821-f
[   44.588672][ T6033]  dt2821-g
[   44.588676][ T6033]  dt2823
[   44.588679][ T6033]  dt2824-pgh
[   44.588683][ T6033]  dt2824-pgl
[   44.588687][ T6033]  dt2825
[   44.588690][ T6033]  dt2827
[   44.588694][ T6033]  dt2828
[   44.588697][ T6033]  dt2829
[   44.588701][ T6033]  dt21-ez
[   44.588704][ T6033]  dt23-ez
[   44.588708][ T6033]  dt24-ez
[   44.588711][ T6033]  dt24-ez-pgl
[   44.588715][ T6033] comedi: valid board names for dt2817 driver are:
[   44.588720][ T6033]  dt2817
[   44.588724][ T6033] comedi: valid board names for dt2815 driver are:
[   44.588729][ T6033]  dt2815
[   44.588733][ T6033] comedi: valid board names for dt2814 driver are:
[   44.588738][ T6033]  dt2814
[   44.588741][ T6033] comedi: valid board names for dt2811 driver are:
[   44.588747][ T6033]  dt2811-pgh
[   44.588750][ T6033]  dt2811-pgl
[   44.588754][ T6033] comedi: valid board names for dt2801 driver are:
[   44.588759][ T6033]  dt2801
[   44.588763][ T6033] comedi: valid board names for das6402 driver are:
[   44.588769][ T6033]  das6402-12
[   44.588773][ T6033]  das6402-16
[   44.588776][ T6033] comedi: valid board names for das1800 driver are:
[   44.588782][ T6033]  das-1701st
[   44.588785][ T6033]  das-1701st-da
[   44.588789][ T6033]  das-1702st
[   44.588793][ T6033]  das-1702st-da
[   44.588798][ T6033]  das-1702hr
[   44.588802][ T6033]  das-1702hr-da
[   44.588806][ T6033]  das-1701ao
[   44.588809][ T6033]  das-1702ao
[   44.588814][ T6033]  das-1801st
[   44.588818][ T6033]  das-1801st-da
[   44.588822][ T6033]  das-1802st
[   44.588826][ T6033]  das-1802st-da
[   44.588830][ T6033]  das-1802hr
[   44.588834][ T6033]  das-1802hr-da
[   44.588838][ T6033]  das-1801hc
[   44.588842][ T6033]  das-1802hc
[   44.588846][ T6033]  das-1801ao
[   44.588850][ T6033]  das-1802ao
[   44.588854][ T6033] comedi: valid board names for das800 driver are:
[   44.588859][ T6033]  das-800
[   44.588863][ T6033]  cio-das800
[   44.588867][ T6033]  das-801
[   44.588871][ T6033]  cio-das801
[   44.588875][ T6033]  das-802
[   44.588878][ T6033]  cio-das802
[   44.588882][ T6033]  cio-das802/16
[   44.588886][ T6033] comedi: valid board names for isa-das08 driver are:
[   44.588891][ T6033]  isa-das08
[   44.588894][ T6033]  das08-pgm
[   44.588898][ T6033]  das08-pgh
[   44.588902][ T6033]  das08-pgl
[   44.588905][ T6033]  das08-aoh
[   44.588909][ T6033]  das08-aol
[   44.588913][ T6033]  das08-aom
[   44.588916][ T6033]  das08/jr-ao
[   44.588920][ T6033]  das08jr-16-ao
[   44.588924][ T6033]  pc104-das08
[   44.588927][ T6033]  das08jr/16
[   44.588931][ T6033] comedi: valid board names for das16m1 driver are:
[   44.588936][ T6033]  das16m1
[   44.588940][ T6033] comedi: valid board names for dac02 driver are:
[   44.588944][ T6033]  dac02
[   44.588948][ T6033] comedi: valid board names for rti802 driver are:
[   44.588953][ T6033]  rti802
[   44.588956][ T6033] comedi: valid board names for rti800 driver are:
[   44.588961][ T6033]  rti800
[   44.588964][ T6033]  rti815
[   44.588968][ T6033] comedi: valid board names for pcm3724 driver are:
[   44.588973][ T6033]  pcm3724
[   44.588976][ T6033] comedi: valid board names for pcl818 driver are:
[   44.588981][ T6033]  pcl818l
[   44.588985][ T6033]  pcl818h
[   44.588988][ T6033]  pcl818hd
[   44.588992][ T6033]  pcl818hg
[   44.588996][ T6033]  pcl818
[   44.588999][ T6033]  pcl718
[   44.589003][ T6033]  pcm3718
[   44.589006][ T6033] comedi: valid board names for pcl816 driver are:
[   44.589011][ T6033]  pcl816
[   44.589014][ T6033]  pcl814b
[   44.589018][ T6033] comedi: valid board names for pcl812 driver are:
[   44.589023][ T6033]  pcl812
[   44.589027][ T6033]  pcl812pg
[   44.589030][ T6033]  acl8112pg
[   44.589034][ T6033]  acl8112dg
[   44.589038][ T6033]  acl8112hg
[   44.589041][ T6033]  a821pgl
[   44.589045][ T6033]  a821pglnda
[   44.589048][ T6033]  a821pgh
[   44.589052][ T6033]  a822pgl
[   44.589055][ T6033]  a822pgh
[   44.589059][ T6033]  a823pgl
[   44.589063][ T6033]  a823pgh
[   44.589066][ T6033]  pcl813
[   44.589070][ T6033]  pcl813b
[   44.589073][ T6033]  acl8113
[   44.589077][ T6033]  iso813
[   44.589080][ T6033]  acl8216
[   44.589084][ T6033]  a826pg
[   44.589087][ T6033] comedi: valid board names for pcl730 driver are:
[   44.589092][ T6033]  pcl730
[   44.589096][ T6033]  iso730
[   44.589099][ T6033]  acl7130
[   44.589103][ T6033]  pcm3730
[   44.589106][ T6033]  pcl725
[   44.589110][ T6033]  p8r8dio
[   44.589114][ T6033]  acl7225b
[   44.589117][ T6033]  p16r16dio
[   44.589121][ T6033]  pcl733
[   44.589124][ T6033]  pcl734
[   44.589128][ T6033]  opmm-1616-xt
[   44.589132][ T6033]  pearl-mm-p
[   44.589135][ T6033]  ir104-pbf
[   44.589139][ T6033] comedi: valid board names for pcl726 driver are:
[   44.589144][ T6033]  pcl726
[   44.589147][ T6033]  pcl727
[   44.589151][ T6033]  pcl728
[   44.589154][ T6033]  acl6126
[   44.589158][ T6033]  acl6128
[   44.589180][ T6033] comedi: valid board names for pcl724 driver are:
[   44.589187][ T6033]  pcl724
[   44.589192][ T6033]  pcl722
[   44.589196][ T6033]  pcl731
[   44.589200][ T6033]  acl7122
[   44.589203][ T6033]  acl7124
[   44.589207][ T6033]  pet48dio
[   44.589211][ T6033]  pcmio48
[   44.589215][ T6033]  onyx-mm-dio
[   44.589219][ T6033] comedi: valid board names for pcl711 driver are:
[   44.589224][ T6033]  pcl711
[   44.589228][ T6033]  pcl711b
[   44.589232][ T6033]  acl8112hg
[   44.589236][ T6033]  acl8112dg
[   44.589241][ T6033] comedi: valid board names for amplc_pc263 driver are:
[   44.589246][ T6033]  pc263
[   44.589250][ T6033] comedi: valid board names for amplc_pc236 driver are:
[   44.589255][ T6033]  pc36at
[   44.589259][ T6033] comedi: valid board names for amplc_dio200 driver are:
[   44.589265][ T6033]  pc212e
[   44.589269][ T6033]  pc214e
[   44.589273][ T6033]  pc215e
[   44.589277][ T6033]  pc218e
[   44.589280][ T6033]  pc272e
[   44.589284][ T6033] comedi: valid board names for comedi_parport driver are:
[   44.589290][ T6033]  comedi_parport
[   44.589294][ T6033] comedi: valid board names for comedi_test driver are:
[   44.589299][ T6033]  comedi_test
[   44.589304][ T6033] comedi: valid board names for comedi_bond driver are:
[   44.589309][ T6033]  comedi_bond
[   44.600563][ T6028] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[   44.904593][ T6028] Console: switching to colour frame buffer device 160x50
[   44.928866][ T6028] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[   45.129256][ T6037] FAULT_INJECTION: forcing a failure.
[   45.129256][ T6037] name failslab, interval 1, probability 0, space 0, times 0
[   45.129303][ T6037] CPU: 0 UID: 0 PID: 6037 Comm: syz.3.24 Not tainted syzkaller #0 PREEMPT(full) 
[   45.129323][ T6037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   45.129339][ T6037] Call Trace:
[   45.129355][ T6037]  <TASK>
[   45.129363][ T6037]  dump_stack_lvl+0x100/0x190
[   45.129449][ T6037]  should_fail_ex.cold+0x5/0xa
[   45.129482][ T6037]  should_failslab+0xc2/0x120
[   45.129542][ T6037]  __kmalloc_noprof+0xfc/0x840
[   45.129568][ T6037]  ? rcu_is_watching+0x13/0xc0
[   45.129607][ T6037]  ? tomoyo_encode2+0xfb/0x3c0
[   45.129645][ T6037]  tomoyo_encode2+0xfb/0x3c0
[   45.129666][ T6037]  tomoyo_encode+0x29/0x50
[   45.129681][ T6037]  tomoyo_realpath_from_path+0x18c/0x690
[   45.129705][ T6037]  tomoyo_path_number_perm+0x23c/0x580
[   45.129729][ T6037]  ? tomoyo_path_number_perm+0x22e/0x580
[   45.129755][ T6037]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   45.129781][ T6037]  ? get_pid_task+0x106/0x250
[   45.129822][ T6037]  ? __lock_acquire+0x5c0/0x1f40
[   45.129852][ T6037]  ? __fget_files+0x34/0x3d0
[   45.129879][ T6037]  ? find_held_lock+0x2b/0x80
[   45.129909][ T6037]  ? __fget_files+0x215/0x3d0
[   45.129927][ T6037]  ? hook_file_ioctl_common+0x140/0x440
[   45.129959][ T6037]  ? __fget_files+0x215/0x3d0
[   45.129983][ T6037]  ? __fget_files+0x21f/0x3d0
[   45.130006][ T6037]  security_file_ioctl_compat+0xd3/0x230
[   45.130033][ T6037]  __ia32_compat_sys_ioctl+0xc2/0x360
[   45.130054][ T6037]  __do_fast_syscall_32+0x14b/0x8c0
[   45.130124][ T6037]  ? lockdep_hardirqs_on+0x7d/0x110
[   45.130150][ T6037]  do_fast_syscall_32+0x32/0x70
[   45.130176][ T6037]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   45.130198][ T6037] RIP: 0023:0xf73befbc
[   45.130213][ T6037] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   45.130229][ T6037] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[   45.130247][ T6037] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000c0089364
[   45.130259][ T6037] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   45.130268][ T6037] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   45.130278][ T6037] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   45.130288][ T6037] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   45.130310][ T6037]  </TASK>
[   45.130507][ T6037] ERROR: Out of memory at tomoyo_realpath_from_path.
[   45.326053][ T6042] Bluetooth: ISO socket layer initialized
[   45.419273][ T6045] Console: switching to colour dummy device 80x25
[   45.441950][ T6048] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size.
[   45.509713][ T6049] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[   45.539108][ T6049] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[   45.539217][ T6049] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[   45.539398][ T6049] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[   45.539936][ T6049] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[   45.580109][ T6049] pci 0000:00:01.0: Adding to iommu group 1
[   45.589760][ T6049] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[   45.589774][ T6049] pci 0000:00:01.0: vgaarb: bridge control possible
[   45.589783][ T6049] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[   45.607141][ T6049] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[   45.607345][ T6049] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[   45.613901][ T6049] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[   45.629481][ T6049] [drm] Found bochs VGA, ID 0xb0c5.
[   45.629494][ T6049] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[   45.650970][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.654849][ T6049] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[   45.659247][ T6054] bridge_slave_0 (unregistering): left allmulticast mode
[   45.659272][ T6054] bridge_slave_0 (unregistering): left promiscuous mode
[   45.659378][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.674680][   T55] IPVS: starting estimator thread 0...
[   45.721704][   T67] Bluetooth: hci1: command tx timeout
[   45.721727][   T67] Bluetooth: hci3: command tx timeout
[   45.721748][   T67] Bluetooth: hci0: command tx timeout
[   45.721761][   T67] Bluetooth: hci2: command tx timeout
[   45.761702][ T6058] IPVS: using max 26 ests per chain, 62400 per kthread
[   45.886538][ T6049] Console: switching to colour frame buffer device 160x50
[   45.927975][ T6049] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[   46.424209][ T6070] netlink: 'syz.2.34': attribute type 10 has an invalid length.
[   46.431900][ T6070] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   46.433585][ T6070] team0: Port device netdevsim1 added
[   46.988559][ T6074] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.989320][ T6074] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.058419][ T6082] FAULT_INJECTION: forcing a failure.
[   47.058419][ T6082] name failslab, interval 1, probability 0, space 0, times 0
[   47.058459][ T6082] CPU: 3 UID: 0 PID: 6082 Comm: syz.3.39 Not tainted syzkaller #0 PREEMPT(full) 
[   47.058474][ T6082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   47.058501][ T6082] Call Trace:
[   47.058515][ T6082]  <TASK>
[   47.058521][ T6082]  dump_stack_lvl+0x100/0x190
[   47.058594][ T6082]  should_fail_ex.cold+0x5/0xa
[   47.058618][ T6082]  should_failslab+0xc2/0x120
[   47.058663][ T6082]  __kmalloc_noprof+0xfc/0x840
[   47.058683][ T6082]  ? __pfx_dynamic_dname+0x10/0x10
[   47.058701][ T6082]  ? tomoyo_encode2+0xfb/0x3c0
[   47.058731][ T6082]  tomoyo_encode2+0xfb/0x3c0
[   47.058745][ T6082]  tomoyo_encode+0x29/0x50
[   47.058757][ T6082]  tomoyo_realpath_from_path+0x18c/0x690
[   47.058773][ T6082]  tomoyo_path_number_perm+0x23c/0x580
[   47.058791][ T6082]  ? tomoyo_path_number_perm+0x22e/0x580
[   47.058810][ T6082]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   47.058828][ T6082]  ? get_pid_task+0x106/0x250
[   47.058859][ T6082]  ? __lock_acquire+0x5c0/0x1f40
[   47.058885][ T6082]  ? __fget_files+0x34/0x3d0
[   47.058900][ T6082]  ? find_held_lock+0x2b/0x80
[   47.058922][ T6082]  ? __fget_files+0x215/0x3d0
[   47.058935][ T6082]  ? hook_file_ioctl_common+0x140/0x440
[   47.058960][ T6082]  ? __fget_files+0x215/0x3d0
[   47.058977][ T6082]  ? __fget_files+0x21f/0x3d0
[   47.058994][ T6082]  security_file_ioctl_compat+0xd3/0x230
[   47.059013][ T6082]  __ia32_compat_sys_ioctl+0xc2/0x360
[   47.059028][ T6082]  __do_fast_syscall_32+0x14b/0x8c0
[   47.059074][ T6082]  ? lockdep_hardirqs_on+0x7d/0x110
[   47.059093][ T6082]  do_fast_syscall_32+0x32/0x70
[   47.059125][ T6082]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   47.059141][ T6082] RIP: 0023:0xf73befbc
[   47.059151][ T6082] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   47.059163][ T6082] RSP: 002b:00000000f53d650c EFLAGS: 00000292
[   47.059170][ T6082]  ORIG_RAX: 0000000000000036
[   47.059178][ T6082] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800448d2
[   47.059185][ T6082] RDX: 0000000080000540 RSI: 0000000000000000 RDI: 0000000000000000
[   47.059193][ T6082] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   47.059200][ T6082] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   47.059212][ T6082] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   47.059227][ T6082]  </TASK>
[   47.059302][ T6082] ERROR: Out of memory at tomoyo_realpath_from_path.
[   47.070276][   T50] hid-multitouch 0005:0457:0009.0002: unknown main item tag 0x0
[   47.073766][   T50] hid-multitouch 0005:0457:0009.0002: hidraw1: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[   47.224983][ T6087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.40'.
[   47.230506][ T6087] TCP: TCP_TX_DELAY enabled
[   47.267295][ T6087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.40'.
[   47.788256][ T6093] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   48.284809][ T6103] netlink: 140 bytes leftover after parsing attributes in process `syz.0.45'.
[   48.287792][ T6103] bond0: Error: CAN devices cannot be enslaved
[   48.360603][ T6098] netlink: 'syz.2.43': attribute type 10 has an invalid length.
[   48.615594][ T1171] Bluetooth: hci4: Frame reassembly failed (-84)
[   48.823189][ T6113] FAULT_INJECTION: forcing a failure.
[   48.823189][ T6113] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   48.823209][ T6113] CPU: 2 UID: 0 PID: 6113 Comm: syz.2.47 Not tainted syzkaller #0 PREEMPT(full) 
[   48.823223][ T6113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   48.823231][ T6113] Call Trace:
[   48.823236][ T6113]  <TASK>
[   48.823241][ T6113]  dump_stack_lvl+0x100/0x190
[   48.823263][ T6113]  should_fail_ex.cold+0x5/0xa
[   48.823281][ T6113]  strncpy_from_user+0x3b/0x2d0
[   48.823316][ T6113]  do_getname+0x78/0x390
[   48.823342][ T6113]  do_sys_openat2+0xc3/0x1d0
[   48.823360][ T6113]  ? __pfx_do_sys_openat2+0x10/0x10
[   48.823379][ T6113]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   48.823401][ T6113]  __ia32_compat_sys_openat+0x12d/0x210
[   48.823421][ T6113]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[   48.823445][ T6113]  __do_fast_syscall_32+0x14b/0x8c0
[   48.823463][ T6113]  ? lockdep_hardirqs_on+0x7d/0x110
[   48.823481][ T6113]  do_fast_syscall_32+0x32/0x70
[   48.823500][ T6113]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   48.823516][ T6113] RIP: 0023:0xf73cefbc
[   48.823526][ T6113] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   48.823538][ T6113] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127
[   48.823550][ T6113] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800001c0
[   48.823559][ T6113] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   48.823570][ T6113] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   48.823578][ T6113] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   48.823585][ T6113] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   48.823600][ T6113]  </TASK>
[   48.830092][ T5897] rxe_eth0 speed is unknown, defaulting to 1000
[   49.974602][ T6129] FAULT_INJECTION: forcing a failure.
[   49.974602][ T6129] name failslab, interval 1, probability 0, space 0, times 0
[   49.974619][ T6129] CPU: 2 UID: 0 PID: 6129 Comm: syz.2.51 Not tainted syzkaller #0 PREEMPT(full) 
[   49.974635][ T6129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   49.974643][ T6129] Call Trace:
[   49.974648][ T6129]  <TASK>
[   49.974654][ T6129]  dump_stack_lvl+0x100/0x190
[   49.974678][ T6129]  should_fail_ex.cold+0x5/0xa
[   49.974698][ T6129]  should_failslab+0xc2/0x120
[   49.974716][ T6129]  kmem_cache_alloc_noprof+0x92/0x6a0
[   49.974731][ T6129]  ? __kernfs_new_node+0xd2/0xa10
[   49.974767][ T6129]  __kernfs_new_node+0xd2/0xa10
[   49.974792][ T6129]  ? __pfx___kernfs_new_node+0x10/0x10
[   49.974823][ T6129]  ? lock_acquire+0x1d1/0x380
[   49.974839][ T6129]  ? kernfs_root+0x23/0x2a0
[   49.974860][ T6129]  ? find_held_lock+0x2b/0x80
[   49.974881][ T6129]  ? kernfs_root+0xee/0x2a0
[   49.974901][ T6129]  ? kernfs_root+0xee/0x2a0
[   49.974924][ T6129]  kernfs_new_node+0x194/0x200
[   49.974939][ T6129]  ? __pfx_kernfs_new_node+0x10/0x10
[   49.974953][ T6129]  ? kernfs_add_one+0x213/0xb40
[   49.974969][ T6129]  __kernfs_create_file+0x53/0x350
[   49.974987][ T6129]  sysfs_add_file_mode_ns+0x207/0x3c0
[   49.975010][ T6129]  sysfs_merge_group+0x194/0x340
[   49.975031][ T6129]  ? __pfx_sysfs_merge_group+0x10/0x10
[   49.975051][ T6129]  ? bus_add_device+0x2e2/0x6c0
[   49.975119][ T6129]  ? __pfx_bus_add_device+0x10/0x10
[   49.975145][ T6129]  ? __pfx_dev_add_physical_location+0x10/0x10
[   49.975174][ T6129]  dpm_sysfs_add+0x237/0x280
[   49.975196][ T6129]  device_add+0x9f4/0x1970
[   49.975222][ T6129]  ? __pfx_device_add+0x10/0x10
[   49.975245][ T6129]  ? dput.part.0+0x4a/0x240
[   49.975278][ T6129]  ? dput+0x24/0x30
[   49.975304][ T6129]  ? end_dirop+0x82/0xa0
[   49.975336][ T6129]  hci_register_dev+0x328/0xcc0
[   49.975383][ T6129]  __vhci_create_device+0x360/0x880
[   49.975419][ T6129]  vhci_write+0x2cd/0x4a0
[   49.975441][ T6129]  vfs_write+0x6af/0x1050
[   49.975464][ T6129]  ? __pfx_vhci_write+0x10/0x10
[   49.975485][ T6129]  ? __pfx_vfs_write+0x10/0x10
[   49.975505][ T6129]  ? find_held_lock+0x2b/0x80
[   49.975554][ T6129]  ksys_write+0x12a/0x250
[   49.975578][ T6129]  ? __pfx_ksys_write+0x10/0x10
[   49.975610][ T6129]  __do_fast_syscall_32+0x14b/0x8c0
[   49.975648][ T6129]  do_fast_syscall_32+0x32/0x70
[   49.975682][ T6129]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   49.975710][ T6129] RIP: 0023:0xf73cefbc
[   49.975728][ T6129] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   49.975750][ T6129] RSP: 002b:00000000f53e650c EFLAGS: 00000292
[   49.975763][ T6129]  ORIG_RAX: 0000000000000004
[   49.975771][ T6129] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000440
[   49.975787][ T6129] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[   49.975800][ T6129] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   49.975812][ T6129] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   49.975834][ T6129] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   49.975863][ T6129]  </TASK>
[   49.985722][ T6129] Bluetooth: Can't register HCI device
[   50.691893][   T67] Bluetooth: hci4: command 0x1003 tx timeout
[   50.692218][ T5147] Bluetooth: hci4: Opcode 0x1003 failed: -110
[   50.741694][ T6147] gadgetfs: bound to dummy_udc driver
[   50.924552][ T6151] Illegal XDP return value 4294967262 on prog  (id 10) dev N/A, expect packet loss!
[   50.982050][   T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   50.982762][    C2] gadgetfs: connected
[   50.983112][   T25] gadgetfs: disconnected
[   51.148327][    C2] gadgetfs: connected
[   51.148880][   T25] usb 5-1: New USB device found: idVendor=1234, idProduct=5678, bcdDevice=1.00
[   51.150046][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.150916][ T6153] Console: switching to colour dummy device 80x25
[   51.179922][    C2] gadgetfs: configuration #1
[   51.205869][   T25] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/input/input6
[   51.245062][    C0] usbtouchscreen 5-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -1
[   51.265433][ T6154] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[   51.292461][ T6154] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[   51.292610][ T6154] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[   51.292995][ T6154] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[   51.293717][ T6154] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[   51.303765][ T6154] pci 0000:00:01.0: Adding to iommu group 1
[   51.309691][ T6154] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[   51.309710][ T6154] pci 0000:00:01.0: vgaarb: bridge control possible
[   51.309725][ T6154] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[   51.318813][ T6154] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[   51.318967][ T6154] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[   51.321071][ T6154] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[   51.342529][ T6154] [drm] Found bochs VGA, ID 0xb0c5.
[   51.342547][ T6154] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[   51.412301][ T6154] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[   51.498524][ T6146] gadgetfs: suspended from state 3
[   51.502930][ T5864] usb 5-1: USB disconnect, device number 2
[   51.512686][ T6146] gadgetfs: disconnected
[   51.561477][    C1] net_ratelimit: 292 callbacks suppressed
[   51.567766][ T6158] tipc: Started in network mode
[   51.567789][ T6158] tipc: Node identity 5e14694d96d6, cluster identity 4711
[   51.568221][ T6158] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   51.674636][ T6157] tipc: Disabling bearer <eth:syzkaller0>
[   51.699311][ T6154] Console: switching to colour frame buffer device 160x50
[   51.719627][ T6154] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[   51.742638][ T6162] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   52.529391][ T6180] random: crng reseeded on system resumption
** 75 printk messages dropped **
** 2 printk messages dropped **
[   52.704277][ T6186] FAULT_INJECTION: forcing a failure.
[   52.704277][ T6186] name failslab, interval 1, probability 0, space 0, times 0
[   52.704305][ T6186] CPU: 3 UID: 0 PID: 6186 Comm: syz.1.65 Not tainted syzkaller #0 PREEMPT(full) 
[   52.704319][ T6186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   52.704333][ T6186] Call Trace:
[   52.704345][ T6186]  <TASK>
[   52.704351][ T6186]  dump_stack_lvl+0x100/0x190
[   52.704423][ T6186]  should_fail_ex.cold+0x5/0xa
[   52.704446][ T6186]  should_failslab+0xc2/0x120
[   52.704491][ T6186]  __kmalloc_noprof+0xfc/0x840
[   52.704510][ T6186]  ? tomoyo_encode2+0xfb/0x3c0
[   52.704538][ T6186]  tomoyo_encode2+0xfb/0x3c0
[   52.704552][ T6186]  tomoyo_encode+0x29/0x50
[   52.704563][ T6186]  tomoyo_realpath_from_path+0x18c/0x690
[   52.704580][ T6186]  tomoyo_path_number_perm+0x23c/0x580
[   52.704597][ T6186]  ? tomoyo_path_number_perm+0x22e/0x580
[   52.704616][ T6186]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   52.704634][ T6186]  ? get_pid_task+0x106/0x250
** 21 printk messages dropped **
[   52.704787][ T6186]  ? __fget_files+0x21f/0x3d0
** 76 printk messages dropped **
[   52.985572][ T6196] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   53.414296][ T6210] netlink: 264 bytes leftover after parsing attributes in process `syz.1.73'.
[   53.414310][ T6210] netlink: 264 bytes leftover after parsing attributes in process `syz.1.73'.
[   53.414984][ T6210] netlink: 48 bytes leftover after parsing attributes in process `syz.1.73'.
[   53.448369][ T6210] i801_smbus 0000:00:1f.3: SMBus using PCI interrupt
[   53.470583][ T6210] i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD
[   53.565092][ T6214] FAULT_INJECTION: forcing a failure.
[   53.565092][ T6214] name failslab, interval 1, probability 0, space 0, times 0
[   53.565116][ T6214] CPU: 0 UID: 0 PID: 6214 Comm: syz.3.75 Not tainted syzkaller #0 PREEMPT(full) 
[   53.565162][ T6214] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   53.565174][ T6214] Call Trace:
[   53.565181][ T6214]  <TASK>
[   53.565190][ T6214]  dump_stack_lvl+0x100/0x190
[   53.565231][ T6214]  should_fail_ex.cold+0x5/0xa
[   53.565261][ T6214]  should_failslab+0xc2/0x120
[   53.565286][ T6214]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[   53.565308][ T6214]  ? __alloc_skb+0x5b7/0x710
[   53.565378][ T6214]  ? __alloc_skb+0x140/0x710
[   53.565411][ T6214]  __alloc_skb+0x140/0x710
[   53.565437][ T6214]  ? __alloc_skb+0x5b7/0x710
[   53.565465][ T6214]  ? __pfx___alloc_skb+0x10/0x10
[   53.565501][ T6214]  netlink_alloc_large_skb+0x69/0x150
[   53.565534][ T6214]  netlink_sendmsg+0x755/0x10c0
[   53.565559][ T6214]  ? __pfx_netlink_sendmsg+0x10/0x10
[   53.565585][ T6214]  ? apparmor_socket_sendmsg+0x165/0x280
[   53.565617][ T6214]  ? ____sys_sendmsg+0xa99/0xc30
[   53.565639][ T6214]  ____sys_sendmsg+0xa99/0xc30
[   53.565661][ T6214]  ? __pfx_netlink_sendmsg+0x10/0x10
[   53.565683][ T6214]  ? __pfx_____sys_sendmsg+0x10/0x10
[   53.565719][ T6214]  ___sys_sendmsg+0x190/0x1e0
[   53.565745][ T6214]  ? __pfx____sys_sendmsg+0x10/0x10
[   53.565782][ T6214]  ? find_held_lock+0x2b/0x80
[   53.565826][ T6214]  __sys_sendmsg+0x160/0x210
[   53.565858][ T6214]  ? __pfx___sys_sendmsg+0x10/0x10
[   53.565902][ T6214]  __do_fast_syscall_32+0x14b/0x8c0
[   53.565933][ T6214]  ? lockdep_hardirqs_on+0x7d/0x110
[   53.565963][ T6214]  do_fast_syscall_32+0x32/0x70
[   53.565993][ T6214]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   53.566019][ T6214] RIP: 0023:0xf73befbc
[   53.566036][ T6214] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   53.566056][ T6214] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[   53.566075][ T6214] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080004740
[   53.566088][ T6214] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   53.566099][ T6214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   53.566111][ T6214] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   53.566123][ T6214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   53.566149][ T6214]  </TASK>
[   53.600356][ T6212] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   53.708777][ T6202] capability: warning: `syz.0.67' uses 32-bit capabilities (legacy support in use)
[   53.716534][ T6202] syz_tun: entered allmulticast mode
[   53.800492][ T6202] syz_tun (unregistering): left allmulticast mode
[   53.928441][ T6222] Bluetooth: MGMT ver 1.23
[   54.378412][ T6226] FAULT_INJECTION: forcing a failure.
[   54.378412][ T6226] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   54.378426][ T6226] CPU: 0 UID: 0 PID: 6226 Comm: syz.1.77 Not tainted syzkaller #0 PREEMPT(full) 
[   54.378439][ T6226] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   54.378447][ T6226] Call Trace:
[   54.378451][ T6226]  <TASK>
[   54.378457][ T6226]  dump_stack_lvl+0x100/0x190
[   54.378479][ T6226]  should_fail_ex.cold+0x5/0xa
[   54.378497][ T6226]  _copy_from_user+0x2e/0xd0
[   54.378534][ T6226]  sctp_setsockopt+0x8cc/0xb370
[   54.378562][ T6226]  ? __pfx_sctp_setsockopt+0x10/0x10
[   54.378582][ T6226]  ? aa_sock_opt_perm+0x114/0x1e0
[   54.378597][ T6226]  ? sock_common_setsockopt+0x2e/0xf0
[   54.378611][ T6226]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   54.378626][ T6226]  do_sock_setsockopt+0xf3/0x1d0
[   54.378640][ T6226]  __sys_setsockopt+0x119/0x190
[   54.378661][ T6226]  __ia32_sys_setsockopt+0xbc/0x160
[   54.378678][ T6226]  ? __might_fault+0x111/0x140
[   54.378701][ T6226]  __do_fast_syscall_32+0x14b/0x8c0
[   54.378719][ T6226]  ? lockdep_hardirqs_on+0x7d/0x110
[   54.378737][ T6226]  do_fast_syscall_32+0x32/0x70
[   54.378755][ T6226]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   54.378771][ T6226] RIP: 0023:0xf7f55fbc
[   54.378781][ T6226] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   54.378793][ T6226] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e
[   54.378805][ T6226] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000084
[   54.378814][ T6226] RDX: 0000000000000009 RSI: 0000000080000640 RDI: 000000000000009c
[   54.378827][ T6226] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   54.378834][ T6226] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   54.378841][ T6226] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   54.378855][ T6226]  </TASK>
[   54.911189][   T25] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   55.063404][   T25] usb 8-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00
[   55.064837][   T25] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[   55.064866][   T25] usb 8-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   55.064879][   T25] usb 8-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[   55.065694][   T25] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[   55.065716][   T25] usb 8-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   55.065728][   T25] usb 8-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[   55.067398][   T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   55.067409][   T25] usb 8-1: Product: syz
[   55.067417][   T25] usb 8-1: Manufacturer: syz
[   55.067425][   T25] usb 8-1: SerialNumber: syz
[   55.084552][   T25] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected
[   55.084735][   T25] ti_usb_3410_5052 8-1:2.0: missing endpoints
[   55.110952][ T6240] tipc: Started in network mode
[   55.110976][ T6240] tipc: Node identity 668af99d0f2a, cluster identity 4711
[   55.111160][ T6240] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   55.129315][ T6239] tipc: Disabling bearer <eth:syzkaller0>
[   55.272347][ T6243] FAULT_INJECTION: forcing a failure.
[   55.272347][ T6243] name failslab, interval 1, probability 0, space 0, times 0
[   55.272366][ T6243] CPU: 3 UID: 0 PID: 6243 Comm: syz.2.84 Not tainted syzkaller #0 PREEMPT(full) 
[   55.272380][ T6243] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   55.272388][ T6243] Call Trace:
[   55.272392][ T6243]  <TASK>
[   55.272409][ T6243]  dump_stack_lvl+0x100/0x190
[   55.272433][ T6243]  should_fail_ex.cold+0x5/0xa
[   55.272452][ T6243]  should_failslab+0xc2/0x120
[   55.272468][ T6243]  __kmalloc_noprof+0xfc/0x840
[   55.272481][ T6243]  ? tomoyo_encode2+0xfb/0x3c0
[   55.272496][ T6243]  tomoyo_encode2+0xfb/0x3c0
[   55.272511][ T6243]  tomoyo_encode+0x29/0x50
[   55.272522][ T6243]  tomoyo_realpath_from_path+0x18c/0x690
[   55.272552][ T6243]  tomoyo_path_number_perm+0x23c/0x580
[   55.272570][ T6243]  ? tomoyo_path_number_perm+0x22e/0x580
[   55.272589][ T6243]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   55.272607][ T6243]  ? get_pid_task+0x106/0x250
[   55.272627][ T6243]  ? __lock_acquire+0x5c0/0x1f40
[   55.272648][ T6243]  ? __fget_files+0x34/0x3d0
[   55.272663][ T6243]  ? find_held_lock+0x2b/0x80
[   55.272680][ T6243]  ? __fget_files+0x215/0x3d0
[   55.272696][ T6243]  ? hook_file_ioctl_common+0x140/0x440
[   55.272715][ T6243]  ? __fget_files+0x215/0x3d0
[   55.272732][ T6243]  ? __fget_files+0x21f/0x3d0
[   55.272748][ T6243]  security_file_ioctl_compat+0xd3/0x230
[   55.272767][ T6243]  __ia32_compat_sys_ioctl+0xc2/0x360
[   55.272781][ T6243]  __do_fast_syscall_32+0x14b/0x8c0
[   55.272800][ T6243]  ? lockdep_hardirqs_on+0x7d/0x110
[   55.272819][ T6243]  do_fast_syscall_32+0x32/0x70
[   55.272837][ T6243]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   55.272853][ T6243] RIP: 0023:0xf73cefbc
[   55.272863][ T6243] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   55.272875][ T6243] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[   55.272888][ T6243] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000007a4
[   55.272896][ T6243] RDX: 0000000080000400 RSI: 0000000000000000 RDI: 0000000000000000
[   55.272903][ T6243] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   55.272910][ T6243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   55.272918][ T6243] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   55.272933][ T6243]  </TASK>
[   55.274673][ T6243] ERROR: Out of memory at tomoyo_realpath_from_path.
[   55.415330][ T6247] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   56.250360][ T6256] Console: switching to colour dummy device 80x25
[   56.363312][ T6257] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[   56.394498][ T6257] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[   56.394699][ T6257] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[   56.394982][ T6257] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[   56.400740][ T6257] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[   56.423162][ T6257] pci 0000:00:01.0: Adding to iommu group 1
[   56.439604][ T6257] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[   56.439630][ T6257] pci 0000:00:01.0: vgaarb: bridge control possible
[   56.439645][ T6257] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[   56.450445][ T6257] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[   56.450606][ T6257] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[   56.462291][ T6257] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[   56.468666][ T6264] overlayfs: missing 'lowerdir'
[   56.481845][ T6264] syzkaller1: entered promiscuous mode
[   56.481855][ T6264] syzkaller1: entered allmulticast mode
[   56.484437][ T6257] [drm] Found bochs VGA, ID 0xb0c5.
[   56.484451][ T6257] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[   56.515607][ T6257] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[   56.559621][ T6267] device-mapper: raid: Choosing default region size of 4MiB
[   56.647151][ T6257] Console: switching to colour frame buffer device 160x50
[   56.675801][ T6257] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[   56.681277][    C3] net_ratelimit: 174 callbacks suppressed
[   56.806608][ T6273] tipc: Started in network mode
[   56.806626][ T6273] tipc: Node identity 7ed70cd10b7f, cluster identity 4711
[   56.806760][ T6273] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   56.817880][ T6267] device-mapper: table: 248:0: raid: RAID device lookup failure (-ENOENT)
[   56.817901][ T6267] device-mapper: ioctl: error adding target to table
[   56.819186][ T6272] tipc: Disabling bearer <eth:syzkaller0>
[   56.872618][ T6275] FAULT_INJECTION: forcing a failure.
[   56.872618][ T6275] name failslab, interval 1, probability 0, space 0, times 0
[   56.872647][ T6275] CPU: 1 UID: 0 PID: 6275 Comm: syz.1.94 Not tainted syzkaller #0 PREEMPT(full) 
[   56.872661][ T6275] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   56.872674][ T6275] Call Trace:
[   56.872686][ T6275]  <TASK>
[   56.872691][ T6275]  dump_stack_lvl+0x100/0x190
[   56.872725][ T6275]  should_fail_ex.cold+0x5/0xa
[   56.872748][ T6275]  should_failslab+0xc2/0x120
[   56.872775][ T6275]  __kvmalloc_node_noprof+0x113/0x9b0
[   56.872796][ T6275]  ? __do_sys_add_key+0x244/0x460
[   56.872825][ T6275]  __do_sys_add_key+0x244/0x460
[   56.872839][ T6275]  ? __pfx___do_sys_add_key+0x10/0x10
[   56.872858][ T6275]  __do_fast_syscall_32+0x14b/0x8c0
[   56.872877][ T6275]  ? lockdep_hardirqs_on+0x7d/0x110
[   56.872895][ T6275]  do_fast_syscall_32+0x32/0x70
[   56.872914][ T6275]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   56.872930][ T6275] RIP: 0023:0xf7f55fbc
[   56.872940][ T6275] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   56.872952][ T6275] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e
[   56.872965][ T6275] RAX: ffffffffffffffda RBX: 0000000080000140 RCX: 0000000000000000
[   56.872973][ T6275] RDX: 00000000800079c0 RSI: 0000000000000110 RDI: 00000000fffffffd
[   56.872980][ T6275] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   56.872987][ T6275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   56.872995][ T6275] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   56.873009][ T6275]  </TASK>
[   56.979505][ T6279] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   57.177062][ T6285] netlink: 'syz.1.97': attribute type 10 has an invalid length.
[   57.401048][ T6295] xt_nfacct: accounting object `syz0' does not exist
[   57.451729][ T6298] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   57.466103][ T6297] tipc: Disabling bearer <eth:syzkaller0>
[   57.565495][ T6303] Console: switching to colour dummy device 80x25
[   57.614012][ T6305] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[   57.629066][ T6305] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[   57.629244][ T6305] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[   57.631512][ T6305] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[   57.632331][ T6305] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[   57.637508][ T5777] usb 8-1: USB disconnect, device number 2
[   57.676928][ T6305] pci 0000:00:01.0: Adding to iommu group 1
[   57.686229][ T6305] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[   57.686246][ T6305] pci 0000:00:01.0: vgaarb: bridge control possible
[   57.686260][ T6305] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[   57.700071][ T6305] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[   57.700224][ T6305] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[   57.706054][ T6305] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[   57.720247][ T6305] [drm] Found bochs VGA, ID 0xb0c5.
[   57.720259][ T6305] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[   57.734842][ T6305] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[   57.797376][ T6307] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   57.868501][ T6305] Console: switching to colour frame buffer device 160x50
[   57.938844][ T6305] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[   58.472931][ T6333] FAULT_INJECTION: forcing a failure.
[   58.472931][ T6333] name failslab, interval 1, probability 0, space 0, times 0
[   58.472962][ T6333] CPU: 1 UID: 0 PID: 6333 Comm: syz.3.114 Not tainted syzkaller #0 PREEMPT(full) 
[   58.472977][ T6333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   58.473014][ T6333] Call Trace:
[   58.473031][ T6333]  <TASK>
[   58.473038][ T6333]  dump_stack_lvl+0x100/0x190
[   58.473150][ T6333]  should_fail_ex.cold+0x5/0xa
[   58.473185][ T6333]  should_failslab+0xc2/0x120
[   58.473247][ T6333]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[   58.473278][ T6333]  ? __alloc_skb+0x5b7/0x710
[   58.473336][ T6333]  ? __alloc_skb+0x140/0x710
[   58.473367][ T6333]  __alloc_skb+0x140/0x710
[   58.473393][ T6333]  ? __alloc_skb+0x5b7/0x710
[   58.473419][ T6333]  ? __pfx___alloc_skb+0x10/0x10
[   58.473446][ T6333]  ? is_bpf_text_address+0x94/0x1a0
[   58.473493][ T6333]  netlink_alloc_large_skb+0x69/0x150
[   58.473515][ T6333]  netlink_sendmsg+0x755/0x10c0
[   58.473530][ T6333]  ? __pfx_netlink_sendmsg+0x10/0x10
[   58.473545][ T6333]  ? apparmor_socket_sendmsg+0x165/0x280
[   58.473576][ T6333]  ? ____sys_sendmsg+0xa99/0xc30
[   58.473590][ T6333]  ____sys_sendmsg+0xa99/0xc30
[   58.473603][ T6333]  ? __pfx_netlink_sendmsg+0x10/0x10
[   58.473616][ T6333]  ? __pfx_____sys_sendmsg+0x10/0x10
[   58.473637][ T6333]  ___sys_sendmsg+0x190/0x1e0
[   58.473653][ T6333]  ? __pfx____sys_sendmsg+0x10/0x10
[   58.473675][ T6333]  ? find_held_lock+0x2b/0x80
[   58.473714][ T6333]  __sys_sendmsg+0x160/0x210
[   58.473733][ T6333]  ? __pfx___sys_sendmsg+0x10/0x10
[   58.473763][ T6333]  __do_fast_syscall_32+0x14b/0x8c0
[   58.473809][ T6333]  ? lockdep_hardirqs_on+0x7d/0x110
[   58.473828][ T6333]  do_fast_syscall_32+0x32/0x70
[   58.473846][ T6333]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   58.473862][ T6333] RIP: 0023:0xf73befbc
[   58.473873][ T6333] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   58.473885][ T6333] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[   58.473898][ T6333] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080
[   58.473906][ T6333] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   58.473913][ T6333] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   58.473920][ T6333] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   58.473927][ T6333] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   58.473942][ T6333]  </TASK>
[   58.502879][ T6336] FAULT_INJECTION: forcing a failure.
[   58.502879][ T6336] name failslab, interval 1, probability 0, space 0, times 0
[   58.502902][ T6336] CPU: 2 UID: 0 PID: 6336 Comm: syz.0.113 Not tainted syzkaller #0 PREEMPT(full) 
[   58.502922][ T6336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   58.502933][ T6336] Call Trace:
[   58.502939][ T6336]  <TASK>
[   58.502947][ T6336]  dump_stack_lvl+0x100/0x190
[   58.502980][ T6336]  should_fail_ex.cold+0x5/0xa
[   58.503006][ T6336]  should_failslab+0xc2/0x120
[   58.503030][ T6336]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[   58.503050][ T6336]  ? __alloc_skb+0x5b7/0x710
[   58.503076][ T6336]  ? __alloc_skb+0x140/0x710
[   58.503106][ T6336]  __alloc_skb+0x140/0x710
[   58.503131][ T6336]  ? __alloc_skb+0x5b7/0x710
[   58.503156][ T6336]  ? __pfx___alloc_skb+0x10/0x10
[   58.503189][ T6336]  netlink_alloc_large_skb+0x69/0x150
[   58.503220][ T6336]  netlink_sendmsg+0x755/0x10c0
[   58.503243][ T6336]  ? __pfx_netlink_sendmsg+0x10/0x10
[   58.503266][ T6336]  ? apparmor_socket_sendmsg+0x165/0x280
[   58.503294][ T6336]  ? ____sys_sendmsg+0xa99/0xc30
[   58.503332][ T6336]  ____sys_sendmsg+0xa99/0xc30
[   58.503399][ T6336]  ? __pfx_netlink_sendmsg+0x10/0x10
[   58.503420][ T6336]  ? __pfx_____sys_sendmsg+0x10/0x10
[   58.503453][ T6336]  ___sys_sendmsg+0x190/0x1e0
[   58.503477][ T6336]  ? __pfx____sys_sendmsg+0x10/0x10
[   58.503510][ T6336]  ? find_held_lock+0x2b/0x80
[   58.503551][ T6336]  __sys_sendmsg+0x160/0x210
[   58.503579][ T6336]  ? __pfx___sys_sendmsg+0x10/0x10
[   58.503620][ T6336]  __do_fast_syscall_32+0x14b/0x8c0
[   58.503647][ T6336]  ? lockdep_hardirqs_on+0x7d/0x110
[   58.503674][ T6336]  do_fast_syscall_32+0x32/0x70
[   58.503701][ T6336]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   58.503725][ T6336] RIP: 0023:0xf7f95fbc
[   58.503741][ T6336] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   58.503758][ T6336] RSP: 002b:00000000f542550c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[   58.503777][ T6336] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000580
[   58.503789][ T6336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   58.503800][ T6336] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   58.503811][ T6336] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   58.503822][ T6336] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   58.503845][ T6336]  </TASK>
[   58.580269][ T6341] FAULT_INJECTION: forcing a failure.
[   58.580269][ T6341] name failslab, interval 1, probability 0, space 0, times 0
[   58.580287][ T6341] CPU: 0 UID: 0 PID: 6341 Comm: syz.1.116 Not tainted syzkaller #0 PREEMPT(full) 
[   58.580301][ T6341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   58.580309][ T6341] Call Trace:
[   58.580313][ T6341]  <TASK>
[   58.580318][ T6341]  dump_stack_lvl+0x100/0x190
[   58.580340][ T6341]  should_fail_ex.cold+0x5/0xa
[   58.580359][ T6341]  should_failslab+0xc2/0x120
[   58.580374][ T6341]  __kmalloc_noprof+0xfc/0x840
[   58.580387][ T6341]  ? tomoyo_encode2+0xfb/0x3c0
[   58.580409][ T6341]  tomoyo_encode2+0xfb/0x3c0
[   58.580424][ T6341]  tomoyo_encode+0x29/0x50
[   58.580435][ T6341]  tomoyo_realpath_from_path+0x18c/0x690
[   58.580451][ T6341]  tomoyo_path_number_perm+0x23c/0x580
[   58.580468][ T6341]  ? tomoyo_path_number_perm+0x22e/0x580
[   58.580487][ T6341]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   58.580506][ T6341]  ? get_pid_task+0x106/0x250
[   58.580530][ T6341]  ? __lock_acquire+0x5c0/0x1f40
[   58.580550][ T6341]  ? __fget_files+0x34/0x3d0
[   58.580570][ T6341]  ? find_held_lock+0x2b/0x80
[   58.580600][ T6341]  ? __fget_files+0x215/0x3d0
[   58.580614][ T6341]  ? hook_file_ioctl_common+0x140/0x440
[   58.580632][ T6341]  ? __fget_files+0x215/0x3d0
[   58.580648][ T6341]  ? __fget_files+0x21f/0x3d0
[   58.580665][ T6341]  security_file_ioctl_compat+0xd3/0x230
[   58.580687][ T6341]  __ia32_compat_sys_ioctl+0xc2/0x360
[   58.580702][ T6341]  __do_fast_syscall_32+0x14b/0x8c0
[   58.580722][ T6341]  ? lockdep_hardirqs_on+0x7d/0x110
[   58.580740][ T6341]  do_fast_syscall_32+0x32/0x70
[   58.580758][ T6341]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   58.580774][ T6341] RIP: 0023:0xf7f55fbc
[   58.580784][ T6341] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   58.580796][ T6341] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[   58.580809][ T6341] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005392
[   58.580817][ T6341] RDX: 0000000080006f00 RSI: 0000000000000000 RDI: 0000000000000000
[   58.580824][ T6341] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   58.580831][ T6341] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   58.580838][ T6341] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   58.580854][ T6341]  </TASK>
[   58.580930][ T6341] ERROR: Out of memory at tomoyo_realpath_from_path.
[   58.817586][ T6345] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.851647][ T6344] tipc: Disabling bearer <eth:syzkaller0>
[   59.158564][ T6350] FAULT_INJECTION: forcing a failure.
[   59.158564][ T6350] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   59.158589][ T6350] CPU: 0 UID: 0 PID: 6350 Comm: syz.1.119 Not tainted syzkaller #0 PREEMPT(full) 
[   59.158611][ T6350] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   59.158623][ T6350] Call Trace:
[   59.158630][ T6350]  <TASK>
[   59.158638][ T6350]  dump_stack_lvl+0x100/0x190
[   59.158672][ T6350]  should_fail_ex.cold+0x5/0xa
[   59.158699][ T6350]  _copy_to_user+0x32/0xd0
[   59.158753][ T6350]  simple_read_from_buffer+0xcb/0x170
[   59.158780][ T6350]  proc_fail_nth_read+0x1af/0x230
[   59.158815][ T6350]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   59.158842][ T6350]  ? rw_verify_area+0xce/0x6d0
[   59.158880][ T6350]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   59.158905][ T6350]  vfs_read+0x1e4/0xb40
[   59.158926][ T6350]  ? lock_acquire+0x1d1/0x380
[   59.158948][ T6350]  ? __fget_files+0x34/0x3d0
[   59.158970][ T6350]  ? __pfx_vfs_read+0x10/0x10
[   59.158989][ T6350]  ? find_held_lock+0x2b/0x80
[   59.159016][ T6350]  ? __fget_files+0x215/0x3d0
[   59.159044][ T6350]  ? __fget_files+0x21f/0x3d0
[   59.159091][ T6350]  ksys_read+0x12a/0x250
[   59.159111][ T6350]  ? __pfx_ksys_read+0x10/0x10
[   59.159139][ T6350]  do_int80_emulation+0x166/0x650
[   59.159173][ T6350]  asm_int80_emulation+0x1a/0x20
[   59.159198][ T6350] RIP: 0023:0xf7147f6b
[   59.159214][ T6350] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[   59.159232][ T6350] RSP: 002b:00000000f54064bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[   59.159252][ T6350] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54065d0
[   59.159265][ T6350] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[   59.159276][ T6350] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   59.159287][ T6350] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   59.159299][ T6350] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   59.159325][ T6350]  </TASK>
[   59.376184][ T6359] netlink: 57 bytes leftover after parsing attributes in process `syz.0.123'.
[   59.387337][ T6358] ip6erspan0: entered promiscuous mode
[   59.454140][ T6362] rxe_eth0 speed is unknown, defaulting to 1000
[   59.662285][ T6362] rxe_eth0 speed is unknown, defaulting to 1000
[   59.931651][ T6362] rxe_eth0 speed is unknown, defaulting to 1000
[   60.225159][ T6362] rxe_eth0 speed is unknown, defaulting to 1000
[   60.441235][   T60] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   60.601447][   T60] usb 8-1: Using ep0 maxpacket: 32
[   60.605384][   T60] usb 8-1: unable to get BOS descriptor or descriptor too short
[   60.605420][   T60] usb 8-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13
[   60.606367][   T60] usb 8-1: config 14 has an invalid interface number: 57 but max is 1
[   60.606381][   T60] usb 8-1: config 14 has an invalid interface number: 228 but max is 1
[   60.606392][   T60] usb 8-1: config 14 has no interface number 0
[   60.606401][   T60] usb 8-1: config 14 has no interface number 1
[   60.606429][   T60] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[   60.606442][   T60] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[   60.606457][   T60] usb 8-1: config 14 interface 57 has no altsetting 0
[   60.606467][   T60] usb 8-1: config 14 interface 228 has no altsetting 0
[   60.608869][   T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.608880][   T60] usb 8-1: Product: syz
[   60.608888][   T60] usb 8-1: Manufacturer: syz
[   60.608896][   T60] usb 8-1: SerialNumber: syz
[   60.973040][ T6386] FAULT_INJECTION: forcing a failure.
[   60.973040][ T6386] name failslab, interval 1, probability 0, space 0, times 0
[   60.973059][ T6386] CPU: 2 UID: 0 PID: 6386 Comm: syz.1.129 Not tainted syzkaller #0 PREEMPT(full) 
[   60.973074][ T6386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   60.973082][ T6386] Call Trace:
[   60.973104][ T6386]  <TASK>
[   60.973111][ T6386]  dump_stack_lvl+0x100/0x190
[   60.973149][ T6386]  should_fail_ex.cold+0x5/0xa
[   60.973173][ T6386]  should_failslab+0xc2/0x120
[   60.973189][ T6386]  __kmalloc_cache_noprof+0x91/0x6d0
[   60.973210][ T6386]  ? ptp_open+0xe3/0x510
[   60.973239][ T6386]  ptp_open+0xe3/0x510
[   60.973256][ T6386]  ? __pfx_ptp_open+0x10/0x10
[   60.973273][ T6386]  ? do_raw_spin_lock+0x128/0x260
[   60.973290][ T6386]  ? posix_clock_open+0xc8/0x290
[   60.973311][ T6386]  ? __pfx_ptp_open+0x10/0x10
[   60.973326][ T6386]  posix_clock_open+0x17b/0x290
[   60.973343][ T6386]  ? __pfx_posix_clock_open+0x10/0x10
[   60.973359][ T6386]  chrdev_open+0x234/0x6a0
[   60.973375][ T6386]  ? __pfx_chrdev_open+0x10/0x10
[   60.973391][ T6386]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[   60.973421][ T6386]  do_dentry_open+0x674/0x1470
[   60.973435][ T6386]  ? __pfx_chrdev_open+0x10/0x10
[   60.973453][ T6386]  vfs_open_consume+0xcc/0x460
[   60.973473][ T6386]  path_openat+0x1547/0x23f0
[   60.973493][ T6386]  ? __pfx_path_openat+0x10/0x10
[   60.973513][ T6386]  do_file_open+0x20e/0x430
[   60.973531][ T6386]  ? __pfx_do_file_open+0x10/0x10
[   60.973558][ T6386]  ? _raw_spin_unlock+0x28/0x50
[   60.973574][ T6386]  ? alloc_fd+0x471/0x7a0
[   60.973594][ T6386]  do_sys_openat2+0x163/0x1d0
[   60.973612][ T6386]  ? __pfx_do_sys_openat2+0x10/0x10
[   60.973635][ T6386]  __ia32_compat_sys_openat+0x12d/0x210
[   60.973655][ T6386]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[   60.973686][ T6386]  __do_fast_syscall_32+0x14b/0x8c0
[   60.973707][ T6386]  ? lockdep_hardirqs_on+0x7d/0x110
[   60.973727][ T6386]  do_fast_syscall_32+0x32/0x70
[   60.973747][ T6386]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   60.973764][ T6386] RIP: 0023:0xf7f55fbc
[   60.973776][ T6386] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   60.973788][ T6386] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127
[   60.973801][ T6386] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040
[   60.973809][ T6386] RDX: 00000000000c0000 RSI: 0000000000000000 RDI: 0000000000000000
[   60.973816][ T6386] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   60.973824][ T6386] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   60.973831][ T6386] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   60.973846][ T6386]  </TASK>
[   61.059324][   T60] legousbtower 8-1:14.57: interrupt endpoints not found
[   61.125456][ T6395] FAULT_INJECTION: forcing a failure.
[   61.125456][ T6395] name failslab, interval 1, probability 0, space 0, times 0
[   61.125479][ T6395] CPU: 3 UID: 0 PID: 6395 Comm: syz.0.132 Not tainted syzkaller #0 PREEMPT(full) 
[   61.125500][ T6395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   61.125512][ T6395] Call Trace:
[   61.125518][ T6395]  <TASK>
[   61.125526][ T6395]  dump_stack_lvl+0x100/0x190
[   61.125559][ T6395]  should_fail_ex.cold+0x5/0xa
[   61.125586][ T6395]  should_failslab+0xc2/0x120
[   61.125609][ T6395]  __kmalloc_noprof+0xfc/0x840
[   61.125629][ T6395]  ? tomoyo_encode2+0xfb/0x3c0
[   61.125652][ T6395]  tomoyo_encode2+0xfb/0x3c0
[   61.125675][ T6395]  tomoyo_encode+0x29/0x50
[   61.125692][ T6395]  tomoyo_realpath_from_path+0x18c/0x690
[   61.125718][ T6395]  tomoyo_path_number_perm+0x23c/0x580
[   61.125744][ T6395]  ? tomoyo_path_number_perm+0x22e/0x580
[   61.125771][ T6395]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   61.125798][ T6395]  ? get_pid_task+0x106/0x250
[   61.125828][ T6395]  ? __lock_acquire+0x5c0/0x1f40
[   61.125859][ T6395]  ? __fget_files+0x34/0x3d0
[   61.125882][ T6395]  ? find_held_lock+0x2b/0x80
[   61.125907][ T6395]  ? __fget_files+0x215/0x3d0
[   61.125927][ T6395]  ? hook_file_ioctl_common+0x140/0x440
[   61.125953][ T6395]  ? __fget_files+0x215/0x3d0
[   61.125978][ T6395]  ? __fget_files+0x21f/0x3d0
[   61.126004][ T6395]  security_file_ioctl_compat+0xd3/0x230
[   61.126033][ T6395]  __ia32_compat_sys_ioctl+0xc2/0x360
[   61.126056][ T6395]  __do_fast_syscall_32+0x14b/0x8c0
[   61.126084][ T6395]  ? lockdep_hardirqs_on+0x7d/0x110
[   61.126110][ T6395]  do_fast_syscall_32+0x32/0x70
[   61.126138][ T6395]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   61.126161][ T6395] RIP: 0023:0xf7f95fbc
[   61.126176][ T6395] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   61.126194][ T6395] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
** 141 printk messages dropped **
** 269 printk messages dropped **
** 241 printk messages dropped **
** 257 printk messages dropped **
** 242 printk messages dropped **
** 161 printk messages dropped **
** 167 printk messages dropped **
** 176 printk messages dropped **
** 203 printk messages dropped **
** 182 printk messages dropped **
** 195 printk messages dropped **
** 250 printk messages dropped **
** 170 printk messages dropped **
** 161 printk messages dropped **
** 189 printk messages dropped **
** 165 printk messages dropped **
** 431 printk messages dropped **
** 168 printk messages dropped **
** 189 printk messages dropped **
** 173 printk messages dropped **
** 86 printk messages dropped **
** 239 printk messages dropped **
** 171 printk messages dropped **
** 265 printk messages dropped **
** 171 printk messages dropped **
** 190 printk messages dropped **
** 160 printk messages dropped **
** 412 printk messages dropped **
** 166 printk messages dropped **
** 162 printk messages dropped **
** 170 printk messages dropped **
** 96 printk messages dropped **
** 150 printk messages dropped **
** 184 printk messages dropped **
** 204 printk messages dropped **
** 180 printk messages dropped **
** 211 printk messages dropped **
** 175 printk messages dropped **
** 172 printk messages dropped **
** 166 printk messages dropped **
** 191 printk messages dropped **
** 175 printk messages dropped **
** 178 printk messages dropped **
** 176 printk messages dropped **
** 207 printk messages dropped **
** 176 printk messages dropped **
** 165 printk messages dropped **
** 167 printk messages dropped **
** 185 printk messages dropped **
** 168 printk messages dropped **
** 174 printk messages dropped **
** 174 printk messages dropped **
** 174 printk messages dropped **
** 241 printk messages dropped **
** 171 printk messages dropped **
** 169 printk messages dropped **
** 169 printk messages dropped **
** 166 printk messages dropped **
** 167 printk messages dropped **
** 166 printk messages dropped **
** 170 printk messages dropped **
** 208 printk messages dropped **
** 188 printk messages dropped **
** 191 printk messages dropped **
** 173 printk messages dropped **
** 139 printk messages dropped **
** 166 printk messages dropped **
** 204 printk messages dropped **
** 178 printk messages dropped **
** 171 printk messages dropped **
** 198 printk messages dropped **
** 164 printk messages dropped **
** 141 printk messages dropped **
** 149 printk messages dropped **
** 137 printk messages dropped **
** 131 printk messages dropped **
** 142 printk messages dropped **
** 146 printk messages dropped **
** 141 printk messages dropped **
** 154 printk messages dropped **
** 150 printk messages dropped **
** 153 printk messages dropped **
** 149 printk messages dropped **
** 152 printk messages dropped **
** 49 printk messages dropped **
[   61.638774][   T60] legousbtower 8-1:14.228: interrupt endpoints not found
[   61.651516][   T60] usb 8-1: USB disconnect, device number 3
[   61.891192][    C3] net_ratelimit: 159 callbacks suppressed
[   62.062063][ T6418] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   62.080718][ T6423] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.089855][ T6422] tipc: Disabling bearer <eth:syzkaller0>
[   62.261615][ T6429] Zero length message leads to an empty skb
[   62.324199][ T6433] ubi0: attaching mtd0
[   62.337854][ T6433] ubi0: scanning is finished
[   62.337910][ T6433] ubi0 error: ubi_read_volume_table: the layout volume was not found
[   62.503708][ T6433] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[   62.513837][   T30] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   62.681994][   T30] usb 8-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00
[   62.686877][   T30] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[   62.686911][   T30] usb 8-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   62.686928][   T30] usb 8-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[   62.708763][   T30] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[   62.708804][   T30] usb 8-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   62.708821][   T30] usb 8-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[   62.732966][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.152'.
[   62.734193][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.152'.
[   62.737254][   T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.737271][   T30] usb 8-1: Product: syz
[   62.737284][   T30] usb 8-1: Manufacturer: syz
[   62.737298][   T30] usb 8-1: SerialNumber: syz
[   62.756997][   T30] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected
[   62.757356][   T30] ti_usb_3410_5052 8-1:2.0: missing endpoints
[   62.776474][ T6462] FAULT_INJECTION: forcing a failure.
[   62.776474][ T6462] name failslab, interval 1, probability 0, space 0, times 0
[   62.776493][ T6462] CPU: 2 UID: 0 PID: 6462 Comm: syz.2.153 Not tainted syzkaller #0 PREEMPT(full) 
[   62.776508][ T6462] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   62.776516][ T6462] Call Trace:
[   62.776520][ T6462]  <TASK>
[   62.776526][ T6462]  dump_stack_lvl+0x100/0x190
[   62.776549][ T6462]  should_fail_ex.cold+0x5/0xa
[   62.776568][ T6462]  should_failslab+0xc2/0x120
[   62.776584][ T6462]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[   62.776598][ T6462]  ? __alloc_skb+0x5b7/0x710
[   62.776639][ T6462]  ? __alloc_skb+0x140/0x710
[   62.776659][ T6462]  __alloc_skb+0x140/0x710
[   62.776676][ T6462]  ? __alloc_skb+0x5b7/0x710
[   62.776693][ T6462]  ? __pfx___alloc_skb+0x10/0x10
[   62.776712][ T6462]  ? aa_sock_msg_perm+0x11e/0x200
[   62.776732][ T6462]  pfkey_sendmsg+0x161/0x840
[   62.776748][ T6462]  ____sys_sendmsg+0xa99/0xc30
[   62.776762][ T6462]  ? __pfx_pfkey_sendmsg+0x10/0x10
[   62.776775][ T6462]  ? __pfx_____sys_sendmsg+0x10/0x10
[   62.776796][ T6462]  ___sys_sendmsg+0x190/0x1e0
[   62.776812][ T6462]  ? __pfx____sys_sendmsg+0x10/0x10
[   62.776834][ T6462]  ? find_held_lock+0x2b/0x80
[   62.776860][ T6462]  __sys_sendmsg+0x160/0x210
[   62.776880][ T6462]  ? __pfx___sys_sendmsg+0x10/0x10
[   62.776906][ T6462]  __do_fast_syscall_32+0x14b/0x8c0
[   62.776924][ T6462]  ? lockdep_hardirqs_on+0x7d/0x110
[   62.776943][ T6462]  do_fast_syscall_32+0x32/0x70
[   62.776961][ T6462]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   62.776977][ T6462] RIP: 0023:0xf73cefbc
[   62.776987][ T6462] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   62.776999][ T6462] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[   62.777012][ T6462] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380
[   62.777020][ T6462] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000
[   62.777027][ T6462] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   62.777034][ T6462] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   62.777041][ T6462] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   62.777056][ T6462]  </TASK>
[   63.351972][ T6474] FAULT_INJECTION: forcing a failure.
[   63.351972][ T6474] name failslab, interval 1, probability 0, space 0, times 0
[   63.352002][ T6474] CPU: 1 UID: 0 PID: 6474 Comm: syz.0.158 Not tainted syzkaller #0 PREEMPT(full) 
[   63.352034][ T6474] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   63.352048][ T6474] Call Trace:
[   63.352057][ T6474]  <TASK>
[   63.352067][ T6474]  dump_stack_lvl+0x100/0x190
[   63.352108][ T6474]  should_fail_ex.cold+0x5/0xa
[   63.352143][ T6474]  should_failslab+0xc2/0x120
[   63.352172][ T6474]  __kmalloc_noprof+0xfc/0x840
[   63.352195][ T6474]  ? ptp_open+0x103/0x510
[   63.352233][ T6474]  ptp_open+0x103/0x510
[   63.352265][ T6474]  ? __pfx_ptp_open+0x10/0x10
[   63.352296][ T6474]  ? kobject_get_unless_zero+0x156/0x200
[   63.352325][ T6474]  ? posix_clock_open+0xc8/0x290
[   63.352358][ T6474]  ? __pfx_ptp_open+0x10/0x10
[   63.352384][ T6474]  posix_clock_open+0x17b/0x290
[   63.352415][ T6474]  ? __pfx_posix_clock_open+0x10/0x10
[   63.352446][ T6474]  chrdev_open+0x234/0x6a0
[   63.352474][ T6474]  ? __pfx_apparmor_file_open+0x10/0x10
[   63.352505][ T6474]  ? __pfx_chrdev_open+0x10/0x10
[   63.352533][ T6474]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[   63.352574][ T6474]  do_dentry_open+0x674/0x1470
[   63.352623][ T6474]  ? __pfx_chrdev_open+0x10/0x10
[   63.352658][ T6474]  vfs_open_consume+0xcc/0x460
[   63.352699][ T6474]  path_openat+0x1547/0x23f0
[   63.352732][ T6474]  ? __pfx_path_openat+0x10/0x10
[   63.352768][ T6474]  do_file_open+0x20e/0x430
[   63.352798][ T6474]  ? __pfx_do_file_open+0x10/0x10
[   63.352846][ T6474]  ? _raw_spin_unlock+0x28/0x50
[   63.352873][ T6474]  ? alloc_fd+0x471/0x7a0
[   63.352909][ T6474]  do_sys_openat2+0x163/0x1d0
[   63.352942][ T6474]  ? __pfx_do_sys_openat2+0x10/0x10
[   63.352985][ T6474]  __ia32_compat_sys_openat+0x12d/0x210
[   63.353021][ T6474]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[   63.353067][ T6474]  __do_fast_syscall_32+0x14b/0x8c0
[   63.353137][ T6474]  do_fast_syscall_32+0x32/0x70
[   63.353175][ T6474]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   63.353204][ T6474] RIP: 0023:0xf7f95fbc
[   63.353230][ T6474] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   63.353254][ T6474] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127
[   63.353276][ T6474] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040
[   63.353290][ T6474] RDX: 00000000000c0000 RSI: 0000000000000000 RDI: 0000000000000000
[   63.353304][ T6474] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   63.353319][ T6474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   63.353330][ T6474] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   63.353358][ T6474]  </TASK>
[   63.483314][ T6476] FAULT_INJECTION: forcing a failure.
[   63.483314][ T6476] name failslab, interval 1, probability 0, space 0, times 0
[   63.483331][ T6476] CPU: 0 UID: 0 PID: 6476 Comm: syz.0.159 Not tainted syzkaller #0 PREEMPT(full) 
[   63.483345][ T6476] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   63.483353][ T6476] Call Trace:
[   63.483358][ T6476]  <TASK>
[   63.483363][ T6476]  dump_stack_lvl+0x100/0x190
[   63.483386][ T6476]  should_fail_ex.cold+0x5/0xa
[   63.483410][ T6476]  should_failslab+0xc2/0x120
[   63.483431][ T6476]  kmem_cache_alloc_noprof+0x92/0x6a0
[   63.483449][ T6476]  ? __pfx_map_id_range_down+0x10/0x10
[   63.483486][ T6476]  ? rcu_is_watching+0x13/0xc0
[   63.483514][ T6476]  ? security_inode_alloc+0x3b/0x2c0
[   63.483540][ T6476]  security_inode_alloc+0x3b/0x2c0
[   63.483557][ T6476]  inode_init_always_gfp+0xc75/0xfb0
[   63.483575][ T6476]  alloc_inode+0x8e/0x250
[   63.483593][ T6476]  sock_alloc+0x42/0x240
[   63.483606][ T6476]  do_accept+0xf9/0x530
[   63.483625][ T6476]  ? do_raw_spin_lock+0x128/0x260
[   63.483641][ T6476]  ? __pfx_do_accept+0x10/0x10
[   63.483665][ T6476]  __sys_accept4+0x15f/0x1f0
[   63.483682][ T6476]  ? __pfx___sys_accept4+0x10/0x10
[   63.483697][ T6476]  ? find_held_lock+0x2b/0x80
[   63.483714][ T6476]  ? __might_fault+0xc5/0x140
[   63.483753][ T6476]  __ia32_sys_accept4+0x94/0x100
[   63.483772][ T6476]  __do_fast_syscall_32+0x14b/0x8c0
[   63.483791][ T6476]  ? lockdep_hardirqs_on+0x7d/0x110
[   63.483810][ T6476]  do_fast_syscall_32+0x32/0x70
[   63.483828][ T6476]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   63.483844][ T6476] RIP: 0023:0xf7f95fbc
[   63.483855][ T6476] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   63.483868][ T6476] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 000000000000016c
[   63.483880][ T6476] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[   63.483888][ T6476] RDX: 0000000000000000 RSI: 0000000000080800 RDI: 0000000000000000
[   63.483895][ T6476] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   63.483902][ T6476] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   63.483909][ T6476] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   63.483924][ T6476]  </TASK>
[   63.747184][ T6492] netlink: 44 bytes leftover after parsing attributes in process `syz.0.161'.
[   63.748334][ T6492] netlink: 'syz.0.161': attribute type 7 has an invalid length.
[   63.816129][ T6501] Console: switching to colour dummy device 80x25
[   63.868904][ T6502] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[   63.899107][ T6502] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[   63.899245][ T6502] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[   63.899423][ T6502] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[   63.902842][ T6502] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[   63.907635][ T6502] pci 0000:00:01.0: Adding to iommu group 1
[   63.913062][ T6502] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[   63.913089][ T6502] pci 0000:00:01.0: vgaarb: bridge control possible
[   63.913100][ T6502] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[   63.918597][ T6502] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[   63.918762][ T6502] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[   63.920695][ T6502] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[   63.931722][ T6502] [drm] Found bochs VGA, ID 0xb0c5.
[   63.931737][ T6502] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[   63.939378][ T6502] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[   63.993026][ T6505] capability: warning: `syz.2.164' uses deprecated v2 capabilities in a way that may be insecure
[   64.036050][ T6502] Console: switching to colour frame buffer device 160x50
[   64.067683][ T6502] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[   64.218211][ T6510] Console: switching to colour dummy device 80x25
[   64.267357][ T6513] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[   64.283591][ T6513] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[   64.283804][ T6513] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[   64.284045][ T6513] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[   64.284880][ T6513] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[   64.300030][ T6513] pci 0000:00:01.0: Adding to iommu group 1
[   64.305988][ T6513] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[   64.306006][ T6513] pci 0000:00:01.0: vgaarb: bridge control possible
[   64.306021][ T6513] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[   64.317569][ T6513] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[   64.317708][ T6513] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[   64.319906][ T6513] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[   64.339546][ T6513] [drm] Found bochs VGA, ID 0xb0c5.
[   64.339566][ T6513] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[   64.366026][ T6513] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[   64.539495][ T6513] Console: switching to colour frame buffer device 160x50
[   64.571037][ T6513] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[   64.715692][ T6519] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   65.269796][ T6538] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.173'.
[   65.305940][ T5874] usb 8-1: USB disconnect, device number 4
[   65.385365][ T6541] Console: switching to colour dummy device 80x25
[   65.418250][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.176'.
[   65.426713][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.176'.
[   65.453362][ T6546] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[   65.474762][ T6546] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[   65.475154][ T6546] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[   65.475329][ T6546] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[   65.475865][ T6546] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[   65.487057][ T6548] FAULT_INJECTION: forcing a failure.
[   65.487057][ T6548] name failslab, interval 1, probability 0, space 0, times 0
[   65.487096][ T6548] CPU: 2 UID: 0 PID: 6548 Comm: syz.0.177 Not tainted syzkaller #0 PREEMPT(full) 
[   65.487117][ T6548] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   65.487134][ T6548] Call Trace:
[   65.487170][ T6548]  <TASK>
[   65.487175][ T6548]  dump_stack_lvl+0x100/0x190
[   65.487261][ T6548]  should_fail_ex.cold+0x5/0xa
[   65.487291][ T6548]  should_failslab+0xc2/0x120
[   65.487360][ T6548]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[   65.487388][ T6548]  ? __alloc_skb+0x5b7/0x710
[   65.487443][ T6548]  ? __alloc_skb+0x140/0x710
[   65.487468][ T6548]  __alloc_skb+0x140/0x710
[   65.487493][ T6548]  ? __alloc_skb+0x5b7/0x710
[   65.487517][ T6548]  ? __pfx___alloc_skb+0x10/0x10
[   65.487545][ T6548]  netlink_alloc_large_skb+0x69/0x150
[   65.487577][ T6548]  netlink_sendmsg+0x755/0x10c0
[   65.487599][ T6548]  ? __pfx_netlink_sendmsg+0x10/0x10
[   65.487621][ T6548]  ? apparmor_socket_sendmsg+0x165/0x280
[   65.487660][ T6548]  ? ____sys_sendmsg+0xa99/0xc30
[   65.487680][ T6548]  ____sys_sendmsg+0xa99/0xc30
[   65.487699][ T6548]  ? __pfx_netlink_sendmsg+0x10/0x10
[   65.487719][ T6548]  ? __pfx_____sys_sendmsg+0x10/0x10
[   65.487746][ T6548]  ___sys_sendmsg+0x190/0x1e0
[   65.487770][ T6548]  ? __pfx____sys_sendmsg+0x10/0x10
[   65.487810][ T6548]  ? find_held_lock+0x2b/0x80
[   65.487866][ T6548]  __sys_sendmsg+0x160/0x210
[   65.487894][ T6548]  ? __pfx___sys_sendmsg+0x10/0x10
[   65.487928][ T6548]  __do_fast_syscall_32+0x14b/0x8c0
[   65.487985][ T6548]  ? lockdep_hardirqs_on+0x7d/0x110
[   65.488009][ T6548]  do_fast_syscall_32+0x32/0x70
[   65.488036][ T6548]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   65.488059][ T6548] RIP: 0023:0xf7f95fbc
[   65.488074][ T6548] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   65.488091][ T6548] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[   65.488107][ T6548] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180
[   65.488118][ T6548] RDX: 00000000000440c0 RSI: 0000000000000000 RDI: 0000000000000000
[   65.488129][ T6548] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   65.488140][ T6548] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   65.488151][ T6548] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   65.488175][ T6548]  </TASK>
[   65.506763][ T6546] pci 0000:00:01.0: Adding to iommu group 1
[   65.604229][ T6546] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[   65.604247][ T6546] pci 0000:00:01.0: vgaarb: bridge control possible
[   65.604262][ T6546] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[   65.627779][ T6546] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[   65.627919][ T6546] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[   65.637188][ T6546] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[   65.645690][ T6546] [drm] Found bochs VGA, ID 0xb0c5.
[   65.645701][ T6546] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[   65.654299][ T6554] syzkaller0: entered promiscuous mode
[   65.654314][ T6554] syzkaller0: entered allmulticast mode
[   65.660311][ T6546] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[   65.744495][ T6546] Console: switching to colour frame buffer device 160x50
[   65.774328][ T6546] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[   65.781562][ T6552] Console: switching to colour dummy device 80x25
[   65.862367][ T6555] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[   65.875021][ T6555] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[   65.875180][ T6555] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[   65.875433][ T6555] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[   65.876440][ T6555] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[   65.948800][ T6555] pci 0000:00:01.0: Adding to iommu group 1
[   65.954635][ T6555] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[   65.954646][ T6555] pci 0000:00:01.0: vgaarb: bridge control possible
[   65.954655][ T6555] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[   65.976017][ T6555] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[   65.976159][ T6555] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[   65.984136][ T6555] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[   65.995707][ T6555] [drm] Found bochs VGA, ID 0xb0c5.
[   65.995719][ T6555] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[   66.012233][ T6555] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[   66.176660][ T6555] Console: switching to colour frame buffer device 160x50
[   66.196758][ T6555] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[   66.644458][ T6571] FAULT_INJECTION: forcing a failure.
[   66.644458][ T6571] name failslab, interval 1, probability 0, space 0, times 0
[   66.644498][ T6571] CPU: 3 UID: 0 PID: 6571 Comm: syz.1.184 Not tainted syzkaller #0 PREEMPT(full) 
[   66.644522][ T6571] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   66.644541][ T6571] Call Trace:
[   66.644557][ T6571]  <TASK>
[   66.644566][ T6571]  dump_stack_lvl+0x100/0x190
[   66.644656][ T6571]  should_fail_ex.cold+0x5/0xa
[   66.644696][ T6571]  should_failslab+0xc2/0x120
[   66.644754][ T6571]  __kmalloc_noprof+0xfc/0x840
[   66.644782][ T6571]  ? tomoyo_encode2+0xfb/0x3c0
[   66.644818][ T6571]  tomoyo_encode2+0xfb/0x3c0
[   66.644840][ T6571]  tomoyo_encode+0x29/0x50
[   66.644855][ T6571]  tomoyo_realpath_from_path+0x18c/0x690
[   66.644880][ T6571]  tomoyo_path_number_perm+0x23c/0x580
[   66.644905][ T6571]  ? tomoyo_path_number_perm+0x22e/0x580
[   66.644932][ T6571]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   66.644959][ T6571]  ? get_pid_task+0x106/0x250
[   66.645004][ T6571]  ? __lock_acquire+0x5c0/0x1f40
[   66.645043][ T6571]  ? __fget_files+0x34/0x3d0
[   66.645095][ T6571]  ? find_held_lock+0x2b/0x80
[   66.645127][ T6571]  ? __fget_files+0x215/0x3d0
[   66.645145][ T6571]  ? hook_file_ioctl_common+0x140/0x440
[   66.645179][ T6571]  ? __fget_files+0x215/0x3d0
[   66.645205][ T6571]  ? __fget_files+0x21f/0x3d0
[   66.645229][ T6571]  security_file_ioctl_compat+0xd3/0x230
[   66.645258][ T6571]  __ia32_compat_sys_ioctl+0xc2/0x360
[   66.645280][ T6571]  __do_fast_syscall_32+0x14b/0x8c0
[   66.645342][ T6571]  ? lockdep_hardirqs_on+0x7d/0x110
[   66.645369][ T6571]  do_fast_syscall_32+0x32/0x70
[   66.645395][ T6571]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   66.645418][ T6571] RIP: 0023:0xf7f55fbc
[   66.645434][ T6571] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   66.645451][ T6571] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[   66.645470][ T6571] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040186f40
[   66.645483][ T6571] RDX: 0000000080000800 RSI: 0000000000000000 RDI: 0000000000000000
[   66.645494][ T6571] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   66.645507][ T6571] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   66.645518][ T6571] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   66.645543][ T6571]  </TASK>
[   66.645564][ T6571] ERROR: Out of memory at tomoyo_realpath_from_path.
[   66.645670][ T6571] ubi0: attaching mtd0
[   66.655929][ T6571] ubi0: scanning is finished
[   66.655981][ T6571] ubi0 error: ubi_read_volume_table: the layout volume was not found
[   66.793536][ T6571] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[   66.860589][ T6576] netlink: 32 bytes leftover after parsing attributes in process `syz.1.186'.
[   67.081180][    C3] net_ratelimit: 105 callbacks suppressed
[   67.323751][ T6578] tipc: Cannot configure node identity twice
[   67.586840][ T6602] Console: switching to colour dummy device 80x25
[   67.885499][ T6603] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[   67.901788][ T6603] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[   67.901960][ T6603] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[   67.902206][ T6603] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[   67.902957][ T6603] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[   67.942535][ T6603] pci 0000:00:01.0: Adding to iommu group 1
[   67.972087][ T6603] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[   67.972113][ T6603] pci 0000:00:01.0: vgaarb: bridge control possible
[   67.972126][ T6603] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[   67.985533][ T6603] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[   67.985657][ T6603] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[   67.994365][ T6603] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[   68.008572][ T6603] [drm] Found bochs VGA, ID 0xb0c5.
[   68.008583][ T6603] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[   68.019371][ T6603] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[   68.071229][   T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   68.153822][ T6615] FAULT_INJECTION: forcing a failure.
[   68.153822][ T6615] name failslab, interval 1, probability 0, space 0, times 0
[   68.153853][ T6615] CPU: 1 UID: 0 PID: 6615 Comm: syz.2.198 Not tainted syzkaller #0 PREEMPT(full) 
[   68.153867][ T6615] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   68.153879][ T6615] Call Trace:
[   68.153908][ T6615]  <TASK>
[   68.153914][ T6615]  dump_stack_lvl+0x100/0x190
[   68.153983][ T6615]  should_fail_ex.cold+0x5/0xa
[   68.154006][ T6615]  should_failslab+0xc2/0x120
[   68.154062][ T6615]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[   68.154083][ T6615]  ? __alloc_skb+0x5b7/0x710
[   68.154123][ T6615]  ? __alloc_skb+0x140/0x710
[   68.154143][ T6615]  __alloc_skb+0x140/0x710
[   68.154164][ T6615]  ? __alloc_skb+0x5b7/0x710
[   68.154182][ T6615]  ? __pfx___alloc_skb+0x10/0x10
[   68.154204][ T6615]  netlink_alloc_large_skb+0x69/0x150
[   68.154225][ T6615]  netlink_sendmsg+0x755/0x10c0
[   68.154239][ T6615]  ? __pfx_netlink_sendmsg+0x10/0x10
[   68.154255][ T6615]  ? apparmor_socket_sendmsg+0x165/0x280
[   68.154283][ T6615]  ? ____sys_sendmsg+0xa99/0xc30
[   68.154296][ T6615]  ____sys_sendmsg+0xa99/0xc30
[   68.154309][ T6615]  ? __pfx_netlink_sendmsg+0x10/0x10
[   68.154323][ T6615]  ? __pfx_____sys_sendmsg+0x10/0x10
[   68.154344][ T6615]  ___sys_sendmsg+0x190/0x1e0
[   68.154360][ T6615]  ? __pfx____sys_sendmsg+0x10/0x10
[   68.154381][ T6615]  ? find_held_lock+0x2b/0x80
[   68.154421][ T6615]  __sys_sendmsg+0x160/0x210
[   68.154441][ T6615]  ? __pfx___sys_sendmsg+0x10/0x10
[   68.154467][ T6615]  __do_fast_syscall_32+0x14b/0x8c0
[   68.154509][ T6615]  ? lockdep_hardirqs_on+0x7d/0x110
[   68.154528][ T6615]  do_fast_syscall_32+0x32/0x70
[   68.154546][ T6615]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   68.154562][ T6615] RIP: 0023:0xf73cefbc
[   68.154573][ T6615] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   68.154586][ T6615] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[   68.154619][ T6615] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000d00
[   68.154626][ T6615] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   68.154633][ T6615] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   68.154641][ T6615] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   68.154648][ T6615] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   68.154663][ T6615]  </TASK>
[   68.194159][ T6603] Console: switching to colour frame buffer device 160x50
[   68.221997][   T25] usb 5-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00
[   68.223124][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   68.223148][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   68.223168][   T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
** 577 printk messages dropped **
** 162 printk messages dropped **
** 176 printk messages dropped **
** 138 printk messages dropped **
** 74 printk messages dropped **
** 139 printk messages dropped **
** 355 printk messages dropped **
** 158 printk messages dropped **
** 160 printk messages dropped **
** 137 printk messages dropped **
** 151 printk messages dropped **
** 137 printk messages dropped **
** 150 printk messages dropped **
** 146 printk messages dropped **
** 155 printk messages dropped **
** 149 printk messages dropped **
** 157 printk messages dropped **
** 156 printk messages dropped **
** 154 printk messages dropped **
** 129 printk messages dropped **
** 128 printk messages dropped **
** 141 printk messages dropped **
** 138 printk messages dropped **
** 121 printk messages dropped **
** 137 printk messages dropped **
** 130 printk messages dropped **
** 147 printk messages dropped **
** 118 printk messages dropped **
** 142 printk messages dropped **
** 123 printk messages dropped **
** 124 printk messages dropped **
** 124 printk messages dropped **
** 138 printk messages dropped **
** 168 printk messages dropped **
** 237 printk messages dropped **
** 239 printk messages dropped **
** 223 printk messages dropped **
** 156 printk messages dropped **
** 158 printk messages dropped **
** 131 printk messages dropped **
** 125 printk messages dropped **
** 135 printk messages dropped **
** 133 printk messages dropped **
** 178 printk messages dropped **
** 180 printk messages dropped **
** 111 printk messages dropped **
[   68.297438][ T6617] random: crng reseeded on system resumption
[   68.334039][ T6617] mmap: syz.2.199 (6617) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   68.566385][ T6626] FAULT_INJECTION: forcing a failure.
[   68.566385][ T6626] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   68.566411][ T6626] CPU: 1 UID: 0 PID: 6626 Comm: syz.2.201 Not tainted syzkaller #0 PREEMPT(full) 
[   68.566433][ T6626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   68.566444][ T6626] Call Trace:
[   68.566451][ T6626]  <TASK>
[   68.566459][ T6626]  dump_stack_lvl+0x100/0x190
[   68.566491][ T6626]  should_fail_ex.cold+0x5/0xa
[   68.566514][ T6626]  _copy_from_iter+0x1f4/0x16c0
[   68.566573][ T6626]  ? __pfx__copy_from_iter+0x10/0x10
[   68.566602][ T6626]  ? __pfx_alloc_pages_mpol+0x10/0x10
[   68.566628][ T6626]  ? lock_acquire+0x1d1/0x380
[   68.566649][ T6626]  copy_page_from_iter+0x238/0x300
[   68.566680][ T6626]  tun_build_skb.constprop.0+0x2ea/0x18f0
[   68.566716][ T6626]  ? __pfx_tun_build_skb.constprop.0+0x10/0x10
[   68.566739][ T6626]  ? __lock_acquire+0x5c0/0x1f40
[   68.566773][ T6626]  ? lock_acquire+0x1d1/0x380
[   68.566792][ T6626]  ? aa_file_perm+0x197/0x14d0
[   68.566816][ T6626]  tun_get_user+0x1763/0x3ee0
[   68.566841][ T6626]  ? __lock_acquire+0x5c0/0x1f40
[   68.566861][ T6626]  ? __pfx_tun_get_user+0x10/0x10
[   68.566883][ T6626]  ? __pfx_ref_tracker_alloc+0x10/0x10
[   68.566920][ T6626]  ? find_held_lock+0x2b/0x80
[   68.566945][ T6626]  ? tun_get+0x191/0x370
[   68.566962][ T6626]  ? tun_get+0x191/0x370
[   68.566986][ T6626]  tun_chr_write_iter+0xdc/0x200
[   68.567009][ T6626]  vfs_write+0x6af/0x1050
[   68.567037][ T6626]  ? __pfx_tun_chr_write_iter+0x10/0x10
[   68.567061][ T6626]  ? __pfx_vfs_write+0x10/0x10
[   68.567078][ T6626]  ? find_held_lock+0x2b/0x80
[   68.567111][ T6626]  ksys_write+0x12a/0x250
[   68.567131][ T6626]  ? __pfx_ksys_write+0x10/0x10
[   68.567158][ T6626]  do_int80_emulation+0x166/0x650
[   68.567189][ T6626]  asm_int80_emulation+0x1a/0x20
[   68.567205][ T6626] RIP: 0023:0xf7127f6b
[   68.567219][ T6626] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[   68.567237][ T6626] RSP: 002b:00000000f53e644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[   68.567254][ T6626] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 000000008001f880
[   68.567267][ T6626] RDX: 000000000000004a RSI: 0000000000000000 RDI: 0000000000000000
[   68.567278][ T6626] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   68.567288][ T6626] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   68.567296][ T6626] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   68.567310][ T6626]  </TASK>
[   68.671891][   T25] plantronics 0003:047F:FFFF.0003: ignoring exceeding usage max
[   68.672573][   T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   68.672588][   T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   68.672601][   T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   68.672614][   T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   68.672631][   T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   68.681788][   T25] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   68.869430][ T6635] ubi0: attaching mtd0
[   68.873595][ T6635] ubi0: scanning is finished
[   68.873627][ T6635] ubi0 error: ubi_read_volume_table: the layout volume was not found
[   69.054339][ T6635] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[   69.149624][   T25] usb 5-1: USB disconnect, device number 3
[   69.155292][ T6642] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.197298][ T6645] syz.2.207 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   69.198480][ T6641] tipc: Disabling bearer <eth:syzkaller0>
[   69.341078][ T6645] futex_wake_op: syz.2.207 tries to shift op by 144; fix this program
[   69.341304][ T6645] futex_wake_op: syz.2.207 tries to shift op by 144; fix this program
[   69.365792][ T6649] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.377608][ T6648] tipc: Disabling bearer <eth:syzkaller0>
[   69.721242][   T25] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   69.828577][ T6660] Console: switching to colour dummy device 80x25
[   69.859624][ T6663] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[   69.875937][   T25] usb 7-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00
[   69.877773][   T25] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[   69.877814][   T25] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   69.877827][   T25] usb 7-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   69.877840][   T25] usb 7-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[   69.878698][   T25] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[   69.878722][   T25] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   69.878734][   T25] usb 7-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   69.878747][   T25] usb 7-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[   69.883115][ T6663] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[   69.883290][ T6663] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[   69.883566][ T6663] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[   69.884365][ T6663] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[   69.896052][   T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.896070][   T25] usb 7-1: Product: syz
[   69.896084][   T25] usb 7-1: Manufacturer: syz
[   69.896097][   T25] usb 7-1: SerialNumber: syz
[   69.900820][ T6663] pci 0000:00:01.0: Adding to iommu group 1
[   69.907974][ T6663] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[   69.907991][ T6663] pci 0000:00:01.0: vgaarb: bridge control possible
[   69.908006][ T6663] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[   69.916292][ T6663] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[   69.916408][ T6663] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[   69.917901][ T6663] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[   69.934226][ T6663] [drm] Found bochs VGA, ID 0xb0c5.
[   69.934241][ T6663] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[   69.957648][ T6663] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[   69.969506][   T25] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected
[   69.976784][   T25] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[   69.980900][   T25] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[   70.083415][ T6663] Console: switching to colour frame buffer device 160x50
[   70.113959][ T6663] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[   70.175641][ T6666] FAULT_INJECTION: forcing a failure.
[   70.175641][ T6666] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   70.175681][ T6666] CPU: 1 UID: 0 PID: 6666 Comm: syz.1.215 Not tainted syzkaller #0 PREEMPT(full) 
[   70.175704][ T6666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   70.175723][ T6666] Call Trace:
[   70.175764][ T6666]  <TASK>
[   70.175772][ T6666]  dump_stack_lvl+0x100/0x190
[   70.175867][ T6666]  should_fail_ex.cold+0x5/0xa
[   70.175904][ T6666]  strncpy_from_user+0x3b/0x2d0
[   70.175967][ T6666]  do_getname+0x78/0x390
[   70.176013][ T6666]  __ia32_sys_rmdir+0x35/0x60
[   70.176039][ T6666]  __do_fast_syscall_32+0x14b/0x8c0
[   70.176100][ T6666]  ? lockdep_hardirqs_on+0x7d/0x110
[   70.176128][ T6666]  do_fast_syscall_32+0x32/0x70
[   70.176156][ T6666]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   70.176181][ T6666] RIP: 0023:0xf7f55fbc
[   70.176206][ T6666] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   70.176225][ T6666] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000028
[   70.176245][ T6666] RAX: ffffffffffffffda RBX: 0000000080000140 RCX: 0000000000000000
[   70.176259][ T6666] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   70.176270][ T6666] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   70.176282][ T6666] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   70.176294][ T6666] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   70.176319][ T6666]  </TASK>
[   70.461262][   T11] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   70.612996][   T11] usb 6-1: unable to get BOS descriptor or descriptor too short
[   70.613035][   T11] usb 6-1: New USB device found: idVendor=1a0a, idProduct=0102, bcdDevice=9c.8d
[   70.613844][   T11] usb 6-1: config 254 has an invalid interface number: 213 but max is 0
[   70.613867][   T11] usb 6-1: config 254 has no interface number 0
[   70.613893][   T11] usb 6-1: config 254 interface 213 has no altsetting 0
[   70.616091][   T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.616110][   T11] usb 6-1: Product: syz
[   70.616124][   T11] usb 6-1: Manufacturer: syz
[   70.616137][   T11] usb 6-1: SerialNumber: syz
[   70.725234][ T6671] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.732177][ T6670] tipc: Disabling bearer <eth:syzkaller0>
[   70.841359][ T5777] ------------[ cut here ]------------
[   70.841367][ T5777] pci 0000:00:01.0: [drm] vblank wait timed out on crtc 0
[   70.841388][ T5777] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x31d/0x580, CPU#3: kworker/3:2/5777
[   70.849350][ T5777] Modules linked in:
[   70.851014][ T5777] CPU: 3 UID: 0 PID: 5777 Comm: kworker/3:2 Not tainted syzkaller #0 PREEMPT(full) 
[   70.854052][ T5777] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   70.857355][ T5777] Workqueue: events drm_fb_helper_damage_work
[   70.859613][ T5777] RIP: 0010:drm_crtc_wait_one_vblank+0x323/0x580
[   70.862174][ T5777] Code: 48 8b 6b 50 48 85 ed 0f 84 dc 01 00 00 e8 55 b4 24 fc 48 89 df e8 6d 1b 93 00 48 89 c6 48 8d 3d 03 67 8d 0c 44 89 e9 48 89 ea <67> 48 0f b9 3a 44 89 ee 4c 89 e7 41 be 92 ff ff ff e8 57 f7 ff ff
[   70.868359][ T5777] RSP: 0000:ffffc9000457fa40 EFLAGS: 00010293
[   70.870312][ T5777] RAX: ffffffff8c86eb00 RBX: ffff888077c4e0d0 RCX: 0000000000000000
[   70.872909][ T5777] RDX: ffff88802660ad00 RSI: ffffffff8c86eb00 RDI: ffffffff92767ee0
[   70.875403][ T5777] RBP: ffff88802660ad00 R08: 0000000000000000 R09: 0000000000000000
[   70.877975][ T5777] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880794bc000
[   70.880482][ T5777] R13: 0000000000000000 R14: 0000000000000000 R15: 000000000000007c
[   70.883050][ T5777] FS:  0000000000000000(0000) GS:ffff888095579000(0000) knlGS:0000000000000000
[   70.885793][ T5777] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   70.887943][ T5777] CR2: 00000000800022c0 CR3: 000000006721d000 CR4: 0000000000352ef0
[   70.890476][ T5777] Call Trace:
[   70.892151][ T5777]  <TASK>
[   70.893121][ T5777]  ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10
[   70.895186][ T5777]  ? __pfx_autoremove_wake_function+0x10/0x10
[   70.897130][ T5777]  ? lockdep_hardirqs_on+0x7d/0x110
[   70.898679][ T5777]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[   70.900517][ T5777]  ? drm_vblank_get+0x14f/0x2d0
[   70.902070][ T5777]  drm_client_modeset_wait_for_vblank+0xef/0x120
[   70.903995][ T5777]  drm_fb_helper_damage_work+0x2e2/0xab0
[   70.905785][ T5777]  ? process_one_work+0xa2c/0x1b10
[   70.907564][ T5777]  ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[   70.909526][ T5777]  ? process_one_work+0x906/0x1b10
[   70.911273][ T5777]  ? process_one_work+0x906/0x1b10
[   70.912843][ T5777]  process_one_work+0xac7/0x1b10
[   70.914439][ T5777]  ? __pfx_process_one_work+0x10/0x10
[   70.916079][ T5777]  ? lock_acquire+0x1d1/0x380
[   70.917586][ T5777]  ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[   70.919491][ T5777]  worker_thread+0x5ef/0xe50
[   70.920984][ T5777]  ? __pfx_worker_thread+0x10/0x10
[   70.923055][ T5777]  ? kthread+0x13a/0x450
[   70.924417][ T5777]  ? __pfx_worker_thread+0x10/0x10
[   70.925339][ T1447] ieee802154 phy0 wpan0: encryption failed: -22
[   70.925377][ T1447] ieee802154 phy1 wpan1: encryption failed: -22
[   70.927980][  T860] cfg80211: failed to load regulatory.db
[   70.932200][ T5777]  kthread+0x373/0x450
[   70.933486][ T5777]  ? __pfx_kthread+0x10/0x10
[   70.934919][ T5777]  ret_from_fork+0x730/0xd60
[   70.936363][ T5777]  ? __pfx_ret_from_fork+0x10/0x10
[   70.937973][ T5777]  ? __switch_to+0x800/0x10e0
[   70.939410][ T5777]  ? __pfx_kthread+0x10/0x10
[   70.940897][ T5777]  ret_from_fork_asm+0x1a/0x30
[   70.942484][ T5777]  </TASK>
[   70.943452][ T5777] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   70.945488][ T5777] CPU: 3 UID: 0 PID: 5777 Comm: kworker/3:2 Not tainted syzkaller #0 PREEMPT(full) 
[   70.948395][ T5777] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   70.951633][ T5777] Workqueue: events drm_fb_helper_damage_work
[   70.953511][ T5777] Call Trace:
[   70.954534][ T5777]  <TASK>
[   70.955434][ T5777]  dump_stack_lvl+0x100/0x190
[   70.956914][ T5777]  vpanic+0x2dc/0x6f8
[   70.958198][ T5777]  panic+0xd1/0xe0
[   70.959356][ T5777]  ? __pfx_panic+0x10/0x10
[   70.960982][ T5777]  check_panic_on_warn.cold+0x19/0x34
[   70.962726][ T5777]  ? drm_crtc_wait_one_vblank+0x31d/0x580
[   70.964468][ T5777]  __warn.cold+0x191/0x321
[   70.965858][ T5777]  __report_bug+0x30f/0x440
[   70.967297][ T5777]  ? drm_crtc_wait_one_vblank+0x31d/0x580
[   70.969026][ T5777]  ? __pfx___report_bug+0x10/0x10
[   70.970609][ T5777]  ? lockdep_hardirqs_on+0x7d/0x110
[   70.972185][ T5777]  report_bug_entry+0xe2/0x290
[   70.973691][ T5777]  ? drm_crtc_wait_one_vblank+0x323/0x580
[   70.975443][ T5777]  handle_bug+0x1cd/0x2a0
[   70.976787][ T5777]  exc_invalid_op+0x17/0x50
[   70.978245][ T5777]  asm_exc_invalid_op+0x1a/0x20
[   70.979770][ T5777] RIP: 0010:drm_crtc_wait_one_vblank+0x323/0x580
[   70.981746][ T5777] Code: 48 8b 6b 50 48 85 ed 0f 84 dc 01 00 00 e8 55 b4 24 fc 48 89 df e8 6d 1b 93 00 48 89 c6 48 8d 3d 03 67 8d 0c 44 89 e9 48 89 ea <67> 48 0f b9 3a 44 89 ee 4c 89 e7 41 be 92 ff ff ff e8 57 f7 ff ff
[   70.987727][ T5777] RSP: 0000:ffffc9000457fa40 EFLAGS: 00010293
[   70.989607][ T5777] RAX: ffffffff8c86eb00 RBX: ffff888077c4e0d0 RCX: 0000000000000000
[   70.992104][ T5777] RDX: ffff88802660ad00 RSI: ffffffff8c86eb00 RDI: ffffffff92767ee0
[   70.994495][ T5777] RBP: ffff88802660ad00 R08: 0000000000000000 R09: 0000000000000000
[   70.996911][ T5777] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880794bc000
[   70.999400][ T5777] R13: 0000000000000000 R14: 0000000000000000 R15: 000000000000007c
[   71.002202][ T5777]  ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10
[   71.004183][ T5777]  ? __pfx_autoremove_wake_function+0x10/0x10
[   71.006031][ T5777]  ? lockdep_hardirqs_on+0x7d/0x110
[   71.007641][ T5777]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[   71.009573][ T5777]  ? drm_vblank_get+0x14f/0x2d0
[   71.011097][ T5777]  drm_client_modeset_wait_for_vblank+0xef/0x120
[   71.013026][ T5777]  drm_fb_helper_damage_work+0x2e2/0xab0
[   71.014785][ T5777]  ? process_one_work+0xa2c/0x1b10
[   71.016396][ T5777]  ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[   71.018386][ T5777]  ? process_one_work+0x906/0x1b10
[   71.019969][ T5777]  ? process_one_work+0x906/0x1b10
[   71.021872][ T5777]  process_one_work+0xac7/0x1b10
[   71.023844][ T5777]  ? __pfx_process_one_work+0x10/0x10
[   71.026018][ T5777]  ? lock_acquire+0x1d1/0x380
[   71.027953][ T5777]  ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[   71.030017][ T5777]  worker_thread+0x5ef/0xe50
[   71.031537][ T5777]  ? __pfx_worker_thread+0x10/0x10
[   71.033198][ T5777]  ? kthread+0x13a/0x450
[   71.034548][ T5777]  ? __pfx_worker_thread+0x10/0x10
[   71.036559][ T5777]  kthread+0x373/0x450
[   71.038275][ T5777]  ? __pfx_kthread+0x10/0x10
[   71.040009][ T5777]  ret_from_fork+0x730/0xd60
[   71.041709][ T5777]  ? __pfx_ret_from_fork+0x10/0x10
[   71.043372][ T5777]  ? __switch_to+0x800/0x10e0
[   71.044914][ T5777]  ? __pfx_kthread+0x10/0x10
[   71.046481][ T5777]  ret_from_fork_asm+0x1a/0x30
[   71.048051][ T5777]  </TASK>
[   71.049758][ T5777] Kernel Offset: disabled
[   71.051460][ T5777] Rebooting in 86400 seconds..