last executing test programs:

42.149978978s ago: executing program 0 (id=804):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5})
preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000080)={0x6, {"7fb13911afb5ea7f027063aa876dd358", "cfe484e50900", "d9ca451d96249a1dee77476cc87f7d0a"}, 0x6})
r2 = gettid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x0, r2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$poke(0x4, r3, &(0x7f0000000200), 0x0)

42.063560485s ago: executing program 0 (id=805):
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x8, 0x42a03)
r2 = socket(0x3, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a2}}, {{0xa, 0x4e20, 0x2fe, @loopback}}}, 0x108)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0x0, 0x0})
dup2(0xffffffffffffffff, r1)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000280)={0x1, 0x4, 0x1})
r4 = dup(r3)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x2, 0x1, {0x0, 0x1}, {0x48, 0xfbff}, @rumble={0xf, 0xff}})
r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01)
write$char_usb(r5, &(0x7f0000000040), 0x0)
write$UHID_INPUT(r4, 0x0, 0x0)
write(r0, &(0x7f0000000700)='bind', 0x4)
openat$fuse(0xffffff9c, &(0x7f0000000140), 0x2, 0x0)

41.84110328s ago: executing program 0 (id=806):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xaf9ba000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f00007bf000/0x4000)=nil, 0x4000, 0xb635773f06ebbee7, 0x1010, 0xffffffffffffffff, 0x1b5c9000)
r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x40d00)
ioctl$FE_DISEQC_RECV_SLAVE_REPLY(r1, 0x800c6f40, &(0x7f00000000c0)={""/4, 0x4})
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES8], 0x7c}}, 0x2400c041)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8000ff070000000000000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0xa8}}, 0x4048010)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
close_range(r5, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1c6)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x2, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x1, 0x0)
write(r6, &(0x7f0000000200)='0', 0x1)
r7 = syz_open_dev$evdev(&(0x7f0000000180), 0x8000002, 0x0)
readv(r7, 0x0, 0x0)

40.104740755s ago: executing program 0 (id=813):
r0 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000bac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00')
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000)
r4 = socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4865ff06bd00b5950ebd7000ffdbdf250a0800ff", @ANYRES32=0x0, @ANYBLOB="1400020000000000000000000000000000000001140001002001000000000000000000000000000108000900"], 0x48}, 0x1, 0x0, 0x0, 0x2004c040}, 0x8800)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x2400cc10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r7=>0x0})
r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$FIGETBSZ(r8, 0x2, &(0x7f0000000200))
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r7, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000100))

39.907889504s ago: executing program 0 (id=814):
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x8, 0x42a03)
r2 = socket(0x3, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a2}}, {{0xa, 0x4e20, 0x2fe, @loopback}}}, 0x108)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0x0, 0x0})
dup2(0xffffffffffffffff, r1)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000280)={0x1, 0x4, 0x1})
r4 = dup(r3)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x2, 0x1, {0x0, 0x1}, {0x48, 0xfbff}, @rumble={0xf, 0xff}})
r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01)
write$char_usb(r5, &(0x7f0000000040), 0x0)
write$UHID_INPUT(r4, 0x0, 0x0)
write(r0, &(0x7f0000000700)='bind', 0x4)
openat$fuse(0xffffff9c, &(0x7f0000000140), 0x2, 0x0)

39.640834998s ago: executing program 0 (id=815):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000380)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x8, @local}]}, &(0x7f0000000180)=0xc)
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc01c5868, &(0x7f0000000640)={<r5=>r4, &(0x7f0000000140)='\x00', 0x4100, &(0x7f0000000300)={@align=0x2, {0x7, 0x1, 0xfffffffb, 0x3}}, 0x1ff, &(0x7f0000000480), &(0x7f0000000600)=0xff})
getsockopt$inet_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000680)=""/90, &(0x7f0000000700)=0x5a)
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58)
r7 = accept4$alg(r6, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0436070a2200"], 0xa)
sendmmsg$sock(r7, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20000}], 0x3}}], 0x1, 0x0)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x800, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4010)
r8 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x562, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r8, 0xc0f8565c, &(0x7f0000000000)={0x77, 0xbd6, 0x1, {0x2, @raw_data="ad31fd3e8dd5644bb1fb36286a5753c1da20865e0eb89bcd72c31ddb8dfeeb656a22406e58c6dc043e233b95763608d21e69095c2028c810167ff854cb7b1f9706c1078e745cf10ac4e77f4e1d23662d9bc39c1317ce3bf569812d0105e22506ba9e970b832a81b8d6f391e25b1540c99ff139aba143fcf27be1d897af2d0e6f2d3fa84c5fbcc880c8333934724f00aeff7f0000000000006313269e5f28f01a4f298e3c4250033f83e8b729d169ad509fa3865789ee00"}, 0x400})
set_mempolicy_home_node(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x0)
r9 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a1, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_group_source_req(r9, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xbe, @mcast1, 0xbfd}}, {{0xa, 0x4e22, 0x7, @empty, 0x1}}}, 0x108)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r0)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="b12340097d58c3"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x20004000)

39.564629002s ago: executing program 32 (id=815):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000380)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x8, @local}]}, &(0x7f0000000180)=0xc)
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc01c5868, &(0x7f0000000640)={<r5=>r4, &(0x7f0000000140)='\x00', 0x4100, &(0x7f0000000300)={@align=0x2, {0x7, 0x1, 0xfffffffb, 0x3}}, 0x1ff, &(0x7f0000000480), &(0x7f0000000600)=0xff})
getsockopt$inet_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000680)=""/90, &(0x7f0000000700)=0x5a)
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58)
r7 = accept4$alg(r6, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="0436070a2200"], 0xa)
sendmmsg$sock(r7, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20000}], 0x3}}], 0x1, 0x0)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x800, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4010)
r8 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x562, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r8, 0xc0f8565c, &(0x7f0000000000)={0x77, 0xbd6, 0x1, {0x2, @raw_data="ad31fd3e8dd5644bb1fb36286a5753c1da20865e0eb89bcd72c31ddb8dfeeb656a22406e58c6dc043e233b95763608d21e69095c2028c810167ff854cb7b1f9706c1078e745cf10ac4e77f4e1d23662d9bc39c1317ce3bf569812d0105e22506ba9e970b832a81b8d6f391e25b1540c99ff139aba143fcf27be1d897af2d0e6f2d3fa84c5fbcc880c8333934724f00aeff7f0000000000006313269e5f28f01a4f298e3c4250033f83e8b729d169ad509fa3865789ee00"}, 0x400})
set_mempolicy_home_node(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x0)
r9 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a1, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_group_source_req(r9, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xbe, @mcast1, 0xbfd}}, {{0xa, 0x4e22, 0x7, @empty, 0x1}}}, 0x108)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r0)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="b12340097d58c3"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x20004000)

4.59130177s ago: executing program 2 (id=1061):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100))
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240))

4.518975857s ago: executing program 2 (id=1062):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syncfs(r0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000b80)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, 0x0, 0xb3)
socket$packet(0x11, 0x3, 0x300)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r4 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000100)={0x0, 0x1000000, 0x0, 0x1})
fdatasync(0xffffffffffffffff)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, 0x0)
r5 = syz_usbip_server_init(0x4)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x6c, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r5}, @flat=@binder={0x73622a85, 0x1, 0x2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @increfs_done={0x40106308, 0x1}, @acquire_done={0x40106309, 0xffffffffffffffff}], 0x9a, 0x0, &(0x7f0000000400)="08a7e5b352ceda16369df1937103c4fa57d8d75b5edb933183d61edc9415da9799ad417364ea1549373bd0435a49f3d675c0a41a9206de61374c595bf333d2ecc22800a428a1dc847d818190ae6256a57cc4c5902d034ef599899c8ca3f33d6e77d600da0279bb0915c0c4844555a39b831d0a71130a5e50b6115dd2360f7a69806eabd8b861f8e46ec2a12e48760fd73d34f23e09649c524568"})
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
syz_clone(0x0, &(0x7f0000000080)="95f1a3046c5f104f50c8a4cc798e81bdb1f47a45015763c9ad68d414da4df4ff4f3bbfe4e7ae66a1e5", 0x29, &(0x7f0000000300), &(0x7f0000000500), &(0x7f0000000540)="8b157c67c5c99b2734df2ff74c5d0eeea2672f95be135a3710a53ace067a091b9894e96655fe3eaec035d044272b0a40f56eab4c90600c841469ecb295ec745d6d05a9562375d5842198c53b440aa98534dff3909a823b7b7d5e11127529f53ee105fb204b1a5bf5484d6965237ad8f2a075fe5131461110bc4d70c9d647a678")
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000004000000007900008a00000000000000", @ANYRES32, @ANYBLOB="00fffff500000000000000000000000000000010", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
syz_usb_connect$uac2(0x3, 0xee, &(0x7f0000001b40)=ANY=[@ANYBLOB], &(0x7f0000001940)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x250, 0xf9, 0x4, 0x2, 0x20}, 0x3f, &(0x7f0000001640)={0x5, 0xf, 0x3f, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x0, 0x7708, 0x3, [0xff0170, 0xffff00, 0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xff, 0x3, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xc, 0x9, 0x1d4}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x2, 0x9, 0x6, 0x9}]}, 0x4, [{0x0, 0x0}, {0xfef3, &(0x7f0000001700)=@string={0x2}}, {0x26, &(0x7f0000001800)=@string={0x26, 0x3, "0c2460df7cb0e0ae75a6f1858962e1ecc68f8576907c219974c6815ac16e6fae17f4959d"}}, {0x4, &(0x7f0000001880)=@lang_id={0x4, 0x3, 0x860}}]})
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000680)={0x80000000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0x0], 0x1, {r3}}, 0x58)
fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfeffffff000)

4.347920773s ago: executing program 1 (id=1065):
r0 = dup(0xffffffffffffffff)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
sendfile(r1, r2, 0x0, 0xffffffff000)
recvmmsg(r2, &(0x7f0000000640), 0x0, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x58}}, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000040)={'\x00', 0x8, 0xf37, 0x7, 0x1, 0x7, <r5=>0x0})
capset(&(0x7f0000000080)={0x39900612, r5}, &(0x7f0000001080)={0x200000, 0x80000001, 0x0, 0x0, 0x10000})
setsockopt(r2, 0x3, 0x4, &(0x7f0000000180)="7483d3ef956f3d8955f2e9bbac4c571853c96af69b7857f046da7e6870a1cd0ab28d4b7f6742d095ea8405342fab9bcad6930c9bc0c015861b917711429435fc064965ef98b5c4dfc9b39fbb918541dff01a57f3f351d8dc790cacab4eaf74a4d79e0651bb6243e0818ce2fa586f2047dd748f06084b8c5c9c72f9accc5a6625cea4a06887e43714e6211757bb7901d7c86162a424045414bde079f07fa31d4e5ce1538e4ef54146d66e8ef05b39dafbf321bf22e10df632445f4e1ee8e9cb7a193c28ad3e8ee45ff98b", 0xca)
mlockall(0x6)
brk(0x55555ede6001)
ioctl$KDMKTONE(r0, 0x4b30, 0x8)

4.017650873s ago: executing program 4 (id=1070):
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904"], 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSCTTY(r0, 0x540e, 0xac)
gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1d, 0x800000000004, @thr={&(0x7f00000006c0)="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", &(0x7f00000005c0)="286f13cbd0925cb0332813632aa81916b192b673be73d8cc14d26af48d4ad5c5a78470daa1e6767119d1323cf9f068be1b50d9b840a5526369c13286e23c5ee01c04ee2e39effd642ef081000000000000008ab005bdabccd0ae5892fa94d9465a7d51ee4a01dc6344ae589a426db0c995a400dcf291b0ab3dcfcc0e7d09f1b6fe7620808c1450724ff86e1505ccfd70932c4dc03044e1ef31e5b38869dd884df46a4328ac0ddab673ede4699903c0a2ef640db679353fc8d0afa7914677114ca3918110f8cc6346be834ae7156ea3c11f39f022acda0088e590dcd43cd910073bc5968ecb2237"}}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1)
r1 = syz_open_dev$I2C(0x0, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="03000000", @ANYRES16=r3, @ANYBLOB="01072bbd70000000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'bridge_slave_1\x00', 0x10})
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]})
ioctl$XFS_IOC_RTGROUP_GEOMETRY(r1, 0xc0805841, &(0x7f0000000300)={0x7fff, 0x5, 0x7, 0x9, 0xff8})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r6, &(0x7f0000000240)={0xa, 0x4e24, 0x5, @local, 0x4}, 0x1c)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, 0x0)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f00000000c0), 0x0)

3.804277481s ago: executing program 1 (id=1072):
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
bind$llc(r0, 0x0, 0x0)

3.722855464s ago: executing program 1 (id=1073):
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904"], 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSCTTY(r1, 0x540e, 0xac)
gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1d, 0x800000000004, @thr={&(0x7f00000006c0)="aad6984b16fd1e3625456778f584dd1f723eab5267b8d1453042ad9cf3521eb7625cb6e149bd3ae5cb1a8b147267ba3e99d9132de64c17b89e21dbe470b3efc7b6d67b407c044229df25cb2ee2a8341eddd865370f0de0f6a5e2858ae491f3a1c40669845e54b54cc1e1aae66b9f536b33cc2b79970003a84ba042e0aa3de63ee4d28f2f35d0be4950ebb3bd2425326536e1557334194067b1da521061ed9513c578695df716cab487470ab5d14c0bf1b6082cdeef15ca694b3f310440fb946e937a0416ef8a54a6fe63d0c2f82801b55be3d1a1222791e640cb0994c8bb2dcc5f31873adcfa6f9761a3d60ffd1df661cfb022e9e92133c74e4f21f8ab1214d3abccb2ce06d9b7d23fb1c98a1f40bf28ea827bc944139ad58196793ba6096403917e8ea63aa3bae4da80c4e51844323b3c90b044bdcf8cda7f9a1eeb613a58b8798abbb0c4ee44fba261593c0cb067ce65b398981a4f5fe2c6777d96bb2acfa5f46adf2ec535c24e6b6ca4c796ae5f596157d499e0c10b4aaaba4eeb3e4992d67aef445405a28e4644ebfee3330ebc8f3560a7f21b2a27c572323940d5de8b4386f8b9e830580fa7fd7fdbd6af", &(0x7f00000005c0)="286f13cbd0925cb0332813632aa81916b192b673be73d8cc14d26af48d4ad5c5a78470daa1e6767119d1323cf9f068be1b50d9b840a5526369c13286e23c5ee01c04ee2e39effd642ef081000000000000008ab005bdabccd0ae5892fa94d9465a7d51ee4a01dc6344ae589a426db0c995a400dcf291b0ab3dcfcc0e7d09f1b6fe7620808c1450724ff86e1505ccfd70932c4dc03044e1ef31e5b38869dd884df46a4328ac0ddab673ede4699903c0a2ef640db679353fc8d0afa7914677114ca3918110f8cc6346be834ae7156ea3c11f39f022acda0088e590dcd43cd910073bc5968ecb2237"}}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1)
r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'bridge_slave_1\x00', 0x10})
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r3)
ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x6, &(0x7f0000000000)={0xfc, "e922fe53e14fcad1ebe6ff00000000008100"}})
ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]})
ioctl$XFS_IOC_RTGROUP_GEOMETRY(r2, 0xc0805841, &(0x7f0000000300)={0x7fff, 0x5, 0x7, 0x9, 0xff8})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r6, &(0x7f0000000240)={0xa, 0x4e24, 0x5, @local, 0x4}, 0x1c)
r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r7, 0x7a9, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000000))
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f00000000c0), 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000004000000040000000a00000013080500", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0207ecc85206d43f9173465968a8e90f0010000100000000000000000000000000000000000000343868df2f1751e09b5c354f9212175bea90ff596d18f360001fbf26e8b55d9bb3321ae31c6f0370252e6b26e7da4b03d00ffaa3d3b8d15429a6930514cf467dd4b6522a21d70d2eaec7f0", @ANYRES32, @ANYBLOB], 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r8, 0x5b, &(0x7f00000001c0)}, 0x10)

2.20099426s ago: executing program 3 (id=1078):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff)
write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001140)={0x44, 0x0, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000200000000000800a000940900000800260094090000080027000000000008"], 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x148, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x10, 0x10, 0x80, 0x8, 0x8, 0x8, 0x7}}, @TCA_RED_STAB={0x104}]}}]}, 0x148}}, 0x280c0)

1.769507696s ago: executing program 3 (id=1079):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x4, 0x8, 0x204, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0xc}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)

1.699836399s ago: executing program 3 (id=1080):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000))
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000540)={{0x3, 0x0, 0x1, 0x1, 0x1}, 0xfffffffb, 0x25, 'id1\x00', 'timer1\x00', 0x0, 0x9, 0x200, 0x38e41e62, 0x64})
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777)
mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@ipv4_delroute={0x28, 0x19, 0x1, 0x70bd2f, 0x25dfdbf9, {0x2, 0x20, 0x14, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1800}, [@RTA_DST={0x8, 0x1, @local}, @RTA_METRICS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44050}, 0x1000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5)
r6 = dup(r2)
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000400)=[r2, r5, 0xffffffffffffffff, r3, r2], 0x5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="2f0000000000000000000000aa8b30960cb78a641380e0df642251c59023150453c5a1e0934420b6d38fd39a9980477589a73669b89e363f7a5928eeba966124179ac4ddcfc33b93da80ba57feec2bc22fe338736e7e7c64d14ec3d29367d640ea0400cae7", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a83116752ddb11cfafffa3837841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e30df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cd17b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0544c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf80300cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9874620e322d9348900000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a35df8574eb49e972f7976eafee43a6c17009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d5040000000000000000000000000000074f21ec2b57bb2daf8fab7cd564d1e84c93af254ab029e6cd168007b9a10a6664d9d264aceede0183b2306c440b2c81c9e120ece36a61b0b015ea6716decf8783e0845fa975b6e5f7f4dd4abe2a95e764ae13288d4439ec2906659bc9f26212615423c3d8d58901a6b51a93c8aacb19c416d5260662031a295f2b33295a60db77b5f082bdc48cd06c6cd01e7a40e456d829d277c77c2ca9159c82a391a24d5f6193228d93e2fd99cd0cdeefa9b7c5ea02c5454ef4c6631e6766ffcba3cce4ab13c69622675683ab1f05edbb09641c9dba535b319a21a00287645449a61eefc00a2a8f6955d6573023325bc00ca0facb69d67c8b95e29b36c4a5f84a959262c382de9a411be7b9b500ca329e5eefcd323490eed4bcbcba4764618bf51a08498a64b0e19c00e33480b27c2b12c326e6bf10234f883b3082512e9ad2fbdf6bae"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089021416e0885a0400000000000081009fa79900", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d)
pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000)
write(r2, &(0x7f00000003c0)='10', 0x2)
signalfd(r1, &(0x7f0000000140)={[0x32a]}, 0x8)
getsockopt$sock_int(r5, 0x1, 0xb, &(0x7f0000000040), &(0x7f00000002c0)=0x4)

1.580812375s ago: executing program 3 (id=1081):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000100)={0x24, 0x0, 0x1, 0x70bd08, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6e}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x8c4}, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x10}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24008001}, 0x24004015)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4)
write$P9_RREADLINK(r3, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0001}]})
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c)
syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad7, 0x10000, 0x3}, &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000000))
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)={0xfffffeff})
close(r6)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r9, @ANYBLOB="dc196c174c0f622e019df2d7fcc0c6e67e55dd353e5b54dbb5c89c1e1f4a22120475c8cdd9a545554eab5c90c9583f399da9afac43bb3186c0baf3fa64ff2c4c"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
recvmmsg$unix(r4, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/156, 0x9c}], 0x1}}], 0x2, 0x40000000, 0x0)
sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)

1.481730582s ago: executing program 2 (id=1082):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x88a8ffad, 0x5e801}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x3}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x440088c4)
r3 = gettid()
prlimit64(r3, 0xb, &(0x7f00000000c0)={0x2cc, 0xfffffffb}, 0x0)
clock_nanosleep(0x5, 0x3ff82fffedef25d4, &(0x7f0000000080), &(0x7f0000000100))

1.20096614s ago: executing program 2 (id=1083):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000024c0)=@newtclass={0x50, 0x28, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x4, 0xb}, {0x9, 0x9}}, [@tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0x7}}, @tclass_kind_options=@c_taprio={0xb}]}, 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x200448c0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5)
setreuid(0xee00, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x0, 0xe, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x6102, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', &(0x7f00000004c0), 0x1200004, 0x0)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xf000, 0x0)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000080)=0x13)

1.014286631s ago: executing program 4 (id=1084):
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000001f40), 0x0)
ioctl$TUNGETFILTER(r0, 0x800854db, &(0x7f0000000380)=""/44)
r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040))
ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f00000000c0)=0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0)
mount$binderfs(0x0, &(0x7f0000000700)='./binderfs\x00', 0x0, 0x20, 0x0)

687.057869ms ago: executing program 1 (id=1085):
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000040), 0x20000, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/rt_cache\x00')
lseek(r1, 0x8000000010007, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0185649, &(0x7f0000000100)={0xfffffff, 0x3, 0x6525, r0, 0x0, &(0x7f00000000c0)={0xa00001, 0x1, '\x00', @string=&(0x7f0000000080)=0x18}})
syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x242900)

610.682902ms ago: executing program 1 (id=1086):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x2c, r0, 0xb1f25d2fdeba4e89, 0x70bd27, 0x25dfdc03, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40c6}, 0xc0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x1000004, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0a000000290000003b000000eb0000103d59fb26cb373f733a5f200a4ab08cd0a574d26b05b6181d6ce68889a9c3061cc5fdd68c6799d3ab3629663e83b90693d344e03eaaf36fee5833f79c3cc86d8420821dd4079be1ce37466116557d3c21d1b66f4c425dc2eb842737c5fc16c216807238554c4eff8d754e9764067cc0caae6a361e5ee8d761123779311b8bde741273"], 0x18}}], 0x1, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r5 = socket$inet6(0xa, 0xa, 0x7)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000b80)={{{@in6=@empty, @in6=@ipv4={""/10, ""/2, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe4)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r7, &(0x7f00000071c0)={0x2020, 0x0, 0x0, 0x0, <r8=>0x0}, 0x2020)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000d80)=ANY=[@ANYRES64, @ANYRES64, @ANYBLOB="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", @ANYRES8, @ANYRES32=r9, @ANYRES16=r8, @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="60f4eb3dc602d2e9d8ed46eb99569fdca6a2d6e38640ef8b7c4bb1ff72ea289242daad8c21c4616759e72d20cb9163c62821a5d0382b8654a57c112cac"], 0x32600)
fchown(r5, r6, r8)
ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000300)=<r10=>0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000f80)={0x4, 0x401, {0xffffffffffffffff}, {<r11=>0xee01}, 0x100, 0x6})
statx(r2, &(0x7f0000000fc0)='./file0\x00', 0x4500, 0x80, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = openat$dlm_plock(0xffffff9c, &(0x7f0000001580), 0x400000, 0x0)
r14 = openat$fb1(0xffffff9c, &(0x7f0000002800), 0x20000, 0x0)
pipe(&(0x7f0000002840)={0xffffffffffffffff, <r15=>0xffffffffffffffff})
syz_clone3(&(0x7f0000002ac0)={0x10004200, &(0x7f0000002880), &(0x7f00000028c0), &(0x7f0000002900)=<r16=>0x0, {0x26}, &(0x7f0000002940)=""/241, 0xf1, &(0x7f0000002a40)=""/43, &(0x7f0000002a80)=[0xffffffffffffffff], 0x1}, 0x58)
r17 = syz_open_dev$I2C(&(0x7f0000002b40), 0x80, 0xc286c32652fb17f)
sendmsg$netlink(r1, &(0x7f0000002c00)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfb, 0x10000}, 0xc, &(0x7f00000027c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="9fb5331356fbf8bf7336d2c1afaf15cad6a0fb375c4b4484c4af5ddefafa76845968fde1801fbd5e78ae900590a6534ac35d48a7743db78952f09e398db5d5796bd0b26e7ad71ca3043143e06aafc907af66a653ecd2f8488ac23560d0e01dee5df620337ea147ad7e9574815d7aa7eae2888ee59131365280976b5d857fba3b17ec2f6f8e90daceeb1f6e32141c32e6ce2697d346e50f1a438e7c9ed1c0f0cbbc11e7e0b4204e5a43ad80ed1b566caffef64b0dc364fc116c4f9651bd747724306f00668a7c49b123e4ab8cffefcda818ee18a7da1262f9e673347072376d58b7b24c84e380fbfa0c70116232c6106ea37a9e5191b29129436a9a36e2eae4b53e25a6f09c48e47d621e0fa9ff2865ea448c350800cb00", @ANYRES32=r1, @ANYBLOB='\x00!'], 0x3d4}, {&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xdc}, {&(0x7f0000002c40)={0x480, 0x800, 0x1, 0x70bd2b, 0x25dfdbfc, "", [@typed={0xc, 0x1f, 0x0, 0x0, @u64=0xffffffff}, @nested={0x3a, 0x96, 0x0, 0x1, [@nested={0x4, 0xaf}, @typed={0x6, 0x17, 0x0, 0x0, @str='[\x00'}, @generic="a4eb274ae31d6f44aafd24be1283b33485dcc40e298865857ec7", @typed={0x8, 0x9b, 0x0, 0x0, @u32=0xa}, @typed={0x8, 0x4f, 0x0, 0x0, @u32=0x29a0}]}, @nested={0xdb, 0x4f, 0x0, 0x1, [@generic="624a9f07bcc15e535c6e17b46bad7c101b236091b0c9c27f8ecf0c649ad752d50a237991688bf485a83f7fadb0bb6a844361a6777dbbda6d9f14e0631c6b2917b5fc5f30e9a491dd269d79cd9b79f47c89d7229965d404cceddf159cad131e3efb548ed853b578d7a408965d081a74e0de29e2968b89617daa576aa6a0616a265d4936d2b216dcda6f2a1338a3aca1a6b62bb58575e47c9e67ce1d7f08752ede611e982a192ab56517a9134693ae8013d617978f095af7746c8690fa664733e462f89a484545f91ea7b843027770289fb172e6f4541407"]}, @typed={0x8, 0x51, 0x0, 0x0, @pid=r10}, @generic="539e77104b8c19bb07d1cde69c89013aa0ad78011dc296e0cdd5227ee2dcac47d030c03daa7f628c81c4c05c540861b8a14bb3600f705c2e3d113355da0e597028de63f665524f557ce311ddc1672244b7df2d7538fe355f3d79a45977700f49d8f0f82bfcac7f96083120cd76a468c4e9111f98fdd385789fe73b88d9d0892b217d81a74ebb43c72aff9f3838aaa1fd8bf51b97c70c42e0b2ed4738d0ca55467a7e6abb39685c00fb38cccd5a3683947cca12ca27d14a54c6c0a2010014e3869885e0602ab00efa6fb07e4f96f6275fdb6c800ca9820e", @nested={0x219, 0xc3, 0x0, 0x1, [@typed={0x51, 0x102, 0x0, 0x0, @binary="948e0797208a2c20aaada73f20809055e662e9d6011178c1e4c448430713b67235ccfad1688269543159be2bef784005eaef3d2b478625f9b2312c35a29e5beef65d880360a3ada76fff566097"}, @typed={0x4, 0x116}, @nested={0x4, 0x113}, @nested={0x4, 0xee}, @generic="fdfe1b8f6cc3d77e6e96599cca96660f00ef5ba2a768da61f27d5a0a3cfcfd00ec7afe8cc5525aecdcfa74ba7e87fadb76cee68027f294f2619f624ac1698607936b5cfd07cc9b29771e0f9bcb8ef284760bd77faf764110959b7e5e4da8357a7515bcd50ada", @nested={0x4, 0x67}, @nested={0x4, 0x147}, @generic="e9716d08f7fe0a0872300e820f08d9d139eb2c921de93ea8ba79a6d8bf8261a76044ae7d08a1119b91d916f768ce1416f85f37c2407f9a610dd1994815983029de30092226d92c1a751ad9a51c79e3a09f544109daf191fb3ae0cd414d92057bceeb3207cc44964b65cf3313e0a19d614ab4124c56c752c3790aa6feefa8ab281fdb86a0", @generic="6e10184feeab24bf5592455c1a1fab467b8fc46e3def1263bb798ca38de812894a30e85bd2ffca27702359cbe615844f420a6533d620c8c7b9327ea1e5e3869a37b841aa3414f0c0f3893e3e8b8f45541ce888f3d96720209cf380eedf8d774c055eda239cf7b5b7e0fe4266e37a16aa8a781edf591baf57be8148f49da451a4e81650ebaebd15c1dce5f8e1ca3734103d5d4d3e67f237e63cc79e3e7be79acd4f857ce0c81c77618e1c9842e3dc451bb5f40849264140be0c41f4", @typed={0x8, 0x145, 0x0, 0x0, @pid}]}, @generic="eb62d13ef76547ee1084d004f03133738b6e3fd887211395f775e87e32de84359988595a20081c831d6f4c51ff1f90d44029926b73bef247add0f505d95d70112d337443aaa0b6bdf66b148e5bc4cb"]}, 0x480}, {&(0x7f0000000a00)=ANY=[@ANYBLOB="700100003100020026bd7000fddbdf250800b400080000001400600000000000000000000000ffffffffffff08003d00", @ANYRES32=r11, @ANYBLOB="080030df", @ANYRES32=r12, @ANYBLOB="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"], 0x170}, {&(0x7f0000001280)={0xb4, 0x32, 0x20, 0x70bd27, 0x25dfdbfc, "", [@generic="bd2b38047b96d44cd7bd093007a7e0b0c459e3c86f135928c751fce46041d8addd3c370c5f512ca424b668291a33e1db6d5bd9feb808e3128e178f42a4f132890de125c003fcf4584c48309e1b95aa088c3fee15b0fedadb248267c18994dfde243e43c7b4cc5da26df6baf30556dfbe42dfc474d73dfb0822872d28b56decb1a44ab8ee12de02730327dcfe836c017e830f2d0df58c90897e66fb08b97e22127370a5"]}, 0xb4}, {&(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x204}, {&(0x7f00000015c0)={0x1118, 0x3c, 0x20, 0x70bd25, 0x25dfdbfe, "", [@nested={0x1106, 0x7c, 0x0, 0x1, [@generic="c27148692d8d10a58d8e9f89190a5dceefa6114535108db53e71c14d5097e377852ee471f01dac5cf9b0bdb49cfdeeac90b74367463e0ec0b17f05c188cb0c3d87d687117fda8c11e0d9a1d2e2dd74a9d46b4c067f8eada87224d806cc061e199340263062acba46ef402529ee083b3ebb3b191d5ecbb20db247dc556c3df8efd66dd63870ca2603acc716e2c6383d27e7a3fcd34d9ce086e88d27642fec2f3bbebb2fe5c73a713f61898ccd468bdcd2adaf0a1b23ffde84c175cefb6c64e30a3885031b5c06ede660f2e9d22abf463dc757a3aa452c0ca37a6bfbf1529064c0e8ecca4ad2a3a3560a9ea0f2281f565d8afee1a0dc379be1ba76a6dfe499b15ae6b425c68803fdad181dbb9aa48c745b803f58f53d0b9a241ed718ad637f7a933d0c48169d5f3ef53ada270a0df9bd01394c070cf883857d9542828664e423baf2417af6cc5a90b72efeca58d98719795e140591b523e998a23ce5b6a220439d551f98a41512baabf91ac6d25c2cdce01cd13c28db03ae6ef1bb589772ba8616c87e84e2a2bf1b8f7ff8d351d7995bad7b6c8dcec3a55c911e1a6ab471e833622b9bc2090c09d92bfde6a5fa2415fae7f93f74b09260633f695c5d4569649dcbac6ef38529d1d7278d8fd01ddcb3d2b1befd856e292c1be1eea2ffef26ac25f2b70450c59284b401a0c4a5209b80dc336fe28a1f0462bb669d4667c180c3ed5453c59d61a26a82e4545e9f385fc3ced457a0ca9f63244d1b94125cea803fd5dd0e49eddfbda795b0c3d610b86b3bc0c5ee2e8faba4896a4b82fdbba5079900868cf2ced53ad5f5ab90ad4fca26512752a8c11f655f9e5a9304e50303becf87dbeaa77d321ec6c8762641c6fec100ee33436765ceb4a2c7f81cba67176a3fa3620e00422c46875fa81faf70f494616617ce0ce6ca21b180cc0f85ba5c1de3d7e284027d0ca94fb73d6bc0ec4d91e69207ce78a14198b9b24b50d5ec7200422f8e272070d75d4ca652808f864c4da5a25806c68b5250dbdf896f6ae43c5bd5a3a81e9535f538502fc8a80484c62864d40c96b4d79d62730b9c8ec829d40ccbbb9aef9ec7525a76a21cf02a14ae4c5d959a035ee1c06181ef435a22590c9c42ce065a5abc26a6510bad0e7ee486aac77d9d34b2f4330cca4a101bbfc76349cffca9b2b979624e47df74ea23f0e4c45ef78b856d92aa0dd6b7b021378c3363d8ac0e07cd88a7685c4b72b1bf7fa78f332a081b439cbb3eb9ebe64e3fef2a7e3b942c3f8b7d022ef39702d344c475102740ddaf160c3bb0cb05f4eaa236d4d8b81b59584803b224b168aecad9dd93e3365d35f68a93332f92e8597951778f6ed583e726661cb6535265ab6517a8499fdd224b6064484bda0cbb970dd926f906d3bb6bd78aa92e116c6a5f8242bcbcd6b6821e15ab63f89b95e24ee313b8f6ae5bc700a758bde4a73b9f098334c24eea07b2b4da644f59b2bdb60c794d6f7d12ea284209f6e30a9138a87dd22b4036c06ef38c04dfc9e653c232f9500e6e0b33cfba35a1847786b8c0cbebd5c0df63e325036b8b3cd97dc40aae7dba51e570a7b1b24a5122ce35158fbb0b0fc06fecf731ad03afd16debccb577e0840daa00e76510395209235a62d469aebc5ff75a653f01825acf37228c983e1a008ee9cc0e11adcccf7dec4710a57695a23a6c5c26000bc31a77ad62517e446c94cedc9c626b1248dd74bcb2faf8090e9b405038905c09c64e8b34d1581b4b8266cd2e1288423f314ca3918ed339b4da477ecdbb5a6ceb8a77bd55cadf92387ae43c9fd9a0ae99072192b80d4852d24d0ed0614adc41639579499a559e5a86efdf70a6c2911a96dad54a3bada6590f379b0099bd23b5422f09944934e671c118e7b7679b0b631712223ad50236838bdbfdd5d4967008dc50e97922d9fac45c59b3fe95ec2e9fbff30a538f33f467269ea7cf0032cd3d4cb6a932e22fb704d2152e69cd0c2ec537075e6cf8133dd763865e699454c7650344eb463c2f25ade4856e84c3402a62e8b33cd33186696c0c293df072ad2b059c323a6128f91ec75698cd2e6dcf35d20f1391a21f15be9cf1f62b14756ccf8d742e8c7a2ffb6ce5de584d8a6ace7424894952cc8e62c4f01d1ec62b423f3ac920ef4758de415ad82e9f7d7d52a67375c643d27b70797b47400354c2cf8210fde38f91b4c5e89f30ab4c9e8560cf205f2889fc96ffeea80306eb0688b945a0b466f63e1d9516b962f01d10c1f9a091df211abab2c25aa150d0445aa4733e528e822dbe8532719719d16eeeb6cc83f2370884a9a75dc9149acde08e764d80f4e15399585aad42f0aa73a0ec174d131cf68055ad8d3d74676082a5406e9f8d7b22523ce728524cd66fd1b494cd75c724819ba4c963cdf5f0f099b9464ee8a6652dcd74f01551f69018eac67b22601a5fdd50ed5509973d88dad265583d1a6500e2d6bee4fe8eeccb367d7603d6145dd2dfc6c638afd591cfd5949bb845e5d00d75a7e31989ee1bfb030b1dadb0f75050e896ef6c33a0eee7d06ed1d9e9da79a77e39e0bb7fddc1f8c0b3d5d1305e31ee2246c1034d66c0e0a93f478cefbef02c2926771531675809f3856cb9359b4188e0e5b299d0ac68506d3d379bde7d540d7c6999d80f7ca2edd9cbb580fa7d13eceb95a3bf76937bc36a66e03e5000a8c455cd81cd44fdfb249b8aac503439de9a8abb28e49407549b00e20ea186d470c95f2589eaf6c223e62978695ca80aabf093357476bc2a89cf614acf896964e5cf00d2851deb3cc8b94d4a4db8db3a16452521d8c77f48455db7b792967b542e57ac94f92037384e415bef00ce264a492b38e9352bdd12cbc32ebcdcdf972bdcc2d524b10d74dffa3fb45b02207b850f32f629e3b74a105887072c480d205e2356ed1ad051952cbfb53d683bff47b80f4bb691ca82db959c5ee9b6dfe9479d2dbe6251d23b3349d2a5bf018dd1f7bd3214b5727843a4942c4927124c97fb74d50ba8cf2c0b781206417e0dbab5ee84f0cad3bf3b144888f8e92edc1f774f7c8d11d07b2658855f32ab6fb605669e1f2108eddfc918cd32a5fe2a879135097ad9930081fa4679aac0b68c1ef2d09b26654fea79df3bad516374b66dd30dd0e75c3973c0f3faa92dc2a2a1cf398556ec561dd8857c2c7bb55162862dd9c3055c2ff799bf793275c139f0d158a3a9e38f7024d70141865daca0aec301306f6eb3c56c7e74d15d7d2ae93b95e251a9545f4f5e5e7aed15db6acfebd96da1500822ea3c006a19f80841a07072cea76b6e3abd00a6da6fd9e8d2b59988a2c1791aadb9f1227576c911c760d2db5fbab5fea46f0d8529898210c519a8395ab9d2b6c7cba8bb988b0232bf8f2f5444bffd8f4cc4bda1973c60ab66f9d7af4fe7a48f672b6f03b37bbbf20981b99d03ae50d6816ab057917f74be453fdcebb642f4248f4b4a2f64f5fa7f263c99849640c6d04b02b978b31bcaf3e2fa2ef4c4b9d14def34e1b88351eeb84f3e3c3f6ceecd8be3d448ce17806a8d24f12c09810e8986feb0acea5a53c02976d9eded337d0dfde4f7bab2c2a30e3ac95d39d3dff92a7e5358cf4a60ec37488192ca262d5ed97919a459a1f2eb8d8707f94a85646cba0d3a2f5031e398d952a3231d3626257d8b1e68105ed83298404e9f5827046423c09d926a95a0fba712361411898871e8c364d9f1db57a054dbdc8b8f8fb73f52e1db6745313736fe620a04cd043c7b3558c6f9c1d19f50d6138a47965c9d52e05cb2a3b2d871e9d18c6b1c3640eb4f2f5c9eb3e201cd3656518e676b707cedf5ed0340cd012acdb2be91ebfedd788839b257a401bda8a8998fab6f63abd12e3c3aa556aa89a5be93dcf923793bae79a8563eb907a1f4979a77b1386c195ee43d4a18f5a5c3f56f06c9c0d061e20fe7ada8a7079e8cb47220f3cf7504747e688687d678f83bad091cb8fa80e957c6b09451e3a34249299c9988abf54938fa3b2ec1d653171994ed94bb4aaa9a1abfeac2a6645707d5ad0f138fa306aa4a0fea2bd9bb1501cfd70aa75a7a3e70b0cbad47b231c26a6bd6275853b3e5d813baf7e09b88d05766acb41e7ec4172072e06194b13039c5c01e4c126831f6dd3aa58d83574203f92ceb975818b4fab9640308c11a1ab34a8c484bd1a44204a4d902646adc1590d5577896471eb26143cb2a32eb995d10c5f68aacdd77d73a2459974b3f017eff609949abda581edbc4a86bcfbe89ff63f742c6056afad6d1d3c92352080f81adbcbb1db089a3f96ad56fc7aebabfb5c84c36436a2e4c089cbb1825040b3cf4f1360281aff2472f69fa9ab54438d18a90f0ab5678fcffb32974ad1197fe8485c55bc59b1855e8c7e834b526c7c611961e222e9afe7bb8ad76b31c284870c157104262286e398a6991f3dec71de710d175c8c472e54571b8b41250a9f52c9b0a010ccb580e70d9e57d0c06719471fa3fe2714a523a3c26780f9d85df9b6ecee0816aa958f89eb58b4f2c04602318a2bf5361d15e83d8a6b70c22bdc927c95ead8449ea88ef5d08b8548d2d4aea27ceb5076b2df8cd7224a941f0fa0a7c13c601a342fc2d880fe87ca43e61d4cca305fb40d1ffea20be649fb43761fa4b2b712cb13b692c9792d5160c12be1952afa6c364af8af17301180b64da525cbc9cbeff82c97704f628bf37077a34a05fb663e0f5afdfaa1a3e9db79315ccc9f27fde28351a9669ea55f6232c652326b9ed3c3d8c67505d35900621330293996411df063be2179ea0c73c890e58c204d5f117c9f59cf7d5496109006d0571464ea5be88c9b076cd8f9e3ff1a10bd8003e47103e4c4a3667f1971ccf2eb506419f55474d57fb0637e6f686d013295c6fa142d225e85718b86c8742bc36993bee8bfdd3b8c12239dc06de52e527bced6b11d9fa2017ef1f11e04310ed906748252b86b09f0c6e18e2174b373cc9b3d15b9f2d4400c763604840f041de5adee4ee5823e608f46cbc964238725f59193b6abb664524763e83b4fd3cd5d9bbe51423832ec53799bc27213992b3794f2f05854856f9cec4795424e16dfffa5c601180e0603563408ff88a85725c797b3b809b877b7f411f77e09cd3e42bc7f6f588762fc96feafa488400e7d98a71f7a2c9425323c6a853712681ccecd0d944267ec61012e60900f81da6c7909172fa07bbb67f202f4e797407eeca8f5169664f1d6fffc2ccd59a12e54fbcd95e0403e4dccd08b1eb656f869505b39fa3fd843052a5df6399e3684b8086f2f6f0d3b0146059d69cce488085951e21779606f77766e397ace4fb2de2472e81ba298ef996d8dc9625c6921156c0521f3dc447d94f926cca6d0ec56a70bb59e7f67c900b5e3f0707fae3396ac6cb406fe9ef7f8217e262331a14c96d61c6731106f42967e830ff4a52e4cda2c6b4f4935e3bf469493a81990e589d11c1a7dc33caeaa339bd35de23e65b75343f791949e91211b0dd36ccc6f8a8317c88a3782ea9fb37d9b50fda26d58cd39a8439f801ffe5ee4c49ff86de11234972ca761ca98b24d75379c7dd7d73f2dcb8dfa338e564472487c7d1ad355d4864690fdef243c0b27ece8a75d75c3c00593dea701be0c2fb9206977d40dfe8b72648872436ccef28b15647342897f62c8f805f20c9e7fbf65dd9215baefe942497f9f65325bd61693812d078a42aa8eb3146634a39c69d8a584400d87731dd731d8e188ea749a50dd77136be34ae9d93f71c822928e029b2b329474dcb05dbb2a45ca3a3d21fc1cf173c7083f33c2d3b2bb98d73a7b7", @nested={0x4, 0xbf}, @typed={0x8, 0xb2, 0x0, 0x0, @fd=r13}, @nested={0x4, 0x6d}, @generic="330b1d1f70003da1b40483b61ceed89208eb0c268fc1a6738ab478341e51cf47ddd8e0e8c3c6ee578aa986803865f9a83eb2d6336bb16a28aa42dec36008625829b59f67dc49abb2d76e88a8745600a5a0cb26faa1c1ea57f46a33f235d0d9d164a6900b986e09f0239dc86dd8d40e443b7e002d889e06e75a786ef16594d8dace2de39d0c01e51db40ecbd087303f7767f77e85432cb2061325a28d3c20cde1281d43e3a4241d4246eca39107c3dc9d984880fb429c091b1ed1fc62c789a02367d324332af1c2c54ab6c8c78fa2531ba02029680e01bcf562e0b0ee1c698ba3814b8e0348fd0ec709051274543ba77046be"]}]}, 0x1118}, {&(0x7f0000002700)={0xc0, 0x40, 0x8, 0x70bd27, 0x25dfdbfd, "", [@generic="a92eea9f4ded23e5edb9afec44b63ad1c5a9e17e58d369563575f1a96aa32122744dbf3e6e431d8e9a280b72e5cbb312bd548ea096d52851d2e61bf080c2da5bd2a5615d8330267b2d9fc17fdbbaec56d9587f3c3457b7e387ef02d60e8ab37c47751be69fb28bb72d5ab90c2bd6ec4ca29df6b836420e3817914cadeaf328dd668c995afd079cb36751bb6fb34792c90eb7a925ba60acc9e0448b6ac95aea316e9ef9d83cec7494", @typed={0x8, 0x101, 0x0, 0x0, @fd=r2}]}, 0xc0}], 0x8, &(0x7f0000002b80)=[@rights={{0x1c, 0x1, 0x1, [r14, r2, r1, r15]}}, @cred={{0x18, 0x1, 0x2, {r16, 0xee01, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r1, r2, r17]}}], 0x4c, 0x40800}, 0x800)
r18 = socket(0x2, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r18, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_coalesce={0xe, 0x4, 0x1, 0x10001, 0x1, 0x5, 0x3, 0xff, 0x400, 0xfffffffd, 0x6, 0x31e0be6b, 0x4, 0x7, 0x3, 0x3, 0x4, 0x5, 0x2, 0x6, 0x7f700c6, 0xfffffff9, 0x4856}})

550.615461ms ago: executing program 3 (id=1087):
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'ipvlan0\x00', @remote}) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, &(0x7f0000000080)=0x1, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0x241, 0x38f, &(0x7f00000007c0)="9f44948721919580684010a40800", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r3=>0x0}) (async, rerun: 64)
r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000003c0)={0x0, 'batadv0\x00', {0x6}}) (async)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
r8 = fsopen(&(0x7f0000000200)='omfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async)
r9 = accept4(r5, 0x0, 0x0, 0x80800)
sendmmsg$alg(r9, &(0x7f0000001480)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647", 0x9}], 0x1}, {0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000600)="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", 0xfa}, {&(0x7f00000008c0)="98d78a076c197798e7d9e1e167d2a5c61b4a829628926d8ce19ca33f29a49c7819b0e49e16e70ffbc60e5f91d5136fe03d95839af73c0e010e3b3f4bb99ca38b5d75d4b5e2b568b515003d387ce5e5e1ee6322795b38700069f3557fa46fd6a75cb6d93b445fc3e393aeca59191caa7a9199a84751c320c30c76396df0d772a373c93f94034f3ae15dcda9cad1aa39d937759887865c2f", 0x97}, {&(0x7f0000000980)="1a8c6df076dc76855e4279f29b4cd517763ce4", 0x13}, {&(0x7f0000000a40)="d96f3cbafaae9d8ac1bbd772210ba592f951aa58beb7c802965f91e989266818cd23d585a90eb1738b800e4a6855", 0x2e}], 0x4, &(0x7f0000001500)=[@iv={0x10c, 0x117, 0x2, 0xfb, "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"}, @assoc={0x10, 0x117, 0x4, 0x5}, @op={0x10}, @assoc={0x10, 0x117, 0x4, 0x2}, @iv={0x78, 0x117, 0x2, 0x65, "22269697499e812c46b5d5b25fcf46ee59f61b337bdf1790bfcc422a6a6c78caa3bb46314f65925d0000a0e4a56c64bb7bed358b46810639df71a9d2d6eb1d1781616ef1f28b21972251b53abad92fb80ba863d95e16265bfa256110732422badfa15b109c"}, @op={0x10, 0x117, 0x3, 0x1}, @iv={0x68, 0x117, 0x2, 0x55, "b8ee77307fded607e6eb9a32ba9c61e8322085b20b584ccc4da2a68860141a697d28efc9d08f7fff07aa6ec1504fd86f718bfc43a5a2422cbfdb3469ce17687edc767ecb4b8127b0150becb3b6602081f507dc0844"}, @op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0xfe7}, @assoc={0x10, 0x117, 0x4, 0x5}], 0x25c, 0x4000040}, {0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000dc0)="dc341d2b8c2af8d148a2767e1c68e0d0fccbd228690a3b2e2a3d4a05af78bc651873c7928aec299bb4a5ce87d08a7036d9c62e498efe02dc8d847035b598dca724492590dbff768ff58b2394bb5860cc2b14ea53fc29e02154725d3f48d37bee9ff2f512eb218cfed338e9b5330fa51272fcf94bee9a0e5f1b004a96a2468f47ef76ed8b3e5e33f44e1b113f56484191c2dd2e4b67440793f00e30715c49bb06a9f841beba06838e62b0e99a71e8256e40ca", 0xb2}, {&(0x7f0000000e80)="f432c484e4c7432a1756f44a3543aeef4ac104fcefeb1718bee42dd19d604c981edb197e0a3caa8a5f", 0x29}, {&(0x7f0000000ec0)="dc31ada4865f71021a2855c3741e6d010cf4a8c4ed630ad3005615ee60e2385fc82964f106c5434637c5b6734a0a1476e6fa515822c67b69432a9128ee8ed010116eca85a0c7ecd877e77034b8ed76b2cffe3eca0a3677ace23e7ed4f7fb3a4785bbe7189a5fc299ee6af17ed371c18b6e7882dee2766ecb9b6f16dc04cecf6eeb0de1749ee62df47dac509d6b72fd1ae5a7cbc54af1d3ec2c2f04e8afeebca231c83b755906862abebc91c8f1ab22a57cbb8e70e4ca97b0c90947cb9dca47caa24ed81d3d2f25aa71709f624ed5dd9ecc4af7f975dfb3466e584c73cfff4cca3bf0bc2c9c19", 0xe6}], 0x3, 0x0, 0x0, 0x8000000}], 0x3, 0x40000)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x2002)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0xfffffffe, {0x0, 0x0, 0x74, r3, {0x10, 0x7}, {}, {0x5, 0x9}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async, rerun: 64)
r10 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) (rerun: 64)
mkdir(&(0x7f0000000140)='./control\x00', 0x166) (async)
close(r10)
inotify_init1(0x800)

440.542537ms ago: executing program 1 (id=1088):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r0, &(0x7f0000000180)="0000000000010000000000", 0xb)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='Test Gadget\x00', 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0)
write(r1, &(0x7f0000000500)='Conf 1\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0)
symlinkat(0x0, r2, &(0x7f00000005c0)='midi.usb0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.2/strings/0x409\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.2/strings/0x409/configuration\x00', 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.2\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r3, &(0x7f0000000740)='midi.usb0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r4, &(0x7f00000007c0)='dummy_udc.0\x00', 0xb)
nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/bus/usb/devices/2-1/bConfigurationValue\x00', 0x2, 0x0)
write(r5, &(0x7f00000008c0)='2\x00', 0x2)
write(r4, &(0x7f0000000920)='\n\x00', 0x1)

440.044027ms ago: executing program 3 (id=1089):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002400)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r3}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)="a611b468a812e8695844bde193f18ca39720def104", 0x0, 0x3ff, r3, 0x0, 0x100000000000000}, 0x38)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000023c0)={0xa, &(0x7f0000000340)=[{0x0, 0x2}, {0x0, 0x4}, {0x1000, 0xffff}, {}, {0x1, 0x100}, {0x0, 0x8}, {0xfe00, 0xdb}, {0x9, 0x10}, {0x6, 0x5}, {0x9b32, 0x2812}]})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, 0x0, 0x48000)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r0)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000002500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r5, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c)
r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$CDROM_LOCKDOOR(r6, 0x5329, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x8}, 0x52)
ioctl$CDROMEJECT(r6, 0x5309)
ioctl$CDROM_NEXT_WRITABLE(r6, 0x5394, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000012000/0x3000)=nil], 0x0, 0x0, 0x6)
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000011f000/0x2000)=nil, 0x2000, &(0x7f0000002540)='\xb1\x91U,\x91\xc3\xe5i\x13\x03\xf7A\x17\f\xac\x1c\x00\xcfBj\xd9\x9d^;\xc4\x11\xef\xe4G\x8eq\xccp\xd5\n\xfe\xc5vQ\x9c\xc9!\xc8\xd6\xa0I\xce\x84=\v\xd367\r\xd1>\x11j/\x1aW\x83\xb4\x8f\x0e\xce/,\x87(}\x95Vx\xfd\xe1m\xdf\xfc/\x9b\xf2\xb1Ck\xabQ\xf1\x1b\x03[M\xd1\xdb\xb1\xec\x01\xa0sJ\xc4\x9a\x82\x0e\xf6\xe2\xc0\nF\nC\x9e\xa4\xa8P\x83\x8e\xd6p7\x91t\x06#x\x03Z\xad,=%\x04\xcc\x18\xb95,q\"\"t\xbe\x1e&\x94~>R\xad+IE\x9c \xfb\xc0\xfa\x15W4^.Q\x1c\xe1\xd3\x82\x7f\xebyx\xcf?\x94\x9a\xc8\'\x0f\xf2/\xad\xf88r\x05Sr\xe83ti\x1b@)\xd1c\xbf\\\x93~\xd2\xf7\xcbgN`Q\xc4\xda\xcd_\x02>\x7f\xb4\xcb\x15\xbb\xbc:j\x89\xfe \xe8?\xf4\xa5`!s\x93\x89\x1a\xecN\n\xe0\xd1\xb2\xe8\xbe\'\x90\xf9\xb5_\fGO\xd9\x9b@\x01\x17F\x98\xa1\x9d\x92\xd9\x83\x1e\xe9\xd97`\xa3D\x87\x9d\xdc\xaa\xa8]\xebDb\xacK\xff\vM\x06\x9ae\xd4\xbcp\x18f\xa7Z\xd2\xe4\xe2\xbd\xf8\xfaf\xa5\xf3\xe5\xd4\x1a1v\xfe\x83\xb5\xe2\x9aN\x94\xe4\xda\xfd\xf9\xac9\xb0\xa9\x0e\x0fi\xa4\x98\xcb|W\xb9\x17\x17x\a^\xcb\xf7T\xef\xe6\'\xc2\x1a\x0f\xbc\xfe\xae=\x14\xa7\xc6\x97\x91\x03\xbe\xca\xa4<\x1c')

280.696229ms ago: executing program 2 (id=1090):
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x0, 0x0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f00000000c0)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r2, 0x2, 0x16b, 0xb}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r5=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0xe, r5}, 0x10)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=<r6=>0x0, &(0x7f00000002c0)=0x4)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000300)={@private2, <r7=>0x0}, &(0x7f0000000340)=0x14)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r10, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000940)={0x32c, r0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x190, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#-+\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@,!\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x102, 0x5, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x94, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4c, 0x5, "806e3bd33076dd55e4da3aae695b9b848305720862862f9a54e486b2b9b2f5101169a296f82599653320febec78ac6df7441c22e5137b5a89aafd3e175f87bb1c91058416406e4b4"}, @ETHTOOL_A_BITSET_MASK={0x3c, 0x5, "1dc1157b29d1beaee6929983c9b7624d5047e54e961c9b136433d86e6c223bb44013b2e442e872c5ea79bdf2944f9b817950b3094289f50c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x44, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}]}]}, 0x32c}, 0x1, 0x0, 0x0, 0x80}, 0x2)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x0, 0xe, 0x0, &(0x7f0000000540)="db759469e36512be2770717f865d", 0x0, 0x2, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000900)="ffffdd014376ea94fe6f22446ab33726e5de056400000000"}, 0x4c)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2000000002ffff, 0x0)
socket$packet(0x11, 0x3, 0x300)
write(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)

148.882753ms ago: executing program 4 (id=1091):
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300))
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}})
syz_io_uring_complete(r2, r3)
syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
r6 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r6}})
syz_io_uring_complete(r2, r3)
syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000f00)=@ublk_stop_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207507, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}})
syz_open_dev$ublk_chdev(&(0x7f0000000080), r5, 0x100)

59.741932ms ago: executing program 4 (id=1092):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x3)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x1, 0x0, 0x2000})
ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000140)='log\x00')
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086201, &(0x7f0000000400)=0x1) (fail_nth: 3)

59.558252ms ago: executing program 4 (id=1093):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20"], 0x74}}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000100)={0x200001, 0x81, 0x180000}, 0x20)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x3, 0xffffffffffffffff, 0x4)

835.681µs ago: executing program 4 (id=1094):
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904"], 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSCTTY(r1, 0x540e, 0xac)
gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1d, 0x800000000004, @thr={&(0x7f00000006c0)="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", &(0x7f00000005c0)="286f13cbd0925cb0332813632aa81916b192b673be73d8cc14d26af48d4ad5c5a78470daa1e6767119d1323cf9f068be1b50d9b840a5526369c13286e23c5ee01c04ee2e39effd642ef081000000000000008ab005bdabccd0ae5892fa94d9465a7d51ee4a01dc6344ae589a426db0c995a400dcf291b0ab3dcfcc0e7d09f1b6fe7620808c1450724ff86e1505ccfd70932c4dc03044e1ef31e5b38869dd884df46a4328ac0ddab673ede4699903c0a2ef640db679353fc8d0afa7914677114ca3918110f8cc6346be834ae7156ea3c11f39f022acda0088e590dcd43cd910073bc5968ecb2237"}}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1)
r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'bridge_slave_1\x00', 0x10})
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r3)
ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x6, &(0x7f0000000000)={0xfc, "e922fe53e14fcad1ebe6ff00000000008100"}})
ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]})
ioctl$XFS_IOC_RTGROUP_GEOMETRY(r2, 0xc0805841, &(0x7f0000000300)={0x7fff, 0x5, 0x7, 0x9, 0xff8})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r6, &(0x7f0000000240)={0xa, 0x4e24, 0x5, @local, 0x4}, 0x1c)
r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r7, 0x7a9, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000000))
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f00000000c0), 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000004000000040000000a00000013080500", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0207ecc85206d43f9173465968a8e90f0010000100000000000000000000000000000000000000343868df2f1751e09b5c354f9212175bea90ff596d18f360001fbf26e8b55d9bb3321ae31c6f0370252e6b26e7da4b03d00ffaa3d3b8d15429a6930514cf467dd4b6522a21d70d2eaec7f0", @ANYRES32, @ANYBLOB], 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r8, 0x5b, &(0x7f00000001c0)}, 0x10)

0s ago: executing program 2 (id=1095):
mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./my_config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./my_config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000400)='./my_config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='./my_config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./my_config/usb_gadget/g1/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0)
write(r0, &(0x7f0000000700)='0', 0x1)
r1 = openat(0xffffff9c, &(0x7f0000000800)='./my_config/usb_gadget/g1/functions/uac2.usb0/p_volume_present\x00', 0x1, 0x0)
write(r1, &(0x7f0000000900)='0', 0x1)
openat(0xffffff9c, &(0x7f0000000a00)='./my_config/usb_gadget/g1/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0)
write(r1, &(0x7f0000000b00)="05", 0xfffffffffffffdbf)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRESHEX=r5, @ANYBLOB="323b86a2b9fcf7b4f6c1b35e4f20e84c3caf9802d2ce42e3e6130e618437ac92d33cdcf4c3000b88fe3fefbc5d31b7815ea9a8a793e0816d4cb7fe41a71943b3786f6dba76fe1ad880ea4b071c285cb341fe575f02245b4205ccd446b1e865ae3d886cc292b6dddb97f43fd2e0f37cee1dca07b52cf1ef8f96649f46f0e0158b32c9b764a5043bfa7e04909523b7186049aa78dda55b714ea55617d9ce68beec3fda226b0e3e0467954c5dd669f800c64e2634e19e05324c832b7b77d5ad27ca47c3a1b35ca346274dcc77b7db62a8898ac0978c0f1ec0bdcdbf622bf79ec5116ac9275d3f59e0", @ANYRESOCT=0x0], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1, 0xffffffff, 0xfffff4cf, 0x4007, 0xbe9, 0x48}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044811}, 0x20000804)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4010004)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"})
symlink(&(0x7f0000000e00)='./my_config/usb_gadget/g1/functions/uac2.usb0\x00', &(0x7f0000000f00)='./my_config/usb_gadget/g1/configs/c.1/uac2.usb0\x00')
r9 = openat(0xffffff9c, &(0x7f0000001000)='./my_config/usb_gadget/g1/UDC\x00', 0x1, 0x140)
write(r9, &(0x7f0000001100)='dummy_udc.0\n', 0xc)
r10 = socket$inet6(0xa, 0x5, 0x3a)
sendto$inet6(r10, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000040)={0xa, 0xfffd, 0xc9, @mcast2}, 0x1c)

kernel console output (not intermixed with test programs):

5] Code: Unable to access opcode bytes at 0xf7fe7fc2.
[  185.276291][ T9215] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127
[  185.276309][ T9215] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000900
[  185.276320][ T9215] RDX: 0000000000000000 RSI: 0000000000000108 RDI: 0000000000000000
[  185.276330][ T9215] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  185.276340][ T9215] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  185.276349][ T9215] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  185.276372][ T9215]  </TASK>
[  185.768095][ T9225] bridge_slave_0: left allmulticast mode
[  185.770196][ T9225] bridge_slave_0: left promiscuous mode
[  185.772836][ T9225] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.793171][ T9225] bridge_slave_1: left allmulticast mode
[  185.795503][ T9225] bridge_slave_1: left promiscuous mode
[  185.798422][ T9225] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.845969][ T9225] bond0: (slave bond_slave_0): Releasing backup interface
[  185.876371][ T9225] bond0: (slave bond_slave_1): Releasing backup interface
[  185.891224][ T9225] team0: Port device team_slave_0 removed
[  185.901134][ T9225] team0: Port device team_slave_1 removed
[  185.904297][ T9225] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.907753][ T9225] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.913499][ T9225] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.916350][ T9225] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.922873][ T9225] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  185.944358][ T9071] bond0: (slave syz_tun): Releasing backup interface
[  186.164487][ T5829] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.191141][ T7820] usb 8-1: USB disconnect, device number 23
[  186.236508][ T5759] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  186.259004][ T5759] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  186.263789][ T5759] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  186.271189][ T5759] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  186.276870][ T5759] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  186.331462][ T5829] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.359706][ T5855] legousbtower 6-1:14.57: interrupt endpoints not found
[  186.371549][ T5855] legousbtower 6-1:14.228: get version request failed: -71
[  186.374614][ T5855] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71
[  186.385999][ T5855] usb 6-1: USB disconnect, device number 18
[  186.524024][ T5829] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.570671][ T9242] zram0: detected capacity change from 0 to 8
[  186.710140][ T5829] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.756512][ T9260] netlink: 'syz.2.821': attribute type 1 has an invalid length.
[  186.756541][ T9260] netlink: 'syz.2.821': attribute type 2 has an invalid length.
[  186.759109][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.821'.
[  186.791855][ T9258] CacheFiles: No cache directory specified
[  186.829049][ T9228] wg2 speed is unknown, defaulting to 1000
[  186.878160][ T9266] FAULT_INJECTION: forcing a failure.
[  186.878160][ T9266] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  186.885154][ T9266] CPU: 2 UID: 0 PID: 9266 Comm: syz.3.824 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  186.885174][ T9266] Tainted: [L]=SOFTLOCKUP
[  186.885178][ T9266] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  186.885185][ T9266] Call Trace:
[  186.885189][ T9266]  <TASK>
[  186.885194][ T9266]  dump_stack_lvl+0x100/0x190
[  186.885212][ T9266]  should_fail_ex.cold+0x5/0xa
[  186.885226][ T9266]  _copy_from_iter+0x1f4/0x1690
[  186.885247][ T9266]  ? __pfx__copy_from_iter+0x10/0x10
[  186.885266][ T9266]  ? _copy_from_iter+0x270/0x1690
[  186.885293][ T9266]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  186.885316][ T9266]  skb_copy_datagram_from_iter+0x11f/0x720
[  186.885331][ T9266]  ? iov_iter_advance+0xac/0x6d0
[  186.885348][ T9266]  tun_get_user+0x1889/0x3c20
[  186.885368][ T9266]  ? __pfx_tun_get_user+0x10/0x10
[  186.885381][ T9266]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  186.885397][ T9266]  ? find_held_lock+0x2b/0x80
[  186.885425][ T9266]  ? tun_get+0x191/0x370
[  186.885436][ T9266]  ? tun_get+0x191/0x370
[  186.885450][ T9266]  tun_chr_write_iter+0xdc/0x200
[  186.885466][ T9266]  vfs_write+0x6ac/0x1050
[  186.885478][ T9266]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  186.885492][ T9266]  ? __pfx_vfs_write+0x10/0x10
[  186.885500][ T9266]  ? find_held_lock+0x2b/0x80
[  186.885521][ T9266]  ksys_write+0x12a/0x250
[  186.885532][ T9266]  ? __pfx_ksys_write+0x10/0x10
[  186.885541][ T9266]  ? ksys_write+0x1ac/0x250
[  186.885551][ T9266]  ? __pfx_ksys_write+0x10/0x10
[  186.885563][ T9266]  __do_fast_syscall_32+0xe7/0x970
[  186.885579][ T9266]  ? lockdep_hardirqs_on+0x78/0x100
[  186.885594][ T9266]  do_fast_syscall_32+0x32/0x70
[  186.885608][ T9266]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  186.885623][ T9266] RIP: 0023:0xf7f94fec
[  186.885637][ T9266] Code: Unable to access opcode bytes at 0xf7f94fc2.
[  186.885642][ T9266] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  186.885654][ T9266] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280
[  186.885661][ T9266] RDX: 000000000000ffdd RSI: 0000000000000000 RDI: 0000000000000000
[  186.885667][ T9266] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  186.885673][ T9266] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  186.885679][ T9266] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  186.885692][ T9266]  </TASK>
[  187.178881][ T9228] lo speed is unknown, defaulting to 1000
[  187.201623][ T5829] erspan0: left allmulticast mode
[  187.204143][ T5829] erspan0: left promiscuous mode
[  187.210575][ T5829] bridge0: port 3(erspan0) entered disabled state
[  187.218630][ T5829] bridge_slave_1: left allmulticast mode
[  187.220666][ T5829] bridge_slave_1: left promiscuous mode
[  187.223634][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.240444][ T5829] bridge_slave_0: left allmulticast mode
[  187.242633][ T5829] bridge_slave_0: left promiscuous mode
[  187.244898][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.387251][ T5894] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  187.558845][ T5894] usb 8-1: Using ep0 maxpacket: 8
[  187.565608][ T5894] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  187.577415][ T5894] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  187.582316][ T5894] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.625923][ T5829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  187.631865][ T5829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  187.636315][ T5829] bond0 (unregistering): Released all slaves
[  187.645879][ T5829] bond1 (unregistering): Released all slaves
[  187.670599][ T9290] syzkaller0: left promiscuous mode
[  187.672401][ T9290] syzkaller0: left allmulticast mode
[  187.920366][ T5456] 8021q: adding VLAN 0 to HW filter on device eth1
[  188.052413][ T9228] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.054840][ T9228] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.057789][ T9228] bridge_slave_0: entered allmulticast mode
[  188.061512][ T9228] bridge_slave_0: entered promiscuous mode
[  188.070224][ T9228] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.075231][ T9228] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.077721][ T9228] bridge_slave_1: entered allmulticast mode
[  188.080709][ T9228] bridge_slave_1: entered promiscuous mode
[  188.133519][ T9228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.141163][ T9228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  188.187705][ T5822] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  188.216587][ T9228] team0: Port device team_slave_0 added
[  188.220640][ T9228] team0: Port device team_slave_1 added
[  188.248775][ T5456] 8021q: adding VLAN 0 to HW filter on device eth2
[  188.319209][ T5829] hsr_slave_0: left promiscuous mode
[  188.322016][ T5829] hsr_slave_1: left promiscuous mode
[  188.325184][ T5829] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  188.328665][ T5829] batman_adv: batadv0: Removing interface: batadv_slave_0
[  188.332001][ T5829] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  188.334836][ T5829] batman_adv: batadv0: Removing interface: batadv_slave_1
[  188.337875][ T5829] batman_adv: batadv0: Removing interface: vlan2
[  188.345129][ T5829] veth1_macvtap: left promiscuous mode
[  188.348863][ T5829] veth0_macvtap: left promiscuous mode
[  188.351090][ T5829] veth1_vlan: left promiscuous mode
[  188.357336][ T5753] Bluetooth: hci3: command tx timeout
[  188.359311][ T5822] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  188.363541][ T5822] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  188.367329][ T5822] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  188.370446][ T5822] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  188.374092][ T5822] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  188.378169][ T5822] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  188.384672][ T5822] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  188.388691][ T5822] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  188.392155][ T5822] usb 7-1: Product: syz
[  188.393977][ T5822] usb 7-1: Manufacturer: syz
[  188.400189][ T9311] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  188.404675][ T5822] cdc_wdm 7-1:1.0: skipping garbage
[  188.406410][ T5822] cdc_wdm 7-1:1.0: skipping garbage
[  188.418347][ T5822] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  188.420677][ T5822] cdc_wdm 7-1:1.0: Unknown control protocol
[  188.539903][ T5829] team0 (unregistering): Port device team_slave_1 removed
[  188.552450][ T5829] team0 (unregistering): Port device team_slave_0 removed
[  188.605564][    C0] wdm_int_callback: 1761 callbacks suppressed
[  188.605589][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  188.610205][    C0] wdm_int_callback: 1761 callbacks suppressed
[  188.610218][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  188.614572][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  188.616763][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  188.619097][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  188.621322][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  188.623465][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  188.625630][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  188.627936][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  188.630175][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  188.632348][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  188.634472][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  188.636677][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  188.639075][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  188.641751][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  188.642750][ T5829] team0 (unregistering): Port device dummy0 removed
[  188.644349][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  188.649146][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  188.651294][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  188.653555][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  188.655845][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  188.670538][ T5896] usb 7-1: USB disconnect, device number 17
[  188.670874][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  188.674558][ T9311] cdc_wdm 7-1:1.0: Tx URB error: -19
[  188.694397][ T9228] batman_adv: batadv0: Adding interface: batadv_slave_0
[  188.697461][ T9228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  188.707562][ T9228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  188.715867][ T9228] batman_adv: batadv0: Adding interface: batadv_slave_1
[  188.718940][ T9228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  188.730953][ T9228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  188.773093][ T9228] hsr_slave_0: entered promiscuous mode
[  188.775402][ T9228] hsr_slave_1: entered promiscuous mode
[  188.778345][ T9228] debugfs: 'hsr0' already exists in 'hsr'
[  188.780727][ T9228] Cannot create hsr debugfs directory
[  189.006780][ T5456] 8021q: adding VLAN 0 to HW filter on device eth3
[  189.189009][ T5456] 8021q: adding VLAN 0 to HW filter on device eth4
[  189.357642][ T9228] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  189.369333][ T9228] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  189.376960][ T9228] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  189.388351][ T9228] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  189.394542][ T9228] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  189.441801][ T9228] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  189.445534][ T9228] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  189.452778][ T9228] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  189.553028][ T9228] 8021q: adding VLAN 0 to HW filter on device bond0
[  189.566124][ T9363] netlink: 'syz.2.833': attribute type 1 has an invalid length.
[  189.569781][ T9363] netlink: 'syz.2.833': attribute type 2 has an invalid length.
[  189.572828][ T9228] 8021q: adding VLAN 0 to HW filter on device team0
[  189.583511][ T7198] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.586198][ T7198] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.589554][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.833'.
[  189.602994][ T7198] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.605841][ T7198] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.719275][ T9374] netlink: 20 bytes leftover after parsing attributes in process `syz.1.836'.
[  190.036420][ T9228] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.148495][ T5855] usb 8-1: USB disconnect, device number 24
[  190.266694][ T9228] veth0_vlan: entered promiscuous mode
[  190.288177][ T9228] veth1_vlan: entered promiscuous mode
[  190.317374][ T5822] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  190.333445][ T9417] FAULT_INJECTION: forcing a failure.
[  190.333445][ T9417] name failslab, interval 1, probability 0, space 0, times 0
[  190.336203][ T9228] veth0_macvtap: entered promiscuous mode
[  190.339373][ T9417] CPU: 3 UID: 0 PID: 9417 Comm: syz.2.841 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  190.339401][ T9417] Tainted: [L]=SOFTLOCKUP
[  190.339407][ T9417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  190.339418][ T9417] Call Trace:
[  190.339426][ T9417]  <TASK>
[  190.339434][ T9417]  dump_stack_lvl+0x100/0x190
[  190.339463][ T9417]  should_fail_ex.cold+0x5/0xa
[  190.339485][ T9417]  should_failslab+0xc2/0x120
[  190.339513][ T9417]  __kmalloc_noprof+0xfc/0x820
[  190.339535][ T9417]  ? rcu_is_watching+0x12/0xc0
[  190.339557][ T9417]  ? tomoyo_realpath_from_path+0xb6/0x690
[  190.339591][ T9417]  tomoyo_realpath_from_path+0xb6/0x690
[  190.339624][ T9417]  tomoyo_path2_perm+0x29f/0x700
[  190.339646][ T9417]  ? tomoyo_path2_perm+0x291/0x700
[  190.339791][ T9417]  ? __pfx_tomoyo_path2_perm+0x10/0x10
[  190.339828][ T9417]  ? do_raw_spin_unlock+0x145/0x1e0
[  190.339863][ T9417]  ? do_raw_spin_unlock+0x145/0x1e0
[  190.339886][ T9417]  ? simple_lookup+0xfc/0x1d0
[  190.339914][ T9417]  tomoyo_path_link+0xae/0x100
[  190.339944][ T9417]  ? __pfx_tomoyo_path_link+0x10/0x10
[  190.339970][ T9417]  ? make_vfsgid+0xf1/0x140
[  190.339994][ T9417]  ? __pfx_make_vfsgid+0x10/0x10
[  190.340026][ T9417]  security_path_link+0x12f/0x2a0
[  190.340050][ T9417]  filename_linkat+0x33a/0x640
[  190.340077][ T9417]  ? __pfx_filename_linkat+0x10/0x10
[  190.340106][ T9417]  ? do_getname+0x191/0x390
[  190.340133][ T9417]  __ia32_sys_linkat+0xf5/0x150
[  190.340156][ T9417]  __do_fast_syscall_32+0xe7/0x970
[  190.340182][ T9417]  ? lockdep_hardirqs_on+0x78/0x100
[  190.340206][ T9417]  do_fast_syscall_32+0x32/0x70
[  190.340230][ T9417]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  190.340254][ T9417] RIP: 0023:0xf7fe7fec
[  190.340277][ T9417] Code: Unable to access opcode bytes at 0xf7fe7fc2.
[  190.340285][ T9417] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 000000000000012f
[  190.340304][ T9417] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800006c0
[  190.340316][ T9417] RDX: 00000000ffffff9c RSI: 0000000080000400 RDI: 0000000000001000
[  190.340327][ T9417] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  190.340337][ T9417] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  190.340348][ T9417] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  190.340373][ T9417]  </TASK>
[  190.340381][ T9417] ERROR: Out of memory at tomoyo_realpath_from_path.
[  190.359442][ T9228] veth1_macvtap: entered promiscuous mode
[  190.438268][ T5753] Bluetooth: hci3: command tx timeout
[  190.452515][ T9228] batman_adv: batadv0: Interface activated: batadv_slave_0
[  190.463262][ T9228] batman_adv: batadv0: Interface activated: batadv_slave_1
[  190.511377][ T5829] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.511691][ T5822] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  190.520159][ T9421] FAULT_INJECTION: forcing a failure.
[  190.520159][ T9421] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  190.520878][ T5822] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  190.529465][ T5822] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  190.533823][ T5822] usb 6-1: config 0 interface 0 has no altsetting 0
[  190.536514][ T5829] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.540390][ T5829] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.543256][ T5829] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.546139][ T5822] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  190.549483][ T5822] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  190.553613][ T5822] usb 6-1: config 0 interface 0 has no altsetting 0
[  190.554072][ T9421] CPU: 0 UID: 0 PID: 9421 Comm: syz.2.843 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  190.554098][ T9421] Tainted: [L]=SOFTLOCKUP
[  190.554105][ T9421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  190.554115][ T9421] Call Trace:
[  190.554121][ T9421]  <TASK>
[  190.554128][ T9421]  dump_stack_lvl+0x100/0x190
[  190.554157][ T9421]  should_fail_ex.cold+0x5/0xa
[  190.554179][ T9421]  _copy_to_user+0x32/0xd0
[  190.554208][ T9421]  simple_read_from_buffer+0xcb/0x170
[  190.554236][ T9421]  proc_fail_nth_read+0x1af/0x230
[  190.554259][ T9421]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  190.554282][ T9421]  ? rw_verify_area+0xce/0x6d0
[  190.554306][ T9421]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  190.554328][ T9421]  vfs_read+0x1e4/0xb40
[  190.554347][ T9421]  ? __pfx_vfs_read+0x10/0x10
[  190.554361][ T9421]  ? find_held_lock+0x2b/0x80
[  190.554382][ T9421]  ? __fget_files+0x215/0x3d0
[  190.554403][ T9421]  ? __fget_files+0x21f/0x3d0
[  190.554424][ T9421]  ksys_read+0x12a/0x250
[  190.554440][ T9421]  ? __pfx_ksys_read+0x10/0x10
[  190.554462][ T9421]  do_int80_emulation+0x14b/0x720
[  190.554488][ T9421]  asm_int80_emulation+0x1a/0x20
[  190.554505][ T9421] RIP: 0023:0xf71e73eb
[  190.554520][ T9421] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  190.554535][ T9421] RSP: 002b:00000000f54a64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  190.554553][ T9421] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54a65d0
[  190.554564][ T9421] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  190.554573][ T9421] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  190.554583][ T9421] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  190.554594][ T9421] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  190.554617][ T9421]  </TASK>
[  190.576316][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.586565][ T5822] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  190.590779][ T5822] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  190.593983][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.594338][ T5822] usb 6-1: config 0 interface 0 has no altsetting 0
[  190.638658][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.642797][ T5822] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  190.644393][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.649877][ T5822] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  190.661243][ T5822] usb 6-1: config 0 interface 0 has no altsetting 0
[  190.666397][ T5822] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  190.670260][ T5822] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  190.674805][ T5822] usb 6-1: config 0 interface 0 has no altsetting 0
[  190.689118][ T5822] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  190.692479][ T5822] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  190.696690][ T5822] usb 6-1: config 0 interface 0 has no altsetting 0
[  190.702253][ T5822] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  190.705283][ T5822] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  190.711824][ T5822] usb 6-1: config 0 interface 0 has no altsetting 0
[  190.715271][ T5822] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  190.719198][ T5822] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  190.722909][ T5822] usb 6-1: config 0 interface 0 has no altsetting 0
[  190.724674][ T5822] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  190.724691][ T5822] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  190.724702][ T5822] usb 6-1: Product: syz
[  190.724709][ T5822] usb 6-1: Manufacturer: syz
[  190.724717][ T5822] usb 6-1: SerialNumber: syz
[  190.727020][ T5822] usb 6-1: config 0 descriptor??
[  190.733732][ T5822] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0
[  190.774157][ T9428] Character devices:
[  190.774157][ T9428]   1 mem
[  190.774157][ T9428]   2 pty
[  190.774157][ T9428]   3 ttyp
[  190.774157][ T9428]   4 /dev/vc/0
[  190.774157][ T9428]   4 tty
[  190.774157][ T9428]   4 ttyS
[  190.774157][ T9428]   5 /dev/tty
[  190.774157][ T9428]   5 /dev/console
[  190.774157][ T9428]   5 /dev/ptmx
[  190.774157][ T9428]   5 ttyprintk
[  190.774157][ T9428]   7 vcs
[  190.774157][ T9428]   9 st
[  190.774157][ T9428]  10 misc
[  190.774157][ T9428]  13 input
[  190.774157][ T9428]  14 sound
[  190.774157][ T9428]  21 sg
[  190.774157][ T9428]  29 fb
[  190.774157][ T9428]  81 video4linux
[  190.774157][ T9428]  89 i2c
[  190.774157][ T9428]  90 mtd
[  190.774157][ T9428]  98 comedi
[  190.774157][ T9428] 108 ppp
[  190.774157][ T9428] 116 alsa
[  190.774157][ T9428] 128 ptm
[  190.774157][ T9428] 136 pts
[  190.774157][ T9428] 152 aoechr
[  190.774157][ T9428] 166 ttyACM
[  190.774157][ T9428] 180 usb
[  190.774157][ T9428] 188 ttyUSB
[  190.774157][ T9428] 189 usb_device
[  190.774157][ T9428] 202 cpu/msr
[  190.774157][ T9428] 203 cpu/cpuid
[  190.774157][ T9428] 212 DVB
[  190.774157][ T9428] 216 rfcomm
[  190.774157][ T9428] 226 drm
[  190.774157][ T9428] 231 infiniband_mad
[  190.774157][ T9428] 231 infiniband_verbs
[  190.774157][ T9428] 234 mei
[  190.774157][ T9428] 235 ublk-char
[  190.774157][ T9428] 236 ttynull
[  190.774157][ T9428] 237 noz
[  190.774157][ T9428] 238 gsmtty
[  190.774157][ T9428] 239 bsg
[  190.774157][ T9428] 240 pvfs2-req
[  190.774157][ T9428] 241 counter
[  190.774157][ T9428] 242 tee
[  190.774157][ T9428] 243 iio
[  190.774157][ T9428] 244 ptp
[  190.774157][ T9428] 245 pps
[  190.774157][ T9428] 246 cec
[  190.774157][ T9428] 247 media
[  190.774157][ T9428] 248 rtc
[  190.774157][ T9428] 249 dma_heap
[  190.774157][ T9428] 250 dax
[  190.774157][ T9428] 251 dimmctl
[  190.774157][ T9428] 252 ndctl
[  190.774157][ T9428] 253 tpm
[  190.774157][ T9428] 254 gpiochip
[  190.774157][ T9428] 493 ubi0
[  190.774157][ T9428] 494 gnss
[  191.127512][ T3266] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  191.221570][ T5855] usb 6-1: USB disconnect, device number 19
[  191.235970][ T5855] yurex 6-1:0.0: USB YUREX #0 now disconnected
[  191.351486][ T3266] usb 9-1: too many configurations: 9, using maximum allowed: 8
[  191.355491][ T3266] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  191.359309][ T3266] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  191.366494][ T3266] usb 9-1: config 0 interface 0 has no altsetting 0
[  191.371255][ T3266] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  191.376587][ T3266] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  191.380948][ T3266] usb 9-1: config 0 interface 0 has no altsetting 0
[  191.385354][ T3266] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  191.408219][ T3266] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  191.412859][ T3266] usb 9-1: config 0 interface 0 has no altsetting 0
[  191.416872][ T3266] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  191.422368][ T3266] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  191.427490][ T3266] usb 9-1: config 0 interface 0 has no altsetting 0
[  191.431258][ T3266] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  191.435110][ T3266] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  191.440186][ T3266] usb 9-1: config 0 interface 0 has no altsetting 0
[  191.443819][ T3266] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  191.448044][ T3266] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  191.452589][ T3266] usb 9-1: config 0 interface 0 has no altsetting 0
[  191.456330][ T3266] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  191.461236][ T3266] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  191.465763][ T3266] usb 9-1: config 0 interface 0 has no altsetting 0
[  191.470040][ T3266] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  191.473886][ T3266] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  191.478781][ T3266] usb 9-1: config 0 interface 0 has no altsetting 0
[  191.483737][ T3266] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  191.488066][ T3266] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  191.491818][ T3266] usb 9-1: Product: syz
[  191.493556][ T3266] usb 9-1: Manufacturer: syz
[  191.495474][ T3266] usb 9-1: SerialNumber: syz
[  191.504064][ T3266] usb 9-1: config 0 descriptor??
[  191.513525][ T3266] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0
[  191.830507][ T5822] usb 9-1: USB disconnect, device number 2
[  191.840954][ T5822] yurex 9-1:0.0: USB YUREX #0 now disconnected
[  192.244056][ T9483] tipc: Started in network mode
[  192.246026][ T9483] tipc: Node identity b2fb3f473eaf, cluster identity 4711
[  192.250432][ T9483] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  192.254160][ T9483] syzkaller0: entered promiscuous mode
[  192.256479][ T9483] syzkaller0: entered allmulticast mode
[  192.277435][ T9483] tipc: Resetting bearer <eth:syzkaller0>
[  192.342193][ T9489] loop9: detected capacity change from 0 to 2640
[  192.342223][ T9491] netlink: 'syz.2.864': attribute type 1 has an invalid length.
[  192.349512][ T9489] Buffer I/O error on dev loop9, logical block 0, async page read
[  192.352534][ T9489] Buffer I/O error on dev loop9, logical block 0, async page read
[  192.355422][ T9489] Buffer I/O error on dev loop9, logical block 0, async page read
[  192.359318][ T9489] Buffer I/O error on dev loop9, logical block 0, async page read
[  192.362344][ T9489] Buffer I/O error on dev loop9, logical block 0, async page read
[  192.365619][ T9489] Buffer I/O error on dev loop9, logical block 0, async page read
[  192.368802][ T9489] Buffer I/O error on dev loop9, logical block 0, async page read
[  192.371832][ T9489] Buffer I/O error on dev loop9, logical block 0, async page read
[  192.374869][ T9489] ldm_validate_partition_table(): Disk read failed.
[  192.377579][ T9489] Buffer I/O error on dev loop9, logical block 0, async page read
[  192.379987][ T9490] 8021q: adding VLAN 0 to HW filter on device bond2
[  192.380711][ T9489] Buffer I/O error on dev loop9, logical block 0, async page read
[  192.386380][ T9489] Dev loop9: unable to read RDB block 0
[  192.388604][ T9490] bond1: (slave bond2): making interface the new active one
[  192.391484][ T9489]  loop9: unable to read partition table
[  192.393762][ T9490] bond1: (slave bond2): Enslaving as an active interface with an up link
[  192.393864][ T9489] loop_reread_partitions: partition scan of loop9 (3Ÿ¾‚³˜) failed (rc=-5)
[  192.399229][ T9491] netlink: 20 bytes leftover after parsing attributes in process `syz.2.864'.
[  192.408997][ T9490] bond1: (slave gretap1): Enslaving as a backup interface with an up link
[  192.450542][ T9497] FAULT_INJECTION: forcing a failure.
[  192.450542][ T9497] name failslab, interval 1, probability 0, space 0, times 0
[  192.454537][ T9497] CPU: 0 UID: 0 PID: 9497 Comm: syz.2.865 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  192.454556][ T9497] Tainted: [L]=SOFTLOCKUP
[  192.454560][ T9497] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  192.454567][ T9497] Call Trace:
[  192.454571][ T9497]  <TASK>
[  192.454576][ T9497]  dump_stack_lvl+0x100/0x190
[  192.454594][ T9497]  should_fail_ex.cold+0x5/0xa
[  192.454608][ T9497]  should_failslab+0xc2/0x120
[  192.454626][ T9497]  __kmalloc_noprof+0xfc/0x820
[  192.454640][ T9497]  ? sk_prot_alloc+0x10b/0x2a0
[  192.454662][ T9497]  sk_prot_alloc+0x10b/0x2a0
[  192.454680][ T9497]  sk_alloc+0x36/0xe80
[  192.454694][ T9497]  bpf_prog_test_run_skb+0x4db/0x3540
[  192.454712][ T9497]  ? find_held_lock+0x2b/0x80
[  192.454727][ T9497]  ? __fget_files+0x191/0x3d0
[  192.454742][ T9497]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  192.454755][ T9497]  ? fput+0x79/0x100
[  192.454770][ T9497]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  192.454781][ T9497]  __sys_bpf+0x2a12/0x4e80
[  192.454798][ T9497]  ? __pfx___sys_bpf+0x10/0x10
[  192.454810][ T9497]  ? find_held_lock+0x2b/0x80
[  192.454823][ T9497]  ? get_pid_task+0xfc/0x250
[  192.454836][ T9497]  ? get_pid_task+0xfc/0x250
[  192.454853][ T9497]  ? proc_fail_nth_write+0x9f/0x220
[  192.454869][ T9497]  ? find_held_lock+0x2b/0x80
[  192.454884][ T9497]  ? rcu_read_lock_any_held+0x6a/0xa0
[  192.454900][ T9497]  ? find_held_lock+0x2b/0x80
[  192.454912][ T9497]  ? ksys_write+0x190/0x250
[  192.454921][ T9497]  ? ksys_write+0x190/0x250
[  192.454941][ T9497]  ? fput+0x79/0x100
[  192.454955][ T9497]  ? __ia32_sys_bpf+0xcc/0x170
[  192.454965][ T9497]  __ia32_sys_bpf+0xcc/0x170
[  192.454978][ T9497]  ? __do_fast_syscall_32+0x98/0x970
[  192.454994][ T9497]  __do_fast_syscall_32+0xe7/0x970
[  192.455008][ T9497]  ? lockdep_hardirqs_on+0x78/0x100
[  192.455022][ T9497]  do_fast_syscall_32+0x32/0x70
[  192.455037][ T9497]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  192.455051][ T9497] RIP: 0023:0xf7fe7fec
[  192.455066][ T9497] Code: Unable to access opcode bytes at 0xf7fe7fc2.
[  192.455071][ T9497] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  192.455082][ T9497] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080001040
[  192.455089][ T9497] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000
[  192.455095][ T9497] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  192.455101][ T9497] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  192.455107][ T9497] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  192.455120][ T9497]  </TASK>
[  192.517279][ T5753] Bluetooth: hci3: command tx timeout
[  192.577384][ T5855] usb 6-1: new full-speed USB device number 20 using dummy_hcd
[  192.619360][ T9478] Process accounting resumed
[  192.741125][ T5855] usb 6-1: unable to get BOS descriptor or descriptor too short
[  192.744437][ T5855] usb 6-1: not running at top speed; connect to a high speed hub
[  192.750257][ T5855] usb 6-1: config 14 has an invalid interface number: 57 but max is 1
[  192.753567][ T5855] usb 6-1: config 14 has an invalid interface number: 228 but max is 1
[  192.756734][ T5855] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config
[  192.761212][ T5855] usb 6-1: config 14 has no interface number 0
[  192.763831][ T5855] usb 6-1: config 14 has no interface number 1
[  192.770424][ T5855] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  192.774555][ T5855] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  192.779439][ T5855] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  192.783939][ T5855] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64
[  192.788123][ T5855] usb 6-1: config 14 interface 57 has no altsetting 0
[  192.790626][ T5855] usb 6-1: config 14 interface 228 has no altsetting 0
[  192.795480][ T5855] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  192.800184][ T5855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.803301][ T5855] usb 6-1: Product: syz
[  192.805036][ T5855] usb 6-1: Manufacturer: syz
[  192.807026][ T5855] usb 6-1: SerialNumber: syz
[  192.939340][ T9510] netlink: 'syz.4.869': attribute type 1 has an invalid length.
[  192.946297][ T9510] netlink: 'syz.4.869': attribute type 2 has an invalid length.
[  192.952123][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.869'.
[  193.040015][ T5855] legousbtower 6-1:14.57: interrupt endpoints not found
[  193.048166][ T5855] legousbtower 6-1:14.228: get version request failed: -71
[  193.051090][ T5855] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71
[  193.060413][ T5855] usb 6-1: USB disconnect, device number 20
[  193.076814][ T9482] tipc: Resetting bearer <eth:syzkaller0>
[  193.105491][ T9482] tipc: Disabling bearer <eth:syzkaller0>
[  193.251442][ T9533] loop9: detected capacity change from 0 to 2640
[  193.255215][ T9533] ldm_validate_partition_table(): Disk read failed.
[  193.258854][ T9533] Dev loop9: unable to read RDB block 0
[  193.261386][ T9533]  loop9: unable to read partition table
[  193.263895][ T9533] loop_reread_partitions: partition scan of loop9 (3Ÿ¾‚³˜) failed (rc=-5)
[  193.281430][ T9533] FAULT_INJECTION: forcing a failure.
[  193.281430][ T9533] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  193.288270][ T9533] CPU: 1 UID: 0 PID: 9533 Comm: syz.3.872 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  193.288301][ T9533] Tainted: [L]=SOFTLOCKUP
[  193.288307][ T9533] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  193.288333][ T9533] Call Trace:
[  193.288340][ T9533]  <TASK>
[  193.288348][ T9533]  dump_stack_lvl+0x100/0x190
[  193.288380][ T9533]  should_fail_ex.cold+0x5/0xa
[  193.288403][ T9533]  copy_folio_from_iter_atomic+0x5c8/0x2000
[  193.288444][ T9533]  ? block_commit_write+0x1f6/0x2d0
[  193.288471][ T9533]  ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[  193.288498][ T9533]  ? fault_in_readable+0x14c/0x190
[  193.288531][ T9533]  ? __pfx_fault_in_readable+0x10/0x10
[  193.288554][ T9533]  ? I_BDEV+0xd/0x20
[  193.288577][ T9533]  ? inode_to_bdi+0x9e/0x160
[  193.288608][ T9533]  iomap_file_buffered_write+0x532/0xaf0
[  193.288639][ T9533]  ? __pfx_iomap_file_buffered_write+0x10/0x10
[  193.288660][ T9533]  ? find_held_lock+0x2b/0x80
[  193.288683][ T9533]  ? current_time+0x8a/0x3b0
[  193.288727][ T9533]  ? __pfx_down_read+0x10/0x10
[  193.288756][ T9533]  ? file_update_time_flags+0x373/0x500
[  193.288781][ T9533]  blkdev_write_iter+0x575/0xd30
[  193.288806][ T9533]  vfs_write+0x6ac/0x1050
[  193.288826][ T9533]  ? __pfx_blkdev_write_iter+0x10/0x10
[  193.288846][ T9533]  ? __pfx_vfs_write+0x10/0x10
[  193.288862][ T9533]  ? find_held_lock+0x2b/0x80
[  193.288901][ T9533]  ksys_write+0x12a/0x250
[  193.288918][ T9533]  ? __pfx_ksys_write+0x10/0x10
[  193.288935][ T9533]  ? ksys_write+0x1ac/0x250
[  193.288949][ T9533]  ? __pfx_ksys_write+0x10/0x10
[  193.288969][ T9533]  __do_fast_syscall_32+0xe7/0x970
[  193.288992][ T9533]  ? lockdep_hardirqs_on+0x78/0x100
[  193.289013][ T9533]  do_fast_syscall_32+0x32/0x70
[  193.289034][ T9533]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  193.289056][ T9533] RIP: 0023:0xf7f94fec
[  193.289075][ T9533] Code: Unable to access opcode bytes at 0xf7f94fc2.
[  193.289083][ T9533] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  193.289101][ T9533] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001c00
[  193.289113][ T9533] RDX: 00000000fffffe38 RSI: 0000000000000000 RDI: 0000000000000000
[  193.289123][ T9533] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  193.289133][ T9533] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  193.289144][ T9533] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  193.289169][ T9533]  </TASK>
[  193.615638][ T9480] Process accounting paused
[  193.772770][ T9559] FAULT_INJECTION: forcing a failure.
[  193.772770][ T9559] name failslab, interval 1, probability 0, space 0, times 0
[  193.779248][ T9559] CPU: 3 UID: 0 PID: 9559 Comm: syz.3.878 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  193.779295][ T9559] Tainted: [L]=SOFTLOCKUP
[  193.779302][ T9559] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  193.779313][ T9559] Call Trace:
[  193.779320][ T9559]  <TASK>
[  193.779328][ T9559]  dump_stack_lvl+0x100/0x190
[  193.779358][ T9559]  should_fail_ex.cold+0x5/0xa
[  193.779377][ T9559]  should_failslab+0xc2/0x120
[  193.779402][ T9559]  __kmalloc_flags_noprof+0x122/0x8b0
[  193.779424][ T9559]  ? __lock_acquire+0x49f/0x1a40
[  193.779451][ T9559]  ? alloc_slab_obj_exts+0x5a/0x160
[  193.779474][ T9559]  alloc_slab_obj_exts+0x5a/0x160
[  193.779492][ T9559]  __memcg_slab_post_alloc_hook+0x3d4/0x1160
[  193.779527][ T9559]  ? kasan_unpoison+0x27/0x60
[  193.779550][ T9559]  __kvmalloc_node_noprof+0x73d/0x970
[  193.779574][ T9559]  ? kvm_recalculate_apic_map+0x225/0x1500
[  193.779603][ T9559]  kvm_recalculate_apic_map+0x225/0x1500
[  193.779648][ T9559]  ? __pfx_kvm_recalculate_apic_map+0x10/0x10
[  193.779670][ T9559]  ? lockdep_hardirqs_on+0x78/0x100
[  193.779714][ T9559]  ? queue_delayed_work_on+0x8c/0x1e0
[  193.779746][ T9559]  kvm_apic_set_state+0x3de/0xa70
[  193.779775][ T9559]  kvm_arch_vcpu_ioctl+0x3bd/0x57a0
[  193.779802][ T9559]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  193.779828][ T9559]  ? is_bpf_text_address+0x94/0x1a0
[  193.779861][ T9559]  ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10
[  193.779883][ T9559]  ? arch_stack_walk+0xa6/0xf0
[  193.779919][ T9559]  ? __lock_acquire+0x49f/0x1a40
[  193.779946][ T9559]  ? stack_depot_save_flags+0x27/0x9d0
[  193.779975][ T9559]  ? __lock_acquire+0x49f/0x1a40
[  193.780002][ T9559]  ? lock_acquire+0x1b9/0x370
[  193.780033][ T9559]  ? rcu_is_watching+0x12/0xc0
[  193.780055][ T9559]  ? trace_contention_end+0x126/0x160
[  193.780073][ T9559]  ? __mutex_lock+0x26d/0x1bd0
[  193.780096][ T9559]  ? kvm_vcpu_ioctl+0x322/0x1700
[  193.780117][ T9559]  ? __pfx___mutex_lock+0x10/0x10
[  193.780155][ T9559]  ? kvm_vcpu_ioctl+0x8a0/0x1700
[  193.780172][ T9559]  kvm_vcpu_ioctl+0x8a0/0x1700
[  193.780192][ T9559]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  193.780210][ T9559]  ? tomoyo_path_number_perm+0x188/0x580
[  193.780234][ T9559]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  193.780257][ T9559]  ? get_pid_task+0x106/0x250
[  193.780285][ T9559]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  193.780312][ T9559]  ? do_vfs_ioctl+0x226/0x13e0
[  193.780339][ T9559]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  193.780371][ T9559]  kvm_vcpu_compat_ioctl+0x20f/0x3c0
[  193.780390][ T9559]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  193.780410][ T9559]  ? __fget_files+0x21f/0x3d0
[  193.780433][ T9559]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  193.780453][ T9559]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  193.780479][ T9559]  __do_fast_syscall_32+0xe7/0x970
[  193.780502][ T9559]  ? lockdep_hardirqs_on+0x78/0x100
[  193.780526][ T9559]  do_fast_syscall_32+0x32/0x70
[  193.780549][ T9559]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  193.780571][ T9559] RIP: 0023:0xf7f94fec
[  193.780594][ T9559] Code: Unable to access opcode bytes at 0xf7f94fc2.
[  193.780602][ T9559] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  193.780621][ T9559] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004400ae8f
[  193.780633][ T9559] RDX: 0000000080000740 RSI: 0000000000000000 RDI: 0000000000000000
[  193.780644][ T9559] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  193.780654][ T9559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  193.780665][ T9559] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  193.780690][ T9559]  </TASK>
[  193.895924][ T9564] warn_alloc: 1 callbacks suppressed
[  193.895942][ T9564] syz.1.877: vmalloc error: size 3449536512, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null)
[  193.915477][ T9559] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer.
[  193.917353][ T9564] ,cpuset=/,mems_allowed=0-1
[  193.942786][ T9564] CPU: 1 UID: 0 PID: 9564 Comm: syz.1.877 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  193.942818][ T9564] Tainted: [L]=SOFTLOCKUP
[  193.942826][ T9564] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  193.942843][ T9564] Call Trace:
[  193.942850][ T9564]  <TASK>
[  193.942855][ T9564]  dump_stack_lvl+0x100/0x190
[  193.942885][ T9564]  warn_alloc.cold+0x94/0xa8
[  193.942907][ T9564]  ? __pfx_warn_alloc+0x10/0x10
[  193.942930][ T9564]  ? __pfx_stack_trace_save+0x10/0x10
[  193.942955][ T9564]  ? kasan_save_stack+0x3f/0x50
[  193.942980][ T9564]  ? __kmalloc_cache_noprof+0x2e5/0x6c0
[  193.942999][ T9564]  ? vb2_vmalloc_alloc+0xf9/0x410
[  193.943041][ T9564]  ? __vb2_queue_alloc+0x8d5/0x1160
[  193.943062][ T9564]  ? vb2_core_create_bufs+0x5fa/0xa30
[  193.943079][ T9564]  ? vb2_create_bufs+0x40c/0x830
[  193.943103][ T9564]  ? vb2_ioctl_create_bufs+0x244/0x3e0
[  193.943129][ T9564]  ? vidioc_create_bufs+0x7d/0xf0
[  193.943151][ T9564]  ? v4l_create_bufs+0x17d/0x270
[  193.943174][ T9564]  ? video_usercopy+0x3d3/0x14c0
[  193.943193][ T9564]  ? v4l2_ioctl+0x1bd/0x250
[  193.943217][ T9564]  ? v4l2_compat_ioctl32+0x20f/0x2d0
[  193.943243][ T9564]  ? vb2_vmalloc_alloc+0x135/0x410
[  193.943265][ T9564]  __vmalloc_node_range_noprof+0x136c/0x1630
[  193.943303][ T9564]  ? vb2_vmalloc_alloc+0x135/0x410
[  193.943332][ T9564]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  193.943361][ T9564]  ? kasan_save_track+0x14/0x30
[  193.943382][ T9564]  ? __kasan_kmalloc+0xaa/0xb0
[  193.943405][ T9564]  ? __kmalloc_cache_noprof+0x2e5/0x6c0
[  193.943425][ T9564]  ? vb2_vmalloc_alloc+0x135/0x410
[  193.943445][ T9564]  vmalloc_user_noprof+0x9e/0xe0
[  193.943471][ T9564]  ? vb2_vmalloc_alloc+0x135/0x410
[  193.943483][ T9564]  vb2_vmalloc_alloc+0x135/0x410
[  193.943495][ T9564]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[  193.943509][ T9564]  __vb2_queue_alloc+0x8d5/0x1160
[  193.943528][ T9564]  vb2_core_create_bufs+0x5fa/0xa30
[  193.943542][ T9564]  ? __pfx_vb2_core_create_bufs+0x10/0x10
[  193.943557][ T9564]  ? lock_acquire+0x1b9/0x370
[  193.943577][ T9564]  vb2_create_bufs+0x40c/0x830
[  193.943597][ T9564]  ? __pfx_vb2_create_bufs+0x10/0x10
[  193.943614][ T9564]  ? v4l_sanitize_colorspace+0x220/0x410
[  193.943635][ T9564]  vb2_ioctl_create_bufs+0x244/0x3e0
[  193.943652][ T9564]  ? v4l2_compat_get_user+0x883/0x11f0
[  193.943664][ T9564]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  193.943706][ T9564]  vidioc_create_bufs+0x7d/0xf0
[  193.943726][ T9564]  v4l_create_bufs+0x17d/0x270
[  193.943747][ T9564]  __video_do_ioctl+0xb2a/0xdf0
[  193.943772][ T9564]  ? trace_kmalloc+0xeb/0x110
[  193.943796][ T9564]  ? __pfx___video_do_ioctl+0x10/0x10
[  193.943826][ T9564]  ? video_usercopy+0x145/0x14c0
[  193.943863][ T9564]  video_usercopy+0x3d3/0x14c0
[  193.943892][ T9564]  ? __pfx___video_do_ioctl+0x10/0x10
[  193.943925][ T9564]  ? __pfx_video_usercopy+0x10/0x10
[  193.943965][ T9564]  ? __fget_files+0x215/0x3d0
[  193.943985][ T9564]  ? hook_file_ioctl_common+0x140/0x440
[  193.944022][ T9564]  v4l2_ioctl+0x1bd/0x250
[  193.944054][ T9564]  v4l2_compat_ioctl32+0x20f/0x2d0
[  193.944077][ T9564]  ? __pfx_v4l2_compat_ioctl32+0x10/0x10
[  193.944100][ T9564]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  193.944125][ T9564]  __do_fast_syscall_32+0xe7/0x970
[  193.944142][ T9564]  ? lockdep_hardirqs_on+0x78/0x100
[  193.944157][ T9564]  do_fast_syscall_32+0x32/0x70
[  193.944172][ T9564]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  193.944188][ T9564] RIP: 0023:0xf700efec
[  193.944204][ T9564] Code: Unable to access opcode bytes at 0xf700efc2.
[  193.944210][ T9564] RSP: 002b:00000000f4f9850c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  193.944221][ T9564] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000c0f8565c
[  193.944228][ T9564] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000
[  193.944235][ T9564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  193.944243][ T9564] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  193.944252][ T9564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  193.944268][ T9564]  </TASK>
[  193.944320][ T9564] Mem-Info:
[  193.964127][ T1438] ieee802154 phy1 wpan1: encryption failed: -22
[  193.968905][ T9564] active_anon:7854 inactive_anon:233 isolated_anon:0
[  193.968905][ T9564]  active_file:297 inactive_file:21123 isolated_file:0
[  193.968905][ T9564]  unevictable:768 dirty:57 writeback:0
[  193.968905][ T9564]  slab_reclaimable:6566 slab_unreclaimable:56753
[  193.968905][ T9564]  mapped:32977 shmem:1274 pagetables:1915
[  193.968905][ T9564]  sec_pagetables:303 bounce:0
[  193.968905][ T9564]  kernel_misc_reclaimable:0
[  193.968905][ T9564]  free:57359 free_pcp:15722 free_cma:0
[  194.124074][ T9564] Node 0 active_anon:52kB inactive_anon:156kB active_file:80kB inactive_file:64kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8960kB pagetables:1912kB sec_pagetables:1108kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  194.136717][ T9564] Node 1 active_anon:31164kB inactive_anon:776kB active_file:1108kB inactive_file:84428kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131880kB dirty:228kB writeback:0kB shmem:3560kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6352kB pagetables:5748kB sec_pagetables:104kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  194.150324][ T9564] Node 0 DMA free:2056kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:64kB inactive_file:64kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:748kB local_pcp:184kB free_cma:0kB
[  194.161358][ T9564] lowmem_reserve[]: 0 280 280 280 280
[  194.163570][ T9564] Node 0 DMA32 free:15920kB boost:0kB min:12772kB low:15964kB high:19156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:156kB active_file:16kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:4kB present:1032196kB managed:286900kB mlocked:0kB bounce:0kB free_pcp:7580kB local_pcp:2560kB free_cma:0kB
[  194.176948][ T9564] lowmem_reserve[]: 0 0 0 0 0
[  194.179253][ T9564] Node 1 DMA32 free:211772kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31164kB inactive_anon:776kB active_file:1108kB inactive_file:84428kB unevictable:1536kB writepending:228kB zspages:2008kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:54960kB local_pcp:11904kB free_cma:0kB
[  194.192323][ T9564] lowmem_reserve[]: 0 0 0 0 0
[  194.194248][ T9564] Node 0 DMA: 94*4kB (UM) 10*8kB (U) 2*16kB (UM) 9*32kB (UM) 10*64kB (UM) 3*128kB (M) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2056kB
[  194.205266][ T9564] Node 0 DMA32: 0*4kB 66*8kB (E) 42*16kB (ME) 66*32kB (ME) 47*64kB (ME) 31*128kB (UME) 8*256kB (UME) 5*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 15920kB
[  194.223167][ T9564] Node 1 DMA32: 3*4kB (ME) 140*8kB (UME) 144*16kB (UE) 280*32kB (UME) 263*64kB (UME) 207*128kB (UME) 98*256kB (UME) 52*512kB (UME) 25*1024kB (UM) 17*2048kB (M) 11*4096kB (UM) = 212908kB
[  194.232708][ T9564] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  194.236970][ T9564] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  194.242206][ T9564] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  194.246553][ T9564] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  194.250747][ T9564] 23078 total pagecache pages
[  194.252800][ T9564] 387 pages in swap cache
[  194.254567][ T9564] Free swap  = 118636kB
[  194.256145][ T9564] Total swap = 124996kB
[  194.258137][ T9564] 524155 pages RAM
[  194.259801][ T9564] 0 pages HighMem/MovableOnly
[  194.261779][ T9564] 211537 pages reserved
[  194.263450][ T9564] 0 pages cma reserved
[  194.607907][ T5753] Bluetooth: hci3: command tx timeout
[  194.654295][ T9581] netlink: 'syz.3.883': attribute type 1 has an invalid length.
[  194.658656][ T9581] netlink: 'syz.3.883': attribute type 2 has an invalid length.
[  194.675083][ T9581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.883'.
[  195.284757][ T5753] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23
[  196.107611][ T9653] ip6_vti0: entered promiscuous mode
[  196.125697][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.894'.
[  196.463849][ T9676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.896'.
[  196.477622][ T9676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.896'.
[  196.503451][ T9676] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[  196.506002][ T9676] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  196.518243][ T9676] vhci_hcd vhci_hcd.0: Device attached
[  196.707362][ T5850] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  196.778571][ T5850] usb 45-1: new full-speed USB device number 2 using vhci_hcd
[  196.783957][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.900'.
[  196.787263][ T9693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.900'.
[  196.790733][ T9693] netlink: 'syz.1.900': attribute type 18 has an invalid length.
[  196.806921][ T9693] tmpfs: Group quota block hardlimit too large.
[  196.807238][ T5896] usb 9-1: new low-speed USB device number 3 using dummy_hcd
[  196.957302][ T1043] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  196.979906][ T5896] usb 9-1: config 0 has no interfaces?
[  196.981846][ T5896] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  196.988635][ T5896] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.995605][ T5896] usb 9-1: config 0 descriptor??
[  197.107225][ T1043] usb 7-1: Using ep0 maxpacket: 8
[  197.111511][ T1043] usb 7-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  197.115437][ T1043] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  197.118788][ T1043] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.200712][ T9678] usb 45-1: recv xbuf, 0
[  197.201308][ T5896] usb 9-1: USB disconnect, device number 3
[  197.206818][ T5829] vhci_hcd vhci_hcd.4: stop threads
[  197.210732][ T5829] vhci_hcd vhci_hcd.4: release socket
[  197.213282][ T5829] vhci_hcd vhci_hcd.4: disconnect device
[  197.227300][   T29] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  197.268205][ T5850] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  197.387303][   T29] usb 6-1: Using ep0 maxpacket: 8
[  197.391891][   T29] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  197.396615][   T29] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  197.402156][   T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.462451][ T9706] MINIX-fs: blocksize too small for device
[  197.968624][ T9723] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  197.971989][ T9723] syzkaller0: entered promiscuous mode
[  197.974181][ T9723] syzkaller0: entered allmulticast mode
[  197.995890][ T9723] FAULT_INJECTION: forcing a failure.
[  197.995890][ T9723] name failslab, interval 1, probability 0, space 0, times 0
[  198.001031][ T9723] CPU: 3 UID: 0 PID: 9723 Comm: syz.3.906 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  198.001060][ T9723] Tainted: [L]=SOFTLOCKUP
[  198.001067][ T9723] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  198.001078][ T9723] Call Trace:
[  198.001085][ T9723]  <TASK>
[  198.001092][ T9723]  dump_stack_lvl+0x100/0x190
[  198.001122][ T9723]  should_fail_ex.cold+0x5/0xa
[  198.001144][ T9723]  should_failslab+0xc2/0x120
[  198.001170][ T9723]  __kmalloc_noprof+0xfc/0x820
[  198.001191][ T9723]  ? __pfx_dynamic_dname+0x10/0x10
[  198.001216][ T9723]  ? tomoyo_encode2+0xfb/0x3c0
[  198.001246][ T9723]  tomoyo_encode2+0xfb/0x3c0
[  198.001275][ T9723]  tomoyo_encode+0x29/0x50
[  198.001300][ T9723]  tomoyo_realpath_from_path+0x18c/0x690
[  198.001330][ T9723]  tomoyo_path_number_perm+0x23c/0x580
[  198.001353][ T9723]  ? tomoyo_path_number_perm+0x22e/0x580
[  198.001377][ T9723]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  198.001400][ T9723]  ? get_pid_task+0x106/0x250
[  198.001451][ T9723]  ? find_held_lock+0x2b/0x80
[  198.001475][ T9723]  ? __fget_files+0x215/0x3d0
[  198.001491][ T9723]  ? hook_file_ioctl_common+0x140/0x440
[  198.001514][ T9723]  ? __fget_files+0x215/0x3d0
[  198.001536][ T9723]  ? __fget_files+0x21f/0x3d0
[  198.001558][ T9723]  security_file_ioctl_compat+0xd3/0x230
[  198.001585][ T9723]  __ia32_compat_sys_ioctl+0xc2/0x360
[  198.001614][ T9723]  __do_fast_syscall_32+0xe7/0x970
[  198.001639][ T9723]  ? lockdep_hardirqs_on+0x78/0x100
[  198.001661][ T9723]  do_fast_syscall_32+0x32/0x70
[  198.001684][ T9723]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  198.001707][ T9723] RIP: 0023:0xf7f94fec
[  198.001728][ T9723] Code: Unable to access opcode bytes at 0xf7f94fc2.
[  198.001736][ T9723] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  198.001754][ T9723] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008922
[  198.001765][ T9723] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000
[  198.001776][ T9723] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  198.001787][ T9723] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  198.001797][ T9723] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  198.001823][ T9723]  </TASK>
[  198.001843][ T9723] ERROR: Out of memory at tomoyo_realpath_from_path.
[  198.090431][ T9723] tipc: Resetting bearer <eth:syzkaller0>
[  198.094207][ T9722] tipc: Resetting bearer <eth:syzkaller0>
[  198.108021][ T9722] tipc: Disabling bearer <eth:syzkaller0>
[  198.162256][ T9729] No source specified
[  198.233223][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.910'.
[  198.236449][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.910'.
[  198.624131][ T9744] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  198.626269][ T9744] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  198.629351][ T9744] vhci_hcd vhci_hcd.0: Device attached
[  198.897314][ T5850] usb 44-1: SetAddress Request (18) to port 0
[  198.899584][ T5850] usb 44-1: new SuperSpeed USB device number 18 using vhci_hcd
[  199.246591][ T9745] vhci_hcd: connection reset by peer
[  199.249807][   T12] vhci_hcd vhci_hcd.3: stop threads
[  199.254124][   T12] vhci_hcd vhci_hcd.3: release socket
[  199.255879][   T12] vhci_hcd vhci_hcd.3: disconnect device
[  199.738391][   T29] usb 7-1: USB disconnect, device number 18
[  199.895796][ T9764] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size.
[  200.059611][ T5855] usb 6-1: USB disconnect, device number 21
[  200.106625][ T9766] openvswitch: netlink: Missing valid actions attribute.
[  200.110154][ T9766] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  200.329359][ T9766] fuse: Unknown parameter '0x0000000000000007'
[  200.707327][ T5822] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  200.860162][ T5822] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  200.860184][ T5822] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.860195][ T5822] usb 8-1: Product: syz
[  200.860203][ T5822] usb 8-1: Manufacturer: syz
[  200.860211][ T5822] usb 8-1: SerialNumber: syz
[  200.887530][   T24] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  200.964677][ T9818] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  201.067546][   T24] usb 7-1: Using ep0 maxpacket: 8
[  201.072453][   T24] usb 7-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  201.076071][   T24] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  201.079055][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.424772][ T5822] rtl8150 8-1:1.0: couldn't reset the device
[  201.427462][ T5822] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5
[  201.437009][ T5822] usb 8-1: USB disconnect, device number 25
[  202.106289][ T9906] FAULT_INJECTION: forcing a failure.
[  202.106289][ T9906] name failslab, interval 1, probability 0, space 0, times 0
[  202.112593][ T9906] CPU: 2 UID: 0 PID: 9906 Comm: syz.3.939 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  202.112614][ T9906] Tainted: [L]=SOFTLOCKUP
[  202.112619][ T9906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  202.112626][ T9906] Call Trace:
[  202.112631][ T9906]  <TASK>
[  202.112637][ T9906]  dump_stack_lvl+0x100/0x190
[  202.112658][ T9906]  should_fail_ex.cold+0x5/0xa
[  202.112672][ T9906]  should_failslab+0xc2/0x120
[  202.112690][ T9906]  __kmalloc_noprof+0xfc/0x820
[  202.112704][ T9906]  ? rcu_is_watching+0x12/0xc0
[  202.112719][ T9906]  ? tomoyo_encode2+0xfb/0x3c0
[  202.112738][ T9906]  tomoyo_encode2+0xfb/0x3c0
[  202.112756][ T9906]  tomoyo_encode+0x29/0x50
[  202.112772][ T9906]  tomoyo_realpath_from_path+0x18c/0x690
[  202.112792][ T9906]  tomoyo_path_number_perm+0x23c/0x580
[  202.112806][ T9906]  ? tomoyo_path_number_perm+0x22e/0x580
[  202.112821][ T9906]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  202.112848][ T9906]  ? current_check_access_path+0x269/0x430
[  202.112866][ T9906]  ? __pfx_current_check_access_path+0x10/0x10
[  202.112882][ T9906]  ? configfs_lookup+0x6e/0x7d0
[  202.112897][ T9906]  ? lookup_one_qstr_excl+0xaf/0x250
[  202.112914][ T9906]  tomoyo_path_mkdir+0x9b/0xe0
[  202.112925][ T9906]  ? __pfx_tomoyo_path_mkdir+0x10/0x10
[  202.112940][ T9906]  security_path_mkdir+0x154/0x2e0
[  202.112958][ T9906]  filename_mkdirat+0x168/0x5e0
[  202.112972][ T9906]  ? __pfx_filename_mkdirat+0x10/0x10
[  202.112984][ T9906]  ? strncpy_from_user+0x19d/0x2d0
[  202.113007][ T9906]  ? do_getname+0x191/0x390
[  202.113022][ T9906]  __ia32_sys_mkdirat+0x88/0xc0
[  202.113034][ T9906]  __do_fast_syscall_32+0xe7/0x970
[  202.113051][ T9906]  ? lockdep_hardirqs_on+0x78/0x100
[  202.113065][ T9906]  do_fast_syscall_32+0x32/0x70
[  202.113080][ T9906]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  202.113095][ T9906] RIP: 0023:0xf7f94fec
[  202.113110][ T9906] Code: Unable to access opcode bytes at 0xf7f94fc2.
[  202.113115][ T9906] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000128
[  202.113127][ T9906] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800001c0
[  202.113133][ T9906] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000
[  202.113140][ T9906] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  202.113146][ T9906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  202.113153][ T9906] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  202.113166][ T9906]  </TASK>
[  202.113180][ T9906] ERROR: Out of memory at tomoyo_realpath_from_path.
[  202.250014][ T9911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.941'.
[  202.266604][ T9913] FAULT_INJECTION: forcing a failure.
[  202.266604][ T9913] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  202.271192][ T9913] CPU: 1 UID: 0 PID: 9913 Comm: syz.1.942 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  202.271211][ T9913] Tainted: [L]=SOFTLOCKUP
[  202.271215][ T9913] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  202.271223][ T9913] Call Trace:
[  202.271227][ T9913]  <TASK>
[  202.271232][ T9913]  dump_stack_lvl+0x100/0x190
[  202.271252][ T9913]  should_fail_ex.cold+0x5/0xa
[  202.271279][ T9913]  strncpy_from_user+0x3b/0x2d0
[  202.271297][ T9913]  do_getname+0x78/0x390
[  202.271314][ T9913]  __ia32_sys_renameat+0xb3/0x110
[  202.271329][ T9913]  __do_fast_syscall_32+0xe7/0x970
[  202.271345][ T9913]  ? lockdep_hardirqs_on+0x78/0x100
[  202.271360][ T9913]  do_fast_syscall_32+0x32/0x70
[  202.271374][ T9913]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  202.271390][ T9913] RIP: 0023:0xf700efec
[  202.271403][ T9913] Code: Unable to access opcode bytes at 0xf700efc2.
[  202.271410][ T9913] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 000000000000012e
[  202.271421][ T9913] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000580
[  202.271428][ T9913] RDX: 0000000000000004 RSI: 00000000800002c0 RDI: 0000000000000000
[  202.271435][ T9913] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  202.271442][ T9913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  202.271448][ T9913] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  202.271462][ T9913]  </TASK>
[  202.462004][ T9926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.941'.
[  202.528599][ T9927] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  202.530843][ T9927] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  202.534061][ T9927] vhci_hcd vhci_hcd.0: Device attached
[  203.117841][ T9928] vhci_hcd: connection closed
[  203.119974][   T12] vhci_hcd vhci_hcd.3: stop threads
[  203.123350][   T12] vhci_hcd vhci_hcd.3: release socket
[  203.125141][   T12] vhci_hcd vhci_hcd.3: disconnect device
[  203.398022][ T9952] CacheFiles: No cache directory specified
[  203.572909][ T9960] fuse: Bad value for 'fd'
[  203.669889][ T5855] usb 7-1: USB disconnect, device number 19
[  203.709139][ T9962] netlink: 'syz.2.953': attribute type 1 has an invalid length.
[  203.728368][ T9962] 8021q: adding VLAN 0 to HW filter on device bond3
[  203.774134][ T9962] bond3: (slave veth3): Enslaving as an active interface with a down link
[  203.806472][ T9962] vlan2: entered allmulticast mode
[  203.808973][ T9962] bridge0: entered allmulticast mode
[  203.812819][ T9962] bond3: (slave vlan2): Enslaving as an active interface with a down link
[  203.941200][ T9974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.956'.
[  203.957507][ T5850] usb 44-1: device descriptor read/8, error -110
[  204.367908][ T5850] usb usb44-port1: attempt power cycle
[  204.573106][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.958'.
[  204.576799][ T9980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.958'.
[  204.791380][ T9982] CacheFiles: No cache directory specified
[  204.817327][ T5855] usb 9-1: new low-speed USB device number 4 using dummy_hcd
[  204.928581][ T5850] usb usb44-port1: unable to enumerate USB device
[  205.008959][ T5855] usb 9-1: config 0 has no interfaces?
[  205.011535][ T5855] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  205.015323][ T5855] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.021119][ T5855] usb 9-1: config 0 descriptor??
[  205.070045][ T9995] netlink: 'syz.2.964': attribute type 1 has an invalid length.
[  205.072700][ T9995] netlink: 'syz.2.964': attribute type 2 has an invalid length.
[  205.076770][ T9995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'.
[  205.097333][   T29] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  205.258553][   T29] usb 8-1: Using ep0 maxpacket: 8
[  205.264684][   T24] usb 9-1: USB disconnect, device number 4
[  205.274206][   T29] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  205.278673][   T29] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  205.282527][   T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.917303][   T29] usb 7-1: new full-speed USB device number 20 using dummy_hcd
[  205.946915][   T42] kauditd_printk_skb: 17 callbacks suppressed
[  205.946934][   T42] audit: type=1326 audit(1785472341.620:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.968" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000
[  205.959785][   T42] audit: type=1326 audit(1785472341.640:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.968" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000
[  205.968434][   T42] audit: type=1326 audit(1785472341.640:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.968" exe="/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf700efec code=0x7ffc0000
[  206.068553][   T29] usb 7-1: config index 0 descriptor too short (expected 39, got 27)
[  206.071431][   T29] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  206.076805][   T29] usb 7-1: config 0 interface 0 has no altsetting 0
[  206.081211][   T29] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  206.081661][T10042] wg2 speed is unknown, defaulting to 1000
[  206.084132][   T29] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  206.092262][   T29] usb 7-1: Product: syz
[  206.093766][   T29] usb 7-1: Manufacturer: syz
[  206.095233][   T29] usb 7-1: SerialNumber: syz
[  206.099798][   T29] usb 7-1: config 0 descriptor??
[  206.104064][   T42] audit: type=1326 audit(1785472341.780:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.968" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf700f008 code=0x7ffc0000
[  206.111917][   T29] hub 7-1:0.0: bad descriptor, ignoring hub
[  206.114175][   T29] hub 7-1:0.0: probe with driver hub failed with error -5
[  206.117254][   T42] audit: type=1326 audit(1785472341.780:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.968" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000
[  206.124849][   T29] usb 7-1: selecting invalid altsetting 0
[  206.136242][   T42] audit: type=1326 audit(1785472341.780:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.968" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000
[  206.149073][   T42] audit: type=1326 audit(1785472341.800:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.968" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf700efec code=0x7ffc0000
[  206.156701][   T42] audit: type=1326 audit(1785472341.800:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.968" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000
[  206.163724][   T42] audit: type=1326 audit(1785472341.800:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.968" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000
[  206.170251][   T42] audit: type=1326 audit(1785472341.800:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.968" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf700efec code=0x7ffc0000
[  206.282792][T10042] lo speed is unknown, defaulting to 1000
[  206.637266][ T5822] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  206.723190][   T24] usb 7-1: USB disconnect, device number 20
[  206.787215][ T5822] usb 6-1: Using ep0 maxpacket: 8
[  206.790318][ T5822] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  206.793669][ T5822] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  206.797036][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.887381][   T24] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  207.047666][   T24] usb 7-1: config index 0 descriptor too short (expected 39, got 27)
[  207.053540][   T24] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  207.059396][   T24] usb 7-1: config 0 interface 0 has no altsetting 0
[  207.063386][   T24] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  207.066569][   T24] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  207.070335][   T24] usb 7-1: Product: syz
[  207.071955][   T24] usb 7-1: Manufacturer: syz
[  207.073690][   T24] usb 7-1: SerialNumber: syz
[  207.078430][   T24] usb 7-1: config 0 descriptor??
[  207.085747][   T24] hub 7-1:0.0: bad descriptor, ignoring hub
[  207.088654][   T24] hub 7-1:0.0: probe with driver hub failed with error -5
[  207.092621][   T24] usb 7-1: selecting invalid altsetting 0
[  207.208162][T10071] i801_smbus 0000:00:1f.3: SMBus is busy, can't use it!
[  207.417618][   T24] usb 7-1: USB disconnect, device number 21
[  207.925982][T10073] FAULT_INJECTION: forcing a failure.
[  207.925982][T10073] name failslab, interval 1, probability 0, space 0, times 0
[  207.932059][T10073] CPU: 2 UID: 0 PID: 10073 Comm: syz.2.970 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  207.932093][T10073] Tainted: [L]=SOFTLOCKUP
[  207.932100][T10073] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  207.932112][T10073] Call Trace:
[  207.932121][T10073]  <TASK>
[  207.932130][T10073]  dump_stack_lvl+0x100/0x190
[  207.932164][T10073]  should_fail_ex.cold+0x5/0xa
[  207.932189][T10073]  should_failslab+0xc2/0x120
[  207.932218][T10073]  __kmalloc_cache_noprof+0x91/0x6c0
[  207.932241][T10073]  ? __mutex_lock+0x26d/0x1bd0
[  207.932270][T10073]  ? __request_region+0x5c/0xf0
[  207.932304][T10073]  __request_region+0x5c/0xf0
[  207.932332][T10073]  __comedi_check_request_region+0xfb/0x130
[  207.932383][T10073]  comedi_check_request_region+0x3c/0xc0
[  207.932407][T10073]  dt2815_attach+0x77/0x740
[  207.932436][T10073]  comedi_device_attach+0x40e/0x6b0
[  207.932465][T10073]  do_devconfig_ioctl+0x1b3/0x6d0
[  207.932491][T10073]  ? comedi_unlocked_ioctl+0x180/0x3310
[  207.932522][T10073]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[  207.932560][T10073]  ? tomoyo_path_number_perm+0x46d/0x580
[  207.932588][T10073]  ? kasan_save_stack+0x3f/0x50
[  207.932611][T10073]  ? kasan_save_stack+0x30/0x50
[  207.932634][T10073]  ? kasan_save_track+0x14/0x30
[  207.932656][T10073]  ? kasan_save_free_info+0x3b/0x70
[  207.932681][T10073]  comedi_unlocked_ioctl+0x860/0x3310
[  207.932717][T10073]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  207.932767][T10073]  ? kasan_quarantine_put+0x104/0x240
[  207.932789][T10073]  ? lockdep_hardirqs_on+0x78/0x100
[  207.932814][T10073]  ? find_held_lock+0x2b/0x80
[  207.932839][T10073]  ? tomoyo_path_number_perm+0x28f/0x580
[  207.932863][T10073]  ? tomoyo_path_number_perm+0x28f/0x580
[  207.932892][T10073]  ? tomoyo_path_number_perm+0x188/0x580
[  207.932922][T10073]  comedi_compat_ioctl+0x438/0xe20
[  207.932953][T10073]  ? __pfx_comedi_compat_ioctl+0x10/0x10
[  207.932984][T10073]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  207.933015][T10073]  ? do_vfs_ioctl+0x226/0x13e0
[  207.933059][T10073]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  207.933094][T10073]  ? find_held_lock+0x2b/0x80
[  207.933116][T10073]  ? __fget_files+0x215/0x3d0
[  207.933134][T10073]  ? hook_file_ioctl_common+0x140/0x440
[  207.933165][T10073]  ? __fget_files+0x21f/0x3d0
[  207.933189][T10073]  ? __pfx_comedi_compat_ioctl+0x10/0x10
[  207.933217][T10073]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  207.933243][T10073]  __do_fast_syscall_32+0xe7/0x970
[  207.933265][T10073]  ? lockdep_hardirqs_on+0x78/0x100
[  207.933287][T10073]  do_fast_syscall_32+0x32/0x70
[  207.933311][T10073]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  207.933334][T10073] RIP: 0023:0xf7fe7fec
[  207.933360][T10073] Code: Unable to access opcode bytes at 0xf7fe7fc2.
[  207.933370][T10073] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  207.933389][T10073] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400
[  207.933402][T10073] RDX: 00000000800004c0 RSI: 0000000000000000 RDI: 0000000000000000
[  207.933414][T10073] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  207.933426][T10073] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  207.933436][T10073] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  207.933461][T10073]  </TASK>
[  207.933635][T10073] comedi comedi3: dt2815: I/O port conflict (0x200,2)
[  208.180096][T10075] CacheFiles: No cache directory specified
[  208.334009][T10080] tmpfs: Bad value for 'nr_inodes'
[  208.591080][T10089] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0
[  208.879867][   T24] usb 8-1: USB disconnect, device number 26
[  208.968237][T10105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.977'.
[  209.377389][ T5850] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  209.529803][ T5850] usb 9-1: unable to get BOS descriptor or descriptor too short
[  209.534331][ T5850] usb 9-1: config 228 has an invalid interface number: 86 but max is 0
[  209.538252][ T5850] usb 9-1: config 228 has no interface number 0
[  209.540963][ T5850] usb 9-1: config 228 interface 86 has no altsetting 0
[  209.546150][ T5850] usb 9-1: New USB device found, idVendor=0b57, idProduct=9de3, bcdDevice=87.f6
[  209.550400][ T5850] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.553767][ T5850] usb 9-1: Product: syz
[  209.555512][ T5850] usb 9-1: Manufacturer: syz
[  209.561213][ T5850] usb 9-1: SerialNumber: syz
[  209.759548][   T24] kernel write not supported for file /sg0 (pid: 24 comm: kworker/2:0)
[  209.759734][T10117] FAULT_INJECTION: forcing a failure.
[  209.759734][T10117] name failslab, interval 1, probability 0, space 0, times 0
[  209.769789][T10117] CPU: 0 UID: 0 PID: 10117 Comm: syz.3.981 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  209.769808][T10117] Tainted: [L]=SOFTLOCKUP
[  209.769813][T10117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  209.769820][T10117] Call Trace:
[  209.769824][T10117]  <TASK>
[  209.769829][T10117]  dump_stack_lvl+0x100/0x190
[  209.769849][T10117]  should_fail_ex.cold+0x5/0xa
[  209.769863][T10117]  should_failslab+0xc2/0x120
[  209.769880][T10117]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  209.769895][T10117]  ? __alloc_skb+0x140/0x710
[  209.769914][T10117]  __alloc_skb+0x140/0x710
[  209.769926][T10117]  ? __alloc_skb+0x5b7/0x710
[  209.769940][T10117]  ? __pfx___alloc_skb+0x10/0x10
[  209.769957][T10117]  hci_sock_sendmsg+0x1b01/0x2620
[  209.769991][T10117]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  209.770005][T10117]  ? apparmor_socket_sendmsg+0x15b/0x270
[  209.770021][T10117]  sock_write_iter+0x53a/0x5b0
[  209.770032][T10117]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  209.770046][T10117]  ? __pfx_sock_write_iter+0x10/0x10
[  209.770061][T10117]  ? bpf_lsm_file_permission+0x9/0x10
[  209.770072][T10117]  ? security_file_permission+0x76/0x210
[  209.770089][T10117]  ? rw_verify_area+0xce/0x6d0
[  209.770106][T10117]  vfs_write+0x6ac/0x1050
[  209.770117][T10117]  ? __pfx_sock_write_iter+0x10/0x10
[  209.770129][T10117]  ? __pfx_vfs_write+0x10/0x10
[  209.770138][T10117]  ? find_held_lock+0x2b/0x80
[  209.770162][T10117]  ksys_write+0x1f8/0x250
[  209.770172][T10117]  ? __pfx_ksys_write+0x10/0x10
[  209.770182][T10117]  ? ksys_write+0x1ac/0x250
[  209.770192][T10117]  ? __pfx_ksys_write+0x10/0x10
[  209.770205][T10117]  __do_fast_syscall_32+0xe7/0x970
[  209.770221][T10117]  ? lockdep_hardirqs_on+0x78/0x100
[  209.770236][T10117]  do_fast_syscall_32+0x32/0x70
[  209.770250][T10117]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  209.770265][T10117] RIP: 0023:0xf7f94fec
[  209.770279][T10117] Code: Unable to access opcode bytes at 0xf7f94fc2.
[  209.770285][T10117] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  209.770297][T10117] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080
[  209.770304][T10117] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000000
[  209.770311][T10117] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  209.770316][T10117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  209.770323][T10117] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  209.770336][T10117]  </TASK>
[  209.770347][T10117] Bluetooth: MGMT ver 1.23
[  209.917430][   T29] usb 6-1: USB disconnect, device number 22
[  209.923704][T10120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.982'.
[  209.927641][T10120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.982'.
[  209.949662][ T3266] hid_parser_main: 14 callbacks suppressed
[  209.949677][ T3266] hid-generic 0000:0000:0000.000A: unknown main item tag 0x7
[  209.956727][ T3266] hid-generic 0000:0000:0000.000A: ignoring exceeding usage max
[  209.960958][ T3266] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  209.963408][ T3266] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  209.965755][ T3266] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  209.968661][ T3266] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  209.971129][ T3266] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  209.973475][ T3266] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  209.975802][ T3266] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  209.978556][ T3266] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  209.981073][ T3266] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  209.985441][ T3266] hid-generic 0000:0000:0000.000A: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  209.994197][ T5850] usbhid 9-1:228.86: couldn't find an input interrupt endpoint
[  210.000243][ T5850] usb 9-1: USB disconnect, device number 5
[  210.207270][ T5979] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  210.378745][ T5979] usb 8-1: too many configurations: 9, using maximum allowed: 8
[  210.383468][ T5979] usb 8-1: config index 0 descriptor too short (expected 7707, got 27)
[  210.386975][ T5979] usb 8-1: config 193 has too many interfaces: 118, using maximum allowed: 32
[  210.391289][ T5979] usb 8-1: config 193 has an invalid descriptor of length 55, skipping remainder of the config
[  210.395692][ T5979] usb 8-1: config 193 has 0 interfaces, different from the descriptor's value: 118
[  210.399936][ T5979] usb 8-1: config index 1 descriptor too short (expected 7707, got 27)
[  210.402648][ T5979] usb 8-1: config 193 has too many interfaces: 118, using maximum allowed: 32
[  210.405329][ T5979] usb 8-1: config 193 has an invalid descriptor of length 55, skipping remainder of the config
[  210.408675][ T5979] usb 8-1: config 193 has 0 interfaces, different from the descriptor's value: 118
[  210.413363][ T5979] usb 8-1: config index 2 descriptor too short (expected 7707, got 27)
[  210.416776][ T5979] usb 8-1: config 193 has too many interfaces: 118, using maximum allowed: 32
[  210.420736][ T5979] usb 8-1: config 193 has an invalid descriptor of length 55, skipping remainder of the config
[  210.424846][ T5979] usb 8-1: config 193 has 0 interfaces, different from the descriptor's value: 118
[  210.429810][ T5979] usb 8-1: config index 3 descriptor too short (expected 7707, got 27)
[  210.433409][ T5979] usb 8-1: config 193 has too many interfaces: 118, using maximum allowed: 32
[  210.437038][ T5979] usb 8-1: config 193 has an invalid descriptor of length 55, skipping remainder of the config
[  210.441497][ T5979] usb 8-1: config 193 has 0 interfaces, different from the descriptor's value: 118
[  210.446545][ T5979] usb 8-1: config index 4 descriptor too short (expected 7707, got 27)
[  210.449947][ T5979] usb 8-1: config 193 has too many interfaces: 118, using maximum allowed: 32
[  210.453564][ T5979] usb 8-1: config 193 has an invalid descriptor of length 55, skipping remainder of the config
[  210.457925][ T5979] usb 8-1: config 193 has 0 interfaces, different from the descriptor's value: 118
[  210.462820][ T5979] usb 8-1: config index 5 descriptor too short (expected 7707, got 27)
[  210.466329][ T5979] usb 8-1: config 193 has too many interfaces: 118, using maximum allowed: 32
[  210.470047][ T5979] usb 8-1: config 193 has an invalid descriptor of length 55, skipping remainder of the config
[  210.474278][ T5979] usb 8-1: config 193 has 0 interfaces, different from the descriptor's value: 118
[  210.479192][ T5979] usb 8-1: config index 6 descriptor too short (expected 7707, got 27)
[  210.482739][ T5979] usb 8-1: config 193 has too many interfaces: 118, using maximum allowed: 32
[  210.486391][ T5979] usb 8-1: config 193 has an invalid descriptor of length 55, skipping remainder of the config
[  210.490608][ T5979] usb 8-1: config 193 has 0 interfaces, different from the descriptor's value: 118
[  210.495512][ T5979] usb 8-1: config index 7 descriptor too short (expected 7707, got 27)
[  210.499500][ T5979] usb 8-1: config 193 has too many interfaces: 118, using maximum allowed: 32
[  210.503269][ T5979] usb 8-1: config 193 has an invalid descriptor of length 55, skipping remainder of the config
[  210.507528][ T5979] usb 8-1: config 193 has 0 interfaces, different from the descriptor's value: 118
[  210.513687][ T5979] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  210.517886][ T5979] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  210.521923][ T5979] usb 8-1: Product: syz
[  210.524977][ T5979] usb 8-1: Manufacturer: syz
[  210.526878][ T5979] usb 8-1: SerialNumber: syz
[  210.751584][ T5979] usb 8-1: USB disconnect, device number 27
[  210.825999][T10137] FAULT_INJECTION: forcing a failure.
[  210.825999][T10137] name failslab, interval 1, probability 0, space 0, times 0
[  210.832415][T10137] CPU: 1 UID: 0 PID: 10137 Comm: syz.4.986 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  210.832436][T10137] Tainted: [L]=SOFTLOCKUP
[  210.832440][T10137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  210.832447][T10137] Call Trace:
[  210.832453][T10137]  <TASK>
[  210.832458][T10137]  dump_stack_lvl+0x100/0x190
[  210.832480][T10137]  should_fail_ex.cold+0x5/0xa
[  210.832510][T10137]  should_failslab+0xc2/0x120
[  210.832528][T10137]  __kmalloc_noprof+0xfc/0x820
[  210.832541][T10137]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  210.832556][T10137]  ? hash_ipport6_add+0x1a2b/0x28d0
[  210.832586][T10137]  hash_ipport6_add+0x1a2b/0x28d0
[  210.832604][T10137]  ? ip_set_get_extensions+0xf0/0xb70
[  210.832621][T10137]  ? __pfx_hash_ipport6_add+0x10/0x10
[  210.832633][T10137]  ? __pfx_ip_set_get_extensions+0x10/0x10
[  210.832651][T10137]  hash_ipport6_uadt+0x991/0xc90
[  210.832663][T10137]  ? __pfx_hash_ipport6_add+0x10/0x10
[  210.832677][T10137]  ? __pfx_hash_ipport6_uadt+0x10/0x10
[  210.832693][T10137]  ? find_held_lock+0x2b/0x80
[  210.832706][T10137]  ? is_bpf_text_address+0x8a/0x1a0
[  210.832723][T10137]  ? is_bpf_text_address+0x8a/0x1a0
[  210.832740][T10137]  call_ad.isra.0+0x16e/0x940
[  210.832757][T10137]  ? __pfx_call_ad.isra.0+0x10/0x10
[  210.832771][T10137]  ? __pfx___nla_validate_parse+0x10/0x10
[  210.832791][T10137]  ? __nla_parse+0x40/0x60
[  210.832804][T10137]  ip_set_ad.isra.0+0x3eb/0x8a0
[  210.832822][T10137]  ? __pfx_ip_set_ad.isra.0+0x10/0x10
[  210.832837][T10137]  ? trace_contention_end+0x126/0x160
[  210.832859][T10137]  ? find_held_lock+0x2b/0x80
[  210.832875][T10137]  nfnetlink_rcv_msg+0x9d5/0x11e0
[  210.832896][T10137]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  210.832910][T10137]  ? skb_release_data+0x6ca/0x8e0
[  210.832928][T10137]  ? kfree_skbmem+0x19f/0x210
[  210.832951][T10137]  ? __pfx___dev_queue_xmit+0x10/0x10
[  210.832967][T10137]  netlink_rcv_skb+0x159/0x420
[  210.832980][T10137]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  210.832996][T10137]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  210.833013][T10137]  ? ns_capable+0xd2/0xf0
[  210.833028][T10137]  nfnetlink_rcv+0x1b3/0x440
[  210.833042][T10137]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  210.833057][T10137]  ? netlink_deliver_tap+0x1ae/0xcc0
[  210.833070][T10137]  netlink_unicast+0x585/0x850
[  210.833084][T10137]  ? __pfx_netlink_unicast+0x10/0x10
[  210.833099][T10137]  netlink_sendmsg+0x8b0/0xda0
[  210.833113][T10137]  ? __pfx_netlink_sendmsg+0x10/0x10
[  210.833126][T10137]  ? apparmor_socket_sendmsg+0x15b/0x270
[  210.833142][T10137]  ____sys_sendmsg+0xa4d/0xbe0
[  210.833153][T10137]  ? __pfx_netlink_sendmsg+0x10/0x10
[  210.833165][T10137]  ? __pfx_____sys_sendmsg+0x10/0x10
[  210.833182][T10137]  ___sys_sendmsg+0x190/0x1e0
[  210.833194][T10137]  ? __pfx____sys_sendmsg+0x10/0x10
[  210.833212][T10137]  ? find_held_lock+0x2b/0x80
[  210.833233][T10137]  __sys_sendmsg+0x160/0x210
[  210.833248][T10137]  ? __pfx___sys_sendmsg+0x10/0x10
[  210.833266][T10137]  ? __pfx_ksys_write+0x10/0x10
[  210.833285][T10137]  __do_fast_syscall_32+0xe7/0x970
[  210.833302][T10137]  ? lockdep_hardirqs_on+0x78/0x100
[  210.833317][T10137]  do_fast_syscall_32+0x32/0x70
[  210.833332][T10137]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  210.833348][T10137] RIP: 0023:0xf7fb7fec
[  210.833365][T10137] Code: Unable to access opcode bytes at 0xf7fb7fc2.
[  210.833370][T10137] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  210.833382][T10137] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800002c0
[  210.833389][T10137] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000
[  210.833396][T10137] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  210.833402][T10137] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  210.833409][T10137] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  210.833422][T10137]  </TASK>
[  210.837521][ T3266] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  211.139917][ T3266] usb 7-1: Using ep0 maxpacket: 8
[  211.144062][T10149] pim6reg: entered allmulticast mode
[  211.145994][ T3266] usb 7-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  211.150846][ T3266] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  211.157838][ T3266] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.251949][T10148] pim6reg: left allmulticast mode
[  211.268839][ T5855] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  211.429204][ T5855] usb 9-1: unable to get BOS descriptor or descriptor too short
[  211.432587][ T5855] usb 9-1: config 228 has an invalid interface number: 86 but max is 0
[  211.435244][ T5855] usb 9-1: config 228 has no interface number 0
[  211.437621][ T5855] usb 9-1: config 228 interface 86 has no altsetting 0
[  211.441409][ T5855] usb 9-1: New USB device found, idVendor=0b57, idProduct=9de3, bcdDevice=87.f6
[  211.444352][ T5855] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.446867][ T5855] usb 9-1: Product: syz
[  211.448657][ T5855] usb 9-1: Manufacturer: syz
[  211.450205][ T5855] usb 9-1: SerialNumber: syz
[  211.527370][ T5850] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[  211.677306][ T5850] usb 8-1: Using ep0 maxpacket: 8
[  211.683157][ T5850] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  211.686567][ T5850] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  211.689849][ T5850] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.845407][ T5855] usbhid 9-1:228.86: couldn't find an input interrupt endpoint
[  211.860837][ T5855] usb 9-1: USB disconnect, device number 6
[  212.006625][T10157] i801_smbus 0000:00:1f.3: SMBus is busy, can't use it!
[  212.197233][ T3266] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  212.359058][ T3266] usb 6-1: unable to get BOS descriptor or descriptor too short
[  212.362898][ T3266] usb 6-1: config 228 has an invalid interface number: 86 but max is 0
[  212.365907][ T3266] usb 6-1: config 228 has no interface number 0
[  212.368129][ T3266] usb 6-1: config 228 interface 86 has no altsetting 0
[  212.372747][ T3266] usb 6-1: New USB device found, idVendor=0b57, idProduct=9de3, bcdDevice=87.f6
[  212.375729][ T3266] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.378485][ T3266] usb 6-1: Product: syz
[  212.379928][ T3266] usb 6-1: Manufacturer: syz
[  212.381552][ T3266] usb 6-1: SerialNumber: syz
[  212.805927][T10167] fuse: root generation should be zero
[  212.807713][ T3266] usbhid 6-1:228.86: couldn't find an input interrupt endpoint
[  212.813449][ T3266] usb 6-1: USB disconnect, device number 23
[  213.031952][T10179] cgroup2: Unknown parameter 'fqnmods'
[  213.174875][T10181] FAULT_INJECTION: forcing a failure.
[  213.174875][T10181] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  213.180423][T10181] CPU: 3 UID: 0 PID: 10181 Comm: syz.4.998 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  213.180457][T10181] Tainted: [L]=SOFTLOCKUP
[  213.180464][T10181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  213.180475][T10181] Call Trace:
[  213.180482][T10181]  <TASK>
[  213.180489][T10181]  dump_stack_lvl+0x100/0x190
[  213.180517][T10181]  should_fail_ex.cold+0x5/0xa
[  213.180537][T10181]  _copy_from_user+0x2e/0xd0
[  213.180564][T10181]  get_user_ifreq+0x116/0x1c0
[  213.180591][T10181]  sock_do_ioctl+0x16e/0x280
[  213.180615][T10181]  ? __pfx_sock_do_ioctl+0x10/0x10
[  213.180644][T10181]  ? do_vfs_ioctl+0x226/0x13e0
[  213.180668][T10181]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  213.180694][T10181]  ? __pfx_unix_compat_ioctl+0x10/0x10
[  213.180715][T10181]  ? unix_ioctl+0x9c/0x570
[  213.180734][T10181]  compat_sock_ioctl+0x568/0x760
[  213.180756][T10181]  ? __pfx_compat_sock_ioctl+0x10/0x10
[  213.180774][T10181]  ? hook_file_ioctl_common+0x140/0x440
[  213.180801][T10181]  ? __fget_files+0x21f/0x3d0
[  213.180822][T10181]  ? __pfx_compat_sock_ioctl+0x10/0x10
[  213.180842][T10181]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  213.180869][T10181]  __do_fast_syscall_32+0xe7/0x970
[  213.180893][T10181]  ? lockdep_hardirqs_on+0x78/0x100
[  213.180915][T10181]  do_fast_syscall_32+0x32/0x70
[  213.180936][T10181]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  213.180958][T10181] RIP: 0023:0xf7fb7fec
[  213.180979][T10181] Code: Unable to access opcode bytes at 0xf7fb7fc2.
[  213.180987][T10181] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  213.181005][T10181] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008943
[  213.181015][T10181] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000
[  213.181026][T10181] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  213.181035][T10181] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  213.181044][T10181] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  213.181065][T10181]  </TASK>
[  213.455282][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1000'.
[  213.472433][T10185] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  213.472892][T10187] tipc: Started in network mode
[  213.512120][T10187] tipc: Node identity 6a2ee051bc24, cluster identity 4711
[  213.515397][T10187] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  213.519681][T10187] syzkaller0: entered promiscuous mode
[  213.522088][T10187] syzkaller0: entered allmulticast mode
[  213.529926][T10188] 
@0Ù: renamed from bond_slave_1 (while UP)
[  213.537005][T10186] tipc: Resetting bearer <eth:syzkaller0>
[  213.548983][T10186] tipc: Disabling bearer <eth:syzkaller0>
[  213.588220][ T3266] usb 7-1: USB disconnect, device number 22
[  213.662229][T10192] FAULT_INJECTION: forcing a failure.
[  213.662229][T10192] name failslab, interval 1, probability 0, space 0, times 0
[  213.666573][T10192] CPU: 3 UID: 0 PID: 10192 Comm: syz.4.1003 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  213.666592][T10192] Tainted: [L]=SOFTLOCKUP
[  213.666596][T10192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  213.666603][T10192] Call Trace:
[  213.666608][T10192]  <TASK>
[  213.666614][T10192]  dump_stack_lvl+0x100/0x190
[  213.666632][T10192]  should_fail_ex.cold+0x5/0xa
[  213.666646][T10192]  should_failslab+0xc2/0x120
[  213.666663][T10192]  __kmalloc_noprof+0xfc/0x820
[  213.666676][T10192]  ? rcu_is_watching+0x12/0xc0
[  213.666692][T10192]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[  213.666712][T10192]  genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[  213.666729][T10192]  genl_family_rcv_msg_doit+0xc7/0x300
[  213.666751][T10192]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  213.666778][T10192]  ? genl_get_cmd+0x3e7/0x760
[  213.666805][T10192]  ? bpf_lsm_capable+0x9/0x10
[  213.666826][T10192]  ? security_capable+0x80/0x260
[  213.666849][T10192]  ? ns_capable+0xd2/0xf0
[  213.666873][T10192]  genl_rcv_msg+0x560/0x800
[  213.666895][T10192]  ? __pfx_genl_rcv_msg+0x10/0x10
[  213.666909][T10192]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[  213.666927][T10192]  netlink_rcv_skb+0x159/0x420
[  213.666939][T10192]  ? __pfx_genl_rcv_msg+0x10/0x10
[  213.666953][T10192]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  213.666970][T10192]  ? netlink_deliver_tap+0x1ae/0xcc0
[  213.666983][T10192]  genl_rcv+0x28/0x40
[  213.666994][T10192]  netlink_unicast+0x585/0x850
[  213.667008][T10192]  ? __pfx_netlink_unicast+0x10/0x10
[  213.667023][T10192]  netlink_sendmsg+0x8b0/0xda0
[  213.667037][T10192]  ? __pfx_netlink_sendmsg+0x10/0x10
[  213.667051][T10192]  ? apparmor_socket_sendmsg+0x15b/0x270
[  213.667066][T10192]  ____sys_sendmsg+0xa4d/0xbe0
[  213.667077][T10192]  ? __pfx_netlink_sendmsg+0x10/0x10
[  213.667090][T10192]  ? __pfx_____sys_sendmsg+0x10/0x10
[  213.667106][T10192]  ___sys_sendmsg+0x190/0x1e0
[  213.667139][T10192]  ? __pfx____sys_sendmsg+0x10/0x10
[  213.667170][T10192]  ? find_held_lock+0x2b/0x80
[  213.667208][T10192]  __sys_sendmsg+0x160/0x210
[  213.667233][T10192]  ? __pfx___sys_sendmsg+0x10/0x10
[  213.667264][T10192]  ? __pfx_ksys_write+0x10/0x10
[  213.667288][T10192]  __do_fast_syscall_32+0xe7/0x970
[  213.667312][T10192]  ? lockdep_hardirqs_on+0x78/0x100
[  213.667336][T10192]  do_fast_syscall_32+0x32/0x70
[  213.667361][T10192]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  213.667385][T10192] RIP: 0023:0xf7fb7fec
[  213.667408][T10192] Code: Unable to access opcode bytes at 0xf7fb7fc2.
[  213.667417][T10192] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  213.667436][T10192] RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 0000000080000540
[  213.667448][T10192] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  213.667459][T10192] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  213.667469][T10192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  213.667480][T10192] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  213.667501][T10192]  </TASK>
[  213.811562][T10199] FAULT_INJECTION: forcing a failure.
[  213.811562][T10199] name failslab, interval 1, probability 0, space 0, times 0
[  213.815696][T10199] CPU: 0 UID: 0 PID: 10199 Comm: syz.4.1005 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  213.815715][T10199] Tainted: [L]=SOFTLOCKUP
[  213.815719][T10199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  213.815726][T10199] Call Trace:
[  213.815732][T10199]  <TASK>
[  213.815737][T10199]  dump_stack_lvl+0x100/0x190
[  213.815756][T10199]  should_fail_ex.cold+0x5/0xa
[  213.815772][T10199]  should_failslab+0xc2/0x120
[  213.815790][T10199]  __kmalloc_cache_noprof+0x91/0x6c0
[  213.815802][T10199]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  213.815818][T10199]  ? snd_ctl_elem_add_compat+0x51/0x3e0
[  213.815862][T10199]  snd_ctl_elem_add_compat+0x51/0x3e0
[  213.815880][T10199]  snd_ctl_ioctl_compat+0x98d/0xbb0
[  213.815897][T10199]  ? __pfx_snd_ctl_ioctl_compat+0x10/0x10
[  213.815913][T10199]  ? find_held_lock+0x2b/0x80
[  213.815927][T10199]  ? __fget_files+0x215/0x3d0
[  213.815938][T10199]  ? hook_file_ioctl_common+0x140/0x440
[  213.815957][T10199]  ? __fget_files+0x21f/0x3d0
[  213.815969][T10199]  ? __pfx_snd_ctl_ioctl_compat+0x10/0x10
[  213.815985][T10199]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  213.816004][T10199]  __do_fast_syscall_32+0xe7/0x970
[  213.816020][T10199]  ? lockdep_hardirqs_on+0x78/0x100
[  213.816034][T10199]  do_fast_syscall_32+0x32/0x70
[  213.816049][T10199]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  213.816063][T10199] RIP: 0023:0xf7fb7fec
[  213.816077][T10199] Code: Unable to access opcode bytes at 0xf7fb7fc2.
[  213.816083][T10199] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  213.816094][T10199] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c1105517
[  213.816102][T10199] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000
[  213.816109][T10199] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  213.816115][T10199] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  213.816121][T10199] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  213.816134][T10199]  </TASK>
[  214.102794][T10210] dvmrp0: entered allmulticast mode
[  214.305676][   T24] usb 8-1: USB disconnect, device number 28
[  214.353198][T10220] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  214.418353][T10220] mmap: syz.3.1013 (10220) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  214.437240][ T5850] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  214.565830][T10232] FAULT_INJECTION: forcing a failure.
[  214.565830][T10232] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  214.570736][T10232] CPU: 2 UID: 0 PID: 10232 Comm: syz.4.1017 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  214.570755][T10232] Tainted: [L]=SOFTLOCKUP
[  214.570760][T10232] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  214.570766][T10232] Call Trace:
[  214.570772][T10232]  <TASK>
[  214.570777][T10232]  dump_stack_lvl+0x100/0x190
[  214.570797][T10232]  should_fail_ex.cold+0x5/0xa
[  214.570811][T10232]  _copy_from_user+0x2e/0xd0
[  214.570830][T10232]  get_old_itimerspec32+0x86/0x1e0
[  214.570849][T10232]  ? __pfx_get_old_itimerspec32+0x10/0x10
[  214.570866][T10232]  ? __mutex_unlock_slowpath+0x35d/0x930
[  214.570885][T10232]  __ia32_sys_timerfd_settime32+0x162/0x280
[  214.570904][T10232]  ? __pfx___ia32_sys_timerfd_settime32+0x10/0x10
[  214.570924][T10232]  ? ksys_write+0x1ac/0x250
[  214.570935][T10232]  ? __pfx_ksys_write+0x10/0x10
[  214.570948][T10232]  __do_fast_syscall_32+0xe7/0x970
[  214.570963][T10232]  ? lockdep_hardirqs_on+0x78/0x100
[  214.570977][T10232]  do_fast_syscall_32+0x32/0x70
[  214.570992][T10232]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  214.571006][T10232] RIP: 0023:0xf7fb7fec
[  214.571021][T10232] Code: Unable to access opcode bytes at 0xf7fb7fc2.
[  214.571026][T10232] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000145
[  214.571038][T10232] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 0000000000000000
[  214.571045][T10232] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000
[  214.571052][T10232] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  214.571058][T10232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  214.571065][T10232] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  214.571078][T10232]  </TASK>
[  214.597246][ T5850] usb 7-1: Using ep0 maxpacket: 8
[  214.626009][T10234] tmpfs: Unknown parameter 'hugP'
[  214.628122][ T5850] usb 7-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  214.642186][ T5850] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  214.645924][ T5850] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.897324][ T3266] usb 9-1: new full-speed USB device number 7 using dummy_hcd
[  215.075516][ T3266] usb 9-1: not running at top speed; connect to a high speed hub
[  215.081761][ T3266] usb 9-1: config 3 has an invalid interface number: 255 but max is 0
[  215.085195][ T3266] usb 9-1: config 3 has an invalid descriptor of length 242, skipping remainder of the config
[  215.090992][ T3266] usb 9-1: config 3 has no interface number 0
[  215.093176][ T3266] usb 9-1: config 3 interface 255 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 6
[  215.097376][ T3266] usb 9-1: config 3 interface 255 has no altsetting 0
[  215.100374][ T3266] usb 9-1: language id specifier not provided by device, defaulting to English
[  215.117545][ T3266] usb 9-1: New USB device found, idVendor=24d2, idProduct=1084, bcdDevice=50.4f
[  215.121589][ T3266] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.207251][ T5850] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  215.357525][ T5850] usb 6-1: Using ep0 maxpacket: 8
[  215.375817][ T5850] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  215.380610][ T5850] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  215.384205][ T5850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.395391][T10258] Bluetooth: MGMT ver 1.23
[  215.408796][T10259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1025'.
[  215.741588][T10265] i801_smbus 0000:00:1f.3: SMBus is busy, can't use it!
[  216.364819][T10271] sctp: [Deprecated]: syz.3.1027 (pid 10271) Use of int in max_burst socket option deprecated.
[  216.364819][T10271] Use struct sctp_assoc_value instead
[  217.205553][ T5822] usb 7-1: USB disconnect, device number 23
[  217.242559][T10277] FAULT_INJECTION: forcing a failure.
[  217.242559][T10277] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  217.246993][T10277] CPU: 3 UID: 0 PID: 10277 Comm: syz.2.1030 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  217.247015][T10277] Tainted: [L]=SOFTLOCKUP
[  217.247019][T10277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  217.247027][T10277] Call Trace:
[  217.247046][T10277]  <TASK>
[  217.247051][T10277]  dump_stack_lvl+0x100/0x190
[  217.247072][T10277]  should_fail_ex.cold+0x5/0xa
[  217.247086][T10277]  _copy_from_user+0x2e/0xd0
[  217.247105][T10277]  get_compat_msghdr+0xb3/0x480
[  217.247125][T10277]  ? __pfx_get_compat_msghdr+0x10/0x10
[  217.247144][T10277]  ? __lock_acquire+0x49f/0x1a40
[  217.247165][T10277]  ___sys_recvmsg+0x193/0x1a0
[  217.247179][T10277]  ? __pfx____sys_recvmsg+0x10/0x10
[  217.247203][T10277]  do_recvmmsg+0x54d/0x740
[  217.247218][T10277]  ? __pfx_do_recvmmsg+0x10/0x10
[  217.247231][T10277]  ? find_held_lock+0x2b/0x80
[  217.247244][T10277]  ? ksys_write+0x190/0x250
[  217.247255][T10277]  ? ksys_write+0x190/0x250
[  217.247271][T10277]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  217.247289][T10277]  __sys_recvmmsg+0x21f/0x270
[  217.247305][T10277]  ? __pfx___sys_recvmmsg+0x10/0x10
[  217.247322][T10277]  ? ksys_write+0x1ac/0x250
[  217.247333][T10277]  __ia32_compat_sys_recvmmsg_time32+0xc4/0x160
[  217.247351][T10277]  ? __do_fast_syscall_32+0x98/0x970
[  217.247366][T10277]  ? lockdep_hardirqs_on+0x78/0x100
[  217.247380][T10277]  __do_fast_syscall_32+0xe7/0x970
[  217.247394][T10277]  ? lockdep_hardirqs_on+0x78/0x100
[  217.247408][T10277]  do_fast_syscall_32+0x32/0x70
[  217.247423][T10277]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  217.247437][T10277] RIP: 0023:0xf7fe7fec
[  217.247454][T10277] Code: Unable to access opcode bytes at 0xf7fe7fc2.
[  217.247459][T10277] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000151
[  217.247471][T10277] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080005000
[  217.247478][T10277] RDX: 00000000000002f2 RSI: 0000000040002022 RDI: 0000000000000000
[  217.247484][T10277] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  217.247491][T10277] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  217.247497][T10277] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  217.247511][T10277]  </TASK>
[  217.342019][T10279] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[  217.344426][T10279] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  217.347389][T10279] vhci_hcd vhci_hcd.0: Device attached
[  217.353664][T10284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1032'.
[  217.356616][T10283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1032'.
[  217.449715][T10284] fuse: Bad value for 'fd'
[  217.511553][T10283] veth5: entered allmulticast mode
[  217.538910][ T1043] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  217.563327][T10283] bond4: (slave veth5): Enslaving as an active interface with an up link
[  217.587277][ T5850] usb 8-1: new low-speed USB device number 29 using dummy_hcd
[  217.597448][ T1043] usb 43-1: new full-speed USB device number 3 using vhci_hcd
[  217.645342][ T3266] usb 9-1: USB disconnect, device number 7
[  217.738751][ T5850] usb 8-1: config 0 has no interfaces?
[  217.740465][ T5850] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  217.743150][ T5850] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.747318][ T5850] usb 8-1: config 0 descriptor??
[  217.951602][T10280] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2
[  217.958010][ T5829] vhci_hcd vhci_hcd.3: stop threads
[  217.960082][ T5829] vhci_hcd vhci_hcd.3: release socket
[  217.960893][ T5855] usb 8-1: USB disconnect, device number 29
[  217.962665][ T5829] vhci_hcd vhci_hcd.3: disconnect device
[  217.985271][ T5822] usb 6-1: USB disconnect, device number 24
[  218.547565][ T3266] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  218.717199][ T3266] usb 6-1: Using ep0 maxpacket: 8
[  218.720398][ T3266] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  218.724109][ T3266] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  218.727693][ T3266] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.036295][T10332] i801_smbus 0000:00:1f.3: SMBus is busy, can't use it!
[  219.743448][T10364] warn_alloc: 2 callbacks suppressed
[  219.743502][T10364] syz.4.1051: vmalloc error: size 3449536512, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  219.751702][T10364] CPU: 3 UID: 0 PID: 10364 Comm: syz.4.1051 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  219.751733][T10364] Tainted: [L]=SOFTLOCKUP
[  219.751741][T10364] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  219.751753][T10364] Call Trace:
[  219.751760][T10364]  <TASK>
[  219.751767][T10364]  dump_stack_lvl+0x100/0x190
[  219.751805][T10364]  warn_alloc.cold+0x94/0xa8
[  219.751827][T10364]  ? __pfx_warn_alloc+0x10/0x10
[  219.751850][T10364]  ? __pfx_stack_trace_save+0x10/0x10
[  219.751878][T10364]  ? kasan_save_stack+0x3f/0x50
[  219.751902][T10364]  ? __kmalloc_cache_noprof+0x2e5/0x6c0
[  219.751921][T10364]  ? vb2_vmalloc_alloc+0xf9/0x410
[  219.751942][T10364]  ? __vb2_queue_alloc+0x8d5/0x1160
[  219.751960][T10364]  ? vb2_core_create_bufs+0x5fa/0xa30
[  219.751979][T10364]  ? vb2_create_bufs+0x40c/0x830
[  219.752002][T10364]  ? vb2_ioctl_create_bufs+0x244/0x3e0
[  219.752025][T10364]  ? vidioc_create_bufs+0x7d/0xf0
[  219.752042][T10364]  ? v4l_create_bufs+0x17d/0x270
[  219.752061][T10364]  ? video_usercopy+0x3d3/0x14c0
[  219.752083][T10364]  ? v4l2_ioctl+0x1bd/0x250
[  219.752106][T10364]  ? v4l2_compat_ioctl32+0x20f/0x2d0
[  219.752127][T10364]  ? vb2_vmalloc_alloc+0x135/0x410
[  219.752145][T10364]  __vmalloc_node_range_noprof+0x136c/0x1630
[  219.752183][T10364]  ? vb2_vmalloc_alloc+0x135/0x410
[  219.752210][T10364]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  219.752243][T10364]  ? kasan_save_track+0x14/0x30
[  219.752265][T10364]  ? __kasan_kmalloc+0xaa/0xb0
[  219.752288][T10364]  ? __kmalloc_cache_noprof+0x2e5/0x6c0
[  219.752309][T10364]  ? vb2_vmalloc_alloc+0x135/0x410
[  219.752329][T10364]  vmalloc_user_noprof+0x9e/0xe0
[  219.752358][T10364]  ? vb2_vmalloc_alloc+0x135/0x410
[  219.752378][T10364]  vb2_vmalloc_alloc+0x135/0x410
[  219.752397][T10364]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[  219.752418][T10364]  __vb2_queue_alloc+0x8d5/0x1160
[  219.752480][T10364]  vb2_core_create_bufs+0x5fa/0xa30
[  219.752511][T10364]  ? __pfx_vb2_core_create_bufs+0x10/0x10
[  219.752541][T10364]  ? lock_acquire+0x1b9/0x370
[  219.752579][T10364]  vb2_create_bufs+0x40c/0x830
[  219.752610][T10364]  ? __pfx_vb2_create_bufs+0x10/0x10
[  219.752634][T10364]  ? v4l_sanitize_colorspace+0x220/0x410
[  219.752674][T10364]  vb2_ioctl_create_bufs+0x244/0x3e0
[  219.752698][T10364]  ? v4l2_compat_get_user+0x883/0x11f0
[  219.752720][T10364]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  219.752750][T10364]  vidioc_create_bufs+0x7d/0xf0
[  219.752775][T10364]  v4l_create_bufs+0x17d/0x270
[  219.752809][T10364]  __video_do_ioctl+0xb2a/0xdf0
[  219.752838][T10364]  ? trace_kmalloc+0xeb/0x110
[  219.752865][T10364]  ? __pfx___video_do_ioctl+0x10/0x10
[  219.752893][T10364]  ? video_usercopy+0x145/0x14c0
[  219.752922][T10364]  video_usercopy+0x3d3/0x14c0
[  219.752949][T10364]  ? __pfx___video_do_ioctl+0x10/0x10
[  219.752977][T10364]  ? __pfx_video_usercopy+0x10/0x10
[  219.753008][T10364]  ? __fget_files+0x215/0x3d0
[  219.753024][T10364]  ? hook_file_ioctl_common+0x140/0x440
[  219.753051][T10364]  v4l2_ioctl+0x1bd/0x250
[  219.753075][T10364]  v4l2_compat_ioctl32+0x20f/0x2d0
[  219.753096][T10364]  ? __pfx_v4l2_compat_ioctl32+0x10/0x10
[  219.753118][T10364]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  219.753146][T10364]  __do_fast_syscall_32+0xe7/0x970
[  219.753171][T10364]  ? lockdep_hardirqs_on+0x78/0x100
[  219.753192][T10364]  do_fast_syscall_32+0x32/0x70
[  219.753216][T10364]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  219.753242][T10364] RIP: 0023:0xf7fb7fec
[  219.753264][T10364] Code: Unable to access opcode bytes at 0xf7fb7fc2.
[  219.753273][T10364] RSP: 002b:00000000f543450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  219.753292][T10364] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000c0f8565c
[  219.753303][T10364] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000
[  219.753313][T10364] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  219.753326][T10364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  219.753337][T10364] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  219.753381][T10364]  </TASK>
[  219.753450][T10364] Mem-Info:
[  219.907660][T10364] active_anon:8469 inactive_anon:337 isolated_anon:0
[  219.907660][T10364]  active_file:297 inactive_file:24509 isolated_file:0
[  219.907660][T10364]  unevictable:768 dirty:541 writeback:0
[  219.907660][T10364]  slab_reclaimable:6581 slab_unreclaimable:57786
[  219.907660][T10364]  mapped:32152 shmem:1280 pagetables:2194
[  219.907660][T10364]  sec_pagetables:306 bounce:0
[  219.907660][T10364]  kernel_misc_reclaimable:0
[  219.907660][T10364]  free:51464 free_pcp:15470 free_cma:0
[  219.925035][T10364] Node 0 active_anon:68kB inactive_anon:100kB active_file:80kB inactive_file:64kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8992kB pagetables:1988kB sec_pagetables:1108kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  219.936663][T10364] Node 1 active_anon:33908kB inactive_anon:1248kB active_file:1108kB inactive_file:97972kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129280kB dirty:2152kB writeback:0kB shmem:3584kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6976kB pagetables:6788kB sec_pagetables:116kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  219.949185][T10364] Node 0 DMA free:2040kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:64kB inactive_file:64kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:776kB local_pcp:208kB free_cma:0kB
[  219.974154][T10368] netlink: 'syz.3.1053': attribute type 1 has an invalid length.
[  219.978952][T10368] netlink: 'syz.3.1053': attribute type 2 has an invalid length.
[  219.979794][T10364] lowmem_reserve[]: 0 280 280 280 280
[  219.984277][T10364] Node 0 DMA32 free:15912kB boost:0kB min:12772kB low:15964kB high:19156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:68kB inactive_anon:100kB active_file:16kB inactive_file:0kB unevictable:1536kB writepending:12kB zspages:4kB present:1032196kB managed:286900kB mlocked:0kB bounce:0kB free_pcp:9764kB local_pcp:2168kB free_cma:0kB
[  219.996392][T10364] lowmem_reserve[]: 0 0 0 0 0
[  220.014805][T10364] Node 1 DMA32 free:186204kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34108kB inactive_anon:1248kB active_file:1108kB inactive_file:97972kB unevictable:1536kB writepending:2152kB zspages:2000kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:53244kB local_pcp:14816kB free_cma:0kB
[  220.041171][T10376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1053'.
[  220.081954][T10364] lowmem_reserve[]: 0 0 0 0 0
[  220.183736][T10364] Node 0 DMA: 94*4kB (UM) 10*8kB (U) 1*16kB (U) 9*32kB (UM) 10*64kB (UM) 3*128kB (M) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2040kB
[  220.196817][T10364] Node 0 DMA32: 228*4kB (UM) 67*8kB (ME) 40*16kB (UME) 62*32kB (ME) 43*64kB (ME) 27*128kB (UME) 8*256kB (UME) 5*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 15912kB
[  220.205413][T10364] Node 1 DMA32: 499*4kB (UME) 262*8kB (UME) 149*16kB (UME) 177*32kB (UME) 160*64kB (UME) 131*128kB (UME) 78*256kB (UME) 57*512kB (UME) 25*1024kB (UM) 17*2048kB (UM) 9*4096kB (UM) = 185580kB
[  220.214601][T10364] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  220.218467][T10364] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  220.221851][T10364] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  220.225002][T10364] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  220.228109][T10364] 26599 total pagecache pages
[  220.229795][T10364] 516 pages in swap cache
[  220.231283][T10364] Free swap  = 118680kB
[  220.232765][T10364] Total swap = 124996kB
[  220.234263][T10364] 524155 pages RAM
[  220.235647][T10364] 0 pages HighMem/MovableOnly
[  220.237441][T10364] 211537 pages reserved
[  220.239272][T10364] 0 pages cma reserved
[  220.913837][T10413] syzkaller0: entered promiscuous mode
[  220.915945][T10413] syzkaller0: entered allmulticast mode
[  221.218414][T10426] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1063'.
[  221.309453][   T29] usb 6-1: USB disconnect, device number 25
[  221.385390][T10437] netlink: 'syz.4.1067': attribute type 1 has an invalid length.
[  221.404965][T10437] 8021q: adding VLAN 0 to HW filter on device bond1
[  221.407987][   T24] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  221.428479][T10437] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3952. macoff=96
[  221.438985][T10437] bond1: (slave veth0_to_bond): making interface the new active one
[  221.442756][T10437] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  221.485286][ T5850] IPVS: starting estimator thread 0...
[  221.492090][T10437] macvlan2: entered promiscuous mode
[  221.493860][T10437] macvlan2: entered allmulticast mode
[  221.495998][T10437] bond1: entered promiscuous mode
[  221.497789][T10437] veth0_to_bond: entered promiscuous mode
[  221.506630][T10437] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  221.510285][T10437] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  221.517802][T10437] bond1: left promiscuous mode
[  221.519833][T10437] veth0_to_bond: left promiscuous mode
[  221.568197][T10447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1069'.
[  221.570813][   T24] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  221.575459][   T24] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  221.577077][ T5753] Bluetooth: hci0: unexpected subevent 0x1a length: 30 > 6
[  221.578260][T10444] IPVS: using max 45 ests per chain, 108000 per kthread
[  221.579948][   T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  221.589845][   T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  221.594160][   T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  221.601331][   T24] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  221.605064][   T24] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  221.608680][   T24] usb 7-1: Product: syz
[  221.610055][   T24] usb 7-1: Manufacturer: syz
[  221.618356][   T24] cdc_wdm 7-1:1.0: skipping garbage
[  221.620932][   T24] cdc_wdm 7-1:1.0: skipping garbage
[  221.626684][   T24] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  221.629832][   T24] cdc_wdm 7-1:1.0: Unknown control protocol
[  221.791629][T10451] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  221.927250][   T34] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  221.977095][T10451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1071'.
[  222.077238][   T34] usb 9-1: Using ep0 maxpacket: 8
[  222.080239][   T34] usb 9-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  222.083868][   T34] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  222.086748][   T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.245548][T10463] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  222.247276][   T29] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  222.248155][T10463] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  222.253786][T10463] vhci_hcd vhci_hcd.0: Device attached
[  222.397905][   T29] usb 6-1: Using ep0 maxpacket: 8
[  222.401399][   T29] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  222.401438][   T29] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  222.401455][   T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.437906][   T34] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  222.482427][T10468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  222.490451][T10468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  222.507280][   T34] usb 41-1: new full-speed USB device number 2 using vhci_hcd
[  222.723269][T10481] i801_smbus 0000:00:1f.3: SMBus is busy, can't use it!
[  222.747262][ T1043] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  223.562325][T10493] netlink: 'syz.3.1078': attribute type 1 has an invalid length.
[  223.565017][T10493] netlink: 'syz.3.1078': attribute type 2 has an invalid length.
[  223.616472][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1078'.
[  224.190267][T10465] vhci_hcd: connection reset by peer
[  224.192232][ T5829] vhci_hcd vhci_hcd.2: stop threads
[  224.193913][ T5829] vhci_hcd vhci_hcd.2: release socket
[  224.207258][ T5829] vhci_hcd vhci_hcd.2: disconnect device
[  224.207472][ T5979] usb 7-1: USB disconnect, device number 24
[  224.295318][   T42] kauditd_printk_skb: 13 callbacks suppressed
[  224.295332][   T42] audit: type=1326 audit(1785472359.970:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10519 comm="syz.3.1081" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94fec code=0x7ffc0000
[  224.303867][   T42] audit: type=1326 audit(1785472359.970:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10519 comm="syz.3.1081" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f94fec code=0x7ffc0000
[  224.310717][   T42] audit: type=1326 audit(1785472359.980:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10519 comm="syz.3.1081" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94fec code=0x7ffc0000
[  224.317360][   T42] audit: type=1326 audit(1785472359.990:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10519 comm="syz.3.1081" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94fec code=0x7ffc0000
[  224.324052][   T42] audit: type=1326 audit(1785472359.990:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10519 comm="syz.3.1081" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f94fec code=0x7ffc0000
[  224.682699][   T29] usb 9-1: USB disconnect, device number 8
[  224.720370][   T42] audit: type=1326 audit(1785472360.400:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10519 comm="syz.3.1081" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94fec code=0x7ffc0000
[  224.727242][   T42] audit: type=1326 audit(1785472360.400:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10519 comm="syz.3.1081" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94fec code=0x7ffc0000
[  225.011455][T10481] Process accounting resumed
[  225.014226][   T24] usb 6-1: USB disconnect, device number 26
[  225.254153][   T42] audit: type=1800 audit(1785472360.930:117): pid=10545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1088" name="idVendor" dev="configfs" ino=26344 res=0 errno=0
[  225.261219][   T42] audit: type=1800 audit(1785472360.940:118): pid=10545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1088" name="idProduct" dev="configfs" ino=26345 res=0 errno=0
[  225.269766][   T42] audit: type=1800 audit(1785472360.950:119): pid=10545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1088" name="manufacturer" dev="configfs" ino=26347 res=0 errno=0
[  225.284906][T10545] configfs-gadget.g1 gadget.0: Hardware params: access 3, format 2, channels 2, rate 48000
[  225.291736][T10545] udc dummy_udc.0: failed to start g1: -19
[  225.297915][T10545] UDC core: g1: couldn't find an available UDC or it's busy
[  225.538933][T10549] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  225.710721][T10566] syzkaller0: entered promiscuous mode
[  225.712592][T10566] syzkaller0: entered allmulticast mode
[  225.734586][T10566] ==================================================================
[  225.737158][T10566] BUG: KASAN: slab-use-after-free in filp_flush+0x25/0x190
[  225.739511][T10566] Read of size 8 at addr ffff888029856858 by task syz.2.1095/10566
[  225.743247][T10566] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  225.744403][T10566] CPU: 1 UID: 0 PID: 10566 Comm: syz.2.1095 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  225.744428][T10566] Tainted: [L]=SOFTLOCKUP
[  225.744434][T10566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  225.744445][T10566] Call Trace:
[  225.744451][T10566]  <TASK>
[  225.744458][T10566]  dump_stack_lvl+0x100/0x190
[  225.744485][T10566]  print_report+0x13d/0x4b0
[  225.744509][T10566]  ? __virt_addr_valid+0x239/0x430
[  225.744527][T10566]  ? filp_flush+0x25/0x190
[  225.744540][T10566]  kasan_report+0xdf/0x1c0
[  225.744560][T10566]  ? filp_flush+0x25/0x190
[  225.744575][T10566]  kasan_check_range+0x10f/0x1e0
[  225.744599][T10566]  filp_flush+0x25/0x190
[  225.744612][T10566]  filp_close+0x1c/0x30
[  225.744625][T10566]  gaudio_cleanup+0x59/0x100
[  225.744665][T10566]  f_audio_bind+0x56c/0x660
[  225.744681][T10566]  ? __pfx_f_audio_bind+0x10/0x10
[  225.744697][T10566]  ? __pfx_f_audio_bind+0x10/0x10
[  225.744712][T10566]  usb_add_function+0x219/0x890
[  225.744741][T10566]  configfs_composite_bind+0xd83/0x1960
[  225.744764][T10566]  gadget_bind_driver+0x28c/0xbf0
[  225.744782][T10566]  ? __pfx_dummy_udc_set_speed+0x10/0x10
[  225.744803][T10566]  ? __pfx_gadget_bind_driver+0x10/0x10
[  225.744818][T10566]  really_probe+0x241/0xa60
[  225.744849][T10566]  __driver_probe_device+0x20e/0x450
[  225.744872][T10566]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  225.744895][T10566]  driver_probe_device+0x4a/0x140
[  225.744914][T10566]  __driver_attach+0x21f/0x5b0
[  225.744932][T10566]  ? __pfx___driver_attach+0x10/0x10
[  225.744951][T10566]  bus_for_each_dev+0x13e/0x1d0
[  225.744974][T10566]  ? __pfx_bus_for_each_dev+0x10/0x10
[  225.744989][T10566]  ? bus_add_driver+0x2b5/0x5b0
[  225.745009][T10566]  bus_add_driver+0x305/0x5b0
[  225.745029][T10566]  driver_register+0x1e2/0x360
[  225.745056][T10566]  usb_gadget_register_driver_owner+0x132/0x210
[  225.745075][T10566]  gadget_dev_desc_UDC_store+0x1b0/0x2e0
[  225.745095][T10566]  configfs_write_iter+0x302/0x4e0
[  225.745111][T10566]  vfs_write+0x6ac/0x1050
[  225.745124][T10566]  ? __pfx_configfs_write_iter+0x10/0x10
[  225.745142][T10566]  ? __pfx_vfs_write+0x10/0x10
[  225.745153][T10566]  ? find_held_lock+0x2b/0x80
[  225.745175][T10566]  ksys_write+0x12a/0x250
[  225.745187][T10566]  ? __pfx_ksys_write+0x10/0x10
[  225.745201][T10566]  __do_fast_syscall_32+0xe7/0x970
[  225.745221][T10566]  do_fast_syscall_32+0x32/0x70
[  225.745238][T10566]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  225.745256][T10566] RIP: 0023:0xf7fe7fec
[  225.745273][T10566] Code: Unable to access opcode bytes at 0xf7fe7fc2.
[  225.745279][T10566] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  225.745293][T10566] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080001100
[  225.745301][T10566] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000
[  225.745310][T10566] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  225.745319][T10566] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  225.745329][T10566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  225.745343][T10566]  </TASK>
[  225.745348][T10566] 
[  225.840065][T10566] Allocated by task 10545:
[  225.841477][T10566]  kasan_save_stack+0x30/0x50
[  225.842977][T10566]  kasan_save_track+0x14/0x30
[  225.844477][T10566]  __kasan_slab_alloc+0x89/0x90
[  225.846019][T10566]  kmem_cache_alloc_noprof+0x26b/0x6a0
[  225.847742][T10566]  alloc_empty_file+0x5b/0x1c0
[  225.849275][T10566]  path_openat+0xe7/0x4280
[  225.850697][T10566]  do_file_open+0x20e/0x430
[  225.852200][T10566]  file_open_name+0x1c3/0x3e0
[  225.853688][T10566]  filp_open+0x2e/0x50
[  225.854984][T10566]  gaudio_setup+0x127/0x1a00
[  225.856447][T10566]  f_audio_bind+0x146/0x660
[  225.857897][T10566]  usb_add_function+0x219/0x890
[  225.859446][T10566]  configfs_composite_bind+0xd83/0x1960
[  225.861188][T10566]  gadget_bind_driver+0x28c/0xbf0
[  225.862773][T10566]  really_probe+0x241/0xa60
[  225.864227][T10566]  __driver_probe_device+0x20e/0x450
[  225.865887][T10566]  driver_probe_device+0x4a/0x140
[  225.867472][T10566]  __driver_attach+0x21f/0x5b0
[  225.869002][T10566]  bus_for_each_dev+0x13e/0x1d0
[  225.870558][T10566]  bus_add_driver+0x305/0x5b0
[  225.872115][T10566]  driver_register+0x1e2/0x360
[  225.873632][T10566]  usb_gadget_register_driver_owner+0x132/0x210
[  225.875596][T10566]  gadget_dev_desc_UDC_store+0x1b0/0x2e0
[  225.877360][T10566]  configfs_write_iter+0x302/0x4e0
[  225.878987][T10566]  vfs_write+0x6ac/0x1050
[  225.880380][T10566]  ksys_write+0x12a/0x250
[  225.881748][T10566]  __do_fast_syscall_32+0xe7/0x970
[  225.883364][T10566]  do_fast_syscall_32+0x32/0x70
[  225.884932][T10566]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  225.886906][T10566] 
[  225.887681][T10566] Freed by task 33:
[  225.888904][T10566]  kasan_save_stack+0x30/0x50
[  225.890399][T10566]  kasan_save_track+0x14/0x30
[  225.891897][T10566]  kasan_save_free_info+0x3b/0x70
[  225.893479][T10566]  __kasan_slab_free+0x5f/0x80
[  225.894997][T10566]  slab_free_after_rcu_debug+0xdf/0x170
[  225.896723][T10566]  rcu_core+0x5a2/0x10d0
[  225.898069][T10566]  handle_softirqs+0x1ea/0x9b0
[  225.899620][T10566]  run_ksoftirqd+0x38/0x60
[  225.901043][T10566]  smpboot_thread_fn+0x3d3/0xaa0
[  225.902606][T10566]  kthread+0x370/0x450
[  225.903912][T10566]  ret_from_fork+0x72b/0xd50
[  225.905365][T10566]  ret_from_fork_asm+0x1a/0x30
[  225.906879][T10566] 
[  225.907648][T10566] Last potentially related work creation:
[  225.909430][T10566]  kasan_save_stack+0x30/0x50
[  225.910914][T10566]  kasan_record_aux_stack+0xa7/0xc0
[  225.912548][T10566]  kmem_cache_free+0x427/0x6b0
[  225.914057][T10566]  __fput+0x68d/0xb50
[  225.915323][T10566]  task_work_run+0x150/0x240
[  225.916818][T10566]  exit_to_user_mode_loop+0x1d8/0x6f0
[  225.918516][T10566]  __do_fast_syscall_32+0x701/0x970
[  225.920196][T10566]  do_fast_syscall_32+0x32/0x70
[  225.921731][T10566]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  225.923713][T10566] 
[  225.924482][T10566] Second to last potentially related work creation:
[  225.926527][T10566]  kasan_save_stack+0x30/0x50
[  225.928021][T10566]  kasan_record_aux_stack+0xa7/0xc0
[  225.929683][T10566]  task_work_add+0x28b/0x3b0
[  225.931145][T10566]  __fput_deferred+0x168/0x4a0
[  225.932645][T10566]  fput_close+0x118/0x250
[  225.933969][T10566]  filp_close+0x26/0x30
[  225.935274][T10566]  gaudio_cleanup+0x59/0x100
[  225.936755][T10566]  f_audio_bind+0x56c/0x660
[  225.938211][T10566]  usb_add_function+0x219/0x890
[  225.939773][T10566]  configfs_composite_bind+0xd83/0x1960
[  225.941507][T10566]  gadget_bind_driver+0x28c/0xbf0
[  225.943088][T10566]  really_probe+0x241/0xa60
[  225.944545][T10566]  __driver_probe_device+0x20e/0x450
[  225.946204][T10566]  driver_probe_device+0x4a/0x140
[  225.947794][T10566]  __driver_attach+0x21f/0x5b0
[  225.949326][T10566]  bus_for_each_dev+0x13e/0x1d0
[  225.950865][T10566]  bus_add_driver+0x305/0x5b0
[  225.952361][T10566]  driver_register+0x1e2/0x360
[  225.953845][T10566]  usb_gadget_register_driver_owner+0x132/0x210
[  225.955806][T10566]  gadget_dev_desc_UDC_store+0x1b0/0x2e0
[  225.957576][T10566]  configfs_write_iter+0x302/0x4e0
[  225.959198][T10566]  vfs_write+0x6ac/0x1050
[  225.960565][T10566]  ksys_write+0x12a/0x250
[  225.961929][T10566]  __do_fast_syscall_32+0xe7/0x970
[  225.963565][T10566]  do_fast_syscall_32+0x32/0x70
[  225.965104][T10566]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  225.967085][T10566] 
[  225.967860][T10566] The buggy address belongs to the object at ffff888029856700
[  225.967860][T10566]  which belongs to the cache filp of size 352
[  225.972012][T10566] The buggy address is located 344 bytes inside of
[  225.972012][T10566]  freed 352-byte region [ffff888029856700, ffff888029856860)
[  225.976239][T10566] 
[  225.977008][T10566] The buggy address belongs to the physical page:
[  225.979029][T10566] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29856
[  225.981786][T10566] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  225.984413][T10566] memcg:ffff8880282c7c01
[  225.985753][T10566] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  225.988102][T10566] page_type: f5(slab)
[  225.989397][T10566] raw: 00fff00000000040 ffff88801d6fd540 dead000000000100 dead000000000122
[  225.992135][T10566] raw: 0000000000000000 0000000800120012 00000000f5000000 ffff8880282c7c01
[  225.994827][T10566] head: 00fff00000000040 ffff88801d6fd540 dead000000000100 dead000000000122
[  225.997573][T10566] head: 0000000000000000 0000000800120012 00000000f5000000 ffff8880282c7c01
[  226.000285][T10566] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[  226.002946][T10566] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  226.005500][T10566] page dumped because: kasan: bad access detected
[  226.007485][T10566] page_owner tracks the page as allocated
[  226.009293][T10566] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1245, tgid 1245 (kworker/u33:10), ts 6620358480, free_ts 0
[  226.015567][T10566]  post_alloc_hook+0xfd/0x120
[  226.017062][T10566]  get_page_from_freelist+0xf48/0x3530
[  226.018768][T10566]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  226.020656][T10566]  new_slab+0xa2/0x640
[  226.021953][T10566]  refill_objects+0xe3/0x410
[  226.023408][T10566]  __pcs_replace_empty_main+0x376/0x680
[  226.025152][T10566]  kmem_cache_alloc_noprof+0x46e/0x6a0
[  226.026866][T10566]  alloc_empty_file+0x5b/0x1c0
[  226.028386][T10566]  path_openat+0xe7/0x4280
[  226.029817][T10566]  do_file_open+0x20e/0x430
[  226.031249][T10566]  do_open_execat+0xd1/0x360
[  226.032719][T10566]  alloc_bprm+0x2d/0x9d0
[  226.034070][T10566]  kernel_execve+0x8f/0x3a0
[  226.035532][T10566]  call_usermodehelper_exec_async+0x239/0x4b0
[  226.037478][T10566]  ret_from_fork+0x72b/0xd50
[  226.038949][T10566]  ret_from_fork_asm+0x1a/0x30
[  226.040484][T10566] page_owner free stack trace missing
[  226.042155][T10566] 
[  226.042931][T10566] Memory state around the buggy address:
[  226.044678][T10566]  ffff888029856700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  226.047197][T10566]  ffff888029856780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  226.049694][T10566] >ffff888029856800: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[  226.052288][T10566]                                                     ^
[  226.054506][T10566]  ffff888029856880: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[  226.056995][T10566]  ffff888029856900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  226.059524][T10566] ==================================================================
[  226.065762][T10566] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  226.068076][T10566] CPU: 1 UID: 0 PID: 10566 Comm: syz.2.1095 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  226.071461][T10566] Tainted: [L]=SOFTLOCKUP
[  226.072832][T10566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  226.075962][T10566] Call Trace:
[  226.077028][T10566]  <TASK>
[  226.077986][T10566]  dump_stack_lvl+0x100/0x190
[  226.079500][T10566]  vpanic+0x552/0x970
[  226.080787][T10566]  ? __pfx_vpanic+0x10/0x10
[  226.082228][T10566]  ? filp_flush+0x25/0x190
[  226.083647][T10566]  panic+0xd1/0xe0
[  226.084847][T10566]  ? __pfx_panic+0x10/0x10
[  226.086256][T10566]  ? filp_flush+0x25/0x190
[  226.087671][T10566]  ? preempt_schedule_common+0x42/0xc0
[  226.089411][T10566]  ? check_panic_on_warn+0x1f/0x90
[  226.091030][T10566]  check_panic_on_warn.cold+0x19/0x34
[  226.092726][T10566]  end_report.part.0+0x3a/0x90
[  226.094248][T10566]  kasan_report.cold+0xe/0x18
[  226.095732][T10566]  ? filp_flush+0x25/0x190
[  226.097100][T10566]  kasan_check_range+0x10f/0x1e0
[  226.098644][T10566]  filp_flush+0x25/0x190
[  226.100034][T10566]  filp_close+0x1c/0x30
[  226.101348][T10566]  gaudio_cleanup+0x59/0x100
[  226.102799][T10566]  f_audio_bind+0x56c/0x660
[  226.104181][T10566]  ? __pfx_f_audio_bind+0x10/0x10
[  226.105714][T10566]  ? __pfx_f_audio_bind+0x10/0x10
[  226.107300][T10566]  usb_add_function+0x219/0x890
[  226.108814][T10566]  configfs_composite_bind+0xd83/0x1960
[  226.110425][T10566]  gadget_bind_driver+0x28c/0xbf0
[  226.111986][T10566]  ? __pfx_dummy_udc_set_speed+0x10/0x10
[  226.113762][T10566]  ? __pfx_gadget_bind_driver+0x10/0x10
[  226.115504][T10566]  really_probe+0x241/0xa60
[  226.116951][T10566]  __driver_probe_device+0x20e/0x450
[  226.118559][T10566]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  226.120356][T10566]  driver_probe_device+0x4a/0x140
[  226.121940][T10566]  __driver_attach+0x21f/0x5b0
[  226.123459][T10566]  ? __pfx___driver_attach+0x10/0x10
[  226.125158][T10566]  bus_for_each_dev+0x13e/0x1d0
[  226.126730][T10566]  ? __pfx_bus_for_each_dev+0x10/0x10
[  226.128468][T10566]  ? bus_add_driver+0x2b5/0x5b0
[  226.129994][T10566]  bus_add_driver+0x305/0x5b0
[  226.131895][T10566]  driver_register+0x1e2/0x360
[  226.133826][T10566]  usb_gadget_register_driver_owner+0x132/0x210
[  226.136324][T10566]  gadget_dev_desc_UDC_store+0x1b0/0x2e0
[  226.138591][T10566]  configfs_write_iter+0x302/0x4e0
[  226.140584][T10566]  vfs_write+0x6ac/0x1050
[  226.142348][T10566]  ? __pfx_configfs_write_iter+0x10/0x10
[  226.144624][T10566]  ? __pfx_vfs_write+0x10/0x10
[  226.146551][T10566]  ? find_held_lock+0x2b/0x80
[  226.148407][T10566]  ksys_write+0x12a/0x250
[  226.150142][T10566]  ? __pfx_ksys_write+0x10/0x10
[  226.152155][T10566]  __do_fast_syscall_32+0xe7/0x970
[  226.154254][T10566]  do_fast_syscall_32+0x32/0x70
[  226.156225][T10566]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  226.158764][T10566] RIP: 0023:0xf7fe7fec
[  226.160400][T10566] Code: Unable to access opcode bytes at 0xf7fe7fc2.
[  226.163094][T10566] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  226.166382][T10566] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080001100
[  226.169589][T10566] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000
[  226.172757][T10566] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  226.175915][T10566] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  226.179126][T10566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  226.181908][T10566]  </TASK>
[  226.183671][T10566] Kernel Offset: disabled
[  226.185259][T10566] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:32:45  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000364069 RBX=ffffffff8e891480 RCX=ffffffff8bb912d5 RDX=0000000000000000
RSI=ffffffff8e1a8f2e RDI=ffffffff8c400a80 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10
R8 =0000000000000001 R9 =ffffed100564678d R10=ffff88802b233c6b R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000
RIP=ffffffff8bb8f89f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096be1000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000346ba000 CR3=0000000063da2000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85a135b5 RDI=ffffffff9b9f51a0 RBP=ffffffff9b9f5160 RSP=ffffc9000f7d7210
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=00000000000064d0
R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b6f5221 R15=ffffffff85a13550
RIP=ffffffff85a135df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888096ce1000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f5300008 CR3=000000004c0f3000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=00000000003cf72f RBX=ffff88801cb04a80 RCX=ffffffff8bb912d5 RDX=0000000000000000
RSI=ffffffff8e1a8f2e RDI=ffffffff8c400a80 RBP=ffffed1003960950 RSP=ffffc9000047fe00
R8 =0000000000000001 R9 =ffffed100568678d R10=ffff88802b433c6b R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=dffffc0000000000
RIP=ffffffff8bb8f89f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096de1000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7fda190 CR3=0000000051584000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=ffffffff9b75a1e0 RBX=000000000000000a RCX=ffffffff8285478e RDX=dffffc0000000000
RSI=ffffffff8285479c RDI=ffff8880238d4a80 RBP=0000000000001000 RSP=ffffc90004e0f258
R8 =0000000000000006 R9 =0000000000001000 R10=0000000000000000 R11=0000000000000000
R12=0000000000000000 R13=0000000000000001 R14=0000000000052950 R15=dffffc0000000000
RIP=ffffffff828547ad RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096ee1000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7f46ec0 CR3=000000004fdfa000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 2e7a797300000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000