last executing test programs:

28.561107009s ago: executing program 1 (id=265):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x2})
ioctl$UFFDIO_REGISTER(r1, 0x4010aa0a, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
lseek(r2, 0x1, 0x7)
write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005ff813ffffffffe2fff80700000001000000000000000600050002600000", 0x24)
read$FUSE(r2, &(0x7f0000000240)={0x2020}, 0x2020)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x22052, r2, 0x0) (fail_nth: 4)

27.651251489s ago: executing program 1 (id=268):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x0, 0x0)
ioctl(r0, 0xc138fd09, &(0x7f0000000300)="04000e0032000000000000008a0100003801000001000000000000000000000000000000000000000000000000000000746573745f72616964004141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414100414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141000000000000000008000000000000000000000000000000726169640000000000000000000000007261696431203120382032202d202f6465762f6e756c6c6230202d202f6465762f6e756c6c6231")

27.521029386s ago: executing program 1 (id=270):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x5, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x5}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0x0, 0xb}, {0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3243aa56}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010) (rerun: 64)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0}) (async)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) (async, rerun: 32)
r7 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) (async, rerun: 32)
r8 = socket$xdp(0x2c, 0x3, 0x0)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)
sendfile(r8, r9, 0x0, 0x400020000023894)
r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r10, 0x40000000af01, 0x0) (async)
ioctl$VHOST_SET_OWNER(r10, 0xaf01, 0x0) (async)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r7, 0xc25c4110, 0x0)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

26.592819176s ago: executing program 1 (id=281):
r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0xc00) (async)
r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
write$binfmt_register(r1, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7fffffff, 0x3a, '!\x91.\xdb)\xda\vY\x9a\xf0\x16}AL\xe3', 0x3a, '\\xB\x00-^{', 0x3a, './file1'}, 0x3d) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0xa, 0x2, 0x1}) (async)
ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r0, 0xc0106450, &(0x7f00000001c0)={0x0, 0x0, 0x1}) (async)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000380)={0x0, 0x0, r2, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000780)={r5, 0x0, 0x4, 0x0, 0x2, [<r6=>0x0], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) (async)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, <r7=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) (async)
r8 = syz_open_dev$video4linux(&(0x7f0000000140), 0xfffffffffffffffd, 0x400000)
ioctl$VIDIOC_SUBDEV_S_CROP(r8, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x1, 0xfffffffc, 0x400}}) (async)
ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000240)={r5, 0xc89, 0xa, 0xfffffffa, 0x3, [<r9=>0x0], [0x5, 0x5, 0xffffff7d, 0x2], [0xe, 0x2, 0xffffffff, 0x8000], [0xfffffffffffffffb, 0xa679, 0x1, 0x7f]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r9}) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sched_getscheduler(0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r10) (async)
mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) (async)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) (async)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) (async)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async)
r11 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r11, 0x7a7, &(0x7f00000001c0)=0x80000) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x100)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)

26.532085437s ago: executing program 1 (id=284):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00')
munmap(&(0x7f0000006000/0x1000)=nil, 0x1000) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async)
fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000), &(0x7f0000000080), 0x2, 0x3)
write$binfmt_script(r1, &(0x7f0000000cc0), 0xfd45)

26.116141799s ago: executing program 1 (id=294):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000040)="aefdda9d240040005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb100675f7f8d40dfd3b938fff0052f436dd2a", 0x2a}, {&(0x7f00000000c0)="99746fd6240070005da6a2786bc012de5afd98b17b71bf03db041c7091866e068d151c32264c688e0ebee1cba7d78de369e56600000000005f68af62c344", 0xff2a}], 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x200c8091}, 0x50)
ioctl$FS_IOC_GETVERSION(r1, 0x40045b17, 0x0)

25.916254801s ago: executing program 32 (id=294):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000040)="aefdda9d240040005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb100675f7f8d40dfd3b938fff0052f436dd2a", 0x2a}, {&(0x7f00000000c0)="99746fd6240070005da6a2786bc012de5afd98b17b71bf03db041c7091866e068d151c32264c688e0ebee1cba7d78de369e56600000000005f68af62c344", 0xff2a}], 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x200c8091}, 0x50)
ioctl$FS_IOC_GETVERSION(r1, 0x40045b17, 0x0)

4.24191453s ago: executing program 4 (id=463):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x82)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f00000000c0), 0x9)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x137)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/target/core/rd_mcp_0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='rd_pages=1024', 0xd)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000f3ff00000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000c20000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96, 0x0, 0x3}, 0x28)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r4, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xffffffffffffff0e, 0x0}}, 0x10)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x2, 0x0)
write(r5, &(0x7f0000000900)='1\x00', 0x1)

4.081899703s ago: executing program 4 (id=464):
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x457)
ioperm(0x3, 0x9, 0x80)
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4})
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1)
write$tun(r1, &(0x7f0000000380)=ANY=[], 0xfdef)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
connect$pppl2tp(r0, 0x0, 0x0)
fsmount(r2, 0x0, 0x2)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r4, r4)
setpgid(0x0, r4)
r5 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f00000000c0)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0, 0x0)
r8 = syz_ublk_add_dev(r5, r6, r7, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104}}}, &(0x7f0000000300))
syz_open_dev$ublk_chdev(&(0x7f0000002000), r8, 0x2)
r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r9, 0x7)
wait4(r9, 0x0, 0x0, 0x0)
tkill(r9, 0x3)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

3.461703717s ago: executing program 0 (id=470):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r0)
r1 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {{&(0x7f0000000480)=@file={0xfd, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="f90400eb52400ce4811d7c156d000100c3a7e8000009000000", @ANYRES32=r2], 0x10, 0x4010}}], 0x2, 0x20000000)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r1, 0x0, 0x0)
fchdir(r3)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x11ea, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x7}}}}}}, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000240)={0x0, 0xfffffffffffffd1d, &(0x7f0000000440)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x401, 0xe4340000, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x78}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x2)
r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
getsockopt$sock_int(r10, 0x1, 0x28, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x14, 0x9, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x14004083}, 0x80)
sendmsg$IPSET_CMD_FLUSH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000004060104dae72fd4e8b0b3f60300000a0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4000000)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8)

3.426485349s ago: executing program 3 (id=471):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.numa_stat\x00', 0x275a, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "eeba1daa3c696e33", "8cd11084a86e02071031ecd5f1cb8efeeee1da564cf9831268724500b699fa5e", "990ff934", "917ab8da99afa933"}, 0x38)
sendto$inet6(r0, &(0x7f0000000500)='0', 0x1, 0x8080, 0x0, 0x0)

3.310109344s ago: executing program 3 (id=472):
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000040)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) (fail_nth: 7)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048010000180080001006c6f6700040002802800018008000100666962001c00028008000140000000110800034000000005080002"], 0xec}}, 0x0)
mount(0x0, 0x0, 0x0, 0x44021, 0x0)
madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x48)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x44)
getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000500)={'nat\x00', 0x0, 0x4, 0x97, [0x0, 0x7, 0x2, 0x0, 0x6, 0x5], 0x0, &(0x7f00000002c0), &(0x7f0000000400)=""/151}, &(0x7f0000000580)=0x50)
set_mempolicy(0x2, &(0x7f0000000600)=0x54, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRESHEX, @ANYRES16], 0x48)
ptrace(0x4206, 0x0)
ptrace(0x4208, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc01c5868, &(0x7f00000005c0)={r2, &(0x7f0000000140)='nr_blocks', 0x4080, &(0x7f0000000300)={@align=0x2, {0x2, 0x40, 0x9, 0x400}}, 0x9, &(0x7f0000000340), &(0x7f00000003c0)=0x2})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x6f)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x104)
write(r4, &(0x7f0000000000)='3', 0x4e)

2.410651394s ago: executing program 3 (id=474):
r0 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil)
r1 = shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x5000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='1', 0x1)
shmdt(r1)
syz_open_procfs$namespace(0x0, &(0x7f00000012c0)='ns/uts\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./myconfig\x00', &(0x7f0000000300)='ncpfs\x00', 0x40021, 0x0)
r3 = userfaultfd(0x1)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000eae000/0x2000)=nil, 0x2000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
socket$inet6(0xa, 0x2, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/functions/acm.0\x00', 0x200)

2.410170289s ago: executing program 0 (id=475):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "688d33f2"}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x57, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bfde, 0xe1}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x6}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x80}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x6c}}, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0xae2e, 0xfd, 0x7, 0x800, 0x400, 0x3, 0xffff7fff}})

2.356898481s ago: executing program 3 (id=477):
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0)
mount$tmpfs(0x4d, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000040)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048010000180080001006c6f6700040002802800018008000100666962001c00028008000140000000110800034000000005080002"], 0xec}}, 0x0)
mount(0x0, 0x0, 0x0, 0x44021, 0x0)
madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x48)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x44)
getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000500)={'nat\x00', 0x0, 0x4, 0x97, [0x0, 0x7, 0x2, 0x0, 0x6, 0x5], 0x0, &(0x7f00000002c0), &(0x7f0000000400)=""/151}, &(0x7f0000000580)=0x50)
set_mempolicy(0x2, &(0x7f0000000600)=0x54, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRESHEX, @ANYRES16], 0x48)
ptrace(0x4206, 0x0)
ptrace(0x4208, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc01c5868, &(0x7f00000005c0)={r2, &(0x7f0000000140)='nr_blocks', 0x4080, &(0x7f0000000300)={@align=0x2, {0x2, 0x40, 0x9, 0x400}}, 0x9, &(0x7f0000000340), &(0x7f00000003c0)=0x2})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x6f)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x104)
write(r4, &(0x7f0000000000)='3', 0x4e)

2.329317308s ago: executing program 4 (id=478):
syz_open_dev$evdev(&(0x7f00000000c0), 0x7, 0x400000)
r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002940)={r0, 0x0, 0x1000, 0x1000, &(0x7f0000000840)="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", &(0x7f0000001840)=""/4096, 0x1ff, 0x0, 0x9c, 0x19, &(0x7f0000002840)="7b65f18150a52d4d9150e2fb78b9f0b0cd9d89b817fcf9379735ae9b46a0a0ff17ff81110d18dced1287648ede43c8518518180c39b5e3caaaebe8385f5d91020c6af3c12fb4d90d6adcd7228ae7ff5b28763f8d7ebb707661c3071580035e97582d779201c01b3e3c5f56b476cd9f3285ebb756e0daa3e4ff0a65ae17be6e50fb049c51d47cb0bf185c6404a4ff6b3c0c65dbcde1eeddd2cf5231eb", &(0x7f0000002900)="aa527bc0f957f579b77e3d56482fa79aa54b163f5c5ec58ca8", 0x0, 0x0, 0x4}, 0x4c)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x170bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0xb881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008007}, 0x4040844)
sendto$packet(r1, &(0x7f0000000640)="e8", 0x1, 0x40, &(0x7f0000000200)={0x11, 0x5, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x14)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="660a000000000000611194000000000018000000000000000000000000000000950000000000000004e0bf7d5846ceca18498d517e7d65de035ec00c835335140a3072bc042362da906ff9df000f2f30f01861434089e393fd62960cfab859fe19c8bd0b541f42a07c5aa508b39f3039c9d1924ae21573a289c69c42c5c7075861e4401ba4892dac711074cf19ad3bfe29e76cc920676a"], &(0x7f0000000000)='GPL\x00'}, 0x80)
syz_open_dev$evdev(&(0x7f00000000c0), 0x7, 0x400000) (async)
openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002940)={r0, 0x0, 0x1000, 0x1000, &(0x7f0000000840)="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", &(0x7f0000001840)=""/4096, 0x1ff, 0x0, 0x9c, 0x19, &(0x7f0000002840)="7b65f18150a52d4d9150e2fb78b9f0b0cd9d89b817fcf9379735ae9b46a0a0ff17ff81110d18dced1287648ede43c8518518180c39b5e3caaaebe8385f5d91020c6af3c12fb4d90d6adcd7228ae7ff5b28763f8d7ebb707661c3071580035e97582d779201c01b3e3c5f56b476cd9f3285ebb756e0daa3e4ff0a65ae17be6e50fb049c51d47cb0bf185c6404a4ff6b3c0c65dbcde1eeddd2cf5231eb", &(0x7f0000002900)="aa527bc0f957f579b77e3d56482fa79aa54b163f5c5ec58ca8", 0x0, 0x0, 0x4}, 0x4c) (async)
socket$packet(0x11, 0x3, 0x300) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x170bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0xb881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008007}, 0x4040844) (async)
sendto$packet(r1, &(0x7f0000000640)="e8", 0x1, 0x40, &(0x7f0000000200)={0x11, 0x5, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x14) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="660a000000000000611194000000000018000000000000000000000000000000950000000000000004e0bf7d5846ceca18498d517e7d65de035ec00c835335140a3072bc042362da906ff9df000f2f30f01861434089e393fd62960cfab859fe19c8bd0b541f42a07c5aa508b39f3039c9d1924ae21573a289c69c42c5c7075861e4401ba4892dac711074cf19ad3bfe29e76cc920676a"], &(0x7f0000000000)='GPL\x00'}, 0x80) (async)

2.130759172s ago: executing program 0 (id=479):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000280))
r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
writev(r1, &(0x7f0000000540), 0x0)

2.129931651s ago: executing program 4 (id=481):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
clock_gettime(0xffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xf, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
capset(&(0x7f00000009c0)={0x20071026}, &(0x7f0000000a00)={0x2, 0x40000002, 0x8, 0x8, 0x1})
r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102)
kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r2, &(0x7f0000000280)={r0, r1, 0x7})
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc)
setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1fc)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/scheduler\x00', 0x2, 0x0)
write(r3, &(0x7f00000001c0)='kyber', 0x5)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d)
r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4)
renameat(r4, &(0x7f0000000080)='./file2\x00', r5, &(0x7f0000000140)='./file3\x00')
mkdir(&(0x7f0000000240)='./file1\x00', 0x8)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
fsopen(&(0x7f0000000040)='hpfs\x00', 0x0)
chdir(0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)

1.730413355s ago: executing program 2 (id=485):
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
writev(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f0000000240)="12a129ab28a2ac3b3429cfdf08e05eefcbfad5567208463c304389723fce138fcf21e4d23c66bfa8dd2f573fea3e83799eb62e3fe10232019ea7cc570fdae700cb7f21b0a43d10ccb49a9496e621f183b3ef7654098c817f14c3a758cb3a7fc1e699e6e2a2fa506d735e29edb04bc16ae0feaddf53fcf52027fb3e3fed65fe9f6642cc9171a91753ba2207d1a33eb6e99c5180a1fab8f707e6bfa037a1fc0236ded054bf2f84e3b5e7652d8a", 0xac}], 0x1)
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000800000020000000900010073797a300000000048000000030a01040000000000000000020000000900010073797a30000000000900030073797a30000000001400048008000140000000030800024000000000080005400000000198000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c000300"], 0x128}}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x0)
write(r1, &(0x7f0000000000)="0100", 0x2)

1.571194104s ago: executing program 2 (id=486):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000683000/0x1000)=nil, 0x1000, 0x3800000, 0x20010, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x10001, 0x0)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222', 0x2f)
close(r2)
openat(r2, &(0x7f0000000300)='./sys\x00', 0x6f8143, 0x1ae)
syz_emit_ethernet(0x5e, &(0x7f0000000280)={@link_local, @local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, '9u\x00', 0x28, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[@routing={0x21, 0x2, 0x0, 0xb, 0x0, [@mcast1]}], {{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '8(}', 0xff, "1d00"}}}}}}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r3, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222', 0x6c)
close(r3)
write(0xffffffffffffffff, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$XFS_IOC_AG_GEOMETRY(r4, 0xc080583d, &(0x7f0000000280)={0x8, 0x18b, 0x0, 0x7fffffff, 0xe, 0x5, 0xe9, 0x200})
close(0xffffffffffffffff)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0)
write(r3, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=n', 0x7d)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000340)=@abs={0xb98ce1c5399b1205, 0x0, 0x4a21}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

1.404823068s ago: executing program 3 (id=487):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000700000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r3}, 0x38)
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000001c0)={r3, 0x58, &(0x7f0000000400)}, 0x10) (fail_nth: 3)

1.399521727s ago: executing program 0 (id=488):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
openat$tun(0xffffffffffffff9c, 0x0, 0xa000, 0x0)
r0 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00')
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0xa1, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r4, 0x6a98047402e98331, 0x70bd2c, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x40)
recvmmsg(0xffffffffffffffff, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x100, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xbc81, 0x3000019, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
keyctl$dh_compute(0x17, &(0x7f00000003c0), &(0x7f0000000480)=""/133, 0x85, &(0x7f0000000640)={&(0x7f0000000540)={'sha512-neon\x00'}, &(0x7f0000000580)="17e0fbfa1cd0113367a30dc17913a6baa401add72c6476e9fa079fa52bb65d180f077f7eecdccb4727dfd20578aad9f306ea71b3203a9a691bdeda9149024ca4af6da29f18ecaa1bd99639a25f914583293891bc8d4bf383942854f25d1bc952a06f575f45eaf843984940ff20d3b0987a16ff81d16e3bc94f032333aba00aaf99537847d31af9ffc897acb0ef3942f496aa0c8c5cc7ba157bbcf744ccf78f5ecdb254c5a3c4ab1dca2b1ee2195ea26e6a2229", 0xb3})
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={<r6=>0xffffffffffffffff}, 0x2, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0xa}, r6, 0x6}}, 0x48)
write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300))
socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r3)
r7 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000409000/0x4000)=nil)
r8 = shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
shmat(r7, &(0x7f0000ff9000/0x1000)=nil, 0x4000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff)
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='xfs\x00', 0x0, &(0x7f0000000400)='rtdev=./loop0\x00')
shmdt(r8)

1.139638276s ago: executing program 4 (id=489):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000700000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r3}, 0x38)
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000001c0)={r3, 0x58, &(0x7f0000000400)}, 0x10)

511.329428ms ago: executing program 2 (id=490):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "eeba1daa3c696e33", "8cd11084a86e02071031ecd5f1cb8efeeee1da564cf9831268724500b699fa5e", "990ff934", "917ab8da99afa933"}, 0x38)
sendto$inet6(r0, &(0x7f0000000500)='0', 0x1, 0x8080, 0x0, 0x0)

510.834478ms ago: executing program 2 (id=491):
r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
write$UHID_INPUT(r0, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006)
r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4090, 0xffa}], 0x1, 0xa, 0x203)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fab000/0x18000)=nil, &(0x7f0000001380)=[@textreal={0x8, 0x0}], 0x1, 0x3d, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f0000000000))
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$kcm(0x2d, 0x2, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0xa, 0x6c}}, 0x28}}, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000000))
sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x13, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x28}}, 0x0)
r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xffffbffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x30}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x19, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r10, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
setsockopt$sock_int(r8, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4)
sendmmsg$inet(r8, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd0500070088000000060005", @ANYRES8], 0x5c}, 0x1, 0x0, 0x0, 0x10008042}, 0x90)

260.658719ms ago: executing program 3 (id=492):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket(0xa, 0x3, 0x87)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10)
r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0xfffffffffffffee9, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x20044000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r5, 0x6, 0x5, 0x0, &(0x7f0000000040))
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000)
preadv2(r4, &(0x7f0000003500)=[{&(0x7f00000002c0)=""/54, 0xfefc}], 0x1, 0x8, 0x80, 0x10)
write$FUSE_STATX(r0, 0x0, 0x0)
ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000000340)={0x0, 0x3410, 0x4, 0x8, 0x7, 0x0, 0xffff})

182.125816ms ago: executing program 0 (id=493):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
close(0x3)
socket$pppl2tp(0x18, 0x1, 0x1)
write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
sendfile(r0, r1, 0x0, 0xecc7)

149.858028ms ago: executing program 0 (id=494):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f00000000c0))
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f00000005c0)={0x101ff, 0x0, 0xe000, 0x2000, &(0x7f0000000000/0x2000)=nil, 0x7ff})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='\x00', 0x40)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@newqdisc={0xa4, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x3, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x8], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xc9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x10}]}]}]}}]}, 0xa4}}, 0x0)
r4 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02)
ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f0000000180)={0xa, {0xfff, 0x8b8}})
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0)
close(0x3)

22.278684ms ago: executing program 2 (id=495):
setns(0xc9, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000060801"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x100040c1}, 0x0)

21.873133ms ago: executing program 2 (id=496):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4)
setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c)
sendmmsg(r1, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r2)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r4, @ANYBLOB="38002f800c0002000201aaaaaaaaaaaa200003800800010000000000140003800800020002000000060001000100000008000100fcffffff"], 0x54}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000)
r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8b00, 0x0)
ioctl$CDROMREADAUDIO(r5, 0x31e, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000040)={{}, {0x18, 0x4}, 0x0, 0x6})
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505331, &(0x7f00000000c0)={{}, {0x18}, 0xfffffffc, 0x6})
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x8)
write$cgroup_int(r7, &(0x7f0000000040)=0x920, 0x12)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x141903, 0x0)
r9 = eventfd2(0x6, 0x80800)
ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000040)={0x2, r9})
close_range(r9, r8, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x0)
pipe2$9p(&(0x7f0000000200), 0x4000)
r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file1\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB="2c72ef6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r7])

0s ago: executing program 4 (id=497):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x28, 0x1, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4000000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x3, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000200000000000000fd00000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000efbd35eb5e87e0f15d7c939de0fafe850000000c0000b5b700000000009e6fa945bc5f6fa700007b8eb5f7df9d7dae057a118af8ff00000000b7080000040000000600000000000000bfa100000000000007010000f8ffffffbfa400", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095000000000000005515ffff100000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0xf, 0x3d, &(0x7f0000000640)=""/61, 0x40f00, 0x17, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x0, 0xc, 0x4, 0x693}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f00000006c0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000700)=[{0x0, 0x2, 0x6}, {0x2, 0x3, 0x6, 0x6}, {0x0, 0x3, 0x10, 0xa}, {0x4, 0x5, 0xc, 0xc}, {0x3, 0x3, 0x6, 0x1}], 0x10, 0x1}, 0x94)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000880)={r1, r0}, 0xc)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00')
exit(0x9)
getdents64(r2, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x5, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x5, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x1, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x9, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x6, 0x5, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x42, 0x13], [0x10000004, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0xfffffffe, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x2000004, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x6, 0x400, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0x6, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x200, 0xfffffffa, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405668, &(0x7f00000000c0)={0x9, 0x3, 0x1, "0000087aba10fdfffffb05001400", 0x59565955})
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r4 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x2440, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000001c0)={0xffffffffffffffff, 0x1, 0x1000000000000, 0x1000})
writev(r4, &(0x7f0000000240), 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000002900), 0x4)
socket(0x10, 0x803, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="900000001000030500"/18, @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500", @ANYRES32=r6, @ANYBLOB, @ANYRES32], 0x90}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0xffff8000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814)

kernel console output (not intermixed with test programs):

155]  alloc_netdev_mqs+0x314/0x15c0
[  132.139675][ T7155]  rtnl_create_link+0xc13/0xf80
[  132.139704][ T7155]  rtnl_newlink+0x15bc/0x2620
[  132.139752][ T7155]  ? __pfx_rtnl_newlink+0x10/0x10
[  132.139787][ T7155]  ? is_bpf_text_address+0x94/0x1a0
[  132.139811][ T7155]  ? kernel_text_address+0x8d/0x100
[  132.139831][ T7155]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  132.139852][ T7155]  ? __kernel_text_address+0xd/0x30
[  132.139891][ T7155]  ? stack_trace_save+0x8e/0xc0
[  132.139910][ T7155]  ? __pfx_stack_trace_save+0x10/0x10
[  132.139935][ T7155]  ? lock_acquire+0x1d1/0x380
[  132.139956][ T7155]  ? rtnetlink_rcv_msg+0x1f6/0xe90
[  132.139980][ T7155]  ? find_held_lock+0x2b/0x80
[  132.139997][ T7155]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  132.140021][ T7155]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  132.140046][ T7155]  ? __pfx_rtnl_newlink+0x10/0x10
[  132.140070][ T7155]  rtnetlink_rcv_msg+0x95e/0xe90
[  132.140096][ T7155]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  132.140123][ T7155]  ? __lock_acquire+0x5c0/0x1f40
[  132.140146][ T7155]  ? __netlink_lookup+0xa9/0x900
[  132.140168][ T7155]  netlink_rcv_skb+0x159/0x420
[  132.140188][ T7155]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  132.140213][ T7155]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  132.140242][ T7155]  ? netlink_deliver_tap+0x1ae/0xcc0
[  132.140266][ T7155]  netlink_unicast+0x585/0x850
[  132.140288][ T7155]  ? __pfx_netlink_unicast+0x10/0x10
[  132.140316][ T7155]  netlink_sendmsg+0x8b0/0xda0
[  132.140339][ T7155]  ? __pfx_netlink_sendmsg+0x10/0x10
[  132.140362][ T7155]  ? apparmor_socket_sendmsg+0x165/0x280
[  132.140389][ T7155]  ____sys_sendmsg+0xa4d/0xbe0
[  132.140405][ T7155]  ? __pfx_netlink_sendmsg+0x10/0x10
[  132.140426][ T7155]  ? __pfx_____sys_sendmsg+0x10/0x10
[  132.140455][ T7155]  ___sys_sendmsg+0x190/0x1e0
[  132.140474][ T7155]  ? __pfx____sys_sendmsg+0x10/0x10
[  132.140504][ T7155]  ? find_held_lock+0x2b/0x80
[  132.140539][ T7155]  __sys_sendmsg+0x160/0x210
[  132.140563][ T7155]  ? __pfx___sys_sendmsg+0x10/0x10
[  132.140592][ T7155]  ? __pfx_ksys_write+0x10/0x10
[  132.140616][ T7155]  __do_fast_syscall_32+0x13a/0x8b0
[  132.140641][ T7155]  ? lockdep_hardirqs_on+0x7d/0x110
[  132.140666][ T7155]  do_fast_syscall_32+0x32/0x70
[  132.140691][ T7155]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  132.140712][ T7155] RIP: 0023:0xf7f95fec
[  132.140731][ T7155] Code: Unable to access opcode bytes at 0xf7f95fc2.
[  132.140738][ T7155] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  132.140755][ T7155] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000280
[  132.140767][ T7155] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000
[  132.140783][ T7155] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  132.140793][ T7155] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  132.140803][ T7155] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  132.140827][ T7155]  </TASK>
[  132.141349][ T7155] debugfs: out of free dentries, can not create file 'netdev@ffff888022d30700'
[  132.200178][ T5839] bridge_slave_1: left allmulticast mode
[  132.200211][ T5839] bridge_slave_1: left promiscuous mode
[  132.201536][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.216936][ T5839] bridge_slave_0: left allmulticast mode
[  132.216953][ T5839] bridge_slave_0: left promiscuous mode
[  132.217117][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.232168][ T7142] overlayfs: unescaped trailing colons in lowerdir mount option.
[  132.402262][ T5839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  132.413331][ T5839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  132.414641][ T5839] bond0 (unregistering): Released all slaves
[  132.425866][ T5839] bond1 (unregistering): Released all slaves
[  132.477101][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.306'.
[  132.513596][ T1437] ieee802154 phy0 wpan0: encryption failed: -22
[  132.513631][ T1437] ieee802154 phy1 wpan1: encryption failed: -22
[  132.563096][ T5839] IPVS: stopping backup sync thread 5952 ...
[  132.566558][ T7189] FAULT_INJECTION: forcing a failure.
[  132.566558][ T7189] name fail_futex, interval 1, probability 0, space 0, times 0
[  132.566585][ T7189] CPU: 0 UID: 0 PID: 7189 Comm: syz.2.307 Not tainted syzkaller #0 PREEMPT(full) 
[  132.566604][ T7189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  132.566614][ T7189] Call Trace:
[  132.566620][ T7189]  <TASK>
[  132.566627][ T7189]  dump_stack_lvl+0x100/0x190
[  132.566654][ T7189]  should_fail_ex.cold+0x5/0xa
[  132.566676][ T7189]  get_futex_key+0x1d0/0x14f0
[  132.566706][ T7189]  ? __pfx_get_futex_key+0x10/0x10
[  132.566730][ T7189]  ? wakeup_preempt_fair+0x5c3/0xdc0
[  132.566779][ T7189]  ? tracing_record_taskinfo_sched_switch+0xac/0x560
[  132.566808][ T7189]  futex_wait_setup+0x91/0x540
[  132.566834][ T7189]  __futex_wait+0x19f/0x300
[  132.566855][ T7189]  ? __pfx___futex_wait+0x10/0x10
[  132.566872][ T7189]  ? __pfx_try_to_wake_up+0x10/0x10
[  132.566893][ T7189]  ? futex_hash+0x311/0x400
[  132.566918][ T7189]  ? __pfx_futex_wake_mark+0x10/0x10
[  132.566941][ T7189]  ? find_held_lock+0x2b/0x80
[  132.566959][ T7189]  ? futex_wake+0x4ea/0x5e0
[  132.566983][ T7189]  futex_wait+0xe6/0x370
[  132.567004][ T7189]  ? __pfx_futex_wait+0x10/0x10
[  132.567027][ T7189]  ? rcu_read_lock_any_held+0x6a/0x90
[  132.567043][ T7189]  ? find_held_lock+0x2b/0x80
[  132.567059][ T7189]  ? ksys_write+0x190/0x250
[  132.567075][ T7189]  ? ksys_write+0x190/0x250
[  132.567094][ T7189]  do_futex+0x265/0x440
[  132.567111][ T7189]  ? __pfx_do_futex+0x10/0x10
[  132.567133][ T7189]  __ia32_sys_futex_time32+0x2f4/0x470
[  132.567153][ T7189]  ? xfd_validate_state+0x129/0x190
[  132.567176][ T7189]  ? __pfx___ia32_sys_futex_time32+0x10/0x10
[  132.567203][ T7189]  __do_fast_syscall_32+0x13a/0x8b0
[  132.567231][ T7189]  do_fast_syscall_32+0x32/0x70
[  132.567256][ T7189]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  132.567276][ T7189] RIP: 0023:0xf7f95fec
[  132.567294][ T7189] Code: Unable to access opcode bytes at 0xf7f95fc2.
[  132.567301][ T7189] RSP: 002b:00000000f54565bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0
[  132.567319][ T7189] RAX: ffffffffffffffda RBX: 00000000f7454f88 RCX: 0000000000000080
[  132.567331][ T7189] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7454f8c
[  132.567343][ T7189] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000
[  132.567353][ T7189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  132.567363][ T7189] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  132.567384][ T7189]  </TASK>
[  132.747177][ T5448] 8021q: adding VLAN 0 to HW filter on device eth2
[  132.845182][ T5839] hsr_slave_0: left promiscuous mode
[  132.845675][ T5839] hsr_slave_1: left promiscuous mode
[  132.846145][ T5839] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.846162][ T5839] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.846804][ T5839] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.846814][ T5839] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.859279][ T5839] veth1_macvtap: left promiscuous mode
[  132.859332][ T5839] veth0_macvtap: left promiscuous mode
[  132.859408][ T5839] veth1_vlan: left promiscuous mode
[  132.859466][ T5839] veth0_vlan: left promiscuous mode
[  132.993737][ T5839] team0 (unregistering): Port device team_slave_1 removed
[  133.004069][ T5839] team0 (unregistering): Port device team_slave_0 removed
[  133.085855][ T5448] 8021q: adding VLAN 0 to HW filter on device eth3
[  133.168333][   T30] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  133.185810][ T7139] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.185886][ T7139] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.185940][ T7139] bridge_slave_0: entered allmulticast mode
[  133.186734][ T7139] bridge_slave_0: entered promiscuous mode
[  133.189640][ T7139] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.189708][ T7139] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.189792][ T7139] bridge_slave_1: entered allmulticast mode
[  133.190972][ T7139] bridge_slave_1: entered promiscuous mode
[  133.206834][ T7139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  133.208638][ T7139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  133.221366][ T7139] team0: Port device team_slave_0 added
[  133.222555][ T7139] team0: Port device team_slave_1 added
[  133.240634][ T7139] batman_adv: batadv0: Adding interface: batadv_slave_0
[  133.240645][ T7139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  133.240658][ T7139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  133.244607][ T7139] batman_adv: batadv0: Adding interface: batadv_slave_1
[  133.244618][ T7139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  133.244638][ T7139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  133.264205][ T5448] 8021q: adding VLAN 0 to HW filter on device eth4
[  133.291153][ T7139] hsr_slave_0: entered promiscuous mode
[  133.291616][ T7139] hsr_slave_1: entered promiscuous mode
[  133.308486][   T30] usb 8-1: device descriptor read/64, error -71
[  133.395135][ T7139] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  133.397129][ T7139] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  133.397722][ T7139] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  133.398344][   T35] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  133.399980][ T7139] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  133.400410][ T7139] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  133.402837][ T7139] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  133.403398][ T7139] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  133.408752][ T7139] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  133.431848][ T7139] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.431894][ T7139] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.431990][ T7139] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.432041][ T7139] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.436585][ T5448] 8021q: adding VLAN 0 to HW filter on device eth5
[  133.466352][ T7139] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.480958][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.481637][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.491837][ T7139] 8021q: adding VLAN 0 to HW filter on device team0
[  133.499405][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.499453][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.502329][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.502399][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.549688][   T35] usb 7-1: Using ep0 maxpacket: 8
[  133.550125][   T35] usb 7-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  133.552667][   T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 15
[  133.552689][   T35] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  133.552702][   T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  133.552714][   T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  133.554305][   T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.554317][   T35] usb 7-1: Product: syz
[  133.554324][   T35] usb 7-1: Manufacturer: syz
[  133.554331][   T35] usb 7-1: SerialNumber: syz
[  133.555950][   T35] usb 7-1: config 0 descriptor??
[  133.556379][ T7220] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  133.558633][   T30] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  133.690536][   T30] usb 8-1: device descriptor read/64, error -71
[  133.761286][   T35] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[  133.764983][   T35] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input6
[  133.799760][   T30] usb usb8-port1: attempt power cycle
[  133.836062][ T7139] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.028378][ T5736] Bluetooth: hci2: command tx timeout
[  134.044815][ T7139] veth0_vlan: entered promiscuous mode
[  134.053996][ T7139] veth1_vlan: entered promiscuous mode
[  134.093946][ T7139] veth0_macvtap: entered promiscuous mode
[  134.097982][ T7139] veth1_macvtap: entered promiscuous mode
[  134.112750][ T7139] batman_adv: batadv0: Interface activated: batadv_slave_0
[  134.120735][ T7139] batman_adv: batadv0: Interface activated: batadv_slave_1
[  134.125958][    C3] powermate: config urb returned -71
[  134.127320][    C3] powermate: config urb returned -71
[  134.127508][    C3] powermate: config urb returned -71
[  134.127689][    C3] powermate: config urb returned -71
[  134.127852][    C3] powermate: config urb returned -71
[  134.139347][   T50] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  134.146293][ T2329] usb 7-1: USB disconnect, device number 5
[  134.146386][    C3] powermate 7-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  134.155317][   T30] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  134.158625][ T5585] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.158648][ T5585] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.158665][ T5585] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.158682][ T5585] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.184427][   T30] usb 8-1: device descriptor read/8, error -71
[  134.188533][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.188565][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.209190][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.209202][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.288390][   T50] usb 5-1: Using ep0 maxpacket: 8
[  134.289133][   T50] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  134.290192][   T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  134.290230][   T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.293454][   T50] usb 5-1: config 0 descriptor??
[  134.428417][   T30] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  134.448704][   T30] usb 8-1: device descriptor read/8, error -71
[  134.497774][   T50] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  134.558503][   T30] usb usb8-port1: unable to enumerate USB device
[  134.951848][   T35] usb 5-1: USB disconnect, device number 5
[  135.579677][ T7286] netlink: 'syz.0.319': attribute type 1 has an invalid length.
[  135.579691][ T7286] netlink: 756 bytes leftover after parsing attributes in process `syz.0.319'.
[  136.118297][ T5736] Bluetooth: hci2: command tx timeout
[  136.484206][ T7302] random: crng reseeded on system resumption
[  136.494457][ T7302] netlink: 68 bytes leftover after parsing attributes in process `syz.2.324'.
[  136.496414][ T7302] CIFS mount error: No usable UNC path provided in device string!
[  136.496414][ T7302] 
[  136.496530][ T7302] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  136.546818][ T7304] 8021q: adding VLAN 0 to HW filter on device bond1
[  136.556120][ T7304] Bluetooth: MGMT ver 1.23
[  136.667823][ T7310] FAULT_INJECTION: forcing a failure.
[  136.667823][ T7310] name failslab, interval 1, probability 0, space 0, times 0
[  136.667854][ T7310] CPU: 3 UID: 0 PID: 7310 Comm: syz.4.326 Not tainted syzkaller #0 PREEMPT(full) 
[  136.667875][ T7310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  136.667886][ T7310] Call Trace:
[  136.667893][ T7310]  <TASK>
[  136.667901][ T7310]  dump_stack_lvl+0x100/0x190
[  136.667930][ T7310]  should_fail_ex.cold+0x5/0xa
[  136.667954][ T7310]  should_failslab+0xc2/0x120
[  136.667978][ T7310]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  136.668000][ T7310]  ? __alloc_skb+0x140/0x710
[  136.668027][ T7310]  __alloc_skb+0x140/0x710
[  136.668046][ T7310]  ? __alloc_skb+0x5b7/0x710
[  136.668067][ T7310]  ? __pfx___alloc_skb+0x10/0x10
[  136.668205][ T7310]  ? ip6_dst_lookup_tail.constprop.0+0x7bc/0x2110
[  136.668251][ T7310]  __ip6_append_data+0x34f0/0x4bd0
[  136.668281][ T7310]  ? __pfx_raw6_getfrag+0x10/0x10
[  136.668310][ T7310]  ? __pfx___ip6_append_data+0x10/0x10
[  136.668333][ T7310]  ? __pfx_ip6_mtu+0x10/0x10
[  136.668349][ T7310]  ? ip6_setup_cork+0x5be/0x14c0
[  136.668373][ T7310]  ip6_append_data+0x10b/0x410
[  136.668396][ T7310]  ? __pfx_raw6_getfrag+0x10/0x10
[  136.668435][ T7310]  rawv6_sendmsg+0x169c/0x4450
[  136.668456][ T7310]  ? __pfx_aa_inet_msg_perm+0x10/0x10
[  136.668485][ T7310]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  136.668514][ T7310]  ? __lock_acquire+0x5c0/0x1f40
[  136.668553][ T7310]  ? __lock_acquire+0x5c0/0x1f40
[  136.668581][ T7310]  ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0
[  136.668609][ T7310]  ? aa_sock_msg_perm+0x11e/0x200
[  136.668633][ T7310]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  136.668655][ T7310]  ? inet_sendmsg+0x11c/0x140
[  136.668671][ T7310]  inet_sendmsg+0x11c/0x140
[  136.668695][ T7310]  ____sys_sendmsg+0x9c9/0xbe0
[  136.668712][ T7310]  ? __pfx_inet_sendmsg+0x10/0x10
[  136.668731][ T7310]  ? __pfx_____sys_sendmsg+0x10/0x10
[  136.668752][ T7310]  ? rcu_is_watching+0x13/0xc0
[  136.668771][ T7310]  ? ___sys_sendmsg+0x19d/0x1e0
[  136.668787][ T7310]  ? kfree+0x1e5/0x6d0
[  136.668813][ T7310]  ? __pfx__kstrtoull+0x10/0x10
[  136.668842][ T7310]  ___sys_sendmsg+0x190/0x1e0
[  136.668863][ T7310]  ? __pfx____sys_sendmsg+0x10/0x10
[  136.668883][ T7310]  ? __lock_acquire+0x5c0/0x1f40
[  136.668915][ T7310]  ? __fget_files+0x34/0x3d0
[  136.668948][ T7310]  ? __pfx___might_resched+0x10/0x10
[  136.668977][ T7310]  __sys_sendmmsg+0x309/0x440
[  136.669029][ T7310]  ? __pfx___sys_sendmmsg+0x10/0x10
[  136.669052][ T7310]  ? find_held_lock+0x2b/0x80
[  136.669078][ T7310]  ? __mutex_unlock_slowpath+0x35d/0x930
[  136.669120][ T7310]  ? fput+0x7c/0x100
[  136.669143][ T7310]  ? ksys_write+0x1ac/0x250
[  136.669165][ T7310]  __ia32_compat_sys_sendmmsg+0x9d/0x100
[  136.669184][ T7310]  ? lockdep_hardirqs_on+0x7d/0x110
[  136.669210][ T7310]  __do_fast_syscall_32+0x13a/0x8b0
[  136.669237][ T7310]  ? lockdep_hardirqs_on+0x7d/0x110
[  136.669264][ T7310]  do_fast_syscall_32+0x32/0x70
[  136.669292][ T7310]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  136.669315][ T7310] RIP: 0023:0xf7ff4fec
[  136.669335][ T7310] Code: Unable to access opcode bytes at 0xf7ff4fc2.
[  136.669343][ T7310] RSP: 002b:00000000f549550c EFLAGS: 00000292 ORIG_RAX: 0000000000000159
[  136.669362][ T7310] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000480
[  136.669374][ T7310] RDX: 00000000000002e9 RSI: 0000000000000000 RDI: 0000000000000000
[  136.669384][ T7310] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  136.669395][ T7310] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  136.669405][ T7310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  136.669430][ T7310]  </TASK>
[  136.972707][ T7316] syzkaller1: entered promiscuous mode
[  136.972730][ T7316] syzkaller1: entered allmulticast mode
[  137.108293][   T25] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  137.288426][   T25] usb 8-1: Using ep0 maxpacket: 8
[  137.292225][   T25] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  137.293627][   T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  137.293668][   T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.300306][   T25] usb 8-1: config 0 descriptor??
[  137.572543][   T25] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  137.628760][ T7286] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  138.188515][ T5736] Bluetooth: hci2: command tx timeout
[  138.355958][   T75] usb 8-1: USB disconnect, device number 10
[  138.420125][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.333'.
[  138.420201][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.333'.
[  138.420257][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.333'.
[  138.420311][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.333'.
[  138.420372][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.333'.
[  138.420425][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.333'.
[  138.420480][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.333'.
[  138.420534][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.333'.
[  138.432766][ T7334] bridge_slave_0: left allmulticast mode
[  138.432783][ T7334] bridge_slave_0: left promiscuous mode
[  138.432893][ T7334] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.455464][ T7334] bridge_slave_1: left allmulticast mode
[  138.455486][ T7334] bridge_slave_1: left promiscuous mode
[  138.455691][ T7334] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.483671][ T7334] bond0: (slave bond_slave_0): Releasing backup interface
[  138.488438][ T7334] bond0: (slave bond_slave_1): Releasing backup interface
[  138.495629][ T7334] team0: Port device team_slave_0 removed
[  138.496517][ T7334] team0: Port device team_slave_1 removed
[  138.496679][ T7334] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.497228][ T7334] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.497659][ T7334] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  138.667091][ T7349] netlink: 'syz.0.334': attribute type 1 has an invalid length.
[  138.678035][ T7349] FAULT_INJECTION: forcing a failure.
[  138.678035][ T7349] name failslab, interval 1, probability 0, space 0, times 0
[  138.678054][ T7349] CPU: 3 UID: 0 PID: 7349 Comm: syz.0.334 Not tainted syzkaller #0 PREEMPT(full) 
[  138.678066][ T7349] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  138.678072][ T7349] Call Trace:
[  138.678076][ T7349]  <TASK>
[  138.678081][ T7349]  dump_stack_lvl+0x100/0x190
[  138.678098][ T7349]  should_fail_ex.cold+0x5/0xa
[  138.678113][ T7349]  should_failslab+0xc2/0x120
[  138.678128][ T7349]  __kvmalloc_node_noprof+0x113/0x9b0
[  138.678143][ T7349]  ? alloc_netdev_mqs+0xd7/0x15c0
[  138.678159][ T7349]  ? __pfx_ipgre_tap_setup+0x10/0x10
[  138.678173][ T7349]  alloc_netdev_mqs+0xd7/0x15c0
[  138.678191][ T7349]  rtnl_create_link+0xc13/0xf80
[  138.678227][ T7349]  rtnl_newlink+0x15bc/0x2620
[  138.678257][ T7349]  ? __pfx_rtnl_newlink+0x10/0x10
[  138.678281][ T7349]  ? rcu_is_watching+0x13/0xc0
[  138.678305][ T7349]  ? find_held_lock+0x2b/0x80
[  138.678319][ T7349]  ? lock_acquire+0x1d1/0x380
[  138.678333][ T7349]  ? rtnetlink_rcv_msg+0x1f6/0xe90
[  138.678349][ T7349]  ? find_held_lock+0x2b/0x80
[  138.678360][ T7349]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  138.678376][ T7349]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  138.678392][ T7349]  ? __pfx_rtnl_newlink+0x10/0x10
[  138.678409][ T7349]  rtnetlink_rcv_msg+0x95e/0xe90
[  138.678426][ T7349]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  138.678446][ T7349]  ? ref_tracker_free+0x37e/0x6c0
[  138.678466][ T7349]  netlink_rcv_skb+0x159/0x420
[  138.678480][ T7349]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  138.678500][ T7349]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  138.678519][ T7349]  ? netlink_deliver_tap+0x1ae/0xcc0
[  138.678538][ T7349]  netlink_unicast+0x585/0x850
[  138.678553][ T7349]  ? __pfx_netlink_unicast+0x10/0x10
[  138.678571][ T7349]  netlink_sendmsg+0x8b0/0xda0
[  138.678586][ T7349]  ? __pfx_netlink_sendmsg+0x10/0x10
[  138.678600][ T7349]  ? apparmor_socket_sendmsg+0x165/0x280
[  138.678618][ T7349]  ____sys_sendmsg+0xa4d/0xbe0
[  138.678627][ T7349]  ? __pfx_netlink_sendmsg+0x10/0x10
[  138.678642][ T7349]  ? __pfx_____sys_sendmsg+0x10/0x10
[  138.678659][ T7349]  ___sys_sendmsg+0x190/0x1e0
[  138.678672][ T7349]  ? __pfx____sys_sendmsg+0x10/0x10
[  138.678700][ T7349]  ? find_held_lock+0x2b/0x80
[  138.678723][ T7349]  __sys_sendmsg+0x160/0x210
[  138.678738][ T7349]  ? __pfx___sys_sendmsg+0x10/0x10
[  138.678757][ T7349]  ? __pfx_ksys_write+0x10/0x10
[  138.678772][ T7349]  __do_fast_syscall_32+0x13a/0x8b0
[  138.678789][ T7349]  ? lockdep_hardirqs_on+0x7d/0x110
[  138.678807][ T7349]  do_fast_syscall_32+0x32/0x70
[  138.678824][ T7349]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  138.678838][ T7349] RIP: 0023:0xf6feefec
[  138.678850][ T7349] Code: Unable to access opcode bytes at 0xf6feefc2.
[  138.678857][ T7349] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  138.678873][ T7349] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800000c0
[  138.678884][ T7349] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000
[  138.678894][ T7349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  138.678901][ T7349] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  138.678908][ T7349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  138.678924][ T7349]  </TASK>
[  139.935997][ T7412] pim6reg1: entered promiscuous mode
[  139.936016][ T7412] pim6reg1: entered allmulticast mode
[  139.952058][ T7419] netlink: 'syz.4.344': attribute type 1 has an invalid length.
[  139.962659][ T7421] FAULT_INJECTION: forcing a failure.
[  139.962659][ T7421] name failslab, interval 1, probability 0, space 0, times 0
[  139.962678][ T7421] CPU: 2 UID: 0 PID: 7421 Comm: syz.2.345 Not tainted syzkaller #0 PREEMPT(full) 
[  139.962691][ T7421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  139.962697][ T7421] Call Trace:
[  139.962702][ T7421]  <TASK>
[  139.962706][ T7421]  dump_stack_lvl+0x100/0x190
[  139.962724][ T7421]  should_fail_ex.cold+0x5/0xa
[  139.962738][ T7421]  should_failslab+0xc2/0x120
[  139.962753][ T7421]  __kvmalloc_node_noprof+0x113/0x9b0
[  139.962766][ T7421]  ? kasan_save_stack+0x3f/0x50
[  139.962778][ T7421]  ? kasan_save_track+0x14/0x30
[  139.962790][ T7421]  ? __kasan_kmalloc+0xaa/0xb0
[  139.962801][ T7421]  ? __kmalloc_noprof+0x32f/0x840
[  139.962813][ T7421]  ? bpf_test_run_xdp_live+0x13a/0x760
[  139.962827][ T7421]  bpf_test_run_xdp_live+0x13a/0x760
[  139.962839][ T7421]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  139.962856][ T7421]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  139.962877][ T7421]  ? _copy_from_user+0x59/0xd0
[  139.962892][ T7421]  ? bpf_test_init.isra.0+0x51/0x100
[  139.962910][ T7421]  bpf_prog_test_run_xdp+0xd86/0x1670
[  139.962927][ T7421]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  139.962944][ T7421]  ? fput+0x7c/0x100
[  139.962957][ T7421]  ? __bpf_prog_get+0x97/0x290
[  139.962972][ T7421]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  139.962984][ T7421]  __sys_bpf+0x2265/0x4a30
[  139.962999][ T7421]  ? __pfx___sys_bpf+0x10/0x10
[  139.963008][ T7421]  ? lock_acquire+0x1d1/0x380
[  139.963023][ T7421]  ? get_pid_task+0x2a/0x250
[  139.963034][ T7421]  ? find_held_lock+0x2b/0x80
[  139.963045][ T7421]  ? get_pid_task+0xfc/0x250
[  139.963056][ T7421]  ? get_pid_task+0xfc/0x250
[  139.963070][ T7421]  ? proc_fail_nth_write+0x9f/0x220
[  139.963081][ T7421]  ? find_held_lock+0x2b/0x80
[  139.963095][ T7421]  ? rcu_read_lock_any_held+0x6a/0x90
[  139.963108][ T7421]  ? find_held_lock+0x2b/0x80
[  139.963118][ T7421]  ? ksys_write+0x190/0x250
[  139.963129][ T7421]  ? ksys_write+0x190/0x250
[  139.963139][ T7421]  ? lock_acquire+0x1d1/0x380
[  139.963163][ T7421]  ? fput+0x7c/0x100
[  139.963177][ T7421]  ? __ia32_sys_bpf+0xcc/0x170
[  139.963188][ T7421]  __ia32_sys_bpf+0xcc/0x170
[  139.963200][ T7421]  ? __do_fast_syscall_32+0xb3/0x8b0
[  139.963218][ T7421]  __do_fast_syscall_32+0x13a/0x8b0
[  139.963234][ T7421]  ? lockdep_hardirqs_on+0x7d/0x110
[  139.963251][ T7421]  do_fast_syscall_32+0x32/0x70
[  139.963268][ T7421]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  139.963282][ T7421] RIP: 0023:0xf7f95fec
[  139.963294][ T7421] Code: Unable to access opcode bytes at 0xf7f95fc2.
[  139.963299][ T7421] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  139.963309][ T7421] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000340
[  139.963316][ T7421] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000
[  139.963322][ T7421] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  139.963328][ T7421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  139.963334][ T7421] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  139.963347][ T7421]  </TASK>
[  139.967102][   T44] audit: type=1326 audit(1789090627.250:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.4.344" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff4fec code=0x0
[  140.231518][ T7443] FAULT_INJECTION: forcing a failure.
[  140.231518][ T7443] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  140.231546][ T7443] CPU: 2 UID: 0 PID: 7443 Comm: syz.2.352 Not tainted syzkaller #0 PREEMPT(full) 
[  140.231564][ T7443] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  140.231574][ T7443] Call Trace:
[  140.231579][ T7443]  <TASK>
[  140.231585][ T7443]  dump_stack_lvl+0x100/0x190
[  140.231611][ T7443]  should_fail_ex.cold+0x5/0xa
[  140.231633][ T7443]  _copy_from_user+0x2e/0xd0
[  140.231654][ T7443]  kstrtouint_from_user+0xd6/0x1d0
[  140.231677][ T7443]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  140.231705][ T7443]  ? lock_acquire+0x1d1/0x380
[  140.231738][ T7443]  proc_fail_nth_write+0x83/0x220
[  140.231757][ T7443]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  140.231781][ T7443]  vfs_write+0x2aa/0x1050
[  140.231799][ T7443]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  140.231816][ T7443]  ? lock_acquire+0x1d1/0x380
[  140.231835][ T7443]  ? __fget_files+0x34/0x3d0
[  140.231853][ T7443]  ? __pfx_vfs_write+0x10/0x10
[  140.231868][ T7443]  ? find_held_lock+0x2b/0x80
[  140.231885][ T7443]  ? __fget_files+0x215/0x3d0
[  140.231906][ T7443]  ? __fget_files+0x21f/0x3d0
[  140.231929][ T7443]  ksys_write+0x12a/0x250
[  140.231946][ T7443]  ? __pfx_ksys_write+0x10/0x10
[  140.231969][ T7443]  do_int80_emulation+0x166/0x650
[  140.231995][ T7443]  asm_int80_emulation+0x1a/0x20
[  140.232011][ T7443] RIP: 0023:0xf71975ab
[  140.232025][ T7443] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  140.232040][ T7443] RSP: 002b:00000000f54564bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[  140.232058][ T7443] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54565d0
[  140.232068][ T7443] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  140.232077][ T7443] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  140.232087][ T7443] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  140.232096][ T7443] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  140.232118][ T7443]  </TASK>
[  140.269147][ T5736] Bluetooth: hci2: command tx timeout
[  140.468858][ T7452] FAULT_INJECTION: forcing a failure.
[  140.468858][ T7452] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  140.468887][ T7452] CPU: 1 UID: 0 PID: 7452 Comm: syz.0.356 Not tainted syzkaller #0 PREEMPT(full) 
[  140.468907][ T7452] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  140.468917][ T7452] Call Trace:
[  140.468924][ T7452]  <TASK>
[  140.468931][ T7452]  dump_stack_lvl+0x100/0x190
[  140.468958][ T7452]  should_fail_ex.cold+0x5/0xa
[  140.469005][ T7452]  strncpy_from_user+0x3b/0x2d0
[  140.469034][ T7452]  do_getname+0x78/0x390
[  140.469062][ T7452]  do_sys_openat2+0xc7/0x1e0
[  140.469086][ T7452]  ? __pfx_do_sys_openat2+0x10/0x10
[  140.469115][ T7452]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  140.469148][ T7452]  __ia32_compat_sys_openat+0x12d/0x210
[  140.469175][ T7452]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  140.469199][ T7452]  ? fput+0x7c/0x100
[  140.469221][ T7452]  ? ksys_write+0x1ac/0x250
[  140.469238][ T7452]  ? __pfx_ksys_write+0x10/0x10
[  140.469261][ T7452]  __do_fast_syscall_32+0x13a/0x8b0
[  140.469287][ T7452]  ? lockdep_hardirqs_on+0x7d/0x110
[  140.469313][ T7452]  do_fast_syscall_32+0x32/0x70
[  140.469341][ T7452]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  140.469363][ T7452] RIP: 0023:0xf6feefec
[  140.469382][ T7452] Code: Unable to access opcode bytes at 0xf6feefc2.
[  140.469390][ T7452] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127
[  140.469409][ T7452] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800000c0
[  140.469421][ T7452] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  140.469431][ T7452] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  140.469441][ T7452] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  140.469452][ T7452] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  140.469475][ T7452]  </TASK>
[  140.576374][ T7456] libceph: resolve '1270.1' (ret=-3): failed
[  140.705066][ T7461] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.841762][ T7461] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.872384][ T7467] FAULT_INJECTION: forcing a failure.
[  140.872384][ T7467] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  140.872405][ T7467] CPU: 2 UID: 0 PID: 7467 Comm: syz.2.361 Not tainted syzkaller #0 PREEMPT(full) 
[  140.872418][ T7467] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  140.872424][ T7467] Call Trace:
[  140.872428][ T7467]  <TASK>
[  140.872432][ T7467]  dump_stack_lvl+0x100/0x190
[  140.872450][ T7467]  should_fail_ex.cold+0x5/0xa
[  140.872465][ T7467]  _copy_from_user+0x2e/0xd0
[  140.872480][ T7467]  __sys_bpf+0x2f5/0x4a30
[  140.872496][ T7467]  ? __pfx___sys_bpf+0x10/0x10
[  140.872508][ T7467]  ? find_held_lock+0x2b/0x80
[  140.872519][ T7467]  ? futex_wake+0x4ea/0x5e0
[  140.872543][ T7467]  ? rcu_read_lock_any_held+0x6a/0x90
[  140.872556][ T7467]  ? find_held_lock+0x2b/0x80
[  140.872567][ T7467]  ? ksys_write+0x190/0x250
[  140.872578][ T7467]  ? ksys_write+0x190/0x250
[  140.872596][ T7467]  ? __ia32_sys_futex_time32+0x2f4/0x470
[  140.872609][ T7467]  ? xfd_validate_state+0x129/0x190
[  140.872627][ T7467]  ? __ia32_sys_bpf+0xcc/0x170
[  140.872638][ T7467]  __ia32_sys_bpf+0xcc/0x170
[  140.872650][ T7467]  ? __do_fast_syscall_32+0xb3/0x8b0
[  140.872668][ T7467]  __do_fast_syscall_32+0x13a/0x8b0
[  140.872694][ T7467]  do_fast_syscall_32+0x32/0x70
[  140.872711][ T7467]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  140.872726][ T7467] RIP: 0023:0xf7f95fec
[  140.872740][ T7467] Code: Unable to access opcode bytes at 0xf7f95fc2.
[  140.872745][ T7467] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  140.872756][ T7467] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000000
[  140.872764][ T7467] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  140.872771][ T7467] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  140.872777][ T7467] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  140.872802][ T7467] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  140.872816][ T7467]  </TASK>
[  140.925451][ T7470] FAULT_INJECTION: forcing a failure.
[  140.925451][ T7470] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  140.925472][ T7470] CPU: 0 UID: 0 PID: 7470 Comm: syz.2.362 Not tainted syzkaller #0 PREEMPT(full) 
[  140.925485][ T7470] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  140.925491][ T7470] Call Trace:
[  140.925495][ T7470]  <TASK>
[  140.925499][ T7470]  dump_stack_lvl+0x100/0x190
[  140.925517][ T7470]  should_fail_ex.cold+0x5/0xa
[  140.925529][ T7470]  ? prepare_alloc_pages+0x16d/0x5b0
[  140.925550][ T7470]  should_fail_alloc_page+0xeb/0x140
[  140.925566][ T7470]  prepare_alloc_pages+0x1f0/0x5b0
[  140.925580][ T7470]  ? do_raw_spin_lock+0x128/0x260
[  140.925598][ T7470]  __alloc_frozen_pages_noprof+0x1e9/0x3300
[  140.925611][ T7470]  ? register_lock_class+0x3f/0x7b0
[  140.925627][ T7470]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  140.925642][ T7470]  ? stack_depot_save_flags+0x49a/0x9f0
[  140.925660][ T7470]  ? __lock_acquire+0xe8b/0x1f40
[  140.925675][ T7470]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  140.925686][ T7470]  ? binder_alloc_new_buf+0x1bb/0x3050
[  140.925703][ T7470]  ? compat_ptr_ioctl+0x6e/0xa0
[  140.925719][ T7470]  ? __ia32_compat_sys_ioctl+0x2cf/0x360
[  140.925736][ T7470]  ? __do_fast_syscall_32+0x13a/0x8b0
[  140.925754][ T7470]  ? lock_acquire+0x1d1/0x380
[  140.925768][ T7470]  ? binder_alloc_new_buf+0x1d8/0x3050
[  140.925788][ T7470]  ? __mutex_lock+0x26c/0x1bd0
[  140.925804][ T7470]  ? binder_alloc_new_buf+0x1d8/0x3050
[  140.925819][ T7470]  ? find_held_lock+0x2b/0x80
[  140.925830][ T7470]  ? binder_alloc_new_buf+0x16a0/0x3050
[  140.925845][ T7470]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  140.925862][ T7470]  ? policy_nodemask+0xed/0x4f0
[  140.925878][ T7470]  alloc_pages_mpol+0x201/0x550
[  140.925898][ T7470]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  140.925918][ T7470]  ? binder_alloc_new_buf+0x1575/0x3050
[  140.925940][ T7470]  ? rcu_is_watching+0x13/0xc0
[  140.925959][ T7470]  ? binder_alloc_new_buf+0x1575/0x3050
[  140.925988][ T7470]  alloc_pages_noprof+0x1a/0x160
[  140.926016][ T7470]  binder_alloc_new_buf+0x18ec/0x3050
[  140.926045][ T7470]  ? kasan_save_track+0x14/0x30
[  140.926060][ T7470]  ? __pfx_binder_alloc_new_buf+0x10/0x10
[  140.926075][ T7470]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  140.926095][ T7470]  binder_transaction+0x1ebc/0x9bb0
[  140.926120][ T7470]  ? __lock_acquire+0x5c0/0x1f40
[  140.926136][ T7470]  ? __pfx_binder_transaction+0x10/0x10
[  140.926151][ T7470]  ? __lock_acquire+0x5c0/0x1f40
[  140.926169][ T7470]  ? __lock_acquire+0x5c0/0x1f40
[  140.926186][ T7470]  ? __lock_acquire+0x5c0/0x1f40
[  140.926201][ T7470]  ? lock_acquire+0x1d1/0x380
[  140.926215][ T7470]  ? unwind_next_frame+0xbd/0x2090
[  140.926231][ T7470]  ? lock_acquire+0x1d1/0x380
[  140.926244][ T7470]  ? is_bpf_text_address+0x25/0x1a0
[  140.926262][ T7470]  ? __lock_acquire+0x5c0/0x1f40
[  140.926277][ T7470]  ? __lock_acquire+0x5c0/0x1f40
[  140.926291][ T7470]  ? is_bpf_text_address+0x94/0x1a0
[  140.926306][ T7470]  ? kernel_text_address+0x8d/0x100
[  140.926319][ T7470]  ? __pfx_widen_string+0x10/0x10
[  140.926333][ T7470]  ? lock_acquire+0x1d1/0x380
[  140.926347][ T7470]  ? __might_fault+0xc5/0x140
[  140.926364][ T7470]  ? find_held_lock+0x2b/0x80
[  140.926374][ T7470]  ? __might_fault+0xc5/0x140
[  140.926390][ T7470]  ? __might_fault+0xc5/0x140
[  140.926411][ T7470]  binder_thread_write+0x12f4/0x4db0
[  140.926427][ T7470]  ? kasan_save_free_info+0x3b/0x70
[  140.926446][ T7470]  ? __lock_acquire+0x5c0/0x1f40
[  140.926461][ T7470]  ? __pfx_binder_thread_write+0x10/0x10
[  140.926476][ T7470]  ? binder_debug+0xe0/0x190
[  140.926488][ T7470]  ? __pfx_binder_debug+0x10/0x10
[  140.926501][ T7470]  ? binder_debug+0xe0/0x190
[  140.926513][ T7470]  ? __pfx_binder_debug+0x10/0x10
[  140.926560][ T7470]  ? __pfx_binder_ioctl+0x10/0x10
[  140.926577][ T7470]  binder_ioctl+0x28ca/0x74a0
[  140.926593][ T7470]  ? tomoyo_path_number_perm+0x28f/0x580
[  140.926609][ T7470]  ? tomoyo_path_number_perm+0x28f/0x580
[  140.926627][ T7470]  ? tomoyo_path_number_perm+0x188/0x580
[  140.926643][ T7470]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  140.926659][ T7470]  ? __pfx_binder_ioctl+0x10/0x10
[  140.926677][ T7470]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  140.926692][ T7470]  ? do_vfs_ioctl+0x226/0x13e0
[  140.926709][ T7470]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  140.926730][ T7470]  ? find_held_lock+0x2b/0x80
[  140.926741][ T7470]  ? __fget_files+0x215/0x3d0
[  140.926752][ T7470]  ? hook_file_ioctl_common+0x140/0x440
[  140.926771][ T7470]  ? __fget_files+0x21f/0x3d0
[  140.926784][ T7470]  ? __pfx_binder_ioctl+0x10/0x10
[  140.926798][ T7470]  compat_ptr_ioctl+0x6e/0xa0
[  140.926814][ T7470]  ? __pfx_compat_ptr_ioctl+0x10/0x10
[  140.926831][ T7470]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  140.926850][ T7470]  __do_fast_syscall_32+0x13a/0x8b0
[  140.926865][ T7470]  ? lockdep_hardirqs_on+0x7d/0x110
[  140.926882][ T7470]  do_fast_syscall_32+0x32/0x70
[  140.926899][ T7470]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  140.926914][ T7470] RIP: 0023:0xf7f95fec
[  140.926927][ T7470] Code: Unable to access opcode bytes at 0xf7f95fc2.
[  140.926932][ T7470] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  140.926942][ T7470] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201
[  140.926949][ T7470] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000
[  140.926955][ T7470] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  140.926962][ T7470] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  140.926968][ T7470] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  140.926981][ T7470]  </TASK>
[  140.939951][ T7461] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.061949][ T7461] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.209376][ T5585] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.209469][ T5585] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.218591][ T5585] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.218668][ T5585] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.312034][ T7489] pcieport 0000:00:04.0: PCI bridge to [bus 01]
[  141.312094][ T7489] pcieport 0000:00:04.0:   bridge window [io  0x1000-0x1fff]
[  141.313935][ T7489] pcieport 0000:00:04.0:   bridge window [mem 0xfe800000-0xfe9fffff]
[  141.315209][ T7489] pcieport 0000:00:04.0:   bridge window [mem 0xfe000000-0xfe1fffff 64bit pref]
[  141.344970][ T7491] syzkaller0: entered promiscuous mode
[  141.345002][ T7491] syzkaller0: entered allmulticast mode
[  141.361414][ T7491] syz.0.368 uses obsolete (PF_INET,SOCK_PACKET)
[  142.053209][ T7497] syz.2.371 (7497): drop_caches: 2
[  142.199223][ T7501] FAULT_INJECTION: forcing a failure.
[  142.199223][ T7501] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  142.199254][ T7501] CPU: 3 UID: 0 PID: 7501 Comm: syz.2.372 Not tainted syzkaller #0 PREEMPT(full) 
[  142.199271][ T7501] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  142.199278][ T7501] Call Trace:
[  142.199282][ T7501]  <TASK>
[  142.199287][ T7501]  dump_stack_lvl+0x100/0x190
[  142.199305][ T7501]  should_fail_ex.cold+0x5/0xa
[  142.199319][ T7501]  _copy_from_user+0x2e/0xd0
[  142.199334][ T7501]  get_compat_msghdr+0xb3/0x480
[  142.199354][ T7501]  ? __pfx_get_compat_msghdr+0x10/0x10
[  142.199387][ T7501]  ___sys_sendmsg+0x1b6/0x1e0
[  142.199409][ T7501]  ? __pfx____sys_sendmsg+0x10/0x10
[  142.199446][ T7501]  ? find_held_lock+0x2b/0x80
[  142.199467][ T7501]  __sys_sendmsg+0x160/0x210
[  142.199483][ T7501]  ? __pfx___sys_sendmsg+0x10/0x10
[  142.199501][ T7501]  ? __pfx_ksys_write+0x10/0x10
[  142.199516][ T7501]  __do_fast_syscall_32+0x13a/0x8b0
[  142.199533][ T7501]  ? lockdep_hardirqs_on+0x7d/0x110
[  142.199549][ T7501]  do_fast_syscall_32+0x32/0x70
[  142.199566][ T7501]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  142.199580][ T7501] RIP: 0023:0xf7f95fec
[  142.199597][ T7501] Code: Unable to access opcode bytes at 0xf7f95fc2.
[  142.199602][ T7501] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  142.199613][ T7501] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009b40
[  142.199624][ T7501] RDX: 0000000024000800 RSI: 0000000000000000 RDI: 0000000000000000
[  142.199633][ T7501] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  142.199643][ T7501] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  142.199652][ T7501] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  142.199672][ T7501]  </TASK>
[  142.744201][   T44] audit: type=1800 audit(1789090630.030:5): pid=7508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.375" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0
[  142.774842][ T7508] rnbd_client L202: map_device: Unknown parameter or missing value ''
[  143.248317][   T75] usb 8-1: new low-speed USB device number 11 using dummy_hcd
[  143.398390][   T75] usb 8-1: device descriptor read/64, error -71
[  143.536499][ T7535] FAULT_INJECTION: forcing a failure.
[  143.536499][ T7535] name failslab, interval 1, probability 0, space 0, times 0
[  143.536529][ T7535] CPU: 1 UID: 0 PID: 7535 Comm: syz.4.386 Not tainted syzkaller #0 PREEMPT(full) 
[  143.536542][ T7535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  143.536549][ T7535] Call Trace:
[  143.536552][ T7535]  <TASK>
[  143.536557][ T7535]  dump_stack_lvl+0x100/0x190
[  143.536575][ T7535]  should_fail_ex.cold+0x5/0xa
[  143.536590][ T7535]  should_failslab+0xc2/0x120
[  143.536604][ T7535]  __kmalloc_noprof+0xfc/0x840
[  143.536617][ T7535]  ? __memcg_list_lru_alloc+0x418/0x680
[  143.536637][ T7535]  __memcg_list_lru_alloc+0x418/0x680
[  143.536653][ T7535]  ? xa_load+0x149/0x2c0
[  143.536667][ T7535]  ? __pfx___memcg_list_lru_alloc+0x10/0x10
[  143.536686][ T7535]  ? rcu_read_unlock+0x17/0x60
[  143.536706][ T7535]  memcg_list_lru_alloc+0xd3/0x100
[  143.536724][ T7535]  __memcg_slab_post_alloc_hook+0x27b/0x1270
[  143.536746][ T7535]  ? kasan_save_track+0x14/0x30
[  143.536760][ T7535]  kmem_cache_alloc_lru_noprof+0x4f6/0x6a0
[  143.536773][ T7535]  ? alloc_inode+0x183/0x250
[  143.536792][ T7535]  alloc_inode+0x183/0x250
[  143.536808][ T7535]  iget_locked+0x1d9/0x6d0
[  143.536824][ T7535]  ? __pfx_iget_locked+0x10/0x10
[  143.536840][ T7535]  ? kernfs_root+0xee/0x2a0
[  143.536852][ T7535]  ? kernfs_root+0xee/0x2a0
[  143.536867][ T7535]  kernfs_get_inode+0x46/0x470
[  143.536880][ T7535]  kernfs_iop_lookup+0x1a7/0x2d0
[  143.536895][ T7535]  __lookup_slow+0x155/0x320
[  143.536912][ T7535]  lookup_slow+0x50/0x70
[  143.536928][ T7535]  path_lookupat+0x5e8/0xc40
[  143.536942][ T7535]  filename_lookup+0x202/0x590
[  143.536955][ T7535]  ? __pfx_filename_lookup+0x10/0x10
[  143.536997][ T7535]  ? strncpy_from_user+0x19d/0x2d0
[  143.537014][ T7535]  ? do_getname+0x191/0x390
[  143.537030][ T7535]  user_path_at+0x3c/0x60
[  143.537042][ T7535]  __ia32_sys_mount+0x1fb/0x310
[  143.537058][ T7535]  ? __pfx___ia32_sys_mount+0x10/0x10
[  143.537072][ T7535]  ? ksys_write+0x1ac/0x250
[  143.537083][ T7535]  ? __pfx_ksys_write+0x10/0x10
[  143.537097][ T7535]  __do_fast_syscall_32+0x13a/0x8b0
[  143.537113][ T7535]  ? lockdep_hardirqs_on+0x7d/0x110
[  143.537130][ T7535]  do_fast_syscall_32+0x32/0x70
[  143.537147][ T7535]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  143.537161][ T7535] RIP: 0023:0xf7ff4fec
[  143.537173][ T7535] Code: Unable to access opcode bytes at 0xf7ff4fc2.
[  143.537178][ T7535] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015
[  143.537189][ T7535] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000040
[  143.537195][ T7535] RDX: 00000000800001c0 RSI: 0000000000200000 RDI: 0000000000000000
[  143.537202][ T7535] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  143.537208][ T7535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  143.537214][ T7535] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  143.537228][ T7535]  </TASK>
[  143.658397][   T75] usb 8-1: new low-speed USB device number 12 using dummy_hcd
[  143.808337][   T75] usb 8-1: device descriptor read/64, error -71
[  143.930093][   T75] usb usb8-port1: attempt power cycle
[  144.288341][   T75] usb 8-1: new low-speed USB device number 13 using dummy_hcd
[  144.321359][   T75] usb 8-1: device descriptor read/8, error -71
[  144.582461][   T75] usb 8-1: new low-speed USB device number 14 using dummy_hcd
[  144.599159][   T75] usb 8-1: device descriptor read/8, error -71
[  144.711175][   T75] usb usb8-port1: unable to enumerate USB device
[  144.949785][ T7601] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint
[  144.972674][ T7601] pci 0000:00:03.0: BAR 0 [io  0xc0a0-0xc0bf]
[  144.974941][ T7601] pci 0000:00:03.0: BAR 1 [mem 0xfeaf5000-0xfeaf5fff]
[  144.975120][ T7601] pci 0000:00:03.0: BAR 4 [mem 0xfe200000-0xfe203fff 64bit pref]
[  144.986225][ T7601] pci 0000:00:03.0: Adding to iommu group 3
[  144.997182][ T7601] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned
[  144.997767][ T7608] syzkaller0: entered promiscuous mode
[  144.997779][ T7608] syzkaller0: entered allmulticast mode
[  144.999912][ T7601] pci 0000:00:03.0: BAR 1 [mem 0x81001000-0x81001fff]: assigned
[  145.001088][ T7601] pci 0000:00:03.0: BAR 0 [io  0x2000-0x201f]: assigned
[  145.276918][ T7613] null_blk: disk my_zoned_dev created
[  145.389520][ T6001] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  145.558585][ T6001] usb 9-1: Using ep0 maxpacket: 8
[  145.560119][ T6001] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  145.560930][ T6001] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  145.560970][ T6001] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.562261][ T6001] usb 9-1: config 0 descriptor??
[  145.638311][   T30] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  145.766685][ T6001] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  145.798834][   T30] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  145.799764][   T30] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  145.799789][   T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.803369][   T30] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected
[  145.803462][   T30] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81
[  145.803492][   T30] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1
[  145.806411][   T30] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84
[  145.806454][   T30] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2
[  145.811142][   T30] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  145.816076][   T30] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88
[  145.816114][   T30] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6
[  145.820295][   T30] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  146.038351][ T5736] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  146.127600][ T7632] __nla_validate_parse: 12 callbacks suppressed
[  146.127614][ T7632] netlink: 17780 bytes leftover after parsing attributes in process `syz.0.404'.
[  146.221799][   T30] usb 9-1: USB disconnect, device number 2
[  146.336634][ T7636] FAULT_INJECTION: forcing a failure.
[  146.336634][ T7636] name failslab, interval 1, probability 0, space 0, times 0
[  146.336667][ T7636] CPU: 1 UID: 0 PID: 7636 Comm: syz.2.406 Not tainted syzkaller #0 PREEMPT(full) 
[  146.336691][ T7636] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  146.336711][ T7636] Call Trace:
[  146.336718][ T7636]  <TASK>
[  146.336725][ T7636]  dump_stack_lvl+0x100/0x190
[  146.336758][ T7636]  should_fail_ex.cold+0x5/0xa
[  146.336785][ T7636]  should_failslab+0xc2/0x120
[  146.336810][ T7636]  kmem_cache_alloc_noprof+0x92/0x6a0
[  146.336833][ T7636]  ? __kernfs_new_node+0xd2/0xa10
[  146.336863][ T7636]  __kernfs_new_node+0xd2/0xa10
[  146.336904][ T7636]  ? kernfs_add_one+0x214/0xaa0
[  146.336932][ T7636]  ? __pfx___kernfs_new_node+0x10/0x10
[  146.336981][ T7636]  ? lock_acquire+0x1d1/0x380
[  146.337009][ T7636]  ? kernfs_root+0x23/0x2a0
[  146.337034][ T7636]  ? find_held_lock+0x2b/0x80
[  146.337054][ T7636]  ? kernfs_root+0xee/0x2a0
[  146.337075][ T7636]  ? kernfs_root+0xee/0x2a0
[  146.337103][ T7636]  kernfs_new_node+0x117/0x150
[  146.337132][ T7636]  kernfs_create_link+0xcc/0x240
[  146.337154][ T7636]  sysfs_do_create_link_sd+0x90/0x140
[  146.337173][ T7636]  sysfs_create_link+0x61/0xc0
[  146.337196][ T7636]  device_add+0x553/0x1970
[  146.337227][ T7636]  ? __pfx_device_add+0x10/0x10
[  146.337254][ T7636]  ? kfree_const+0x5a/0x70
[  146.337270][ T7636]  ? kfree+0x1e5/0x6d0
[  146.337302][ T7636]  device_create_groups_vargs+0x1f8/0x270
[  146.337336][ T7636]  device_create+0xed/0x130
[  146.337365][ T7636]  ? __pfx_device_create+0x10/0x10
[  146.337397][ T7636]  ? __pfx_vsnprintf+0x10/0x10
[  146.337425][ T7636]  ? __pfx___debug_object_init+0x10/0x10
[  146.337450][ T7636]  ? mark_held_locks+0x40/0x70
[  146.337481][ T7636]  bdi_register_va+0x114/0x820
[  146.337505][ T7636]  ? __pfx_bdi_register_va+0x10/0x10
[  146.337527][ T7636]  ? lockdep_init_map_type+0x5c/0x250
[  146.337548][ T7636]  ? bdi_init+0x3f4/0x5b0
[  146.337572][ T7636]  super_setup_bdi_name+0xff/0x250
[  146.337601][ T7636]  ? __pfx_super_setup_bdi_name+0x10/0x10
[  146.337630][ T7636]  ? __kasan_kmalloc+0xaa/0xb0
[  146.337652][ T7636]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  146.337680][ T7636]  ? afs_get_tree+0x380/0x1420
[  146.337712][ T7636]  afs_get_tree+0xbe7/0x1420
[  146.337740][ T7636]  vfs_get_tree+0x92/0x320
[  146.337770][ T7636]  path_mount+0x7d0/0x24c0
[  146.337801][ T7636]  ? __pfx_path_mount+0x10/0x10
[  146.337827][ T7636]  ? lockdep_hardirqs_on+0x7d/0x110
[  146.337856][ T7636]  ? putname+0xb1/0x110
[  146.337878][ T7636]  ? kmem_cache_free+0x127/0x6c0
[  146.337915][ T7636]  ? __ia32_sys_mount+0x292/0x310
[  146.337940][ T7636]  __ia32_sys_mount+0x292/0x310
[  146.337966][ T7636]  ? __pfx___ia32_sys_mount+0x10/0x10
[  146.337999][ T7636]  __do_fast_syscall_32+0x13a/0x8b0
[  146.338031][ T7636]  do_fast_syscall_32+0x32/0x70
[  146.338060][ T7636]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  146.338084][ T7636] RIP: 0023:0xf7f95fec
[  146.338106][ T7636] Code: Unable to access opcode bytes at 0xf7f95fc2.
[  146.338115][ T7636] RSP: 002b:00000000f543550c EFLAGS: 00000292 ORIG_RAX: 0000000000000015
[  146.338134][ T7636] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000180
[  146.338146][ T7636] RDX: 00000000800001c0 RSI: 0000000000000001 RDI: 0000000080000440
[  146.338159][ T7636] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  146.338171][ T7636] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  146.338183][ T7636] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  146.338208][ T7636]  </TASK>
[  146.910054][ T7631] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  146.959834][ T7642] Bluetooth: MGMT ver 1.23
[  147.225861][ T7656] FAULT_INJECTION: forcing a failure.
[  147.225861][ T7656] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  147.225891][ T7656] CPU: 3 UID: 0 PID: 7656 Comm: syz.4.413 Not tainted syzkaller #0 PREEMPT(full) 
[  147.225912][ T7656] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  147.225923][ T7656] Call Trace:
[  147.225929][ T7656]  <TASK>
[  147.225937][ T7656]  dump_stack_lvl+0x100/0x190
[  147.225965][ T7656]  should_fail_ex.cold+0x5/0xa
[  147.225987][ T7656]  _copy_from_iter+0x1f4/0x1690
[  147.226014][ T7656]  ? __pfx__copy_from_iter+0x10/0x10
[  147.226041][ T7656]  ? __pfx___might_resched+0x10/0x10
[  147.226063][ T7656]  ? kfree+0x1e5/0x6d0
[  147.226093][ T7656]  file_tty_write.isra.0+0x45b/0x890
[  147.226125][ T7656]  vfs_write+0x6af/0x1050
[  147.226145][ T7656]  ? __pfx_tty_write+0x10/0x10
[  147.226169][ T7656]  ? __pfx_vfs_write+0x10/0x10
[  147.226186][ T7656]  ? find_held_lock+0x2b/0x80
[  147.226228][ T7656]  ksys_write+0x12a/0x250
[  147.226246][ T7656]  ? __pfx_ksys_write+0x10/0x10
[  147.226264][ T7656]  ? ksys_write+0x1ac/0x250
[  147.226281][ T7656]  ? __pfx_ksys_write+0x10/0x10
[  147.226306][ T7656]  __do_fast_syscall_32+0x13a/0x8b0
[  147.226334][ T7656]  ? lockdep_hardirqs_on+0x7d/0x110
[  147.226362][ T7656]  do_fast_syscall_32+0x32/0x70
[  147.226390][ T7656]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  147.226412][ T7656] RIP: 0023:0xf7ff4fec
[  147.226430][ T7656] Code: Unable to access opcode bytes at 0xf7ff4fc2.
[  147.226439][ T7656] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  147.226456][ T7656] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000
[  147.226467][ T7656] RDX: 00000000fffffedf RSI: 0000000000000000 RDI: 0000000000000000
[  147.226493][ T7656] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  147.226504][ T7656] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  147.226514][ T7656] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  147.226539][ T7656]  </TASK>
[  147.251273][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.415'.
[  147.252371][ T7658] netlink: 165 bytes leftover after parsing attributes in process `syz.3.415'.
[  147.485868][ T7663] MINIX-fs: blocksize too small for device
[  147.528738][ T5252] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  147.688356][ T5252] usb 9-1: Using ep0 maxpacket: 32
[  147.689062][ T5252] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  147.690074][ T5252] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  147.690093][ T5252] usb 9-1: config 4 has 0 interfaces, different from the descriptor's value: 9
[  147.692120][ T5252] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.692145][ T5252] usb 9-1: Product: syz
[  147.692157][ T5252] usb 9-1: Manufacturer: syz
[  147.692169][ T5252] usb 9-1: SerialNumber: syz
[  147.837282][ T7173] IPVS: starting estimator thread 0...
[  147.911550][ T7660] netlink: 52 bytes leftover after parsing attributes in process `syz.4.416'.
[  147.918345][ T7670] IPVS: using max 43 ests per chain, 103200 per kthread
[  147.933329][ T5252] usb 9-1: USB disconnect, device number 3
[  147.968037][ T7672] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x50098
[  147.968055][ T7672] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  147.968064][ T7672] memcg:ffff88805009fd21
[  147.968069][ T7672] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff)
[  147.968080][ T7672] page_type: f5(slab)
[  147.968091][ T7672] raw: 04fff00000000040 ffff88801debf680 dead000000000100 dead000000000122
[  147.968101][ T7672] raw: 0000000000000000 00000002001a001a 00000000f5000000 ffff88805009fd21
[  147.968111][ T7672] head: 04fff00000000040 ffff88801debf680 dead000000000100 dead000000000122
[  147.968122][ T7672] head: 0000000000000000 00000002001a001a 00000000f5000000 ffff88805009fd21
[  147.968132][ T7672] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  147.968141][ T7672] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  147.968148][ T7672] page dumped because: unmovable page
[  147.968154][ T7672] page_owner tracks the page as allocated
[  147.968158][ T7672] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5730, tgid 5730 (syz-executor), ts 39523278734
[  147.968177][ T7672]  post_alloc_hook+0xfd/0x120
[  147.968197][ T7672]  get_page_from_freelist+0x110d/0x35d0
[  147.968207][ T7672]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  147.968396][ T7672]  new_slab+0xa9/0x6e0
[  147.968407][ T7672]  refill_objects+0xe3/0x410
[  147.968417][ T7672]  __pcs_replace_empty_main+0x35e/0x650
[  147.968434][ T7672]  kmem_cache_alloc_lru_noprof+0x4c0/0x6a0
[  147.968446][ T7672]  alloc_inode+0x68/0x250
[  147.968461][ T7672]  new_inode+0x22/0x1c0
[  147.968490][ T7672]  __debugfs_create_file+0xd8/0x4d0
[  147.968508][ T7672]  debugfs_create_file_unsafe+0x3c/0x50
[  147.968521][ T7672]  debugfs_create_u32+0x70/0xa0
[  147.968532][ T7672]  ieee80211_register_hw+0x3261/0x4580
[  147.968550][ T7672]  mac80211_hwsim_new_radio+0x2b08/0x6510
[  147.968566][ T7672]  hwsim_new_radio_nl+0xc6b/0x13f0
[  147.968580][ T7672]  genl_family_rcv_msg_doit+0x214/0x300
[  147.968595][ T7672] page last free pid 5739 tgid 5739 ts 39365351857 stack trace:
[  147.968603][ T7672]  __free_frozen_pages+0x79f/0x10f0
[  147.968618][ T7672]  qlist_free_all+0x47/0xf0
[  147.968628][ T7672]  kasan_quarantine_reduce+0x1a0/0x1f0
[  147.968640][ T7672]  __kasan_slab_alloc+0x69/0x90
[  147.968652][ T7672]  kmem_cache_alloc_noprof+0x269/0x6a0
[  147.968663][ T7672]  __kernfs_new_node+0xd2/0xa10
[  147.968677][ T7672]  kernfs_new_node+0x117/0x150
[  147.968691][ T7672]  __kernfs_create_file+0x53/0x350
[  147.968709][ T7672]  sysfs_add_file_mode_ns+0x207/0x3c0
[  147.968720][ T7672]  internal_create_group+0x593/0xfb0
[  147.968731][ T7672]  internal_create_groups+0x9d/0x150
[  147.968743][ T7672]  device_add+0x71a/0x1970
[  147.968758][ T7672]  rfkill_register+0x1ad/0xb30
[  147.968771][ T7672]  wiphy_register+0x2857/0x3110
[  147.968783][ T7672]  ieee80211_register_hw+0x3053/0x4580
[  147.968798][ T7672]  mac80211_hwsim_new_radio+0x2b08/0x6510
[  148.067168][ T7676] netlink: 666 bytes leftover after parsing attributes in process `syz.3.422'.
[  148.268919][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  148.348819][   T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  148.508448][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  148.510300][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  148.524058][   T44] audit: type=1326 audit(1789090635.810:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7697 comm="syz.4.428" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fec code=0x7ffc0000
[  148.524110][   T44] audit: type=1326 audit(1789090635.810:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7697 comm="syz.4.428" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fec code=0x7ffc0000
[  148.525782][   T44] audit: type=1326 audit(1789090635.810:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7697 comm="syz.4.428" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fec code=0x7ffc0000
[  148.525902][   T44] audit: type=1326 audit(1789090635.810:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7697 comm="syz.4.428" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fec code=0x7ffc0000
[  148.552097][   T44] audit: type=1326 audit(1789090635.840:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7697 comm="syz.4.428" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7ff4fec code=0x7ffc0000
[  148.552282][   T44] audit: type=1326 audit(1789090635.840:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7697 comm="syz.4.428" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fec code=0x7ffc0000
[  148.552356][   T44] audit: type=1326 audit(1789090635.840:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7697 comm="syz.4.428" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fec code=0x7ffc0000
[  148.552618][   T44] audit: type=1326 audit(1789090635.840:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7697 comm="syz.4.428" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fec code=0x7ffc0000
[  148.552693][   T44] audit: type=1326 audit(1789090635.840:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7697 comm="syz.4.428" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fec code=0x7ffc0000
[  148.552793][   T44] audit: type=1326 audit(1789090635.840:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7697 comm="syz.4.428" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7ff4fec code=0x7ffc0000
[  148.598367][ T5252] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  148.673964][ T7701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  148.674137][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  148.748853][ T5252] usb 7-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00
[  148.748877][ T5252] usb 7-1: too many configurations: 129, using maximum allowed: 8
[  148.749414][ T5252] usb 7-1: config 0 has no interfaces?
[  148.749899][ T5252] usb 7-1: config 0 has no interfaces?
[  148.750346][ T5252] usb 7-1: config 0 has no interfaces?
[  148.750779][ T5252] usb 7-1: config 0 has no interfaces?
[  148.751207][ T5252] usb 7-1: config 0 has no interfaces?
[  148.751630][ T5252] usb 7-1: config 0 has no interfaces?
[  148.752037][ T5252] usb 7-1: config 0 has no interfaces?
[  148.752466][ T5252] usb 7-1: config 0 has no interfaces?
[  148.754580][ T5252] usb 7-1: New USB device strings: Mfr=192, Product=110, SerialNumber=129
[  148.754592][ T5252] usb 7-1: Product: syz
[  148.754599][ T5252] usb 7-1: Manufacturer: syz
[  148.754606][ T5252] usb 7-1: SerialNumber: syz
[  148.758183][ T5252] usb 7-1: config 0 descriptor??
[  148.894960][ T5252] usb 5-1: USB disconnect, device number 6
[  148.916863][ T5252] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  148.923803][ T7703] FAULT_INJECTION: forcing a failure.
[  148.923803][ T7703] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  148.923860][ T7703] CPU: 3 UID: 0 PID: 7703 Comm: syz.4.430 Not tainted syzkaller #0 PREEMPT(full) 
[  148.923874][ T7703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  148.923880][ T7703] Call Trace:
[  148.923884][ T7703]  <TASK>
[  148.923889][ T7703]  dump_stack_lvl+0x100/0x190
[  148.923907][ T7703]  should_fail_ex.cold+0x5/0xa
[  148.923922][ T7703]  _copy_from_iter+0x1f4/0x1690
[  148.923937][ T7703]  ? __asan_memset+0x23/0x50
[  148.923949][ T7703]  ? __pfx__copy_from_iter+0x10/0x10
[  148.923962][ T7703]  ? __pfx___alloc_skb+0x10/0x10
[  148.923981][ T7703]  netlink_sendmsg+0x808/0xda0
[  148.923996][ T7703]  ? __pfx_netlink_sendmsg+0x10/0x10
[  148.924011][ T7703]  ? apparmor_socket_sendmsg+0x165/0x280
[  148.924031][ T7703]  ____sys_sendmsg+0xa4d/0xbe0
[  148.924045][ T7703]  ? __pfx_netlink_sendmsg+0x10/0x10
[  148.924067][ T7703]  ? __pfx_____sys_sendmsg+0x10/0x10
[  148.924097][ T7703]  ___sys_sendmsg+0x190/0x1e0
[  148.924115][ T7703]  ? __pfx____sys_sendmsg+0x10/0x10
[  148.924134][ T7703]  ? find_held_lock+0x2b/0x80
[  148.924154][ T7703]  __sys_sendmsg+0x160/0x210
[  148.924169][ T7703]  ? __pfx___sys_sendmsg+0x10/0x10
[  148.924191][ T7703]  __do_fast_syscall_32+0x13a/0x8b0
[  148.924208][ T7703]  ? lockdep_hardirqs_on+0x7d/0x110
[  148.924225][ T7703]  do_fast_syscall_32+0x32/0x70
[  148.924242][ T7703]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  148.924256][ T7703] RIP: 0023:0xf7ff4fec
[  148.924268][ T7703] Code: Unable to access opcode bytes at 0xf7ff4fc2.
[  148.924273][ T7703] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  148.924284][ T7703] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0
[  148.924290][ T7703] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  148.924297][ T7703] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  148.924302][ T7703] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  148.924309][ T7703] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  148.924322][ T7703]  </TASK>
[  148.932125][ T5252] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  148.932636][ T5252] keyspan 5-1:1.0: device disconnected
[  148.963986][ T7705] FAULT_INJECTION: forcing a failure.
[  148.963986][ T7705] name failslab, interval 1, probability 0, space 0, times 0
[  148.964016][ T7705] CPU: 2 UID: 0 PID: 7705 Comm: syz.0.431 Not tainted syzkaller #0 PREEMPT(full) 
[  148.964034][ T7705] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  148.964044][ T7705] Call Trace:
[  148.964052][ T7705]  <TASK>
[  148.964059][ T7705]  dump_stack_lvl+0x100/0x190
[  148.964086][ T7705]  should_fail_ex.cold+0x5/0xa
[  148.964108][ T7705]  should_failslab+0xc2/0x120
[  148.964133][ T7705]  __kmalloc_node_track_caller_noprof+0xfa/0x870
[  148.964156][ T7705]  ? __kasan_kmalloc+0xaa/0xb0
[  148.964176][ T7705]  ? apply_subsystem_event_filter+0x44d/0x17a0
[  148.964206][ T7705]  kstrdup+0x51/0xe0
[  148.964224][ T7705]  apply_subsystem_event_filter+0x44d/0x17a0
[  148.964255][ T7705]  ? __pfx_apply_subsystem_event_filter+0x10/0x10
[  148.964284][ T7705]  ? _copy_from_user+0x59/0xd0
[  148.964309][ T7705]  subsystem_filter_write+0x95/0x120
[  148.964335][ T7705]  vfs_write+0x2aa/0x1050
[  148.964354][ T7705]  ? __pfx_subsystem_filter_write+0x10/0x10
[  148.964377][ T7705]  ? lock_acquire+0x1d1/0x380
[  148.964400][ T7705]  ? __fget_files+0x34/0x3d0
[  148.964420][ T7705]  ? __pfx_vfs_write+0x10/0x10
[  148.964435][ T7705]  ? find_held_lock+0x2b/0x80
[  148.964454][ T7705]  ? __fget_files+0x215/0x3d0
[  148.964478][ T7705]  ? __fget_files+0x21f/0x3d0
[  148.964505][ T7705]  ksys_write+0x12a/0x250
[  148.964522][ T7705]  ? __pfx_ksys_write+0x10/0x10
[  148.964540][ T7705]  ? ksys_write+0x1ac/0x250
[  148.964557][ T7705]  ? __pfx_ksys_write+0x10/0x10
[  148.964585][ T7705]  __do_fast_syscall_32+0x13a/0x8b0
[  148.964614][ T7705]  ? lockdep_hardirqs_on+0x7d/0x110
[  148.964643][ T7705]  do_fast_syscall_32+0x32/0x70
[  148.964670][ T7705]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  148.964693][ T7705] RIP: 0023:0xf6feefec
[  148.964712][ T7705] Code: Unable to access opcode bytes at 0xf6feefc2.
[  148.964720][ T7705] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  148.964738][ T7705] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180
[  148.964748][ T7705] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000000
[  148.964760][ T7705] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  148.964769][ T7705] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  148.964778][ T7705] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  148.964802][ T7705]  </TASK>
[  149.090521][ T7710] netlink: 'syz.0.433': attribute type 1 has an invalid length.
[  149.106147][ T7710] 8021q: adding VLAN 0 to HW filter on device bond4
[  149.456214][ T7718] FAULT_INJECTION: forcing a failure.
[  149.456214][ T7718] name failslab, interval 1, probability 0, space 0, times 0
[  149.456234][ T7718] CPU: 2 UID: 0 PID: 7718 Comm: syz.0.434 Not tainted syzkaller #0 PREEMPT(full) 
[  149.456247][ T7718] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  149.456253][ T7718] Call Trace:
[  149.456257][ T7718]  <TASK>
[  149.456261][ T7718]  dump_stack_lvl+0x100/0x190
[  149.456279][ T7718]  should_fail_ex.cold+0x5/0xa
[  149.456301][ T7718]  should_failslab+0xc2/0x120
[  149.456323][ T7718]  __kmalloc_cache_node_noprof+0x94/0x720
[  149.456344][ T7718]  ? __get_vm_area_node+0x124/0x350
[  149.456369][ T7718]  __get_vm_area_node+0x124/0x350
[  149.456388][ T7718]  ? rcu_read_unlock+0x17/0x60
[  149.456416][ T7718]  __vmalloc_node_range_noprof+0x268/0x1420
[  149.456439][ T7718]  ? vhost_task_create+0x1db/0x370
[  149.456459][ T7718]  ? lock_acquire+0x1d1/0x380
[  149.456480][ T7718]  ? rcu_lock_acquire.constprop.0+0x7/0x30
[  149.456497][ T7718]  ? find_held_lock+0x2b/0x80
[  149.456514][ T7718]  ? rcu_read_unlock+0x17/0x60
[  149.456541][ T7718]  ? vhost_task_create+0x1db/0x370
[  149.456566][ T7718]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  149.456585][ T7718]  ? rcu_is_watching+0x13/0xc0
[  149.456596][ T7718]  ? trace_kmem_cache_alloc+0xdd/0x100
[  149.456616][ T7718]  ? vhost_task_create+0x1db/0x370
[  149.456629][ T7718]  __vmalloc_node_noprof+0xad/0xf0
[  149.456644][ T7718]  ? vhost_task_create+0x1db/0x370
[  149.456658][ T7718]  copy_process+0x803/0x8370
[  149.456683][ T7718]  ? __pfx_copy_process+0x10/0x10
[  149.456700][ T7718]  ? kasan_save_track+0x14/0x30
[  149.456712][ T7718]  ? __kasan_kmalloc+0xaa/0xb0
[  149.456725][ T7718]  ? lockdep_init_map_type+0x5c/0x250
[  149.456742][ T7718]  ? lockdep_init_map_type+0x5c/0x250
[  149.456758][ T7718]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  149.456774][ T7718]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  149.456788][ T7718]  vhost_task_create+0x1db/0x370
[  149.456801][ T7718]  ? __pfx_vhost_task_create+0x10/0x10
[  149.456819][ T7718]  ? __pfx_vhost_task_fn+0x10/0x10
[  149.456833][ T7718]  ? register_lock_class+0x3f/0x7b0
[  149.456847][ T7718]  ? rcu_is_watching+0x13/0xc0
[  149.456858][ T7718]  ? trace_contention_end+0x126/0x160
[  149.456876][ T7718]  kvm_mmu_post_init_vm+0x1b3/0x360
[  149.456889][ T7718]  kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0
[  149.456904][ T7718]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  149.456917][ T7718]  ? lock_acquire+0x1d1/0x380
[  149.456960][ T7718]  ? do_raw_write_lock+0x11e/0x260
[  149.456976][ T7718]  ? find_held_lock+0x2b/0x80
[  149.456993][ T7718]  ? kvm_vcpu_ioctl+0x1531/0x1700
[  149.457012][ T7718]  ? kvm_vcpu_ioctl+0x1531/0x1700
[  149.457037][ T7718]  kvm_vcpu_ioctl+0x730/0x1700
[  149.457059][ T7718]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  149.457080][ T7718]  ? tomoyo_path_number_perm+0x188/0x580
[  149.457105][ T7718]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  149.457129][ T7718]  ? get_pid_task+0x106/0x250
[  149.457152][ T7718]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  149.457176][ T7718]  ? do_vfs_ioctl+0x226/0x13e0
[  149.457203][ T7718]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  149.457232][ T7718]  ? __fget_files+0x34/0x3d0
[  149.457255][ T7718]  kvm_vcpu_compat_ioctl+0x20f/0x3c0
[  149.457275][ T7718]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  149.457296][ T7718]  ? __fget_files+0x21f/0x3d0
[  149.457318][ T7718]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  149.457338][ T7718]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  149.457367][ T7718]  __do_fast_syscall_32+0x13a/0x8b0
[  149.457390][ T7718]  ? lockdep_hardirqs_on+0x7d/0x110
[  149.457415][ T7718]  do_fast_syscall_32+0x32/0x70
[  149.457439][ T7718]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  149.457459][ T7718] RIP: 0023:0xf6feefec
[  149.457478][ T7718] Code: Unable to access opcode bytes at 0xf6feefc2.
[  149.457485][ T7718] RSP: 002b:00000000f53bc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  149.457501][ T7718] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80
[  149.457512][ T7718] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  149.457522][ T7718] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  149.457531][ T7718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  149.457541][ T7718] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  149.457564][ T7718]  </TASK>
[  149.457747][ T7718] syz.0.434: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  149.463042][ T7718] CPU: 2 UID: 0 PID: 7718 Comm: syz.0.434 Not tainted syzkaller #0 PREEMPT(full) 
[  149.463060][ T7718] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  149.463069][ T7718] Call Trace:
[  149.463075][ T7718]  <TASK>
[  149.463082][ T7718]  dump_stack_lvl+0x100/0x190
[  149.463106][ T7718]  warn_alloc.cold+0x9e/0xb2
[  149.463128][ T7718]  ? __pfx_warn_alloc+0x10/0x10
[  149.463143][ T7718]  ? __kasan_kmalloc+0x8a/0xb0
[  149.463173][ T7718]  ? __get_vm_area_node+0x22b/0x350
[  149.463194][ T7718]  __vmalloc_node_range_noprof+0xfa2/0x1420
[  149.463210][ T7718]  ? lock_acquire+0x1d1/0x380
[  149.463225][ T7718]  ? rcu_lock_acquire.constprop.0+0x7/0x30
[  149.463237][ T7718]  ? find_held_lock+0x2b/0x80
[  149.463248][ T7718]  ? rcu_read_unlock+0x17/0x60
[  149.463267][ T7718]  ? vhost_task_create+0x1db/0x370
[  149.463288][ T7718]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  149.463314][ T7718]  ? rcu_is_watching+0x13/0xc0
[  149.463330][ T7718]  ? trace_kmem_cache_alloc+0xdd/0x100
[  149.463354][ T7718]  ? vhost_task_create+0x1db/0x370
[  149.463374][ T7718]  __vmalloc_node_noprof+0xad/0xf0
[  149.463395][ T7718]  ? vhost_task_create+0x1db/0x370
[  149.463417][ T7718]  copy_process+0x803/0x8370
[  149.463456][ T7718]  ? __pfx_copy_process+0x10/0x10
[  149.463480][ T7718]  ? kasan_save_track+0x14/0x30
[  149.463498][ T7718]  ? __kasan_kmalloc+0xaa/0xb0
[  149.463518][ T7718]  ? lockdep_init_map_type+0x5c/0x250
[  149.463542][ T7718]  ? lockdep_init_map_type+0x5c/0x250
[  149.463566][ T7718]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  149.463584][ T7718]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  149.463597][ T7718]  vhost_task_create+0x1db/0x370
[  149.463615][ T7718]  ? __pfx_vhost_task_create+0x10/0x10
[  149.463633][ T7718]  ? __pfx_vhost_task_fn+0x10/0x10
[  149.463647][ T7718]  ? register_lock_class+0x3f/0x7b0
[  149.463661][ T7718]  ? rcu_is_watching+0x13/0xc0
[  149.463672][ T7718]  ? trace_contention_end+0x126/0x160
[  149.463705][ T7718]  kvm_mmu_post_init_vm+0x1b3/0x360
[  149.463718][ T7718]  kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0
[  149.463734][ T7718]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  149.463746][ T7718]  ? lock_acquire+0x1d1/0x380
[  149.463760][ T7718]  ? do_raw_write_lock+0x11e/0x260
[  149.463770][ T7718]  ? find_held_lock+0x2b/0x80
[  149.463781][ T7718]  ? kvm_vcpu_ioctl+0x1531/0x1700
[  149.463794][ T7718]  ? kvm_vcpu_ioctl+0x1531/0x1700
[  149.463811][ T7718]  kvm_vcpu_ioctl+0x730/0x1700
[  149.463826][ T7718]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  149.463839][ T7718]  ? tomoyo_path_number_perm+0x188/0x580
[  149.463857][ T7718]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  149.463873][ T7718]  ? get_pid_task+0x106/0x250
[  149.463888][ T7718]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  149.463903][ T7718]  ? do_vfs_ioctl+0x226/0x13e0
[  149.463921][ T7718]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  149.463940][ T7718]  ? __fget_files+0x34/0x3d0
[  149.463955][ T7718]  kvm_vcpu_compat_ioctl+0x20f/0x3c0
[  149.463969][ T7718]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  149.463983][ T7718]  ? __fget_files+0x21f/0x3d0
[  149.463997][ T7718]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  149.464011][ T7718]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  149.464032][ T7718]  __do_fast_syscall_32+0x13a/0x8b0
[  149.464052][ T7718]  ? lockdep_hardirqs_on+0x7d/0x110
[  149.464068][ T7718]  do_fast_syscall_32+0x32/0x70
[  149.464086][ T7718]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  149.464101][ T7718] RIP: 0023:0xf6feefec
[  149.464114][ T7718] Code: Unable to access opcode bytes at 0xf6feefc2.
[  149.464119][ T7718] RSP: 002b:00000000f53bc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  149.464129][ T7718] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80
[  149.464136][ T7718] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  149.464142][ T7718] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  149.464148][ T7718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  149.464154][ T7718] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  149.464168][ T7718]  </TASK>
[  149.514921][ T7263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  149.550416][ T7718] Mem-Info:
[  149.550426][ T7718] active_anon:20983 inactive_anon:9 isolated_anon:0
[  149.550426][ T7718]  active_file:6398 inactive_file:48920 isolated_file:0
[  149.550426][ T7718]  unevictable:1012 dirty:163 writeback:0
[  149.550426][ T7718]  slab_reclaimable:6365 slab_unreclaimable:54354
[  149.550426][ T7718]  mapped:35529 shmem:16263 pagetables:1155
[  149.550426][ T7718]  sec_pagetables:300 bounce:0
[  149.550426][ T7718]  kernel_misc_reclaimable:0
[  149.550426][ T7718]  free:32641 free_pcp:4836 free_cma:0
[  149.550453][ T7718] Node 0 active_anon:584kB inactive_anon:32kB active_file:1112kB inactive_file:1528kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1192kB dirty:0kB writeback:0kB shmem:20kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9056kB pagetables:1084kB sec_pagetables:1096kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  149.550480][ T7718] Node 1 active_anon:83348kB inactive_anon:4kB active_file:24480kB inactive_file:194152kB unevictable:4048kB isolated(anon):0kB isolated(file):0kB mapped:140924kB dirty:652kB writeback:0kB shmem:65032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5204kB pagetables:3536kB sec_pagetables:104kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  149.550507][ T7718] Node 0 DMA free:3320kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:56kB local_pcp:52kB free_cma:0kB
[  149.550536][ T7718] lowmem_reserve[]: 0 277 277 277 277
[  149.550554][ T7718] Node 0 DMA32 free:16960kB boost:2048kB min:14676kB low:17832kB high:20988kB reserved_highatomic:0kB free_highatomic:0kB active_anon:584kB inactive_anon:32kB active_file:1112kB inactive_file:1524kB unevictable:0kB writepending:0kB zspages:0kB present:1032196kB managed:284568kB mlocked:0kB bounce:0kB free_pcp:13068kB local_pcp:3496kB free_cma:0kB
[  149.550584][ T7718] lowmem_reserve[]: 0 0 0 0 0
[  149.550601][ T7718] Node 1 DMA32 free:110284kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0kB free_highatomic:0kB active_anon:83348kB inactive_anon:4kB active_file:24480kB inactive_file:194152kB unevictable:4048kB writepending:652kB zspages:1816kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:6220kB local_pcp:1404kB free_cma:0kB
[  149.550636][ T7718] lowmem_reserve[]: 0 0 0 0 0
[  149.550653][ T7718] Node 0 DMA: 198*4kB (U) 26*8kB (U) 11*16kB (U) 17*32kB (U) 17*64kB (U) 4*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3320kB
[  149.550739][ T7718] Node 0 DMA32: 10*4kB (UM) 23*8kB (UE) 8*16kB (UME) 61*32kB (UME) 35*64kB (UME) 19*128kB (UME) 15*256kB (UM) 8*512kB (UME) 2*1024kB (UM) 0*2048kB 0*4096kB = 16960kB
[  149.550813][ T7718] Node 1 DMA32: 475*4kB (UME) 701*8kB (UME) 210*16kB (UME) 273*32kB (UME) 155*64kB (UME) 75*128kB (UME) 22*256kB (UME) 38*512kB (UME) 19*1024kB (UME) 7*2048kB (UME) 3*4096kB (UM) = 110292kB
[  149.550894][ T7718] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  149.550902][ T7718] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  149.550910][ T7718] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  149.550918][ T7718] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  149.550926][ T7718] 71705 total pagecache pages
[  149.550930][ T7718] 128 pages in swap cache
[  149.550933][ T7718] Free swap  = 122552kB
[  149.550937][ T7718] Total swap = 124996kB
[  149.550941][ T7718] 524155 pages RAM
[  149.550944][ T7718] 0 pages HighMem/MovableOnly
[  149.550948][ T7718] 212121 pages reserved
[  149.550952][ T7718] 0 pages cma reserved
[  149.802981][ T5871] usb 7-1: USB disconnect, device number 6
[  149.829682][ T7723] FAULT_INJECTION: forcing a failure.
[  149.829682][ T7723] name failslab, interval 1, probability 0, space 0, times 0
[  149.829701][ T7723] CPU: 3 UID: 0 PID: 7723 Comm: syz.3.436 Not tainted syzkaller #0 PREEMPT(full) 
[  149.829713][ T7723] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  149.829720][ T7723] Call Trace:
[  149.829724][ T7723]  <TASK>
[  149.829728][ T7723]  dump_stack_lvl+0x100/0x190
[  149.829746][ T7723]  should_fail_ex.cold+0x5/0xa
[  149.829761][ T7723]  should_failslab+0xc2/0x120
[  149.829775][ T7723]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  149.829789][ T7723]  ? __alloc_skb+0x5b7/0x710
[  149.829802][ T7723]  ? __alloc_skb+0x140/0x710
[  149.829818][ T7723]  __alloc_skb+0x140/0x710
[  149.829830][ T7723]  ? __alloc_skb+0x5b7/0x710
[  149.829843][ T7723]  ? __pfx___alloc_skb+0x10/0x10
[  149.829856][ T7723]  ? kmem_cache_alloc_noprof+0x2d5/0x6a0
[  149.829868][ T7723]  ? lockdep_init_map_type+0x5c/0x250
[  149.829886][ T7723]  audit_log_start+0x350/0x930
[  149.829900][ T7723]  ? __pfx_audit_log_start+0x10/0x10
[  149.829911][ T7723]  ? _copy_from_user+0x59/0xd0
[  149.829925][ T7723]  ? __copy_siginfo_from_user32+0x207/0x910
[  149.829941][ T7723]  ? audit_log_end.part.0+0x1fa/0x280
[  149.829953][ T7723]  ? __pfx___copy_siginfo_from_user32+0x10/0x10
[  149.829972][ T7723]  audit_seccomp+0x60/0x190
[  149.829984][ T7723]  __seccomp_filter+0x88c/0x1130
[  149.829997][ T7723]  ? __pfx___seccomp_filter+0x10/0x10
[  149.830014][ T7723]  __seccomp_permit_syscall+0x207/0x2d0
[  149.830027][ T7723]  do_int80_emulation+0x408/0x650
[  149.830046][ T7723]  asm_int80_emulation+0x1a/0x20
[  149.830057][ T7723] RIP: 0023:0xf71475ab
[  149.830066][ T7723] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  149.830076][ T7723] RSP: 002b:00000000f54064bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  149.830087][ T7723] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54065d0
[  149.830094][ T7723] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  149.830100][ T7723] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  149.830106][ T7723] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  149.830112][ T7723] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  149.830125][ T7723]  </TASK>
[  150.027640][ T7735] bond1: entered promiscuous mode
[  150.028632][ T7735] bond1: entered allmulticast mode
[  150.029027][ T7735] 8021q: adding VLAN 0 to HW filter on device bond1
[  150.034325][ T7739] loop0: detected capacity change from 0 to 204800
[  150.048797][ T7739] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  150.092138][ T7739] md: loop1 has zero or unknown size, marking faulty!
[  150.259611][ T7753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.445'.
[  150.299396][ T7755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.446'.
[  150.431463][ T7767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.449'.
[  150.431477][ T7767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.449'.
[  150.447585][   T75] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  150.496616][ T7772] comedi: valid board names for 8255 driver are:
[  150.496671][ T7772]  8255
[  150.496677][ T7772] comedi: valid board names for vmk80xx driver are:
[  150.496683][ T7772]  vmk80xx
[  150.496715][ T7772] comedi: valid board names for usbduxsigma driver are:
[  150.496722][ T7772]  usbduxsigma
[  150.496726][ T7772] comedi: valid board names for usbduxfast driver are:
[  150.497321][ T7772]  usbduxfast
[  150.498275][ T7772] comedi: valid board names for usbdux driver are:
[  150.498283][ T7772]  usbdux
[  150.498288][ T7772] comedi: valid board names for ni6501 driver are:
[  150.498317][ T7772]  ni6501
[  150.498322][ T7772] comedi: valid board names for dt9812 driver are:
[  150.498328][ T7772]  dt9812
[  150.498355][ T7772] comedi: valid board names for ni_labpc_cs driver are:
[  150.498362][ T7772]  ni_labpc_cs
[  150.498867][ T7772] comedi: valid board names for ni_daq_700 driver are:
[  150.498875][ T7772]  ni_daq_700
[  150.498903][ T7772] comedi: valid board names for labpc_pci driver are:
[  150.498910][ T7772]  labpc_pci
[  150.498914][ T7772] comedi: valid board names for adl_pci9118 driver are:
[  150.498944][ T7772]  pci9118dg
[  150.498949][ T7772]  pci9118hg
[  150.498953][ T7772]  pci9118hr
[  150.498956][ T7772] comedi: valid board names for 8255_pci driver are:
[  150.498961][ T7772]  8255_pci
[  150.498989][ T7772] comedi: valid board names for s526 driver are:
[  150.498995][ T7772]  s526
[  150.498999][ T7772] comedi: valid board names for multiq3 driver are:
[  150.499004][ T7772]  multiq3
[  150.499008][ T7772] comedi: valid board names for pcmuio driver are:
[  150.499037][ T7772]  pcmuio48
[  150.499042][ T7772]  pcmuio96
[  150.499046][ T7772] comedi: valid board names for pcmmio driver are:
[  150.499077][ T7772]  pcmmio
[  150.499082][ T7772] comedi: valid board names for pcmda12 driver are:
[  150.499086][ T7772]  pcmda12
[  150.499090][ T7772] comedi: valid board names for pcmad driver are:
[  150.499094][ T7772]  pcmad12
[  150.499122][ T7772]  pcmad16
[  150.499127][ T7772] comedi: valid board names for ni_labpc driver are:
[  150.499132][ T7772]  lab-pc-1200
[  150.499136][ T7772]  lab-pc-1200ai
[  150.499166][ T7772]  lab-pc+
[  150.499171][ T7772] comedi: valid board names for atmio16 driver are:
[  150.499176][ T7772]  atmio16
[  150.499179][ T7772]  atmio16d
[  150.499672][ T7772] comedi: valid board names for ni_at_ao driver are:
[  150.499681][ T7772]  at-ao-6
[  150.499759][ T7772]  at-ao-10
[  150.499764][ T7772] comedi: valid board names for ni_at_a2150 driver are:
[  150.499770][ T7772]  ni_at_a2150
[  150.499800][ T7772] comedi: valid board names for adq12b driver are:
[  150.499806][ T7772]  adq12b
[  150.499834][ T7772] comedi: valid board names for mpc624 driver are:
[  150.499841][ T7772]  mpc624
[  150.499846][ T7772] comedi: valid board names for c6xdigio driver are:
[  150.499877][ T7772]  c6xdigio
[  150.499882][ T7772] comedi: valid board names for aio_iiro_16 driver are:
[  150.499888][ T7772]  aio_iiro_16
[  150.499915][ T7772] comedi: valid board names for aio_aio12_8 driver are:
[  150.499923][ T7772]  aio_aio12_8
[  150.499993][ T7772]  aio_ai12_8
[  150.499998][ T7772]  aio_ao12_4
[  150.500033][ T7772] comedi: valid board names for fl512 driver are:
[  150.500042][ T7772]  fl512
[  150.500047][ T7772] comedi: valid board names for dmm32at driver are:
[  150.500077][ T7772]  dmm32at
[  150.500083][ T7772] comedi: valid board names for dt282x driver are:
[  150.500089][ T7772]  dt2821
[  150.500093][ T7772]  dt2821-f
[  150.500122][ T7772]  dt2821-g
[  150.500127][ T7772]  dt2823
[  150.500132][ T7772]  dt2824-pgh
[  150.500136][ T7772]  dt2824-pgl
[  150.500164][ T7772]  dt2825
[  150.500168][ T7772]  dt2827
[  150.500172][ T7772]  dt2828
[  150.500208][ T7772]  dt2829
[  150.500213][ T7772]  dt21-ez
[  150.500217][ T7772]  dt23-ez
[  150.500220][ T7772]  dt24-ez
[  150.500224][ T7772]  dt24-ez-pgl
[  150.500227][ T7772] comedi: valid board names for dt2817 driver are:
[  150.500232][ T7772]  dt2817
[  150.500235][ T7772] comedi: valid board names for dt2815 driver are:
[  150.500240][ T7772]  dt2815
[  150.500244][ T7772] comedi: valid board names for dt2814 driver are:
[  150.500249][ T7772]  dt2814
[  150.500252][ T7772] comedi: valid board names for dt2811 driver are:
[  150.500257][ T7772]  dt2811-pgh
[  150.500261][ T7772]  dt2811-pgl
[  150.500288][ T7772] comedi: valid board names for dt2801 driver are:
[  150.500294][ T7772]  dt2801
[  150.500321][ T7772] comedi: valid board names for das6402 driver are:
[  150.500328][ T7772]  das6402-12
[  150.500331][ T7772]  das6402-16
[  150.500335][ T7772] comedi: valid board names for das1800 driver are:
[  150.500366][ T7772]  das-1701st
[  150.500371][ T7772]  das-1701st-da
[  150.500375][ T7772]  das-1702st
[  150.500379][ T7772]  das-1702st-da
[  150.500406][ T7772]  das-1702hr
[  150.500411][ T7772]  das-1702hr-da
[  150.500415][ T7772]  das-1701ao
[  150.500442][ T7772]  das-1702ao
[  150.500447][ T7772]  das-1801st
[  150.500450][ T7772]  das-1801st-da
[  150.500505][ T7772]  das-1802st
[  150.500511][ T7772]  das-1802st-da
[  150.500515][ T7772]  das-1802hr
[  150.500565][ T7772]  das-1802hr-da
[  150.500571][ T7772]  das-1801hc
[  150.500598][ T7772]  das-1802hc
[  150.500603][ T7772]  das-1801ao
[  150.500608][ T7772]  das-1802ao
[  150.500636][ T7772] comedi: valid board names for das800 driver are:
[  150.500642][ T7772]  das-800
[  150.500646][ T7772]  cio-das800
[  150.500649][ T7772]  das-801
[  150.500653][ T7772]  cio-das801
[  150.500680][ T7772]  das-802
[  150.500689][ T7772]  cio-das802
[  150.500693][ T7772]  cio-das802/16
[  150.500721][ T7772] comedi: valid board names for isa-das08 driver are:
[  150.500728][ T7772]  isa-das08
[  150.500732][ T7772]  das08-pgm
[  150.500761][ T7772]  das08-pgh
[  150.500766][ T7772]  das08-pgl
[  150.500770][ T7772]  das08-aoh
[  150.500775][ T7772]  das08-aol
[  150.500778][ T7772]  das08-aom
[  150.500783][ T7772]  das08/jr-ao
[  150.500787][ T7772]  das08jr-16-ao
[  150.500791][ T7772]  pc104-das08
[  150.500819][ T7772]  das08jr/16
[  150.500824][ T7772] comedi: valid board names for das16m1 driver are:
[  150.500829][ T7772]  das16m1
[  150.500833][ T7772] comedi: valid board names for dac02 driver are:
[  150.500861][ T7772]  dac02
[  150.500865][ T7772] comedi: valid board names for rti802 driver are:
[  150.500916][ T7772]  rti802
[  150.500922][ T7772] comedi: valid board names for rti800 driver are:
[  150.500927][ T7772]  rti800
[  150.500964][ T7772]  rti815
[  150.500969][ T7772] comedi: valid board names for pcm3724 driver are:
[  150.500975][ T7772]  pcm3724
[  150.500979][ T7772] comedi: valid board names for pcl818 driver are:
[  150.501063][ T7772]  pcl818l
[  150.501068][ T7772]  pcl818h
[  150.501071][ T7772]  pcl818hd
[  150.501075][ T7772]  pcl818hg
[  150.501128][ T7772]  pcl818
[  150.501134][ T7772]  pcl718
[  150.501137][ T7772]  pcm3718
[  150.501141][ T7772] comedi: valid board names for pcl816 driver are:
[  150.501272][ T7772]  pcl816
[  150.501277][ T7772]  pcl814b
[  150.501281][ T7772] comedi: valid board names for pcl812 driver are:
[  150.501312][ T7772]  pcl812
[  150.501318][ T7772]  pcl812pg
[  150.501321][ T7772]  acl8112pg
[  150.501326][ T7772]  acl8112dg
[  150.501353][ T7772]  acl8112hg
[  150.501358][ T7772]  a821pgl
[  150.501363][ T7772]  a821pglnda
[  150.501367][ T7772]  a821pgh
[  150.501370][ T7772]  a822pgl
[  150.501398][ T7772]  a822pgh
[  150.501403][ T7772]  a823pgl
[  150.501406][ T7772]  a823pgh
[  150.501409][ T7772]  pcl813
[  150.501413][ T7772]  pcl813b
[  150.501440][ T7772]  acl8113
[  150.501444][ T7772]  iso813
[  150.501448][ T7772]  acl8216
[  150.501475][ T7772]  a826pg
[  150.501480][ T7772] comedi: valid board names for pcl730 driver are:
[  150.501508][ T7772]  pcl730
[  150.501513][ T7772]  iso730
[  150.501516][ T7772]  acl7130
[  150.501520][ T7772]  pcm3730
[  150.501523][ T7772]  pcl725
[  150.501551][ T7772]  p8r8dio
[  150.501556][ T7772]  acl7225b
[  150.501560][ T7772]  p16r16dio
[  150.501563][ T7772]  pcl733
[  150.501567][ T7772]  pcl734
[  150.501594][ T7772]  opmm-1616-xt
[  150.501599][ T7772]  pearl-mm-p
[  150.501602][ T7772]  ir104-pbf
[  150.501629][ T7772] comedi: valid board names for pcl726 driver are:
[  150.501636][ T7772]  pcl726
[  150.501661][ T7772]  pcl727
[  150.501667][ T7772]  pcl728
[  150.501670][ T7772]  acl6126
[  150.501673][ T7772]  acl6128
[  150.501677][ T7772] comedi: valid board names for pcl724 driver are:
[  150.501709][ T7772]  pcl724
[  150.501713][ T7772]  pcl722
[  150.501717][ T7772]  pcl731
[  150.501721][ T7772]  acl7122
[  150.501780][ T7772]  acl7124
[  150.501785][ T7772]  pet48dio
[  150.501813][ T7772]  pcmio48
[  150.501818][ T7772]  onyx-mm-dio
[  150.501822][ T7772] comedi: valid board names for pcl711 driver are:
[  150.501828][ T7772]  pcl711
[  150.501856][ T7772]  pcl711b
[  150.501862][ T7772]  acl8112hg
[  150.501866][ T7772]  acl8112dg
[  150.501870][ T7772] comedi: valid board names for amplc_pc263 driver are:
[  150.501899][ T7772]  pc263
[  150.501905][ T7772] comedi: valid board names for amplc_pc236 driver are:
[  150.501934][ T7772]  pc36at
[  150.501939][ T7772] comedi: valid board names for amplc_dio200 driver are:
[  150.501968][ T7772]  pc212e
[  150.501973][ T7772]  pc214e
[  150.501977][ T7772]  pc215e
[  150.501980][ T7772]  pc218e
[  150.501984][ T7772]  pc272e
[  150.502016][ T7772] comedi: valid board names for comedi_parport driver are:
[  150.502022][ T7772]  comedi_parport
[  150.502026][ T7772] comedi: valid board names for comedi_test driver are:
[  150.502031][ T7772]  comedi_test
[  150.502058][ T7772] comedi: valid board names for comedi_bond driver are:
[  150.502064][ T7772]  comedi_bond
[  150.896304][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  151.249356][ T7775] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  151.354754][ T7775] md/raid10:md0: not clean -- starting background reconstruction
[  151.354765][ T7775] md/raid10:md0: active with 1 out of 2 devices
[  151.355287][ T7775] md0: detected capacity change from 0 to 2048
[  151.381687][ T7781] md: resync of RAID array md0
[  151.394097][ T7781] md: md0: resync done.
[  151.443498][ T7778] md: could not open device unknown-block(0,0).
[  151.443530][ T7778] md: error, md_import_device() returned -6
[  151.551371][ T5252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  151.920438][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  151.922124][ T7793] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:00fc with DS=0x1
[  151.998848][ T7788] FAULT_INJECTION: forcing a failure.
[  151.998848][ T7788] name failslab, interval 1, probability 0, space 0, times 0
[  151.998876][ T7788] CPU: 0 UID: 0 PID: 7788 Comm: syz.0.452 Not tainted syzkaller #0 PREEMPT(full) 
[  151.998897][ T7788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  151.998908][ T7788] Call Trace:
[  151.998914][ T7788]  <TASK>
[  151.998922][ T7788]  dump_stack_lvl+0x100/0x190
[  151.998948][ T7788]  should_fail_ex.cold+0x5/0xa
[  151.998971][ T7788]  should_failslab+0xc2/0x120
[  151.998992][ T7788]  __kmalloc_noprof+0xfc/0x840
[  151.999019][ T7788]  ? tomoyo_encode2+0xfb/0x3c0
[  151.999041][ T7788]  tomoyo_encode2+0xfb/0x3c0
[  151.999079][ T7788]  tomoyo_encode+0x29/0x50
[  151.999096][ T7788]  tomoyo_realpath_from_path+0x18c/0x690
[  151.999118][ T7788]  tomoyo_path_number_perm+0x23c/0x580
[  151.999142][ T7788]  ? tomoyo_path_number_perm+0x22e/0x580
[  151.999168][ T7788]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  151.999194][ T7788]  ? get_pid_task+0x106/0x250
[  151.999218][ T7788]  ? __lock_acquire+0x5c0/0x1f40
[  151.999251][ T7788]  ? __fget_files+0x34/0x3d0
[  151.999270][ T7788]  ? find_held_lock+0x2b/0x80
[  151.999288][ T7788]  ? __fget_files+0x215/0x3d0
[  151.999305][ T7788]  ? hook_file_ioctl_common+0x140/0x440
[  151.999329][ T7788]  ? __fget_files+0x215/0x3d0
[  151.999352][ T7788]  ? __fget_files+0x21f/0x3d0
[  151.999373][ T7788]  security_file_ioctl_compat+0xd3/0x230
[  151.999400][ T7788]  __ia32_compat_sys_ioctl+0xc2/0x360
[  151.999429][ T7788]  __do_fast_syscall_32+0x13a/0x8b0
[  151.999455][ T7788]  ? lockdep_hardirqs_on+0x7d/0x110
[  151.999480][ T7788]  do_fast_syscall_32+0x32/0x70
[  151.999505][ T7788]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  151.999526][ T7788] RIP: 0023:0xf6feefec
[  151.999545][ T7788] Code: Unable to access opcode bytes at 0xf6feefc2.
[  151.999553][ T7788] RSP: 002b:00000000f539b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  151.999571][ T7788] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000040946400
[  151.999583][ T7788] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000
[  151.999594][ T7788] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  151.999602][ T7788] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  151.999611][ T7788] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  151.999635][ T7788]  </TASK>
[  151.999759][ T7788] ERROR: Out of memory at tomoyo_realpath_from_path.
[  151.999794][ T7788] comedi: valid board names for 8255 driver are:
[  151.999801][ T7788]  8255
[  151.999807][ T7788] comedi: valid board names for vmk80xx driver are:
[  151.999814][ T7788]  vmk80xx
[  151.999820][ T7788] comedi: valid board names for usbduxsigma driver are:
[  151.999827][ T7788]  usbduxsigma
[  151.999833][ T7788] comedi: valid board names for usbduxfast driver are:
[  151.999839][ T7788]  usbduxfast
[  151.999844][ T7788] comedi: valid board names for usbdux driver are:
[  151.999850][ T7788]  usbdux
[  151.999855][ T7788] comedi: valid board names for ni6501 driver are:
[  151.999862][ T7788]  ni6501
[  151.999867][ T7788] comedi: valid board names for dt9812 driver are:
[  151.999874][ T7788]  dt9812
[  151.999879][ T7788] comedi: valid board names for ni_labpc_cs driver are:
[  151.999886][ T7788]  ni_labpc_cs
[  151.999892][ T7788] comedi: valid board names for ni_daq_700 driver are:
[  151.999899][ T7788]  ni_daq_700
[  151.999905][ T7788] comedi: valid board names for labpc_pci driver are:
[  151.999911][ T7788]  labpc_pci
[  151.999917][ T7788] comedi: valid board names for adl_pci9118 driver are:
[  151.999924][ T7788]  pci9118dg
[  151.999929][ T7788]  pci9118hg
[  151.999935][ T7788]  pci9118hr
[  151.999940][ T7788] comedi: valid board names for 8255_pci driver are:
[  151.999947][ T7788]  8255_pci
[  151.999952][ T7788] comedi: valid board names for s526 driver are:
[  151.999959][ T7788]  s526
[  151.999963][ T7788] comedi: valid board names for multiq3 driver are:
[  151.999969][ T7788]  multiq3
[  151.999974][ T7788] comedi: valid board names for pcmuio driver are:
[  151.999981][ T7788]  pcmuio48
[  151.999986][ T7788]  pcmuio96
[  151.999992][ T7788] comedi: valid board names for pcmmio driver are:
[  151.999998][ T7788]  pcmmio
[  152.000009][ T7788] comedi: valid board names for pcmda12 driver are:
[  152.000016][ T7788]  pcmda12
[  152.000021][ T7788] comedi: valid board names for pcmad driver are:
[  152.000028][ T7788]  pcmad12
[  152.000034][ T7788]  pcmad16
[  152.000039][ T7788] comedi: valid board names for ni_labpc driver are:
[  152.000046][ T7788]  lab-pc-1200
[  152.000051][ T7788]  lab-pc-1200ai
[  152.000057][ T7788]  lab-pc+
[  152.000062][ T7788] comedi: valid board names for atmio16 driver are:
[  152.000069][ T7788]  atmio16
[  152.000074][ T7788]  atmio16d
[  152.000080][ T7788] comedi: valid board names for ni_at_ao driver are:
[  152.000086][ T7788]  at-ao-6
[  152.000090][ T7788]  at-ao-10
[  152.000095][ T7788] comedi: valid board names for ni_at_a2150 driver are:
[  152.000102][ T7788]  ni_at_a2150
[  152.000107][ T7788] comedi: valid board names for adq12b driver are:
[  152.000114][ T7788]  adq12b
[  152.000120][ T7788] comedi: valid board names for mpc624 driver are:
[  152.000126][ T7788]  mpc624
[  152.000132][ T7788] comedi: valid board names for c6xdigio driver are:
[  152.000138][ T7788]  c6xdigio
[  152.000144][ T7788] comedi: valid board names for aio_iiro_16 driver are:
[  152.000151][ T7788]  aio_iiro_16
[  152.000157][ T7788] comedi: valid board names for aio_aio12_8 driver are:
[  152.000164][ T7788]  aio_aio12_8
[  152.000169][ T7788]  aio_ai12_8
[  152.000175][ T7788]  aio_ao12_4
[  152.000180][ T7788] comedi: valid board names for fl512 driver are:
[  152.000187][ T7788]  fl512
[  152.000192][ T7788] comedi: valid board names for dmm32at driver are:
[  152.000199][ T7788]  dmm32at
[  152.000205][ T7788] comedi: valid board names for dt282x driver are:
[  152.000211][ T7788]  dt2821
[  152.000215][ T7788]  dt2821-f
[  152.000220][ T7788]  dt2821-g
[  152.000225][ T7788]  dt2823
[  152.000230][ T7788]  dt2824-pgh
[  152.000235][ T7788]  dt2824-pgl
[  152.000241][ T7788]  dt2825
[  152.000246][ T7788]  dt2827
[  152.000251][ T7788]  dt2828
[  152.000256][ T7788]  dt2829
[  152.000261][ T7788]  dt21-ez
[  152.000266][ T7788]  dt23-ez
[  152.000272][ T7788]  dt24-ez
[  152.000277][ T7788]  dt24-ez-pgl
[  152.000283][ T7788] comedi: valid board names for dt2817 driver are:
[  152.000289][ T7788]  dt2817
[  152.000295][ T7788] comedi: valid board names for dt2815 driver are:
[  152.000301][ T7788]  dt2815
[  152.000307][ T7788] comedi: valid board names for dt2814 driver are:
[  152.000313][ T7788]  dt2814
[  152.000319][ T7788] comedi: valid board names for dt2811 driver are:
[  152.000325][ T7788]  dt2811-pgh
[  152.000330][ T7788]  dt2811-pgl
[  152.000335][ T7788] comedi: valid board names for dt2801 driver are:
[  152.000340][ T7788]  dt2801
[  152.000346][ T7788] comedi: valid board names for das6402 driver are:
[  152.000352][ T7788]  das6402-12
[  152.000358][ T7788]  das6402-16
[  152.000363][ T7788] comedi: valid board names for das1800 driver are:
[  152.000370][ T7788]  das-1701st
[  152.000375][ T7788]  das-1701st-da
[  152.000381][ T7788]  das-1702st
[  152.000386][ T7788]  das-1702st-da
[  152.000392][ T7788]  das-1702hr
[  152.000398][ T7788]  das-1702hr-da
[  152.000403][ T7788]  das-1701ao
[  152.000409][ T7788]  das-1702ao
[  152.000414][ T7788]  das-1801st
[  152.000420][ T7788]  das-1801st-da
[  152.000425][ T7788]  das-1802st
[  152.000431][ T7788]  das-1802st-da
[  152.000436][ T7788]  das-1802hr
[  152.000442][ T7788]  das-1802hr-da
[  152.000447][ T7788]  das-1801hc
[  152.000453][ T7788]  das-1802hc
[  152.000457][ T7788]  das-1801ao
[  152.000462][ T7788]  das-1802ao
[  152.000468][ T7788] comedi: valid board names for das800 driver are:
[  152.000474][ T7788]  das-800
[  152.000480][ T7788]  cio-das800
[  152.000485][ T7788]  das-801
[  152.000491][ T7788]  cio-das801
[  152.000496][ T7788]  das-802
[  152.000502][ T7788]  cio-das802
[  152.000506][ T7788]  cio-das802/16
[  152.000512][ T7788] comedi: valid board names for isa-das08 driver are:
[  152.000519][ T7788]  isa-das08
[  152.000525][ T7788]  das08-pgm
[  152.000530][ T7788]  das08-pgh
[  152.000535][ T7788]  das08-pgl
[  152.000541][ T7788]  das08-aoh
[  152.000547][ T7788]  das08-aol
[  152.000552][ T7788]  das08-aom
[  152.000557][ T7788]  das08/jr-ao
[  152.000563][ T7788]  das08jr-16-ao
[  152.000569][ T7788]  pc104-das08
[  152.000574][ T7788]  das08jr/16
[  152.000579][ T7788] comedi: valid board names for das16m1 driver are:
[  152.000585][ T7788]  das16m1
[  152.000590][ T7788] comedi: valid board names for dac02 driver are:
[  152.000596][ T7788]  dac02
[  152.000602][ T7788] comedi: valid board names for rti802 driver are:
[  152.000608][ T7788]  rti802
[  152.000614][ T7788] comedi: valid board names for rti800 driver are:
[  152.000621][ T7788]  rti800
[  152.000626][ T7788]  rti815
[  152.000631][ T7788] comedi: valid board names for pcm3724 driver are:
[  152.000638][ T7788]  pcm3724
[  152.000644][ T7788] comedi: valid board names for pcl818 driver are:
[  152.000650][ T7788]  pcl818l
[  152.000656][ T7788]  pcl818h
[  152.000661][ T7788]  pcl818hd
[  152.000666][ T7788]  pcl818hg
[  152.000672][ T7788]  pcl818
[  152.000677][ T7788]  pcl718
[  152.000682][ T7788]  pcm3718
[  152.000687][ T7788] comedi: valid board names for pcl816 driver are:
[  152.000694][ T7788]  pcl816
[  152.000699][ T7788]  pcl814b
[  152.000705][ T7788] comedi: valid board names for pcl812 driver are:
[  152.000710][ T7788]  pcl812
[  152.000714][ T7788]  pcl812pg
[  152.000719][ T7788]  acl8112pg
[  152.000725][ T7788]  acl8112dg
[  152.000730][ T7788]  acl8112hg
[  152.000735][ T7788]  a821pgl
[  152.000741][ T7788]  a821pglnda
[  152.000746][ T7788]  a821pgh
[  152.000751][ T7788]  a822pgl
[  152.000757][ T7788]  a822pgh
[  152.000762][ T7788]  a823pgl
[  152.000767][ T7788]  a823pgh
[  152.000869][ T7788]  pcl813
[  152.000876][ T7788]  pcl813b
[  152.000881][ T7788]  acl8113
[  152.000887][ T7788]  iso813
[  152.000892][ T7788]  acl8216
[  152.000898][ T7788]  a826pg
[  152.000904][ T7788] comedi: valid board names for pcl730 driver are:
[  152.000911][ T7788]  pcl730
[  152.000916][ T7788]  iso730
[  152.000942][ T7788]  acl7130
[  152.000950][ T7788]  pcm3730
[  152.000955][ T7788]  pcl725
[  152.000961][ T7788]  p8r8dio
[  152.000966][ T7788]  acl7225b
[  152.000971][ T7788]  p16r16dio
[  152.000976][ T7788]  pcl733
[  152.000980][ T7788]  pcl734
[  152.000984][ T7788]  opmm-1616-xt
[  152.000990][ T7788]  pearl-mm-p
[  152.000995][ T7788]  ir104-pbf
[  152.001001][ T7788] comedi: valid board names for pcl726 driver are:
[  152.001012][ T7788]  pcl726
[  152.001018][ T7788]  pcl727
[  152.001023][ T7788]  pcl728
[  152.001028][ T7788]  acl6126
[  152.001033][ T7788]  acl6128
[  152.001039][ T7788] comedi: valid board names for pcl724 driver are:
[  152.001045][ T7788]  pcl724
[  152.001051][ T7788]  pcl722
[  152.001056][ T7788]  pcl731
[  152.001061][ T7788]  acl7122
[  152.001066][ T7788]  acl7124
[  152.001071][ T7788]  pet48dio
[  152.001077][ T7788]  pcmio48
[  152.001082][ T7788]  onyx-mm-dio
[  152.001087][ T7788] comedi: valid board names for pcl711 driver are:
[  152.001094][ T7788]  pcl711
[  152.001098][ T7788]  pcl711b
[  152.001103][ T7788]  acl8112hg
[  152.001107][ T7788]  acl8112dg
[  152.001112][ T7788] comedi: valid board names for amplc_pc263 driver are:
[  152.001118][ T7788]  pc263
[  152.001123][ T7788] comedi: valid board names for amplc_pc236 driver are:
[  152.001130][ T7788]  pc36at
[  152.001136][ T7788] comedi: valid board names for amplc_dio200 driver are:
[  152.001143][ T7788]  pc212e
[  152.001148][ T7788]  pc214e
[  152.001153][ T7788]  pc215e
[  152.001158][ T7788]  pc218e
[  152.001163][ T7788]  pc272e
[  152.001169][ T7788] comedi: valid board names for comedi_parport driver are:
[  152.001176][ T7788]  comedi_parport
[  152.001181][ T7788] comedi: valid board names for comedi_test driver are:
[  152.001189][ T7788]  comedi_test
[  152.001195][ T7788] comedi: valid board names for comedi_bond driver are:
[  152.001201][ T7788]  comedi_bond
[  152.287769][ T7800] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  152.393784][ T7805] FAULT_INJECTION: forcing a failure.
[  152.393784][ T7805] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  152.393802][ T7805] CPU: 2 UID: 0 PID: 7805 Comm: syz.2.458 Not tainted syzkaller #0 PREEMPT(full) 
[  152.393815][ T7805] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  152.393821][ T7805] Call Trace:
[  152.393825][ T7805]  <TASK>
[  152.393830][ T7805]  dump_stack_lvl+0x100/0x190
[  152.393848][ T7805]  should_fail_ex.cold+0x5/0xa
[  152.393863][ T7805]  _copy_to_user+0x32/0xd0
[  152.393878][ T7805]  simple_read_from_buffer+0xcb/0x170
[  152.393904][ T7805]  proc_fail_nth_read+0x1af/0x230
[  152.393918][ T7805]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  152.393931][ T7805]  ? rw_verify_area+0xce/0x6d0
[  152.393947][ T7805]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  152.393958][ T7805]  vfs_read+0x1e4/0xb40
[  152.393969][ T7805]  ? lock_acquire+0x1d1/0x380
[  152.393984][ T7805]  ? __fget_files+0x34/0x3d0
[  152.393996][ T7805]  ? __pfx_vfs_read+0x10/0x10
[  152.394005][ T7805]  ? find_held_lock+0x2b/0x80
[  152.394017][ T7805]  ? __fget_files+0x215/0x3d0
[  152.394031][ T7805]  ? __fget_files+0x21f/0x3d0
[  152.394046][ T7805]  ksys_read+0x12a/0x250
[  152.394057][ T7805]  ? __pfx_ksys_read+0x10/0x10
[  152.394071][ T7805]  do_int80_emulation+0x166/0x650
[  152.394090][ T7805]  asm_int80_emulation+0x1a/0x20
[  152.394101][ T7805] RIP: 0023:0xf71975ab
[  152.394110][ T7805] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  152.394121][ T7805] RSP: 002b:00000000f54144bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  152.394132][ T7805] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54145d0
[  152.394139][ T7805] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  152.394145][ T7805] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  152.394151][ T7805] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  152.394157][ T7805] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  152.394171][ T7805]  </TASK>
[  152.558292][ T2329] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  152.778956][ T2329] usb 8-1: Using ep0 maxpacket: 8
[  152.799207][ T2329] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  152.853322][ T2329] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  152.853349][ T2329] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.315999][ T2329] usb 8-1: config 0 descriptor??
[  153.521385][ T2329] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  153.770276][ T2329] usb 8-1: USB disconnect, device number 15
[  154.038613][ T6001] net_ratelimit: 2 callbacks suppressed
[  154.038629][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.099752][ T7822] FAULT_INJECTION: forcing a failure.
[  154.099752][ T7822] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  154.099784][ T7822] CPU: 1 UID: 0 PID: 7822 Comm: syz.2.465 Not tainted syzkaller #0 PREEMPT(full) 
[  154.099804][ T7822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  154.099815][ T7822] Call Trace:
[  154.099822][ T7822]  <TASK>
[  154.099829][ T7822]  dump_stack_lvl+0x100/0x190
[  154.099856][ T7822]  should_fail_ex.cold+0x5/0xa
[  154.099876][ T7822]  _copy_to_user+0x32/0xd0
[  154.099894][ T7822]  bpf_test_finish.isra.0+0x4db/0x650
[  154.099913][ T7822]  ? __pfx_bpf_test_finish.isra.0+0x10/0x10
[  154.099941][ T7822]  ? eth_type_trans+0x2e3/0x720
[  154.099963][ T7822]  bpf_prog_test_run_skb+0x2481/0x3530
[  154.099988][ T7822]  ? lock_acquire+0x1d1/0x380
[  154.100025][ T7822]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  154.100049][ T7822]  ? fput+0x7c/0x100
[  154.100068][ T7822]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  154.100083][ T7822]  __sys_bpf+0x2265/0x4a30
[  154.100103][ T7822]  ? __pfx___sys_bpf+0x10/0x10
[  154.100115][ T7822]  ? lock_acquire+0x1d1/0x380
[  154.100133][ T7822]  ? get_pid_task+0x2a/0x250
[  154.100147][ T7822]  ? find_held_lock+0x2b/0x80
[  154.100164][ T7822]  ? get_pid_task+0xfc/0x250
[  154.100181][ T7822]  ? get_pid_task+0xfc/0x250
[  154.100205][ T7822]  ? proc_fail_nth_write+0x9f/0x220
[  154.100224][ T7822]  ? find_held_lock+0x2b/0x80
[  154.100248][ T7822]  ? rcu_read_lock_any_held+0x6a/0x90
[  154.100264][ T7822]  ? find_held_lock+0x2b/0x80
[  154.100278][ T7822]  ? ksys_write+0x190/0x250
[  154.100291][ T7822]  ? ksys_write+0x190/0x250
[  154.100305][ T7822]  ? lock_acquire+0x1d1/0x380
[  154.100335][ T7822]  ? fput+0x7c/0x100
[  154.100359][ T7822]  ? __ia32_sys_bpf+0xcc/0x170
[  154.100377][ T7822]  __ia32_sys_bpf+0xcc/0x170
[  154.100397][ T7822]  ? __do_fast_syscall_32+0xb3/0x8b0
[  154.100426][ T7822]  __do_fast_syscall_32+0x13a/0x8b0
[  154.100452][ T7822]  ? lockdep_hardirqs_on+0x7d/0x110
[  154.100483][ T7822]  do_fast_syscall_32+0x32/0x70
[  154.100508][ T7822]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  154.100525][ T7822] RIP: 0023:0xf7f95fec
[  154.100540][ T7822] Code: Unable to access opcode bytes at 0xf7f95fc2.
[  154.100547][ T7822] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  154.100561][ T7822] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000780
[  154.100569][ T7822] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000
[  154.100577][ T7822] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  154.100585][ T7822] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  154.100592][ T7822] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  154.100610][ T7822]  </TASK>
[  154.226175][ T7830] FAULT_INJECTION: forcing a failure.
[  154.226175][ T7830] name failslab, interval 1, probability 0, space 0, times 0
[  154.226203][ T7830] CPU: 1 UID: 0 PID: 7830 Comm: syz.0.469 Not tainted syzkaller #0 PREEMPT(full) 
[  154.226225][ T7830] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  154.226236][ T7830] Call Trace:
[  154.226243][ T7830]  <TASK>
[  154.226251][ T7830]  dump_stack_lvl+0x100/0x190
[  154.226275][ T7830]  should_fail_ex.cold+0x5/0xa
[  154.226295][ T7830]  should_failslab+0xc2/0x120
[  154.226322][ T7830]  __kmalloc_node_track_caller_noprof+0xfa/0x870
[  154.226346][ T7830]  ? krealloc_node_align_noprof+0x27e/0x3e0
[  154.226367][ T7830]  ? rcu_is_watching+0x13/0xc0
[  154.226386][ T7830]  ? snd_pcm_hw_rule_add+0x3b3/0x510
[  154.226412][ T7830]  krealloc_node_align_noprof+0x1f9/0x3e0
[  154.226433][ T7830]  snd_pcm_hw_rule_add+0x3b3/0x510
[  154.226460][ T7830]  ? __pfx_snd_pcm_hw_rule_muldivk+0x10/0x10
[  154.226495][ T7830]  ? __pfx_snd_pcm_hw_rule_add+0x10/0x10
[  154.226520][ T7830]  ? __pfx_snd_pcm_hw_rule_add+0x10/0x10
[  154.226544][ T7830]  ? mutex_init_lockdep+0xf1/0x120
[  154.226567][ T7830]  ? snd_pcm_attach_substream+0x287/0xd20
[  154.226597][ T7830]  snd_pcm_open_substream+0x942/0x1850
[  154.226624][ T7830]  ? __pfx_snd_pcm_open_substream+0x10/0x10
[  154.226647][ T7830]  ? rcu_is_watching+0x13/0xc0
[  154.226669][ T7830]  snd_pcm_open+0x2a3/0x710
[  154.226687][ T7830]  ? __pfx_snd_pcm_open+0x10/0x10
[  154.226705][ T7830]  ? __pfx_default_wake_function+0x10/0x10
[  154.226739][ T7830]  ? __pfx_snd_pcm_playback_open+0x10/0x10
[  154.226760][ T7830]  snd_pcm_playback_open+0x69/0xc0
[  154.226782][ T7830]  snd_open+0x201/0x450
[  154.226828][ T7830]  ? __pfx_snd_open+0x10/0x10
[  154.226857][ T7830]  chrdev_open+0x234/0x6a0
[  154.226882][ T7830]  ? __pfx_chrdev_open+0x10/0x10
[  154.226920][ T7830]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  154.226944][ T7830]  do_dentry_open+0x6ab/0x14d0
[  154.226959][ T7830]  ? __pfx_chrdev_open+0x10/0x10
[  154.226984][ T7830]  vfs_open+0x82/0x3f0
[  154.227013][ T7830]  path_openat+0x19fa/0x2440
[  154.227040][ T7830]  ? __pfx_path_openat+0x10/0x10
[  154.227069][ T7830]  do_file_open+0x20e/0x430
[  154.227094][ T7830]  ? __pfx_do_file_open+0x10/0x10
[  154.227134][ T7830]  ? _raw_spin_unlock+0x28/0x50
[  154.227152][ T7830]  ? alloc_fd+0x471/0x7a0
[  154.227173][ T7830]  do_sys_openat2+0x10f/0x1e0
[  154.227192][ T7830]  ? __pfx_do_sys_openat2+0x10/0x10
[  154.227223][ T7830]  ? __ia32_sys_futex_time32+0x2f4/0x470
[  154.227243][ T7830]  ? __ia32_sys_futex_time32+0x2fd/0x470
[  154.227267][ T7830]  __ia32_compat_sys_openat+0x12d/0x210
[  154.227295][ T7830]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  154.227323][ T7830]  do_int80_emulation+0x166/0x650
[  154.227346][ T7830]  asm_int80_emulation+0x1a/0x20
[  154.227361][ T7830] RIP: 0023:0xf71275ab
[  154.227373][ T7830] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  154.227387][ T7830] RSP: 002b:00000000f53dd03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  154.227405][ T7830] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53dd100
[  154.227417][ T7830] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[  154.227427][ T7830] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  154.227438][ T7830] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  154.227449][ T7830] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  154.227480][ T7830]  </TASK>
[  154.865859][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  155.073638][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  155.077654][ T7840] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  155.077727][ T7840] overlayfs: failed to set xattr on upper
[  155.077784][ T7840] overlayfs: ...falling back to redirect_dir=nofollow.
[  155.077813][ T7840] overlayfs: ...falling back to index=off.
[  155.077820][ T7840] overlayfs: ...falling back to uuid=null.
[  155.077929][ T7840] overlayfs: maximum fs stacking depth exceeded
[  155.724713][ T7872] FAULT_INJECTION: forcing a failure.
[  155.724713][ T7872] name failslab, interval 1, probability 0, space 0, times 0
[  155.724732][ T7872] CPU: 0 UID: 0 PID: 7872 Comm: syz.2.483 Not tainted syzkaller #0 PREEMPT(full) 
[  155.724745][ T7872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  155.724751][ T7872] Call Trace:
[  155.724755][ T7872]  <TASK>
[  155.724759][ T7872]  dump_stack_lvl+0x100/0x190
[  155.724777][ T7872]  should_fail_ex.cold+0x5/0xa
[  155.724792][ T7872]  should_failslab+0xc2/0x120
[  155.724807][ T7872]  __kmalloc_node_track_caller_noprof+0xfa/0x870
[  155.724820][ T7872]  ? __kasan_kmalloc+0xaa/0xb0
[  155.724833][ T7872]  ? __request_module+0x2d5/0x6a0
[  155.724846][ T7872]  kstrdup+0x51/0xe0
[  155.724857][ T7872]  __request_module+0x2d5/0x6a0
[  155.724867][ T7872]  ? __pfx___request_module+0x10/0x10
[  155.724879][ T7872]  ? rcu_is_watching+0x13/0xc0
[  155.724892][ T7872]  ? crypto_alg_lookup+0x10c/0x1e0
[  155.724934][ T7872]  ? crypto_alg_lookup+0x10c/0x1e0
[  155.724966][ T7872]  crypto_alg_mod_lookup+0x257/0x5d0
[  155.724986][ T7872]  crypto_type_has_alg+0x2c/0x80
[  155.725000][ T7872]  xfrm_aalg_get_byid+0xcc/0x180
[  155.725015][ T7872]  pfkey_add+0x21ec/0x2f10
[  155.725033][ T7872]  ? skb_release_data+0x65d/0x8e0
[  155.725049][ T7872]  ? __pfx_pfkey_add+0x10/0x10
[  155.725063][ T7872]  ? kfree_skbmem+0x19f/0x210
[  155.725074][ T7872]  ? sk_skb_reason_drop+0x114/0x1b0
[  155.725090][ T7872]  ? pfkey_broadcast+0x28c/0x420
[  155.725106][ T7872]  ? __pfx_pfkey_add+0x10/0x10
[  155.725122][ T7872]  pfkey_process+0x5c3/0x810
[  155.725140][ T7872]  ? __pfx_pfkey_process+0x10/0x10
[  155.725155][ T7872]  ? pfkey_sendmsg+0x41a/0x840
[  155.725180][ T7872]  ? __pfx___alloc_skb+0x10/0x10
[  155.725197][ T7872]  pfkey_sendmsg+0x428/0x840
[  155.725215][ T7872]  ____sys_sendmsg+0xa4d/0xbe0
[  155.725225][ T7872]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  155.725242][ T7872]  ? __pfx_____sys_sendmsg+0x10/0x10
[  155.725259][ T7872]  ___sys_sendmsg+0x190/0x1e0
[  155.725271][ T7872]  ? __pfx____sys_sendmsg+0x10/0x10
[  155.725288][ T7872]  ? find_held_lock+0x2b/0x80
[  155.725308][ T7872]  __sys_sendmsg+0x160/0x210
[  155.725323][ T7872]  ? __pfx___sys_sendmsg+0x10/0x10
[  155.725341][ T7872]  ? __pfx_ksys_write+0x10/0x10
[  155.725356][ T7872]  __do_fast_syscall_32+0x13a/0x8b0
[  155.725373][ T7872]  ? lockdep_hardirqs_on+0x7d/0x110
[  155.725389][ T7872]  do_fast_syscall_32+0x32/0x70
[  155.725406][ T7872]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  155.725420][ T7872] RIP: 0023:0xf7f95fec
[  155.725433][ T7872] Code: Unable to access opcode bytes at 0xf7f95fc2.
[  155.725437][ T7872] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  155.725448][ T7872] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040
[  155.725455][ T7872] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  155.725461][ T7872] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  155.725467][ T7872] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  155.725473][ T7872] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  155.725487][ T7872]  </TASK>
[  155.887154][ T7878] 9pnet_virtio: no channels available for device syz
[  156.087152][ T7884] netlink: 'syz.2.485': attribute type 4 has an invalid length.
[  156.092837][ T7884] netlink: 'syz.2.485': attribute type 4 has an invalid length.
[  156.109477][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  156.198917][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  156.254063][   T70] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "n"
[  156.258900][   T70] (NULL device *): queue 0 connect admin queue failed (-111).
[  156.258916][   T70] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111)
[  156.258925][   T70] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  156.260136][ T7886] nvme nvme0: NVME-FC{0}: new ctrl: NQN "n", hostnqn: nqn.2014-08.org.nvmexpress:uuid:560449e3-281e-4974-a6b9-f39a5fe18437
[  156.268503][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  156.595582][ T7896] FAULT_INJECTION: forcing a failure.
[  156.595582][ T7896] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  156.595602][ T7896] CPU: 1 UID: 0 PID: 7896 Comm: syz.3.487 Not tainted syzkaller #0 PREEMPT(full) 
[  156.595615][ T7896] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  156.595622][ T7896] Call Trace:
[  156.595625][ T7896]  <TASK>
[  156.595629][ T7896]  dump_stack_lvl+0x100/0x190
[  156.595648][ T7896]  should_fail_ex.cold+0x5/0xa
[  156.595663][ T7896]  _copy_from_user+0x2e/0xd0
[  156.595678][ T7896]  map_delete_elem+0x9c2/0xe80
[  156.595692][ T7896]  ? find_held_lock+0x2b/0x80
[  156.595706][ T7896]  ? __pfx_map_delete_elem+0x10/0x10
[  156.595725][ T7896]  __sys_bpf+0x1f68/0x4a30
[  156.595739][ T7896]  ? __pfx___sys_bpf+0x10/0x10
[  156.595749][ T7896]  ? lock_acquire+0x1d1/0x380
[  156.595777][ T7896]  ? get_pid_task+0x2a/0x250
[  156.595789][ T7896]  ? find_held_lock+0x2b/0x80
[  156.595804][ T7896]  ? get_pid_task+0xfc/0x250
[  156.595818][ T7896]  ? get_pid_task+0xfc/0x250
[  156.595839][ T7896]  ? proc_fail_nth_write+0x9f/0x220
[  156.595860][ T7896]  ? find_held_lock+0x2b/0x80
[  156.595884][ T7896]  ? rcu_read_lock_any_held+0x6a/0x90
[  156.595905][ T7896]  ? find_held_lock+0x2b/0x80
[  156.595923][ T7896]  ? ksys_write+0x190/0x250
[  156.595939][ T7896]  ? ksys_write+0x190/0x250
[  156.595950][ T7896]  ? lock_acquire+0x1d1/0x380
[  156.595973][ T7896]  ? fput+0x7c/0x100
[  156.595988][ T7896]  ? __ia32_sys_bpf+0xcc/0x170
[  156.595999][ T7896]  __ia32_sys_bpf+0xcc/0x170
[  156.596011][ T7896]  ? __do_fast_syscall_32+0xb3/0x8b0
[  156.596029][ T7896]  __do_fast_syscall_32+0x13a/0x8b0
[  156.596045][ T7896]  ? lockdep_hardirqs_on+0x7d/0x110
[  156.596062][ T7896]  do_fast_syscall_32+0x32/0x70
[  156.596083][ T7896]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  156.596097][ T7896] RIP: 0023:0xf7f43fec
[  156.596110][ T7896] Code: Unable to access opcode bytes at 0xf7f43fc2.
[  156.596115][ T7896] RSP: 002b:00000000f53c450c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  156.596126][ T7896] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0
[  156.596133][ T7896] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000
[  156.596139][ T7896] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  156.596145][ T7896] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  156.596152][ T7896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  156.596165][ T7896]  </TASK>
[  157.474278][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  157.508805][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.491'.
[  157.660061][ T7910] random: crng reseeded on system resumption
[  157.678067][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'.
[  157.678079][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'.
[  157.678085][ T7915] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22)
[  157.678094][ T7915] iwpm_mapping_info_cb: Unable to parse nlmsg
[  157.742676][ T7917] 
[  157.743477][ T7917] ======================================================
[  157.745764][ T7917] WARNING: possible circular locking dependency detected
[  157.748068][ T7917] syzkaller #0 Not tainted
[  157.749587][ T7917] ------------------------------------------------------
[  157.751740][ T7917] syz.2.496/7917 is trying to acquire lock:
[  157.753600][ T7917] ffff8880219fc940 ((wq_completion)md_misc){+.+.}-{0:0}, at: touch_wq_lockdep_map+0x9c/0x1c0
[  157.756708][ T7917] 
[  157.756708][ T7917] but task is already holding lock:
[  157.758987][ T7917] ffffffff8f9bb760 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0
[  157.761781][ T7917] 
[  157.761781][ T7917] which lock already depends on the new lock.
[  157.761781][ T7917] 
[  157.764961][ T7917] 
[  157.764961][ T7917] the existing dependency chain (in reverse order) is:
[  157.767714][ T7917] 
[  157.767714][ T7917] -> #3 (major_names_lock){+.+.}-{4:4}:
[  157.770184][ T7917]        lock_acquire+0x1d1/0x380
[  157.771857][ T7917]        __mutex_lock+0x1a4/0x1bd0
[  157.773494][ T7917]        blk_probe_dev+0x28/0x1e0
[  157.775084][ T7917]        blk_request_module+0x16/0xc0
[  157.776756][ T7917]        blkdev_get_no_open+0x9b/0xf0
[  157.778449][ T7917]        bdev_file_open_by_dev+0x70/0x210
[  157.780276][ T7917]        md_import_device+0x120/0x360
[  157.782086][ T7917]        md_ioctl+0x223b/0x36d0
[  157.783617][ T7917]        compat_blkdev_ioctl+0x682/0x7b0
[  157.785366][ T7917]        __ia32_compat_sys_ioctl+0x2cf/0x360
[  157.787263][ T7917]        __do_fast_syscall_32+0x13a/0x8b0
[  157.789096][ T7917]        do_fast_syscall_32+0x32/0x70
[  157.790776][ T7917]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  157.792912][ T7917] 
[  157.792912][ T7917] -> #2 (&mddev->reconfig_mutex){+.+.}-{4:4}:
[  157.795473][ T7917]        lock_acquire+0x1d1/0x380
[  157.797070][ T7917]        __mutex_lock+0x1a4/0x1bd0
[  157.798679][ T7917]        md_start_sync+0xc4/0xea0
[  157.800245][ T7917]        process_one_work+0xac7/0x1b10
[  157.801961][ T7917]        worker_thread+0x5ef/0xe50
[  157.803557][ T7917]        kthread+0x373/0x450
[  157.805028][ T7917]        ret_from_fork+0x730/0xd60
[  157.806635][ T7917]        ret_from_fork_asm+0x1a/0x30
[  157.808287][ T7917] 
[  157.808287][ T7917] -> #1 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}:
[  157.811196][ T7917]        lock_acquire+0x1d1/0x380
[  157.812769][ T7917]        process_one_work+0xa32/0x1b10
[  157.814481][ T7917]        worker_thread+0x5ef/0xe50
[  157.816075][ T7917]        kthread+0x373/0x450
[  157.817660][ T7917]        ret_from_fork+0x730/0xd60
[  157.819285][ T7917]        ret_from_fork_asm+0x1a/0x30
[  157.820942][ T7917] 
[  157.820942][ T7917] -> #0 ((wq_completion)md_misc){+.+.}-{0:0}:
[  157.824244][ T7917]        check_prev_add+0xeb/0xe60
[  157.826362][ T7917]        __lock_acquire+0x1528/0x1f40
[  157.828620][ T7917]        lock_acquire+0x1d1/0x380
[  157.830756][ T7917]        touch_wq_lockdep_map+0xad/0x1c0
[  157.833095][ T7917]        __flush_workqueue+0x131/0x1200
[  157.835400][ T7917]        md_alloc+0x30/0x10a0
[  157.837369][ T7917]        md_probe+0x73/0xf0
[  157.839252][ T7917]        blk_probe_dev+0x149/0x1e0
[  157.841383][ T7917]        blk_request_module+0x16/0xc0
[  157.843511][ T7917]        blkdev_get_no_open+0x9b/0xf0
[  157.845785][ T7917]        bdev_file_open_by_dev+0x70/0x210
[  157.848156][ T7917]        swsusp_check+0x72/0x470
[  157.850263][ T7917]        software_resume+0x6f/0x330
[  157.852442][ T7917]        resume_store+0x248/0x460
[  157.854567][ T7917]        kobj_attr_store+0x58/0x80
[  157.856728][ T7917]        sysfs_kf_write+0xf2/0x150
[  157.858693][ T7917]        kernfs_fop_write_iter+0x3e0/0x5f0
[  157.861082][ T7917]        vfs_write+0x6af/0x1050
[  157.863102][ T7917]        ksys_write+0x12a/0x250
[  157.865131][ T7917]        __do_fast_syscall_32+0x13a/0x8b0
[  157.867248][ T7917]        do_fast_syscall_32+0x32/0x70
[  157.869277][ T7917]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  157.871824][ T7917] 
[  157.871824][ T7917] other info that might help us debug this:
[  157.871824][ T7917] 
[  157.875227][ T7917] Chain exists of:
[  157.875227][ T7917]   (wq_completion)md_misc --> &mddev->reconfig_mutex --> major_names_lock
[  157.875227][ T7917] 
[  157.879617][ T7917]  Possible unsafe locking scenario:
[  157.879617][ T7917] 
[  157.881930][ T7917]        CPU0                    CPU1
[  157.883586][ T7917]        ----                    ----
[  157.885312][ T7917]   lock(major_names_lock);
[  157.886988][ T7917]                                lock(&mddev->reconfig_mutex);
[  157.889398][ T7917]                                lock(major_names_lock);
[  157.891586][ T7917]   lock((wq_completion)md_misc);
[  157.893182][ T7917] 
[  157.893182][ T7917]  *** DEADLOCK ***
[  157.893182][ T7917] 
[  157.895706][ T7917] locks held by syz.2.496/7917: 5, last CPU#2:
[  157.897700][ T7917]  #0: ffff8880002ea460 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  157.900518][ T7917]  #1: ffff88805f92d080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  157.903561][ T7917]  #2: ffff88801d7304b8 (kn->active#87){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  157.906684][ T7917]  #3: ffffffff8eca2640 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x65/0x330
[  157.909880][ T7917]  #4: ffffffff8f9bb760 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0
[  157.912832][ T7917] 
[  157.912832][ T7917] stack backtrace:
[  157.914702][ T7917] CPU: 2 UID: 0 PID: 7917 Comm: syz.2.496 Not tainted syzkaller #0 PREEMPT(full) 
[  157.917564][ T7917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  157.921148][ T7917] Call Trace:
[  157.922526][ T7917]  <TASK>
[  157.923757][ T7917]  dump_stack_lvl+0x100/0x190
[  157.925729][ T7917]  print_circular_bug.cold+0x178/0x1be
[  157.927988][ T7917]  check_noncircular+0x146/0x160
[  157.930100][ T7917]  check_prev_add+0xeb/0xe60
[  157.932066][ T7917]  __lock_acquire+0x1528/0x1f40
[  157.934144][ T7917]  ? check_prev_add+0x354/0xe60
[  157.936218][ T7917]  lock_acquire+0x1d1/0x380
[  157.938186][ T7917]  ? touch_wq_lockdep_map+0x9c/0x1c0
[  157.940399][ T7917]  ? lockdep_init_map_type+0x5c/0x250
[  157.942664][ T7917]  ? touch_wq_lockdep_map+0x9c/0x1c0
[  157.944843][ T7917]  touch_wq_lockdep_map+0xad/0x1c0
[  157.946685][ T7917]  ? touch_wq_lockdep_map+0x9c/0x1c0
[  157.948819][ T7917]  __flush_workqueue+0x131/0x1200
[  157.950985][ T7917]  ? rcu_is_watching+0x13/0xc0
[  157.953001][ T7917]  ? trace_contention_end+0x126/0x160
[  157.955251][ T7917]  ? __mutex_lock+0x26c/0x1bd0
[  157.957293][ T7917]  ? __pfx___flush_workqueue+0x10/0x10
[  157.959568][ T7917]  ? lock_acquire+0x1d1/0x380
[  157.961551][ T7917]  ? find_inode_fast+0x1fa/0xa30
[  157.963632][ T7917]  md_alloc+0x30/0x10a0
[  157.965343][ T7917]  md_probe+0x73/0xf0
[  157.966827][ T7917]  ? __pfx_md_probe+0x10/0x10
[  157.968611][ T7917]  blk_probe_dev+0x149/0x1e0
[  157.970361][ T7917]  blk_request_module+0x16/0xc0
[  157.972368][ T7917]  blkdev_get_no_open+0x9b/0xf0
[  157.974230][ T7917]  bdev_file_open_by_dev+0x70/0x210
[  157.976150][ T7917]  swsusp_check+0x72/0x470
[  157.977824][ T7917]  software_resume+0x6f/0x330
[  157.979767][ T7917]  resume_store+0x248/0x460
[  157.981611][ T7917]  ? __pfx_resume_store+0x10/0x10
[  157.983703][ T7917]  ? find_held_lock+0x2b/0x80
[  157.985690][ T7917]  ? sysfs_file_kobj+0xe4/0x290
[  157.987726][ T7917]  ? sysfs_file_kobj+0xe4/0x290
[  157.989818][ T7917]  ? __pfx_resume_store+0x10/0x10
[  157.991920][ T7917]  kobj_attr_store+0x58/0x80
[  157.993869][ T7917]  ? __pfx_kobj_attr_store+0x10/0x10
[  157.996072][ T7917]  sysfs_kf_write+0xf2/0x150
[  157.998043][ T7917]  kernfs_fop_write_iter+0x3e0/0x5f0
[  158.000274][ T7917]  ? __pfx_sysfs_kf_write+0x10/0x10
[  158.002458][ T7917]  vfs_write+0x6af/0x1050
[  158.004280][ T7917]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  158.006805][ T7917]  ? __pfx_vfs_write+0x10/0x10
[  158.008792][ T7917]  ? __pfx_do_sys_openat2+0x10/0x10
[  158.010726][ T7917]  ? __ia32_sys_futex_time32+0x2f4/0x470
[  158.013015][ T7917]  ksys_write+0x12a/0x250
[  158.014828][ T7917]  ? __pfx_ksys_write+0x10/0x10
[  158.016868][ T7917]  __do_fast_syscall_32+0x13a/0x8b0
[  158.019082][ T7917]  ? lockdep_hardirqs_on+0x7d/0x110
[  158.021231][ T7917]  do_fast_syscall_32+0x32/0x70
[  158.023040][ T7917]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  158.025370][ T7917] RIP: 0023:0xf7f95fec
[  158.026891][ T7917] Code: Unable to access opcode bytes at 0xf7f95fc2.
[  158.029280][ T7917] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  158.031873][ T7917] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000040
[  158.034385][ T7917] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000
[  158.036741][ T7917] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  158.039165][ T7917] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  158.041657][ T7917] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  158.044351][ T7917]  </TASK>
[  158.053274][ T7917] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  158.053286][ T7917] block device autoloading is deprecated and will be removed.
[  158.053368][ T7917] PM: Image not found (code -5)
[  158.065143][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.268413][  T193] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "n"
[  158.268692][  T193] (NULL device *): queue 0 connect admin queue failed (-111).
[  158.268712][  T193] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111)
[  158.268726][  T193] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  158.508389][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  159.388656][   T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  159.548562][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.188279][ T5735] Bluetooth: hci1: command 0x0406 tx timeout
[  160.188327][ T5735] Bluetooth: hci3: command 0x0406 tx timeout
[  160.348435][ T1158] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "n"
[  160.348805][ T1158] (NULL device *): queue 0 connect admin queue failed (-111).
[  160.348822][ T1158] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111)
[  160.348831][ T1158] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  160.588662][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.670095][ T2329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.628960][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  162.428499][ T1158] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "n"
[  162.429051][   T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  162.429122][ T1158] (NULL device *): queue 0 connect admin queue failed (-111).
[  162.429135][ T1158] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111)
[  162.429144][ T1158] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  162.589123][   T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  162.668776][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.708583][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  164.518537][ T1158] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "n"
[  164.518892][ T1158] (NULL device *): queue 0 connect admin queue failed (-111).
[  164.518909][ T1158] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111)
[  164.518919][ T1158] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  164.748731][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  165.148420][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  165.468662][   T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  165.788503][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  165.789350][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  166.588426][ T1158] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "n"
[  166.589325][ T1158] (NULL device *): queue 0 connect admin queue failed (-111).
[  166.589340][ T1158] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111)
[  166.589349][ T1158] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  166.828609][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog