last executing test programs:

3.69808794s ago: executing program 3 (id=641):
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000006c0)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r2, 0x604, 0x0)

2.037707703s ago: executing program 2 (id=658):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="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", 0x112, 0xfffffffffffffffd)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x62, 0x5, 0x338, 0x0, 0x198, 0xffffffff, 0x0, 0x240, 0x430, 0x430, 0xffffffff, 0x430, 0x430, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'hsr0\x00', 'wg1\x00', {}, {}, 0x0, 0x2}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @remote, @empty, @gre_key=0x6, @gre_key=0xfea}}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xff, 0x0, 'caif0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x5e, 0x1, 0x30}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @private, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xc, @private=0xa110100, @private=0xa010101, @gre_key=0x10, @gre_key=0x6}}}}, {{@ip={@remote, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398)
socket$kcm(0x29, 0x7, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x40000)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
write(r3, &(0x7f0000000000)="1546b2000000000000008043f3526b13f78ada17aefbbfc13bc888a3a46e8f0e809292ee0739b4f20800b179aa901b5d500d63", 0x58)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000001400)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000013c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="002e8ebd", @ANYRES16=0x0, @ANYBLOB="00012abd7000ffdbdf250600000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990005000000640000000a00180003030303030300001c00e7002f6f464aa2cc737a1ab2d747cbff4667d22a80f3fc73bbd30a00e80008021100000000000a00e80008021100000100000c0017800400050004000600280017800400060004000400040001000400030004000300040001000400060004000300040001000a00e800ffffffffffff00000a00e80008021100000000000a00e80008021100000100001c00e700e74aa41c6cfc30f5d97b351c5e83d2bb70f62524324623ec0a00e8000802110000010000050053000000000005005300000000000500530000000000"], 0x100}, 0x1, 0x0, 0x0, 0x800}, 0x40804)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x27)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001000)=ANY=[@ANYBLOB="b80000005400000228bd7000fcdbdf2507000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="01020400ff0100000000000000000000000000010800000020000100", @ANYRES32=r6, @ANYBLOB="01030400fc0000000000000000000000000000000800000020000100", @ANYRES32=r6, @ANYBLOB="00040000fc0100000000000000000000000000048edd0000200001005ed6d79c0bc5b6d77fd3309cf3d33c60248a88e3a57af667301e97c65091cb3fc3d4765193bbc44f2e2e425646f3492c2d7e91f1c5fb131c6b3f9c66abb3b0b9b115093bb800cd0907049ce3d88c5d72ef80f2a13c1dfb19cf5e8caae96fc35f184a89dd91b10f31f0d34992d6280d37d339f975d26e13cc9c062bb5f271ee79c5a22b815e454122a8a4e92d4cd95efcd2f48e3167b06fe6cb68ee30600b9ecc8fa7ff", @ANYRES32=r8, @ANYBLOB="00010200fc01000000000000000000000000000086dd000020000100", @ANYRES32=0x0, @ANYBLOB="01020200ac1414bb00000000000000000000000086dd0000"], 0xb8}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001180)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40)
r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl(r10, 0x400452c8, &(0x7f0000000000)="000000000000000000000000000000000000000001000000")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x18, 0x50}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x28)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/tty/rfcomm0/address\x00', 0x0, 0x0)
read(r11, &(0x7f0000000300)=""/64, 0x40)

1.92065248s ago: executing program 2 (id=660):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb702000008000000b70300000100000085000000a400000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0xff5, &(0x7f00000003c0)=""/4085, 0x40f00}, 0x94)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c000280bc00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100070000000c0001000000000000000000100002800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x4000040)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
eventfd(0x5)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x40, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_TSC_KHZ_cpu(0xffffffffffffffff, 0xaea2, 0x9)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000})
ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000013c0)={0x58000, 0x1ff8, 0x30, 0x9, 0x6})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000200)={0x0, [[0x6, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x0, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
ppoll(&(0x7f0000000000)=[{r5, 0x1000}], 0x1, 0x0, 0x0, 0x0)
r6 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0x8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2], [0xab8, 0x200, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x81, 0x3], [0xffffffff, 0x55, 0xffffffff, 0x6, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x1f, 0x20, 0x0, 0x0, 0x1}, {0x7fff, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x4, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x4, 0x3, 0x0, 0x0, 0x1}]})
ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000001400)={0x0, 0x6, 0x520000, 0x5, 0x7fff, <r7=>0x0, 0x8, 0x7})
ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY(r2, 0xc008644c, &(0x7f0000001440)={r7})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r6, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r6, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f0000000080)="a1", 0x1})

1.092235522s ago: executing program 1 (id=668):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="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", 0x112, 0xfffffffffffffffd)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x62, 0x5, 0x338, 0x0, 0x198, 0xffffffff, 0x0, 0x240, 0x430, 0x430, 0xffffffff, 0x430, 0x430, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'hsr0\x00', 'wg1\x00', {}, {}, 0x0, 0x2}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @remote, @empty, @gre_key=0x6, @gre_key=0xfea}}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xff, 0x0, 'caif0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x5e, 0x1, 0x30}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @private, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xc, @private=0xa110100, @private=0xa010101, @gre_key=0x10, @gre_key=0x6}}}}, {{@ip={@remote, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398)
socket$kcm(0x29, 0x7, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x40000)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
write(r3, &(0x7f0000000000)="1546b2000000000000008043f3526b13f78ada17aefbbfc13bc888a3a46e8f0e809292ee0739b4f20800b179aa901b5d500d63", 0x58)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000001400)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000013c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="002e8ebd", @ANYRES16=0x0, @ANYBLOB="00012abd7000ffdbdf250600000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990005000000640000000a00180003030303030300001c00e7002f6f464aa2cc737a1ab2d747cbff4667d22a80f3fc73bbd30a00e80008021100000000000a00e80008021100000100000c0017800400050004000600280017800400060004000400040001000400030004000300040001000400060004000300040001000a00e800ffffffffffff00000a00e80008021100000000000a00e80008021100000100001c00e700e74aa41c6cfc30f5d97b351c5e83d2bb70f62524324623ec0a00e8000802110000010000050053000000000005005300000000000500530000000000"], 0x100}, 0x1, 0x0, 0x0, 0x800}, 0x40804)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x27)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001000)=ANY=[@ANYBLOB="b80000005400000228bd7000fcdbdf2507000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="01020400ff0100000000000000000000000000010800000020000100", @ANYRES32=r6, @ANYBLOB="01030400fc0000000000000000000000000000000800000020000100", @ANYRES32=r6, @ANYBLOB="00040000fc0100000000000000000000000000048edd0000200001005ed6d79c0bc5b6d77fd3309cf3d33c60248a88e3a57af667301e97c65091cb3fc3d4765193bbc44f2e2e425646f3492c2d7e91f1c5fb131c6b3f9c66abb3b0b9b115093bb800cd0907049ce3d88c5d72ef80f2a13c1dfb19cf5e8caae96fc35f184a89dd91b10f31f0d34992d6280d37d339f975d26e13cc9c062bb5f271ee79c5a22b815e454122a8a4e92d4cd95efcd2f48e3167b06fe6cb68ee30600b9ecc8fa7ff", @ANYRES32=r8, @ANYBLOB="00010200fc01000000000000000000000000000086dd000020000100", @ANYRES32=0x0, @ANYBLOB="01020200ac1414bb00000000000000000000000086dd0000"], 0xb8}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001180)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40)
r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl(r10, 0x400452c8, &(0x7f0000000000)="000000000000000000000000000000000000000001000000")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x18, 0x50}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x28)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/tty/rfcomm0/address\x00', 0x0, 0x0)
read(r11, &(0x7f0000000300)=""/64, 0x40)

1.083972255s ago: executing program 1 (id=670):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0xffffffffffffffa6)

1.032307935s ago: executing program 0 (id=671):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x20000}, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000f074001280080001000fdcd07ec349e46b00e000000104441200"], 0x3c}}, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f00000002c0)={0x2, 0x6, &(0x7f0000000180)=[0x404, 0x2, 0xe5a8, 0x0, 0x1, 0xfff9], &(0x7f00000001c0)=[0x9, 0x8, 0x8, 0x4], &(0x7f0000000240)=[0x3, 0x427, 0xff7f], &(0x7f0000000280)=[0x8, 0x6, 0x2, 0x6, 0x0]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x2000000000000, 0x200000, &(0x7f0000200000/0x200000)=nil})
r3 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40000)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
connect$bt_rfcomm(r4, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2}, 0xa)
r5 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00')
write$tcp_mem(r5, 0x0, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000040)={0x0, 0x34524742, 0x780, 0x438, 0x2, @stepwise={{0xe610, 0xfffffffe}, {0x9, 0x1}, {0xa3b, 0xc0}}})

1.031934213s ago: executing program 1 (id=672):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x7, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c959}, 0x4000800)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x8)
sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
shutdown(r0, 0x1)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)={0xa0042, 0x101, 0xd}, 0x18)

952.086922ms ago: executing program 2 (id=673):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x2, 0x0, 0x5c, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xac1414aa, @in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x8)
read$char_usb(0xffffffffffffffff, &(0x7f0000000180)=""/75, 0x4b)
read$char_usb(0xffffffffffffffff, &(0x7f0000000480)=""/74, 0x4a)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x494, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008090}, 0x20008014)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/comedi\x00', 0x0, 0x0)
read(r2, &(0x7f0000000100), 0x1000)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0x44, 0x4, 0x3a8, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0xa8, 0xf0, 0x8502}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz0\x00', {0x2}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @local, [0xff000000, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'pimreg0\x00', 'team_slave_1\x00', {}, {0xff}, 0x3c, 0xd3, 0x4, 0x8}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x11}}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x7, 0x81, 0x81, 0x0, "d13aea835ab25d2af06d2a594bd55044f3f8f4a6ee1c3d886408088b5319e5294d4192982093b0f1e78cdb4585b98822e00d4b509e74d3ebb43b153f2481c6e3"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408)

925.048732ms ago: executing program 0 (id=674):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r6, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030008ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x1, 0x70bd28, 0x25dfdbfc, {0x1d, 0x1, 0x2}, [@CGW_DST_IF={0x8}, @CGW_DST_IF={0x8, 0xa, r7}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008844}, 0x30004016)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r9=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001880)=@newtfilter={0x8ac, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x878, 0x2, [@TCA_U32_POLICE={0x850, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x4, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x803, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x1, 0x10001, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x7, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x4, 0x2, 0x6, 0x6, 0xaa, 0xffffffff, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0xebb, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0x80e, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x4, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x3, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74db, 0x400000, 0x9, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x7f, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x4, 0x5, 0x7, 0x4, 0x3, 0x400, 0x7, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf6, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x82, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x4003, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x9, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x806, 0xc4, 0x9, 0x0, 0xee2, 0x2, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0xa, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x200004, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0xaf, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x42b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x8000004, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0xd, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084)
r10 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00')
preadv(r10, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xbf}], 0x1, 0x182, 0xffffffff)
ioctl$KVM_SET_IRQCHIP(r10, 0x8208ae63, &(0x7f0000000200)={0x2, 0x0, @ioapic={0x1ffc, 0x7f, 0xb9, 0xf2, 0x0, [{0x9, 0x4, 0x0, '\x00', 0x5}, {0x7a, 0x3, 0xff, '\x00', 0x7}, {0xc, 0x0, 0x9, '\x00', 0x7}, {0x10, 0x10, 0x0, '\x00', 0x9}, {0xff, 0x1, 0xa6}, {0x71, 0x40, 0x7, '\x00', 0x6}, {0x5, 0x2, 0x8, '\x00', 0x8}, {0x3, 0x5, 0x55}, {0xd0, 0x9, 0xd6, '\x00', 0x87}, {0x5, 0x6, 0x8, '\x00', 0x5}, {0x7, 0x6, 0xf7, '\x00', 0x40}, {0x3, 0x3, 0x9, '\x00', 0x9}, {0x38, 0x5, 0x2, '\x00', 0xff}, {0x3b, 0x79, 0x4, '\x00', 0x9}, {0x8, 0x3, 0x10, '\x00', 0x3}, {0x8, 0x8, 0x0, '\x00', 0x33}, {0x40, 0x7, 0x8}, {0x9, 0x6, 0x6, '\x00', 0x1}, {0x10, 0x1, 0x50, '\x00', 0x7}, {0x1, 0x0, 0x7f}, {0x1c, 0x9, 0x1}, {0x3, 0x5, 0x8, '\x00', 0x2}, {0x40, 0x4, 0xa, '\x00', 0x8}, {0x6d, 0x0, 0xad, '\x00', 0xe}]}})

842.276419ms ago: executing program 0 (id=675):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x2)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0xac, &(0x7f0000000540)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x76, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}, {"6172f84de19f4103001672504262bec559f17cce7a3404b5b92c2ffb3ed39f1ee48d8676275cfd5081e1132cfdee4653c696364cab30b978452a7689530b370ab4e5bcc8bb622ff8ae2f1e7c54a76cb9072386fbd233f8890924"}}}}}}}, 0x0)

842.019962ms ago: executing program 0 (id=676):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='1\n', 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r2, 0x18000000000002a0, 0xfe2a, 0x1200, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r6, 0xc8c7)
r7 = accept4(r6, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x203, 0x2006, 0xffffffff}, 0x10)
sendto$inet6(r7, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000004c0)={0x0, 0x0, 0x3}, 0x8)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x2000008, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

641.909698ms ago: executing program 3 (id=677):
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000040)={0x4, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter={0x5, 0x3, 0xfffffffffffffffe, 0x9, 0x4}}, {0xc7, 0x2, 0x1, 0x0, @irqchip={0x81, 0xcc01}}, {0x7ff, 0x3, 0x1, 0x0, @irqchip={0x1ff, 0x80000000}}, {0x7f, 0x3, 0x1, 0x0, @msi={0x7, 0x780, 0x5, 0x7}}]})
r0 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}})
syz_fuse_handle_req(r1, &(0x7f0000009b40)="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", 0x2000, &(0x7f00000004c0)={&(0x7f0000000000)={0x50, 0x0, 0x9da, {0x7, 0x29, 0xfffffffb, 0x48000010, 0x1, 0x3, 0xb, 0x2, 0x0, 0x0, 0x80, 0x97}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_NOTIFY_STORE(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2800000009000000000000000000000001"], 0x28)
creat(&(0x7f0000000140)='./file0/file0\x00', 0x30)

555.541849ms ago: executing program 3 (id=678):
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @none}, 0x8)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x6, 0x7fffffff, 0x0, 'queue0\x00', 0x8000000})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xfd, {}, {}, @raw32}], 0xffc8)

471.186696ms ago: executing program 0 (id=679):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="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", 0x112, 0xfffffffffffffffd)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x62, 0x5, 0x338, 0x0, 0x198, 0xffffffff, 0x0, 0x240, 0x430, 0x430, 0xffffffff, 0x430, 0x430, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'hsr0\x00', 'wg1\x00', {}, {}, 0x0, 0x2}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @remote, @empty, @gre_key=0x6, @gre_key=0xfea}}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xff, 0x0, 'caif0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x5e, 0x1, 0x30}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @private, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xc, @private=0xa110100, @private=0xa010101, @gre_key=0x10, @gre_key=0x6}}}}, {{@ip={@remote, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398)
socket$kcm(0x29, 0x7, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x40000)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
write(r3, &(0x7f0000000000)="1546b2000000000000008043f3526b13f78ada17aefbbfc13bc888a3a46e8f0e809292ee0739b4f20800b179aa901b5d500d63", 0x58)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000001400)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000013c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="002e8ebd", @ANYRES16=0x0, @ANYBLOB="00012abd7000ffdbdf250600000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990005000000640000000a00180003030303030300001c00e7002f6f464aa2cc737a1ab2d747cbff4667d22a80f3fc73bbd30a00e80008021100000000000a00e80008021100000100000c0017800400050004000600280017800400060004000400040001000400030004000300040001000400060004000300040001000a00e800ffffffffffff00000a00e80008021100000000000a00e80008021100000100001c00e700e74aa41c6cfc30f5d97b351c5e83d2bb70f62524324623ec0a00e8000802110000010000050053000000000005005300000000000500530000000000"], 0x100}, 0x1, 0x0, 0x0, 0x800}, 0x40804)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x27)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001000)=ANY=[@ANYBLOB="b80000005400000228bd7000fcdbdf2507000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="01020400ff0100000000000000000000000000010800000020000100", @ANYRES32=r6, @ANYBLOB="01030400fc0000000000000000000000000000000800000020000100", @ANYRES32=r6, @ANYBLOB="00040000fc0100000000000000000000000000048edd0000200001005ed6d79c0bc5b6d77fd3309cf3d33c60248a88e3a57af667301e97c65091cb3fc3d4765193bbc44f2e2e425646f3492c2d7e91f1c5fb131c6b3f9c66abb3b0b9b115093bb800cd0907049ce3d88c5d72ef80f2a13c1dfb19cf5e8caae96fc35f184a89dd91b10f31f0d34992d6280d37d339f975d26e13cc9c062bb5f271ee79c5a22b815e454122a8a4e92d4cd95efcd2f48e3167b06fe6cb68ee30600b9ecc8fa7ff", @ANYRES32=r8, @ANYBLOB="00010200fc01000000000000000000000000000086dd000020000100", @ANYRES32=0x0, @ANYBLOB="01020200ac1414bb00000000000000000000000086dd0000"], 0xb8}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001180)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40)
r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl(r10, 0x400452c8, &(0x7f0000000000)="000000000000000000000000000000000000000001000000")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x18, 0x50}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x28)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/tty/rfcomm0/address\x00', 0x0, 0x0)
read(r11, &(0x7f0000000300)=""/64, 0x40)

471.071471ms ago: executing program 3 (id=680):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000100, @loopback, 0xfffffffe}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r1, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x40}, [@NDA_DST_MAC={0xa, 0x1, @random='\b\x00'}]}, 0x28}}, 0x0)

400.706169ms ago: executing program 2 (id=681):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01864c1, &(0x7f0000000100))
syz_open_dev$vcsn(&(0x7f00000000c0), 0x9, 0x20000)
r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000040)={0xf0f027, 0x270, "60055808889f90ac0600000500fdfd9ab67e1db9c9a431078d40f722e6002000", 0x9, 0xbd6, 0x100, 0x2, 0x400013aa})

400.479386ms ago: executing program 3 (id=682):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x3, 0x0, 0x0, [{}]}]}}, &(0x7f0000000d00)=""/198, 0x32, 0xc6, 0x1}, 0x20)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]})
r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, <r6=>r4})
mmap$dsp(&(0x7f00000bb000/0x3000)=nil, 0x3000, 0x1000009, 0x11, r6, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_GET_XSAVE2(r7, 0x9000aecf, &(0x7f0000ffc000/0x1000)=nil)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r8=>r0, {0x1, 0x8000}}, './file0\x00'})
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r8, 0x4068aea3, &(0x7f00000002c0)={0xed, 0x0, 0x5})
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x34, r1, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_FAMILY={0x5, 0xd, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x30008090)
syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r2)

340.989995ms ago: executing program 0 (id=683):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
r2 = syz_io_uring_setup(0x80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000180)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x30, 0x0, &(0x7f0000001000), 0x40, 0x0, 0x0, {0x1}})
io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0)
sendto$unix(0xffffffffffffffff, &(0x7f0000000300)="610816a9fcd109669c069f3802a50f849bcfa966f483ef11a3e0e81149456373b0cfa561b466acbd9ecdbca74813d04f5b2cf7768249f01dc44f0b3c36acc5a0237e99ee78c447be5585441c12be4fe00da62c686ac7c3670c78ca6062f5592d61dfb4c4541113b33a544941717364b25200d74e91393d1f421cb9ac39db6c5119e3851ae300c7f08b3c7e1ea8903625a834e8c2a9ce6f518d2caaec49c015e126fc3675e1628c505f1f18a87e1d345a5ecfbc7d097137d75a394bcb2349926d43b1859538539c79aba8b05043b294a484724cb0e8a1da01223b9c26493b83c3c140244ac40032e91d31c2dfcea325f8063d8fe9ecbcf619284ed140ac3affbd21fa5c163ac3d9f7059b1aa94fc7bb9eb6fe87199721e51a62d3930d42cbf5bdcac6f5be27cc39f2170006d8d0c4a148d2e6f5753c83eced5ac08100f96a7a92286c315cf57881f80fce3829687eefa707104c7c2b9c87fe1627dd7b3dab8aaae894ca68f1b852b1ffcec23c99a08fc4e44f74a0766e6663c3ed15df0a14c334bf1706a05ce78e4c", 0xffffff47, 0x0, 0x0, 0x0)
sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0)
sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0)
sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0080e0}, 0x6e)
mlockall(0x3)
mlockall(0x5)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00'})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0xa}, 0x28)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2b667265657a9602202b6d656d6f7279202b626c6b696f202d6e65745f7072696f20"], 0x22)
sendto$unix(r0, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0)
sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x4000081, 0x0, 0x0)
sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0)
sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0)
sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0)
sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0)
sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0)
sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0)
sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0)
sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0)
sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0)
sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0)
sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0)
sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0)
sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0)
sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0)
sendto$unix(r1, &(0x7f0000000040)='a', 0x1, 0x0, 0x0, 0x0)
sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0)
sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0)
sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0)
sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0)
sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0)
sendto$unix(r1, &(0x7f0000000600)="e1", 0x1, 0x24000004, 0x0, 0x0)
sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0)

340.549108ms ago: executing program 2 (id=684):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={<r1=>0x0}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000700)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0xa, 0x0, 0x0, @loopback, 0x9}, r1, 0x3e8}}, 0x48)
write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x120)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8)
r4 = dup2(r3, r2)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r5, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2000b, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0)
unshare(0x20000)
openat$dir(0xffffffffffffff9c, 0x0, 0x2000, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, &(0x7f0000000140)='compr=none\x00')
setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, 0x0)

264.377654ms ago: executing program 3 (id=685):
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @none}, 0x8)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x20044084)
close(r1)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000fedbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="7e0033008000e100ffffffffffff080211"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x1, 0x1000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x5, 0x2, '\x00'}}}]}, 0x34}}, 0x44890)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x400)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_SIGNAL_MSI(r10, 0x4020aea5, &(0x7f00000000c0)={0x100000, 0xffe, 0xfffff5a3, 0x0, 0x8})
fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close(0x3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000280)={0x6, 0x7fffffff, 0x0, 'queue0\x00', 0x8000000})
write$sndseq(r8, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)

258.539696ms ago: executing program 2 (id=686):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3f)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10003, 0x1, 0x1ffc, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x100002, 0x0, 0x0, 0x0}, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000002c0)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000400)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1)
syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0xc, 0x0, 0x9, 0x3, 0x0, 0xd, 0x0, 0x1})
io_uring_enter(r2, 0x1, 0x1, 0x5, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000002c0)=0x4061, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)={0xfffffffffffffd92, r7, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf3b0}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x89}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xaa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x8000810)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="0f01c80f20e035200000000f22e0c4e1fa2a0d1adad9ac0f01cb660fe19a717e000066ba4200edb8000000000f23d00f21f835300000050f23f8b9800000c00f3235004000000f300f209a360f017fb2", 0x50}], 0x1, 0x49, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1)
sendto$inet(r0, &(0x7f0000000400)="d2009a0200000000000000dd8e765af4dfe325d9a09fb2000000", 0x1a, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000280)={'veth1_vlan\x00'})
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
r11 = socket(0x1e, 0x1, 0x0)
recvmmsg$unix(r11, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000cc0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x121, 0x0)
sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)

97.690088ms ago: executing program 1 (id=687):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008040)

97.44147ms ago: executing program 1 (id=688):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r1}) (fail_nth: 27)

0s ago: executing program 1 (id=689):
keyctl$search(0xa, 0x0, &(0x7f000000fc00)='encrypted\x00', 0x0, 0xfffffffffffffffa)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x3, 0x56a, 0x3f, 0x0, 0x0, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135)
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
r1 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x80400)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x278, 0x278, 0x1e0, 0x1e0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x2, 0x41}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x0, 0xfc}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xb78e19162b0a7f00, 0xffff00, 'pimreg1\x00', '\x00', {}, {0xff}, 0x0, 0x0, 0x10}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8, 0xf}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'sit0\x00', 'wg2\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)
ioctl$OTPSELECT(r1, 0x80044d0d, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1)
r3 = open(&(0x7f0000000300)='.\x00', 0x88700, 0x0)
mkdirat(r3, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0)
syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040e05003e20"], 0x8)
nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0)
write$UHID_INPUT2(r0, &(0x7f0000000040)={0xc, {0x5b, "2e1f626d0a892c3632d67c7ca479611d488cbb43d8659ca4fb54b4e51a6c78f7b59d3281af5c1f7efc309cdb2c5d6a4a7f5ad6a59cc9be6ac23a57d83f2d876a85c384904a771303a0b734f2e36e1019b1791bd5d3b1f9ccb8c849"}}, 0x61)
write$UHID_INPUT2(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c000000040010c081202923af683c2ab21fa732610817c0a10284dd15eebb941c62fc69862aed5f9d0eefe29e971c6f443e3bf245e7"], 0xa)

kernel console output (not intermixed with test programs):

evice=6f.98
[   78.257277][  T851] usb 5-1: config 4 has an invalid interface number: 13 but max is 0
[   78.257291][  T851] usb 5-1: config 4 has no interface number 0
[   78.257309][  T851] usb 5-1: config 4 interface 13 has no altsetting 0
[   78.259096][  T851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.259109][  T851] usb 5-1: Product: syz
[   78.259116][  T851] usb 5-1: Manufacturer: syz
[   78.259123][  T851] usb 5-1: SerialNumber: syz
[   78.394308][ T5726] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[   78.472254][  T851] ums-realtek 5-1:4.13: USB Mass Storage device detected
[   78.523946][  T851] usb 5-1: USB disconnect, device number 8
[   78.544594][   T25] usb 7-1: reset high-speed USB device number 15 using dummy_hcd
[   78.544826][ T5726] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   78.547698][ T5726] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   78.547712][ T5726] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   78.547723][ T5726] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   78.549623][ T5726] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.549635][ T5726] usb 6-1: Product: syz
[   78.549642][ T5726] usb 6-1: Manufacturer: syz
[   78.549649][ T5726] usb 6-1: SerialNumber: syz
[   78.559277][ T5726] hub 6-1:1.0: bad descriptor, ignoring hub
[   78.559291][ T5726] hub 6-1:1.0: probe with driver hub failed with error -5
[   78.575210][   T25] usb 7-1: device reset changed ep0 maxpacket size!
[   78.578380][ T5731] usb 7-1: USB disconnect, device number 15
[   78.714485][ T5731] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[   78.784961][ T5726] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   78.894554][ T5731] usb 7-1: Using ep0 maxpacket: 8
[   78.895761][ T5731] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   78.898087][ T5731] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[   78.898125][ T5731] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   78.898138][ T5731] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   78.898172][ T5731] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   78.898209][ T5731] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   78.898253][ T5731] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.086576][   T42] usb 6-1: USB disconnect, device number 10
[   79.093251][   T42] usblp0: removed
[   79.176023][ T5731] usb 7-1: usb_control_msg returned -71
[   79.176046][ T5731] usbtmc 7-1:16.0: can't read capabilities
[   79.189288][ T5731] usb 7-1: USB disconnect, device number 16
[   79.766296][ T7242] kvm [7241]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[   79.777650][ T7242] kvm [7241]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[   79.825437][ T7248] netlink: 'syz.2.412': attribute type 1 has an invalid length.
[   79.997605][ T5739] Bluetooth: hci1: unexpected event for opcode 0x1405
[   81.004286][ T5731] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[   81.184736][ T5731] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[   81.185647][ T5731] usb 7-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[   81.186412][ T5731] usb 7-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[   81.187971][ T5731] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.187981][ T5731] usb 7-1: Product: syz
[   81.187988][ T5731] usb 7-1: Manufacturer: syz
[   81.187995][ T5731] usb 7-1: SerialNumber: syz
[   81.196919][ T5731] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected
[   81.201680][ T5731] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[   81.206857][ T5731] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[   81.344446][   T64] Bluetooth: hci4: Opcode 0x1003 failed: -110
[   81.398404][ T7263] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb
[   81.444706][ T7292] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   81.460111][ T7295] bridge_slave_0: left allmulticast mode
[   81.460122][ T7295] bridge_slave_0: left promiscuous mode
[   81.460220][ T7295] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.463176][ T7295] bridge_slave_1: left allmulticast mode
[   81.463185][ T7295] bridge_slave_1: left promiscuous mode
[   81.463317][ T7295] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.478671][ T7295] bond0: (slave bond_slave_0): Releasing backup interface
[   81.491877][ T7295] bond0: (slave bond_slave_1): Releasing backup interface
[   81.502839][ T7295] team0: Port device team_slave_0 removed
[   81.519846][ T7295] team0: Port device team_slave_1 removed
[   81.524709][ T7295] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.524720][ T7295] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.526782][ T7295] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.526792][ T7295] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.572426][ T7310] netlink: 'syz.0.422': attribute type 1 has an invalid length.
[   81.812315][    C3] vxcan1: j1939_tp_rxtimer: 0xffff888026f9f000: rx timeout, send abort
[   81.912036][ T7321] xt_MASQUERADE: bad MAP_IPS.
[   81.916465][ T7322] xt_MASQUERADE: bad MAP_IPS.
[   82.036677][   T43] kauditd_printk_skb: 116 callbacks suppressed
[   82.036689][   T43] audit: type=1800 audit(1789869149.831:1403): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16141 res=0 errno=0
[   82.062572][ T7329] vlan2: entered allmulticast mode
[   82.062583][ T7329] bond0: entered allmulticast mode
[   82.089736][   T43] audit: type=1800 audit(1789869149.881:1404): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16141 res=0 errno=0
[   82.116002][   T43] audit: type=1400 audit(1789869149.911:1405): avc:  denied  { getopt } for  pid=7330 comm="syz.3.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[   82.149287][   T43] audit: type=1800 audit(1789869149.941:1406): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16141 res=0 errno=0
[   82.208738][ T7337] FAULT_INJECTION: forcing a failure.
[   82.208738][ T7337] name failslab, interval 1, probability 0, space 0, times 0
[   82.208758][ T7337] CPU: 2 UID: 0 PID: 7337 Comm: syz.3.430 Not tainted syzkaller #0 PREEMPT(full) 
[   82.208771][ T7337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   82.208777][ T7337] Call Trace:
[   82.208787][ T7337]  <TASK>
[   82.208791][ T7337]  dump_stack_lvl+0x100/0x190
[   82.208818][ T7337]  should_fail_ex.cold+0x5/0xa
[   82.208835][ T7337]  should_failslab+0xc2/0x120
[   82.208853][ T7337]  kmem_cache_alloc_noprof+0x92/0x6a0
[   82.208866][ T7337]  ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[   82.208885][ T7337]  __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[   82.208906][ T7337]  mmu_topup_memory_caches+0x25/0x170
[   82.208920][ T7337]  kvm_mmu_load+0xe8/0x2580
[   82.208935][ T7337]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[   82.208953][ T7337]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[   82.208971][ T7337]  ? __pfx_kvm_mmu_load+0x10/0x10
[   82.208983][ T7337]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[   82.208995][ T7337]  ? kvm_check_and_inject_events+0x896/0x1050
[   82.209011][ T7337]  vcpu_run+0x395d/0x5e80
[   82.209024][ T7337]  ? irqentry_exit+0x24d/0xa10
[   82.209049][ T7337]  ? __pfx_vcpu_run+0x10/0x10
[   82.209064][ T7337]  ? lock_acquire+0x1d1/0x380
[   82.209077][ T7337]  ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0
[   82.209092][ T7337]  ? fpu_swap_kvm_fpstate+0x217/0x460
[   82.209108][ T7337]  ? __local_bh_enable_ip+0xa5/0x120
[   82.209123][ T7337]  ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0
[   82.209136][ T7337]  kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0
[   82.209154][ T7337]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   82.209167][ T7337]  ? lock_acquire+0x1d1/0x380
[   82.209179][ T7337]  ? do_raw_write_lock+0x11e/0x260
[   82.209193][ T7337]  ? find_held_lock+0x2b/0x80
[   82.209208][ T7337]  ? kvm_vcpu_ioctl+0x1531/0x1700
[   82.209223][ T7337]  ? kvm_vcpu_ioctl+0x1531/0x1700
[   82.209241][ T7337]  kvm_vcpu_ioctl+0x730/0x1700
[   82.209257][ T7337]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[   82.209273][ T7337]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   82.209287][ T7337]  ? do_vfs_ioctl+0x226/0x13e0
[   82.209298][ T7337]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   82.209308][ T7337]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[   82.209324][ T7337]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[   82.209339][ T7337]  ? __fget_files+0x34/0x3d0
[   82.209358][ T7337]  ? selinux_file_ioctl+0x13b/0x290
[   82.209370][ T7337]  ? selinux_file_ioctl+0xb6/0x290
[   82.209383][ T7337]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[   82.209399][ T7337]  __x64_sys_ioctl+0x18e/0x210
[   82.209411][ T7337]  do_syscall_64+0x123/0x790
[   82.209429][ T7337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.209446][ T7337] RIP: 0033:0x7fd79e19e159
[   82.209456][ T7337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   82.209467][ T7337] RSP: 002b:00007fd79f0cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   82.209482][ T7337] RAX: ffffffffffffffda RBX: 00007fd79e425fa0 RCX: 00007fd79e19e159
[   82.209489][ T7337] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b
[   82.209496][ T7337] RBP: 00007fd79f0cc090 R08: 0000000000000000 R09: 0000000000000000
[   82.209502][ T7337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   82.209508][ T7337] R13: 00007fd79e426038 R14: 00007fd79e425fa0 R15: 00007fff04d65aa8
[   82.209523][ T7337]  </TASK>
[   82.312588][    C3] vxcan1: j1939_tp_rxtimer: 0xffff88803496d400: rx timeout, send abort
[   82.313535][    C3] vxcan1: j1939_tp_rxtimer: 0xffff888026f9f000: abort rx timeout. Force session deactivation
[   82.355448][   T43] audit: type=1800 audit(1789869150.141:1407): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0
[   82.373816][   T43] audit: type=1800 audit(1789869150.161:1408): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16141 res=0 errno=0
[   82.429501][   T43] audit: type=1800 audit(1789869150.221:1409): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16141 res=0 errno=0
[   82.441280][   T43] audit: type=1800 audit(1789869150.231:1410): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0
[   82.452437][   T43] audit: type=1800 audit(1789869150.241:1411): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15754 res=0 errno=0
[   82.476824][   T43] audit: type=1800 audit(1789869150.271:1412): pid=7350 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.435" name="new_array" dev="sysfs" ino=64684 res=0 errno=0
[   82.477883][ T7345] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   82.477909][ T7345] SELinux: failed to load policy
[   82.508081][ T7350] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   82.521422][ T7350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.435'.
[   82.542684][ T7350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.435'.
[   82.554413][ T5803] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   82.554448][ T5803] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   82.554473][ T5803] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   82.554498][ T5803] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   82.618410][ T7357] FAULT_INJECTION: forcing a failure.
[   82.618410][ T7357] name failslab, interval 1, probability 0, space 0, times 0
[   82.618434][ T7357] CPU: 3 UID: 0 PID: 7357 Comm: syz.3.438 Not tainted syzkaller #0 PREEMPT(full) 
[   82.618447][ T7357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   82.618454][ T7357] Call Trace:
[   82.618458][ T7357]  <TASK>
[   82.618463][ T7357]  dump_stack_lvl+0x100/0x190
[   82.618484][ T7357]  should_fail_ex.cold+0x5/0xa
[   82.618500][ T7357]  should_failslab+0xc2/0x120
[   82.618515][ T7357]  kmem_cache_alloc_noprof+0x92/0x6a0
[   82.618528][ T7357]  ? mempool_init_node+0x2f7/0x6f0
[   82.618547][ T7357]  ? __pfx_mempool_alloc_slab+0x10/0x10
[   82.618565][ T7357]  mempool_init_node+0x2f7/0x6f0
[   82.618585][ T7357]  ? __pfx_mempool_alloc_slab+0x10/0x10
[   82.618601][ T7357]  ? __pfx_mempool_free_slab+0x10/0x10
[   82.618617][ T7357]  mempool_init_noprof+0x3a/0x50
[   82.618636][ T7357]  bioset_init+0x37e/0x8a0
[   82.618653][ T7357]  ? __pfx_bioset_init+0x10/0x10
[   82.618667][ T7357]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[   82.618684][ T7357]  ? percpu_ref_init+0xec/0x3f0
[   82.618702][ T7357]  ? percpu_ref_init+0x244/0x3f0
[   82.618719][ T7357]  mddev_init+0x131/0x820
[   82.618735][ T7357]  md_alloc+0xc7/0x10a0
[   82.618754][ T7357]  md_probe+0x73/0xf0
[   82.618770][ T7357]  ? __pfx_md_probe+0x10/0x10
[   82.618785][ T7357]  blk_probe_dev+0x149/0x1e0
[   82.618799][ T7357]  blk_request_module+0x16/0xc0
[   82.618816][ T7357]  blkdev_get_no_open+0x9b/0xf0
[   82.618831][ T7357]  bdev_file_open_by_dev+0x70/0x210
[   82.618844][ T7357]  swsusp_check+0x72/0x470
[   82.618855][ T7357]  software_resume+0x6f/0x330
[   82.618870][ T7357]  resume_store+0x248/0x460
[   82.618885][ T7357]  ? __pfx_resume_store+0x10/0x10
[   82.618903][ T7357]  ? find_held_lock+0x2b/0x80
[   82.618919][ T7357]  ? sysfs_file_kobj+0xe4/0x290
[   82.618932][ T7357]  ? sysfs_file_kobj+0xe4/0x290
[   82.618946][ T7357]  ? __pfx_resume_store+0x10/0x10
[   82.618960][ T7357]  kobj_attr_store+0x58/0x80
[   82.618971][ T7357]  ? __pfx_kobj_attr_store+0x10/0x10
[   82.618982][ T7357]  sysfs_kf_write+0xf2/0x150
[   82.618997][ T7357]  kernfs_fop_write_iter+0x3e0/0x5f0
[   82.619008][ T7357]  ? __pfx_sysfs_kf_write+0x10/0x10
[   82.619023][ T7357]  vfs_write+0x6af/0x1050
[   82.619035][ T7357]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[   82.619048][ T7357]  ? __pfx_vfs_write+0x10/0x10
[   82.619058][ T7357]  ? find_held_lock+0x2b/0x80
[   82.619083][ T7357]  ksys_write+0x12a/0x250
[   82.619094][ T7357]  ? __pfx_ksys_write+0x10/0x10
[   82.619109][ T7357]  do_syscall_64+0x123/0x790
[   82.619127][ T7357]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.619139][ T7357] RIP: 0033:0x7fd79e19e159
[   82.619149][ T7357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   82.619160][ T7357] RSP: 002b:00007fd79f0cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   82.619171][ T7357] RAX: ffffffffffffffda RBX: 00007fd79e425fa0 RCX: 00007fd79e19e159
[   82.619178][ T7357] RDX: 0000000000000012 RSI: 0000200000000180 RDI: 0000000000000003
[   82.619185][ T7357] RBP: 00007fd79f0cc090 R08: 0000000000000000 R09: 0000000000000000
[   82.619192][ T7357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   82.619198][ T7357] R13: 00007fd79e426038 R14: 00007fd79e425fa0 R15: 00007fff04d65aa8
[   82.619213][ T7357]  </TASK>
[   82.619387][ T7357] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   82.812647][    C3] vxcan1: j1939_tp_rxtimer: 0xffff88803496d400: abort rx timeout. Force session deactivation
[   82.951471][ T7367] program syz.3.441 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   83.064063][ T7383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.444'.
[   83.067326][ T7383] netlink: 60 bytes leftover after parsing attributes in process `syz.3.444'.
[   83.534403][   T42] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[   83.547478][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.448'.
[   83.550792][ T7395] bond1 (unregistering): Released all slaves
[   83.688626][   T42] usb 8-1: New USB device found, idVendor=19d2, idProduct=ff62, bcdDevice=55.f8
[   83.692386][   T42] usb 8-1: config 1 has an invalid interface number: 65 but max is 1
[   83.692409][   T42] usb 8-1: config 1 has an invalid interface number: 39 but max is 1
[   83.692427][   T42] usb 8-1: config 1 has an invalid interface number: 209 but max is 1
[   83.692445][   T42] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   83.692461][   T42] usb 8-1: config 1 has 3 interfaces, different from the descriptor's value: 2
[   83.692477][   T42] usb 8-1: config 1 has no interface number 0
[   83.692491][   T42] usb 8-1: config 1 has no interface number 1
[   83.692503][   T42] usb 8-1: config 1 has no interface number 2
[   83.692563][   T42] usb 8-1: config 1 interface 65 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[   83.692582][   T42] usb 8-1: config 1 interface 65 altsetting 7 endpoint 0x2 has an invalid bInterval 59, changing to 7
[   83.692617][   T42] usb 8-1: config 1 interface 65 altsetting 7 has a duplicate endpoint with address 0x2, skipping
[   83.692635][   T42] usb 8-1: config 1 interface 65 altsetting 7 endpoint 0x3 has invalid maxpacket 512, setting to 64
[   83.692684][   T42] usb 8-1: config 1 interface 65 altsetting 7 has a duplicate endpoint with address 0x5, skipping
[   83.692703][   T42] usb 8-1: config 1 interface 65 altsetting 7 has a duplicate endpoint with address 0x5, skipping
[   83.692726][   T42] usb 8-1: config 1 interface 65 altsetting 7 has a duplicate endpoint with address 0x2, skipping
[   83.692766][   T42] usb 8-1: config 1 interface 39 altsetting 9 bulk endpoint 0xA has invalid maxpacket 1023
[   83.692801][   T42] usb 8-1: config 1 interface 39 altsetting 9 has a duplicate endpoint with address 0xA, skipping
[   83.692819][   T42] usb 8-1: config 1 interface 39 altsetting 9 endpoint 0x7 has invalid maxpacket 512, setting to 64
[   83.692856][   T42] usb 8-1: config 1 interface 39 altsetting 9 endpoint 0x9 has invalid maxpacket 1624, setting to 64
[   83.692879][   T42] usb 8-1: config 1 interface 39 altsetting 9 has 4 endpoint descriptors, different from the interface descriptor's value: 15
[   83.692902][   T42] usb 8-1: too many endpoints for config 1 interface 209 altsetting 138: 105, using maximum allowed: 30
[   83.692946][   T42] usb 8-1: config 1 interface 209 altsetting 138 bulk endpoint 0xD has invalid maxpacket 16
[   83.692965][   T42] usb 8-1: config 1 interface 209 altsetting 138 has an invalid descriptor for endpoint zero, skipping
[   83.692982][   T42] usb 8-1: config 1 interface 209 altsetting 138 has an endpoint descriptor with address 0xFA, changing to 0x8A
[   83.693003][   T42] usb 8-1: config 1 interface 209 altsetting 138 endpoint 0x8A has an invalid bInterval 141, changing to 7
[   83.693025][   T42] usb 8-1: config 1 interface 209 altsetting 138 endpoint 0x8A has invalid maxpacket 25237, setting to 1024
[   83.693080][   T42] usb 8-1: config 1 interface 209 altsetting 138 has a duplicate endpoint with address 0x2, skipping
[   83.693098][   T42] usb 8-1: config 1 interface 209 altsetting 138 has an invalid descriptor for endpoint zero, skipping
[   83.693116][   T42] usb 8-1: config 1 interface 209 altsetting 138 has a duplicate endpoint with address 0x4, skipping
[   83.693134][   T42] usb 8-1: config 1 interface 209 altsetting 138 bulk endpoint 0x6 has invalid maxpacket 1023
[   83.693170][   T42] usb 8-1: config 1 interface 209 altsetting 138 has a duplicate endpoint with address 0xA, skipping
[   83.693190][   T42] usb 8-1: config 1 interface 209 altsetting 138 endpoint 0xF has invalid maxpacket 65363, setting to 64
[   83.693212][   T42] usb 8-1: config 1 interface 209 altsetting 138 has 12 endpoint descriptors, different from the interface descriptor's value: 105
[   83.693233][   T42] usb 8-1: config 1 interface 65 has no altsetting 0
[   83.693248][   T42] usb 8-1: config 1 interface 39 has no altsetting 0
[   83.693264][   T42] usb 8-1: config 1 interface 209 has no altsetting 0
[   83.697107][   T42] usb 8-1: Dual-Role OTG device on HNP port
[   83.697398][   T42] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.697415][   T42] usb 8-1: Product: Ѓ
[   83.697426][   T42] usb 8-1: Manufacturer: 歆螂࣪Ὶ䀇⎫㼮滛ᓟ昈졓㓚塉牞쌶쨠ྛ嚬≡尹ϐ䕸ꯜ㩿偂ㄧ鋙巙﭅朅⊋檃讙䣇ἑ解㻇ퟺ撕፹븑槓໑燎꼤ุ㬗ᴣ⠬緫벂旸え兖Ͼ훲୙쇬묎㥼䁛ޑ⇿
[   83.697447][   T42] usb 8-1: SerialNumber: syz
[   83.714790][ T7400] netlink: 20 bytes leftover after parsing attributes in process `syz.0.450'.
[   83.816927][ T7404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.453'.
[   83.819803][ T7404] netlink: 60 bytes leftover after parsing attributes in process `syz.0.453'.
[   83.873941][   T72] usb 7-1: USB disconnect, device number 17
[   83.894536][   T72] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[   83.900166][   T72] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[   83.900710][   T72] ti_usb_3410_5052 7-1:2.0: device disconnected
[   84.146479][   T42] option 8-1:1.65: GSM modem (1-port) converter detected
[   84.192549][   T42] usb 8-1: USB disconnect, device number 14
[   84.203506][   T42] option 8-1:1.65: device disconnected
[   84.466443][    T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[   84.545746][ T6474] net_ratelimit: 48 callbacks suppressed
[   84.614860][    T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   84.615789][    T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   84.615807][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   84.615818][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   84.616731][    T9] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   84.616742][    T9] usb 6-1: Manufacturer: syz
[   84.618382][    T9] usb 6-1: config 0 descriptor??
[   84.623992][    T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[   84.817274][ T7420] kvm_do_msr_access: 186 callbacks suppressed
[   84.914922][ T7432] FAULT_INJECTION: forcing a failure.
[   84.914922][ T7432] name failslab, interval 1, probability 0, space 0, times 0
[   84.914941][ T7432] CPU: 2 UID: 0 PID: 7432 Comm: syz.3.463 Not tainted syzkaller #0 PREEMPT(full) 
[   84.914954][ T7432] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   84.914962][ T7432] Call Trace:
[   84.914967][ T7432]  <TASK>
[   84.914972][ T7432]  dump_stack_lvl+0x100/0x190
[   84.914994][ T7432]  should_fail_ex.cold+0x5/0xa
[   84.915013][ T7432]  should_failslab+0xc2/0x120
[   84.915029][ T7432]  __kmalloc_noprof+0xfc/0x840
[   84.915043][ T7432]  ? ima_write_template_field_data+0x59/0x1d0
[   84.915063][ T7432]  ima_write_template_field_data+0x59/0x1d0
[   84.915083][ T7432]  ima_eventname_init_common+0x1c6/0x2a0
[   84.915101][ T7432]  ? __pfx_ima_eventname_init_common+0x10/0x10
[   84.915120][ T7432]  ? __kmalloc_noprof+0x350/0x840
[   84.915132][ T7432]  ? ima_alloc_init_template+0x19d/0x6d0
[   84.915172][ T7432]  ima_alloc_init_template+0x399/0x6d0
[   84.915192][ T7432]  ima_store_measurement+0x1e3/0x5b0
[   84.915214][ T7432]  ? __pfx_ima_store_measurement+0x10/0x10
[   84.915234][ T7432]  ? __pfx_ima_get_hash_algo+0x10/0x10
[   84.915250][ T7432]  process_measurement+0x19cc/0x2350
[   84.915269][ T7432]  ? avc_has_perm_noaudit+0x11e/0x3b0
[   84.915287][ T7432]  ? __pfx_process_measurement+0x10/0x10
[   84.915306][ T7432]  ? avc_has_perm+0x135/0x1e0
[   84.915323][ T7432]  ? __pfx_avc_has_perm+0x10/0x10
[   84.915339][ T7432]  ? hook_file_open+0x248/0x8e0
[   84.915367][ T7432]  ? path_get+0x61/0x80
[   84.915385][ T7432]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[   84.915405][ T7432]  ima_file_check+0xc3/0x110
[   84.915419][ T7432]  ? __pfx_ima_file_check+0x10/0x10
[   84.915435][ T7432]  security_file_post_open+0xc4/0x210
[   84.915449][ T7432]  path_openat+0x5cd/0x2440
[   84.915466][ T7432]  ? __pfx_path_openat+0x10/0x10
[   84.915484][ T7432]  do_file_open+0x20e/0x430
[   84.915500][ T7432]  ? __pfx_do_file_open+0x10/0x10
[   84.915525][ T7432]  ? _raw_spin_unlock+0x28/0x50
[   84.915539][ T7432]  ? alloc_fd+0x471/0x7a0
[   84.915558][ T7432]  do_sys_openat2+0x10f/0x1e0
[   84.915574][ T7432]  ? __pfx_do_sys_openat2+0x10/0x10
[   84.915595][ T7432]  __x64_sys_openat+0x12d/0x210
[   84.915611][ T7432]  ? __pfx___x64_sys_openat+0x10/0x10
[   84.915633][ T7432]  do_syscall_64+0x123/0x790
[   84.915652][ T7432]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.915665][ T7432] RIP: 0033:0x7fd79e15e98e
[   84.915676][ T7432] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   84.915687][ T7432] RSP: 002b:00007fd79f0cbf18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   84.915698][ T7432] RAX: ffffffffffffffda RBX: 00007fd79f0cc6c0 RCX: 00007fd79e15e98e
[   84.915706][ T7432] RDX: 0000000000000000 RSI: 00007fd79e2347a6 RDI: ffffffffffffff9c
[   84.915713][ T7432] RBP: 00007fd79e23506b R08: 0000000000000000 R09: 0000000000000000
[   84.915720][ T7432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   84.915727][ T7432] R13: 00007fd79e426038 R14: 00007fd79e425fa0 R15: 00007fff04d65aa8
[   84.915742][ T7432]  </TASK>
[   85.016451][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.465'.
[   85.016810][ T7436] netlink: 60 bytes leftover after parsing attributes in process `syz.3.465'.
[   85.107586][ T1349] libceph: connect (1)[c::]:6789 error -101
[   85.107803][ T1349] libceph: mon0 (1)[c::]:6789 connect error
[   85.115909][ T1349] libceph: connect (1)[c::]:6789 error -101
[   85.116101][ T1349] libceph: mon0 (1)[c::]:6789 connect error
[   85.214340][   T57] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   85.237034][ T7438] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input8
[   85.364316][   T57] usb 5-1: Using ep0 maxpacket: 8
[   85.368516][   T57] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   85.369394][   T57] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[   85.369429][   T57] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   85.369441][   T57] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   85.369454][   T57] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   85.369466][   T57] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   85.369495][   T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.375736][ T1349] libceph: connect (1)[c::]:6789 error -101
[   85.375847][ T1349] libceph: mon0 (1)[c::]:6789 connect error
[   85.579377][   T57] usb 5-1: usb_control_msg returned -32
[   85.579396][   T57] usbtmc 5-1:16.0: can't read capabilities
[   85.746057][ T5739] Bluetooth: hci0: Opcode 0x0c13 failed: -110
[   85.746338][ T5739] Bluetooth: hci0: command 0x0c1a tx timeout
[   85.885756][ T1349] libceph: connect (1)[c::]:6789 error -101
[   85.885875][ T1349] libceph: mon0 (1)[c::]:6789 connect error
[   85.918933][ T7442] ceph: No mds server is up or the cluster is laggy
[   85.932238][   T64] Bluetooth: hci0: ACL packet for unknown connection handle 200
[   86.045182][ T7453] syzkaller0: entered promiscuous mode
[   86.045198][ T7453] syzkaller0: entered allmulticast mode
[   86.051419][ T7453] syzkaller0: left promiscuous mode
[   86.051437][ T7453] syzkaller0: left allmulticast mode
[   86.066357][ T7453] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   87.153614][   T43] kauditd_printk_skb: 114 callbacks suppressed
[   87.153628][   T43] audit: type=1800 audit(1789869154.941:1527): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16141 res=0 errno=0
[   87.162606][   T43] audit: type=1400 audit(1789869154.951:1528): avc:  denied  { write } for  pid=7478 comm="syz.3.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   87.267976][ T1349] usb 6-1: USB disconnect, device number 11
[   87.313175][   T43] audit: type=1800 audit(1789869155.101:1529): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0
[   87.493915][   T43] audit: type=1800 audit(1789869155.281:1530): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0
[   87.505344][   T43] audit: type=1800 audit(1789869155.301:1531): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=125482 res=0 errno=0
[   87.512202][   T43] audit: type=1800 audit(1789869155.301:1532): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=125492 res=0 errno=0
[   87.556420][   T43] audit: type=1800 audit(1789869155.351:1533): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0
[   87.568910][ T7506] __nla_validate_parse: 1 callbacks suppressed
[   87.568920][ T7506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.477'.
[   87.718583][   T43] audit: type=1800 audit(1789869155.511:1534): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0
[   87.740634][ T7519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.478'.
[   87.771339][   T43] audit: type=1800 audit(1789869155.561:1535): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0
[   87.808663][   T43] audit: type=1800 audit(1789869155.601:1536): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0
[   87.820726][ T7527] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   87.969793][ T5731] usb 5-1: USB disconnect, device number 9
[   87.998261][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.483'.
[   87.998280][ T7540] netlink: 16 bytes leftover after parsing attributes in process `syz.3.483'.
[   88.009056][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.484'.
[   88.012751][ T7542] /dev/sg0: Can't lookup blockdev
[   88.124366][ T5897] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[   88.207347][ T7551] netlink: 13 bytes leftover after parsing attributes in process `syz.0.487'.
[   88.250826][ T7555] netlink: 'syz.0.488': attribute type 63 has an invalid length.
[   88.274541][ T5897] usb 6-1: Using ep0 maxpacket: 8
[   88.275195][ T5897] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   88.278423][ T5897] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[   88.278472][ T5897] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   88.278488][ T5897] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   88.278504][ T5897] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   88.278521][ T5897] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   88.278567][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.379185][ T7557] FAULT_INJECTION: forcing a failure.
[   88.379185][ T7557] name failslab, interval 1, probability 0, space 0, times 0
[   88.379213][ T7557] CPU: 3 UID: 0 PID: 7557 Comm: syz.3.490 Not tainted syzkaller #0 PREEMPT(full) 
[   88.379233][ T7557] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   88.379259][ T7557] Call Trace:
[   88.379267][ T7557]  <TASK>
[   88.379275][ T7557]  dump_stack_lvl+0x100/0x190
[   88.379308][ T7557]  should_fail_ex.cold+0x5/0xa
[   88.379336][ T7557]  should_failslab+0xc2/0x120
[   88.379370][ T7557]  __kmalloc_noprof+0xfc/0x840
[   88.379389][ T7557]  ? do_sys_openat2+0x10f/0x1e0
[   88.379412][ T7557]  ? ima_write_template_field_data+0x59/0x1d0
[   88.379446][ T7557]  ima_write_template_field_data+0x59/0x1d0
[   88.379477][ T7557]  ima_eventdigest_init_common+0x158/0x460
[   88.379508][ T7557]  ? __pfx_ima_eventdigest_init_common+0x10/0x10
[   88.379552][ T7557]  ? __kmalloc_noprof+0x350/0x840
[   88.379573][ T7557]  ? ima_alloc_init_template+0x19d/0x6d0
[   88.379600][ T7557]  ima_alloc_init_template+0x399/0x6d0
[   88.379628][ T7557]  ima_store_measurement+0x1e3/0x5b0
[   88.379653][ T7557]  ? __pfx_ima_store_measurement+0x10/0x10
[   88.379686][ T7557]  ? __pfx_ima_get_hash_algo+0x10/0x10
[   88.379710][ T7557]  process_measurement+0x19cc/0x2350
[   88.379740][ T7557]  ? avc_has_perm_noaudit+0x11e/0x3b0
[   88.379766][ T7557]  ? __pfx_process_measurement+0x10/0x10
[   88.379796][ T7557]  ? avc_has_perm+0x135/0x1e0
[   88.379823][ T7557]  ? __pfx_avc_has_perm+0x10/0x10
[   88.379846][ T7557]  ? hook_file_open+0x248/0x8e0
[   88.379891][ T7557]  ? path_get+0x61/0x80
[   88.379919][ T7557]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[   88.379951][ T7557]  ima_file_check+0xc3/0x110
[   88.379973][ T7557]  ? __pfx_ima_file_check+0x10/0x10
[   88.380001][ T7557]  security_file_post_open+0xc4/0x210
[   88.380023][ T7557]  path_openat+0x5cd/0x2440
[   88.380051][ T7557]  ? __pfx_path_openat+0x10/0x10
[   88.380081][ T7557]  do_file_open+0x20e/0x430
[   88.380106][ T7557]  ? __pfx_do_file_open+0x10/0x10
[   88.380149][ T7557]  ? _raw_spin_unlock+0x28/0x50
[   88.380172][ T7557]  ? alloc_fd+0x471/0x7a0
[   88.380203][ T7557]  do_sys_openat2+0x10f/0x1e0
[   88.380229][ T7557]  ? __pfx_do_sys_openat2+0x10/0x10
[   88.380253][ T7557]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   88.380283][ T7557]  ? __fget_files+0x21f/0x3d0
[   88.380311][ T7557]  __x64_sys_openat+0x12d/0x210
[   88.380337][ T7557]  ? __pfx___x64_sys_openat+0x10/0x10
[   88.380365][ T7557]  ? ksys_write+0x1ac/0x250
[   88.380393][ T7557]  do_syscall_64+0x123/0x790
[   88.380422][ T7557]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.380440][ T7557] RIP: 0033:0x7fd79e15e98e
[   88.380455][ T7557] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   88.380472][ T7557] RSP: 002b:00007fd79f0cbf18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   88.380490][ T7557] RAX: ffffffffffffffda RBX: 00007fd79f0cc6c0 RCX: 00007fd79e15e98e
[   88.380501][ T7557] RDX: 0000000000000000 RSI: 00007fd79e2347a6 RDI: ffffffffffffff9c
[   88.380514][ T7557] RBP: 00007fd79f0cc090 R08: 0000000000000000 R09: 0000000000000000
[   88.380524][ T7557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   88.380536][ T7557] R13: 00007fd79e426038 R14: 00007fd79e425fa0 R15: 00007fff04d65aa8
[   88.380562][ T7557]  </TASK>
[   88.408589][   T64] Bluetooth: hci1: ACL packet for unknown connection handle 200
[   88.487538][ T5897] usb 6-1: GET_CAPABILITIES returned 0
[   88.487568][ T5897] usbtmc 6-1:16.0: can't read capabilities
[   89.085224][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.498'.
[   89.197654][ T7582] overlayfs: missing 'workdir'
[   89.199928][ T7582] netlink: 'syz.2.499': attribute type 1 has an invalid length.
[   89.227552][ T7582] 8021q: adding VLAN 0 to HW filter on device bond2
[   89.236181][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.499'.
[   89.355584][ T7591] netlink: 84 bytes leftover after parsing attributes in process `syz.3.501'.
[   89.355800][ T7591] netlink: 'syz.3.501': attribute type 1 has an invalid length.
[   89.455658][   T64] Bluetooth: hci2: unexpected event for opcode 0x0405
[   89.472484][ T7598] netlink: 596 bytes leftover after parsing attributes in process `syz.3.504'.
[   89.664272][    C2] net_ratelimit: 181 callbacks suppressed
[   89.700191][ T7615] comedi comedi4: bad chanlist[0]=0x00000080 chan=128 range length=1
[   89.757424][ T7621] syzkaller1: entered promiscuous mode
[   89.757432][ T7621] syzkaller1: entered allmulticast mode
[   90.041478][ T7634] FAULT_INJECTION: forcing a failure.
[   90.041478][ T7634] name failslab, interval 1, probability 0, space 0, times 0
[   90.041499][ T7634] CPU: 0 UID: 0 PID: 7634 Comm: syz.0.510 Not tainted syzkaller #0 PREEMPT(full) 
[   90.041519][ T7634] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   90.041530][ T7634] Call Trace:
[   90.041537][ T7634]  <TASK>
[   90.041544][ T7634]  dump_stack_lvl+0x100/0x190
[   90.041574][ T7634]  should_fail_ex.cold+0x5/0xa
[   90.041600][ T7634]  should_failslab+0xc2/0x120
[   90.041623][ T7634]  __kmalloc_cache_noprof+0x91/0x6d0
[   90.041650][ T7634]  ? __pfx_path_has_submounts+0x10/0x10
[   90.041696][ T7634]  ? autofs_wait+0xc30/0x1b50
[   90.041726][ T7634]  autofs_wait+0xc30/0x1b50
[   90.041757][ T7634]  ? __pfx_autofs_wait+0x10/0x10
[   90.041791][ T7634]  ? do_raw_spin_unlock+0x145/0x1e0
[   90.041815][ T7634]  ? find_held_lock+0x2b/0x80
[   90.041843][ T7634]  autofs_mount_wait+0x132/0x3b0
[   90.041871][ T7634]  autofs_d_automount+0x490/0x950
[   90.041916][ T7634]  __traverse_mounts+0x1b9/0x8a0
[   90.041945][ T7634]  step_into_slowpath+0xb7e/0xf90
[   90.041966][ T7634]  ? rcu_is_watching+0x13/0xc0
[   90.041993][ T7634]  ? __pfx_step_into_slowpath+0x10/0x10
[   90.042011][ T7634]  ? lookup_slow+0x5b/0x70
[   90.042035][ T7634]  ? lookup_slow+0x5b/0x70
[   90.042067][ T7634]  path_lookupat+0x58b/0xc40
[   90.042090][ T7634]  filename_lookup+0x202/0x590
[   90.042113][ T7634]  ? __pfx_filename_lookup+0x10/0x10
[   90.042167][ T7634]  ? strncpy_from_user+0x19d/0x2d0
[   90.042193][ T7634]  ? do_getname+0x191/0x390
[   90.042225][ T7634]  do_fchownat+0xe6/0x1f0
[   90.042250][ T7634]  ? __pfx_do_fchownat+0x10/0x10
[   90.042271][ T7634]  ? ksys_write+0x1ac/0x250
[   90.042290][ T7634]  ? __pfx_ksys_write+0x10/0x10
[   90.042313][ T7634]  __x64_sys_lchown+0x7e/0xc0
[   90.042332][ T7634]  ? lockdep_hardirqs_on+0x7d/0x110
[   90.042361][ T7634]  do_syscall_64+0x123/0x790
[   90.042389][ T7634]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.042408][ T7634] RIP: 0033:0x7f941699e159
[   90.042424][ T7634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   90.042440][ T7634] RSP: 002b:00007f941788c028 EFLAGS: 00000246 ORIG_RAX: 000000000000005e
[   90.042457][ T7634] RAX: ffffffffffffffda RBX: 00007f9416c25fa0 RCX: 00007f941699e159
[   90.042471][ T7634] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040
[   90.042482][ T7634] RBP: 00007f941788c090 R08: 0000000000000000 R09: 0000000000000000
[   90.042494][ T7634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   90.042505][ T7634] R13: 00007f9416c26038 R14: 00007f9416c25fa0 R15: 00007ffd688cb7c8
[   90.042531][ T7634]  </TASK>
[   90.255414][ T7649] syzkaller1: entered promiscuous mode
[   90.255427][ T7649] syzkaller1: entered allmulticast mode
[   90.256697][ T7649] FAULT_INJECTION: forcing a failure.
[   90.256697][ T7649] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   90.256726][ T7649] CPU: 3 UID: 0 PID: 7649 Comm: syz.0.513 Not tainted syzkaller #0 PREEMPT(full) 
[   90.256742][ T7649] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   90.256752][ T7649] Call Trace:
[   90.256759][ T7649]  <TASK>
[   90.256766][ T7649]  dump_stack_lvl+0x100/0x190
[   90.256795][ T7649]  should_fail_ex.cold+0x5/0xa
[   90.256821][ T7649]  _copy_from_iter+0x1f4/0x1690
[   90.256847][ T7649]  ? __pfx__copy_from_iter+0x10/0x10
[   90.256862][ T7649]  ? _copy_from_iter+0x270/0x1690
[   90.256885][ T7649]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[   90.256910][ T7649]  skb_copy_datagram_from_iter+0x11f/0x720
[   90.256930][ T7649]  ? _kstrtoull+0x144/0x200
[   90.256952][ T7649]  ? iov_iter_advance+0xac/0x6d0
[   90.256963][ T7649]  ? __pfx__kstrtoull+0x10/0x10
[   90.256988][ T7649]  tun_get_user+0x1866/0x3cc0
[   90.257018][ T7649]  ? __lock_acquire+0x5c0/0x1f40
[   90.257038][ T7649]  ? __pfx_tun_get_user+0x10/0x10
[   90.257056][ T7649]  ? __pfx_ref_tracker_alloc+0x10/0x10
[   90.257087][ T7649]  ? find_held_lock+0x2b/0x80
[   90.257110][ T7649]  ? tun_get+0x191/0x370
[   90.257128][ T7649]  ? tun_get+0x191/0x370
[   90.257150][ T7649]  tun_chr_write_iter+0xdc/0x200
[   90.257169][ T7649]  vfs_write+0x6af/0x1050
[   90.257204][ T7649]  ? __pfx_tun_chr_write_iter+0x10/0x10
[   90.257230][ T7649]  ? __pfx_vfs_write+0x10/0x10
[   90.257246][ T7649]  ? find_held_lock+0x2b/0x80
[   90.257281][ T7649]  ksys_write+0x12a/0x250
[   90.257299][ T7649]  ? __pfx_ksys_write+0x10/0x10
[   90.257324][ T7649]  do_syscall_64+0x123/0x790
[   90.257353][ T7649]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.257367][ T7649] RIP: 0033:0x7f941699e159
[   90.257381][ T7649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   90.257399][ T7649] RSP: 002b:00007f941788c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   90.257417][ T7649] RAX: ffffffffffffffda RBX: 00007f9416c25fa0 RCX: 00007f941699e159
[   90.257429][ T7649] RDX: 000000000000003f RSI: 0000200000000280 RDI: 0000000000000003
[   90.257440][ T7649] RBP: 00007f941788c090 R08: 0000000000000000 R09: 0000000000000000
[   90.257451][ T7649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   90.257461][ T7649] R13: 00007f9416c26038 R14: 00007f9416c25fa0 R15: 00007ffd688cb7c8
[   90.257479][ T7649]  </TASK>
[   90.402981][ T7664] FAULT_INJECTION: forcing a failure.
[   90.402981][ T7664] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   90.403009][ T7664] CPU: 0 UID: 0 PID: 7664 Comm: syz.3.517 Not tainted syzkaller #0 PREEMPT(full) 
[   90.403029][ T7664] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   90.403041][ T7664] Call Trace:
[   90.403048][ T7664]  <TASK>
[   90.403056][ T7664]  dump_stack_lvl+0x100/0x190
[   90.403088][ T7664]  should_fail_ex.cold+0x5/0xa
[   90.403110][ T7664]  ? prepare_alloc_pages+0x16d/0x5b0
[   90.403134][ T7664]  should_fail_alloc_page+0xeb/0x140
[   90.403159][ T7664]  prepare_alloc_pages+0x1f0/0x5b0
[   90.403186][ T7664]  __alloc_frozen_pages_noprof+0x1e9/0x3300
[   90.403216][ T7664]  ? __lock_acquire+0x5c0/0x1f40
[   90.403240][ T7664]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   90.403258][ T7664]  ? __lock_acquire+0x5c0/0x1f40
[   90.403284][ T7664]  ? __lock_acquire+0x5c0/0x1f40
[   90.403307][ T7664]  ? lock_acquire+0x1d1/0x380
[   90.403333][ T7664]  ? lock_acquire+0x1d1/0x380
[   90.403351][ T7664]  ? is_bpf_text_address+0x25/0x1a0
[   90.403374][ T7664]  ? find_held_lock+0x2b/0x80
[   90.403396][ T7664]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   90.403419][ T7664]  ? policy_nodemask+0xed/0x4f0
[   90.403446][ T7664]  alloc_pages_mpol+0x201/0x550
[   90.403471][ T7664]  ? __pfx_alloc_pages_mpol+0x10/0x10
[   90.403494][ T7664]  ? arch_stack_walk+0xa6/0xf0
[   90.403523][ T7664]  ? __pfx_mac80211_hwsim_change_chanctx+0x10/0x10
[   90.403546][ T7664]  ___kmalloc_large_node+0xe8/0x130
[   90.403594][ T7664]  ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10
[   90.403611][ T7664]  __kmalloc_large_node_noprof+0x1c/0x70
[   90.403646][ T7664]  ? __pfx_mac80211_hwsim_remove_chanctx+0x10/0x10
[   90.403667][ T7664]  __kmalloc_noprof+0x5a8/0x840
[   90.403688][ T7664]  ? wiphy_new_nm+0x701/0x2350
[   90.403712][ T7664]  ? __pfx_mac80211_hwsim_remove_chanctx+0x10/0x10
[   90.403731][ T7664]  ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10
[   90.403749][ T7664]  ? __pfx_mac80211_hwsim_change_chanctx+0x10/0x10
[   90.403770][ T7664]  wiphy_new_nm+0x701/0x2350
[   90.403790][ T7664]  ? __pfx_mac80211_hwsim_remove_chanctx+0x10/0x10
[   90.403812][ T7664]  ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10
[   90.403831][ T7664]  ? __pfx_mac80211_hwsim_change_chanctx+0x10/0x10
[   90.403851][ T7664]  ieee80211_alloc_hw_nm+0x45d/0x2310
[   90.403884][ T7664]  ? __local_bh_enable_ip+0xa5/0x120
[   90.403909][ T7664]  mac80211_hwsim_new_radio+0x1de/0x6510
[   90.403945][ T7664]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   90.403966][ T7664]  ? __nla_validate_parse+0x1e7/0x28b0
[   90.403994][ T7664]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   90.404027][ T7664]  hwsim_new_radio_nl+0xc6b/0x13f0
[   90.404052][ T7664]  ? trace_kmalloc+0xeb/0x110
[   90.404075][ T7664]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   90.404106][ T7664]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0
[   90.404131][ T7664]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0
[   90.404162][ T7664]  genl_family_rcv_msg_doit+0x214/0x300
[   90.404188][ T7664]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   90.404219][ T7664]  ? bpf_lsm_capable+0x9/0x10
[   90.404244][ T7664]  ? security_capable+0x80/0x260
[   90.404273][ T7664]  ? ns_capable+0xd2/0xf0
[   90.404294][ T7664]  genl_rcv_msg+0x560/0x800
[   90.404318][ T7664]  ? __pfx_genl_rcv_msg+0x10/0x10
[   90.404342][ T7664]  ? __lock_acquire+0x5c0/0x1f40
[   90.404361][ T7664]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   90.404395][ T7664]  netlink_rcv_skb+0x159/0x420
[   90.404416][ T7664]  ? __pfx_genl_rcv_msg+0x10/0x10
[   90.404438][ T7664]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   90.404469][ T7664]  ? netlink_deliver_tap+0x1ae/0xcc0
[   90.404494][ T7664]  genl_rcv+0x28/0x40
[   90.404514][ T7664]  netlink_unicast+0x585/0x850
[   90.404539][ T7664]  ? __pfx_netlink_unicast+0x10/0x10
[   90.404564][ T7664]  netlink_sendmsg+0x8b0/0xda0
[   90.404590][ T7664]  ? __pfx_netlink_sendmsg+0x10/0x10
[   90.404615][ T7664]  ? selinux_socket_sendmsg+0x198/0x2f0
[   90.404640][ T7664]  ____sys_sendmsg+0xa4d/0xbe0
[   90.404665][ T7664]  ? __pfx_netlink_sendmsg+0x10/0x10
[   90.404687][ T7664]  ? __pfx_____sys_sendmsg+0x10/0x10
[   90.404720][ T7664]  ? lock_acquire+0x1d1/0x380
[   90.404739][ T7664]  ? get_pid_task+0x2a/0x250
[   90.404767][ T7664]  ___sys_sendmsg+0x190/0x1e0
[   90.404785][ T7664]  ? __pfx____sys_sendmsg+0x10/0x10
[   90.404803][ T7664]  ? get_pid_task+0x106/0x250
[   90.404838][ T7664]  ? find_held_lock+0x2b/0x80
[   90.404885][ T7664]  __sys_sendmsg+0x160/0x210
[   90.404906][ T7664]  ? __pfx___sys_sendmsg+0x10/0x10
[   90.404944][ T7664]  do_syscall_64+0x123/0x790
[   90.404972][ T7664]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.404991][ T7664] RIP: 0033:0x7fd79e19e159
[   90.405007][ T7664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   90.405022][ T7664] RSP: 002b:00007fd79f0cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   90.405042][ T7664] RAX: ffffffffffffffda RBX: 00007fd79e425fa0 RCX: 00007fd79e19e159
[   90.405054][ T7664] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003
[   90.405066][ T7664] RBP: 00007fd79f0cc090 R08: 0000000000000000 R09: 0000000000000000
[   90.405078][ T7664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   90.405089][ T7664] R13: 00007fd79e426038 R14: 00007fd79e425fa0 R15: 00007fff04d65aa8
[   90.405116][ T7664]  </TASK>
[   90.515334][ T7669] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[   90.515603][ T7669] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[   90.515620][ T7669] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[   90.515633][ T7669] UDF-fs: Scanning with blocksize 512 failed
[   90.535624][ T7669] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[   90.535737][ T7669] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[   90.535755][ T7669] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[   90.535768][ T7669] UDF-fs: Scanning with blocksize 1024 failed
[   90.536298][ T7669] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[   90.536386][ T7669] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[   90.536402][ T7669] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[   90.536413][ T7669] UDF-fs: Scanning with blocksize 2048 failed
[   90.549726][ T7669] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[   90.549916][ T7669] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[   90.549934][ T7669] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[   90.549947][ T7669] UDF-fs: Scanning with blocksize 4096 failed
[   90.549956][ T7669] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1)
[   90.571999][ T7671] netlink: 'syz.0.519': attribute type 1 has an invalid length.
[   90.574320][   T57] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[   90.620895][ T7669] can0: slcan on ptm1.
[   90.706667][   T57] usb 7-1: device descriptor read/64, error -71
[   90.756437][ T7688] xt_hashlimit: size too large, truncated to 1048576
[   90.884398][ T5731] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   90.890772][ T7698] bond0: (slave veth1_vlan): Error: Device is in use and cannot be enslaved
[   90.902999][  T851] usb 6-1: USB disconnect, device number 12
[   90.946714][   T57] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[   91.034350][ T5731] usb 5-1: Using ep0 maxpacket: 8
[   91.034820][ T5731] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[   91.035321][ T5731] usb 5-1: config 0 has no interfaces?
[   91.038182][ T5731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.038192][ T5731] usb 5-1: Product: syz
[   91.038199][ T5731] usb 5-1: Manufacturer: syz
[   91.038206][ T5731] usb 5-1: SerialNumber: syz
[   91.040702][ T5731] usb 5-1: config 0 descriptor??
[   91.074292][   T57] usb 7-1: device descriptor read/64, error -71
[   91.188072][   T57] usb usb7-port1: attempt power cycle
[   91.245073][ T5731] usb 5-1: USB disconnect, device number 10
[   91.335296][ T7668] can0 (unregistered): slcan off ptm1.
[   91.524304][   T57] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[   91.544694][   T57] usb 7-1: device descriptor read/8, error -71
[   91.784330][   T57] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[   91.808086][   T57] usb 7-1: device descriptor read/8, error -71
[   91.914502][   T57] usb usb7-port1: unable to enumerate USB device
[   91.947316][ T7733] FAULT_INJECTION: forcing a failure.
[   91.947316][ T7733] name failslab, interval 1, probability 0, space 0, times 0
[   91.947331][ T7733] CPU: 2 UID: 0 PID: 7733 Comm: syz.0.530 Not tainted syzkaller #0 PREEMPT(full) 
[   91.947343][ T7733] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   91.947350][ T7733] Call Trace:
[   91.947354][ T7733]  <TASK>
[   91.947359][ T7733]  dump_stack_lvl+0x100/0x190
[   91.947380][ T7733]  should_fail_ex.cold+0x5/0xa
[   91.947397][ T7733]  should_failslab+0xc2/0x120
[   91.947412][ T7733]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[   91.947426][ T7733]  ? __alloc_skb+0x140/0x710
[   91.947442][ T7733]  __alloc_skb+0x140/0x710
[   91.947454][ T7733]  ? __alloc_skb+0x5b7/0x710
[   91.947467][ T7733]  ? __pfx___alloc_skb+0x10/0x10
[   91.947479][ T7733]  ? __asan_memset+0x23/0x50
[   91.947490][ T7733]  ? __alloc_skb+0x4e9/0x710
[   91.947501][ T7733]  ? __alloc_skb+0x5b7/0x710
[   91.947516][ T7733]  create_monitor_ctrl_event+0x3b/0x450
[   91.947533][ T7733]  mgmt_cmd_status+0x2a3/0x570
[   91.947549][ T7733]  set_advertising+0x69a/0xa40
[   91.947566][ T7733]  ? __hci_dev_get+0x16a/0x2b0
[   91.947580][ T7733]  ? __pfx_set_advertising+0x10/0x10
[   91.947598][ T7733]  ? do_raw_read_unlock+0x3f/0x70
[   91.947612][ T7733]  ? _raw_read_unlock+0x28/0x50
[   91.947628][ T7733]  ? __pfx_mgmt_init_hdev+0x10/0x10
[   91.947644][ T7733]  hci_sock_sendmsg+0x154e/0x2620
[   91.947662][ T7733]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[   91.947677][ T7733]  ? selinux_socket_sendmsg+0x198/0x2f0
[   91.947693][ T7733]  sock_write_iter+0x53a/0x5b0
[   91.947709][ T7733]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[   91.947724][ T7733]  ? __pfx_sock_write_iter+0x10/0x10
[   91.947745][ T7733]  ? bpf_lsm_file_permission+0x9/0x10
[   91.947759][ T7733]  ? security_file_permission+0x76/0x210
[   91.947773][ T7733]  ? rw_verify_area+0xce/0x6d0
[   91.947792][ T7733]  vfs_write+0x6af/0x1050
[   91.947803][ T7733]  ? __pfx_sock_write_iter+0x10/0x10
[   91.947821][ T7733]  ? __pfx_vfs_write+0x10/0x10
[   91.947832][ T7733]  ? find_held_lock+0x2b/0x80
[   91.947856][ T7733]  ksys_write+0x1f8/0x250
[   91.947868][ T7733]  ? __pfx_ksys_write+0x10/0x10
[   91.947883][ T7733]  do_syscall_64+0x123/0x790
[   91.947902][ T7733]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.947918][ T7733] RIP: 0033:0x7f941699e159
[   91.947928][ T7733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   91.947939][ T7733] RSP: 002b:00007f941788c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   91.947950][ T7733] RAX: ffffffffffffffda RBX: 00007f9416c25fa0 RCX: 00007f941699e159
[   91.947958][ T7733] RDX: 0000000000000007 RSI: 0000200000000800 RDI: 0000000000000004
[   91.947964][ T7733] RBP: 00007f941788c090 R08: 0000000000000000 R09: 0000000000000000
[   91.947971][ T7733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   91.947978][ T7733] R13: 00007f9416c26038 R14: 00007f9416c25fa0 R15: 00007ffd688cb7c8
[   91.947993][ T7733]  </TASK>
[   92.061571][ T7737] overlayfs: workdir and upperdir must be separate subtrees
[   92.091099][ T7709] binder: 7708:7709 ioctl c0306201 200000000180 returned -14
[   92.164830][   T43] kauditd_printk_skb: 110 callbacks suppressed
[   92.164839][   T43] audit: type=1800 audit(2000000000.969:1647): pid=7740 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.533" name="file1" dev="tmpfs" ino=3 res=0 errno=0
[   92.165323][   T43] audit: type=1800 audit(2000000000.969:1648): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15754 res=0 errno=0
[   92.195876][   T43] audit: type=1400 audit(2000000000.999:1649): avc:  denied  { map } for  pid=7731 comm="syz.3.531" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   92.196887][   T43] audit: type=1400 audit(2000000000.999:1650): avc:  denied  { getopt } for  pid=7741 comm="syz.0.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   92.239782][   T43] audit: type=1800 audit(2000000001.039:1651): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15754 res=0 errno=0
[   92.242688][   T43] audit: type=1800 audit(2000000001.039:1652): pid=5734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=13538 res=0 errno=0
[   92.297399][   T43] audit: type=1800 audit(2000000001.099:1653): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15754 res=0 errno=0
[   92.301726][   T43] audit: type=1400 audit(2000000001.099:1654): avc:  denied  { write } for  pid=7747 comm="syz.3.538" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   92.323691][   T43] audit: type=1400 audit(2000000001.119:1655): avc:  denied  { connect } for  pid=7745 comm="syz.0.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   92.332390][   T43] audit: type=1800 audit(2000000001.129:1656): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16141 res=0 errno=0
[   93.135032][ T7749] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   93.135381][ T7749] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   93.135641][ T7749] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   93.135893][ T7749] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   93.215920][ T7764] FAULT_INJECTION: forcing a failure.
[   93.215920][ T7764] name failslab, interval 1, probability 0, space 0, times 0
[   93.215942][ T7764] CPU: 3 UID: 0 PID: 7764 Comm: syz.3.543 Not tainted syzkaller #0 PREEMPT(full) 
[   93.215963][ T7764] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   93.215975][ T7764] Call Trace:
[   93.215982][ T7764]  <TASK>
[   93.215990][ T7764]  dump_stack_lvl+0x100/0x190
[   93.216023][ T7764]  should_fail_ex.cold+0x5/0xa
[   93.216050][ T7764]  should_failslab+0xc2/0x120
[   93.216074][ T7764]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[   93.216096][ T7764]  ? __alloc_skb+0x140/0x710
[   93.216124][ T7764]  __alloc_skb+0x140/0x710
[   93.216144][ T7764]  ? __alloc_skb+0x5b7/0x710
[   93.216166][ T7764]  ? __pfx___alloc_skb+0x10/0x10
[   93.216188][ T7764]  ? fdb_delete+0x474/0x1290
[   93.216210][ T7764]  ? find_held_lock+0x2b/0x80
[   93.216239][ T7764]  fdb_notify+0xa2/0x190
[   93.216263][ T7764]  fdb_delete+0x93d/0x1290
[   93.216292][ T7764]  br_fdb_flush+0x2ca/0x530
[   93.216319][ T7764]  br_fdb_delete_bulk+0x66a/0xd10
[   93.216345][ T7764]  ? __pfx_br_fdb_delete_bulk+0x10/0x10
[   93.216368][ T7764]  ? __asan_memset+0x23/0x50
[   93.216387][ T7764]  ? __nla_validate_parse+0x1e7/0x28b0
[   93.216432][ T7764]  ? rtnetlink_rcv_msg+0x371/0xe90
[   93.216462][ T7764]  ? __nla_parse+0x40/0x60
[   93.216490][ T7764]  ? __pfx_br_fdb_delete_bulk+0x10/0x10
[   93.216514][ T7764]  rtnl_fdb_del+0x797/0xc20
[   93.216542][ T7764]  ? __pfx_rtnl_fdb_del+0x10/0x10
[   93.216586][ T7764]  ? __pfx_rtnl_fdb_del+0x10/0x10
[   93.216613][ T7764]  rtnetlink_rcv_msg+0x3c9/0xe90
[   93.216641][ T7764]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   93.216674][ T7764]  ? ref_tracker_free+0x37e/0x6c0
[   93.216709][ T7764]  netlink_rcv_skb+0x159/0x420
[   93.216732][ T7764]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   93.216760][ T7764]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   93.216792][ T7764]  ? netlink_deliver_tap+0x1ae/0xcc0
[   93.216818][ T7764]  netlink_unicast+0x585/0x850
[   93.216844][ T7764]  ? __pfx_netlink_unicast+0x10/0x10
[   93.216874][ T7764]  netlink_sendmsg+0x8b0/0xda0
[   93.216901][ T7764]  ? __pfx_netlink_sendmsg+0x10/0x10
[   93.216926][ T7764]  ? selinux_socket_sendmsg+0x198/0x2f0
[   93.216952][ T7764]  ____sys_sendmsg+0xa4d/0xbe0
[   93.216979][ T7764]  ? __pfx_netlink_sendmsg+0x10/0x10
[   93.217003][ T7764]  ? __pfx_____sys_sendmsg+0x10/0x10
[   93.217037][ T7764]  ? lock_acquire+0x1d1/0x380
[   93.217057][ T7764]  ? get_pid_task+0x2a/0x250
[   93.217085][ T7764]  ___sys_sendmsg+0x190/0x1e0
[   93.217105][ T7764]  ? __pfx____sys_sendmsg+0x10/0x10
[   93.217124][ T7764]  ? get_pid_task+0x106/0x250
[   93.217170][ T7764]  ? find_held_lock+0x2b/0x80
[   93.217214][ T7764]  __sys_sendmsg+0x160/0x210
[   93.217239][ T7764]  ? __pfx___sys_sendmsg+0x10/0x10
[   93.217277][ T7764]  do_syscall_64+0x123/0x790
[   93.217308][ T7764]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.217327][ T7764] RIP: 0033:0x7fd79e19e159
[   93.217344][ T7764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   93.217362][ T7764] RSP: 002b:00007fd79f0cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   93.217382][ T7764] RAX: ffffffffffffffda RBX: 00007fd79e425fa0 RCX: 00007fd79e19e159
[   93.217413][ T7764] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[   93.217424][ T7764] RBP: 00007fd79f0cc090 R08: 0000000000000000 R09: 0000000000000000
[   93.217436][ T7764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   93.217447][ T7764] R13: 00007fd79e426038 R14: 00007fd79e425fa0 R15: 00007fff04d65aa8
[   93.217474][ T7764]  </TASK>
[   93.424308][ T5731] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   93.595210][ T5731] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=ed.ff
[   93.597172][ T5731] usb 5-1: config 1 has an invalid interface number: 7 but max is 0
[   93.597190][ T5731] usb 5-1: config 1 has no interface number 0
[   93.597224][ T5731] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16
[   93.599415][ T5731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.599429][ T5731] usb 5-1: Product: syz
[   93.599439][ T5731] usb 5-1: Manufacturer: syz
[   93.599448][ T5731] usb 5-1: SerialNumber: syz
[   93.602703][ T7754] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   93.604454][ T1349] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[   93.608388][ T5731] usb 5-1: Error in usbnet_get_endpoints (-22)
[   93.724308][   T42] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[   93.755031][ T1349] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[   93.756709][ T1349] usb 8-1: config 1 has an invalid interface number: 7 but max is 0
[   93.756731][ T1349] usb 8-1: config 1 has no interface number 0
[   93.756763][ T1349] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16
[   93.758930][ T1349] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.758948][ T1349] usb 8-1: Product: syz
[   93.758961][ T1349] usb 8-1: Manufacturer: syz
[   93.758974][ T1349] usb 8-1: SerialNumber: syz
[   93.763231][ T7772] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   93.767108][ T1349] usb 8-1: Error in usbnet_get_endpoints (-22)
[   93.808835][ T5731] usb 5-1: USB disconnect, device number 11
[   93.875035][   T42] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   93.875999][   T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.876019][   T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   93.876039][   T42] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   93.876088][   T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.878610][   T42] usb 7-1: config 0 descriptor??
[   94.249434][ T7785] netlink: 'syz.1.552': attribute type 1 has an invalid length.
[   94.250138][ T7785] __nla_validate_parse: 6 callbacks suppressed
[   94.250152][ T7785] netlink: 60 bytes leftover after parsing attributes in process `syz.1.552'.
[   94.322163][   T42] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   94.430917][ T7794] overlayfs: missing 'workdir'
[   94.464829][   T64] Bluetooth: hci0: command 0x0c1a tx timeout
[   94.784256][    C1] net_ratelimit: 630 callbacks suppressed
[   95.184306][   T64] Bluetooth: hci3: command 0x0405 tx timeout
[   95.194370][   T64] Bluetooth: hci2: command 0x0c1a tx timeout
[   95.194418][   T64] Bluetooth: hci1: command 0x0c1a tx timeout
[   95.477908][ T7809] vlan2: entered promiscuous mode
[   95.477919][ T7809] hsr0: entered promiscuous mode
[   95.478674][ T7809] vlan2: entered allmulticast mode
[   95.478690][ T7809] hsr0: entered allmulticast mode
[   95.478701][ T7809] hsr_slave_0: entered allmulticast mode
[   95.478714][ T7809] hsr_slave_1: entered allmulticast mode
[   95.955063][ T7831] FAULT_INJECTION: forcing a failure.
[   95.955063][ T7831] name failslab, interval 1, probability 0, space 0, times 0
[   95.955082][ T7831] CPU: 0 UID: 0 PID: 7831 Comm: syz.0.567 Not tainted syzkaller #0 PREEMPT(full) 
[   95.955094][ T7831] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   95.955101][ T7831] Call Trace:
[   95.955113][ T7831]  <TASK>
[   95.955118][ T7831]  dump_stack_lvl+0x100/0x190
[   95.955144][ T7831]  should_fail_ex.cold+0x5/0xa
[   95.955161][ T7831]  should_failslab+0xc2/0x120
[   95.955186][ T7831]  __kmalloc_noprof+0xfc/0x840
[   95.955198][ T7831]  ? tomoyo_encode2+0xfb/0x3c0
[   95.955215][ T7831]  tomoyo_encode2+0xfb/0x3c0
[   95.955231][ T7831]  tomoyo_encode+0x29/0x50
[   95.955244][ T7831]  tomoyo_realpath_from_path+0x18c/0x690
[   95.955262][ T7831]  tomoyo_path_number_perm+0x23c/0x580
[   95.955273][ T7831]  ? tomoyo_path_number_perm+0x22e/0x580
[   95.955286][ T7831]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   95.955303][ T7831]  ? __lock_acquire+0x5c0/0x1f40
[   95.955322][ T7831]  ? __fget_files+0x34/0x3d0
[   95.955340][ T7831]  ? find_held_lock+0x2b/0x80
[   95.955356][ T7831]  ? hook_file_ioctl_common+0x140/0x440
[   95.955376][ T7831]  ? __fget_files+0x21f/0x3d0
[   95.955392][ T7831]  security_file_ioctl+0xd3/0x230
[   95.955405][ T7831]  __x64_sys_ioctl+0xb7/0x210
[   95.955418][ T7831]  do_syscall_64+0x123/0x790
[   95.955440][ T7831]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.955451][ T7831] RIP: 0033:0x7f941699e159
[   95.955461][ T7831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   95.955473][ T7831] RSP: 002b:00007f941788c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   95.955484][ T7831] RAX: ffffffffffffffda RBX: 00007f9416c25fa0 RCX: 00007f941699e159
[   95.955491][ T7831] RDX: 0000200000000500 RSI: 0000000040045612 RDI: 0000000000000003
[   95.955498][ T7831] RBP: 00007f941788c090 R08: 0000000000000000 R09: 0000000000000000
[   95.955505][ T7831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   95.955512][ T7831] R13: 00007f9416c26038 R14: 00007f9416c25fa0 R15: 00007ffd688cb7c8
[   95.955526][ T7831]  </TASK>
[   95.955536][ T7831] ERROR: Out of memory at tomoyo_realpath_from_path.
[   95.956906][ T7831] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[   96.013595][ T7835] FAULT_INJECTION: forcing a failure.
[   96.013595][ T7835] name failslab, interval 1, probability 0, space 0, times 0
[   96.013612][ T7835] CPU: 0 UID: 0 PID: 7835 Comm: syz.1.569 Not tainted syzkaller #0 PREEMPT(full) 
[   96.013647][ T7835] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   96.013654][ T7835] Call Trace:
[   96.013659][ T7835]  <TASK>
[   96.013664][ T7835]  dump_stack_lvl+0x100/0x190
[   96.013684][ T7835]  should_fail_ex.cold+0x5/0xa
[   96.013701][ T7835]  should_failslab+0xc2/0x120
[   96.013716][ T7835]  __kmalloc_noprof+0xfc/0x840
[   96.013729][ T7835]  ? tomoyo_encode2+0xfb/0x3c0
[   96.013745][ T7835]  tomoyo_encode2+0xfb/0x3c0
[   96.013761][ T7835]  tomoyo_encode+0x29/0x50
[   96.013774][ T7835]  tomoyo_realpath_from_path+0x18c/0x690
[   96.013791][ T7835]  tomoyo_path_number_perm+0x23c/0x580
[   96.013803][ T7835]  ? tomoyo_path_number_perm+0x22e/0x580
[   96.013815][ T7835]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   96.013833][ T7835]  ? __lock_acquire+0x5c0/0x1f40
[   96.013852][ T7835]  ? __fget_files+0x34/0x3d0
[   96.013866][ T7835]  ? find_held_lock+0x2b/0x80
[   96.013882][ T7835]  ? hook_file_ioctl_common+0x140/0x440
[   96.013901][ T7835]  ? __fget_files+0x21f/0x3d0
[   96.013917][ T7835]  security_file_ioctl+0xd3/0x230
[   96.013930][ T7835]  __x64_sys_ioctl+0xb7/0x210
[   96.013944][ T7835]  do_syscall_64+0x123/0x790
[   96.013962][ T7835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.013974][ T7835] RIP: 0033:0x7f1ee639e159
[   96.013984][ T7835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.013995][ T7835] RSP: 002b:00007f1ee72ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   96.014006][ T7835] RAX: ffffffffffffffda RBX: 00007f1ee6625fa0 RCX: 00007f1ee639e159
[   96.014013][ T7835] RDX: 0000200000000340 RSI: 0000000000003ba0 RDI: 0000000000000003
[   96.014020][ T7835] RBP: 00007f1ee72ef090 R08: 0000000000000000 R09: 0000000000000000
[   96.014027][ T7835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   96.014033][ T7835] R13: 00007f1ee6626038 R14: 00007f1ee6625fa0 R15: 00007ffec2a751d8
[   96.014048][ T7835]  </TASK>
[   96.014057][ T7835] ERROR: Out of memory at tomoyo_realpath_from_path.
[   96.117693][ T7840] can: request_module (can-proto-3) failed.
[   96.211868][ T7845] netlink: 444 bytes leftover after parsing attributes in process `syz.1.572'.
[   96.337341][   T42] usb 7-1: USB disconnect, device number 22
[   96.381672][ T7851] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   96.393781][   T25] usb 8-1: USB disconnect, device number 15
[   96.442839][ T7858] FAULT_INJECTION: forcing a failure.
[   96.442839][ T7858] name failslab, interval 1, probability 0, space 0, times 0
[   96.442857][ T7858] CPU: 0 UID: 0 PID: 7858 Comm: syz.3.577 Not tainted syzkaller #0 PREEMPT(full) 
[   96.442869][ T7858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   96.442876][ T7858] Call Trace:
[   96.442881][ T7858]  <TASK>
[   96.442885][ T7858]  dump_stack_lvl+0x100/0x190
[   96.442907][ T7858]  should_fail_ex.cold+0x5/0xa
[   96.442923][ T7858]  should_failslab+0xc2/0x120
[   96.442939][ T7858]  kmem_cache_alloc_noprof+0x92/0x6a0
[   96.442952][ T7858]  ? mas_preallocate+0xc22/0xee0
[   96.442972][ T7858]  mas_preallocate+0xc22/0xee0
[   96.442991][ T7858]  ? __pfx_mas_preallocate+0x10/0x10
[   96.443013][ T7858]  ? anon_vma_name+0x5a/0x250
[   96.443031][ T7858]  __split_vma+0x2f8/0x1de0
[   96.443049][ T7858]  ? is_bpf_text_address+0x25/0x1a0
[   96.443065][ T7858]  ? __pfx___split_vma+0x10/0x10
[   96.443080][ T7858]  ? find_held_lock+0x2b/0x80
[   96.443096][ T7858]  ? is_bpf_text_address+0x8a/0x1a0
[   96.443114][ T7858]  ? is_bpf_text_address+0x94/0x1a0
[   96.443128][ T7858]  ? kernel_text_address+0x8d/0x100
[   96.443148][ T7858]  vms_gather_munmap_vmas+0x1d2/0x1720
[   96.443169][ T7858]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[   96.443185][ T7858]  ? mtree_range_walk+0x72b/0xb70
[   96.443206][ T7858]  ? mas_walk+0x260/0x310
[   96.443224][ T7858]  __mmap_region+0x4cc/0x32e0
[   96.443244][ T7858]  ? __pfx___mmap_region+0x10/0x10
[   96.443272][ T7858]  ? lockdep_hardirqs_on+0x7d/0x110
[   96.443289][ T7858]  ? process_measurement+0x1030/0x2350
[   96.443309][ T7858]  ? __lock_acquire+0x5c0/0x1f40
[   96.443324][ T7858]  ? __lock_acquire+0x5c0/0x1f40
[   96.443338][ T7858]  ? lock_acquire+0x1d1/0x380
[   96.443368][ T7858]  ? avc_has_perm+0x135/0x1e0
[   96.443387][ T7858]  mmap_region+0x5a8/0x6d0
[   96.443399][ T7858]  ? __pfx_mmap_region+0x10/0x10
[   96.443409][ T7858]  ? inode_has_perm+0x16d/0x1d0
[   96.443440][ T7858]  ? shmem_mapping+0xd/0x50
[   96.443452][ T7858]  ? __pfx_memfd_check_seals_mmap+0x10/0x10
[   96.443469][ T7858]  ? bpf_lsm_mmap_addr+0x9/0x30
[   96.443483][ T7858]  ? security_mmap_addr+0x71/0x1e0
[   96.443498][ T7858]  ? __get_unmapped_area+0x255/0x3e0
[   96.443513][ T7858]  do_mmap+0x12c7/0x1c30
[   96.443530][ T7858]  ? lock_acquire+0x1d1/0x380
[   96.443541][ T7858]  ? __pfx_do_mmap+0x10/0x10
[   96.443555][ T7858]  ? __pfx___might_resched+0x10/0x10
[   96.443566][ T7858]  ? bpf_lsm_current_getlsmprop_subj+0x9/0x10
[   96.443583][ T7858]  ? security_current_getlsmprop_subj+0x6e/0x130
[   96.443603][ T7858]  ? __pfx_down_write_killable+0x10/0x10
[   96.443614][ T7858]  ? find_held_lock+0x2b/0x80
[   96.443632][ T7858]  vm_mmap_pgoff+0x28d/0x470
[   96.443647][ T7858]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[   96.443658][ T7858]  ? __fget_files+0x215/0x3d0
[   96.443675][ T7858]  ? __fget_files+0x21f/0x3d0
[   96.443696][ T7858]  ksys_mmap_pgoff+0x3cb/0x610
[   96.443711][ T7858]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[   96.443723][ T7858]  ? fput+0x7c/0x100
[   96.443737][ T7858]  ? ksys_write+0x1ac/0x250
[   96.443748][ T7858]  ? __pfx_ksys_write+0x10/0x10
[   96.443761][ T7858]  __x64_sys_mmap+0x125/0x190
[   96.443776][ T7858]  do_syscall_64+0x123/0x790
[   96.443794][ T7858]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.443806][ T7858] RIP: 0033:0x7fd79e19e159
[   96.443816][ T7858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.443827][ T7858] RSP: 002b:00007fd79f0cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[   96.443838][ T7858] RAX: ffffffffffffffda RBX: 00007fd79e425fa0 RCX: 00007fd79e19e159
[   96.443845][ T7858] RDX: 0000000000000002 RSI: 0000000000004000 RDI: 0000200000ffc000
[   96.443852][ T7858] RBP: 00007fd79f0cc090 R08: 0000000000000003 R09: 0000000000000000
[   96.443859][ T7858] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001
[   96.443866][ T7858] R13: 00007fd79e426038 R14: 00007fd79e425fa0 R15: 00007fff04d65aa8
[   96.443880][ T7858]  </TASK>
[   96.628281][ T7866] netlink: 444 bytes leftover after parsing attributes in process `syz.0.581'.
[   96.720839][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.582'.
[   96.755668][ T7862] 8021q: adding VLAN 0 to HW filter on device macsec1
[   96.793728][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.579'.
[   96.901261][ T7877] FAULT_INJECTION: forcing a failure.
[   96.901261][ T7877] name failslab, interval 1, probability 0, space 0, times 0
[   96.901287][ T7877] CPU: 2 UID: 0 PID: 7877 Comm: syz.0.584 Not tainted syzkaller #0 PREEMPT(full) 
[   96.901308][ T7877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   96.901319][ T7877] Call Trace:
[   96.901326][ T7877]  <TASK>
[   96.901334][ T7877]  dump_stack_lvl+0x100/0x190
[   96.901365][ T7877]  should_fail_ex.cold+0x5/0xa
[   96.901393][ T7877]  should_failslab+0xc2/0x120
[   96.901424][ T7877]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[   96.901445][ T7877]  ? __alloc_skb+0x5b7/0x710
[   96.901467][ T7877]  ? __alloc_skb+0x140/0x710
[   96.901492][ T7877]  __alloc_skb+0x140/0x710
[   96.901512][ T7877]  ? __alloc_skb+0x5b7/0x710
[   96.901531][ T7877]  ? __pfx___alloc_skb+0x10/0x10
[   96.901560][ T7877]  netlink_alloc_large_skb+0x69/0x150
[   96.901607][ T7877]  netlink_sendmsg+0x680/0xda0
[   96.901656][ T7877]  ? __pfx_netlink_sendmsg+0x10/0x10
[   96.901680][ T7877]  ? selinux_socket_sendmsg+0x198/0x2f0
[   96.901704][ T7877]  ____sys_sendmsg+0xa4d/0xbe0
[   96.901729][ T7877]  ? __pfx_netlink_sendmsg+0x10/0x10
[   96.901753][ T7877]  ? __pfx_____sys_sendmsg+0x10/0x10
[   96.901785][ T7877]  ? lock_acquire+0x1d1/0x380
[   96.901805][ T7877]  ? get_pid_task+0x2a/0x250
[   96.901832][ T7877]  ___sys_sendmsg+0x190/0x1e0
[   96.901850][ T7877]  ? __pfx____sys_sendmsg+0x10/0x10
[   96.901868][ T7877]  ? get_pid_task+0x106/0x250
[   96.901902][ T7877]  ? find_held_lock+0x2b/0x80
[   96.901945][ T7877]  __sys_sendmsg+0x160/0x210
[   96.901970][ T7877]  ? __pfx___sys_sendmsg+0x10/0x10
[   96.902006][ T7877]  do_syscall_64+0x123/0x790
[   96.902036][ T7877]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.902056][ T7877] RIP: 0033:0x7f941699e159
[   96.902072][ T7877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.902089][ T7877] RSP: 002b:00007f941788c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   96.902109][ T7877] RAX: ffffffffffffffda RBX: 00007f9416c25fa0 RCX: 00007f941699e159
[   96.902121][ T7877] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000003
[   96.902133][ T7877] RBP: 00007f941788c090 R08: 0000000000000000 R09: 0000000000000000
[   96.902144][ T7877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   96.902161][ T7877] R13: 00007f9416c26038 R14: 00007f9416c25fa0 R15: 00007ffd688cb7c8
[   96.902186][ T7877]  </TASK>
[   96.941515][ T7879] netlink: 16 bytes leftover after parsing attributes in process `syz.0.585'.
[   97.009687][ T7881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.586'.
[   97.010134][ T7881] netlink: 60 bytes leftover after parsing attributes in process `syz.0.586'.
[   97.113317][ T7887] netlink: 52 bytes leftover after parsing attributes in process `syz.0.588'.
[   97.113583][ T7887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.588'.
[   97.189273][   T43] kauditd_printk_skb: 109 callbacks suppressed
[   97.189285][   T43] audit: type=1800 audit(2000000005.989:1764): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0
[   97.204159][   T43] audit: type=1800 audit(2000000005.999:1765): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0
[   97.217317][ T7895] vim2m vim2m.0: vidioc_s_fmt queue busy
[   97.220085][ T7895] vim2m vim2m.0: vidioc_s_fmt queue busy
[   97.220715][   T43] audit: type=1400 audit(2000000006.019:1766): avc:  denied  { write } for  pid=7894 comm="syz.1.591" name="core" dev="configfs" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   97.223001][   T43] audit: type=1400 audit(2000000006.019:1767): avc:  denied  { write } for  pid=7894 comm="syz.1.591" name="rd_mcp_0" dev="configfs" ino=20682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   97.254586][   T43] audit: type=1800 audit(2000000006.059:1768): pid=7895 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.591" name="enable" dev="configfs" ino=22826 res=0 errno=0
[   97.258244][   T43] audit: type=1800 audit(2000000006.059:1769): pid=7895 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.591" name="dev" dev="configfs" ino=22828 res=0 errno=0
[   97.259489][   T43] audit: type=1800 audit(2000000006.059:1770): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.592" name="file0" dev="tmpfs" ino=655 res=0 errno=0
[   97.259946][   T43] audit: type=1400 audit(2000000006.059:1771): avc:  denied  { read } for  pid=7894 comm="syz.1.591" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   97.260185][   T43] audit: type=1400 audit(2000000006.059:1772): avc:  denied  { open } for  pid=7894 comm="syz.1.591" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   97.261152][   T43] audit: type=1400 audit(2000000006.059:1773): avc:  denied  { ioctl } for  pid=7894 comm="syz.1.591" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   97.267429][ T7895] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[   97.327027][ T7902] random: crng reseeded on system resumption
[   97.442924][ T7902] netlink: 'syz.1.593': attribute type 7 has an invalid length.
[   97.442940][ T7902] netlink: 'syz.1.593': attribute type 8 has an invalid length.
[   97.639430][ T7920] SELinux:  Context system_u:object_r:getty_var_run_t:s0 is not valid (left unmapped).
[   97.641575][ T7920] bridge0: port 3(team0) entered blocking state
[   97.641710][ T7920] bridge0: port 3(team0) entered disabled state
[   97.642793][ T7920] team0: entered allmulticast mode
[   97.642809][ T7920] team_slave_0: entered allmulticast mode
[   97.642840][ T7920] team_slave_1: entered allmulticast mode
[   97.647261][ T7920] team0: entered promiscuous mode
[   97.647273][ T7920] team_slave_0: entered promiscuous mode
[   97.647405][ T7920] team_slave_1: entered promiscuous mode
[   97.650250][ T7920] bridge0: port 3(team0) entered blocking state
[   97.650341][ T7920] bridge0: port 3(team0) entered forwarding state
[   97.667834][ T7923] FAULT_INJECTION: forcing a failure.
[   97.667834][ T7923] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   97.667848][ T7923] CPU: 3 UID: 0 PID: 7923 Comm: syz.2.601 Not tainted syzkaller #0 PREEMPT(full) 
[   97.667867][ T7923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   97.667874][ T7923] Call Trace:
[   97.667878][ T7923]  <TASK>
[   97.667883][ T7923]  dump_stack_lvl+0x100/0x190
[   97.667903][ T7923]  should_fail_ex.cold+0x5/0xa
[   97.667919][ T7923]  _copy_to_user+0x32/0xd0
[   97.667933][ T7923]  simple_read_from_buffer+0xcb/0x170
[   97.667949][ T7923]  proc_fail_nth_read+0x1af/0x230
[   97.667964][ T7923]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   97.667978][ T7923]  ? rw_verify_area+0xce/0x6d0
[   97.667995][ T7923]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   97.668009][ T7923]  vfs_read+0x1e4/0xb40
[   97.668021][ T7923]  ? lock_acquire+0x1d1/0x380
[   97.668032][ T7923]  ? __fget_files+0x34/0x3d0
[   97.668046][ T7923]  ? __pfx_vfs_read+0x10/0x10
[   97.668056][ T7923]  ? find_held_lock+0x2b/0x80
[   97.668072][ T7923]  ? __fget_files+0x215/0x3d0
[   97.668088][ T7923]  ? __fget_files+0x21f/0x3d0
[   97.668106][ T7923]  ksys_read+0x12a/0x250
[   97.668117][ T7923]  ? __pfx_ksys_read+0x10/0x10
[   97.668132][ T7923]  do_syscall_64+0x123/0x790
[   97.668150][ T7923]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.668162][ T7923] RIP: 0033:0x7fe08d35e98e
[   97.668172][ T7923] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   97.668182][ T7923] RSP: 002b:00007fe08e20afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   97.668194][ T7923] RAX: ffffffffffffffda RBX: 00007fe08e20b6c0 RCX: 00007fe08d35e98e
[   97.668202][ T7923] RDX: 000000000000000f RSI: 00007fe08e20b0a0 RDI: 0000000000000004
[   97.668208][ T7923] RBP: 00007fe08e20b090 R08: 0000000000000000 R09: 0000000000000000
[   97.668215][ T7923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   97.668236][ T7923] R13: 00007fe08d626038 R14: 00007fe08d625fa0 R15: 00007fff52a20b38
[   97.668251][ T7923]  </TASK>
[   97.731615][ T7920] team_slave_0 (unregistering): left promiscuous mode
[   97.731625][ T7920] team_slave_0 (unregistering): left allmulticast mode
[   97.739165][ T7920] team0: Port device team_slave_0 removed
[   97.874286][ T5731] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[   98.034959][ T5731] usb 8-1: Using ep0 maxpacket: 16
[   98.035632][ T5731] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[   98.041230][ T5731] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.041245][ T5731] usb 8-1: Product: syz
[   98.041256][ T5731] usb 8-1: Manufacturer: syz
[   98.041268][ T5731] usb 8-1: SerialNumber: syz
[   98.054959][   T42] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[   98.128862][ T7944] kAFS: No cell specified
[   98.163404][ T7947] SELinux:  policydb magic number 0xc69 does not match expected magic number 0xf97cff8c
[   98.163443][ T7947] SELinux: failed to load policy
[   98.168053][ T7948] kAFS: No cell specified
[   98.205468][   T42] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[   98.207105][   T42] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   98.207120][   T42] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   98.222434][   T42] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   98.222460][   T42] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   98.235772][   T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.235788][   T42] usb 5-1: Product: syz
[   98.235799][   T42] usb 5-1: Manufacturer: syz
[   98.235810][   T42] usb 5-1: SerialNumber: syz
[   98.238934][ T7952] FAULT_INJECTION: forcing a failure.
[   98.238934][ T7952] name failslab, interval 1, probability 0, space 0, times 0
[   98.239009][ T7952] CPU: 0 UID: 0 PID: 7952 Comm: syz.2.612 Not tainted syzkaller #0 PREEMPT(full) 
[   98.239032][ T7952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   98.239044][ T7952] Call Trace:
[   98.239052][ T7952]  <TASK>
[   98.239060][ T7952]  dump_stack_lvl+0x100/0x190
[   98.239093][ T7952]  should_fail_ex.cold+0x5/0xa
[   98.239120][ T7952]  should_failslab+0xc2/0x120
[   98.239145][ T7952]  __kmalloc_noprof+0xfc/0x840
[   98.239167][ T7952]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[   98.239199][ T7952]  genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[   98.239237][ T7952]  genl_family_rcv_msg_doit+0xc7/0x300
[   98.239265][ T7952]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   98.239301][ T7952]  ? bpf_lsm_capable+0x9/0x10
[   98.239328][ T7952]  ? security_capable+0x80/0x260
[   98.239363][ T7952]  genl_rcv_msg+0x560/0x800
[   98.239395][ T7952]  ? __pfx_genl_rcv_msg+0x10/0x10
[   98.239419][ T7952]  ? __lock_acquire+0x5c0/0x1f40
[   98.239440][ T7952]  ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10
[   98.239478][ T7952]  netlink_rcv_skb+0x159/0x420
[   98.239500][ T7952]  ? __pfx_genl_rcv_msg+0x10/0x10
[   98.239526][ T7952]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   98.239559][ T7952]  ? netlink_deliver_tap+0x1ae/0xcc0
[   98.239584][ T7952]  genl_rcv+0x28/0x40
[   98.239605][ T7952]  netlink_unicast+0x585/0x850
[   98.239632][ T7952]  ? __pfx_netlink_unicast+0x10/0x10
[   98.239661][ T7952]  netlink_sendmsg+0x8b0/0xda0
[   98.239688][ T7952]  ? __pfx_netlink_sendmsg+0x10/0x10
[   98.239713][ T7952]  ? selinux_socket_sendmsg+0x198/0x2f0
[   98.239738][ T7952]  ____sys_sendmsg+0xa4d/0xbe0
[   98.239765][ T7952]  ? __pfx_netlink_sendmsg+0x10/0x10
[   98.239789][ T7952]  ? __pfx_____sys_sendmsg+0x10/0x10
[   98.239823][ T7952]  ? lock_acquire+0x1d1/0x380
[   98.239843][ T7952]  ? get_pid_task+0x2a/0x250
[   98.239871][ T7952]  ___sys_sendmsg+0x190/0x1e0
[   98.239891][ T7952]  ? __pfx____sys_sendmsg+0x10/0x10
[   98.239910][ T7952]  ? get_pid_task+0x106/0x250
[   98.239946][ T7952]  ? find_held_lock+0x2b/0x80
[   98.239991][ T7952]  __sys_sendmsg+0x160/0x210
[   98.240017][ T7952]  ? __pfx___sys_sendmsg+0x10/0x10
[   98.240056][ T7952]  do_syscall_64+0x123/0x790
[   98.240087][ T7952]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.240107][ T7952] RIP: 0033:0x7fe08d39e159
[   98.240123][ T7952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   98.240141][ T7952] RSP: 002b:00007fe08e20b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   98.240161][ T7952] RAX: ffffffffffffffda RBX: 00007fe08d625fa0 RCX: 00007fe08d39e159
[   98.240174][ T7952] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[   98.240186][ T7952] RBP: 00007fe08e20b090 R08: 0000000000000000 R09: 0000000000000000
[   98.240198][ T7952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   98.240209][ T7952] R13: 00007fe08d626038 R14: 00007fe08d625fa0 R15: 00007fff52a20b38
[   98.240241][ T7952]  </TASK>
[   98.253903][   T42] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected
[   98.270778][   T42] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[   98.279477][   T42] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[   98.283789][ T5731] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[   98.305604][   T64] Bluetooth: hci3: command 0x0405 tx timeout
[   98.310550][ T5731] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   98.311410][ T5731] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[   98.311443][ T5731] usb 8-1: media controller created
[   98.327499][ T5731] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   98.455640][ T7930] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90
[   98.560246][ T5731] zl10353_read_register: readreg error (reg=127, ret==-110)
[   98.569464][ T7965] netlink: 'syz.2.616': attribute type 5 has an invalid length.
[   98.609930][ T5731] dvb_usb_gl861 8-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[   98.617478][ T5731] usb 8-1: USB disconnect, device number 16
[   98.723355][ T7973] FAULT_INJECTION: forcing a failure.
[   98.723355][ T7973] name failslab, interval 1, probability 0, space 0, times 0
[   98.723373][ T7973] CPU: 0 UID: 0 PID: 7973 Comm: syz.2.620 Not tainted syzkaller #0 PREEMPT(full) 
[   98.723397][ T7973] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   98.723405][ T7973] Call Trace:
[   98.723409][ T7973]  <TASK>
[   98.723415][ T7973]  dump_stack_lvl+0x100/0x190
[   98.723441][ T7973]  should_fail_ex.cold+0x5/0xa
[   98.723458][ T7973]  should_failslab+0xc2/0x120
[   98.723475][ T7973]  __kmalloc_noprof+0xfc/0x840
[   98.723508][ T7973]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[   98.723529][ T7973]  genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[   98.723549][ T7973]  genl_family_rcv_msg_doit+0xc7/0x300
[   98.723566][ T7973]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   98.723587][ T7973]  ? bpf_lsm_capable+0x9/0x10
[   98.723604][ T7973]  ? security_capable+0x80/0x260
[   98.723624][ T7973]  ? ns_capable+0xd2/0xf0
[   98.723638][ T7973]  genl_rcv_msg+0x560/0x800
[   98.723656][ T7973]  ? __pfx_genl_rcv_msg+0x10/0x10
[   98.723671][ T7973]  ? __lock_acquire+0x5c0/0x1f40
[   98.723683][ T7973]  ? __pfx_ovs_flow_cmd_new+0x10/0x10
[   98.723705][ T7973]  netlink_rcv_skb+0x159/0x420
[   98.723719][ T7973]  ? __pfx_genl_rcv_msg+0x10/0x10
[   98.723735][ T7973]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   98.723755][ T7973]  ? netlink_deliver_tap+0x1ae/0xcc0
[   98.723770][ T7973]  genl_rcv+0x28/0x40
[   98.723784][ T7973]  netlink_unicast+0x585/0x850
[   98.723799][ T7973]  ? __pfx_netlink_unicast+0x10/0x10
[   98.723817][ T7973]  netlink_sendmsg+0x8b0/0xda0
[   98.723833][ T7973]  ? __pfx_netlink_sendmsg+0x10/0x10
[   98.723849][ T7973]  ? selinux_socket_sendmsg+0x198/0x2f0
[   98.723865][ T7973]  ____sys_sendmsg+0xa4d/0xbe0
[   98.723885][ T7973]  ? __pfx_netlink_sendmsg+0x10/0x10
[   98.723900][ T7973]  ? __pfx_____sys_sendmsg+0x10/0x10
[   98.723921][ T7973]  ? lock_acquire+0x1d1/0x380
[   98.723933][ T7973]  ? get_pid_task+0x2a/0x250
[   98.723951][ T7973]  ___sys_sendmsg+0x190/0x1e0
[   98.723963][ T7973]  ? __pfx____sys_sendmsg+0x10/0x10
[   98.723975][ T7973]  ? get_pid_task+0x106/0x250
[   98.723997][ T7973]  ? find_held_lock+0x2b/0x80
[   98.724023][ T7973]  __sys_sendmsg+0x160/0x210
[   98.724039][ T7973]  ? __pfx___sys_sendmsg+0x10/0x10
[   98.724062][ T7973]  do_syscall_64+0x123/0x790
[   98.724081][ T7973]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.724094][ T7973] RIP: 0033:0x7fe08d39e159
[   98.724104][ T7973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   98.724115][ T7973] RSP: 002b:00007fe08e20b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   98.724128][ T7973] RAX: ffffffffffffffda RBX: 00007fe08d625fa0 RCX: 00007fe08d39e159
[   98.724136][ T7973] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003
[   98.724143][ T7973] RBP: 00007fe08e20b090 R08: 0000000000000000 R09: 0000000000000000
[   98.724151][ T7973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   98.724157][ T7973] R13: 00007fe08d626038 R14: 00007fe08d625fa0 R15: 00007fff52a20b38
[   98.724173][ T7973]  </TASK>
[   98.762226][ T7975] Cannot find add_set index 4 as target
[   98.764285][   T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[   98.914960][   T10] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   98.916117][   T10] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   98.916132][   T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   98.916141][   T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[   98.916171][   T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.917429][   T10] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   98.917445][   T10] usb 6-1: Product: syz
[   98.917456][   T10] usb 6-1: Manufacturer: syz
[   98.920905][   T10] cdc_wdm 6-1:1.0: skipping garbage
[   98.920912][   T10] cdc_wdm 6-1:1.0: skipping garbage
[   98.921792][   T10] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[   98.921800][   T10] cdc_wdm 6-1:1.0: Unknown control protocol
[   99.034384][  T851] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[   99.127771][ T7982] netlink: 'syz.3.624': attribute type 11 has an invalid length.
[   99.127784][ T7982] netlink: 'syz.3.624': attribute type 7 has an invalid length.
[   99.133176][   T10] usb 6-1: USB disconnect, device number 13
[   99.186174][  T851] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[   99.187105][  T851] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[   99.187127][  T851] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   99.187145][  T851] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[   99.187165][  T851] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[   99.189829][  T851] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.189845][  T851] usb 7-1: Product: syz
[   99.189857][  T851] usb 7-1: Manufacturer: syz
[   99.189869][  T851] usb 7-1: SerialNumber: syz
[   99.192121][  T851] usb 7-1: config 0 descriptor??
[   99.194024][ T7989] FAULT_INJECTION: forcing a failure.
[   99.194024][ T7989] name failslab, interval 1, probability 0, space 0, times 0
[   99.194042][ T7989] CPU: 2 UID: 0 PID: 7989 Comm: syz.3.625 Not tainted syzkaller #0 PREEMPT(full) 
[   99.194055][ T7989] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   99.194062][ T7989] Call Trace:
[   99.194066][ T7989]  <TASK>
[   99.194071][ T7989]  dump_stack_lvl+0x100/0x190
[   99.194092][ T7989]  should_fail_ex.cold+0x5/0xa
[   99.194109][ T7989]  should_failslab+0xc2/0x120
[   99.194124][ T7989]  __kmalloc_noprof+0xfc/0x840
[   99.194136][ T7989]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[   99.194156][ T7989]  genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[   99.194189][ T7989]  genl_family_rcv_msg_doit+0xc7/0x300
[   99.194208][ T7989]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   99.194227][ T7989]  ? bpf_lsm_capable+0x9/0x10
[   99.194244][ T7989]  ? security_capable+0x80/0x260
[   99.194262][ T7989]  ? ns_capable+0xd2/0xf0
[   99.194275][ T7989]  genl_rcv_msg+0x560/0x800
[   99.194301][ T7989]  ? __pfx_genl_rcv_msg+0x10/0x10
[   99.194315][ T7989]  ? __lock_acquire+0x5c0/0x1f40
[   99.194327][ T7989]  ? __pfx_nl80211_pre_doit+0x10/0x10
[   99.194343][ T7989]  ? __pfx_nl80211_add_tx_ts+0x10/0x10
[   99.194357][ T7989]  ? __pfx_nl80211_post_doit+0x10/0x10
[   99.194379][ T7989]  netlink_rcv_skb+0x159/0x420
[   99.194392][ T7989]  ? __pfx_genl_rcv_msg+0x10/0x10
[   99.194407][ T7989]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   99.194426][ T7989]  ? netlink_deliver_tap+0x1ae/0xcc0
[   99.194440][ T7989]  genl_rcv+0x28/0x40
[   99.194453][ T7989]  netlink_unicast+0x585/0x850
[   99.194468][ T7989]  ? __pfx_netlink_unicast+0x10/0x10
[   99.194480][ T7989]  ? __pfx_sock_has_perm+0x10/0x10
[   99.194501][ T7989]  netlink_sendmsg+0x8b0/0xda0
[   99.194516][ T7989]  ? __pfx_netlink_sendmsg+0x10/0x10
[   99.194531][ T7989]  ? selinux_socket_sendmsg+0x198/0x2f0
[   99.194545][ T7989]  ____sys_sendmsg+0xa4d/0xbe0
[   99.194562][ T7989]  ? __pfx_netlink_sendmsg+0x10/0x10
[   99.194576][ T7989]  ? __pfx_____sys_sendmsg+0x10/0x10
[   99.194596][ T7989]  ? lock_acquire+0x1d1/0x380
[   99.194607][ T7989]  ? get_pid_task+0x2a/0x250
[   99.194624][ T7989]  ___sys_sendmsg+0x190/0x1e0
[   99.194635][ T7989]  ? __pfx____sys_sendmsg+0x10/0x10
[   99.194646][ T7989]  ? get_pid_task+0x106/0x250
[   99.194666][ T7989]  ? find_held_lock+0x2b/0x80
[   99.194691][ T7989]  __sys_sendmsg+0x160/0x210
[   99.194706][ T7989]  ? __pfx___sys_sendmsg+0x10/0x10
[   99.194728][ T7989]  do_syscall_64+0x123/0x790
[   99.194746][ T7989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.194758][ T7989] RIP: 0033:0x7fd79e19e159
[   99.194768][ T7989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   99.194779][ T7989] RSP: 002b:00007fd79f0cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   99.194791][ T7989] RAX: ffffffffffffffda RBX: 00007fd79e425fa0 RCX: 00007fd79e19e159
[   99.194798][ T7989] RDX: 0000000004000000 RSI: 0000200000000180 RDI: 0000000000000003
[   99.194805][ T7989] RBP: 00007fd79f0cc090 R08: 0000000000000000 R09: 0000000000000000
[   99.194811][ T7989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   99.194818][ T7989] R13: 00007fd79e426038 R14: 00007fd79e425fa0 R15: 00007fff04d65aa8
[   99.194833][ T7989]  </TASK>
[   99.395455][  T851] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[   99.631503][   T10] usb 7-1: USB disconnect, device number 23
[   99.825298][ T6474] net_ratelimit: 892 callbacks suppressed
[  100.101110][ T8006] FAULT_INJECTION: forcing a failure.
[  100.101110][ T8006] name failslab, interval 1, probability 0, space 0, times 0
[  100.101127][ T8006] CPU: 0 UID: 0 PID: 8006 Comm: syz.3.630 Not tainted syzkaller #0 PREEMPT(full) 
[  100.101139][ T8006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  100.101146][ T8006] Call Trace:
[  100.101151][ T8006]  <TASK>
[  100.101155][ T8006]  dump_stack_lvl+0x100/0x190
[  100.101175][ T8006]  should_fail_ex.cold+0x5/0xa
[  100.101192][ T8006]  should_failslab+0xc2/0x120
[  100.101207][ T8006]  __kmalloc_cache_noprof+0x91/0x6d0
[  100.101225][ T8006]  ? tcf_chain_create+0x98/0x370
[  100.101244][ T8006]  tcf_chain_create+0x98/0x370
[  100.101262][ T8006]  __tcf_chain_get+0x153/0x1b0
[  100.101275][ T8006]  tc_new_tfilter+0x626/0x24c0
[  100.101292][ T8006]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  100.101308][ T8006]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  100.101326][ T8006]  ? __pfx_tc_new_tfilter+0x10/0x10
[  100.101343][ T8006]  ? __lock_acquire+0x5c0/0x1f40
[  100.101361][ T8006]  ? lock_acquire+0x1d1/0x380
[  100.101378][ T8006]  ? rtnetlink_rcv_msg+0x1f6/0xe90
[  100.101394][ T8006]  ? find_held_lock+0x2b/0x80
[  100.101410][ T8006]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  100.101426][ T8006]  ? __pfx_tc_new_tfilter+0x10/0x10
[  100.101439][ T8006]  rtnetlink_rcv_msg+0x95e/0xe90
[  100.101456][ T8006]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  100.101475][ T8006]  ? ref_tracker_free+0x37e/0x6c0
[  100.101493][ T8006]  netlink_rcv_skb+0x159/0x420
[  100.101506][ T8006]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  100.101522][ T8006]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  100.101540][ T8006]  ? netlink_deliver_tap+0x1ae/0xcc0
[  100.101556][ T8006]  netlink_unicast+0x585/0x850
[  100.101570][ T8006]  ? __pfx_netlink_unicast+0x10/0x10
[  100.101583][ T8006]  ? __pfx_sock_has_perm+0x10/0x10
[  100.101622][ T8006]  netlink_sendmsg+0x8b0/0xda0
[  100.101641][ T8006]  ? __pfx_netlink_sendmsg+0x10/0x10
[  100.101655][ T8006]  ? selinux_socket_sendmsg+0x198/0x2f0
[  100.101670][ T8006]  ____sys_sendmsg+0xa4d/0xbe0
[  100.101686][ T8006]  ? __pfx_netlink_sendmsg+0x10/0x10
[  100.101700][ T8006]  ? __pfx_____sys_sendmsg+0x10/0x10
[  100.101721][ T8006]  ? lock_acquire+0x1d1/0x380
[  100.101732][ T8006]  ? get_pid_task+0x2a/0x250
[  100.101749][ T8006]  ___sys_sendmsg+0x190/0x1e0
[  100.101761][ T8006]  ? __pfx____sys_sendmsg+0x10/0x10
[  100.101772][ T8006]  ? get_pid_task+0x106/0x250
[  100.101792][ T8006]  ? find_held_lock+0x2b/0x80
[  100.101817][ T8006]  __sys_sendmsg+0x160/0x210
[  100.101831][ T8006]  ? __pfx___sys_sendmsg+0x10/0x10
[  100.101853][ T8006]  do_syscall_64+0x123/0x790
[  100.101874][ T8006]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.101887][ T8006] RIP: 0033:0x7fd79e19e159
[  100.101897][ T8006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  100.101908][ T8006] RSP: 002b:00007fd79f0cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  100.101925][ T8006] RAX: ffffffffffffffda RBX: 00007fd79e425fa0 RCX: 00007fd79e19e159
[  100.101936][ T8006] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  100.101947][ T8006] RBP: 00007fd79f0cc090 R08: 0000000000000000 R09: 0000000000000000
[  100.101957][ T8006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  100.101970][ T8006] R13: 00007fd79e426038 R14: 00007fd79e425fa0 R15: 00007fff04d65aa8
[  100.101997][ T8006]  </TASK>
[  100.222256][ T8010] FAULT_INJECTION: forcing a failure.
[  100.222256][ T8010] name failslab, interval 1, probability 0, space 0, times 0
[  100.222282][ T8010] CPU: 1 UID: 0 PID: 8010 Comm: syz.3.632 Not tainted syzkaller #0 PREEMPT(full) 
[  100.222304][ T8010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  100.222315][ T8010] Call Trace:
[  100.222322][ T8010]  <TASK>
[  100.222330][ T8010]  dump_stack_lvl+0x100/0x190
[  100.222362][ T8010]  should_fail_ex.cold+0x5/0xa
[  100.222388][ T8010]  should_failslab+0xc2/0x120
[  100.222411][ T8010]  __kmalloc_cache_noprof+0x91/0x6d0
[  100.222441][ T8010]  ? copy_mount_options+0x55/0x190
[  100.222468][ T8010]  copy_mount_options+0x55/0x190
[  100.222489][ T8010]  __x64_sys_mount+0x1ab/0x310
[  100.222517][ T8010]  ? __pfx___x64_sys_mount+0x10/0x10
[  100.222551][ T8010]  do_syscall_64+0x123/0x790
[  100.222580][ T8010]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.222599][ T8010] RIP: 0033:0x7fd79e19e159
[  100.222615][ T8010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  100.222632][ T8010] RSP: 002b:00007fd79f0cc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  100.222653][ T8010] RAX: ffffffffffffffda RBX: 00007fd79e425fa0 RCX: 00007fd79e19e159
[  100.222665][ T8010] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 0000000000000000
[  100.222676][ T8010] RBP: 00007fd79f0cc090 R08: 00002000000001c0 R09: 0000000000000000
[  100.222688][ T8010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  100.222698][ T8010] R13: 00007fd79e426038 R14: 00007fd79e425fa0 R15: 00007fff04d65aa8
[  100.222723][ T8010]  </TASK>
[  100.235812][ T8013] ip_tables: iptables: counters copy to user failed while replacing table
[  100.492065][ T8015] __nla_validate_parse: 12 callbacks suppressed
[  100.492079][ T8015] netlink: 52 bytes leftover after parsing attributes in process `syz.3.634'.
[  100.493681][ T8015] netlink: 'syz.3.634': attribute type 21 has an invalid length.
[  100.854393][   T25] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  100.901629][  T851] usb 5-1: USB disconnect, device number 12
[  100.917087][  T851] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  100.919416][  T851] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  100.919905][  T851] ti_usb_3410_5052 5-1:2.0: device disconnected
[  101.014608][   T25] usb 6-1: Using ep0 maxpacket: 32
[  101.015272][   T25] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  101.018377][   T25] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  101.018396][   T25] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  101.018411][   T25] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  101.018441][   T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  101.018457][   T25] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  101.018473][   T25] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  101.018515][   T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.020624][   T25] usb 6-1: config 0 descriptor??
[  101.047866][ T8026] FAULT_INJECTION: forcing a failure.
[  101.047866][ T8026] name failslab, interval 1, probability 0, space 0, times 0
[  101.047881][ T8026] CPU: 0 UID: 0 PID: 8026 Comm: syz.0.637 Not tainted syzkaller #0 PREEMPT(full) 
[  101.047893][ T8026] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  101.047900][ T8026] Call Trace:
[  101.047905][ T8026]  <TASK>
[  101.047909][ T8026]  dump_stack_lvl+0x100/0x190
[  101.047930][ T8026]  should_fail_ex.cold+0x5/0xa
[  101.047948][ T8026]  should_failslab+0xc2/0x120
[  101.047963][ T8026]  __kmalloc_noprof+0xfc/0x840
[  101.047979][ T8026]  ? get_connections+0x1a1/0x610
[  101.048008][ T8026]  get_connections+0x1a1/0x610
[  101.048030][ T8026]  ? do_raw_read_unlock+0x3f/0x70
[  101.048053][ T8026]  ? __pfx_mgmt_init_hdev+0x10/0x10
[  101.048078][ T8026]  hci_sock_sendmsg+0x154e/0x2620
[  101.048105][ T8026]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  101.048127][ T8026]  ? selinux_socket_sendmsg+0x198/0x2f0
[  101.048150][ T8026]  sock_write_iter+0x53a/0x5b0
[  101.048177][ T8026]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  101.048213][ T8026]  ? __pfx_sock_write_iter+0x10/0x10
[  101.048244][ T8026]  ? bpf_lsm_file_permission+0x9/0x10
[  101.048266][ T8026]  ? security_file_permission+0x76/0x210
[  101.048290][ T8026]  ? rw_verify_area+0xce/0x6d0
[  101.048317][ T8026]  vfs_write+0x6af/0x1050
[  101.048335][ T8026]  ? __pfx_sock_write_iter+0x10/0x10
[  101.048362][ T8026]  ? __pfx_vfs_write+0x10/0x10
[  101.048377][ T8026]  ? find_held_lock+0x2b/0x80
[  101.048416][ T8026]  ksys_write+0x1f8/0x250
[  101.048435][ T8026]  ? __pfx_ksys_write+0x10/0x10
[  101.048458][ T8026]  do_syscall_64+0x123/0x790
[  101.048486][ T8026]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.048504][ T8026] RIP: 0033:0x7f941699e159
[  101.048520][ T8026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  101.048535][ T8026] RSP: 002b:00007f941788c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  101.048551][ T8026] RAX: ffffffffffffffda RBX: 00007f9416c25fa0 RCX: 00007f941699e159
[  101.048562][ T8026] RDX: 0000000000000006 RSI: 0000200000000000 RDI: 0000000000000004
[  101.048571][ T8026] RBP: 00007f941788c090 R08: 0000000000000000 R09: 0000000000000000
[  101.048580][ T8026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  101.048589][ T8026] R13: 00007f9416c26038 R14: 00007f9416c25fa0 R15: 00007ffd688cb7c8
[  101.048611][ T8026]  </TASK>
[  101.093122][ T8028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.638'.
[  101.195582][ T8034] netlink: 64 bytes leftover after parsing attributes in process `syz.3.640'.
[  101.232378][   T25] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  101.239250][   T25] usb 6-1: USB disconnect, device number 14
[  101.270861][   T25] usblp0: removed
[  101.295716][   T64] Bluetooth: hci0: unexpected event for opcode 0x200c
[  101.524303][  T851] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  101.574328][   T72] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  101.674280][  T851] usb 8-1: Using ep0 maxpacket: 32
[  101.674773][  T851] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  101.675750][  T851] usb 8-1: config index 0 descriptor too short (expected 29220, got 36)
[  101.675762][  T851] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  101.675773][  T851] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81
[  101.675792][  T851] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  101.675804][  T851] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  101.675815][  T851] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  101.675844][  T851] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.677249][  T851] usb 8-1: config 0 descriptor??
[  101.734379][   T72] usb 7-1: Using ep0 maxpacket: 16
[  101.734524][   T25] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  101.734949][   T72] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  101.737789][   T72] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.737806][   T72] usb 7-1: Product: syz
[  101.737819][   T72] usb 7-1: Manufacturer: syz
[  101.737833][   T72] usb 7-1: SerialNumber: syz
[  101.880273][ T8048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'.
[  101.884277][   T25] usb 6-1: Using ep0 maxpacket: 32
[  101.885552][   T25] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  101.886206][  T851] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  101.886713][   T25] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  101.886726][   T25] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  101.886736][   T25] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  101.886756][   T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  101.886767][   T25] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  101.886779][   T25] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  101.886809][   T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.892664][   T25] usb 6-1: config 0 descriptor??
[  101.895693][  T851] usb 8-1: USB disconnect, device number 17
[  101.917287][  T851] usblp0: removed
[  101.957966][   T72] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  101.969881][   T72] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  101.970429][   T72] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  101.970474][   T72] usb 7-1: media controller created
[  102.003786][   T72] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  102.108342][   T25] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  102.218172][   T43] kauditd_printk_skb: 139 callbacks suppressed
[  102.218188][   T43] audit: type=1800 audit(2000000011.019:1913): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15754 res=0 errno=0
[  102.239045][   T43] audit: type=1800 audit(2000000011.039:1914): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15754 res=0 errno=0
[  102.246084][   T72] zl10353_read_register: readreg error (reg=127, ret==-110)
[  102.325187][   T43] audit: type=1800 audit(2000000011.129:1915): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15754 res=0 errno=0
[  102.340905][   T72] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  102.343176][   T43] audit: type=1800 audit(2000000011.139:1916): pid=5734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=131944 res=0 errno=0
[  102.344043][   T43] audit: type=1800 audit(2000000011.139:1917): pid=5734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=131945 res=0 errno=0
[  102.347656][   T43] audit: type=1800 audit(2000000011.149:1918): pid=5734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=131924 res=0 errno=0
[  102.348022][   T72] usb 7-1: USB disconnect, device number 24
[  102.356252][   T43] audit: type=1800 audit(2000000011.159:1919): pid=5734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=131946 res=0 errno=0
[  102.384387][  T851] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  102.448466][   T43] audit: type=1800 audit(2000000011.249:1920): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15754 res=0 errno=0
[  102.448837][ T8071] FAULT_INJECTION: forcing a failure.
[  102.448837][ T8071] name failslab, interval 1, probability 0, space 0, times 0
[  102.448864][ T8071] CPU: 3 UID: 0 PID: 8071 Comm: syz.1.635 Not tainted syzkaller #0 PREEMPT(full) 
[  102.448884][ T8071] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  102.448894][ T8071] Call Trace:
[  102.448899][ T8071]  <TASK>
[  102.448907][ T8071]  dump_stack_lvl+0x100/0x190
[  102.448954][ T8071]  should_fail_ex.cold+0x5/0xa
[  102.448980][ T8071]  should_failslab+0xc2/0x120
[  102.449004][ T8071]  __kmalloc_noprof+0xfc/0x840
[  102.449025][ T8071]  ? tomoyo_encode2+0xfb/0x3c0
[  102.449053][ T8071]  tomoyo_encode2+0xfb/0x3c0
[  102.449080][ T8071]  tomoyo_encode+0x29/0x50
[  102.449101][ T8071]  tomoyo_realpath_from_path+0x18c/0x690
[  102.449129][ T8071]  tomoyo_path_number_perm+0x23c/0x580
[  102.449146][ T8071]  ? tomoyo_path_number_perm+0x22e/0x580
[  102.449171][ T8071]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  102.449201][ T8071]  ? __lock_acquire+0x5c0/0x1f40
[  102.449233][ T8071]  ? __fget_files+0x34/0x3d0
[  102.449256][ T8071]  ? find_held_lock+0x2b/0x80
[  102.449280][ T8071]  ? hook_file_ioctl_common+0x140/0x440
[  102.449311][ T8071]  ? __fget_files+0x21f/0x3d0
[  102.449338][ T8071]  security_file_ioctl+0xd3/0x230
[  102.449361][ T8071]  __x64_sys_ioctl+0xb7/0x210
[  102.449382][ T8071]  do_syscall_64+0x123/0x790
[  102.449412][ T8071]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.449432][ T8071] RIP: 0033:0x7f1ee639e159
[  102.449449][ T8071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  102.449467][ T8071] RSP: 002b:00007f1ee72ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  102.449487][ T8071] RAX: ffffffffffffffda RBX: 00007f1ee6626090 RCX: 00007f1ee639e159
[  102.449500][ T8071] RDX: 0000000000000000 RSI: 0000000000000604 RDI: 0000000000000004
[  102.449511][ T8071] RBP: 00007f1ee72ce090 R08: 0000000000000000 R09: 0000000000000000
[  102.449523][ T8071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  102.449534][ T8071] R13: 00007f1ee6626128 R14: 00007f1ee6626090 R15: 00007ffec2a751d8
[  102.449561][ T8071]  </TASK>
[  102.449653][ T8071] ERROR: Out of memory at tomoyo_realpath_from_path.
[  102.470758][   T43] audit: type=1400 audit(2000000011.269:1921): avc:  denied  { remount } for  pid=8072 comm="syz.0.652" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  102.516073][   T43] audit: type=1800 audit(2000000011.319:1922): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15754 res=0 errno=0
[  102.535686][  T851] usb 8-1: Using ep0 maxpacket: 32
[  102.536194][  T851] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  102.537056][  T851] usb 8-1: config index 0 descriptor too short (expected 29220, got 36)
[  102.537070][  T851] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  102.537080][  T851] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81
[  102.537100][  T851] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  102.537112][  T851] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  102.537137][  T851] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  102.537166][  T851] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.542913][  T851] usb 8-1: config 0 descriptor??
[  102.748868][  T851] usblp 8-1:0.0: usblp1: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  102.887594][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.655'.
[  102.889439][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'.
[  102.915842][ T8085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.657'.
[  102.971599][ T8088] netlink: 28 bytes leftover after parsing attributes in process `syz.2.658'.
[  102.972608][ T8088] netlink: 60 bytes leftover after parsing attributes in process `syz.2.658'.
[  102.990482][ T8090] fuse: Unknown parameter '0x0000000000000004'
[  102.992412][ T8090] fuse: Bad value for 'fd'
[  103.038005][ T8092] netlink: 'syz.2.660': attribute type 1 has an invalid length.
[  103.038018][ T8092] netlink: 232 bytes leftover after parsing attributes in process `syz.2.660'.
[  103.038026][ T8092] netlink: 'syz.2.660': attribute type 1 has an invalid length.
[  103.680235][  T851] usb 6-1: USB disconnect, device number 15
[  103.697082][  T851] usblp0: removed
[  104.277961][   T42] usb 8-1: USB disconnect, device number 18
[  104.306356][   T42] usblp1: removed
[  104.626659][ T8149] 8021q: adding VLAN 0 to HW filter on device bond1
[  104.637765][ T8152] jffs2: notice: (8152) jffs2_build_xattr_subsystem: complete building xattr subsystem, 6 of xdatum (0 unchecked, 4 orphan) and 17 of xref (4 dead, 7 orphan) found.
[  104.679510][ T8158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  104.734095][ T8160] kvm: MONITOR instruction emulated as NOP!
[  104.880223][ T8168] FAULT_INJECTION: forcing a failure.
[  104.880223][ T8168] name failslab, interval 1, probability 0, space 0, times 0
[  104.880238][ T8168] CPU: 2 UID: 0 PID: 8168 Comm: syz.1.688 Not tainted syzkaller #0 PREEMPT(full) 
[  104.880254][ T8168] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  104.880261][ T8168] Call Trace:
[  104.880265][ T8168]  <TASK>
[  104.880270][ T8168]  dump_stack_lvl+0x100/0x190
[  104.880292][ T8168]  should_fail_ex.cold+0x5/0xa
[  104.880308][ T8168]  should_failslab+0xc2/0x120
[  104.880331][ T8168]  kmem_cache_alloc_noprof+0x92/0x6a0
[  104.880344][ T8168]  ? __kernfs_new_node+0xd2/0xa10
[  104.880365][ T8168]  __kernfs_new_node+0xd2/0xa10
[  104.880383][ T8168]  ? __pfx___kernfs_new_node+0x10/0x10
[  104.880404][ T8168]  ? lock_acquire+0x1d1/0x380
[  104.880416][ T8168]  ? kernfs_root+0x23/0x2a0
[  104.880431][ T8168]  ? find_held_lock+0x2b/0x80
[  104.880447][ T8168]  ? kernfs_root+0xee/0x2a0
[  104.880461][ T8168]  ? kernfs_root+0xee/0x2a0
[  104.880479][ T8168]  kernfs_new_node+0x117/0x150
[  104.880498][ T8168]  __kernfs_create_file+0x53/0x350
[  104.880513][ T8168]  sysfs_add_file_mode_ns+0x207/0x3c0
[  104.880531][ T8168]  sysfs_create_file_ns+0x145/0x1e0
[  104.880546][ T8168]  ? __pfx_sysfs_create_file_ns+0x10/0x10
[  104.880562][ T8168]  ? kernfs_put+0x3f/0x60
[  104.880577][ T8168]  ? sysfs_do_create_link_sd+0xbb/0x140
[  104.880595][ T8168]  device_create_file+0xf2/0x1d0
[  104.880614][ T8168]  device_add+0x2cb/0x1970
[  104.880631][ T8168]  ? __pfx_device_add+0x10/0x10
[  104.880646][ T8168]  ? kobject_get+0xbb/0x150
[  104.880658][ T8168]  ? __pfx_software_node_get+0x10/0x10
[  104.880669][ T8168]  ? software_node_get+0x68/0x90
[  104.880680][ T8168]  ? fwnode_handle_get+0x97/0xd0
[  104.880696][ T8168]  iommu_mock_device_add+0x7c/0xb0
[  104.880713][ T8168]  iommufd_test+0x3038/0x6600
[  104.880728][ T8168]  ? __lock_acquire+0x5c0/0x1f40
[  104.880740][ T8168]  ? __lock_acquire+0x5c0/0x1f40
[  104.880752][ T8168]  ? __pfx_iommufd_test+0x10/0x10
[  104.880765][ T8168]  ? tomoyo_path_number_perm+0x188/0x580
[  104.880779][ T8168]  ? lock_acquire+0x1d1/0x380
[  104.880790][ T8168]  ? __might_fault+0xc5/0x140
[  104.880807][ T8168]  ? find_held_lock+0x2b/0x80
[  104.880823][ T8168]  ? __might_fault+0xc5/0x140
[  104.880845][ T8168]  iommufd_fops_ioctl+0x358/0x520
[  104.880861][ T8168]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  104.880874][ T8168]  ? __fget_files+0x34/0x3d0
[  104.880895][ T8168]  ? selinux_file_ioctl+0x13b/0x290
[  104.880907][ T8168]  ? selinux_file_ioctl+0xb6/0x290
[  104.880920][ T8168]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  104.880936][ T8168]  __x64_sys_ioctl+0x18e/0x210
[  104.880949][ T8168]  do_syscall_64+0x123/0x790
[  104.880966][ T8168]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.880978][ T8168] RIP: 0033:0x7f1ee639e159
[  104.880988][ T8168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  104.880999][ T8168] RSP: 002b:00007f1ee72ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  104.881011][ T8168] RAX: ffffffffffffffda RBX: 00007f1ee6625fa0 RCX: 00007f1ee639e159
[  104.881018][ T8168] RDX: 0000200000000500 RSI: 0000000000003ba0 RDI: 0000000000000003
[  104.881025][ T8168] RBP: 00007f1ee72ef090 R08: 0000000000000000 R09: 0000000000000000
[  104.881032][ T8168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  104.881038][ T8168] R13: 00007f1ee6626038 R14: 00007f1ee6625fa0 R15: 00007ffec2a751d8
[  104.881053][ T8168]  </TASK>
[  104.980106][ T8170] xt_TPROXY: Can be used only with -p tcp or -p udp
[  104.985796][   T64] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1
[  104.986654][   T64] Bluetooth: hci3: unexpected event for opcode 0x203e
[  104.996756][   T72] wacom 0003:056A:003F.0007: hidraw1: USB HID v0.00 Gamepad [syz0] on syz0
[  105.026015][ T6474] net_ratelimit: 158 callbacks suppressed
[  105.036299][   T57] Added buffer head 4 to ffff88802797a400
[  105.036332][   T57] Added buffer head 5 to ffff88802797a400
[  105.037142][    C0] virtqueue callback for ffff88802797a400 (ffffffff86652a70)
[  105.038205][ T5721] send_to_group: group=ffff8880245fa800 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff88801cb3d200 data_type=2 dir=0000000000000000 cookie=0
[  105.038225][ T5721] inotify_handle_inode_event: group=ffff8880245fa800 mark=ffff888036e0c708 mask=8
[  105.038241][ T5721] fsnotify_insert_event: group=ffff8880245fa800 event=ffff88805adae340
[  105.038405][ T5137] get_one_event: group=ffff8880245fa800 event=ffff88805adae340
[  105.038418][ T5137] fsnotify_remove_first_event: group=ffff8880245fa800 event=ffff88805adae340
[  105.038428][ T5137] inotify_read: group=ffff8880245fa800 kevent=ffff88805adae340
[  105.038436][ T5137] copy_event_to_user: group=ffff8880245fa800 event=ffff88805adae340
[  105.038454][ T5137] inotify_read: group=ffff8880245fa800 kevent=0000000000000000
[  105.038862][ T1037] No more buffers in queue
[  105.040714][ T8172] kcov: kcov_start: t = ffff88805cfd0000, size = 524288, area = ffffc90007923000
[  105.040764][ T8172] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000065: 0000 [#1] SMP KASAN NOPTI
[  105.077255][ T8172] KASAN: null-ptr-deref in range [0x0000000000000328-0x000000000000032f]
[  105.079948][ T8172] CPU: 3 UID: 0 PID: 8172 Comm: syz.1.689 Not tainted syzkaller #0 PREEMPT(full) 
[  105.082873][ T8172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  105.086086][ T8172] RIP: 0010:wacom_intuos_irq+0x62b/0x3430
[  105.087888][ T8172] Code: c3 cc cc cc cc e8 35 b4 f1 f8 48 8b 04 24 44 0f b6 c5 48 8d b8 28 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 d4 27 00 00 48 8b 04 24 48 c7 c7 b8 d5 3e 91 48
[  105.093911][ T8172] RSP: 0018:ffffc90023e179f8 EFLAGS: 00010206
[  105.095944][ T8172] RAX: dffffc0000000000 RBX: ffff88804be480ae RCX: ffffc90007923000
[  105.098462][ T8172] RDX: 0000000000000065 RSI: ffffffff891a6b7b RDI: 0000000000000328
[  105.101042][ T8172] RBP: 000000000000002e R08: 000000000000002e R09: 0000000000000011
[  105.103656][ T8172] R10: 000000000000002e R11: 0000000000000001 R12: 000000000000005b
[  105.106305][ T8172] R13: ffff88804bc42048 R14: 000000000000002e R15: 0000000000000021
[  105.108852][ T8172] FS:  00007f1ee72ce6c0(0000) GS:ffff8880d5e56000(0000) knlGS:0000000000000000
[  105.111747][ T8172] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  105.113903][ T8172] CR2: 00007f1ee72cdff8 CR3: 000000002b6bc000 CR4: 0000000000352ef0
[  105.116691][ T8172] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000400
[  105.119407][ T8172] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  105.122004][ T8172] Call Trace:
[  105.123141][ T8172]  <TASK>
[  105.124131][ T8172]  ? add_lock_to_list+0x9d/0x1d0
[  105.125873][ T8172]  wacom_wac_irq+0x196b/0xab80
[  105.127478][ T8172]  ? lock_acquire+0x1d1/0x380
[  105.129013][ T8172]  ? __lock_acquire+0xe8b/0x1f40
[  105.130666][ T8172]  ? __pfx_wacom_wac_irq+0x10/0x10
[  105.132322][ T8172]  ? __lock_acquire+0x5c0/0x1f40
[  105.133948][ T8172]  ? do_raw_spin_lock+0x128/0x260
[  105.135700][ T8172]  wacom_raw_event+0x6db/0xbf0
[  105.137300][ T8172]  ? lockdep_hardirqs_on+0x7d/0x110
[  105.139028][ T8172]  __hid_input_report.constprop.0+0x319/0x470
[  105.141013][ T8172]  ? __pfx_wacom_raw_event+0x10/0x10
[  105.142733][ T8172]  uhid_char_write+0xb6b/0x10e0
[  105.144362][ T8172]  vfs_write+0x2aa/0x1050
[  105.145922][ T8172]  ? __pfx_uhid_char_write+0x10/0x10
[  105.147634][ T8172]  ? lock_acquire+0x1d1/0x380
[  105.149261][ T8172]  ? __fget_files+0x34/0x3d0
[  105.151061][ T8172]  ? __pfx_vfs_write+0x10/0x10
[  105.153133][ T8172]  ? find_held_lock+0x2b/0x80
[  105.155226][ T8172]  ? __fget_files+0x215/0x3d0
[  105.157328][ T8172]  ? __fget_files+0x215/0x3d0
[  105.159400][ T8172]  ? __fget_files+0x21f/0x3d0
[  105.161392][ T8172]  ksys_write+0x1f8/0x250
[  105.163229][ T8172]  ? __pfx_ksys_write+0x10/0x10
[  105.165210][ T8172]  ? kcov_ioctl+0x17a/0x760
[  105.167111][ T8172]  do_syscall_64+0x123/0x790
[  105.168578][ T8172]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.170403][ T8172] RIP: 0033:0x7f1ee639e159
[  105.171783][ T8172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  105.177994][ T8172] RSP: 002b:00007f1ee72ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  105.180570][ T8172] RAX: ffffffffffffffda RBX: 00007f1ee6626090 RCX: 00007f1ee639e159
[  105.182903][ T8172] RDX: 0000000000000061 RSI: 0000200000000040 RDI: 0000000000000003
[  105.185354][ T8172] RBP: 00007f1ee643506b R08: 0000000000000000 R09: 0000000000000000
[  105.187928][ T8172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  105.190350][ T8172] R13: 00007f1ee6626128 R14: 00007f1ee6626090 R15: 00007ffec2a751d8
[  105.192779][ T8172]  </TASK>
[  105.193800][ T8172] Modules linked in:
[  105.195445][ T8172] ---[ end trace 0000000000000000 ]---
[  105.196942][ T5137] kobject: 'loop0' (ffff88802049d260): kobject_uevent_env
[  105.196963][ T5137] kobject: 'loop0' (ffff88802049d260): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  105.200770][ T8175] kcov: kcov_start: t = ffff88802d2b8000, size = 524288, area = ffffc90024941000
[  105.203294][ T5721] send_to_group: group=ffff8880245fa800 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff888037a8a080 data_type=2 dir=0000000000000000 cookie=0
[  105.203313][ T5721] inotify_handle_inode_event: group=ffff8880245fa800 mark=ffff888036e0c708 mask=8
[  105.203327][ T5721] fsnotify_insert_event: group=ffff8880245fa800 event=ffff8880386460c0
[  105.203395][ T5137] get_one_event: group=ffff8880245fa800 event=ffff8880386460c0
[  105.203408][ T5137] fsnotify_remove_first_event: group=ffff8880245fa800 event=ffff8880386460c0
[  105.203418][ T5137] inotify_read: group=ffff8880245fa800 kevent=ffff8880386460c0
[  105.203425][ T5137] copy_event_to_user: group=ffff8880245fa800 event=ffff8880386460c0
[  105.203439][ T5137] inotify_read: group=ffff8880245fa800 kevent=0000000000000000
[  105.206502][ T5137] kobject: 'loop0' (ffff88802049d260): kobject_uevent_env
[  105.206522][ T5137] kobject: 'loop0' (ffff88802049d260): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  105.223745][ T5737] inotify_handle_inode_event: group=ffff8880245fa800 mark=ffff888036e0c708 mask=8000
[  105.223764][ T5737] fsnotify_insert_event: group=ffff8880245fa800 event=ffff8880369d4300
[  105.224109][ T5137] get_one_event: group=ffff8880245fa800 event=ffff8880369d4300
[  105.224121][ T5137] fsnotify_remove_first_event: group=ffff8880245fa800 event=ffff8880369d4300
[  105.224129][ T5137] inotify_read: group=ffff8880245fa800 kevent=ffff8880369d4300
[  105.224137][ T5137] copy_event_to_user: group=ffff8880245fa800 event=ffff8880369d4300
[  105.224151][ T5137] inotify_read: group=ffff8880245fa800 kevent=0000000000000000
[  105.235371][ T5734] inotify_handle_inode_event: group=ffff8880245fa800 mark=ffff888034fbf960 mask=8000
[  105.235390][ T5734] fsnotify_insert_event: group=ffff8880245fa800 event=ffff8880369d4380
[  105.237969][ T5137] get_one_event: group=ffff8880245fa800 event=ffff8880369d4380
[  105.237981][ T5137] fsnotify_remove_first_event: group=ffff8880245fa800 event=ffff8880369d4380
[  105.237990][ T5137] inotify_read: group=ffff8880245fa800 kevent=ffff8880369d4380
[  105.237998][ T5137] copy_event_to_user: group=ffff8880245fa800 event=ffff8880369d4380
[  105.238011][ T5137] inotify_read: group=ffff8880245fa800 kevent=0000000000000000
[  105.248351][   T57] Added buffer head 5 to ffff88802797a400
[  105.248373][   T57] Added buffer head 4 to ffff88802797a400
[  105.249320][    C0] virtqueue callback for ffff88802797a400 (ffffffff86652a70)
[  105.249375][ T1037] No more buffers in queue
[  105.290954][ T8172] RIP: 0010:wacom_intuos_irq+0x62b/0x3430
[  105.290978][ T8172] Code: c3 cc cc cc cc e8 35 b4 f1 f8 48 8b 04 24 44 0f b6 c5 48 8d b8 28 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 d4 27 00 00 48 8b 04 24 48 c7 c7 b8 d5 3e 91 48
[  105.290990][ T8172] RSP: 0018:ffffc90023e179f8 EFLAGS: 00010206
[  105.291000][ T8172] RAX: dffffc0000000000 RBX: ffff88804be480ae RCX: ffffc90007923000
[  105.291008][ T8172] RDX: 0000000000000065 RSI: ffffffff891a6b7b RDI: 0000000000000328
[  105.291016][ T8172] RBP: 000000000000002e R08: 000000000000002e R09: 0000000000000011
[  105.291023][ T8172] R10: 000000000000002e R11: 0000000000000001 R12: 000000000000005b
[  105.291030][ T8172] R13: ffff88804bc42048 R14: 000000000000002e R15: 0000000000000021
[  105.291038][ T8172] FS:  00007f1ee72ce6c0(0000) GS:ffff8880d5e56000(0000) knlGS:0000000000000000
[  105.291060][ T8172] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  105.291070][ T8172] CR2: 00007f1ee72cdff8 CR3: 000000002b6bc000 CR4: 0000000000352ef0
[  105.291077][ T8172] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000400
[  105.291084][ T8172] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  105.291093][ T8172] Kernel panic - not syncing: Fatal exception
[  105.331797][ T8172] Kernel Offset: disabled
[  105.333175][ T8172] Rebooting in 86400 seconds..