last executing test programs:

3.409857252s ago: executing program 1 (id=572):
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000200))
setreuid(0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2)
ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, 0x0)
r3 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$CDROMREADTOCHDR(r3, 0x5305, &(0x7f00000000c0)={0xa2, 0x3})
socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x10)
recvmmsg(r4, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001500)=""/4112, 0x1010}, {&(0x7f0000000180)=""/82, 0x52}], 0x2}, 0x400000}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x400800}], 0x4, 0x20000, 0x0)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/devices\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f000000d500)={0x2020}, 0x2020)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x800000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e20, @multicast2}}, [0x9e8, 0xa, 0x0, 0x7, 0x0, 0x5a305173, 0x10fe, 0xfffffffffffffff9, 0x8, 0x2, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc)

2.570716861s ago: executing program 1 (id=576):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000fcff00020000200900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400000011"], 0x64}}, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x18, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)

2.168575268s ago: executing program 0 (id=579):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="90010000305200001c00128009000100626f6e64000000040c0002800500ff0001000000"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000029000000040000005e0000000000000018"], 0x30}, 0xc4)

2.168280135s ago: executing program 0 (id=580):
socket$alg(0x26, 0x5, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0xb})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

2.083940837s ago: executing program 3 (id=581):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r5, 0x1, 0x170bf28, 0x25dedbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4920}, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x14, r7, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}}, 0x8001) (async)
r8 = io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000})
io_uring_enter(r8, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) (async)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r6}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r6, 0x0, 0x100000000000000}, 0x38) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000070601046b3b0123000000000500000a0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000)

2.081460963s ago: executing program 0 (id=582):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0)
r1 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x80)
r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000001c00), 0x12)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000340)={'das16m1\x00', [0x1102, 0x1f, 0x1, 0x1ff, 0x8, 0xfd, 0x3, 0x32f, 0xa, 0x2000000e, 0x2, 0xb51, 0x1, 0x6, 0x10001, 0x2, 0x200, 0xa, 0x7, 0x402, 0x5, 0x3, 0x5, 0x2, 0x48, 0x9, 0x8, 0x423b, 0x4, 0x7, 0x1000]})

1.949440325s ago: executing program 0 (id=583):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x30, 0x0, 0x1, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbf}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}}, 0x4004811)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x209d, 0x0, 0x9, 0xfffffffd}, 0x10)
write(r1, &(0x7f00000000c0)="1100000016005f0214fffffffffffff807", 0x11)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c0009"], 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40004)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000180)='./file1\x00')
getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f00000004c0)=""/232, &(0x7f00000005c0)=0xe8)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x2, 0x2, 0x6, 0xfffffffffffffffc, 0x2, 0x3, 0x1, 0x6, 0x7fffffff})
syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2)
r5 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000080)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10})
io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x30, 0x0, 0x1, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbf}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}}, 0x4004811) (async)
socket(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x209d, 0x0, 0x9, 0xfffffffd}, 0x10) (async)
write(r1, &(0x7f00000000c0)="1100000016005f0214fffffffffffff807", 0x11) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c0009"], 0x30}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) (async)
sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40004) (async)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') (async)
chdir(&(0x7f0000000180)='./file1\x00') (async)
getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f00000004c0)=""/232, &(0x7f00000005c0)=0xe8) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) (async)
quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x2, 0x2, 0x6, 0xfffffffffffffffc, 0x2, 0x3, 0x1, 0x6, 0x7fffffff}) (async)
syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) (async)
syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) (async)
syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) (async)
io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) (async)

1.815811977s ago: executing program 0 (id=584):
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000200))
setreuid(0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2)
ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, 0x0)
r3 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$CDROMREADTOCHDR(r3, 0x5305, &(0x7f00000000c0)={0xa2, 0x3})
socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x10)
recvmmsg(r4, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001500)=""/4112, 0x1010}, {&(0x7f0000000180)=""/82, 0x52}], 0x2}, 0x400000}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x400800}], 0x4, 0x20000, 0x0)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/devices\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f000000d500)={0x2020}, 0x2020)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x800000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e20, @multicast2}}, [0x9e8, 0xa, 0x0, 0x7, 0x0, 0x5a305173, 0x10fe, 0xfffffffffffffff9, 0x8, 0x2, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc)

1.63993096s ago: executing program 2 (id=585):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0xb})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000007c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2fc0}], 0x0, 0x0, 0x0})
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d", 0x8)
r6 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0)
recvmsg$unix(r6, 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
prctl$PR_MCE_KILL(0x29, 0x0, 0x2)
shutdown(r7, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0x1, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0x8041, 0x4, 0x1, 0x3, 0x5, 0x9, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x20d, 0x4, 0x7, 0x8, 0x100000, 0x762, 0x3, 0x0, 0x8001, 0x2b12, 0xff, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x67dc, 0x8, 0x11000, 0x0, 0x5, 0x80079b, 0x2, 0x2000001, 0x7f, 0x4, 0x9, 0x7, 0xf, 0x4, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x5, 0x4007, 0x8, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x800000, 0x4, 0x100002, 0x8, 0x2000752, 0x0, 0x3, 0x5, 0x10001, 0x4e7b3717, 0xffffffff, 0x6, 0x6, 0x9, 0x1, 0xfdffffff, 0x2, 0xfffffffe, 0x2, 0x100, 0x5, 0x5b, 0x3, 0x33b, 0x5, 0x20006, 0x40000005, 0x10003, 0x6, 0x4002, 0xd9a, 0xd, 0x29f, 0xfffffff5, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x0, 0x8, 0x5, 0x20000001, 0x1fc, 0xc5c, 0xffffffff]}})

1.568939999s ago: executing program 1 (id=586):
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00')
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000001ac0)='.\x00', &(0x7f0000001b00), 0x10000, &(0x7f0000000040)={'trans=virtio,', {[{@posixacl}, {@nodevmap}]}})
read$FUSE(r1, &(0x7f00000045c0)={0x2020}, 0x2020)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5})
r3 = socket$netlink(0x10, 0x3, 0x0)
preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/17, 0x11}], 0x1, 0x80000001, 0x6)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})

1.513880079s ago: executing program 2 (id=587):
mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa000, 0x0, 0xfff, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x1, 0x2)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0xe)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$FUSE_OPEN(r4, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0xf8, 0x8}}, 0x20)
bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xd19, @empty, 0x4}, 0x1c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e0d, 0xd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c)
syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYRES64=r1, @ANYRESDEC=r1, @ANYRESDEC=r2, @ANYRES16=r1, @ANYRESDEC=r0, @ANYRES8=r0, @ANYRESHEX=r2, @ANYRES16=r0], 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r6, @ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x4006018}, 0x20008000)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r5)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1)
mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/252)

1.285941633s ago: executing program 2 (id=588):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0xfb, 0xcb, 0x1, 0x1, "1d00000c00", "0902935665a27c78c8d23d45f15c43cf03be7c3f9e5c1c9a108f3cfe97bdceba6eb860837cf964f1a40a0dfe429918a3c16e713966aef513ac9a2d7a804f79f99baa4e2de682cd3471308f680bba63ae00cd6eb7286d50bb0dcc5635983202a01ed1945cd59d70f9f1cea6ff6e9c1402093af700fe3871ad38f5c5f8df90974e54ec83f85730dbdcfb9c070816b79f030fe9801b492d19e69f5ad153977e9e549980b982fca4c898545f1433b1f69a09e5dfede50754"}, 0xcb, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000400)=0x79)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0)
read$FUSE(r5, &(0x7f0000001a80)={0x2020}, 0x2020)
sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40040e0}, 0x20004800)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(jvo', @ANYRES16=r6, @ANYBLOB="01032cbd7000fedbdf2500000000140002007767310000000000"], 0x28}, 0x1, 0x0, 0x0, 0x2004c001}, 0x20040000)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)

1.285198474s ago: executing program 3 (id=589):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1.169152944s ago: executing program 3 (id=590):
r0 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x0, 0x1000, 0x0, 0x3}, 0x1c)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x9, 0x0, 0x81, 0xfffffff9, 0xa})
mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10000, 0x0)
setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0200000001000706000000000000000000000000100006000000000020010000000000008372bb305f1858"], 0x24, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000feffffff8500000007000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000f88d7d965fc730046f4c411607e94791b705a1000800000085000000a700000095000000000000003b841ba74cfd4971ebda7be12ecea754b2ed1ec7dadd2a47baf6073e428c3b470864691dfbcfec7ff54aa628e467c500bc025e57d39412db91b128927169d0348a"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0)
r4 = socket$inet6(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfe, {0x2, 0x20, 0x7b, 0xcb, r7}, [@IFA_LOCAL={0x8, 0x2, @empty}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010102}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, @IFA_FLAGS={0x8, 0x8, 0x8}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x105}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040054}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0)
sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc)
openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x100, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=<r8=>0x0, &(0x7f0000000200)=0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x81, '\x00', r8, r2, 0x0, 0x1, 0x5}, 0x50)
r9 = accept4$x25(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x12, 0x80800)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000640)={0x0, &(0x7f00000004c0)}, 0x8)
inotify_init()
r10 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r11=>0x0})
connect$can_bcm(r10, &(0x7f00000000c0)={0x1d, r11}, 0x10)
sendmsg$can_bcm(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000400800000008000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0)

1.029521726s ago: executing program 3 (id=591):
sendmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000b00)="d3b41c6dc03d3291bcb3b44dc633e2280c732500a9cdf9fb282ed5b9d310d7c9e1f3031e05fc30ef09180904c9b9b9c4235d9b26341cfbdb366fd5aa89d8e3dda22caf2c5d42f84eb50c5e62e27562e071ba1e8ee4a61585f7e154756901ad27c30e9dae5bcd84699831d077a1ee9a09e730048c202268210dccb9474ce52eaaa5b31fe0d125ceec057f2111acf130d0f849a9bb02d39c5f95935799a395e46c3b00166a3949b249700c9af15fdacc4feb0c4e48ae20b84163b53a97a159c33e8f27a24202b5b66aeb5e445697b7d28ac063f1902685a9244e369684b1aafbc0f427bc1ecb5e3a7578e8c1879a55f16b66f14702548f6eba0c621f4e2e39adf470a69407ef5721abfbcbf836f22f35778af181ceb3fe67efea515d66a41b8f7cc03495dc39329e961dceaa813eb7ef1e5cccd7574ac96e29f81513bfb0f85510fa18a533b38ebe50cda8c0060d09d033bd3ef1970a3de6e32e3a083e0246c4c9c9b7719b4b38b1ce09be655cbd69212ae52431f827e13d1c213e17eb092a36502dadc2ab65285b5a900c7ee9ba88c4651ecb5541d4c04c3d5f4d3e370ce4b495e903860ba77ba004179ab55bf4e23961cfc52987d412eff19832c1414399cc70d851245853a26e5160f58f3fbfc28ff590be0764c01ca827fcbf8fd56debef0e65d584e315d3b4f21d11a0f3a1506fd080b26710e635825d6057f6f56ae976b0635c1e827b42426c7ba008e6bba66951b91438478315126d39ac52678c4459a2e5ab26e422c785f1e9550873c79d9db9731f056fd148d1f4223cf42da0924b7c7110760e71c9ef6252fe8928ad0d329f6fc00f0fc7465a9aa17150b752932ca3e7d9acb1d43ccfa297e387cf72e46fd13cefb71a684534dafcde77396c9533031ee94337f558d146342b43e1a5c3ee59adc8d3f6c7610491c966b707c29d656792cef8b383cd0f014abeb021ad6ec5265008926bb1bc0098e66b0f1e5ca10afd6f6c738554597b882268aa6230dda3b3a0dcdd447abcc37b1e1a3cdb24ed6c34a8b09fd88a8e08aea61ed13bc69dbce7570e9087b6b232498675aa438986bcaad1961da05a987ef26afa4956d0373962bcb2a4cca33484a521b537a9407fe4f9785b573bfd3a7ffdcc7e02ea1e5ecf1a06d73c4d6accecd3277fd9ba1ec25e92e02f3dd1cd0cbd4adde3c38e8391feb26eb913cb9ddf84fcc5724cb7615b02a34603c8fe66e8f2556699a843e7880ab79469a860b03c2cbaf4f4492cea01613005d2cbf14d06dc51a9a75fb6f05cb38fcff6418e006481ca5b48eaf3d9fad4e97253fb878586b1d13a896cc51092d123a6836503f16ab13d3c52fcb36871378eddc1a3dda3638b09564cc8cd877eccef21a1659b6792759dc73a54b48c672ed0616287436cd61654889c03f664e9528b00fef17499d6cc68fbe456dd207a33a6ebde19370257b749e43bd09e26c2e78b70fa1ef2b3498a17252b3c8cf09ca712b4e00af86e1286e49ab1f4f66ccf7475b880c01758a5617cbd5b536fd50e6d34f08aba52201ebe0ae5c8727a0b8e92df44474023064f6a1da1d4d82e78f941620e8d3c8f0edf4cff9cce59085ecbadbcb77f4b4b1479562c01b9003487402bf063bb4dcb28352d150ffd6710c988bad44f0b419d391efbfe8e9dd4ff493cd9259f4604b257efc7d4c8e47098000c9943aa8163c3cddf2152438b41bf583d36b8fd53353a3fc00d4821c4216e98d742747e95dc0c23d73d87e7ce863562ba81ead865d85af438d8aac80a1bf9787bc0db9935594fa57167e0bb40a3c693c951e55af9b17541a8d81626ac06034ce6a083ae7d49cbf403f09db5f4592d4030c057f7e380724b2ed2ac80d08e6c6a935047ef912585b4328ea4ffd68d19e3d8041c2557584aa66153079a8f97190c92f5c543811171045368447f8f0cfb01c739637662e89abc8542d418ea2aa865b15cfe14b25ae0c392856db4d377998742c426180eba4985947722aa04a31f93575b31c79f08b89714095594e8b886d2271a9b048cdc0ea9f768d9e1512b579047ee47deb211a192dbeb8c47159cd2f303afdf477280c9abc03587ecebce284863f4ca22a5b3e5766c7a013c6af00c70f90848464a862913ff29e62f47857691154a51e01af3d8be750234f2b3fdf5f44c64332f95bcdfd55642a26a2705b45865edf768bffca3dff3e61569235f6e7484757d45515bec2e800c46ea7ec1e0ab0d1fe2f85c7fe705c1cb99e6d4841ad39864b1aa77d5915bcb87164103ccf1033664051b17cbf22172c94fecf06db7943f38e0a35db914c9bb9d4d7f4f2e32bee852a95e94549be4469c68ff55771a450cc410df1faac8f24a771f1fa9cae469fbb77da6d82513efe610347efd73782d008b4cbc82f128d6551eee1d0663c31465075fe244afe35e13150aadba7fa451d2a9fcd41a421f81deda875aa01dfb9da0bf665e93bd944202ec3740ed1f5669735357857071db1aa48189fea47bba942ace575387e7c0470ffdb7840447ceb36b3aea97e4cc4bc7864acb19634bfe018d900eb492588abef6a9852dace75df18e1eea4a9dfa3c63ed3b07d98b92f846b7f8f312215e7ec46b08f41570b3239b2df7f847d0b7731fde6c94a402cefc969474fde604c67a03c3ac4257e4c960bb541cbefecc8d0d9af989f0fcf2f3b99d35c3e65eec28ae17b9595341d87c6e627e3f4a8dde06a0cab6f31c388dc1e1ae9554b3a204a45ffb80ef76f6acc3aebd6e18ddd4fe23cc7442eeabc31517800b23c5cfcdcef4f57b3f9a9e7d2902648a4dc87dc1cbde6c68a1e72ef5d863e556add1beaf2efa05b2064c8f5bd23aa53d62c6d77519dc4329b924963be40db2adc5a51bf78e2809ef23f91672b62a4ee2afc5d2e32f9690b7b0e8df09af5bd815a1b2189da9865f26b31291e0b6353f02b06dd781345c044af37e9671fbd42fc0e6594090fe8370a8deee7772ca9702f14e003f3d994a717eed52373b9ae74539e57ed8133ba876e922125f47a1f7c249fac7a392a2e39cd14665166a5c9821c6a84b847efb6f6d01800ef2145c60683e12b30838b9d9572e240043d103b9287b826037a70cc50c629550d9f1bca895791247ff2a7796002a83973079c39dc6e4217333f5a0f0443e3e92da9b30cdabc04304682d86e3bdb1198d19eeac5bc04dddf727111567c2b20509e7836cf3a9f11abeb0dd59f7ec5029256b3925b6a4a0f5df6caf9a2dcc2a3aeea394af5d3bb23911629de8b6ff5f0e11161dd6793fb3e90ea8179313f5a4cdba959a8954adaabf9e8733dfc9073d013b6d32fdb1d3dfc117cc6b3fc99f06362abf8390523ea2143edfb002d99d142a67ed1ced852c2cc0a553c6245a92807ba5d63b83689ab074cf16bddf8670fc34ed2cc293a0f850d9097c36eb2ca2937acc93c351ba8ab0e49396227838d35a3c88e87da654a6203606c52996389ec3361815b384265455737ba8075f80e5eace2af4dcbfb93e2aee102d03f0f199c3d7c5ee144224591a00e0720082ae8b3ec82e8ecd8fea6ae0842962555534fa760b6ccef16b1abe3e8c28840518b63179a5224175444da13f46cd60b482b8f36d3fa01c17fcd37312b9d3b36bd367a10f19e5b2b8ab30685e7808df3091de323ef9ad8f401f3a048d7c66cf74f6ff7b968cfbaf6dfd6eaa5b7c7e4db62de47b0e8991963f6ca3ef35a6988ce64882f258", 0xa45}], 0x1}}], 0x1, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92, 0x4000})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3, r2}, 0xc)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5e687a8a6a003300020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff", 0xa5)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=""/4092})
r5 = eventfd(0xf7b2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x22, 0x0, &(0x7f00000008c0)="f6f4e9a1000000000000000d0800c32a8bc678bbd404fcd535fdc8a75167efec52a9", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000005c0)={'dvmrp0\x00', &(0x7f00000000c0)=@ethtool_dump={0x3e, 0xffffff00, 0xfc17a14}})
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r5})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c09425, &(0x7f0000000500)={"36db514746a035813869edd3d86d9a21", 0x0, <r8=>0x0, {0x1000}, {0x12, 0x1}, 0x7, [0x7, 0x8, 0x7, 0xb0d, 0x401, 0xffffffff, 0x2, 0x1, 0x1, 0x8000000000000000, 0xc, 0x7, 0x7, 0x6, 0xffffffffffffffff, 0x3]})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000002ac0)={{r0}, r8, 0x18, @unused=[0x401, 0x1, 0x8, 0x9b], @subvolid=0x3})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

795.529451ms ago: executing program 3 (id=592):
r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3, 0x59032, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="230000001200000002000000ffff000005"], 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x38}}, 0x44080)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES16=r0, @ANYBLOB="140001800800010000000100050006"], 0x2c}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1}, 0x0, 0x0, 0xc00000000000}, 0x20)

737.613335ms ago: executing program 0 (id=593):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000280)={{0x4, 0xfffd, 0x8, 0xe1a4}, 'syz0\x00', 0x10})
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040880}, 0x4001)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
openat$random(0xffffff9c, &(0x7f0000000100), 0x8000, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r3}, 0x38)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001f00)=@newtaction={0x14, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_vhci(&(0x7f0000001780)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x45}, @l2cap_cid_signaling={{0x41}, [@l2cap_conn_req={{0x2, 0x3, 0x4}, {0xfff, 0xffff}}, @l2cap_conf_req={{0x4, 0x8, 0xc}, {0x0, 0x75cb, [@l2cap_conf_ews={0x7, 0x2, 0x5}, @l2cap_conf_ews={0x7, 0x2, 0x9d5}]}}, @l2cap_conf_rsp={{0x5, 0x3, 0x11}, {0x8000, 0xb59, 0x0, [@l2cap_conf_ews={0x7, 0x2, 0x30}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_create_chan_rsp={{0xd, 0x3, 0x8}, {0x3, 0x37f5, 0xe9, 0x5}}, @l2cap_disconn_req={{0x6, 0xc, 0x4}, {0x7, 0x1}}]}}, 0x4a)
openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000003010101000000001646741400000000"], 0x14}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x80)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000040)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-twofish-avx\x00'}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000300)="80ba9fe37fe15a4003faed2aa9e3563d271030df15105f522e579c6c6290bec90b4f8210a0f02e15b44b489261f66f7b55590ab6b57c91bdfaddcdd76da1e17c1ebd1e6fe8d347d26d9c22ca75fd4066debe5346f9f1de6ca20ded2e2265a6fe8a9d3311508e0033abbbc5dce4fd4276b6c2af72fae05562868f55a38d65bfbe0a81875ed4d0fc68df802cae8bdf976328000b906deb7ff649363e341a34c8903dbefef1cd63a4286405f603e1d0030aa2b26c16d22f0187b6dc372249d5a70f1640e3f1736951", 0xc7}, {&(0x7f0000000400)="d0b60c8e4f23a541b142399ff1171fa464f6ae93c7", 0x15}, {&(0x7f0000000440)="e9a382cb415c427737332b8793744a6be8d7063a063237bcf02ffe0958161a027232e909508c526f5c29b0100731cea6caf22ab49719088c2e23b01798773e78c866f04dfe7a527ff46ce7ae8ce7270e7781918b961b75bbb891fca4d623a9a3e44ce3ed334a95add657e440a499931b6b362c0f1822b33bc546bab04a2c5de7d9e2579627b52afa2674f1006f0fa1eddc61d85163c02964c7f1adc2afef586ebcecd72c22bf894a35299b24ae1d8ac4d64986987490912196780ef837", 0xbd}], 0x3}, 0x1)

649.605333ms ago: executing program 3 (id=594):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00fbcb01011d00000c0000000000000000000000000902935665a27c78c8d23d45f15c43cf03be7c3f9e5c1c9a108f3cfe97bdceba6eb860837cf964f1a40a0dfe429918a3c16e713966aef513ac9a2d7a804f79f99baa4e2de682cd3471308f680bba63ae00cd6eb70cc950bb0dcc5635983202a01ed1945cd59d70f9f1cea6ff6e9c1402093af700fe38c5f8df90974e54ec83f85730dbdcfb9c070816b79f030fe69f5ad153977e9e549980b982fca4c898545f1433b1f69a09e5dfede5075400000000"], 0xcb, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000400)=0x79)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0)
read$FUSE(r5, &(0x7f0000001a80)={0x2020}, 0x2020)
sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40040e0}, 0x20004800)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(jvo', @ANYRES16=r6, @ANYBLOB="01032cbd7000fedbdf2500000000140002007767310000000000"], 0x28}, 0x1, 0x0, 0x0, 0x2004c001}, 0x20040000)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)

405.426414ms ago: executing program 1 (id=595):
request_key(&(0x7f00000008c0)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000004c0)='\xfep\xb1\xabK-\x03\x00\xe5\x81\xb8}\xe6^\xab:B3\x00\x00\x00\x1e\x9a&rs\xcf\xd9\xde(\xdet|\xd7\x14\xe7\xe7%6\xc5\xf9\xe5\x1cx\xdf\x85\xbe7\x9e*U\x8d \xa8\'\xff\x0fl7-8Jn\x0e\x86:v\xcc9K\xc18\xd7\xc9\xc3F\xef\xd5F\xd6~k:\xf8\xc6E$\x0f\xb3Q\rI\xeb(\r$\x1aP\xaf\x8a\xdcx%j_\xe5\xa1\xb1\xf6Q\xb8\x88\x93c\a\\\xd3\x03\xfc\xba[b~f\xf3\x88', 0x0) (fail_nth: 10)

289.916338ms ago: executing program 2 (id=596):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000280)={{0x4, 0xfffd, 0x8, 0xe1a4}, 'syz0\x00', 0x10})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x15)
ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x14, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20040880}, 0x4001)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
openat$random(0xffffff9c, &(0x7f0000000100), 0x8000, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r4}, 0x38)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001f00)=@newtaction={0x112c, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x1118, 0x1, [@m_police={0x1114, 0x1, 0x0, 0x0, {{0xb}, {0x10e8, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x25242e8}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x5, 0xad8, 0x10001, 0x8001, 0x5, 0x7fff, 0xfffffff6, 0xfffffff4, 0x46, 0x5, 0x8, 0x0, 0x1, 0xd7, 0x0, 0x97, 0x8000, 0xa3, 0x3, 0x7, 0x100, 0x44a8, 0x6, 0x8001, 0x0, 0x7, 0xc4c7, 0x7ff, 0x44, 0x3, 0x0, 0x8, 0x8, 0x28, 0x8, 0x213580fd, 0x2, 0x1, 0x0, 0x5, 0x3, 0x31, 0x7, 0x200, 0x76, 0xec8a, 0x5, 0xe, 0x101, 0x0, 0xe5, 0xc, 0x5, 0x7, 0x4, 0x2, 0x0, 0x80dd, 0xb0, 0x35a26e02, 0xffff, 0xbf, 0x83b, 0x2, 0x200000, 0x8c, 0x2bf, 0x81a8, 0x8, 0x100, 0x3, 0x400, 0x0, 0x7, 0x2, 0x0, 0xffffffff, 0x6, 0x9, 0x237, 0x8, 0xb1, 0x7, 0x11, 0x3, 0x8e, 0xb55, 0x8000, 0x5, 0x6, 0xffffffcd, 0x2, 0x4, 0x80000000, 0x9, 0x7, 0x5, 0xc56a, 0x8, 0xffff, 0x2, 0x3, 0x5c, 0x8, 0x0, 0x6, 0x3, 0x50, 0x10000, 0x8001, 0x5, 0x1, 0x6, 0x7, 0xd, 0x9, 0x10000, 0x19, 0x91d, 0x3, 0x200002, 0x1, 0x3, 0x3, 0x7ff, 0x401, 0x7, 0xd70, 0x2c, 0x9, 0x3, 0x6070, 0xfff, 0x1000, 0x8, 0x4, 0x6, 0x5, 0x4, 0x7c, 0x488531db, 0x40, 0x6, 0x5, 0xfffffffb, 0x1000000, 0x1ff, 0x5, 0xc7, 0x0, 0x8, 0x5, 0x5, 0x7, 0xfffffffb, 0x5, 0x5c, 0x1000, 0x3, 0x527, 0x3, 0x5a85, 0xf6, 0xc, 0x1, 0xaa7a, 0x6, 0x1, 0xee1, 0x80000000, 0x825f, 0x9, 0x40, 0x233, 0x80000001, 0x6, 0x401, 0x9, 0x618, 0x6, 0x4, 0x1, 0x846, 0x7, 0xb46, 0x9, 0x1ff, 0xe0, 0x4, 0xd, 0x1, 0xc98, 0x3, 0xffff8000, 0xc, 0x6, 0xfe, 0x1, 0x8, 0x2, 0x2, 0x2, 0xbecd, 0x9, 0x3, 0xba, 0x400, 0x8fe1, 0x371, 0x80, 0x2, 0x8000, 0x10000, 0x9, 0x5, 0x6e36c67d, 0xbe4, 0x7f, 0x1, 0x7, 0x2, 0x3, 0x1, 0x64, 0x8843, 0x6, 0x80, 0x3, 0x6, 0xfffffe01, 0x5, 0x8001, 0xfffffff7, 0x9, 0x9, 0x3ff, 0x751, 0x0, 0x1, 0x8, 0xfffffff3, 0xe, 0x7fff, 0xff, 0x800, 0x3, 0xd, 0x80000000, 0xe, 0xc0, 0x6, 0x6397, 0x9f9, 0x239, 0x89e4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x38f43bb0}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x5e5, 0x0, 0x1, 0xa, 0x2, 0x5, 0x0, 0x5, 0x7, 0x2, 0x4, 0x0, 0x2, 0x1000, 0x7fffffff, 0x80, 0x6, 0x0, 0xffffffff, 0xaffc, 0x1, 0x34, 0x1, 0x4, 0x1, 0x5, 0x9, 0x4, 0x4, 0x1, 0x151d, 0x5, 0x6, 0xfffffffa, 0xd, 0xebc, 0x8, 0x752e, 0x8, 0x289, 0x100, 0xffffffff, 0x7f, 0x7fffffff, 0x101, 0x7f, 0x2, 0x5, 0x5, 0xfffffff7, 0x1, 0x5, 0x3, 0xd, 0x0, 0x7f, 0xffff2a91, 0x3, 0x100, 0x5, 0x2ce, 0x7f, 0xc14, 0xfff, 0x6, 0xfffffff7, 0x5, 0xd9, 0xffff6d2d, 0x7e, 0x0, 0x2, 0x4, 0xd1, 0x0, 0x0, 0x85, 0x1, 0xadfb, 0xd34, 0x9, 0xf324, 0x2000, 0x1, 0x5, 0x80, 0x1000, 0x0, 0x0, 0xecc1, 0xc, 0x1000, 0x7fffffff, 0x4, 0x4, 0x0, 0xfff, 0x7, 0x4, 0x7, 0x22, 0xa, 0x3, 0x2, 0x3e78, 0x134, 0x9, 0x80000001, 0x608, 0x80e8, 0x371, 0x8, 0x6f, 0x0, 0xfffff801, 0x6, 0x0, 0x4, 0x5, 0xffff, 0x0, 0x720fbc85, 0x101, 0x1ff, 0x48, 0xa3f, 0x4, 0xf46b, 0x9, 0x0, 0x4, 0x9, 0x401, 0x81, 0x84c, 0x6, 0x3, 0x5, 0xffff, 0x6, 0x7, 0x31a, 0xa, 0x9, 0xc16, 0x3ff, 0x0, 0x8001, 0x9, 0x1ff, 0x4, 0x68000000, 0x5, 0xfff, 0x800, 0x4, 0x30e9, 0x1, 0x9, 0x6, 0xec, 0x0, 0x7, 0x1, 0x8, 0xe0000, 0x0, 0x7, 0x8000000, 0x3, 0x7f, 0x1ff, 0x2, 0x9, 0x0, 0xfffffff1, 0xeb, 0x6, 0x10000, 0x0, 0x3, 0x6, 0x9, 0xdbe, 0x1000, 0x800, 0x3, 0x2, 0x3, 0x10001, 0xa, 0x7, 0x4, 0x4, 0xffffffff, 0x8, 0x0, 0x8000, 0x7, 0x8, 0x2, 0x8, 0x9, 0x238, 0x800, 0xffffffff, 0x4, 0x5, 0x9, 0x3c, 0x8000, 0x5, 0x1, 0x400, 0x2, 0xd, 0x200, 0xc, 0x2, 0x3, 0x1ff, 0x4, 0x0, 0x212c6b57, 0x75, 0x7, 0x70, 0xfffff219, 0xffffffc0, 0x2, 0x200, 0x6c, 0x7, 0x6, 0x9, 0x6bb1, 0x6, 0x8, 0x1, 0x9, 0x6a, 0xbf, 0x2, 0x2, 0x9, 0x9, 0x2, 0x9, 0x1, 0xc, 0x9, 0x8, 0x10000, 0x7, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6000, 0x5, 0x757ab92d, 0x9b5, 0x3, {0x3, 0x0, 0x0, 0x3, 0x7, 0x8}, {0x1, 0x1, 0x3, 0xe5e, 0x7ff, 0x8}, 0xe, 0x8, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x10000000, 0x5, 0x7fffffff, 0xfffffffe, {0x2, 0x2, 0x7, 0x8001, 0x101, 0x656}, {0x4, 0x1, 0x80, 0xfad, 0xe, 0x3}, 0x0, 0x9, 0xffff}}], [@TCA_POLICE_RESULT={0x8}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x8001}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x100, 0x9, 0x3, 0xfffffff7, 0x1ff, 0x8, 0x4, 0x10000, 0x7fffffff, 0x0, 0x3ff, 0x9, 0x200, 0x7fff, 0x4, 0x8, 0x9000000, 0x1, 0xa, 0xffff751a, 0x1, 0x6, 0xc9e8, 0x8001, 0xffff, 0x9, 0xb, 0x8, 0x7, 0x100, 0xf, 0x2, 0x5, 0x38, 0x0, 0x5b2d, 0x0, 0x5, 0x5, 0x5, 0x9, 0x6, 0x3ff, 0x6, 0x5, 0x21, 0x1, 0x8, 0x9, 0x5, 0xf0c, 0x4, 0x1, 0xc48, 0x60000, 0x10001, 0x62e5, 0xf5, 0x3, 0x4, 0x6, 0x8, 0x6, 0x4, 0x7fff, 0x4, 0xb7, 0x4, 0x9, 0xdaff, 0xdca, 0x6711, 0x2, 0x6, 0x10001, 0x4, 0x101, 0x3, 0xde5, 0x3, 0x401, 0xffffffbc, 0x8000, 0x1, 0x6, 0xa9, 0x7, 0x9, 0x4, 0x8, 0x3, 0x1, 0xc, 0x4, 0x3, 0x6, 0x0, 0xf5, 0xf, 0x8, 0x1, 0x5, 0x3, 0x6b, 0x6, 0x8, 0x8001, 0x4, 0x0, 0x7, 0x7fff, 0x4, 0x0, 0x8, 0x9f4d, 0x9, 0x1000, 0xa10, 0x6, 0x0, 0x7, 0x7, 0x5, 0x1, 0x4, 0xfffffff7, 0x7fff, 0x9, 0x3, 0x5, 0x717, 0x5, 0x5, 0x4, 0x75, 0x401, 0x6, 0x5, 0x7, 0xd9e, 0x0, 0x7, 0x0, 0x97e2, 0x6, 0x6, 0x1ff, 0x6, 0xfffffffa, 0x2, 0x1000, 0x4, 0x800, 0xfffffff9, 0x8001, 0x3, 0x6, 0x69, 0x0, 0x6, 0x401, 0x474, 0x6, 0x1, 0x0, 0x7b75b7e8, 0xd, 0x401, 0xff, 0x3, 0xd93a, 0x6, 0xb98, 0x0, 0x401, 0x2, 0x6, 0x58, 0x3, 0x38f08769, 0xa78e, 0x7, 0x6, 0x7fff, 0x5, 0xa1b6, 0x5e5a, 0x9, 0x1, 0x1, 0x2, 0x1, 0x6, 0x2, 0xff, 0x4000, 0x0, 0x3, 0xb, 0x9, 0xc060da9, 0x8, 0xfffffffc, 0x0, 0x0, 0x1, 0x6, 0x9, 0x10, 0xa2, 0x2, 0xfffffffc, 0x10, 0x5, 0x4, 0x7392, 0x1, 0x2, 0x6, 0x6, 0x4, 0x9, 0xb1e2, 0x2, 0x1, 0xff, 0x6281, 0x5f, 0xc, 0x0, 0x2, 0x0, 0x7, 0xf987, 0xfffffff7, 0x3, 0x8, 0x2, 0x401, 0x6, 0x2, 0xb, 0x80, 0xfffffff7, 0x1, 0xffffad25, 0xa03, 0xff, 0x0, 0x2, 0x4, 0x4, 0x81, 0x4, 0x3, 0xf]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x8, 0xd4e4, 0x40, 0x3, 0x6, 0x64b8, 0x155a, 0x1000, 0x5dd900, 0x7ff, 0x2800000, 0x401, 0x5d, 0x6, 0xffff, 0x6, 0x80, 0x101, 0x3005f5ab, 0x3b7e6b03, 0xfff, 0x5, 0x2, 0x10000, 0xe, 0x8, 0x4, 0x8, 0x2, 0x7fffffff, 0x566, 0xb1, 0x5, 0x0, 0x0, 0x4, 0x81, 0x1, 0x8, 0x10001, 0x3, 0x0, 0x30000, 0x2, 0x0, 0x1, 0x0, 0x2, 0x2, 0x1, 0x0, 0x2, 0x0, 0x5, 0x1, 0x7, 0x1, 0x5, 0x1, 0x1000, 0x9, 0xfffffffb, 0x8, 0x3, 0xc00000, 0x5da, 0xffff7fff, 0x787, 0x7, 0x5, 0x8, 0x6a65, 0x1, 0x0, 0x5, 0xd6, 0x9, 0x6, 0x3, 0xa, 0xa0b0, 0xffffff81, 0x3ff, 0x1ff, 0xfffffff6, 0xa, 0xf, 0x6, 0x6, 0x7fffffff, 0x3, 0x10000, 0x31a2, 0x10000, 0x9, 0x5d86a571, 0x101, 0x8, 0x9, 0x1, 0x3, 0x2, 0x3, 0xa361, 0x4, 0xfffffff8, 0x80000000, 0x10001, 0xe, 0x2, 0x3d7a3cad, 0xcba, 0x7, 0x8, 0x7, 0x4, 0x800, 0x2, 0x2, 0x7, 0xfffffe00, 0x9, 0xbb7, 0x10, 0x9, 0x1, 0x5, 0x0, 0xff, 0xf, 0x45f, 0x7, 0x6, 0x9, 0x3, 0x7, 0x9, 0xfffffc01, 0x1b9, 0x1ff, 0x10000, 0x2, 0x8, 0xf, 0x5, 0x2, 0x3, 0xecd4, 0xd7, 0x7, 0x6, 0x7, 0x5, 0x7, 0x4, 0x78ad195f, 0x2, 0x6, 0xc, 0x1, 0x7, 0x76, 0xffffffff, 0x4, 0x8, 0x3, 0x7, 0x4, 0x400, 0x5, 0x0, 0x7, 0x2, 0xff, 0xbcdc, 0x40, 0x5, 0x5, 0x2, 0x9, 0x1, 0x2, 0x6, 0x3, 0x39f6, 0xfff, 0x40, 0x5, 0xbf, 0xe8, 0x7fff, 0x2, 0x8, 0x10000, 0x80000001, 0x5, 0x3, 0xc7, 0x7ff, 0x0, 0xfffffff9, 0x3, 0xd23, 0x4, 0x66, 0x2, 0xffffffff, 0x6, 0x9, 0x5, 0x4, 0x8, 0x7, 0xd, 0x7, 0x9, 0x2, 0x5, 0xffffffd4, 0x0, 0xfff, 0x0, 0x6, 0x200, 0x0, 0x0, 0x2, 0x0, 0x7f, 0xfffff801, 0x8, 0x4, 0x9, 0x3, 0x9, 0x2, 0x0, 0xfff, 0x800, 0x9, 0x40, 0x5, 0xfffffffb, 0x8, 0x799, 0x4, 0x3, 0x9, 0x80, 0x3, 0x4, 0x7f, 0x0, 0x4, 0x57]}]]}, {0x4}, {0xc, 0x3, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x112c}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_vhci(&(0x7f0000001780)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x45}, @l2cap_cid_signaling={{0x41}, [@l2cap_conn_req={{0x2, 0x3, 0x4}, {0xfff, 0xffff}}, @l2cap_conf_req={{0x4, 0x8, 0xc}, {0x0, 0x75cb, [@l2cap_conf_ews={0x7, 0x2, 0x5}, @l2cap_conf_ews={0x7, 0x2, 0x9d5}]}}, @l2cap_conf_rsp={{0x5, 0x3, 0x11}, {0x8000, 0xb59, 0x0, [@l2cap_conf_ews={0x7, 0x2, 0x30}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_create_chan_rsp={{0xd, 0x3, 0x8}, {0x3, 0x37f5, 0xe9, 0x5}}, @l2cap_disconn_req={{0x6, 0xc, 0x4}, {0x7, 0x1}}]}}, 0x4a)
flock(0xffffffffffffffff, 0x2)
openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x80)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000003010101000000001646741400000000"], 0x14}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x80)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000040)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-twofish-avx\x00'}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000300)="80ba9fe37fe15a4003faed2aa9e3563d271030df15105f522e579c6c6290bec90b4f8210a0f02e15b44b489261f66f7b55590ab6b57c91bdfaddcdd76da1e17c1ebd1e6fe8d347d26d9c22ca75fd4066debe5346f9f1de6ca20ded2e2265a6fe8a9d3311508e0033abbbc5dce4fd4276b6c2af72fae05562868f55a38d65bfbe0a81875ed4d0fc68df802cae8bdf976328000b906deb7ff649363e341a34c8903dbefef1cd63a4286405f603e1d0030aa2b26c16d22f0187b6dc372249d5a70f1640e3f1736951", 0xc7}, {&(0x7f0000000400)="d0b60c8e4f23a541b142399ff1171fa464f6ae93c7", 0x15}, {&(0x7f0000000440)="e9a382cb415c427737332b8793744a6be8d7063a063237bcf02ffe0958161a027232e909508c526f5c29b0100731cea6caf22ab49719088c2e23b01798773e78c866f04dfe7a527ff46ce7ae8ce7270e7781918b961b75bbb891fca4d623a9a3e44ce3ed334a95add657e440a499931b6b362c0f1822b33bc546bab04a2c5de7d9e2579627b52afa2674f1006f0fa1eddc61d85163c02964c7f1adc2afef586ebcecd72c22bf894a35299b24ae1d8ac4d64986987490912196780ef837", 0xbd}], 0x3}, 0x1)

59.92026ms ago: executing program 1 (id=597):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="bf16000000000000b7070000ff030000487000000000000050000000000000009500000000000000e83d24a394a293b3bd23212fb56fa54f0b71d0e6adfefc41d86b60717142fa9ea4318123741c0a0f168c1886bf0fccf8d56ccb659427cf8593dbe3a2a3ad358061011fbc5ba1f07318988e6e01a41cc0990d0dc840a23f72eca0b2d89fc474c2a10000000077beee1cebf45fab73962fa8f6296b32a8343881dcc7b1b85f3c3da4cd36414e90a61965c3de4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d0054ce21fa41181a9580cfca031e5388ee5c9a7ddd04201f5200001fcadf95e5a4725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f588cb211624f40401691721715f46e0500000000000000a663739a190a4e825c908c0abc85d457ec5a57cb706eef32a3ed12d63c9c4c508530e173650a8a8f2a9c81bcffe437bccbe158024d8d4939e6fd9adc43f0f4b049218db92bf466e934330ed79bc9f626d68b0000600057d14854eef851bc8c30f5d0df6b94ea0b852d495085ff4eabaac9606f0497958c2c357a7124a69f6770ea6702bc53896a15fad5e55c64efd217450a975221b20d78e445e3da74a3c1e59bae44546bde4ac6de55a480f3ad5dc0f2d1818b696492285f60d914283f8d687b0bdb46261277671bba2c550bfef679bddf38ab35eaaf0268c4efa45b56a188a9195044a222ec06bb49784d5608d87c4832e4305bf8889e5db2a70f6a83d4b3cdc12546d2e9f6720dec489b6276856de6d895704ba3e8ee12c8121ffc4f5d2ae03f0227dcc4f38699d3db16f69ed45e918b07ce58bf576e253364fe0000000084f897400d4f5503a6e9ea4a480e3221f3c247ee8c55e487eaa25a7689689c9c305da4b0181f0f653fec399fcc0cc800e82bde039cc29c19b538c76e65642875bddbef61e5985751d9ebd37d2f32375357b5d2b4dc24baa6a7010038380f7029a292f1ad05000000e4e801a819aef69d081e2cacaa8ad1b4ca6df5dc37962ebc5337379e00645b6d2bec249c0612510000000000a7060d8d9b9ad109b62d1dab0eec6beabc76d765b9caf70900000399772ddfe89be4338e70d0ecfed537780a31fcaf4acaf9bd3711a4359d68ec71b0693ede07e7d18e797697901fbae4a9d9966b68eadae75ef1b8931b0818a57e5136fb8c61d73b17d8fd55c2b8d321a6cba8743114fcff01e5c10200c512000800009a021d377e477ea807cc00919ee8bfbd090034f67609cfde8877b5bb072572b421d6b1fdae83e5e250190628d02d01f978323fe36685e652ceb218a9cc9e125a4880faccaf5ac2345f20b1ee403885790500d0bc75c7e95d23904dc446e0201aafea0d3f4cc0cf285ccd000000000100005aee4199a34686905441c1fa62ed20328a10690432f59a4d3e05bd00997ea2b6f5213cb883d05b620f31869f6cce80f1ae09009ed7e3c5f3aa61bfd240cb9726bc512ba0eb1f68579c76144feb0100809f12bcf79c4d57f66703c2aee08e52de3eff160623e1af555dc7481128ed0bab22dcb6e5b6ac5e4010eaf2510fa440aabfdc80c77108c769ed2d666c555c6c38b30899a688d96a6c6dc0dd4309f6548765d3f53261b4890aa004e7f667a230b22bc6e248bf56b219d9a547b6e1c5077c9ba463329323b53910e7358b4d0c6882c590cf25e4d044a6afb10a070f285e3c94ed405aa8dc41718dd3f4bf474868538aad9a23f85a707e325c10a9f22e37c4213d0ca2910726de8e62d2e3ae7f64e40c7af3dc00bab70cf607869c5a11a03bce8aa43fa010348bc2fb420ba5e344fcdcb302548e571157d323f5fd535800284d32ffff000088ccd685f07309101a3196b705479897f4c9d97c4c7b77db7b15bfb4305d5e954a34385418e665af882a7d505323070929b228bc94b70300000066dab8c4e63debff174621a0ac7dd85b14cb7616ca23f044bd0ccd1c79292c3aa8f6e4a1c27315ef8d55781edbe368f72aeb2f48256131aaab707451c14747dfa3bb5f8725a98f6d3c797573f18810bf378e38107ece5cb7cf3b98975e9254248af60de2f04e2429d9b6eba525fd1b1b665f77710fa494e2b619c975acd535fc78696fc980573c35e9916f0000000000002c8ee5ec55faffffffffffffffcd59cc0600000053d0a1f4ea4477022c9f376b3191efeb46be3c174fb24009379bbc949fd2923715540556450f12d1645177ce3eca0d65d17deff51a024f0180000000006100499e829bda469048c70e5968375feb39e6918e591a384851ba3079ad9c376bdaf0650e212eb4185cbbb6c0dc0e699afc34ca3b9a307cd2519cd9b192d678492ea2228ff0817d68f97b18402d271036067c141b911c4e0207e2c9d37ac203f440e1a065a2d227c6ec860c0104000000000000fe7144ec680c0dac7b5906a6197c8173080c9ab3ecb72820f04a42e4a43ee3f325f93edb3a204b9c9dc8953375e37c83876f248d91f166676b54781c6855c5e067ab2c2c6d22b20a703d68d77312333deff80883cb5a25c738f4e7cbb075e10f5c36396156abb221adebb9303342bfa2b745a5e045d5db847e4810270ed1c5bbb1548ec3184ff9b8ed1687333d0e0412d452ba6b390199bd684ff458d6c8114833efde87215e5f9569d92d24579f3ef473bce24e61eb21336ad441eea93cbcb69d2156b9b6e3000000000000000000fc411d2eadcadc7c0a2c12410e4b9d634807f2a6f1c3a13508e274ecef5cfccb707a1640973973fd2d1d60138d9b7a778827fd07fbd093a0ba779dcd32556613e1fac161825da91acde7fa964c689b1f0ea96047a98260270c3a3ccb2142b074db79aa88614663ff33f9966502a2361e49aabe58eb086c5827dd9d92fa4ff0c0e8b949d585f2cbc111de478905cb37f3cbfb019c6daace508b926718506a577234468f9279a52360d1a80b88b4eb1cda949ca77b6ec43bdf5f5a400989705746b86b400947891b33d591ec5ea9ae45983273f62027998d72f83625021a72e27e0449fa154ade55071546d4000000000000000000000000000000002f907c5db9c967a1f86c57bb5062fed7c37ec16a7e62b6e370c3c5a32adee9032367814394a7a7fd12c44b81fb5ac2ad92220a72aa3355e894cbefe344a6b5eb4c25128d5427a640faae401eccf3aca4294410461e946010c50f9ee556b38eae0b252ef288397672bbbd17e5306589f93dc130b6be5b19dfb2462348355ef24762509cf29becacf8515abe299b8a7dfd585f5dbf7578bfdbfa37deeb872c3291b59349238add315cd18e6f4196b404e48955657d680511c7ba7f5e0f9d97d649583190c78015aaf4db05aa2a6cc9d00084ce958406e09fe508a0ee5feb2d34f48d87000000000000001108780004ec696f618c20771a7ae436d733f603f20c9189567b63d47fae002e616969d888a418d139a25b11c0da7aecb8c14f1a879f7b985ab634b0f5cdb2090ad2c336e9a28289247ef4f3cfcafa393927d27711ed0543a5e8ec6c1c62082549791f75fccd54582f990234496954e6e54bcbb90f2756912ab7e511a55a9e0512e5c1c10bcd76ee4799af611179a39bd0c0323cae1aaaaaa8dafb55bca104ada3252c5d9de5b9cdb6217c35ca3d28b1d8b9d2fa79376c13167a9ef1b1f4b7509debbeacc153ca8bea4a0a65ee1d1d20a9106499f0bf7f416b051e835d790ac978b90143d9125224f74b6167f7a967c7e33eb5f43570b9f3c91371968a30e528968b233d0396db424e5fd73d380318e9676d074dd5ce552a222e250f9f6d0bdd9e46e7f22d9abfd4573b57e3b52d407b464b0146ea15560a2ce034b1623fecc84842928223d17ce4ab31ef4c2a9f9caebf65341fa3da1bbae7972097e24603b9db8edc25a152bd39af179eab23ed555040c2bbb89ea22c08b97264b3616a41abfad0ab12a79574c60cf1841ea45f10e9438e55e1e0eb645200993b08833bb14517b0d0e5ba72bdacd92d57b6029129c95ab0a93857c7205e8450b27aee5e684ece77f53112873f40247a998cc896ab4d55573c7a7ef2936a29425cab46cd4fdd1452ea8429c63c74d5673f5e4d47d1b001d0d3a9e1d5c840ab37a69cb30d17ff7591f01549e552dc43b672e0feff94408171d682565dc2d84476297c6901040000cb9f7f2eb690d7a032c09f0a3d48663fe5ece30f592d71755dd6cbfac96016a2ecd4e499ce9adce6e59db0494fa25117a2bc13275c9a94a3532c1b8417e9ed5e6cd5f51f8ccc878ba73305ad19b0cf05625439cdf688d33c8fd6cf52c5c5685444b65eb918884727d3a780bdac17d447745e4accd85d3aca4d63127bb3a58095cffa08a6cecae329dd5f47552c40b560b05e962363e99300d61931ddd97444c2bae02edb26383cb96ee7d2742d24dc7e9b6dac831674ae09b7d180ebb30b9221480ad78706dadf7ca3540eb6c6c43dc7e31b2c8d188f28d6ab10d3c0c97b9f6b5feb9abeb6a801975c0bbab0b1fed7485f2fca1730906a6dc1914386118646dab2618582c4ce0a8ce7a1a3ca7d56f6ca8c7d43cad0116c70751a0db051d9adc4ab34dafbca31fecd9191d38fa011a4c1fc19df0b9aac3a0de17dc01b413c4d4eccf9eb1cd90569508fc6479111544807f11dad193a170ac290f28d3e7f702c5bced7ed90c3251897446fdbb1195136d9092168e2deedb3e0afdf0f543363fbf8759df07270981c0bd7260998963e45a2c84e8b82ddfa98dab68a23cfb2ffa4fcc4ebcd38f273e9bdb240f77eb51e259bb88dc383b19107af39ffcc708a1278b3e53c2130a9c7150593794f8f22ae9b2ff0d46c8d175bf9ff227870f1dcecd5b564d20230ac32a10982cf1bbe5ca15ed6d85b2c447f3fb0872ea6170352fd4c76c75941d1c3684a466c81a5892e9f56c0b512be586381c2390aaf93347d318aa5de4322b11088435730c69bc1cfd96d869803a3113b2a33dbf7973434ba9e4ec15c0423bb384975498ff56bf8b51237dadf6264532fdca7c44e485e4c9b695cd000"/3569], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = syz_open_dev$vbi(&(0x7f0000000680), 0x3, 0x2)
ioctl$VIDIOC_SUBDEV_G_EDID(r2, 0xc0285628, &(0x7f0000000240)={0x300, 0x1, 0x71, '\x00', &(0x7f0000000200)=0xa5})
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c)
bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

58.914357ms ago: executing program 2 (id=598):
r0 = getpid()
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=@setlink={0x90, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x16122}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @ipip6={{0x58}, {0x58, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3b}}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_FWMARK={0x0, 0x14, 0x1}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x10}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}, @IFLA_NET_NS_PID={0x8, 0x13, r0}]}, 0x90}, 0x1, 0x0, 0x0, 0x24004040}, 0x20000000)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
r3 = socket$inet_tcp(0x2, 0x1, 0x6)
setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10)
sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
shutdown(r2, 0x1)

58.705889ms ago: executing program 1 (id=599):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='vhci_hcd.0\x00', 0xb)
prctl$PR_SET_MM(0x23, 0xb, &(0x7f00002d5000/0x2000)=nil) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20100}, 0x44010) (async)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}) (async)
r1 = epoll_create1(0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) (async)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000300)={0xe000000c})
r3 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000040), 0x2103, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000140))

0s ago: executing program 2 (id=600):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = eventfd2(0x7, 0x800)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x4, 0x100000, 0x4, r3, 0x2})
r4 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000080)="fb0149dd033be3ac4e37c4005a9614fbff67521ce16f8f09449a7a836b73312954000000000000000000000000000000000000000000000000000000dc6900", 0x0, 0x2e)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
eventfd2(0x7, 0x800) (async)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x4, 0x100000, 0x4, r3, 0x2}) (async)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000080)="fb0149dd033be3ac4e37c4005a9614fbff67521ce16f8f09449a7a836b73312954000000000000000000000000000000000000000000000000000000dc6900", 0x0, 0x2e) (async)

kernel console output (not intermixed with test programs):

 RIP: 0023:0xf71673eb
[   74.536061][ T6293] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[   74.536077][ T6293] RSP: 002b:00000000f54264bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[   74.536095][ T6293] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f54265d0
[   74.536106][ T6293] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[   74.536116][ T6293] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   74.536125][ T6293] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   74.536134][ T6293] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   74.536155][ T6293]  </TASK>
[   74.734198][ T6297] overlayfs: failed to resolve './file1': -2
[   74.937286][ T6305] syz_tun: entered allmulticast mode
[   75.024966][ T6305] syz_tun: left allmulticast mode
[   75.172969][ T5746] ffs_data_put(): freeing
[   75.596911][ T6323] FAULT_INJECTION: forcing a failure.
[   75.596911][ T6323] name failslab, interval 1, probability 0, space 0, times 0
[   75.602431][ T6323] CPU: 0 UID: 0 PID: 6323 Comm: syz.2.123 Not tainted syzkaller #0 PREEMPT(full) 
[   75.602447][ T6323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   75.602454][ T6323] Call Trace:
[   75.602458][ T6323]  <TASK>
[   75.602463][ T6323]  dump_stack_lvl+0x100/0x190
[   75.602480][ T6323]  should_fail_ex.cold+0x5/0xa
[   75.602494][ T6323]  should_failslab+0xc2/0x120
[   75.602511][ T6323]  __kmalloc_noprof+0xfc/0x820
[   75.602526][ T6323]  ? tomoyo_encode2+0xfb/0x3c0
[   75.602545][ T6323]  tomoyo_encode2+0xfb/0x3c0
[   75.602564][ T6323]  tomoyo_encode+0x29/0x50
[   75.602579][ T6323]  tomoyo_realpath_from_path+0x18c/0x690
[   75.602599][ T6323]  tomoyo_path2_perm+0x366/0x700
[   75.602620][ T6323]  ? __pfx_tomoyo_path2_perm+0x10/0x10
[   75.602634][ T6323]  ? current_check_refer_path+0x2cd/0xde0
[   75.602665][ T6323]  ? do_raw_spin_lock+0x128/0x260
[   75.602682][ T6323]  tomoyo_path_rename+0xfc/0x1a0
[   75.602700][ T6323]  ? __pfx_tomoyo_path_rename+0x10/0x10
[   75.602720][ T6323]  ? do_raw_spin_unlock+0x145/0x1e0
[   75.602735][ T6323]  security_path_rename+0x18e/0x3c0
[   75.602753][ T6323]  filename_renameat2+0x731/0xa60
[   75.602772][ T6323]  ? __pfx_filename_renameat2+0x10/0x10
[   75.602789][ T6323]  ? __might_fault+0xc5/0x140
[   75.602809][ T6323]  ? do_getname+0x191/0x390
[   75.602824][ T6323]  __ia32_sys_renameat2+0xee/0x140
[   75.602839][ T6323]  __do_fast_syscall_32+0xe7/0x970
[   75.602854][ T6323]  ? lockdep_hardirqs_on+0x78/0x100
[   75.602869][ T6323]  do_fast_syscall_32+0x32/0x70
[   75.602884][ T6323]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   75.602899][ T6323] RIP: 0023:0xf7f67fec
[   75.602915][ T6323] Code: Unable to access opcode bytes at 0xf7f67fc2.
[   75.602920][ T6323] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000161
[   75.602932][ T6323] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000240
[   75.602939][ T6323] RDX: 00000000ffffff9c RSI: 0000000080000000 RDI: 0000000000000004
[   75.602945][ T6323] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   75.602951][ T6323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   75.602958][ T6323] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   75.602971][ T6323]  </TASK>
[   75.602985][ T6323] ERROR: Out of memory at tomoyo_realpath_from_path.
[   75.868491][ T6325] Config c/1 of g1 needs at least one function.
[   75.871923][ T6325] udc dummy_udc.0: failed to start g1: -22
[   75.874483][ T6325] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[   75.881246][ T6325] UDC core: g1: couldn't find an available UDC or it's busy
[   75.930217][ T6327] overlayfs: failed to resolve './file1': -2
[   76.170366][ T6329] autofs: Unknown parameter '/dev/net/tun'
[   76.416473][ T6339] gretap1: entered promiscuous mode
[   77.053919][ T6359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.149134][   T61] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[   77.320873][   T61] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[   77.325296][   T61] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   77.331760][   T61] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[   77.334674][   T61] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.337073][   T61] usb 5-1: Product: syz
[   77.338339][   T61] usb 5-1: Manufacturer: syz
[   77.340342][   T61] usb 5-1: SerialNumber: syz
[   77.345490][   T61] usb 5-1: config 0 descriptor??
[   77.350606][   T61] hub 5-1:0.0: bad descriptor, ignoring hub
[   77.352429][   T61] hub 5-1:0.0: probe with driver hub failed with error -5
[   77.357300][   T61] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input13
[   77.678767][   T61] IPVS: starting estimator thread 0...
[   77.779092][ T6373] IPVS: using max 42 ests per chain, 100800 per kthread
[   77.858755][ T5153] buffer_io_error: 9 callbacks suppressed
[   77.858773][ T5153] Buffer I/O error on dev loop7, logical block 1, async page read
[   77.883188][ T5153] Buffer I/O error on dev loop7, logical block 1, async page read
[   77.886688][ T5153] Buffer I/O error on dev loop7, logical block 1, async page read
[   77.890598][ T5153] Buffer I/O error on dev loop7, logical block 1, async page read
[   77.894032][ T5153] Buffer I/O error on dev loop7, logical block 1, async page read
[   77.897522][ T5153] Buffer I/O error on dev loop7, logical block 1, async page read
[   77.901814][ T5153] Buffer I/O error on dev loop7, logical block 1, async page read
[   77.905276][ T5153] ldm_validate_partition_table(): Disk read failed.
[   77.908054][ T5153] Buffer I/O error on dev loop7, logical block 1, async page read
[   77.912113][ T5153] Buffer I/O error on dev loop7, logical block 1, async page read
[   77.915600][ T5153] Buffer I/O error on dev loop7, logical block 1, async page read
[   77.919552][ T5153] Dev loop7: unable to read RDB block 0
[   77.922043][ T5153]  loop7: unable to read partition table
[   77.924769][ T5153] loop7: partition table beyond EOD, truncated
[   78.206254][ T6387] 9pnet_virtio: no channels available for device syz
[   78.285984][ T6390] 9pnet_virtio: no channels available for device syz
[   78.369280][   T61] usb 5-1: USB disconnect, device number 3
[   78.556748][ T6397] bond2: entered allmulticast mode
[   78.577147][ T6397] macvlan2: entered promiscuous mode
[   78.582570][ T6397] macvlan2: entered allmulticast mode
[   78.585811][ T6397] bond2: (slave macvlan2): Opening slave failed
[   78.736016][ T6403] netlink: 14 bytes leftover after parsing attributes in process `syz.2.144'.
[   78.850841][ T6413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.037993][ T6418] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[   79.050966][ T6418] FAULT_INJECTION: forcing a failure.
[   79.050966][ T6418] name failslab, interval 1, probability 0, space 0, times 0
[   79.055003][ T6418] CPU: 0 UID: 0 PID: 6418 Comm: syz.2.146 Not tainted syzkaller #0 PREEMPT(full) 
[   79.055018][ T6418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   79.055025][ T6418] Call Trace:
[   79.055030][ T6418]  <TASK>
[   79.055036][ T6418]  dump_stack_lvl+0x100/0x190
[   79.055054][ T6418]  should_fail_ex.cold+0x5/0xa
[   79.055067][ T6418]  should_failslab+0xc2/0x120
[   79.055083][ T6418]  kmem_cache_alloc_noprof+0x91/0x6a0
[   79.055097][ T6418]  ? stack_trace_save+0x8e/0xc0
[   79.055112][ T6418]  ? alloc_empty_file+0x5b/0x1c0
[   79.055129][ T6418]  alloc_empty_file+0x5b/0x1c0
[   79.055145][ T6418]  path_openat+0xe7/0x4280
[   79.055156][ T6418]  ? kasan_save_track+0x14/0x30
[   79.055170][ T6418]  ? __kasan_slab_alloc+0x89/0x90
[   79.055188][ T6418]  ? kmem_cache_alloc_noprof+0x26b/0x6a0
[   79.055206][ T6418]  ? do_getname+0x35/0x390
[   79.055226][ T6418]  ? do_sys_openat2+0xc7/0x1e0
[   79.055248][ T6418]  ? __ia32_compat_sys_openat+0x12d/0x210
[   79.055265][ T6418]  ? __do_fast_syscall_32+0xe7/0x970
[   79.055284][ T6418]  ? __pfx_path_openat+0x10/0x10
[   79.055317][ T6418]  do_file_open+0x20e/0x430
[   79.055329][ T6418]  ? __lock_acquire+0x49f/0x1a40
[   79.055348][ T6418]  ? __pfx_do_file_open+0x10/0x10
[   79.055368][ T6418]  ? _raw_spin_unlock+0x28/0x50
[   79.055380][ T6418]  ? alloc_fd+0x471/0x7a0
[   79.055395][ T6418]  do_sys_openat2+0x10f/0x1e0
[   79.055410][ T6418]  ? __pfx_do_sys_openat2+0x10/0x10
[   79.055426][ T6418]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   79.055443][ T6418]  __ia32_compat_sys_openat+0x12d/0x210
[   79.055460][ T6418]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[   79.055475][ T6418]  ? fput+0x79/0x100
[   79.055487][ T6418]  ? ksys_write+0x1ac/0x250
[   79.055497][ T6418]  ? __pfx_ksys_write+0x10/0x10
[   79.055510][ T6418]  __do_fast_syscall_32+0xe7/0x970
[   79.055525][ T6418]  ? lockdep_hardirqs_on+0x78/0x100
[   79.055539][ T6418]  do_fast_syscall_32+0x32/0x70
[   79.055554][ T6418]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   79.055569][ T6418] RIP: 0023:0xf7f67fec
[   79.055585][ T6418] Code: Unable to access opcode bytes at 0xf7f67fc2.
[   79.055589][ T6418] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127
[   79.055601][ T6418] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140
[   79.055608][ T6418] RDX: 0000000000080201 RSI: 0000000000000088 RDI: 0000000000000000
[   79.055614][ T6418] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   79.055620][ T6418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   79.055626][ T6418] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   79.055644][ T6418]  </TASK>
[   79.057979][ T6418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.862382][ T5744] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   79.933315][ T6430] fuse: Bad value for 'user_id'
[   79.935459][ T6430] fuse: Bad value for 'user_id'
[   80.021288][ T5744] usb 6-1: too many configurations: 9, using maximum allowed: 8
[   80.025150][ T5744] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   80.030860][ T5744] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   80.037029][ T5744] usb 6-1: config 0 interface 0 has no altsetting 0
[   80.040936][ T5744] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   80.044359][ T5744] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   80.050801][ T5744] usb 6-1: config 0 interface 0 has no altsetting 0
[   80.057297][ T5744] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   80.060865][ T5744] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   80.064913][ T5744] usb 6-1: config 0 interface 0 has no altsetting 0
[   80.077366][ T5744] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   80.081233][ T5744] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   80.086511][ T5744] usb 6-1: config 0 interface 0 has no altsetting 0
[   80.090238][ T5744] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   80.093788][ T5744] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   80.097901][ T5744] usb 6-1: config 0 interface 0 has no altsetting 0
[   80.104342][ T5744] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   80.107842][ T5744] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   80.111873][ T5744] usb 6-1: config 0 interface 0 has no altsetting 0
[   80.115409][ T5744] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   80.118860][ T5744] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   80.122978][ T5744] usb 6-1: config 0 interface 0 has no altsetting 0
[   80.126682][ T5744] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[   80.130574][ T5744] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   80.136281][ T5744] usb 6-1: config 0 interface 0 has no altsetting 0
[   80.141824][ T5744] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[   80.145659][ T5744] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[   80.149274][ T5744] usb 6-1: Product: syz
[   80.151023][ T5744] usb 6-1: Manufacturer: syz
[   80.152867][ T5744] usb 6-1: SerialNumber: syz
[   80.158075][ T5744] usb 6-1: config 0 descriptor??
[   80.169291][ T5744] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0
[   80.312861][ T6435] FAULT_INJECTION: forcing a failure.
[   80.312861][ T6435] name failslab, interval 1, probability 0, space 0, times 0
[   80.317887][ T6435] CPU: 2 UID: 0 PID: 6435 Comm: syz.0.152 Not tainted syzkaller #0 PREEMPT(full) 
[   80.317923][ T6435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   80.317932][ T6435] Call Trace:
[   80.317939][ T6435]  <TASK>
[   80.317946][ T6435]  dump_stack_lvl+0x100/0x190
[   80.317971][ T6435]  should_fail_ex.cold+0x5/0xa
[   80.317990][ T6435]  should_failslab+0xc2/0x120
[   80.318019][ T6435]  __kmalloc_noprof+0xfc/0x820
[   80.318037][ T6435]  ? rcu_is_watching+0x12/0xc0
[   80.318055][ T6435]  ? tomoyo_realpath_from_path+0xb6/0x690
[   80.318081][ T6435]  tomoyo_realpath_from_path+0xb6/0x690
[   80.318108][ T6435]  tomoyo_path_number_perm+0x23c/0x580
[   80.318127][ T6435]  ? tomoyo_path_number_perm+0x22e/0x580
[   80.318147][ T6435]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   80.318165][ T6435]  ? get_pid_task+0x106/0x250
[   80.318202][ T6435]  ? find_held_lock+0x2b/0x80
[   80.318221][ T6435]  ? __fget_files+0x215/0x3d0
[   80.318234][ T6435]  ? hook_file_ioctl_common+0x140/0x440
[   80.318254][ T6435]  ? __fget_files+0x215/0x3d0
[   80.318271][ T6435]  ? __fget_files+0x21f/0x3d0
[   80.318287][ T6435]  security_file_ioctl_compat+0xd3/0x230
[   80.318308][ T6435]  __ia32_compat_sys_ioctl+0xc2/0x360
[   80.318333][ T6435]  __do_fast_syscall_32+0xe7/0x970
[   80.318353][ T6435]  ? lockdep_hardirqs_on+0x78/0x100
[   80.318373][ T6435]  do_fast_syscall_32+0x32/0x70
[   80.318393][ T6435]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   80.318412][ T6435] RIP: 0023:0xf6ffefec
[   80.318433][ T6435] Code: Unable to access opcode bytes at 0xf6ffefc2.
[   80.318440][ T6435] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[   80.318456][ T6435] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000545c
[   80.318465][ T6435] RDX: 0000000000003f00 RSI: 0000000000000000 RDI: 0000000000000000
[   80.318474][ T6435] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   80.318482][ T6435] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   80.318491][ T6435] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   80.318510][ T6435]  </TASK>
[   80.318568][ T6435] ERROR: Out of memory at tomoyo_realpath_from_path.
[   80.883257][   T65] block nbd1: Receive control failed (result -32)
[   80.884371][ T6447] block nbd1: Receive control failed (result -32)
[   80.885138][ T5744] usb 6-1: USB disconnect, device number 3
[   80.895144][ T5744] yurex 6-1:0.0: USB YUREX #0 now disconnected
[   81.142582][ T6453] netlink: 'syz.0.156': attribute type 3 has an invalid length.
[   81.146051][ T5750] Bluetooth: hci3: ACL packet for unknown connection handle 200
[   81.157940][   T29] cfg80211: failed to load regulatory.db
[   81.193423][ T6456] FAULT_INJECTION: forcing a failure.
[   81.193423][ T6456] name failslab, interval 1, probability 0, space 0, times 0
[   81.194900][ T6455] Config c/1 of g1 needs at least one function.
[   81.199529][ T6456] CPU: 2 UID: 0 PID: 6456 Comm: syz.0.157 Not tainted syzkaller #0 PREEMPT(full) 
[   81.199550][ T6456] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   81.199560][ T6456] Call Trace:
[   81.199567][ T6456]  <TASK>
[   81.199574][ T6456]  dump_stack_lvl+0x100/0x190
[   81.199599][ T6456]  should_fail_ex.cold+0x5/0xa
[   81.199615][ T6456]  should_failslab+0xc2/0x120
[   81.199635][ T6456]  __kmalloc_noprof+0xfc/0x820
[   81.199654][ T6456]  ? __memcg_slab_post_alloc_hook+0x749/0x1160
[   81.199685][ T6456]  ? io_cache_alloc_new+0x45/0xe0
[   81.199712][ T6456]  io_cache_alloc_new+0x45/0xe0
[   81.199733][ T6456]  __io_prep_rw+0x21d/0xfb0
[   81.199754][ T6456]  ? __pfx___io_prep_rw+0x10/0x10
[   81.199782][ T6456]  ? __io_alloc_req_refill+0x2e1/0x330
[   81.199807][ T6456]  io_prep_rw+0x76/0x2c0
[   81.199829][ T6456]  ? __pfx_io_prep_rw+0x10/0x10
[   81.199854][ T6456]  io_prep_readv+0x20/0xa0
[   81.199878][ T6456]  io_submit_sqes+0xa03/0x2480
[   81.199906][ T6456]  __do_sys_io_uring_enter+0xa88/0x1b10
[   81.199928][ T6456]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   81.199946][ T6456]  ? __pfx___do_sys_io_uring_enter+0x10/0x10
[   81.199967][ T6456]  ? __fget_files+0x21f/0x3d0
[   81.199988][ T6456]  ? fput+0x79/0x100
[   81.200007][ T6456]  ? ksys_write+0x1ac/0x250
[   81.200022][ T6456]  ? __pfx_ksys_write+0x10/0x10
[   81.200037][ T6456]  __do_fast_syscall_32+0xe7/0x970
[   81.200058][ T6456]  ? lockdep_hardirqs_on+0x78/0x100
[   81.200080][ T6456]  do_fast_syscall_32+0x32/0x70
[   81.200101][ T6456]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   81.200121][ T6456] RIP: 0023:0xf6ffefec
[   81.200139][ T6456] Code: Unable to access opcode bytes at 0xf6ffefc2.
[   81.200146][ T6456] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 00000000000001aa
[   81.200163][ T6456] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000006000
[   81.200174][ T6456] RDX: 00000000fffffffd RSI: 0000000000000009 RDI: 0000000000000000
[   81.200183][ T6456] RBP: 0000000000000020 R08: 0000000000000000 R09: 0000000000000000
[   81.200191][ T6456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   81.200201][ T6456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   81.200223][ T6456]  </TASK>
[   81.242157][ T6458] input: syz0 as /devices/virtual/input/input14
[   81.267268][ T6455] udc dummy_udc.0: failed to start g1: -22
[   81.288224][ T6455] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[   81.294115][ T6455] UDC core: g1: couldn't find an available UDC or it's busy
[   81.351002][ T6458] netlink: 'syz.0.158': attribute type 3 has an invalid length.
[   81.354299][ T5750] Bluetooth: hci3: ACL packet for unknown connection handle 200
[   81.837164][ T6479] netlink: 'syz.2.164': attribute type 18 has an invalid length.
[   81.849174][ T6479] netlink: 16 bytes leftover after parsing attributes in process `syz.2.164'.
[   82.345079][ T6484] netlink: 'syz.2.166': attribute type 3 has an invalid length.
[   82.350331][ T5750] Bluetooth: hci1: ACL packet for unknown connection handle 200
[   82.495614][ T6489] netlink: 112 bytes leftover after parsing attributes in process `syz.1.168'.
[   82.528502][ T6487] smpboot: CPU 1 is now offline
[   82.600549][ T6493] syzkaller0: entered promiscuous mode
[   82.602317][ T6493] syzkaller0: entered allmulticast mode
[   82.665040][ T6487] smpboot: CPU 3 is now offline
[   82.691009][ T6497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.169'.
[   83.339675][ T6509] netlink: 'syz.3.175': attribute type 3 has an invalid length.
[   83.346870][ T5750] Bluetooth: hci2: ACL packet for unknown connection handle 200
[   83.616810][ T6513] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x47
[   83.643513][ T6513] i2c i2c-0: delete_device: Can't find device in list
[   83.776754][ T6516] 9p: Bad value for 'wfdno'
[   83.787865][ T6516] netlink: 32 bytes leftover after parsing attributes in process `syz.3.178'.
[   83.840605][ T6519] input: syz0 as /devices/virtual/input/input15
[   84.025700][ T6519] netlink: 'syz.1.179': attribute type 3 has an invalid length.
[   84.079190][ T6521] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[   84.158119][ T6527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.191658][ T6521] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[   84.207001][ T6521] kvm: requested 12571 ns i8254 timer period limited to 200000 ns
[   84.224111][ T6521] kvm: requested 12571 ns i8254 timer period limited to 200000 ns
[   84.230609][ T6521] kvm: requested 85485 ns i8254 timer period limited to 200000 ns
[   84.239959][ T6521] kvm: requested 93028 ns i8254 timer period limited to 200000 ns
[   84.243237][ T6521] kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[   84.248265][ T6521] kvm: requested 10057 ns i8254 timer period limited to 200000 ns
[   84.256277][ T6521] kvm: requested 155047 ns i8254 timer period limited to 200000 ns
[   84.270685][ T6521] kvm: requested 160914 ns i8254 timer period limited to 200000 ns
[   84.322246][ T6531] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   84.344960][ T6531] fuse: Bad value for 'fd'
[   84.355376][ T6531] bridge_slave_0: default FDB implementation only supports local addresses
[   84.392036][ T6533] netlink: 'syz.0.184': attribute type 3 has an invalid length.
[   84.401343][ T5750] Bluetooth: hci3: ACL packet for unknown connection handle 200
[   85.207826][ T6546] dvmrp0: entered allmulticast mode
[   85.281130][ T6546] serio: Serial port ptm0
[   87.192442][ T6565] overlayfs: failed to resolve './file1': -2
[   87.449207][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'.
[   87.524303][ T6586] input: syz0 as /devices/virtual/input/input16
[   87.846846][ T6586] netlink: 'syz.0.199': attribute type 3 has an invalid length.
[   87.855922][ T5750] Bluetooth: hci3: ACL packet for unknown connection handle 200
[   88.030289][ T6598] 9pnet_virtio: no channels available for device syz
[   88.319360][ T6602] blktrace: Concurrent blktraces are not allowed on sg0
[   88.618754][ T6605] FAULT_INJECTION: forcing a failure.
[   88.618754][ T6605] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   88.628793][ T6605] CPU: 2 UID: 0 PID: 6605 Comm: syz.2.204 Not tainted syzkaller #0 PREEMPT(full) 
[   88.628812][ T6605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   88.628819][ T6605] Call Trace:
[   88.628824][ T6605]  <TASK>
[   88.628829][ T6605]  dump_stack_lvl+0x100/0x190
[   88.628847][ T6605]  should_fail_ex.cold+0x5/0xa
[   88.628860][ T6605]  _copy_from_iter+0x43a/0x1690
[   88.628882][ T6605]  ? __pfx__copy_from_iter+0x10/0x10
[   88.628899][ T6605]  ? __pfx___alloc_skb+0x10/0x10
[   88.628919][ T6605]  netlink_sendmsg+0x808/0xda0
[   88.628934][ T6605]  ? __pfx_netlink_sendmsg+0x10/0x10
[   88.628948][ T6605]  ? apparmor_socket_sendmsg+0x15b/0x270
[   88.628976][ T6605]  ____sys_sendmsg+0xa4d/0xbe0
[   88.628987][ T6605]  ? __pfx_netlink_sendmsg+0x10/0x10
[   88.629000][ T6605]  ? __pfx_____sys_sendmsg+0x10/0x10
[   88.629017][ T6605]  ___sys_sendmsg+0x190/0x1e0
[   88.629030][ T6605]  ? __pfx____sys_sendmsg+0x10/0x10
[   88.629050][ T6605]  ? find_held_lock+0x2b/0x80
[   88.629072][ T6605]  __sys_sendmsg+0x160/0x210
[   88.629088][ T6605]  ? __pfx___sys_sendmsg+0x10/0x10
[   88.629106][ T6605]  ? __pfx_ksys_write+0x10/0x10
[   88.629120][ T6605]  __do_fast_syscall_32+0xe7/0x970
[   88.629136][ T6605]  ? lockdep_hardirqs_on+0x78/0x100
[   88.629165][ T6605]  do_fast_syscall_32+0x32/0x70
[   88.629181][ T6605]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   88.629195][ T6605] RIP: 0023:0xf7f67fec
[   88.629211][ T6605] Code: Unable to access opcode bytes at 0xf7f67fc2.
[   88.629215][ T6605] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[   88.629227][ T6605] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000600
[   88.629234][ T6605] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000
[   88.629240][ T6605] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   88.629246][ T6605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   88.629252][ T6605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   88.629266][ T6605]  </TASK>
[   89.073724][ T6619] overlayfs: failed to resolve './file1': -2
[   89.079496][ T6617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.124286][ T6621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'.
[   89.340085][ T6627] smpboot: Booting Node 0 Processor 1 APIC 0x1
[   89.636398][ T6627] smpboot: Booting Node 0 Processor 3 APIC 0x3
[   89.715783][ T6631] FAULT_INJECTION: forcing a failure.
[   89.715783][ T6631] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   89.720371][ T6631] CPU: 1 UID: 0 PID: 6631 Comm: syz.1.211 Not tainted syzkaller #0 PREEMPT(full) 
[   89.720387][ T6631] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   89.720394][ T6631] Call Trace:
[   89.720398][ T6631]  <TASK>
[   89.720403][ T6631]  dump_stack_lvl+0x100/0x190
[   89.720421][ T6631]  should_fail_ex.cold+0x5/0xa
[   89.720434][ T6631]  _copy_to_iter+0x5a4/0x1720
[   89.720454][ T6631]  ? __pfx__copy_to_iter+0x10/0x10
[   89.720470][ T6631]  ? __up_read+0x333/0x980
[   89.720483][ T6631]  ? __pfx___up_read+0x10/0x10
[   89.720494][ T6631]  ? seq_read_iter+0xd33/0x1270
[   89.720511][ T6631]  ? seq_read_iter+0xd33/0x1270
[   89.720531][ T6631]  seq_read_iter+0xdab/0x1270
[   89.720553][ T6631]  seq_read+0x344/0x4d0
[   89.720570][ T6631]  ? __pfx_seq_read+0x10/0x10
[   89.720586][ T6631]  ? __pfx___might_resched+0x10/0x10
[   89.720604][ T6631]  ? lock_acquire+0x1b9/0x370
[   89.720627][ T6631]  ? rw_verify_area+0xce/0x6d0
[   89.720643][ T6631]  ? __pfx_seq_read+0x10/0x10
[   89.720660][ T6631]  vfs_read+0x1e4/0xb40
[   89.720672][ T6631]  ? __pfx_vfs_read+0x10/0x10
[   89.720681][ T6631]  ? find_held_lock+0x2b/0x80
[   89.720694][ T6631]  ? __fget_files+0x215/0x3d0
[   89.720707][ T6631]  ? __fget_files+0x21f/0x3d0
[   89.720721][ T6631]  ksys_read+0x12a/0x250
[   89.720731][ T6631]  ? __pfx_ksys_read+0x10/0x10
[   89.720740][ T6631]  ? ksys_write+0x1ac/0x250
[   89.720750][ T6631]  ? __pfx_ksys_write+0x10/0x10
[   89.720763][ T6631]  __do_fast_syscall_32+0xe7/0x970
[   89.720779][ T6631]  ? lockdep_hardirqs_on+0x78/0x100
[   89.720794][ T6631]  do_fast_syscall_32+0x32/0x70
[   89.720809][ T6631]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   89.720824][ T6631] RIP: 0023:0xf709efec
[   89.720840][ T6631] Code: Unable to access opcode bytes at 0xf709efc2.
[   89.720845][ T6631] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003
[   89.720856][ T6631] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001200
[   89.720863][ T6631] RDX: 0000000000001000 RSI: 0000000000000000 RDI: 0000000000000000
[   89.720869][ T6631] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   89.720876][ T6631] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   89.720882][ T6631] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   89.720895][ T6631]  </TASK>
[   89.916568][ T5925] kernel read not supported for file /dlm-control (pid: 5925 comm: kworker/2:4)
[   90.190579][ T6641] input: syz0 as /devices/virtual/input/input17
[   90.307720][ T6641] netlink: 'syz.1.214': attribute type 3 has an invalid length.
[   90.830658][ T6662] FAULT_INJECTION: forcing a failure.
[   90.830658][ T6662] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   90.834872][ T6662] CPU: 2 UID: 0 PID: 6662 Comm: syz.3.219 Not tainted syzkaller #0 PREEMPT(full) 
[   90.834888][ T6662] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   90.834894][ T6662] Call Trace:
[   90.834899][ T6662]  <TASK>
[   90.834903][ T6662]  dump_stack_lvl+0x100/0x190
[   90.834921][ T6662]  should_fail_ex.cold+0x5/0xa
[   90.834934][ T6662]  _copy_from_iter+0x1f4/0x1690
[   90.834954][ T6662]  ? __asan_memset+0x23/0x50
[   90.834967][ T6662]  ? __pfx__copy_from_iter+0x10/0x10
[   90.834984][ T6662]  ? __pfx___alloc_skb+0x10/0x10
[   90.835005][ T6662]  netlink_sendmsg+0x808/0xda0
[   90.835020][ T6662]  ? __pfx_netlink_sendmsg+0x10/0x10
[   90.835033][ T6662]  ? apparmor_socket_sendmsg+0x15b/0x270
[   90.835048][ T6662]  ____sys_sendmsg+0xa4d/0xbe0
[   90.835059][ T6662]  ? __pfx_netlink_sendmsg+0x10/0x10
[   90.835072][ T6662]  ? __pfx_____sys_sendmsg+0x10/0x10
[   90.835089][ T6662]  ___sys_sendmsg+0x190/0x1e0
[   90.835101][ T6662]  ? __pfx____sys_sendmsg+0x10/0x10
[   90.835119][ T6662]  ? find_held_lock+0x2b/0x80
[   90.835141][ T6662]  __sys_sendmsg+0x160/0x210
[   90.835167][ T6662]  ? __pfx___sys_sendmsg+0x10/0x10
[   90.835186][ T6662]  ? __pfx_ksys_write+0x10/0x10
[   90.835200][ T6662]  __do_fast_syscall_32+0xe7/0x970
[   90.835215][ T6662]  ? lockdep_hardirqs_on+0x78/0x100
[   90.835230][ T6662]  do_fast_syscall_32+0x32/0x70
[   90.835263][ T6662]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   90.835278][ T6662] RIP: 0023:0xf7f63fec
[   90.835293][ T6662] Code: Unable to access opcode bytes at 0xf7f63fc2.
[   90.835298][ T6662] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[   90.835310][ T6662] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280
[   90.835316][ T6662] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000
[   90.835323][ T6662] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   90.835329][ T6662] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   90.835335][ T6662] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   90.835359][ T6662]  </TASK>
[   91.417566][   T29] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   91.699346][   T29] usb 6-1: Using ep0 maxpacket: 8
[   91.725733][   T29] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[   91.738807][   T29] usb 6-1: config 179 has no interface number 0
[   91.750165][   T29] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   91.767764][   T29] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   91.786539][   T29] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   91.804389][   T29] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   91.821729][   T29] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   91.842417][   T29] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   91.858604][   T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.993921][ T6654] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   92.440587][ T6654] syzkaller1: entered promiscuous mode
[   92.442904][ T6654] syzkaller1: entered allmulticast mode
[   92.735160][ T5834] usb 6-1: USB disconnect, device number 4
[   92.735281][    C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[   92.741430][    C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending?
[   93.232243][ T6683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.292094][ T5748] ffs_data_put(): freeing
[   93.394574][ T6691] blktrace: Concurrent blktraces are not allowed on sg0
[   93.471122][ T6698] FAULT_INJECTION: forcing a failure.
[   93.471122][ T6698] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   93.476905][ T6698] CPU: 0 UID: 0 PID: 6698 Comm: syz.3.232 Not tainted syzkaller #0 PREEMPT(full) 
[   93.476937][ T6698] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   93.476947][ T6698] Call Trace:
[   93.476954][ T6698]  <TASK>
[   93.476962][ T6698]  dump_stack_lvl+0x100/0x190
[   93.476990][ T6698]  should_fail_ex.cold+0x5/0xa
[   93.477011][ T6698]  _copy_from_iter+0x1f4/0x1690
[   93.477042][ T6698]  ? __asan_memset+0x23/0x50
[   93.477062][ T6698]  ? __pfx__copy_from_iter+0x10/0x10
[   93.477089][ T6698]  ? __pfx___alloc_skb+0x10/0x10
[   93.477123][ T6698]  netlink_sendmsg+0x808/0xda0
[   93.477148][ T6698]  ? __pfx_netlink_sendmsg+0x10/0x10
[   93.477171][ T6698]  ? apparmor_socket_sendmsg+0x15b/0x270
[   93.477194][ T6698]  ____sys_sendmsg+0xa4d/0xbe0
[   93.477210][ T6698]  ? __pfx_netlink_sendmsg+0x10/0x10
[   93.477230][ T6698]  ? __pfx_____sys_sendmsg+0x10/0x10
[   93.477257][ T6698]  ___sys_sendmsg+0x190/0x1e0
[   93.477277][ T6698]  ? __pfx____sys_sendmsg+0x10/0x10
[   93.477306][ T6698]  ? find_held_lock+0x2b/0x80
[   93.477344][ T6698]  __sys_sendmsg+0x160/0x210
[   93.477367][ T6698]  ? __pfx___sys_sendmsg+0x10/0x10
[   93.477397][ T6698]  ? __pfx_ksys_write+0x10/0x10
[   93.477419][ T6698]  __do_fast_syscall_32+0xe7/0x970
[   93.477442][ T6698]  ? lockdep_hardirqs_on+0x78/0x100
[   93.477465][ T6698]  do_fast_syscall_32+0x32/0x70
[   93.477487][ T6698]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   93.477509][ T6698] RIP: 0023:0xf7f63fec
[   93.477532][ T6698] Code: Unable to access opcode bytes at 0xf7f63fc2.
[   93.477539][ T6698] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[   93.477557][ T6698] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280
[   93.477568][ T6698] RDX: 00000000040008c0 RSI: 0000000000000000 RDI: 0000000000000000
[   93.477577][ T6698] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   93.477587][ T6698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   93.477597][ T6698] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   93.477619][ T6698]  </TASK>
[   93.563356][ T6703] FAULT_INJECTION: forcing a failure.
[   93.563356][ T6703] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   93.567700][ T6703] CPU: 3 UID: 0 PID: 6703 Comm: syz.1.234 Not tainted syzkaller #0 PREEMPT(full) 
[   93.567715][ T6703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   93.567722][ T6703] Call Trace:
[   93.567727][ T6703]  <TASK>
[   93.567732][ T6703]  dump_stack_lvl+0x100/0x190
[   93.567750][ T6703]  should_fail_ex.cold+0x5/0xa
[   93.567764][ T6703]  _copy_from_iter+0x1f4/0x1690
[   93.567786][ T6703]  ? __asan_memset+0x23/0x50
[   93.567805][ T6703]  ? __pfx__copy_from_iter+0x10/0x10
[   93.567830][ T6703]  ? __pfx___alloc_skb+0x10/0x10
[   93.567863][ T6703]  netlink_sendmsg+0x808/0xda0
[   93.567887][ T6703]  ? __pfx_netlink_sendmsg+0x10/0x10
[   93.567909][ T6703]  ? apparmor_socket_sendmsg+0x15b/0x270
[   93.567932][ T6703]  ____sys_sendmsg+0xa4d/0xbe0
[   93.567949][ T6703]  ? __pfx_netlink_sendmsg+0x10/0x10
[   93.567971][ T6703]  ? __pfx_____sys_sendmsg+0x10/0x10
[   93.567999][ T6703]  ___sys_sendmsg+0x190/0x1e0
[   93.568021][ T6703]  ? __pfx____sys_sendmsg+0x10/0x10
[   93.568052][ T6703]  ? find_held_lock+0x2b/0x80
[   93.568090][ T6703]  __sys_sendmsg+0x160/0x210
[   93.568115][ T6703]  ? __pfx___sys_sendmsg+0x10/0x10
[   93.568145][ T6703]  ? __pfx_ksys_write+0x10/0x10
[   93.568168][ T6703]  __do_fast_syscall_32+0xe7/0x970
[   93.568193][ T6703]  ? lockdep_hardirqs_on+0x78/0x100
[   93.568217][ T6703]  do_fast_syscall_32+0x32/0x70
[   93.568241][ T6703]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   93.568264][ T6703] RIP: 0023:0xf709efec
[   93.568286][ T6703] Code: Unable to access opcode bytes at 0xf709efc2.
[   93.568294][ T6703] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[   93.568313][ T6703] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0
[   93.568323][ T6703] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   93.568333][ T6703] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   93.568342][ T6703] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   93.568352][ T6703] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   93.568375][ T6703]  </TASK>
[   93.819836][ T5746] ffs_data_put(): freeing
[   93.933113][ T6715] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   93.943222][ T6715] fuse: Bad value for 'fd'
[   93.949623][ T6715] bridge_slave_0: default FDB implementation only supports local addresses
[   94.009206][ T5856] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   94.559316][ T6717] netlink: 44 bytes leftover after parsing attributes in process `syz.2.239'.
[   94.607479][ T6722] FAULT_INJECTION: forcing a failure.
[   94.607479][ T6722] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   94.612935][ T6722] CPU: 0 UID: 0 PID: 6722 Comm: syz.0.240 Not tainted syzkaller #0 PREEMPT(full) 
[   94.612960][ T6722] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   94.612970][ T6722] Call Trace:
[   94.612977][ T6722]  <TASK>
[   94.612985][ T6722]  dump_stack_lvl+0x100/0x190
[   94.613012][ T6722]  should_fail_ex.cold+0x5/0xa
[   94.613032][ T6722]  _copy_from_iter+0x1f4/0x1690
[   94.613066][ T6722]  ? __asan_memset+0x23/0x50
[   94.613086][ T6722]  ? __pfx__copy_from_iter+0x10/0x10
[   94.613111][ T6722]  ? __pfx___alloc_skb+0x10/0x10
[   94.613142][ T6722]  netlink_sendmsg+0x808/0xda0
[   94.613166][ T6722]  ? __pfx_netlink_sendmsg+0x10/0x10
[   94.613186][ T6722]  ? apparmor_socket_sendmsg+0x15b/0x270
[   94.613210][ T6722]  ____sys_sendmsg+0xa4d/0xbe0
[   94.613227][ T6722]  ? __pfx_netlink_sendmsg+0x10/0x10
[   94.613247][ T6722]  ? __pfx_____sys_sendmsg+0x10/0x10
[   94.613275][ T6722]  ___sys_sendmsg+0x190/0x1e0
[   94.613294][ T6722]  ? __pfx____sys_sendmsg+0x10/0x10
[   94.613322][ T6722]  ? find_held_lock+0x2b/0x80
[   94.613359][ T6722]  __sys_sendmsg+0x160/0x210
[   94.613383][ T6722]  ? __pfx___sys_sendmsg+0x10/0x10
[   94.613410][ T6722]  ? __pfx_ksys_write+0x10/0x10
[   94.613430][ T6722]  __do_fast_syscall_32+0xe7/0x970
[   94.613454][ T6722]  ? lockdep_hardirqs_on+0x78/0x100
[   94.613477][ T6722]  do_fast_syscall_32+0x32/0x70
[   94.613500][ T6722]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   94.613521][ T6722] RIP: 0023:0xf6ffefec
[   94.613543][ T6722] Code: Unable to access opcode bytes at 0xf6ffefc2.
[   94.613550][ T6722] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[   94.613568][ T6722] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000580
[   94.613578][ T6722] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000
[   94.613588][ T6722] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   94.613598][ T6722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   94.613608][ T6722] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   94.613630][ T6722]  </TASK>
[   94.777787][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.241'.
[   94.784856][ T6730] netlink: 'syz.0.243': attribute type 1 has an invalid length.
[   94.800094][ T6730] netlink: 232 bytes leftover after parsing attributes in process `syz.0.243'.
[   94.803960][ T6730] netlink: 'syz.0.243': attribute type 1 has an invalid length.
[   94.829652][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.241'.
[   94.833391][ T6734] netlink: 'syz.2.241': attribute type 5 has an invalid length.
[   94.836790][ T6734] netlink: 20 bytes leftover after parsing attributes in process `syz.2.241'.
[   94.859382][ T5856] usb 6-1: Using ep0 maxpacket: 8
[   94.864159][ T5856] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[   94.866769][ T5856] usb 6-1: config 179 has no interface number 0
[   94.868757][ T5856] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   94.872511][ T5856] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   94.876786][ T5856] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   94.881236][ T5856] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   94.884838][ T5856] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   94.885102][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'.
[   94.888897][ T5856] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   94.888915][ T5856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.899559][ T6708] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   94.902835][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'.
[   95.050161][ T5743] ffs_data_put(): freeing
[   95.220295][   T42] audit: type=1804 audit(1785557588.029:2): pid=6756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.250" name="/newroot/68/file0" dev="tmpfs" ino=396 res=1 errno=0
[   95.326793][ T6708] syzkaller1: entered promiscuous mode
[   95.333044][ T6708] syzkaller1: entered allmulticast mode
[   95.503781][ T6767] FAULT_INJECTION: forcing a failure.
[   95.503781][ T6767] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   95.510063][ T6767] CPU: 0 UID: 0 PID: 6767 Comm: syz.3.253 Not tainted syzkaller #0 PREEMPT(full) 
[   95.510093][ T6767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   95.510104][ T6767] Call Trace:
[   95.510110][ T6767]  <TASK>
[   95.510118][ T6767]  dump_stack_lvl+0x100/0x190
[   95.510143][ T6767]  should_fail_ex.cold+0x5/0xa
[   95.510162][ T6767]  _copy_from_iter+0x1f4/0x1690
[   95.510191][ T6767]  ? __asan_memset+0x23/0x50
[   95.510211][ T6767]  ? __pfx__copy_from_iter+0x10/0x10
[   95.510236][ T6767]  ? __pfx___alloc_skb+0x10/0x10
[   95.510267][ T6767]  netlink_sendmsg+0x808/0xda0
[   95.510290][ T6767]  ? __pfx_netlink_sendmsg+0x10/0x10
[   95.510312][ T6767]  ? apparmor_socket_sendmsg+0x15b/0x270
[   95.510336][ T6767]  ____sys_sendmsg+0xa4d/0xbe0
[   95.510369][ T6767]  ? __pfx_netlink_sendmsg+0x10/0x10
[   95.510389][ T6767]  ? __pfx_____sys_sendmsg+0x10/0x10
[   95.510416][ T6767]  ___sys_sendmsg+0x190/0x1e0
[   95.510436][ T6767]  ? __pfx____sys_sendmsg+0x10/0x10
[   95.510466][ T6767]  ? find_held_lock+0x2b/0x80
[   95.510503][ T6767]  __sys_sendmsg+0x160/0x210
[   95.510525][ T6767]  ? __pfx___sys_sendmsg+0x10/0x10
[   95.510554][ T6767]  ? __pfx_ksys_write+0x10/0x10
[   95.510576][ T6767]  __do_fast_syscall_32+0xe7/0x970
[   95.510598][ T6767]  ? lockdep_hardirqs_on+0x78/0x100
[   95.510621][ T6767]  do_fast_syscall_32+0x32/0x70
[   95.510642][ T6767]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   95.510663][ T6767] RIP: 0023:0xf7f63fec
[   95.510687][ T6767] Code: Unable to access opcode bytes at 0xf7f63fc2.
[   95.510694][ T6767] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[   95.510712][ T6767] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0
[   95.510722][ T6767] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   95.510732][ T6767] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   95.510741][ T6767] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   95.510751][ T6767] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   95.510772][ T6767]  </TASK>
[   95.965856][ T5925] usb 6-1: USB disconnect, device number 5
[   95.965856][    C3] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[   95.965883][    C3] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   96.396514][ T6789] FAULT_INJECTION: forcing a failure.
[   96.396514][ T6789] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   96.400462][ T6789] CPU: 3 UID: 0 PID: 6789 Comm: syz.0.260 Not tainted syzkaller #0 PREEMPT(full) 
[   96.400477][ T6789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   96.400484][ T6789] Call Trace:
[   96.400489][ T6789]  <TASK>
[   96.400494][ T6789]  dump_stack_lvl+0x100/0x190
[   96.400511][ T6789]  should_fail_ex.cold+0x5/0xa
[   96.400524][ T6789]  _copy_to_user+0x32/0xd0
[   96.400543][ T6789]  simple_read_from_buffer+0xcb/0x170
[   96.400562][ T6789]  proc_fail_nth_read+0x1af/0x230
[   96.400579][ T6789]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   96.400595][ T6789]  ? rw_verify_area+0xce/0x6d0
[   96.400611][ T6789]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   96.400626][ T6789]  vfs_read+0x1e4/0xb40
[   96.400638][ T6789]  ? __pfx_vfs_read+0x10/0x10
[   96.400646][ T6789]  ? find_held_lock+0x2b/0x80
[   96.400661][ T6789]  ? __fget_files+0x215/0x3d0
[   96.400674][ T6789]  ? __fget_files+0x21f/0x3d0
[   96.400688][ T6789]  ksys_read+0x12a/0x250
[   96.400697][ T6789]  ? __pfx_ksys_read+0x10/0x10
[   96.400711][ T6789]  do_int80_emulation+0x14b/0x720
[   96.400729][ T6789]  asm_int80_emulation+0x1a/0x20
[   96.400741][ T6789] RIP: 0023:0xf71373eb
[   96.400750][ T6789] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[   96.400761][ T6789] RSP: 002b:00000000f53ed4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[   96.400773][ T6789] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f53ed5d0
[   96.400780][ T6789] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[   96.400786][ T6789] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   96.400792][ T6789] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   96.400798][ T6789] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   96.400811][ T6789]  </TASK>
[   96.429815][ T6791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.259076][ T5834] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   97.409540][ T5834] usb 7-1: too many configurations: 9, using maximum allowed: 8
[   97.413084][ T5834] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[   97.416854][ T5834] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   97.421718][ T5834] usb 7-1: config 0 interface 0 has no altsetting 0
[   97.425975][ T5834] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[   97.429936][ T5834] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   97.434495][ T5834] usb 7-1: config 0 interface 0 has no altsetting 0
[   97.438376][ T5834] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[   97.442282][ T5834] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   97.446623][ T5834] usb 7-1: config 0 interface 0 has no altsetting 0
[   97.450344][ T5834] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[   97.454200][ T5834] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   97.458349][ T5834] usb 7-1: config 0 interface 0 has no altsetting 0
[   97.462187][ T5834] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[   97.465892][ T5834] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   97.470450][ T5834] usb 7-1: config 0 interface 0 has no altsetting 0
[   97.474312][ T5834] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[   97.478069][ T5834] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   97.482745][ T5834] usb 7-1: config 0 interface 0 has no altsetting 0
[   97.486603][ T5834] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[   97.490634][ T5834] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   97.495461][ T5834] usb 7-1: config 0 interface 0 has no altsetting 0
[   97.499519][ T5834] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[   97.503331][ T5834] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   97.508564][ T5834] usb 7-1: config 0 interface 0 has no altsetting 0
[   97.513748][ T5834] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[   97.517651][ T5834] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[   97.521309][ T5834] usb 7-1: Product: syz
[   97.523062][ T5834] usb 7-1: Manufacturer: syz
[   97.525094][ T5834] usb 7-1: SerialNumber: syz
[   97.529615][ T5834] usb 7-1: config 0 descriptor??
[   97.536828][ T5834] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0
[   97.606692][ T6809] bridge_slave_0: default FDB implementation only supports local addresses
[   97.651475][ T6811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.269'.
[   97.667157][ T6811] Driver unsupported XDP return value 0 on prog  (id 22) dev N/A, expect packet loss!
[   97.801569][ T6815] FAULT_INJECTION: forcing a failure.
[   97.801569][ T6815] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   97.802561][ T6806] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.805988][ T6815] CPU: 0 UID: 0 PID: 6815 Comm: syz.0.271 Not tainted syzkaller #0 PREEMPT(full) 
[   97.806005][ T6815] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   97.806012][ T6815] Call Trace:
[   97.806017][ T6815]  <TASK>
[   97.806022][ T6815]  dump_stack_lvl+0x100/0x190
[   97.806040][ T6815]  should_fail_ex.cold+0x5/0xa
[   97.806066][ T6815]  _copy_from_iter+0x1f4/0x1690
[   97.806088][ T6815]  ? __asan_memset+0x23/0x50
[   97.806100][ T6815]  ? __pfx__copy_from_iter+0x10/0x10
[   97.806117][ T6815]  ? __pfx___alloc_skb+0x10/0x10
[   97.806138][ T6815]  netlink_sendmsg+0x808/0xda0
[   97.806153][ T6815]  ? __pfx_netlink_sendmsg+0x10/0x10
[   97.806166][ T6815]  ? apparmor_socket_sendmsg+0x15b/0x270
[   97.806181][ T6815]  ____sys_sendmsg+0xa4d/0xbe0
[   97.806191][ T6815]  ? __pfx_netlink_sendmsg+0x10/0x10
[   97.806204][ T6815]  ? __pfx_____sys_sendmsg+0x10/0x10
[   97.806221][ T6815]  ___sys_sendmsg+0x190/0x1e0
[   97.806234][ T6815]  ? __pfx____sys_sendmsg+0x10/0x10
[   97.806253][ T6815]  ? find_held_lock+0x2b/0x80
[   97.806276][ T6815]  __sys_sendmsg+0x160/0x210
[   97.806291][ T6815]  ? __pfx___sys_sendmsg+0x10/0x10
[   97.806310][ T6815]  ? __pfx_ksys_write+0x10/0x10
[   97.806323][ T6815]  __do_fast_syscall_32+0xe7/0x970
[   97.806339][ T6815]  ? lockdep_hardirqs_on+0x78/0x100
[   97.806354][ T6815]  do_fast_syscall_32+0x32/0x70
[   97.806369][ T6815]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   97.806384][ T6815] RIP: 0023:0xf6ffefec
[   97.806399][ T6815] Code: Unable to access opcode bytes at 0xf6ffefc2.
[   97.806403][ T6815] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[   97.806415][ T6815] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001f80
[   97.806422][ T6815] RDX: 0000000004000800 RSI: 0000000000000000 RDI: 0000000000000000
[   97.806429][ T6815] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   97.806435][ T6815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   97.806441][ T6815] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   97.806454][ T6815]  </TASK>
[   97.815340][ T6816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.818351][ T6806] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   97.828856][ T6816] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.918896][ T6821] FAULT_INJECTION: forcing a failure.
[   97.918896][ T6821] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   97.923156][ T6821] CPU: 2 UID: 0 PID: 6821 Comm: syz.0.273 Not tainted syzkaller #0 PREEMPT(full) 
[   97.923173][ T6821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   97.923180][ T6821] Call Trace:
[   97.923185][ T6821]  <TASK>
[   97.923191][ T6821]  dump_stack_lvl+0x100/0x190
[   97.923249][ T6821]  should_fail_ex.cold+0x5/0xa
[   97.923272][ T6821]  _copy_from_iter+0x1f4/0x1690
[   97.923302][ T6821]  ? __asan_memset+0x23/0x50
[   97.923322][ T6821]  ? __pfx__copy_from_iter+0x10/0x10
[   97.923340][ T6821]  ? __pfx___alloc_skb+0x10/0x10
[   97.923360][ T6821]  netlink_sendmsg+0x808/0xda0
[   97.923375][ T6821]  ? __pfx_netlink_sendmsg+0x10/0x10
[   97.923389][ T6821]  ? apparmor_socket_sendmsg+0x15b/0x270
[   97.923403][ T6821]  ____sys_sendmsg+0xa4d/0xbe0
[   97.923414][ T6821]  ? __pfx_netlink_sendmsg+0x10/0x10
[   97.923427][ T6821]  ? __pfx_____sys_sendmsg+0x10/0x10
[   97.923440][ T6821]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[   97.923453][ T6821]  ? dummy_timer+0x1d96/0x36f0
[   97.923467][ T6821]  ___sys_sendmsg+0x190/0x1e0
[   97.923480][ T6821]  ? __pfx____sys_sendmsg+0x10/0x10
[   97.923496][ T6821]  ? __lock_acquire+0x49f/0x1a40
[   97.923520][ T6821]  ? find_held_lock+0x2b/0x80
[   97.923542][ T6821]  __sys_sendmsg+0x160/0x210
[   97.923557][ T6821]  ? __pfx___sys_sendmsg+0x10/0x10
[   97.923579][ T6821]  __do_fast_syscall_32+0xe7/0x970
[   97.923596][ T6821]  do_fast_syscall_32+0x32/0x70
[   97.923611][ T6821]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   97.923626][ T6821] RIP: 0023:0xf6ffefec
[   97.923641][ T6821] Code: Unable to access opcode bytes at 0xf6ffefc2.
[   97.923647][ T6821] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[   97.923659][ T6821] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080004440
[   97.923666][ T6821] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000
[   97.923672][ T6821] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   97.923679][ T6821] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   97.923685][ T6821] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   97.923698][ T6821]  </TASK>
[   98.047838][ T6806] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.056047][ T6806] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   98.133763][ T6806] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.137086][ T6806] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   98.222880][ T6806] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.227232][ T6806] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   98.390560][ T5824] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   98.394083][ T5824] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   98.397522][ T5824] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   98.401398][ T5824] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   98.404936][ T5824] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   98.408313][ T5824] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   98.412072][ T5824] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   98.415535][ T5824] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   98.439094][ T5856] usb 7-1: USB disconnect, device number 5
[   98.465635][ T5856] yurex 7-1:0.0: USB YUREX #0 now disconnected
[   98.557287][ T6832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.277'.
[   98.653185][ T5748] ffs_data_put(): freeing
[   98.868762][ T6827] syz.3.276 (6827): drop_caches: 2
[  100.136958][ T6863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.287'.
[  101.177385][ T6879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.133747][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.294'.
[  102.137530][ T6889] bridge_slave_1: left allmulticast mode
[  102.142958][ T6889] bridge_slave_1: left promiscuous mode
[  102.146553][ T6889] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.157615][ T6889] bridge_slave_0: left allmulticast mode
[  102.160616][ T6889] bridge_slave_0: left promiscuous mode
[  102.163125][ T6889] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.203837][ T6891] FAULT_INJECTION: forcing a failure.
[  102.203837][ T6891] name failslab, interval 1, probability 0, space 0, times 0
[  102.211078][ T6891] CPU: 0 UID: 0 PID: 6891 Comm: syz.2.295 Not tainted syzkaller #0 PREEMPT(full) 
[  102.211103][ T6891] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  102.211113][ T6891] Call Trace:
[  102.211119][ T6891]  <TASK>
[  102.211127][ T6891]  dump_stack_lvl+0x100/0x190
[  102.211154][ T6891]  should_fail_ex.cold+0x5/0xa
[  102.211174][ T6891]  should_failslab+0xc2/0x120
[  102.211221][ T6891]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  102.211245][ T6891]  ? __alloc_skb+0x5b7/0x710
[  102.211267][ T6891]  ? __alloc_skb+0x140/0x710
[  102.211293][ T6891]  __alloc_skb+0x140/0x710
[  102.211313][ T6891]  ? __alloc_skb+0x5b7/0x710
[  102.211334][ T6891]  ? __pfx___alloc_skb+0x10/0x10
[  102.211362][ T6891]  ? do_raw_spin_lock+0x128/0x260
[  102.211388][ T6891]  alloc_skb_with_frags+0xdd/0x760
[  102.211421][ T6891]  sock_alloc_send_pskb+0x801/0x980
[  102.211451][ T6891]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  102.211474][ T6891]  ? llc_ui_sendmsg+0x37e/0x1540
[  102.211500][ T6891]  ? find_held_lock+0x2b/0x80
[  102.211521][ T6891]  ? llc_ui_sendmsg+0x37e/0x1540
[  102.211545][ T6891]  ? llc_ui_sendmsg+0x37e/0x1540
[  102.211571][ T6891]  ? __local_bh_enable_ip+0x9e/0x120
[  102.211594][ T6891]  llc_ui_sendmsg+0x3a3/0x1540
[  102.211626][ T6891]  ? __pfx_llc_ui_sendmsg+0x10/0x10
[  102.211654][ T6891]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  102.211676][ T6891]  ? apparmor_socket_sendmsg+0x15b/0x270
[  102.211699][ T6891]  ____sys_sendmsg+0xa4d/0xbe0
[  102.211716][ T6891]  ? __pfx_llc_ui_sendmsg+0x10/0x10
[  102.211744][ T6891]  ? __pfx_____sys_sendmsg+0x10/0x10
[  102.211766][ T6891]  ? _kstrtoull+0x13c/0x1f0
[  102.211785][ T6891]  ? __pfx__kstrtoull+0x10/0x10
[  102.211807][ T6891]  ___sys_sendmsg+0x190/0x1e0
[  102.211827][ T6891]  ? __pfx____sys_sendmsg+0x10/0x10
[  102.211844][ T6891]  ? __lock_acquire+0x49f/0x1a40
[  102.211900][ T6891]  __sys_sendmmsg+0x309/0x440
[  102.211928][ T6891]  ? __pfx___sys_sendmmsg+0x10/0x10
[  102.211950][ T6891]  ? find_held_lock+0x2b/0x80
[  102.211978][ T6891]  ? __mutex_unlock_slowpath+0x35d/0x930
[  102.212015][ T6891]  ? fput+0x79/0x100
[  102.212036][ T6891]  ? ksys_write+0x1ac/0x250
[  102.212056][ T6891]  __ia32_compat_sys_sendmmsg+0x9d/0x100
[  102.212084][ T6891]  ? lockdep_hardirqs_on+0x78/0x100
[  102.212106][ T6891]  __do_fast_syscall_32+0xe7/0x970
[  102.212129][ T6891]  ? lockdep_hardirqs_on+0x78/0x100
[  102.212151][ T6891]  do_fast_syscall_32+0x32/0x70
[  102.212175][ T6891]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  102.212197][ T6891] RIP: 0023:0xf7f67fec
[  102.212221][ T6891] Code: Unable to access opcode bytes at 0xf7f67fc2.
[  102.212229][ T6891] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159
[  102.212246][ T6891] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000c40
[  102.212257][ T6891] RDX: 00000000842c97f7 RSI: 0000000000008014 RDI: 0000000000000000
[  102.212267][ T6891] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  102.212277][ T6891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  102.212287][ T6891] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  102.212309][ T6891]  </TASK>
[  102.405322][ T6894] netlink: 'syz.2.296': attribute type 3 has an invalid length.
[  102.464928][ T5750] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  103.566656][ T6913] FAULT_INJECTION: forcing a failure.
[  103.566656][ T6913] name failslab, interval 1, probability 0, space 0, times 0
[  103.571778][ T6913] CPU: 3 UID: 0 PID: 6913 Comm: syz.3.303 Not tainted syzkaller #0 PREEMPT(full) 
[  103.571795][ T6913] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  103.571802][ T6913] Call Trace:
[  103.571807][ T6913]  <TASK>
[  103.571812][ T6913]  dump_stack_lvl+0x100/0x190
[  103.571828][ T6913]  should_fail_ex.cold+0x5/0xa
[  103.571842][ T6913]  should_failslab+0xc2/0x120
[  103.571863][ T6913]  __kmalloc_noprof+0xfc/0x820
[  103.571876][ T6913]  ? get_pid_task+0x106/0x250
[  103.571890][ T6913]  ? video_usercopy+0x145/0x14c0
[  103.571909][ T6913]  video_usercopy+0x145/0x14c0
[  103.571925][ T6913]  ? __pfx___video_do_ioctl+0x10/0x10
[  103.571940][ T6913]  ? do_vfs_ioctl+0x226/0x13e0
[  103.571956][ T6913]  ? __pfx_video_usercopy+0x10/0x10
[  103.571976][ T6913]  ? __fget_files+0x215/0x3d0
[  103.571986][ T6913]  ? hook_file_ioctl_common+0x140/0x440
[  103.572004][ T6913]  v4l2_ioctl+0x1bd/0x250
[  103.572022][ T6913]  v4l2_compat_ioctl32+0x20f/0x2d0
[  103.572036][ T6913]  ? __pfx_v4l2_compat_ioctl32+0x10/0x10
[  103.572050][ T6913]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  103.572068][ T6913]  __do_fast_syscall_32+0xe7/0x970
[  103.572083][ T6913]  ? lockdep_hardirqs_on+0x78/0x100
[  103.572098][ T6913]  do_fast_syscall_32+0x32/0x70
[  103.572112][ T6913]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  103.572127][ T6913] RIP: 0023:0xf7f63fec
[  103.572141][ T6913] Code: Unable to access opcode bytes at 0xf7f63fc2.
[  103.572146][ T6913] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  103.572158][ T6913] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0845657
[  103.572165][ T6913] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000
[  103.572171][ T6913] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  103.572177][ T6913] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  103.572184][ T6913] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  103.572197][ T6913]  </TASK>
[  103.779684][ T5743] ffs_data_put(): freeing
[  103.801954][ T6921] syz.0.306 (6921): drop_caches: 2
[  104.366106][ T6930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  104.447049][ T6932] FAULT_INJECTION: forcing a failure.
[  104.447049][ T6932] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  104.452058][ T6932] CPU: 1 UID: 0 PID: 6932 Comm: syz.1.310 Not tainted syzkaller #0 PREEMPT(full) 
[  104.452075][ T6932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  104.452082][ T6932] Call Trace:
[  104.452087][ T6932]  <TASK>
[  104.452092][ T6932]  dump_stack_lvl+0x100/0x190
[  104.452114][ T6932]  should_fail_ex.cold+0x5/0xa
[  104.452133][ T6932]  _copy_from_user+0x2e/0xd0
[  104.452160][ T6932]  get_compat_msghdr+0xb3/0x480
[  104.452186][ T6932]  ? __pfx_get_compat_msghdr+0x10/0x10
[  104.452211][ T6932]  ___sys_sendmsg+0x1b6/0x1e0
[  104.452225][ T6932]  ? __pfx____sys_sendmsg+0x10/0x10
[  104.452242][ T6932]  ? find_held_lock+0x2b/0x80
[  104.452266][ T6932]  __sys_sendmsg+0x160/0x210
[  104.452281][ T6932]  ? __pfx___sys_sendmsg+0x10/0x10
[  104.452300][ T6932]  ? __pfx_ksys_write+0x10/0x10
[  104.452314][ T6932]  __do_fast_syscall_32+0xe7/0x970
[  104.452329][ T6932]  ? lockdep_hardirqs_on+0x78/0x100
[  104.452344][ T6932]  do_fast_syscall_32+0x32/0x70
[  104.452359][ T6932]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  104.452373][ T6932] RIP: 0023:0xf709efec
[  104.452389][ T6932] Code: Unable to access opcode bytes at 0xf709efc2.
[  104.452395][ T6932] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  104.452407][ T6932] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000
[  104.452414][ T6932] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  104.452421][ T6932] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  104.452427][ T6932] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  104.452434][ T6932] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  104.452447][ T6932]  </TASK>
[  104.513440][ T6932] bridge0: port 3(vlan2) entered blocking state
[  104.515612][ T6932] bridge0: port 3(vlan2) entered disabled state
[  104.520705][ T6932] vlan2: entered allmulticast mode
[  104.523062][ T6932] geneve0: entered allmulticast mode
[  104.526662][ T6932] vlan2: entered promiscuous mode
[  104.528385][ T6932] geneve0: entered promiscuous mode
[  104.910406][ T6943] binder: 6936:6943 ioctl c00c6211 0 returned -14
[  105.131992][ T5748] ffs_data_put(): freeing
[  105.359987][ T6959] netlink: 'syz.1.320': attribute type 3 has an invalid length.
[  105.628752][ T6966] overlayfs: failed to resolve './file1': -2
[  105.669345][ T6970] 9pnet_virtio: no channels available for device syz
[  105.965916][ T6976] input: syz0 as /devices/virtual/input/input19
[  105.986111][ T5746] ffs_data_put(): freeing
[  106.288199][ T6976] netlink: 'syz.1.325': attribute type 3 has an invalid length.
[  106.331267][ T6990] overlayfs: failed to resolve './file1': -2
[  106.389818][ T6992] netlink: 'syz.2.332': attribute type 3 has an invalid length.
[  106.393027][ T5750] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  107.096825][ T7000] syz.3.336 (7000): drop_caches: 2
[  107.414158][ T7006] 9pnet_virtio: no channels available for device syz
[  107.520450][ T7012] netlink: 'syz.0.338': attribute type 3 has an invalid length.
[  107.523983][ T5750] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  107.527192][ T7009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.121571][ T7019] overlayfs: failed to resolve './file1': -2
[  108.286726][ T7024] netlink: 'syz.3.341': attribute type 3 has an invalid length.
[  108.289874][ T5750] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  108.383522][ T7030] FAULT_INJECTION: forcing a failure.
[  108.383522][ T7030] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  108.388727][ T7030] CPU: 3 UID: 0 PID: 7030 Comm: syz.1.345 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  108.388757][ T7030] Tainted: [L]=SOFTLOCKUP
[  108.388765][ T7030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  108.388776][ T7030] Call Trace:
[  108.388783][ T7030]  <TASK>
[  108.388791][ T7030]  dump_stack_lvl+0x100/0x190
[  108.388819][ T7030]  should_fail_ex.cold+0x5/0xa
[  108.388840][ T7030]  _copy_from_iter+0x1f4/0x1690
[  108.388869][ T7030]  ? __asan_memset+0x23/0x50
[  108.388890][ T7030]  ? __pfx__copy_from_iter+0x10/0x10
[  108.388916][ T7030]  ? __pfx___alloc_skb+0x10/0x10
[  108.388963][ T7030]  netlink_sendmsg+0x808/0xda0
[  108.388990][ T7030]  ? __pfx_netlink_sendmsg+0x10/0x10
[  108.389019][ T7030]  ? apparmor_socket_sendmsg+0x15b/0x270
[  108.389042][ T7030]  ____sys_sendmsg+0xa4d/0xbe0
[  108.389082][ T7030]  ? __pfx_netlink_sendmsg+0x10/0x10
[  108.389104][ T7030]  ? __pfx_____sys_sendmsg+0x10/0x10
[  108.389133][ T7030]  ___sys_sendmsg+0x190/0x1e0
[  108.389154][ T7030]  ? __pfx____sys_sendmsg+0x10/0x10
[  108.389184][ T7030]  ? find_held_lock+0x2b/0x80
[  108.389223][ T7030]  __sys_sendmsg+0x160/0x210
[  108.389247][ T7030]  ? __pfx___sys_sendmsg+0x10/0x10
[  108.389295][ T7030]  ? __pfx_ksys_write+0x10/0x10
[  108.389317][ T7030]  __do_fast_syscall_32+0xe7/0x970
[  108.389342][ T7030]  ? lockdep_hardirqs_on+0x78/0x100
[  108.389366][ T7030]  do_fast_syscall_32+0x32/0x70
[  108.389389][ T7030]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  108.389412][ T7030] RIP: 0023:0xf709efec
[  108.389434][ T7030] Code: Unable to access opcode bytes at 0xf709efc2.
[  108.389443][ T7030] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  108.389461][ T7030] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000400
[  108.389472][ T7030] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000
[  108.389481][ T7030] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  108.389491][ T7030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  108.389500][ T7030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  108.389524][ T7030]  </TASK>
[  108.428809][ T7028] 9p: Bad value for 'rfdno'
[  108.579407][ T7028] process 'syz.3.344' launched '/dev/fd/7' with NULL argv: empty string added
[  108.664603][ T7041] syz.3.348 (7041): drop_caches: 2
[  108.973414][ T7050] netlink: 'syz.0.352': attribute type 3 has an invalid length.
[  108.977419][ T5750] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  109.867847][ T7060] FAULT_INJECTION: forcing a failure.
[  109.867847][ T7060] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  109.873881][ T7060] CPU: 1 UID: 0 PID: 7060 Comm: syz.3.356 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  109.873903][ T7060] Tainted: [L]=SOFTLOCKUP
[  109.873907][ T7060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  109.873914][ T7060] Call Trace:
[  109.873919][ T7060]  <TASK>
[  109.873925][ T7060]  dump_stack_lvl+0x100/0x190
[  109.873946][ T7060]  should_fail_ex.cold+0x5/0xa
[  109.873980][ T7060]  _copy_from_iter+0x1f4/0x1690
[  109.874003][ T7060]  ? trace_kmem_cache_alloc+0xdd/0x100
[  109.874019][ T7060]  ? __kasan_slab_alloc+0x89/0x90
[  109.874035][ T7060]  ? __pfx__copy_from_iter+0x10/0x10
[  109.874054][ T7060]  ? __kvmalloc_node_noprof+0x36d/0x970
[  109.874075][ T7060]  ? __asan_memset+0x23/0x50
[  109.874091][ T7060]  ? __build_skb_around+0x278/0x390
[  109.874105][ T7060]  ? is_vmalloc_addr+0x86/0xa0
[  109.874119][ T7060]  netlink_sendmsg+0x808/0xda0
[  109.874134][ T7060]  ? __pfx_netlink_sendmsg+0x10/0x10
[  109.874148][ T7060]  ? apparmor_socket_sendmsg+0x15b/0x270
[  109.874163][ T7060]  ____sys_sendmsg+0xa4d/0xbe0
[  109.874173][ T7060]  ? __pfx_netlink_sendmsg+0x10/0x10
[  109.874187][ T7060]  ? __pfx_____sys_sendmsg+0x10/0x10
[  109.874204][ T7060]  ___sys_sendmsg+0x190/0x1e0
[  109.874217][ T7060]  ? __pfx____sys_sendmsg+0x10/0x10
[  109.874235][ T7060]  ? find_held_lock+0x2b/0x80
[  109.874258][ T7060]  __sys_sendmsg+0x160/0x210
[  109.874273][ T7060]  ? __pfx___sys_sendmsg+0x10/0x10
[  109.874292][ T7060]  ? __pfx_ksys_write+0x10/0x10
[  109.874306][ T7060]  __do_fast_syscall_32+0xe7/0x970
[  109.874322][ T7060]  ? lockdep_hardirqs_on+0x78/0x100
[  109.874336][ T7060]  do_fast_syscall_32+0x32/0x70
[  109.874351][ T7060]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  109.874366][ T7060] RIP: 0023:0xf7f63fec
[  109.874381][ T7060] Code: Unable to access opcode bytes at 0xf7f63fc2.
[  109.874391][ T7060] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  109.874403][ T7060] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0
[  109.874410][ T7060] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000
[  109.874417][ T7060] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  109.874423][ T7060] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  109.874433][ T7060] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  109.874454][ T7060]  </TASK>
[  110.136663][ T7070] input: syz0 as /devices/virtual/input/input20
[  110.141872][ T7068] syz.3.359 (7068): drop_caches: 2
[  110.250541][ T7070] netlink: 'syz.0.360': attribute type 3 has an invalid length.
[  110.255322][ T5750] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  110.364510][ T7078] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes.
[  110.409178][ T7082] FAULT_INJECTION: forcing a failure.
[  110.409178][ T7082] name failslab, interval 1, probability 0, space 0, times 0
[  110.414039][ T7082] CPU: 0 UID: 0 PID: 7082 Comm: syz.0.364 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  110.414069][ T7082] Tainted: [L]=SOFTLOCKUP
[  110.414074][ T7082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  110.414084][ T7082] Call Trace:
[  110.414093][ T7082]  <TASK>
[  110.414102][ T7082]  dump_stack_lvl+0x100/0x190
[  110.414129][ T7082]  should_fail_ex.cold+0x5/0xa
[  110.414147][ T7082]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  110.414168][ T7082]  should_failslab+0xc2/0x120
[  110.414192][ T7082]  kmem_cache_alloc_noprof+0x91/0x6a0
[  110.414216][ T7082]  ? skb_clone+0x190/0x400
[  110.414244][ T7082]  skb_clone+0x190/0x400
[  110.414268][ T7082]  netlink_deliver_tap+0xaed/0xcc0
[  110.414293][ T7082]  netlink_unicast+0x62b/0x850
[  110.414315][ T7082]  ? __pfx_netlink_unicast+0x10/0x10
[  110.414340][ T7082]  netlink_sendmsg+0x8b0/0xda0
[  110.414370][ T7082]  ? __pfx_netlink_sendmsg+0x10/0x10
[  110.414391][ T7082]  ? apparmor_socket_sendmsg+0x15b/0x270
[  110.414415][ T7082]  ____sys_sendmsg+0xa4d/0xbe0
[  110.414433][ T7082]  ? __pfx_netlink_sendmsg+0x10/0x10
[  110.414451][ T7082]  ? __pfx_____sys_sendmsg+0x10/0x10
[  110.414482][ T7082]  ___sys_sendmsg+0x190/0x1e0
[  110.414502][ T7082]  ? __pfx____sys_sendmsg+0x10/0x10
[  110.414532][ T7082]  ? find_held_lock+0x2b/0x80
[  110.414569][ T7082]  __sys_sendmsg+0x160/0x210
[  110.414594][ T7082]  ? __pfx___sys_sendmsg+0x10/0x10
[  110.414623][ T7082]  ? __pfx_ksys_write+0x10/0x10
[  110.414647][ T7082]  __do_fast_syscall_32+0xe7/0x970
[  110.414671][ T7082]  ? lockdep_hardirqs_on+0x78/0x100
[  110.414695][ T7082]  do_fast_syscall_32+0x32/0x70
[  110.414719][ T7082]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  110.414742][ T7082] RIP: 0023:0xf6ffefec
[  110.414765][ T7082] Code: Unable to access opcode bytes at 0xf6ffefc2.
[  110.414773][ T7082] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  110.414792][ T7082] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000900
[  110.414803][ T7082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  110.414814][ T7082] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  110.414824][ T7082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  110.414835][ T7082] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  110.414859][ T7082]  </TASK>
[  110.680917][ T7091] input: syz0 as /devices/virtual/input/input21
[  110.748486][ T7091] netlink: 'syz.0.366': attribute type 3 has an invalid length.
[  110.753517][ T5750] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  110.846498][ T7095] warning: `syz.1.367' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  110.852094][ T7095] FAULT_INJECTION: forcing a failure.
[  110.852094][ T7095] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  110.857567][ T7095] CPU: 1 UID: 0 PID: 7095 Comm: syz.1.367 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  110.857612][ T7095] Tainted: [L]=SOFTLOCKUP
[  110.857618][ T7095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  110.857629][ T7095] Call Trace:
[  110.857637][ T7095]  <TASK>
[  110.857644][ T7095]  dump_stack_lvl+0x100/0x190
[  110.857671][ T7095]  should_fail_ex.cold+0x5/0xa
[  110.857694][ T7095]  _copy_to_user+0x32/0xd0
[  110.857722][ T7095]  simple_read_from_buffer+0xcb/0x170
[  110.857753][ T7095]  proc_fail_nth_read+0x1af/0x230
[  110.857780][ T7095]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  110.857805][ T7095]  ? rw_verify_area+0xce/0x6d0
[  110.857832][ T7095]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  110.857857][ T7095]  vfs_read+0x1e4/0xb40
[  110.857877][ T7095]  ? __pfx_vfs_read+0x10/0x10
[  110.857893][ T7095]  ? find_held_lock+0x2b/0x80
[  110.857918][ T7095]  ? __fget_files+0x215/0x3d0
[  110.857941][ T7095]  ? __fget_files+0x21f/0x3d0
[  110.857963][ T7095]  ksys_read+0x12a/0x250
[  110.857979][ T7095]  ? __pfx_ksys_read+0x10/0x10
[  110.858002][ T7095]  do_int80_emulation+0x14b/0x720
[  110.858031][ T7095]  asm_int80_emulation+0x1a/0x20
[  110.858049][ T7095] RIP: 0023:0xf71d73eb
[  110.858064][ T7095] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  110.858081][ T7095] RSP: 002b:00000000f548d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  110.858101][ T7095] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f548d5d0
[  110.858112][ T7095] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  110.858122][ T7095] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  110.858132][ T7095] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  110.858142][ T7095] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  110.858166][ T7095]  </TASK>
[  111.169120][ T5925] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  111.339137][ T5925] usb 5-1: Using ep0 maxpacket: 8
[  111.344320][ T5925] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  111.349109][ T5925] usb 5-1: config 179 has no interface number 0
[  111.351741][ T5925] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  111.356037][ T5925] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  111.360607][ T5925] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  111.364648][ T5925] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  111.368201][ T5925] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  111.373386][ T5925] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  111.383352][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.389317][ T7098] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  111.524992][ T7109] FAULT_INJECTION: forcing a failure.
[  111.524992][ T7109] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  111.530539][ T7109] CPU: 0 UID: 0 PID: 7109 Comm: syz.2.374 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  111.530585][ T7109] Tainted: [L]=SOFTLOCKUP
[  111.530593][ T7109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  111.530604][ T7109] Call Trace:
[  111.530611][ T7109]  <TASK>
[  111.530620][ T7109]  dump_stack_lvl+0x100/0x190
[  111.530651][ T7109]  should_fail_ex.cold+0x5/0xa
[  111.530670][ T7109]  _copy_from_iter+0x1f4/0x1690
[  111.530698][ T7109]  ? __asan_memset+0x23/0x50
[  111.530716][ T7109]  ? __pfx__copy_from_iter+0x10/0x10
[  111.530738][ T7109]  ? __pfx___alloc_skb+0x10/0x10
[  111.530773][ T7109]  netlink_sendmsg+0x808/0xda0
[  111.530800][ T7109]  ? __pfx_netlink_sendmsg+0x10/0x10
[  111.530824][ T7109]  ? apparmor_socket_sendmsg+0x15b/0x270
[  111.530851][ T7109]  ____sys_sendmsg+0xa4d/0xbe0
[  111.530869][ T7109]  ? __pfx_netlink_sendmsg+0x10/0x10
[  111.530890][ T7109]  ? __pfx_____sys_sendmsg+0x10/0x10
[  111.530914][ T7109]  ? _kstrtoull+0x13c/0x1f0
[  111.530930][ T7109]  ? __pfx__kstrtoull+0x10/0x10
[  111.530954][ T7109]  ___sys_sendmsg+0x190/0x1e0
[  111.530975][ T7109]  ? __pfx____sys_sendmsg+0x10/0x10
[  111.530994][ T7109]  ? __lock_acquire+0x49f/0x1a40
[  111.531046][ T7109]  __sys_sendmmsg+0x309/0x440
[  111.531070][ T7109]  ? __pfx___sys_sendmmsg+0x10/0x10
[  111.531090][ T7109]  ? find_held_lock+0x2b/0x80
[  111.531114][ T7109]  ? __mutex_unlock_slowpath+0x35d/0x930
[  111.531173][ T7109]  ? fput+0x79/0x100
[  111.531197][ T7109]  ? ksys_write+0x1ac/0x250
[  111.531217][ T7109]  __ia32_compat_sys_sendmmsg+0x9d/0x100
[  111.531243][ T7109]  ? lockdep_hardirqs_on+0x78/0x100
[  111.531261][ T7109]  __do_fast_syscall_32+0xe7/0x970
[  111.531281][ T7109]  ? lockdep_hardirqs_on+0x78/0x100
[  111.531301][ T7109]  do_fast_syscall_32+0x32/0x70
[  111.531325][ T7109]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  111.531348][ T7109] RIP: 0023:0xf7f67fec
[  111.531384][ T7109] Code: Unable to access opcode bytes at 0xf7f67fc2.
[  111.531396][ T7109] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159
[  111.531413][ T7109] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0
[  111.531423][ T7109] RDX: 000000000000009f RSI: 0000000000000000 RDI: 0000000000000000
[  111.531432][ T7109] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  111.531441][ T7109] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  111.531451][ T7109] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  111.531470][ T7109]  </TASK>
[  111.830553][ T7098] syzkaller1: entered promiscuous mode
[  111.832385][ T7098] syzkaller1: entered allmulticast mode
[  112.111863][ T7121] UDC core: g1: couldn't find an available UDC or it's busy
[  112.139338][ T5925] usb 5-1: USB disconnect, device number 5
[  112.139422][    C2] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  112.139458][    C2] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  112.313437][ T7133] FAULT_INJECTION: forcing a failure.
[  112.313437][ T7133] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  112.317947][ T7133] CPU: 2 UID: 0 PID: 7133 Comm: syz.2.381 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  112.317966][ T7133] Tainted: [L]=SOFTLOCKUP
[  112.317970][ T7133] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  112.317977][ T7133] Call Trace:
[  112.317982][ T7133]  <TASK>
[  112.317988][ T7133]  dump_stack_lvl+0x100/0x190
[  112.318006][ T7133]  should_fail_ex.cold+0x5/0xa
[  112.318019][ T7133]  _copy_from_iter+0x1f4/0x1690
[  112.318039][ T7133]  ? __asan_memset+0x23/0x50
[  112.318052][ T7133]  ? __pfx__copy_from_iter+0x10/0x10
[  112.318069][ T7133]  ? __pfx___alloc_skb+0x10/0x10
[  112.318090][ T7133]  netlink_sendmsg+0x808/0xda0
[  112.318105][ T7133]  ? __pfx_netlink_sendmsg+0x10/0x10
[  112.318119][ T7133]  ? apparmor_socket_sendmsg+0x15b/0x270
[  112.318134][ T7133]  ____sys_sendmsg+0xa4d/0xbe0
[  112.318145][ T7133]  ? __pfx_netlink_sendmsg+0x10/0x10
[  112.318158][ T7133]  ? __pfx_____sys_sendmsg+0x10/0x10
[  112.318175][ T7133]  ___sys_sendmsg+0x190/0x1e0
[  112.318188][ T7133]  ? __pfx____sys_sendmsg+0x10/0x10
[  112.318206][ T7133]  ? find_held_lock+0x2b/0x80
[  112.318228][ T7133]  __sys_sendmsg+0x160/0x210
[  112.318244][ T7133]  ? __pfx___sys_sendmsg+0x10/0x10
[  112.318262][ T7133]  ? __pfx_ksys_write+0x10/0x10
[  112.318276][ T7133]  __do_fast_syscall_32+0xe7/0x970
[  112.318292][ T7133]  ? lockdep_hardirqs_on+0x78/0x100
[  112.318307][ T7133]  do_fast_syscall_32+0x32/0x70
[  112.318322][ T7133]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  112.318348][ T7133] RIP: 0023:0xf7f67fec
[  112.318370][ T7133] Code: Unable to access opcode bytes at 0xf7f67fc2.
[  112.318377][ T7133] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  112.318397][ T7133] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800003c0
[  112.318407][ T7133] RDX: 0000000000004890 RSI: 0000000000000000 RDI: 0000000000000000
[  112.318416][ T7133] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  112.318427][ T7133] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  112.318439][ T7133] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  112.318460][ T7133]  </TASK>
[  112.514568][ T7137] syz.2.383 (7137): drop_caches: 2
[  112.904995][ T7143] syz.0.385 (7143): drop_caches: 2
[  113.362265][ T7148] binder: Binderfs stats mode cannot be changed during a remount
[  113.598443][ T7158] FAULT_INJECTION: forcing a failure.
[  113.598443][ T7158] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  113.606540][ T7158] CPU: 0 UID: 0 PID: 7158 Comm: syz.2.391 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  113.606561][ T7158] Tainted: [L]=SOFTLOCKUP
[  113.606565][ T7158] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  113.606572][ T7158] Call Trace:
[  113.606576][ T7158]  <TASK>
[  113.606581][ T7158]  dump_stack_lvl+0x100/0x190
[  113.606599][ T7158]  should_fail_ex.cold+0x5/0xa
[  113.606613][ T7158]  _copy_from_user+0x2e/0xd0
[  113.606632][ T7158]  cmsghdr_from_user_compat_to_kern+0x354/0x7d0
[  113.606654][ T7158]  ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10
[  113.606673][ T7158]  ? __import_iovec+0x1d2/0x640
[  113.606693][ T7158]  ____sys_sendmsg+0x607/0xbe0
[  113.606707][ T7158]  ? __pfx_____sys_sendmsg+0x10/0x10
[  113.606724][ T7158]  ___sys_sendmsg+0x190/0x1e0
[  113.606737][ T7158]  ? __pfx____sys_sendmsg+0x10/0x10
[  113.606756][ T7158]  ? find_held_lock+0x2b/0x80
[  113.606779][ T7158]  __sys_sendmsg+0x160/0x210
[  113.606812][ T7158]  ? __pfx___sys_sendmsg+0x10/0x10
[  113.606831][ T7158]  ? __pfx_ksys_write+0x10/0x10
[  113.606845][ T7158]  __do_fast_syscall_32+0xe7/0x970
[  113.606860][ T7158]  ? lockdep_hardirqs_on+0x78/0x100
[  113.606881][ T7158]  do_fast_syscall_32+0x32/0x70
[  113.606901][ T7158]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  113.606919][ T7158] RIP: 0023:0xf7f67fec
[  113.606941][ T7158] Code: Unable to access opcode bytes at 0xf7f67fc2.
[  113.606949][ T7158] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  113.606962][ T7158] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080
[  113.606969][ T7158] RDX: 00000000000000c4 RSI: 0000000000000000 RDI: 0000000000000000
[  113.606976][ T7158] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  113.606983][ T7158] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  113.606989][ T7158] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  113.607004][ T7158]  </TASK>
[  114.554289][ T7162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  116.318179][ T7192] overlayfs: failed to resolve './file1': -2
[  116.793823][ T7217] FAULT_INJECTION: forcing a failure.
[  116.793823][ T7217] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  116.798455][ T7217] CPU: 1 UID: 0 PID: 7217 Comm: syz.2.411 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  116.798477][ T7217] Tainted: [L]=SOFTLOCKUP
[  116.798481][ T7217] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  116.798488][ T7217] Call Trace:
[  116.798494][ T7217]  <TASK>
[  116.798500][ T7217]  dump_stack_lvl+0x100/0x190
[  116.798518][ T7217]  should_fail_ex.cold+0x5/0xa
[  116.798531][ T7217]  _copy_from_iter+0x1f4/0x1690
[  116.798551][ T7217]  ? __asan_memset+0x23/0x50
[  116.798565][ T7217]  ? __pfx__copy_from_iter+0x10/0x10
[  116.798582][ T7217]  ? __pfx___alloc_skb+0x10/0x10
[  116.798606][ T7217]  netlink_sendmsg+0x808/0xda0
[  116.798629][ T7217]  ? __pfx_netlink_sendmsg+0x10/0x10
[  116.798653][ T7217]  ? apparmor_socket_sendmsg+0x15b/0x270
[  116.798678][ T7217]  ____sys_sendmsg+0xa4d/0xbe0
[  116.798698][ T7217]  ? __pfx_netlink_sendmsg+0x10/0x10
[  116.798717][ T7217]  ? __pfx_____sys_sendmsg+0x10/0x10
[  116.798734][ T7217]  ___sys_sendmsg+0x190/0x1e0
[  116.798746][ T7217]  ? __pfx____sys_sendmsg+0x10/0x10
[  116.798764][ T7217]  ? find_held_lock+0x2b/0x80
[  116.798789][ T7217]  __sys_sendmsg+0x160/0x210
[  116.798805][ T7217]  ? __pfx___sys_sendmsg+0x10/0x10
[  116.798823][ T7217]  ? __pfx_ksys_write+0x10/0x10
[  116.798837][ T7217]  __do_fast_syscall_32+0xe7/0x970
[  116.798853][ T7217]  ? lockdep_hardirqs_on+0x78/0x100
[  116.798868][ T7217]  do_fast_syscall_32+0x32/0x70
[  116.798884][ T7217]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  116.798898][ T7217] RIP: 0023:0xf7f67fec
[  116.798916][ T7217] Code: Unable to access opcode bytes at 0xf7f67fc2.
[  116.798922][ T7217] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  116.798934][ T7217] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009b40
[  116.798941][ T7217] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000
[  116.798961][ T7217] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  116.798968][ T7217] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  116.798974][ T7217] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  116.798989][ T7217]  </TASK>
[  116.912796][ T7219] input: syz0 as /devices/virtual/input/input22
[  116.921516][ T7221] overlayfs: failed to resolve './file1': -2
[  117.045052][ T7219] netlink: 'syz.3.409': attribute type 3 has an invalid length.
[  117.057375][ T5750] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  117.315955][ T7227] syz.3.414 (7227): drop_caches: 2
[  117.398532][ T7229] syz.3.415 (7229): drop_caches: 2
[  117.866499][ T7236] syzkaller0: entered promiscuous mode
[  117.868273][ T7236] syzkaller0: entered allmulticast mode
[  117.884699][ T7236] FAULT_INJECTION: forcing a failure.
[  117.884699][ T7236] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  117.888763][ T7236] CPU: 3 UID: 0 PID: 7236 Comm: syz.2.418 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  117.888783][ T7236] Tainted: [L]=SOFTLOCKUP
[  117.888787][ T7236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  117.888794][ T7236] Call Trace:
[  117.888799][ T7236]  <TASK>
[  117.888803][ T7236]  dump_stack_lvl+0x100/0x190
[  117.888821][ T7236]  should_fail_ex.cold+0x5/0xa
[  117.888835][ T7236]  _copy_from_iter+0x1f4/0x1690
[  117.888856][ T7236]  ? __pfx__copy_from_iter+0x10/0x10
[  117.888873][ T7236]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  117.888887][ T7236]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  117.888903][ T7236]  skb_copy_datagram_from_iter+0x11f/0x720
[  117.888922][ T7236]  packet_sendmsg+0x227e/0x5100
[  117.888945][ T7236]  ? aa_sk_perm+0x309/0xaa0
[  117.888984][ T7236]  ? __pfx_aa_sk_perm+0x10/0x10
[  117.889004][ T7236]  ? __pfx_packet_sendmsg+0x10/0x10
[  117.889034][ T7236]  ? __might_fault+0xc5/0x140
[  117.889062][ T7236]  ? apparmor_socket_sendmsg+0x15b/0x270
[  117.889083][ T7236]  __sys_sendto+0x48b/0x4e0
[  117.889103][ T7236]  ? __pfx_packet_sendmsg+0x10/0x10
[  117.889123][ T7236]  ? __pfx___sys_sendto+0x10/0x10
[  117.889157][ T7236]  ? fput+0x79/0x100
[  117.889174][ T7236]  ? ksys_write+0x1ac/0x250
[  117.889192][ T7236]  __ia32_sys_sendto+0xdd/0x1b0
[  117.889212][ T7236]  ? __do_fast_syscall_32+0x98/0x970
[  117.889235][ T7236]  ? lockdep_hardirqs_on+0x78/0x100
[  117.889253][ T7236]  __do_fast_syscall_32+0xe7/0x970
[  117.889273][ T7236]  ? lockdep_hardirqs_on+0x78/0x100
[  117.889296][ T7236]  do_fast_syscall_32+0x32/0x70
[  117.889319][ T7236]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  117.889340][ T7236] RIP: 0023:0xf7f67fec
[  117.889365][ T7236] Code: Unable to access opcode bytes at 0xf7f67fc2.
[  117.889375][ T7236] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171
[  117.889394][ T7236] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000240
[  117.889404][ T7236] RDX: 0000000000000036 RSI: 0000000000000040 RDI: 00000000800001c0
[  117.889413][ T7236] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000
[  117.889429][ T7236] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  117.889439][ T7236] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  117.889463][ T7236]  </TASK>
[  118.175449][ T7240] =======================================================
[  118.175449][ T7240] WARNING: The mand mount option has been deprecated and
[  118.175449][ T7240]          and is ignored by this kernel. Remove the mand
[  118.175449][ T7240]          option from the mount to silence this warning.
[  118.175449][ T7240] =======================================================
[  119.075786][ T7255] syz.2.423 (7255): drop_caches: 2
[  119.193413][ T7257] syz.2.424 (7257): drop_caches: 2
[  119.327819][ T7259] syzkaller0: entered promiscuous mode
[  119.330337][ T7259] syzkaller0: entered allmulticast mode
[  119.784158][ T7275] blktrace: Concurrent blktraces are not allowed on sg0
[  119.806301][ T7280] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.810680][ T7280] syzkaller0: entered promiscuous mode
[  119.813032][ T7280] syzkaller0: entered allmulticast mode
[  119.862718][ T7280] tipc: Resetting bearer <eth:syzkaller0>
[  119.887156][ T7279] tipc: Resetting bearer <eth:syzkaller0>
[  119.905059][ T7279] tipc: Disabling bearer <eth:syzkaller0>
[  119.907792][ T7282] input: syz0 as /devices/virtual/input/input23
[  120.026004][ T7282] netlink: 'syz.0.433': attribute type 3 has an invalid length.
[  120.030272][ T5750] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  120.134152][ T7286] input: syz0 as /devices/virtual/input/input24
[  120.304078][ T7286] netlink: 'syz.0.435': attribute type 3 has an invalid length.
[  120.310671][ T5750] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  120.341923][ T7288] tipc: Started in network mode
[  120.346059][ T7288] tipc: Node identity fa9a4d457222, cluster identity 4711
[  120.351071][ T7288] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.354591][ T7288] syzkaller0: entered promiscuous mode
[  120.357021][ T7288] syzkaller0: entered allmulticast mode
[  120.391775][ T7288] tipc: Resetting bearer <eth:syzkaller0>
[  120.395886][ T7287] tipc: Resetting bearer <eth:syzkaller0>
[  120.408799][ T7290] input: syz0 as /devices/virtual/input/input25
[  120.420113][ T7287] tipc: Disabling bearer <eth:syzkaller0>
[  120.533650][ T7290] netlink: 'syz.0.437': attribute type 3 has an invalid length.
[  120.537555][ T5750] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  120.633590][ T7296] FAULT_INJECTION: forcing a failure.
[  120.633590][ T7296] name failslab, interval 1, probability 0, space 0, times 0
[  120.642587][ T7296] CPU: 0 UID: 0 PID: 7296 Comm: syz.0.440 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  120.642618][ T7296] Tainted: [L]=SOFTLOCKUP
[  120.642624][ T7296] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  120.642636][ T7296] Call Trace:
[  120.642642][ T7296]  <TASK>
[  120.642650][ T7296]  dump_stack_lvl+0x100/0x190
[  120.642676][ T7296]  should_fail_ex.cold+0x5/0xa
[  120.642696][ T7296]  should_failslab+0xc2/0x120
[  120.642721][ T7296]  __kmalloc_noprof+0xfc/0x820
[  120.642743][ T7296]  ? sk_prot_alloc+0x10b/0x2a0
[  120.642765][ T7296]  sk_prot_alloc+0x10b/0x2a0
[  120.642782][ T7296]  sk_alloc+0x36/0xe80
[  120.642804][ T7296]  bpf_prog_test_run_skb+0x4db/0x3540
[  120.642836][ T7296]  ? find_held_lock+0x2b/0x80
[  120.642859][ T7296]  ? __fget_files+0x181/0x3d0
[  120.642882][ T7296]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  120.642902][ T7296]  ? fput+0x79/0x100
[  120.642924][ T7296]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  120.642942][ T7296]  __sys_bpf+0x2a12/0x4e80
[  120.642969][ T7296]  ? __pfx___sys_bpf+0x10/0x10
[  120.642989][ T7296]  ? find_held_lock+0x2b/0x80
[  120.643009][ T7296]  ? get_pid_task+0xfc/0x250
[  120.643028][ T7296]  ? get_pid_task+0xfc/0x250
[  120.643056][ T7296]  ? proc_fail_nth_write+0x9f/0x220
[  120.643079][ T7296]  ? find_held_lock+0x2b/0x80
[  120.643138][ T7296]  ? rcu_read_lock_any_held+0x6a/0xa0
[  120.643162][ T7296]  ? find_held_lock+0x2b/0x80
[  120.643181][ T7296]  ? ksys_write+0x190/0x250
[  120.643197][ T7296]  ? ksys_write+0x190/0x250
[  120.643231][ T7296]  ? fput+0x79/0x100
[  120.643253][ T7296]  ? __ia32_sys_bpf+0xcc/0x170
[  120.643272][ T7296]  __ia32_sys_bpf+0xcc/0x170
[  120.643289][ T7296]  ? __do_fast_syscall_32+0x98/0x970
[  120.643314][ T7296]  __do_fast_syscall_32+0xe7/0x970
[  120.643336][ T7296]  ? lockdep_hardirqs_on+0x78/0x100
[  120.643359][ T7296]  do_fast_syscall_32+0x32/0x70
[  120.643382][ T7296]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  120.643403][ T7296] RIP: 0023:0xf6ffefec
[  120.643424][ T7296] Code: Unable to access opcode bytes at 0xf6ffefc2.
[  120.643432][ T7296] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  120.643450][ T7296] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000080
[  120.643462][ T7296] RDX: 000000000000003d RSI: 0000000000000000 RDI: 0000000000000000
[  120.643472][ T7296] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  120.643482][ T7296] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  120.643492][ T7296] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  120.643515][ T7296]  </TASK>
[  120.753415][ T7298] syzkaller0: entered promiscuous mode
[  120.755723][ T7298] syzkaller0: entered allmulticast mode
[  120.807275][ T7301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.441'.
[  121.009919][   T42] audit: type=1804 audit(1785557613.799:3): pid=7307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.442" name="/newroot/115/file0" dev="tmpfs" ino=642 res=1 errno=0
[  121.032720][ T7304] netlink: 28 bytes leftover after parsing attributes in process `syz.0.442'.
[  121.035798][ T7304] netlink: 'syz.0.442': attribute type 8 has an invalid length.
[  121.038270][ T7304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.442'.
[  121.179081][ T7299] bond1: entered allmulticast mode
[  121.781403][   T42] audit: type=1800 audit(1785557614.579:4): pid=7319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.446" name="qmult" dev="configfs" ino=16117 res=0 errno=0
[  121.931519][ T7328] FAULT_INJECTION: forcing a failure.
[  121.931519][ T7328] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  121.936322][ T7328] CPU: 3 UID: 0 PID: 7328 Comm: syz.0.448 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  121.936344][ T7328] Tainted: [L]=SOFTLOCKUP
[  121.936347][ T7328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  121.936355][ T7328] Call Trace:
[  121.936359][ T7328]  <TASK>
[  121.936364][ T7328]  dump_stack_lvl+0x100/0x190
[  121.936383][ T7328]  should_fail_ex.cold+0x5/0xa
[  121.936396][ T7328]  strncpy_from_user+0x3b/0x2d0
[  121.936415][ T7328]  do_getname+0x78/0x390
[  121.936431][ T7328]  __ia32_sys_mkdirat+0x77/0xc0
[  121.936444][ T7328]  __do_fast_syscall_32+0xe7/0x970
[  121.936460][ T7328]  ? lockdep_hardirqs_on+0x78/0x100
[  121.936475][ T7328]  do_fast_syscall_32+0x32/0x70
[  121.936490][ T7328]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  121.936504][ T7328] RIP: 0023:0xf6ffefec
[  121.936519][ T7328] Code: Unable to access opcode bytes at 0xf6ffefc2.
[  121.936525][ T7328] RSP: 002b:00000000f53cc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000128
[  121.936537][ T7328] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000200
[  121.936557][ T7328] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000
[  121.936564][ T7328] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  121.936570][ T7328] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  121.936577][ T7328] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  121.936591][ T7328]  </TASK>
[  122.062468][ T7337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.110702][ T7338] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  122.119317][ T7338] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  122.815004][ T7342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  123.520051][ T7356] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.527031][ T7353] syz.1.458 (7353): drop_caches: 2
[  123.703230][ T7365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.459'.
[  124.520294][ T5856] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.523942][ T5856] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.526750][ T5856] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.529413][ T5856] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.532844][ T5856] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.535675][ T5856] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.538128][ T5856] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.541818][ T5856] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.544879][ T5856] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.547522][ T5856] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.574795][ T5856] hid-generic 0000:0000:0000.0002: hidraw1: <UNKNOWN> HID v0.03 Device [syz1] on syz1
[  124.657982][ T7381] fido_id[7381]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  124.714677][ T7387] 9pnet_virtio: no channels available for device syz
[  124.826660][ T7390] binder_alloc: 7389: binder_alloc_buf, no vma
[  124.846522][ T7390] syz.1.468 (7390): drop_caches: 2
[  124.937923][ T7393] 9pnet_virtio: no channels available for device syz
[  125.419034][ T7402] syz.3.472 (7402): drop_caches: 2
[  126.428822][ T7422] syzkaller0: entered promiscuous mode
[  126.431213][ T7422] syzkaller0: entered allmulticast mode
[  126.477515][ T7425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  126.688928][ T7431] syzkaller0: entered promiscuous mode
[  126.691624][ T7431] syzkaller0: entered allmulticast mode
[  126.714051][ T7432] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  126.721465][ T7432] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  127.940668][ T7452] ntfs3(nullb0): Primary boot signature is not NTFS.
[  127.946107][ T7452] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  128.462497][ T7461] overlayfs: failed to resolve './file1': -2
[  128.725625][ T5750] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  128.974554][ T7472] gadgetfs: bound to dummy_udc driver
[  129.219692][ T5826] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  129.228298][    C0] gadgetfs: connected
[  129.230581][ T5826] gadgetfs: disconnected
[  129.312511][ T7483] binder: 7482:7483 ioctl c00c620f 800003c0 returned -22
[  129.316619][ T7483] syzkaller0: entered promiscuous mode
[  129.318734][ T7483] syzkaller0: entered allmulticast mode
[  129.380961][    C0] gadgetfs: connected
[  129.383723][ T5826] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  129.386638][ T5826] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[  129.390176][ T5826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.395275][    C0] gadgetfs: configuration #1
[  129.424177][ T7488] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.437105][ T7471] gadgetfs: suspended from state 3
[  129.438105][ T5826] usb 5-1: can't set config #1, error -71
[  129.439255][ T7471] gadgetfs: disconnected
[  129.444201][ T5826] usb 5-1: USB disconnect, device number 6
[  129.622900][ T7498] input: syz0 as /devices/virtual/input/input26
[  129.711844][ T7500] netlink: 'syz.3.502': attribute type 3 has an invalid length.
[  129.716257][ T5750] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  129.890563][ T5750] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  130.437268][ T7507] syz.1.506 (7507): drop_caches: 2
[  130.516493][ T7514] binder_alloc: 7513: binder_alloc_buf, no vma
[  130.522994][ T7514] syz.3.507 (7514): drop_caches: 2
[  130.565092][ T7515] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  130.595944][ T7524] binder_alloc: 7521: binder_alloc_buf, no vma
[  130.606472][ T7524] syz.3.509 (7524): drop_caches: 2
[  130.634361][ T7515] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  130.648101][ T7515] netlink: 'syz.0.505': attribute type 2 has an invalid length.
[  130.651549][ T5750] Bluetooth: hci3: unexpected event for opcode 0x2039
[  130.656938][ T7515] netlink: 'syz.0.505': attribute type 2 has an invalid length.
[  130.701634][ T7531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.510'.
[  130.834988][ T5750] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  130.896588][ T7531] veth3: entered allmulticast mode
[  130.975792][ T7531] bond2: (slave veth3): Enslaving as an active interface with an up link
[  131.034305][ T7539] bond2 (unregistering): (slave veth3): Releasing backup interface
[  131.043460][ T7539] bond2 (unregistering): Released all slaves
[  131.219202][ T5925] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  131.379240][ T5925] usb 7-1: Using ep0 maxpacket: 8
[  131.383530][ T5925] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[  131.387393][ T5925] usb 7-1: config 179 has no interface number 0
[  131.390729][ T5925] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  131.395409][ T5925] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  131.400320][ T5925] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  131.403891][ T5925] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  131.407423][ T5925] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  131.412319][ T5925] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  131.415531][ T5925] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.420568][ T7545] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  131.838085][ T7542] syzkaller1: entered promiscuous mode
[  131.841341][ T7542] syzkaller1: entered allmulticast mode
[  132.146430][ T7559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.518'.
[  132.343262][ T1440] ieee802154 phy0 wpan0: encryption failed: -22
[  132.346188][ T1440] ieee802154 phy1 wpan1: encryption failed: -22
[  132.415930][  T846] usb 7-1: USB disconnect, device number 6
[  132.416035][    C2] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  132.420564][    C2] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  132.604348][ T7567] syzkaller0: entered promiscuous mode
[  132.606615][ T7567] syzkaller0: entered allmulticast mode
[  133.776107][ T7578] input: syz0 as /devices/virtual/input/input27
[  133.892865][ T7578] netlink: 'syz.0.525': attribute type 3 has an invalid length.
[  133.896288][ T5750] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  133.915556][ T7582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.527'.
[  133.958762][ T7584] FAULT_INJECTION: forcing a failure.
[  133.958762][ T7584] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  133.965264][ T7584] CPU: 1 UID: 0 PID: 7584 Comm: syz.3.528 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  133.965295][ T7584] Tainted: [L]=SOFTLOCKUP
[  133.965301][ T7584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  133.965313][ T7584] Call Trace:
[  133.965339][ T7584]  <TASK>
[  133.965346][ T7584]  dump_stack_lvl+0x100/0x190
[  133.965448][ T7584]  should_fail_ex.cold+0x5/0xa
[  133.965469][ T7584]  _copy_from_iter+0x1f4/0x1690
[  133.965513][ T7584]  ? __asan_memset+0x23/0x50
[  133.965541][ T7584]  ? __pfx__copy_from_iter+0x10/0x10
[  133.965567][ T7584]  ? __pfx___alloc_skb+0x10/0x10
[  133.965618][ T7584]  netlink_sendmsg+0x808/0xda0
[  133.965642][ T7584]  ? __pfx_netlink_sendmsg+0x10/0x10
[  133.965664][ T7584]  ? apparmor_socket_sendmsg+0x15b/0x270
[  133.965695][ T7584]  ____sys_sendmsg+0xa4d/0xbe0
[  133.965711][ T7584]  ? __pfx_netlink_sendmsg+0x10/0x10
[  133.965732][ T7584]  ? __pfx_____sys_sendmsg+0x10/0x10
[  133.965760][ T7584]  ___sys_sendmsg+0x190/0x1e0
[  133.965778][ T7584]  ? __pfx____sys_sendmsg+0x10/0x10
[  133.965808][ T7584]  ? find_held_lock+0x2b/0x80
[  133.965851][ T7584]  __sys_sendmsg+0x160/0x210
[  133.965875][ T7584]  ? __pfx___sys_sendmsg+0x10/0x10
[  133.965905][ T7584]  ? __pfx_ksys_write+0x10/0x10
[  133.965926][ T7584]  __do_fast_syscall_32+0xe7/0x970
[  133.965973][ T7584]  ? lockdep_hardirqs_on+0x78/0x100
[  133.965996][ T7584]  do_fast_syscall_32+0x32/0x70
[  133.966020][ T7584]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  133.966043][ T7584] RIP: 0023:0xf7f63fec
[  133.966065][ T7584] Code: Unable to access opcode bytes at 0xf7f63fc2.
[  133.966089][ T7584] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  133.966108][ T7584] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800007c0
[  133.966119][ T7584] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000
[  133.966129][ T7584] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  133.966148][ T7584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  133.966158][ T7584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  133.966181][ T7584]  </TASK>
[  134.068285][ T7586] wg1: entered allmulticast mode
[  134.233173][ T7595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  134.418097][ T7606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.537'.
[  134.538633][ T5824] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  134.543576][ T5824] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  134.643507][ T5824] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  134.647301][ T5824] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  134.728207][ T5824] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  134.734127][ T5824] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  134.764926][ T7616] syzkaller0: entered promiscuous mode
[  134.776299][ T5759] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  134.779517][ T7616] syzkaller0: entered allmulticast mode
[  134.785850][ T5759] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  134.786476][ T7616] FAULT_INJECTION: forcing a failure.
[  134.786476][ T7616] name failslab, interval 1, probability 0, space 0, times 0
[  134.794534][ T7616] CPU: 1 UID: 0 PID: 7616 Comm: syz.0.540 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  134.794565][ T7616] Tainted: [L]=SOFTLOCKUP
[  134.794571][ T7616] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  134.794583][ T7616] Call Trace:
[  134.794590][ T7616]  <TASK>
[  134.794598][ T7616]  dump_stack_lvl+0x100/0x190
[  134.794626][ T7616]  should_fail_ex.cold+0x5/0xa
[  134.794627][ T5759] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  134.794647][ T7616]  should_failslab+0xc2/0x120
[  134.794674][ T7616]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  134.794698][ T7616]  ? __alloc_skb+0x5b7/0x710
[  134.794721][ T7616]  ? __alloc_skb+0x140/0x710
[  134.794748][ T7616]  __alloc_skb+0x140/0x710
[  134.794769][ T7616]  ? __alloc_skb+0x5b7/0x710
[  134.794791][ T7616]  ? __pfx___alloc_skb+0x10/0x10
[  134.794821][ T7616]  alloc_skb_with_frags+0xdd/0x760
[  134.794846][ T7616]  ? __might_fault+0xc5/0x140
[  134.794863][ T7616]  ? __might_fault+0xc5/0x140
[  134.794886][ T7616]  sock_alloc_send_pskb+0x801/0x980
[  134.794909][ T7616]  ? _copy_from_iter+0x270/0x1690
[  134.794943][ T7616]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  134.794968][ T7616]  ? find_held_lock+0x2b/0x80
[  134.794990][ T7616]  ? dev_get_by_index+0x180/0x380
[  134.795013][ T7616]  ? dev_get_by_index+0x180/0x380
[  134.795066][ T7616]  packet_sendmsg+0x1eda/0x5100
[  134.795112][ T7616]  ? __pfx___might_resched+0x10/0x10
[  134.795145][ T7616]  ? aa_sk_perm+0x309/0xaa0
[  134.795174][ T7616]  ? __pfx_aa_sk_perm+0x10/0x10
[  134.795195][ T7616]  ? __pfx_packet_sendmsg+0x10/0x10
[  134.795228][ T7616]  ? apparmor_socket_sendmsg+0x15b/0x270
[  134.795253][ T7616]  ____sys_sendmsg+0xa4d/0xbe0
[  134.795270][ T7616]  ? __pfx_packet_sendmsg+0x10/0x10
[  134.795295][ T7616]  ? __pfx_____sys_sendmsg+0x10/0x10
[  134.795325][ T7616]  ___sys_sendmsg+0x190/0x1e0
[  134.795347][ T7616]  ? __pfx____sys_sendmsg+0x10/0x10
[  134.795385][ T7616]  ? find_held_lock+0x2b/0x80
[  134.795424][ T7616]  __sys_sendmsg+0x160/0x210
[  134.795449][ T7616]  ? __pfx___sys_sendmsg+0x10/0x10
[  134.795497][ T7616]  ? __pfx_ksys_write+0x10/0x10
[  134.795521][ T7616]  __do_fast_syscall_32+0xe7/0x970
[  134.795548][ T7616]  ? lockdep_hardirqs_on+0x78/0x100
[  134.795572][ T7616]  do_fast_syscall_32+0x32/0x70
[  134.795598][ T7616]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  134.795624][ T7616] RIP: 0023:0xf6ffefec
[  134.795649][ T7616] Code: Unable to access opcode bytes at 0xf6ffefc2.
[  134.795658][ T7616] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  134.795676][ T7616] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000000
[  134.795688][ T7616] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000
[  134.795698][ T7616] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  134.795708][ T7616] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  134.795719][ T7616] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  134.795743][ T7616]  </TASK>
[  134.888609][ T5759] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  134.892844][ T5759] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  134.925146][ T5824] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  134.929135][ T5824] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  135.221681][ T5824] bridge_slave_1: left allmulticast mode
[  135.227298][ T5824] bridge_slave_1: left promiscuous mode
[  135.234659][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.246320][ T5824] bridge_slave_0: left allmulticast mode
[  135.248717][ T5824] bridge_slave_0: left promiscuous mode
[  135.255103][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.698258][ T5824] dvmrp0: left allmulticast mode
[  136.452891][ T5824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  136.458340][ T5824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  136.467505][ T5824] bond0 (unregistering): Released all slaves
[  136.472938][ T5824] bond1 (unregistering): Released all slaves
[  136.483259][ T5824] bond2 (unregistering): Released all slaves
[  136.551973][ T5455] 8021q: adding VLAN 0 to HW filter on device eth2
[  136.573041][ T7646] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  136.840037][ T7662] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  136.845269][ T7664] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  136.979217][ T5750] Bluetooth: hci1: command tx timeout
[  136.983616][ T5455] 8021q: adding VLAN 0 to HW filter on device eth3
[  137.401923][ T5455] 8021q: adding VLAN 0 to HW filter on device eth4
[  137.793892][ T7680] binder: BINDER_SET_CONTEXT_MGR already set
[  137.798087][ T7617] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.798265][ T7617] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.798372][ T7617] bridge_slave_0: entered allmulticast mode
[  137.804856][ T7617] bridge_slave_0: entered promiscuous mode
[  137.813810][ T7617] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.819217][ T7617] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.819689][ T7680] binder: 7679:7680 ioctl 4018620d 80000180 returned -16
[  137.826871][ T7617] bridge_slave_1: entered allmulticast mode
[  137.831388][ T7617] bridge_slave_1: entered promiscuous mode
[  137.872618][ T7680] syz.3.548 (7680): drop_caches: 2
[  137.873668][ T7684] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  137.915403][ T7617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  137.926070][ T7617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  138.063069][ T7617] team0: Port device team_slave_0 added
[  138.067705][ T7617] team0: Port device team_slave_1 added
[  138.209681][ T7617] batman_adv: batadv0: Adding interface: batadv_slave_0
[  138.213894][ T7617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  138.226347][ T7617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  138.238413][ T5455] 8021q: adding VLAN 0 to HW filter on device eth5
[  138.360630][ T7617] batman_adv: batadv0: Adding interface: batadv_slave_1
[  138.369438][ T7617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  138.394162][ T7617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  138.480635][ T7617] hsr_slave_0: entered promiscuous mode
[  138.483357][ T7617] hsr_slave_1: entered promiscuous mode
[  138.486777][ T7617] debugfs: 'hsr0' already exists in 'hsr'
[  138.491539][ T7617] Cannot create hsr debugfs directory
[  139.059078][ T5750] Bluetooth: hci1: command tx timeout
[  139.202735][ T5824] hsr_slave_0: left promiscuous mode
[  139.207850][ T5824] hsr_slave_1: left promiscuous mode
[  139.218665][ T5824] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.222616][ T5824] batman_adv: batadv0: Removing interface: batadv_slave_0
[  139.229084][ T5824] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.231660][ T5824] batman_adv: batadv0: Removing interface: batadv_slave_1
[  139.237571][ T5824] veth1_macvtap: left promiscuous mode
[  139.240946][ T5824] veth0_macvtap: left promiscuous mode
[  139.242854][ T5824] veth1_vlan: left promiscuous mode
[  139.244630][ T5824] veth0_vlan: left promiscuous mode
[  139.454297][ T5824] team0 (unregistering): Port device team_slave_1 removed
[  139.463088][ T5824] team0 (unregistering): Port device team_slave_0 removed
[  140.082653][ T7733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.555'.
[  140.545661][ T7617] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  140.551323][ T7617] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  140.554148][ T7617] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  140.561601][ T7617] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  140.565795][ T7617] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  140.577679][ T7617] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  140.583714][ T7617] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  140.589585][ T7617] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  140.648808][ T7764] netlink: 204 bytes leftover after parsing attributes in process `syz.1.558'.
[  140.668619][ T7617] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.681880][ T7617] 8021q: adding VLAN 0 to HW filter on device team0
[  140.687782][  T161] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.690171][  T161] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.701696][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.704072][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.932573][ T7781] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  141.139332][ T5750] Bluetooth: hci1: command tx timeout
[  141.238294][ T7617] 8021q: adding VLAN 0 to HW filter on device batadv0
[  141.287331][ T7617] veth0_vlan: entered promiscuous mode
[  141.300507][ T7617] veth1_vlan: entered promiscuous mode
[  141.325026][ T7617] veth0_macvtap: entered promiscuous mode
[  141.331434][ T7617] veth1_macvtap: entered promiscuous mode
[  141.343930][ T7617] batman_adv: batadv0: Interface activated: batadv_slave_0
[  141.375116][ T7617] batman_adv: batadv0: Interface activated: batadv_slave_1
[  141.580751][ T5825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.609556][ T5825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.650015][ T5824] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.665131][ T7795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.564'.
[  141.675574][  T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.683486][  T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.748455][  T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.749088][ T5824] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.751382][  T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.880011][   T42] audit: type=1800 audit(1785557634.679:5): pid=7799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.566" name="enable" dev="configfs" ino=19170 res=0 errno=0
[  141.904209][ T7799] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.566' resets device
[  141.916676][ T7801] ieee802154 phy0 wpan0: encryption failed: -22
[  141.916704][   T42] audit: type=1800 audit(1785557634.709:6): pid=7803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.567" name="enable" dev="configfs" ino=19868 res=0 errno=0
[  141.962804][ T7787] infiniband syz0: set active
[  141.966992][ T7787] infiniband syz0: added veth0
[  141.979996][ T7803] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.567' resets device
[  141.984658][ T7787] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  141.990760][ T7787] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  142.001145][ T7787] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  142.006810][ T7806] can: request_module (can-proto-0) failed.
[  142.049897][ T7787] RDS/IB: syz0: added
[  142.053650][ T7787] smc: adding ib device syz0 with port count 1
[  142.056569][ T7787] smc:    ib device syz0 port 1 has no pnetid
[  142.245732][ T7820] netlink: 264 bytes leftover after parsing attributes in process `syz.0.568'.
[  142.625842][ T5455] veth1_vlan: left promiscuous mode
[  143.092994][ T7841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.576'.
[  143.229146][ T5750] Bluetooth: hci1: command tx timeout
[  143.257979][ T5455] veth1_vlan: entered promiscuous mode
[  143.408852][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.579'.
[  143.411867][ T7859] netlink: 'syz.0.579': attribute type 21 has an invalid length.
[  143.485784][ T7861] syz.0.580 (7861): drop_caches: 2
[  143.588413][ T7866] comedi comedi3: das16m1: I/O base address or length out of range
[  144.024485][ T7886] syz.2.585 (7886): drop_caches: 2
[  144.454644][ T7896] capability: warning: `syz.3.590' uses deprecated v2 capabilities in a way that may be insecure
[  144.780157][   T29] libceph: connect (1)[c::]:6789 error -101
[  144.786315][   T29] libceph: mon0 (1)[c::]:6789 connect error
[  144.816793][   T29] libceph: connect (1)[c::]:6789 error -101
[  144.823826][   T29] libceph: mon0 (1)[c::]:6789 connect error
[  144.836581][ T7910] netlink: 20 bytes leftover after parsing attributes in process `syz.3.592'.
[  145.011493][ T5750] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  145.092226][ T5564] libceph: connect (1)[c::]:6789 error -101
[  145.094974][ T5564] libceph: mon0 (1)[c::]:6789 connect error
[  145.151241][ T7905] ceph: No mds server is up or the cluster is laggy
[  145.302047][ T5564] libceph: connect (1)[c::]:6789 error -101
[  145.305713][ T5564] libceph: mon0 (1)[c::]:6789 connect error
[  145.310462][ T5564] libceph: connect (1)[c::]:6789 error -101
[  145.312760][ T5564] libceph: mon0 (1)[c::]:6789 connect error
[  145.336491][ T7926] input: syz0 as /devices/virtual/input/input28
[  145.408138][ T7926] netlink: 'syz.2.596': attribute type 3 has an invalid length.
[  145.410171][ T7928] FAULT_INJECTION: forcing a failure.
[  145.410171][ T7928] name failslab, interval 1, probability 0, space 0, times 0
[  145.415457][ T7928] CPU: 0 UID: 0 PID: 7928 Comm: syz.1.595 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  145.415477][ T7928] Tainted: [L]=SOFTLOCKUP
[  145.415481][ T7928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  145.415488][ T7928] Call Trace:
[  145.415493][ T7928]  <TASK>
[  145.415497][ T7928]  dump_stack_lvl+0x100/0x190
[  145.415516][ T7928]  should_fail_ex.cold+0x5/0xa
[  145.415530][ T7928]  should_failslab+0xc2/0x120
[  145.415547][ T7928]  __kmalloc_node_track_caller_noprof+0xf9/0x830
[  145.415564][ T7928]  ? request_key_auth_new+0x172/0xa00
[  145.415583][ T7928]  kmemdup_noprof+0x29/0x60
[  145.415597][ T7928]  request_key_auth_new+0x172/0xa00
[  145.415613][ T7928]  ? __pfx_request_key_auth_new+0x10/0x10
[  145.415634][ T7928]  request_key_and_link+0x1089/0x1330
[  145.415668][ T7928]  ? __pfx_request_key_and_link+0x10/0x10
[  145.415684][ T7928]  ? __pfx___might_resched+0x10/0x10
[  145.415703][ T7928]  ? find_held_lock+0x2b/0x80
[  145.415719][ T7928]  ? __pfx_key_default_cmp+0x10/0x10
[  145.415736][ T7928]  ? __pfx_keyring_search_iterator+0x10/0x10
[  145.415754][ T7928]  ? _copy_from_user+0x59/0xd0
[  145.415775][ T7928]  __do_sys_request_key+0x2a2/0x3c0
[  145.415788][ T7928]  ? __pfx___do_sys_request_key+0x10/0x10
[  145.415798][ T7928]  ? fput+0x79/0x100
[  145.415813][ T7928]  ? __pfx_ksys_write+0x10/0x10
[  145.415826][ T7928]  __do_fast_syscall_32+0xe7/0x970
[  145.415842][ T7928]  ? lockdep_hardirqs_on+0x78/0x100
[  145.415859][ T7928]  do_fast_syscall_32+0x32/0x70
[  145.415874][ T7928]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  145.415889][ T7928] RIP: 0023:0xf709efec
[  145.415905][ T7928] Code: Unable to access opcode bytes at 0xf709efc2.
[  145.415910][ T7928] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 000000000000011f
[  145.415922][ T7928] RAX: ffffffffffffffda RBX: 00000000800008c0 RCX: 00000000800000c0
[  145.415929][ T7928] RDX: 00000000800004c0 RSI: 0000000000000000 RDI: 0000000000000000
[  145.415936][ T7928] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  145.415942][ T7928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  145.415949][ T7928] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  145.415963][ T7928]  </TASK>
[  145.532243][ T7932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.598'.
[  145.564561][ T7934] vhci_hcd vhci_hcd.0: remove, state 4
[  145.568460][ T7934] usb usb38: USB disconnect, device number 1
[  145.569670][ T5564] libceph: connect (1)[c::]:6789 error -101
[  145.573407][ T5564] libceph: mon0 (1)[c::]:6789 connect error
[  145.625107][   T12] vhci_hcd vhci_hcd.0: stop threads
[  145.626608][ T7934] vhci_hcd vhci_hcd.0: USB bus 38 deregistered
[  145.628018][   T12] vhci_hcd vhci_hcd.0: release socket
[  145.633186][   T12] vhci_hcd vhci_hcd.0: disconnect device
[  145.635746][   T12] vhci_hcd vhci_hcd.0: stop threads
[  145.638069][   T12] vhci_hcd vhci_hcd.0: release socket
[  145.640404][   T12] vhci_hcd vhci_hcd.0: disconnect device
[  145.642316][ T7934] vhci_hcd vhci_hcd.0: remove, state 4
[  145.642901][   T12] ==================================================================
[  145.644646][ T7934] usb usb37: USB disconnect, device number 1
[  145.647936][   T12] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60
[  145.653021][   T12] Read of size 1 at addr ffff8880234306c8 by task kworker/u32:0/12
[  145.657462][   T12] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  145.658803][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u32:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  145.658834][   T12] Tainted: [L]=SOFTLOCKUP
[  145.658840][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  145.658930][   T12] Workqueue: usbip_event event_handler
[  145.658966][   T12] Call Trace:
[  145.658973][   T12]  <TASK>
[  145.658980][   T12]  dump_stack_lvl+0x100/0x190
[  145.659030][   T12]  print_report+0x13d/0x4b0
[  145.659055][   T12]  ? __virt_addr_valid+0x239/0x430
[  145.659075][   T12]  ? _raw_spin_lock_irqsave+0x3a/0x60
[  145.659093][   T12]  kasan_report+0xdf/0x1c0
[  145.659117][   T12]  ? _raw_spin_lock_irqsave+0x3a/0x60
[  145.659136][   T12]  ? _raw_spin_lock_irqsave+0x3a/0x60
[  145.659153][   T12]  __kasan_check_byte+0x36/0x50
[  145.659175][   T12]  lock_acquire+0x132/0x370
[  145.659201][   T12]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  145.659219][   T12]  ? _raw_spin_lock_irqsave+0x52/0x60
[  145.659237][   T12]  _raw_spin_lock_irqsave+0x3a/0x60
[  145.659254][   T12]  ? event_handler+0x21e/0x570
[  145.659271][   T12]  event_handler+0x21e/0x570
[  145.659289][   T12]  process_one_work+0xa23/0x1940
[  145.659317][   T12]  ? __pfx_process_one_work+0x10/0x10
[  145.659343][   T12]  ? __pfx_event_handler+0x10/0x10
[  145.659361][   T12]  worker_thread+0x5ef/0xe50
[  145.659388][   T12]  ? kthread+0x13a/0x450
[  145.659408][   T12]  ? __pfx_worker_thread+0x10/0x10
[  145.659430][   T12]  kthread+0x370/0x450
[  145.659450][   T12]  ? __pfx_kthread+0x10/0x10
[  145.659472][   T12]  ret_from_fork+0x72b/0xd50
[  145.659492][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  145.659512][   T12]  ? __switch_to+0x800/0x10f0
[  145.659537][   T12]  ? __pfx_kthread+0x10/0x10
[  145.659558][   T12]  ret_from_fork_asm+0x1a/0x30
[  145.659581][   T12]  </TASK>
[  145.659589][   T12] 
[  145.684234][ T7934] vhci_hcd vhci_hcd.0: USB bus 37 deregistered
[  145.685204][   T12] Allocated by task 1:
[  145.734713][   T12]  kasan_save_stack+0x30/0x50
[  145.736716][   T12]  kasan_save_track+0x14/0x30
[  145.738698][   T12]  __kasan_kmalloc+0xaa/0xb0
[  145.740650][   T12]  __kmalloc_noprof+0x322/0x820
[  145.742594][   T12]  __usb_create_hcd+0x5e/0xac0
[  145.744629][   T12]  vhci_hcd_probe+0x1a5/0x4e0
[  145.746606][   T12]  platform_probe+0x106/0x1d0
[  145.748601][   T12]  really_probe+0x241/0xa60
[  145.750430][   T12]  __driver_probe_device+0x20e/0x450
[  145.752601][   T12]  driver_probe_device+0x4a/0x140
[  145.754624][   T12]  __device_attach_driver+0x1df/0x320
[  145.756822][   T12]  bus_for_each_drv+0x159/0x1e0
[  145.758865][   T12]  __device_attach+0x1e4/0x4d0
[  145.760898][   T12]  device_initial_probe+0xaf/0xd0
[  145.763018][   T12]  bus_probe_device+0x64/0x160
[  145.764929][   T12]  device_add+0x121d/0x1970
[  145.766751][   T12]  platform_device_add+0x35a/0x800
[  145.768916][   T12]  platform_device_register_full+0x5cf/0x830
[  145.771446][   T12]  vhci_hcd_init+0x1a1/0x2f0
[  145.773414][   T12]  do_one_initcall+0x11d/0x700
[  145.775436][   T12]  kernel_init_freeable+0x6ea/0x7b0
[  145.777615][   T12]  kernel_init+0x1f/0x1e0
[  145.779461][   T12]  ret_from_fork+0x72b/0xd50
[  145.781418][   T12]  ret_from_fork_asm+0x1a/0x30
[  145.783449][   T12] 
[  145.784482][   T12] Freed by task 7934:
[  145.786163][   T12]  kasan_save_stack+0x30/0x50
[  145.788167][   T12]  kasan_save_track+0x14/0x30
[  145.790160][   T12]  kasan_save_free_info+0x3b/0x70
[  145.792297][   T12]  __kasan_slab_free+0x5f/0x80
[  145.794314][   T12]  kfree+0x22b/0x6c0
[  145.795978][   T12]  usb_put_hcd+0x149/0x1f0
[  145.797870][   T12]  vhci_hcd_remove+0xb5/0x1b0
[  145.799858][   T12]  platform_remove+0x5f/0x80
[  145.801817][   T12]  device_remove+0xcb/0x180
[  145.803743][   T12]  device_release_driver_internal+0x44e/0x620
[  145.806280][   T12]  unbind_store+0xf8/0x110
[  145.808170][   T12]  drv_attr_store+0x74/0xb0
[  145.810088][   T12]  sysfs_kf_write+0xf2/0x150
[  145.812075][   T12]  kernfs_fop_write_iter+0x3e0/0x5f0
[  145.814288][   T12]  vfs_write+0x6ac/0x1050
[  145.816115][   T12]  ksys_write+0x12a/0x250
[  145.817935][   T12]  __do_fast_syscall_32+0xe7/0x970
[  145.820093][   T12]  do_fast_syscall_32+0x32/0x70
[  145.822160][   T12]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  145.824707][   T12] 
[  145.825705][   T12] Last potentially related work creation:
[  145.828029][   T12]  kasan_save_stack+0x30/0x50
[  145.830039][   T12]  kasan_record_aux_stack+0xa7/0xc0
[  145.832248][   T12]  insert_work+0x36/0x230
[  145.834095][   T12]  __queue_work+0x9bc/0x12b0
[  145.836065][   T12]  queue_work_on+0x1a9/0x1e0
[  145.838017][   T12]  usb_hcd_giveback_urb+0x330/0x4a0
[  145.840203][   T12]  unlink1+0x418/0x510
[  145.841933][   T12]  usb_hcd_unlink_urb+0x131/0x210
[  145.844051][   T12]  usb_kill_urb+0x121/0x320
[  145.845959][   T12]  hub_quiesce+0x1e9/0x320
[  145.847853][   T12]  hub_suspend+0x4ab/0x9e0
[  145.849748][   T12]  usb_suspend_both+0x288/0x950
[  145.851809][   T12]  usb_runtime_suspend+0x49/0x120
[  145.853912][   T12]  __rpm_callback+0xc8/0x620
[  145.855864][   T12]  rpm_callback+0x16a/0x1b0
[  145.857773][   T12]  rpm_suspend+0x2f4/0x11a0
[  145.859691][   T12]  __pm_runtime_suspend+0xba/0x1a0
[  145.861829][   T12]  usb_runtime_idle+0x7e/0x90
[  145.863811][   T12]  rpm_idle+0x322/0x790
[  145.865561][   T12]  pm_runtime_work+0x120/0x150
[  145.867576][   T12]  process_one_work+0xa23/0x1940
[  145.869658][   T12]  worker_thread+0x5ef/0xe50
[  145.871628][   T12]  kthread+0x370/0x450
[  145.873350][   T12]  ret_from_fork+0x72b/0xd50
[  145.875321][   T12]  ret_from_fork_asm+0x1a/0x30
[  145.877341][   T12] 
[  145.878365][   T12] Second to last potentially related work creation:
[  145.881108][   T12]  kasan_save_stack+0x30/0x50
[  145.883106][   T12]  kasan_record_aux_stack+0xa7/0xc0
[  145.885287][   T12]  insert_work+0x36/0x230
[  145.887128][   T12]  __queue_work+0x9bc/0x12b0
[  145.889104][   T12]  queue_work_on+0x1a9/0x1e0
[  145.891103][   T12]  usb_hcd_giveback_urb+0x3b8/0x4a0
[  145.893298][   T12]  usb_hcd_submit_urb+0xab7/0x2150
[  145.895468][   T12]  usb_submit_urb+0x827/0x19b0
[  145.897495][   T12]  usb_start_wait_urb+0x10e/0x580
[  145.899625][   T12]  usb_control_msg+0x328/0x4b0
[  145.901660][   T12]  hub_suspend+0x826/0x9e0
[  145.903564][   T12]  usb_suspend_both+0x288/0x950
[  145.905613][   T12]  usb_runtime_suspend+0x49/0x120
[  145.907773][   T12]  __rpm_callback+0xc8/0x620
[  145.909749][   T12]  rpm_callback+0x16a/0x1b0
[  145.911701][   T12]  rpm_suspend+0x2f4/0x11a0
[  145.913615][   T12]  __pm_runtime_suspend+0xba/0x1a0
[  145.915747][   T12]  usb_runtime_idle+0x7e/0x90
[  145.917584][   T12]  rpm_idle+0x322/0x790
[  145.919348][   T12]  pm_runtime_work+0x120/0x150
[  145.921289][   T12]  process_one_work+0xa23/0x1940
[  145.923301][   T12]  worker_thread+0x5ef/0xe50
[  145.925193][   T12]  kthread+0x370/0x450
[  145.926806][   T12]  ret_from_fork+0x72b/0xd50
[  145.928650][   T12]  ret_from_fork_asm+0x1a/0x30
[  145.930590][   T12] 
[  145.931545][   T12] The buggy address belongs to the object at ffff888023430000
[  145.931545][   T12]  which belongs to the cache kmalloc-8k of size 8192
[  145.936816][   T12] The buggy address is located 1736 bytes inside of
[  145.936816][   T12]  freed 8192-byte region [ffff888023430000, ffff888023432000)
[  145.942089][   T12] 
[  145.943057][   T12] The buggy address belongs to the physical page:
[  145.945605][   T12] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23430
[  145.948969][   T12] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  145.952272][   T12] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  145.955200][   T12] page_type: f5(slab)
[  145.956843][   T12] raw: 00fff00000000040 ffff88801bc43180 dead000000000100 dead000000000122
[  145.960378][   T12] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[  145.963919][   T12] head: 00fff00000000040 ffff88801bc43180 dead000000000100 dead000000000122
[  145.967313][   T12] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[  145.970861][   T12] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  145.974428][   T12] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  145.978009][   T12] page dumped because: kasan: bad access detected
[  145.980686][   T12] page_owner tracks the page as allocated
[  145.983048][   T12] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 4487979404, free_ts 0
[  145.990977][   T12]  post_alloc_hook+0xfd/0x120
[  145.992977][   T12]  get_page_from_freelist+0xf48/0x3530
[  145.995253][   T12]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  145.997744][   T12]  new_slab+0xa2/0x640
[  145.999463][   T12]  refill_objects+0xe3/0x410
[  146.001441][   T12]  __pcs_replace_empty_main+0x376/0x680
[  146.003753][   T12]  __kmalloc_noprof+0x66d/0x820
[  146.005787][   T12]  ecryptfs_init_messaging+0x29d/0x5a0
[  146.008063][   T12]  ecryptfs_init+0x32c/0x410
[  146.010002][   T12]  do_one_initcall+0x11d/0x700
[  146.012038][   T12]  kernel_init_freeable+0x6ea/0x7b0
[  146.014211][   T12]  kernel_init+0x1f/0x1e0
[  146.016044][   T12]  ret_from_fork+0x72b/0xd50
[  146.017980][   T12]  ret_from_fork_asm+0x1a/0x30
[  146.019990][   T12] page_owner free stack trace missing
[  146.022242][   T12] 
[  146.023290][   T12] Memory state around the buggy address:
[  146.025626][   T12]  ffff888023430580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  146.028963][   T12]  ffff888023430600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  146.032309][   T12] >ffff888023430680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  146.035627][   T12]                                               ^
[  146.038280][   T12]  ffff888023430700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  146.041637][   T12]  ffff888023430780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  146.044967][   T12] ==================================================================
[  146.048301][   T12] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  146.051324][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u32:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  146.055650][   T12] Tainted: [L]=SOFTLOCKUP
[  146.057463][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  146.061624][   T12] Workqueue: usbip_event event_handler
[  146.063934][   T12] Call Trace:
[  146.065356][   T12]  <TASK>
[  146.066621][   T12]  dump_stack_lvl+0x100/0x190
[  146.068615][   T12]  vpanic+0x552/0x970
[  146.070318][   T12]  ? __pfx_vpanic+0x10/0x10
[  146.071978][   T12]  ? __pfx_vprintk_emit+0x10/0x10
[  146.073559][   T12]  ? _raw_spin_lock_irqsave+0x3a/0x60
[  146.075263][   T12]  panic+0xd1/0xe0
[  146.076456][   T12]  ? __pfx_panic+0x10/0x10
[  146.077854][   T12]  ? end_report.part.0+0x23/0x90
[  146.079421][   T12]  ? rcu_is_watching+0x12/0xc0
[  146.080948][   T12]  ? end_report.part.0+0x23/0x90
[  146.082494][   T12]  ? check_panic_on_warn+0x1f/0x90
[  146.084115][   T12]  check_panic_on_warn.cold+0x19/0x34
[  146.085802][   T12]  end_report.part.0+0x3a/0x90
[  146.087320][   T12]  kasan_report.cold+0xe/0x18
[  146.088854][   T12]  ? _raw_spin_lock_irqsave+0x3a/0x60
[  146.090732][   T12]  ? _raw_spin_lock_irqsave+0x3a/0x60
[  146.092717][   T12]  __kasan_check_byte+0x36/0x50
[  146.094246][   T12]  lock_acquire+0x132/0x370
[  146.095706][   T12]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  146.097810][   T12]  ? _raw_spin_lock_irqsave+0x52/0x60
[  146.099742][   T12]  _raw_spin_lock_irqsave+0x3a/0x60
[  146.101332][   T12]  ? event_handler+0x21e/0x570
[  146.102828][   T12]  event_handler+0x21e/0x570
[  146.104313][   T12]  process_one_work+0xa23/0x1940
[  146.105869][   T12]  ? __pfx_process_one_work+0x10/0x10
[  146.107571][   T12]  ? __pfx_event_handler+0x10/0x10
[  146.109180][   T12]  worker_thread+0x5ef/0xe50
[  146.110653][   T12]  ? kthread+0x13a/0x450
[  146.112015][   T12]  ? __pfx_worker_thread+0x10/0x10
[  146.113613][   T12]  kthread+0x370/0x450
[  146.115147][   T12]  ? __pfx_kthread+0x10/0x10
[  146.116921][   T12]  ret_from_fork+0x72b/0xd50
[  146.118774][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  146.120606][   T12]  ? __switch_to+0x800/0x10f0
[  146.122092][   T12]  ? __pfx_kthread+0x10/0x10
[  146.123575][   T12]  ret_from_fork_asm+0x1a/0x30
[  146.125093][   T12]  </TASK>
[  146.126755][   T12] Kernel Offset: disabled
[  146.128139][   T12] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:13:58  Registers:
info registers vcpu 0

CPU#0
RAX=000000000025c409 RBX=ffffffff8e891480 RCX=ffffffff8bb912d5 RDX=0000000000000000
RSI=ffffffff8e1a92f6 RDI=ffffffff8c400a80 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10
R8 =0000000000000001 R9 =ffffed100564678d R10=ffff88802b233c6b R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000
RIP=ffffffff8bb8f89f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096be1000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fe5894e6708 CR3=0000000042875000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000077 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85a13375 RDI=ffffffff9b9f51a0 RBP=ffffffff9b9f5160 RSP=ffffc900001e7570
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666
R12=0000000000000000 R13=0000000000000077 R14=ffffffff9b6f5228 R15=ffffffff85a13310
RIP=ffffffff85a1339f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096ce1000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000ffdb5ffc CR3=000000007359d000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=ffffea0000ad11c0 RCX=ffffffff8264ab6c RDX=1ffffd400015a23e
RSI=0000000000000000 RDI=00000000000000f4 RBP=0000000000000001 RSP=ffffc900042f74a8
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=0000000000000000 R13=dffffc0000000000 R14=0000000000000001 R15=ffffea0000ad11c0
RIP=ffffffff8209a874 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6e84d80300 ffffffff 00c00000
GS =0000 ffff888096de1000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000055e847aa5000 CR3=000000004fb67000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000260 0000001000000000 0000000000000000 0000000000000015
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01099200080001d8 8003200800060800 200800060074c828 0000034e00000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00003065736f7201 ffffffffffffffff df08088003000400
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6ac58edc80b180e8 9008000c800201c7 080008044eaa006e 75742f74656e2f76
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65642f01ffffffff ffffffffe5080c80 0300080006080020 0800060274ce0008
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000392080004016c e001d880020fffff ffff020608000208 000100000008060a
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b00300080006a803 00040006a4030002 0006a20300020006 a003000800069803
ZMM25=fddf5e6ffddf5e6f fddf5e6ffddf5e6f fddf5e6ffddf5e6f fddf5e6ffddf5e6f fddf5e6ffddf5e6f fddf5e6ffddf5e6f fddf5e6ffddf5e6f fddf5e6ffddf5e6f
ZMM26=1af0396c1af0396c 1af0396c1af0396c 1af0396c1af0396c 1af0396c1af0396c 1af0396c1af0396c 1af0396c1af0396c 1af0396c1af0396c 1af0396c1af0396c
ZMM27=fa4ec475fa4ec475 fa4ec475fa4ec475 fa4ec475fa4ec475 fa4ec475fa4ec475 fa4ec475fa4ec475 fa4ec475fa4ec475 fa4ec475fa4ec475 fa4ec475fa4ec475
ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=3d0600003d060000 3d0600003d060000 3d0600003d060000 3d0600003d060000 3d0600003d060000 3d0600003d060000 3d0600003d060000 3d0600003d060000
info registers vcpu 3

CPU#3
RAX=dffffc0000000000 RBX=ffff88802b533c68 RCX=ffffffff82bcea03 RDX=0000000000000000
RSI=ffffffff8c400a00 RDI=ffffffff8e46d938 RBP=0000000000000003 RSP=ffffc900065d7548
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=0000000000000001 R13=ffffffff8c717980 R14=0000000000000000 R15=ffff88802a4a73c0
RIP=ffffffff81edcd60 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888096ee1000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007ffeac6e09d0 CR3=000000002a8bd000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000