last executing test programs:

2m23.115543906s ago: executing program 2 (id=733):
timer_settime(0x0, 0x0, 0x0, 0x0) (async)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f000049f000/0x3000)=nil, 0x3000, 0x2000, 0xd3c28bec76034d2a, &(0x7f0000452000/0x2000)=nil)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) (async)
listen(0xffffffffffffffff, 0x8) (async)
connect$inet(r0, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) (async)
openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
preadv(r1, &(0x7f0000000500)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) (async)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x529043, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000000)={0x3, 'pimreg1\x00', {0x1}, 0x7}) (async)
munmap(&(0x7f0000bfb000/0x2000)=nil, 0x2000)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
munmap(&(0x7f0000000000/0x1000)=nil, 0x1000) (async)
socket$inet(0x2, 0x3, 0x42)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
mmap(&(0x7f0000f79000/0x3000)=nil, 0x3000, 0x300000c, 0x2010, 0xffffffffffffffff, 0x3165c000) (async)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3) (async)
prctl$PR_SCHED_CORE(0x3e, 0x2, r3, 0x3, 0x0) (async)
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x10002, 0x0, &(0x7f0000b44000/0x1000)=nil})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async)
syz_open_dev$tty1(0xc, 0x4, 0x3)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

2m22.66529047s ago: executing program 2 (id=734):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usbip_server_init(0x1) (fail_nth: 1)

2m22.123866843s ago: executing program 2 (id=738):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b31d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de603000000e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) (async)
sendmmsg$inet(r4, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
ioctl$KVM_NMI(r2, 0xae9a) (async, rerun: 32)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x7, 0x100000000, 0x0, 0x10001, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffd, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) (async, rerun: 32)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x5, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0xa], 0x0, 0x41901})
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64)
r5 = gettid() (rerun: 64)
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
capset(&(0x7f0000000340)={0x19980330, r5}, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x6, 0x7b})
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) (async)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)

2m21.134519819s ago: executing program 2 (id=744):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r2, 0x4000, 0x0}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xfff1, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0x401, 0x0, 0x25dfdbed, {0x0, 0x0, 0x0, r5, {0x3}, {0xe, 0xffff}, {0x300, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x9, 0x6, 0x1, 0x1, 0x7, 0x2, 0x7, 0x5, [{0x5, 0x1, 0x8, 0xd8}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x5c}}, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r6, 0xffffffffffffffff, 0x0)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="14010000260001000000000004000000020100800c000100020000000000000014000c01"], 0x114}], 0x1}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000042000100002000000000000003010000000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c000200060006000300000c000300080017bc79e711f4dfa9504a040000007e46e3cccb1b6ba70a9b617e846a914bda64dc65721651b754d0e4b9460a745d534d21bac84b10db7b3f0000"], 0x58}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0)

2m19.450914109s ago: executing program 2 (id=753):
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000c00)='./sys\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/block/loop0/make-it-fail\x00', 0x2, 0x0)
write$P9_RLERRORu(r0, &(0x7f0000000040)={0x1f, 0x7, 0x2, {{0x12, 'cpuacct.usage_sys\x00'}, 0x4}}, 0x1f)
r1 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = getpid()
r4 = socket$can_raw(0x1d, 0x3, 0x1)
dup(r4)
r5 = syz_pidfd_open(r3, 0x0)
setns(r5, 0x24020000)
fcntl$getownex(r0, 0x10, &(0x7f0000000100))
r6 = syz_clone(0x95008100, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace(0x10, r6)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]})
close(r7)
close_range(r1, r1, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0xff}, 0x2)

2m19.331141148s ago: executing program 2 (id=755):
socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4)
setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x2)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x40)
unshare(0x40000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

2m13.065972508s ago: executing program 1 (id=781):
r0 = socket(0xa, 0x3, 0x3a)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x15, 0x0, &(0x7f0000000340)="14fd54ab72df87e6256c000000000c4f72fe5a6157", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb002, 0x1000, 0x6, 0x196})
setresgid(0x0, 0xee01, 0x0)
r4 = syz_clone(0x80040000, 0x0, 0xffffff8e, 0x0, 0x0, 0x0)
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x24020000)
r6 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
listen(r6, 0x4)
recvmmsg(r6, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40000000, 0x0)
close_range(r3, r6, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
socket$kcm(0xa, 0x1, 0x106)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0)

2m12.145996703s ago: executing program 1 (id=782):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtaction={0x48, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0)

2m11.838662911s ago: executing program 1 (id=783):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "750600", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "ffffffffffffffff"}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x221, 0x70bd2a, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x40000)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)

2m11.669319122s ago: executing program 1 (id=788):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x54, 0x30, 0xb, 0x70bd25, 0x0, {}, [{0xffffffffffffffc7, 0x1, [@m_gact={0x3c, 0x1, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x12e5, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000015}, 0xc844)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$nci(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="e87d1120c34370074c8c3159e585e1e7d9d64a51aed756c6943ef9fd32f2845cbdf2adf9b97e6be3d8dea2bee1471e88037c2ffb589116b46549ed728fa80200000000000000565d0879d80203c98a72320180f58b97c9e7006bc20e6abd9264e308eca7ef78d98a2d6b410d2b15e6e085cca6a169fd5801b79b5e5dd5ca55277a42df43f04fb6a3bcc1a6632b89f49f93df860cfc"], 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r2 = inotify_init()
inotify_add_watch(r2, 0x0, 0x850003d1)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004)
r3 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000fff000/0x1000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000680)=""/240)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r4, 0x0, 0x0)

2m10.62130329s ago: executing program 1 (id=791):
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000c00)='./sys\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/block/loop0/make-it-fail\x00', 0x2, 0x0)
write$P9_RLERRORu(r0, &(0x7f0000000040)={0x1f, 0x7, 0x2, {{0x12, 'cpuacct.usage_sys\x00'}, 0x4}}, 0x1f)
r1 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = getpid()
r4 = socket$can_raw(0x1d, 0x3, 0x1)
dup(r4)
r5 = syz_pidfd_open(r3, 0x0)
setns(r5, 0x24020000)
fcntl$getownex(r0, 0x10, &(0x7f0000000100))
r6 = syz_clone(0x95008100, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace(0x10, r6)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]})
close(r7)
close_range(r1, r1, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0xff}, 0x2)

2m10.515305356s ago: executing program 1 (id=792):
r0 = socket(0x11, 0x3, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfffe7528, 0x10020, 0xfffffa88, 0x1, 0x92, "353218d8e800", 0x10000007, 0x1})
ioctl$TCXONC(r1, 0x540a, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2503030000000000000016000000140001800d0001007564703a7379325c14682cf6f57ff4f2a740b65b827a310000000035b1e986ced035b5905cdf15c5b038110947d4ed7826cb211cfb434d8b2788"], 0x28}, 0x1, 0x0, 0x0, 0x180a4}, 0x4000010)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0xc044)
r5 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0)
socket$inet6(0xa, 0x1, 0x0)
close(0x4)
write$uinput_user_dev(r5, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac03}, 0x27, [0x10, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0xfffffe5d, 0x0, 0x8001, 0x1, 0xfffffffd, 0x8000, 0x4, 0x1, 0x2, 0x6, 0x3, 0x4, 0x6a90, 0x0, 0x4e3, 0x1, 0x7fff, 0x5, 0x0, 0x2, 0x0, 0xe, 0x8000, 0x1, 0x9d, 0x10000080, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0x1, 0xb, 0x7, 0x7, 0x7, 0x2, 0x3, 0x3, 0xff, 0x1, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0x8, 0xfffff7fb, 0x3, 0x100, 0x5, 0xb], [0x7, 0x9d2, 0x7fffffff, 0x800, 0x3, 0x9, 0x7, 0x8, 0x5, 0x80000001, 0x80008, 0x40, 0x6, 0x8, 0x80001005, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x100000, 0x800, 0x2, 0x3, 0x7, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x10004, 0xfffffc04, 0x1, 0x4, 0x3ff, 0x6, 0x7f, 0x3, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0xfffffff8, 0x1, 0xe8, 0xffff8000, 0x2, 0xb, 0x4, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0xffffff7f, 0x7fffffff, 0x6], [0x1, 0xd, 0x7, 0x590, 0xfffffff, 0xb0, 0x8, 0x5, 0x2, 0x4, 0x9, 0x7, 0x7, 0x3, 0x4, 0xe, 0x8001, 0xfffffffe, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x1, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x391a0b76, 0x2, 0x8000, 0x10, 0x5, 0x7, 0x1, 0x10, 0xb8, 0x6, 0x80000001, 0x8001, 0x3, 0x1b9, 0x8a7, 0x1, 0x8, 0x3, 0x1, 0x1, 0x4, 0x3, 0x74da, 0xec9, 0x140, 0x5, 0x3, 0x6, 0x1, 0x7fff, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x3, 0xb, 0x2, 0xffff, 0x0, 0x9, 0x80000000, 0xffff, 0xb7, 0x6, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0xe, 0x3ff, 0x1, 0x2, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x7, 0x4, 0x2170, 0x0, 0x2, 0x6b2, 0x9, 0xcd5e, 0x59, 0x9, 0x400, 0x6, 0x6, 0x5, 0x1, 0x20, 0x4, 0xd, 0x6, 0x1, 0x6, 0x2, 0x2, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x1, 0x5, 0xfffffffb]}, 0x45c)
r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6}, @IFLA_GRE_OFLAGS={0x6}]}}}]}, 0x44}}, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000040)={0xf000, 0x1000, 0x8})
setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000100)=0x5, 0x4)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

2m4.109028796s ago: executing program 32 (id=755):
socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4)
setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x2)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x40)
unshare(0x40000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

1m54.993168585s ago: executing program 33 (id=792):
r0 = socket(0x11, 0x3, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfffe7528, 0x10020, 0xfffffa88, 0x1, 0x92, "353218d8e800", 0x10000007, 0x1})
ioctl$TCXONC(r1, 0x540a, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2503030000000000000016000000140001800d0001007564703a7379325c14682cf6f57ff4f2a740b65b827a310000000035b1e986ced035b5905cdf15c5b038110947d4ed7826cb211cfb434d8b2788"], 0x28}, 0x1, 0x0, 0x0, 0x180a4}, 0x4000010)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0xc044)
r5 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0)
socket$inet6(0xa, 0x1, 0x0)
close(0x4)
write$uinput_user_dev(r5, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac03}, 0x27, [0x10, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0xfffffe5d, 0x0, 0x8001, 0x1, 0xfffffffd, 0x8000, 0x4, 0x1, 0x2, 0x6, 0x3, 0x4, 0x6a90, 0x0, 0x4e3, 0x1, 0x7fff, 0x5, 0x0, 0x2, 0x0, 0xe, 0x8000, 0x1, 0x9d, 0x10000080, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0x1, 0xb, 0x7, 0x7, 0x7, 0x2, 0x3, 0x3, 0xff, 0x1, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0x8, 0xfffff7fb, 0x3, 0x100, 0x5, 0xb], [0x7, 0x9d2, 0x7fffffff, 0x800, 0x3, 0x9, 0x7, 0x8, 0x5, 0x80000001, 0x80008, 0x40, 0x6, 0x8, 0x80001005, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x100000, 0x800, 0x2, 0x3, 0x7, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x10004, 0xfffffc04, 0x1, 0x4, 0x3ff, 0x6, 0x7f, 0x3, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0xfffffff8, 0x1, 0xe8, 0xffff8000, 0x2, 0xb, 0x4, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0xffffff7f, 0x7fffffff, 0x6], [0x1, 0xd, 0x7, 0x590, 0xfffffff, 0xb0, 0x8, 0x5, 0x2, 0x4, 0x9, 0x7, 0x7, 0x3, 0x4, 0xe, 0x8001, 0xfffffffe, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x1, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x391a0b76, 0x2, 0x8000, 0x10, 0x5, 0x7, 0x1, 0x10, 0xb8, 0x6, 0x80000001, 0x8001, 0x3, 0x1b9, 0x8a7, 0x1, 0x8, 0x3, 0x1, 0x1, 0x4, 0x3, 0x74da, 0xec9, 0x140, 0x5, 0x3, 0x6, 0x1, 0x7fff, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x3, 0xb, 0x2, 0xffff, 0x0, 0x9, 0x80000000, 0xffff, 0xb7, 0x6, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0xe, 0x3ff, 0x1, 0x2, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x7, 0x4, 0x2170, 0x0, 0x2, 0x6b2, 0x9, 0xcd5e, 0x59, 0x9, 0x400, 0x6, 0x6, 0x5, 0x1, 0x20, 0x4, 0xd, 0x6, 0x1, 0x6, 0x2, 0x2, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x1, 0x5, 0xfffffffb]}, 0x45c)
r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6}, @IFLA_GRE_OFLAGS={0x6}]}}}]}, 0x44}}, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000040)={0xf000, 0x1000, 0x8})
setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000100)=0x5, 0x4)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

8.255763234s ago: executing program 0 (id=1619):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x54, 0x30, 0xb, 0x70bd25, 0x0, {}, [{0xffffffffffffffc7, 0x1, [@m_gact={0x3c, 0x1, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x12e5, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000015}, 0xc844)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$nci(r0, 0x0, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r2 = inotify_init()
inotify_add_watch(r2, 0x0, 0x850003d1)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004)
r3 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000fff000/0x1000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000680)=""/240)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r4, 0x0, 0x0)

6.144572352s ago: executing program 0 (id=1615):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1, 0x0}}, 0x20)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xf}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000080010000400000008"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r2}, 0x38)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x20208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
landlock_create_ruleset(&(0x7f0000000140)={0x18414, 0x3, 0x2}, 0x30, 0x0)
ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f0000019440)={0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write(r3, &(0x7f0000000080)='transport=loop,nqn=nqn.2014-08.org.nvmexpress.discovery\x00', 0x38)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x5, 0x8, 0x7, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000380)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[{}, {}, {}, {}, {}], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200), 0x5, 0x2, 0x1, 0x0, r4})
openat$panthor(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000780)={r7, 0x0, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300))
ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000240)={r7, 0xc89, 0xa, 0xfffffffa, 0x3, [<r8=>0x0], [0x5, 0x5, 0xfffffffd, 0x2], [0xe, 0x7, 0xffffffff, 0x8000], [0xfffffffffffffffb, 0xa679, 0x1, 0x7f]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r8})

4.312099279s ago: executing program 0 (id=1626):
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$CDROM_LOCKDOOR(r0, 0x5329, 0x0)
ioctl$CDROMEJECT(r0, 0x5309)
ioctl$CDROMEJECT_SW(r0, 0x530f, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') (fail_nth: 1)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x400000b00, 0x12)

3.965202761s ago: executing program 0 (id=1628):
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6e5415445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d8b6d2ccd00"}, 0xd8)
r0 = socket$kcm(0x23, 0x5, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4)
listen(r0, 0x800)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0)
r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
write$binfmt_script(r4, &(0x7f00000001c0)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io(r5, &(0x7f0000000b00)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="00000f00000009003d140f3c3691977b"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000010, 0x110, 0xffffffffffffffff, 0x0)
ioctl$HIDIOCGPHYS(r6, 0x80404812, &(0x7f0000000140))
syz_clone3(0x0, 0x0)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
syz_emit_ethernet(0x6a, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500005c000000000e01907864010102ac1414aa05019078e00100e0400000000000000800880000ac1414bb0a01010086060000000086230000000106103f24070da6abb8676a852faaeea6050d428be8002267deaafa50f4000000"], 0x0)
read$FUSE(r3, &(0x7f0000002300)={0x2020}, 0x2020)
write(r3, &(0x7f0000000280)="ff80", 0x2)

3.402066509s ago: executing program 5 (id=1633):
r0 = openat$null(0xffffff9c, &(0x7f0000000000), 0x400, 0x0)
write$FUSE_STATFS(r0, &(0x7f0000000040)={0x60, 0xffffffffffffffda, 0x0, {{0xffffffffffffff17, 0x7, 0x80000000, 0x8, 0x6, 0xe, 0xfc, 0x3}}}, 0x60)
read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_LSEEK(r0, &(0x7f0000002100)={0x18, 0x0, r1, {0x8}}, 0x18)
write$FUSE_WRITE(r0, &(0x7f0000002140)={0x18, 0xfffffffffffffffe, r1, {0x6}}, 0x18)
write$FUSE_POLL(r0, &(0x7f0000002180)={0x18, 0x0, r1}, 0x18)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000021c0)=0x14)
r2 = openat$sequencer(0xffffff9c, &(0x7f0000002200), 0x8000, 0x0)
r3 = openat$uinput(0xffffff9c, &(0x7f0000002240), 0x802, 0x0)
ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x9)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
r4 = ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00)
close_range(r4, r2, 0x2)
r5 = openat$dsp1(0xffffff9c, &(0x7f00000022c0), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x80044d1a, &(0x7f0000002300))
r6 = openat$cgroup_root(0xffffff9c, &(0x7f0000002340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
listen(r0, 0x400)
r7 = dup2(r3, r2)
flock(r6, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000002380)={0x1fe, 0x4, 0x54000, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f00000023c0)=0x7, 0x4)
socket$inet_udp(0x2, 0x2, 0x0)
file_getattr(0xffffffffffffff9c, &(0x7f0000002400)='./file0\x00', &(0x7f0000002440), 0x18, 0x800)
write$uinput_user_dev(r7, &(0x7f0000002480)={'syz0\x00', {0x7, 0x6, 0x8000, 0x13}, 0x4b, [0x9, 0x0, 0x642, 0x3, 0x4, 0x10001, 0x5, 0x7, 0xfffffff4, 0xffffffff, 0x6, 0x7, 0x3, 0x3, 0x5, 0x8, 0x0, 0x8, 0x4, 0x40000, 0x12eb, 0x0, 0xfffffffd, 0x4a, 0x7, 0x8, 0x9, 0x5, 0x0, 0x8, 0xd, 0x6, 0x9, 0x7, 0x2, 0x7fff, 0x8, 0xb3, 0x5, 0x7, 0x3d, 0x3, 0x0, 0x99e2, 0x1, 0x69f, 0xfffffffa, 0x3, 0xb, 0x0, 0x12, 0x8, 0x3, 0x7, 0x3, 0x7, 0x401, 0x2, 0x8, 0x80000000, 0x80, 0x8001, 0xc], [0x2, 0x80000001, 0x6, 0x8, 0xf4a1, 0x80000001, 0x2, 0xf2b, 0xb0e4, 0x2, 0xf, 0x2, 0xb, 0x3, 0xa5b, 0x680000, 0x0, 0x42, 0x5, 0xc, 0x4, 0x1, 0xdf, 0x4, 0x6, 0x3ff, 0x3, 0x6, 0x3, 0xfffffffd, 0x8, 0xc, 0x8000, 0x1, 0x800, 0xff, 0x1ff, 0xd, 0x6, 0x3ff, 0x80000000, 0x6, 0x2, 0xd, 0x3, 0x0, 0x1, 0x81, 0x10000, 0x6be, 0x9, 0xd4, 0x7, 0xfffffffa, 0xaac, 0x4, 0x5, 0xffffffff, 0x40, 0x1, 0x79d3, 0x2, 0x2, 0xfffffff8], [0x7f, 0x1, 0x2, 0x7, 0x8001, 0x1, 0x47, 0x4, 0x7, 0xd, 0x7fff, 0x9, 0x6, 0x5, 0xb, 0x8, 0x1, 0x2, 0x7, 0x3, 0x1, 0x3, 0x81, 0x800, 0x1a4, 0x2, 0x0, 0x3, 0xf4c, 0xcd, 0x1, 0xd9, 0x40, 0x1cbc, 0x5, 0x4, 0x6, 0x1, 0x60301c7f, 0x3, 0x4, 0x8001, 0x7, 0x7, 0x8001, 0x5, 0x400, 0x1, 0xabc, 0x14000, 0xd2b, 0x1, 0x0, 0x8001, 0x7fff, 0x4, 0xfffffffc, 0x3, 0xfff, 0xe0e, 0x63e, 0x1ff, 0x101, 0x5], [0x8, 0x6, 0xb, 0x5cb5b117, 0x3, 0x6, 0x94ce, 0x7fff, 0x2400000, 0x6, 0x2, 0x80000001, 0x8, 0x9, 0x98, 0xfffffffe, 0x5, 0x4, 0x5, 0x1, 0x1, 0x5, 0x7, 0x2, 0x518, 0x130, 0xffffffff, 0x2, 0x3, 0x8, 0x10, 0x8, 0x8, 0xfffffff8, 0x5, 0x2, 0x5, 0x3, 0x54, 0x5, 0x7ff, 0x2, 0x5, 0x7, 0xfffff9b3, 0x400, 0xdd000000, 0x7a, 0x6, 0x7fffffff, 0xd, 0xffff, 0x1, 0xfffffff8, 0x9, 0x1, 0x81, 0xffffffff, 0x1, 0xe, 0x8, 0x5, 0x4, 0x5]}, 0x45c)
ioctl$XFS_IOC_BULKSTAT(0xffffffffffffffff, 0x8040587f, &(0x7f0000002d80)={{0xfffffffffffffff9, 0x4, 0x2, 0x1, 0x84fd}, &(0x7f0000002900)=[{}, {}, {}, {}, {}, {}]})
ioctl$SNDRV_PCM_IOCTL_PAUSE(r7, 0x40044145, &(0x7f0000002e00)=0x4)
r8 = syz_open_dev$mouse(&(0x7f0000002e40), 0x200, 0x6541)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r8, 0x80804120, &(0x7f0000002e80))
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000002f00)={0x0, 0xc930, 0x2, 0x1, 0x176, 0x0, r0}, &(0x7f0000002f80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x54ef, 0x4000, 0x0, 0x12e, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbd86, 0x2000, 0x1, 0x1e1, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5bd, 0x8000, 0x0, 0x348}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4d47, 0x400, 0x2, 0xfa, 0x0, r0}}], 0x4, &(0x7f0000004200)={0x2e, 0x4, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, '\x00', {0x2, 0x222, 0x0, &(0x7f0000003200)=@buf_1k="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"}}, &(0x7f0000004280))

3.303849676s ago: executing program 5 (id=1636):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1, 0x0}}, 0x20)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xf}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000080010000400000008"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r2}, 0x38)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x20208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
landlock_create_ruleset(&(0x7f0000000140)={0x18414, 0x3, 0x2}, 0x30, 0x0)
ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f0000019440)={0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write(r3, &(0x7f0000000080)='transport=loop,nqn=nqn.2014-08.org.nvmexpress.discovery\x00', 0x38)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x5, 0x8, 0x7, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000380)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[{}, {}, {}, {}, {}], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200), 0x5, 0x2, 0x1, 0x0, r4})
openat$panthor(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000780)={r7, 0x0, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300))
ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000240)={r7, 0xc89, 0xa, 0xfffffffa, 0x3, [<r8=>0x0], [0x5, 0x5, 0xfffffffd, 0x2], [0xe, 0x7, 0xffffffff, 0x8000], [0xfffffffffffffffb, 0xa679, 0x1, 0x7f]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r8})

3.23515632s ago: executing program 4 (id=1637):
write(0xffffffffffffffff, &(0x7f0000000080)='transport=loop,nqn=nqn.2014-', 0x1c)
openat$panthor(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000780)={r3, 0x0, 0x4, 0x0, 0x2, [<r4=>0x0], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000240)={r3, 0xc89, 0xa, 0xfffffffa, 0x3, [<r6=>0x0], [0x5, 0x5, 0xfffffffd, 0x2], [0xe, 0x7, 0xffffffff, 0x8000], [0xfffffffffffffffb, 0xa679, 0x1, 0x7f]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r6})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0286429, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000000)=[0xba, 0x3, 0x5, 0x3, 0x2, 0x3, 0xffffff40, 0xa3], &(0x7f0000000100)=[0x0, 0xa, 0x2, 0xfffffff7, 0x5, 0x0, 0x10d9, 0x2, 0x80000000], 0x0, 0x3, 0xf3, &(0x7f0000000180)=[0x6, 0x4, 0x1], &(0x7f00000001c0)=[0x1ff, 0x7]})

3.142084327s ago: executing program 4 (id=1638):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x54, 0x30, 0xb, 0x70bd25, 0x0, {}, [{0xffffffffffffffc7, 0x1, [@m_gact={0x3c, 0x1, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x12e5, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000015}, 0xc844)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$nci(r0, 0x0, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r2 = inotify_init()
inotify_add_watch(r2, 0x0, 0x850003d1)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004)
r3 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000fff000/0x1000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000680)=""/240)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r4, 0x0, 0x0)

1.857465152s ago: executing program 5 (id=1641):
unshare(0x2000080)
r0 = syz_open_dev$video(&(0x7f0000000240), 0x8001, 0x802)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000080)={0xc0, 0x0, 0x1000000})
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002980)={0xc4, 0x3b, 0x400, 0x70b52b, 0x25dfdbfe, {0x11}, [@generic="859308d45cc465dca93bc2c37d5d353ba1634ca5b37cfb78883f170cf98c8094ea4e6402220146e5f98ae79bb4", @typed={0x8, 0x111, 0x0, 0x0, @fd=r2}, @nested={0xc, 0x114, 0x0, 0x1, [@typed={0x8, 0x2a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x36}}]}, @nested={0x6a, 0x49, 0x0, 0x1, [@generic="5df78977d34f3bb63ce394abe4267c7a60f9d3fb3282920a4a16e766188d69fd79ce7fd197e0ee20e09b2c2fb0e0bbc9224f4c8761bc1a6e8acf56ccdb6301a5694e6149adb168163368cb9c7db0393c3bcc73a2bffcea782927264e7ce9ea0be30e07fbd053"]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24048110}, 0x4004004)
r4 = openat$comedi(0xffffff9c, &(0x7f0000000240)='/dev/comedi3\x00', 0x40, 0x0)
ioctl$COMEDI_RANGEINFO(r4, 0x80086408, &(0x7f00000002c0)={0x1, 0x0})
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000280)='.\x00', &(0x7f00000001c0), 0x8000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r0}})

1.518714134s ago: executing program 5 (id=1643):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x777)
write(0xffffffffffffffff, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='0', 0x1)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (fail_nth: 1)

1.517431578s ago: executing program 4 (id=1644):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x2802, 0x0)
write(r2, &(0x7f0000000000)='7', 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x1}}, 0x20)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) (async)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x2802, 0x0) (async)
write(r2, &(0x7f0000000000)='7', 0x1) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x1}}, 0x20) (async)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async)

1.483877577s ago: executing program 5 (id=1645):
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000011c0)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @nested={0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f00000010c0), r1)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000001100)={0x0, {}, 0x0, {}, 0xcbe, 0x3, 0x1e, 0x5, "53805c09ede5d9a2acd35097ca8029a9cd209896b49a148fa4ff2216b81ca3d2628fecda01096f3a0a1a67ca6e9668ae7b28dd753f1c6c2c24cb77c65c8cf291", "2ded9d7a0e9ca3be08707fef09f40e2c69d43244d8e7ec39169c84eefee35ec7", [0x1, 0x37d5]})
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfef", 0x4}], 0x1}, 0x0)
sendmsg$rds(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f00000000c0)={{r1}, "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"})
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4)
getsockname$packet(r4, &(0x7f0000000440)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x3e, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x704c3, 0xc4a48b7f26bf140b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010)
sendmmsg$inet(r3, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r5, @empty, @multicast2}}}], 0x18}}], 0x1, 0x4880)
setsockopt$inet_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000040)=@gcm_256={{0x303}, "e1f2f1d06dba2c40", "555747aa60576345a3aec14c1ef2173f91d4a5cec1a9649f20ceb50ffcc924b7", "c6ffad03", "4db0992f9d162ff2"}, 0x38)
sendto$inet(r4, &(0x7f0000001280)="bc768708afabfb8fac2397bdaaf7645656c76482110a040f1baa938ed5703e3082778e7ceda41a446118eb2452f450b09bd7f685ffb0493bb825a4195d21f712c3c6839c296ed65c80deb116cae5da0c959b38ea6dd20666ff4626f5e39b51fdaae68d37c97dda0ba0b517eab3a6228dee2ed653c07fcc6852607e3f2143e96c874d5368b0e907f72eba1ec76f1fa3a787edbcf47d38fabcd40a2a5e32e4fe", 0x9f, 0x4000005, &(0x7f0000001340)={0x2, 0x4e24, @remote}, 0x10)

1.195987178s ago: executing program 5 (id=1646):
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000240)={0x0, 0x0, 0x0, 'queue1\x00', 0x806})
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x2a02)
fcntl$setlease(r2, 0x400, 0x1)
link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r3, 0x400455c8, 0x400000009)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r4, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4)
setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4)
splice(r3, &(0x7f0000000180)=0xf50, r2, &(0x7f0000000340)=0x4, 0x1ff, 0x9)
syz_emit_ethernet(0x3e, &(0x7f0000000780)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x8, 0x2c, 0xff, @empty, @mcast2, {[@hopopts={0xff}]}}}}}, 0x0)
recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x11162, 0x0)
syz_usb_connect$hid(0x4, 0xffffffffffffffc6, 0x0, 0x0)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00'})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2, 0x204031, 0xffffffffffffffff, 0xec776000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001000000"], 0x50}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x2c}}, 0x440d1)
sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110001000300000000000000000000006400"/32], 0x20}}, 0x0)

1.085300015s ago: executing program 4 (id=1647):
r0 = openat$null(0xffffff9c, &(0x7f0000000000), 0x400, 0x0)
write$FUSE_STATFS(r0, &(0x7f0000000040)={0x60, 0xffffffffffffffda, 0x0, {{0xffffffffffffff17, 0x7, 0x80000000, 0x8, 0x6, 0xe, 0xfc, 0x3}}}, 0x60)
read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_LSEEK(r0, &(0x7f0000002100)={0x18, 0x0, r1, {0x8}}, 0x18)
write$FUSE_WRITE(r0, &(0x7f0000002140)={0x18, 0xfffffffffffffffe, r1, {0x6}}, 0x18)
write$FUSE_POLL(r0, &(0x7f0000002180)={0x18, 0x0, r1}, 0x18)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000021c0)=0x14)
r2 = openat$sequencer(0xffffff9c, &(0x7f0000002200), 0x8000, 0x0)
r3 = openat$uinput(0xffffff9c, &(0x7f0000002240), 0x802, 0x0)
openat$cgroup_procs(r0, &(0x7f0000002280)='tasks\x00', 0x2, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
r4 = ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00)
close_range(r4, r2, 0x2)
r5 = openat$dsp1(0xffffff9c, &(0x7f00000022c0), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x80044d1a, &(0x7f0000002300))
r6 = openat$cgroup_root(0xffffff9c, &(0x7f0000002340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
listen(r0, 0x400)
r7 = dup2(r3, r2)
flock(r6, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000002380)={0x1fe, 0x4, 0x54000, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f00000023c0)=0x7, 0x4)
socket$inet_udp(0x2, 0x2, 0x0)
file_getattr(0xffffffffffffff9c, &(0x7f0000002400)='./file0\x00', &(0x7f0000002440), 0x18, 0x800)
write$uinput_user_dev(r7, &(0x7f0000002480)={'syz0\x00', {0x7, 0x6, 0x8000, 0x13}, 0x4b, [0x9, 0x0, 0x642, 0x3, 0x4, 0x10001, 0x5, 0x7, 0xfffffff4, 0xffffffff, 0x6, 0x7, 0x3, 0x3, 0x5, 0x8, 0x0, 0x8, 0x4, 0x40000, 0x12eb, 0x0, 0xfffffffd, 0x4a, 0x7, 0x8, 0x9, 0x5, 0x0, 0x8, 0xd, 0x6, 0x9, 0x7, 0x2, 0x7fff, 0x8, 0xb3, 0x5, 0x7, 0x3d, 0x3, 0x0, 0x99e2, 0x1, 0x69f, 0xfffffffa, 0x3, 0xb, 0x0, 0x12, 0x8, 0x3, 0x7, 0x3, 0x7, 0x401, 0x2, 0x8, 0x80000000, 0x80, 0x8001, 0xc], [0x2, 0x80000001, 0x6, 0x8, 0xf4a1, 0x80000001, 0x2, 0xf2b, 0xb0e4, 0x2, 0xf, 0x2, 0xb, 0x3, 0xa5b, 0x680000, 0x0, 0x42, 0x5, 0xc, 0x4, 0x1, 0xdf, 0x4, 0x6, 0x3ff, 0x3, 0x6, 0x3, 0xfffffffd, 0x8, 0xc, 0x8000, 0x1, 0x800, 0xff, 0x1ff, 0xd, 0x6, 0x3ff, 0x80000000, 0x6, 0x2, 0xd, 0x3, 0x0, 0x1, 0x81, 0x10000, 0x6be, 0x9, 0xd4, 0x7, 0xfffffffa, 0xaac, 0x4, 0x5, 0xffffffff, 0x40, 0x1, 0x79d3, 0x2, 0x2, 0xfffffff8], [0x7f, 0x1, 0x2, 0x7, 0x8001, 0x1, 0x47, 0x4, 0x7, 0xd, 0x7fff, 0x9, 0x6, 0x5, 0xb, 0x8, 0x1, 0x2, 0x7, 0x3, 0x1, 0x3, 0x81, 0x800, 0x1a4, 0x2, 0x0, 0x3, 0xf4c, 0xcd, 0x1, 0xd9, 0x40, 0x1cbc, 0x5, 0x4, 0x6, 0x1, 0x60301c7f, 0x3, 0x4, 0x8001, 0x7, 0x7, 0x8001, 0x5, 0x400, 0x1, 0xabc, 0x14000, 0xd2b, 0x1, 0x0, 0x8001, 0x7fff, 0x4, 0xfffffffc, 0x3, 0xfff, 0xe0e, 0x63e, 0x1ff, 0x101, 0x5], [0x8, 0x6, 0xb, 0x5cb5b117, 0x3, 0x6, 0x94ce, 0x7fff, 0x2400000, 0x6, 0x2, 0x80000001, 0x8, 0x9, 0x98, 0xfffffffe, 0x5, 0x4, 0x5, 0x1, 0x1, 0x5, 0x7, 0x2, 0x518, 0x130, 0xffffffff, 0x2, 0x3, 0x8, 0x10, 0x8, 0x8, 0xfffffff8, 0x5, 0x2, 0x5, 0x3, 0x54, 0x5, 0x7ff, 0x2, 0x5, 0x7, 0xfffff9b3, 0x400, 0xdd000000, 0x7a, 0x6, 0x7fffffff, 0xd, 0xffff, 0x1, 0xfffffff8, 0x9, 0x1, 0x81, 0xffffffff, 0x1, 0xe, 0x8, 0x5, 0x4, 0x5]}, 0x45c)
ioctl$XFS_IOC_BULKSTAT(0xffffffffffffffff, 0x8040587f, &(0x7f0000002d80)={{0xfffffffffffffff9, 0x4, 0x2, 0x1, 0x84fd}, &(0x7f0000002900)=[{}, {}, {}, {}, {}, {}]})
ioctl$SNDRV_PCM_IOCTL_PAUSE(r7, 0x40044145, &(0x7f0000002e00)=0x4)
r8 = syz_open_dev$mouse(&(0x7f0000002e40), 0x200, 0x6541)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r8, 0x80804120, &(0x7f0000002e80))
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000002f00)={0x0, 0xc930, 0x2, 0x1, 0x176, 0x0, r0}, &(0x7f0000002f80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x54ef, 0x4000, 0x0, 0x12e, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbd86, 0x2000, 0x1, 0x1e1, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5bd, 0x8000, 0x0, 0x348}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4d47, 0x400, 0x2, 0xfa, 0x0, r0}}], 0x4, &(0x7f0000004200)={0x2e, 0x4, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, '\x00', {0x2, 0x222, 0x0, &(0x7f0000003200)=@buf_1k="f31e1580df85b22f163e76f145de58aceb2d62d56caa3b644181b38efbac59cab6e72e5afdcaa62f6eb4364aec86a9f2d2a069ec0634a77ed799499579eb5e65e597fe0b50d5fbf6f0e4f2eeb00bb2f84766e9f19af97cd25c6b1acd1dfcacd8346c33045d11120336f09072dccbe4387d4534dcb1a15103aff9aff0cdfcd216be2fa2fb04b235de34518d83fe88411228865f7a94d5034935b5c3668e0e47ce503e61d4b7ac3f076b4b26a568b36b3315cb31aa447de51b5dd02099112539a2be5fc17ab837a11009c2d38a1c13642b9bb35a5239dc67d10ba343e8f0c7486c076f0282ea738ea15d5d74ecd255b4e306488008d988729e0c7a32a3e66c694304f930ded3ef38711988f7bada880e43726f21a57d8252738b6b26ed52e0d1acbd86741cf05216ad5d974ac82d4a3916b719ba187176b2d1fa3340b9dca2d4d5c61e09615110ae53a4b107e0004b510c9087ca03e1e4508e66fac52a1c38bc2be138e583551943ad6d232b4ff1e2236ad65f9224428cc8d65620bfa154a30bf6f390a0910390b751d9b8eb2b7878d82c7616ce42197eb0ade2ab4c1a8cfc3b0cf1abd38f30b9ca42beff66978bb4e9c6aaca533a9baf70e375abecbeb2b00b9768cf3415f8c52ec4303258a50fb5ef5df8bb1d443e5b3c3263baeb8081b444908e6a5b3a12405574f872435ce112f8878d22f28abc1bf6243cf3955a27ced1f684a259ed14443b037cd53c3c8e5819bb87ad48dda15e75ea104b10215f2ec460fbf3bbf47aa59f77a963582cee93975565ea1ebbc11edfe975f2e59d83de86a4478b2b69211ef8cfa3de42c7906e1654747633142b88ff04366bcef586b442452aa607a989941366ccddeb0a0975e4a859430e522d917d852f21b127fc4badda5104ba90eee8bc368b8c6aab28fe96de975c7da6c6ab0e8eea224d6416d6ddbdc374211e171475a091d499fd253ef48272da9c6e88ad8b26add8cc8393388c1e33ddceb14baeb2a6d3051ec88997e989dd9cace5b74ac9ddbddf2225a1e1ccad8d9ab722f7733a7084f03dea08c3c76c16ede5f010168a8b29bcd8d26b29e048c6eff7aa36fb23616f6398fe0e9201e6c2b64c9e6bf96098d39c6f4e62c7fad71b49280014426f7fade4d62d34c45960145646f4d0e277aa1aec4b48f337009fc5676d082e50bf3c47eadeb8f338c18cecc89405f293bc0449d6822834f9b21b4ea454070363f9188c2e26a87d94f7b5b54b4b852cdc079fd2f3cb3debdb22a22fce60ffa5443eda1c7ae9df71366264f30b1d2b06a1bab769cc46464dfcd35cfda0bdcfb775ffb340f2034daf68e36e448e78030268a2db9a57ffb636e26ad5bb585ef287cc5af849d928be65b6a2637dc602103d138509c692a7736c958ddc197d2daf766e9ba295a80b9b9e790e42c35bddd0a1a7201c1cd00ac9e643cfb8"}}, &(0x7f0000004280))

1.014734568s ago: executing program 4 (id=1648):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xa7, 0x4)

502.030082ms ago: executing program 3 (id=1650):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a09040000000000000000020000040900010073797a30000000000900020073797a3200000000200104801c0001800b00010065787468647200000c0002800800064000000001140000001100010000000000000000000300000a"], 0x74}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000180)='./file1\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0xfff)
listen(r3, 0x2)
quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f0000000280)={0x24, 0x5, 0x6, 0x40000000032a, 0x2, 0x2, 0xfffffffffffffffd, 0x6, 0x7fff})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c)
write$cgroup_subtree(r4, &(0x7f00000001c0)={[{0x2b, 'io'}, {0x6a79bd11bf622a85, 'net_cls'}, {0x2b, 'freezer'}, {0x0, 'pids'}, {0x2b, 'io'}, {0x2d, 'io'}, {0x2b, 'pids'}, {0x2d, 'pids'}]}, 0x30)

456.049004ms ago: executing program 3 (id=1651):
write(0xffffffffffffffff, &(0x7f0000000080)='transport=loop,nqn=nqn.2014-08.org.nvmexpress.discove', 0x35)
openat$panthor(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000780)={r3, 0x0, 0x4, 0x0, 0x2, [<r4=>0x0], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000240)={r3, 0xc89, 0xa, 0xfffffffa, 0x3, [<r6=>0x0], [0x5, 0x5, 0xfffffffd, 0x2], [0xe, 0x7, 0xffffffff, 0x8000], [0xfffffffffffffffb, 0xa679, 0x1, 0x7f]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r6})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0286429, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000000)=[0xba, 0x3, 0x5, 0x3, 0x2, 0x3, 0xffffff40, 0xa3], &(0x7f0000000100)=[0x0, 0xa, 0x2, 0xfffffff7, 0x5, 0x0, 0x10d9, 0x2, 0x80000000], 0x0, 0x3, 0xf3, &(0x7f0000000180)=[0x6, 0x4, 0x1], &(0x7f00000001c0)=[0x1ff, 0x7]})

364.061955ms ago: executing program 0 (id=1652):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r1, 0x3, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x240080d0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x1f)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0xffff, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc0}}}}}}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000002fd80e31d24f7581d2c600b22229c14f8e50f518ab68df82"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
r7 = userfaultfd(0x1)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0))
r8 = syz_open_pts(r5, 0x101400)
sendfile(r4, r8, &(0x7f0000000300)=0x6, 0x0)
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000000)={@private=0xa010101, @loopback}, 0xc)
r10 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r10, 0x80045500, &(0x7f0000000000))
r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f00000000c0)={0x2, 0xfffffffe, 0x0, 'queue1\x00', 0x8001})
writev(r11, &(0x7f0000000580)=[{&(0x7f0000000000)="218292", 0xfff6}], 0x2)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x0, 0x8000000})

315.621782ms ago: executing program 3 (id=1653):
openat$hpet(0xffffff9c, 0x0, 0x1, 0x0)

315.286904ms ago: executing program 3 (id=1654):
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000011c0)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @nested={0x4, 0x9, 0x0, 0x1, [@generic]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f00000010c0), r1)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000001100)={0x0, {}, 0x0, {}, 0xcbe, 0x3, 0x1e, 0x5, "53805c09ede5d9a2acd35097ca8029a9cd209896b49a148fa4ff2216b81ca3d2628fecda01096f3a0a1a67ca6e9668ae7b28dd753f1c6c2c24cb77c65c8cf291", "2ded9d7a0e9ca3be08707fef09f40e2c69d43244d8e7ec39169c84eefee35ec7", [0x1, 0x37d5]})
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfef", 0x4}], 0x1}, 0x0)
sendmsg$rds(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f00000000c0)={{r1}, "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"})
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4)
getsockname$packet(r4, &(0x7f0000000440)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x3e, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x704c3, 0xc4a48b7f26bf140b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010)
sendmmsg$inet(r3, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r5, @empty, @multicast2}}}], 0x18}}], 0x1, 0x4880)
setsockopt$inet_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000040)=@gcm_256={{0x303}, "e1f2f1d06dba2c40", "555747aa60576345a3aec14c1ef2173f91d4a5cec1a9649f20ceb50ffcc924b7", "c6ffad03", "4db0992f9d162ff2"}, 0x38)
sendto$inet(r4, &(0x7f0000001280)="bc768708afabfb8fac2397bdaaf7645656c76482110a040f1baa938ed5703e3082778e7ceda41a446118eb2452f450b09bd7f685ffb0493bb825a4195d21f712c3c6839c296ed65c80deb116cae5da0c959b38ea6dd20666ff4626f5e39b51fdaae68d37c97dda0ba0b517eab3a6228dee2ed653c07fcc6852607e3f2143e96c874d5368b0e907f72eba1ec76f1fa3a787edbcf47d38fabcd40a2a5e32e4fe", 0x9f, 0x4000005, &(0x7f0000001340)={0x2, 0x4e24, @remote}, 0x10)

198.025557ms ago: executing program 3 (id=1655):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
write$cgroup_subtree(r0, &(0x7f00000001c0)={[{0x2b, 'io'}, {0x6a79bd11bf622a85, 'net_cls'}, {0x2b, 'freezer'}, {0x0, 'pids'}, {0x2b, 'io'}, {0x2d, 'io'}, {0x2b, 'pids'}, {0x2d, 'pids'}]}, 0x30)

193.747391ms ago: executing program 3 (id=1656):
r0 = openat$null(0xffffff9c, &(0x7f0000000000), 0x400, 0x0)
write$FUSE_STATFS(r0, &(0x7f0000000040)={0x60, 0xffffffffffffffda, 0x0, {{0xffffffffffffff17, 0x7, 0x80000000, 0x8, 0x6, 0xe, 0xfc, 0x3}}}, 0x60)
read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_LSEEK(r0, &(0x7f0000002100)={0x18, 0x0, r1, {0x8}}, 0x18)
write$FUSE_WRITE(r0, &(0x7f0000002140)={0x18, 0xfffffffffffffffe, r1, {0x6}}, 0x18)
write$FUSE_POLL(r0, &(0x7f0000002180)={0x18, 0x0, r1}, 0x18)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000021c0)=0x14)
r2 = openat$sequencer(0xffffff9c, &(0x7f0000002200), 0x8000, 0x0)
ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x9)
openat$cgroup_procs(r0, &(0x7f0000002280)='tasks\x00', 0x2, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
r3 = ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00)
close_range(r3, r2, 0x2)
r4 = openat$dsp1(0xffffff9c, &(0x7f00000022c0), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d1a, &(0x7f0000002300))
r5 = openat$cgroup_root(0xffffff9c, &(0x7f0000002340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
listen(r0, 0x400)
r6 = dup2(0xffffffffffffffff, r2)
flock(r5, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000002380)={0x1fe, 0x4, 0x54000, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f00000023c0)=0x7, 0x4)
socket$inet_udp(0x2, 0x2, 0x0)
file_getattr(0xffffffffffffff9c, &(0x7f0000002400)='./file0\x00', &(0x7f0000002440), 0x18, 0x800)
write$uinput_user_dev(r6, &(0x7f0000002480)={'syz0\x00', {0x7, 0x6, 0x8000, 0x13}, 0x4b, [0x9, 0x0, 0x642, 0x3, 0x4, 0x10001, 0x5, 0x7, 0xfffffff4, 0xffffffff, 0x6, 0x7, 0x3, 0x3, 0x5, 0x8, 0x0, 0x8, 0x4, 0x40000, 0x12eb, 0x0, 0xfffffffd, 0x4a, 0x7, 0x8, 0x9, 0x5, 0x0, 0x8, 0xd, 0x6, 0x9, 0x7, 0x2, 0x7fff, 0x8, 0xb3, 0x5, 0x7, 0x3d, 0x3, 0x0, 0x99e2, 0x1, 0x69f, 0xfffffffa, 0x3, 0xb, 0x0, 0x12, 0x8, 0x3, 0x7, 0x3, 0x7, 0x401, 0x2, 0x8, 0x80000000, 0x80, 0x8001, 0xc], [0x2, 0x80000001, 0x6, 0x8, 0xf4a1, 0x80000001, 0x2, 0xf2b, 0xb0e4, 0x2, 0xf, 0x2, 0xb, 0x3, 0xa5b, 0x680000, 0x0, 0x42, 0x5, 0xc, 0x4, 0x1, 0xdf, 0x4, 0x6, 0x3ff, 0x3, 0x6, 0x3, 0xfffffffd, 0x8, 0xc, 0x8000, 0x1, 0x800, 0xff, 0x1ff, 0xd, 0x6, 0x3ff, 0x80000000, 0x6, 0x2, 0xd, 0x3, 0x0, 0x1, 0x81, 0x10000, 0x6be, 0x9, 0xd4, 0x7, 0xfffffffa, 0xaac, 0x4, 0x5, 0xffffffff, 0x40, 0x1, 0x79d3, 0x2, 0x2, 0xfffffff8], [0x7f, 0x1, 0x2, 0x7, 0x8001, 0x1, 0x47, 0x4, 0x7, 0xd, 0x7fff, 0x9, 0x6, 0x5, 0xb, 0x8, 0x1, 0x2, 0x7, 0x3, 0x1, 0x3, 0x81, 0x800, 0x1a4, 0x2, 0x0, 0x3, 0xf4c, 0xcd, 0x1, 0xd9, 0x40, 0x1cbc, 0x5, 0x4, 0x6, 0x1, 0x60301c7f, 0x3, 0x4, 0x8001, 0x7, 0x7, 0x8001, 0x5, 0x400, 0x1, 0xabc, 0x14000, 0xd2b, 0x1, 0x0, 0x8001, 0x7fff, 0x4, 0xfffffffc, 0x3, 0xfff, 0xe0e, 0x63e, 0x1ff, 0x101, 0x5], [0x8, 0x6, 0xb, 0x5cb5b117, 0x3, 0x6, 0x94ce, 0x7fff, 0x2400000, 0x6, 0x2, 0x80000001, 0x8, 0x9, 0x98, 0xfffffffe, 0x5, 0x4, 0x5, 0x1, 0x1, 0x5, 0x7, 0x2, 0x518, 0x130, 0xffffffff, 0x2, 0x3, 0x8, 0x10, 0x8, 0x8, 0xfffffff8, 0x5, 0x2, 0x5, 0x3, 0x54, 0x5, 0x7ff, 0x2, 0x5, 0x7, 0xfffff9b3, 0x400, 0xdd000000, 0x7a, 0x6, 0x7fffffff, 0xd, 0xffff, 0x1, 0xfffffff8, 0x9, 0x1, 0x81, 0xffffffff, 0x1, 0xe, 0x8, 0x5, 0x4, 0x5]}, 0x45c)
ioctl$XFS_IOC_BULKSTAT(0xffffffffffffffff, 0x8040587f, &(0x7f0000002d80)={{0xfffffffffffffff9, 0x4, 0x2, 0x1, 0x84fd}, &(0x7f0000002900)=[{}, {}, {}, {}, {}, {}]})
ioctl$SNDRV_PCM_IOCTL_PAUSE(r6, 0x40044145, &(0x7f0000002e00)=0x4)
r7 = syz_open_dev$mouse(&(0x7f0000002e40), 0x200, 0x6541)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r7, 0x80804120, &(0x7f0000002e80))
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000002f00)={0x0, 0xc930, 0x2, 0x1, 0x176, 0x0, r0}, &(0x7f0000002f80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x54ef, 0x4000, 0x0, 0x12e, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbd86, 0x2000, 0x1, 0x1e1, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5bd, 0x8000, 0x0, 0x348}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4d47, 0x400, 0x2, 0xfa, 0x0, r0}}], 0x4, &(0x7f0000004200)={0x2e, 0x4, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, '\x00', {0x2, 0x222, 0x0, &(0x7f0000003200)=@buf_1k="f31e1580df85b22f163e76f145de58aceb2d62d56caa3b644181b38efbac59cab6e72e5afdcaa62f6eb4364aec86a9f2d2a069ec0634a77ed799499579eb5e65e597fe0b50d5fbf6f0e4f2eeb00bb2f84766e9f19af97cd25c6b1acd1dfcacd8346c33045d11120336f09072dccbe4387d4534dcb1a15103aff9aff0cdfcd216be2fa2fb04b235de34518d83fe88411228865f7a94d5034935b5c3668e0e47ce503e61d4b7ac3f076b4b26a568b36b3315cb31aa447de51b5dd02099112539a2be5fc17ab837a11009c2d38a1c13642b9bb35a5239dc67d10ba343e8f0c7486c076f0282ea738ea15d5d74ecd255b4e306488008d988729e0c7a32a3e66c694304f930ded3ef38711988f7bada880e43726f21a57d8252738b6b26ed52e0d1acbd86741cf05216ad5d974ac82d4a3916b719ba187176b2d1fa3340b9dca2d4d5c61e09615110ae53a4b107e0004b510c9087ca03e1e4508e66fac52a1c38bc2be138e583551943ad6d232b4ff1e2236ad65f9224428cc8d65620bfa154a30bf6f390a0910390b751d9b8eb2b7878d82c7616ce42197eb0ade2ab4c1a8cfc3b0cf1abd38f30b9ca42beff66978bb4e9c6aaca533a9baf70e375abecbeb2b00b9768cf3415f8c52ec4303258a50fb5ef5df8bb1d443e5b3c3263baeb8081b444908e6a5b3a12405574f872435ce112f8878d22f28abc1bf6243cf3955a27ced1f684a259ed14443b037cd53c3c8e5819bb87ad48dda15e75ea104b10215f2ec460fbf3bbf47aa59f77a963582cee93975565ea1ebbc11edfe975f2e59d83de86a4478b2b69211ef8cfa3de42c7906e1654747633142b88ff04366bcef586b442452aa607a989941366ccddeb0a0975e4a859430e522d917d852f21b127fc4badda5104ba90eee8bc368b8c6aab28fe96de975c7da6c6ab0e8eea224d6416d6ddbdc374211e171475a091d499fd253ef48272da9c6e88ad8b26add8cc8393388c1e33ddceb14baeb2a6d3051ec88997e989dd9cace5b74ac9ddbddf2225a1e1ccad8d9ab722f7733a7084f03dea08c3c76c16ede5f010168a8b29bcd8d26b29e048c6eff7aa36fb23616f6398fe0e9201e6c2b64c9e6bf96098d39c6f4e62c7fad71b49280014426f7fade4d62d34c45960145646f4d0e277aa1aec4b48f337009fc5676d082e50bf3c47eadeb8f338c18cecc89405f293bc0449d6822834f9b21b4ea454070363f9188c2e26a87d94f7b5b54b4b852cdc079fd2f3cb3debdb22a22fce60ffa5443eda1c7ae9df71366264f30b1d2b06a1bab769cc46464dfcd35cfda0bdcfb775ffb340f2034daf68e36e448e78030268a2db9a57ffb636e26ad5bb585ef287cc5af849d928be65b6a2637dc602103d138509c692a7736c958ddc197d2daf766e9ba295a80b9b9e790e42c35bddd0a1a7201c1cd00ac9e643cfb8"}}, &(0x7f0000004280))

191.566114ms ago: executing program 4 (id=1657):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1, 0x0}}, 0x20)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xf}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000080010000400000008"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r2}, 0x38)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x20208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
landlock_create_ruleset(&(0x7f0000000140)={0x18414, 0x3, 0x2}, 0x30, 0x0)
ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f0000019440)={0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write(r3, &(0x7f0000000080)='transport=loop,nqn=nqn.2014-08.org.nvmexpress.discovery\x00', 0x38)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x5, 0x8, 0x7, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000380)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[{}, {}, {}, {}, {}], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200), 0x5, 0x2, 0x1, 0x0, r4})
openat$panthor(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000780)={r7, 0x0, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300))
ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000240)={r7, 0xc89, 0xa, 0xfffffffa, 0x3, [<r8=>0x0], [0x5, 0x5, 0xfffffffd, 0x2], [0xe, 0x7, 0xffffffff, 0x8000], [0xfffffffffffffffb, 0xa679, 0x1, 0x7f]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r8})

0s ago: executing program 0 (id=1658):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket(0x10, 0x803, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2)
r7 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000004300)=[{&(0x7f00000022c0)="d3732f3f0457e95dfb365a00a2eea9116391ce30d771e4ea54c21182c6b0d0a5fbc390d8", 0x24}], 0x1}, 0x4005)

kernel console output (not intermixed with test programs):

77] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  300.197946][T10377] CPU: 2 UID: 0 PID: 10377 Comm: syz.5.1337 Not tainted syzkaller #0 PREEMPT(full) 
[  300.197996][T10377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  300.198012][T10377] Call Trace:
[  300.198019][T10377]  <TASK>
[  300.198028][T10377]  dump_stack_lvl+0x100/0x190
[  300.198059][T10377]  should_fail_ex.cold+0x5/0xa
[  300.198106][T10377]  _copy_to_user+0x32/0xd0
[  300.198139][T10377]  simple_read_from_buffer+0xcb/0x170
[  300.198165][T10377]  proc_fail_nth_read+0x1af/0x230
[  300.198199][T10377]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  300.198232][T10377]  ? rw_verify_area+0xce/0x6d0
[  300.198263][T10377]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  300.198296][T10377]  vfs_read+0x1e4/0xb40
[  300.198317][T10377]  ? lock_acquire+0x1d1/0x380
[  300.198343][T10377]  ? __fget_files+0x34/0x3d0
[  300.198363][T10377]  ? __pfx_vfs_read+0x10/0x10
[  300.198381][T10377]  ? find_held_lock+0x2b/0x80
[  300.198402][T10377]  ? __fget_files+0x215/0x3d0
[  300.198450][T10377]  ? __fget_files+0x21f/0x3d0
[  300.198481][T10377]  ksys_read+0x12a/0x250
[  300.198500][T10377]  ? __pfx_ksys_read+0x10/0x10
[  300.198525][T10377]  do_int80_emulation+0x166/0x650
[  300.198558][T10377]  asm_int80_emulation+0x1a/0x20
[  300.198578][T10377] RIP: 0023:0xf71e75ab
[  300.198595][T10377] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  300.198614][T10377] RSP: 002b:00000000f549d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  300.198635][T10377] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f549d5d0
[  300.198648][T10377] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  300.198659][T10377] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  300.198669][T10377] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  300.198680][T10377] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  300.198706][T10377]  </TASK>
[  300.426423][ T5927] tipc: Node number set to 2886997162
[  300.695264][   T10] tipc: Node number set to 2886997162
[  301.268685][T10390] syzkaller0: entered promiscuous mode
[  301.268789][T10390] syzkaller0: entered allmulticast mode
[  301.497957][ T1161] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  301.498126][T10395] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  301.738015][T10400] FAULT_INJECTION: forcing a failure.
[  301.738015][T10400] name failslab, interval 1, probability 0, space 0, times 0
[  301.738088][T10400] CPU: 1 UID: 0 PID: 10400 Comm: syz.5.1347 Not tainted syzkaller #0 PREEMPT(full) 
[  301.738119][T10400] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  301.738130][T10400] Call Trace:
[  301.738136][T10400]  <TASK>
[  301.738143][T10400]  dump_stack_lvl+0x100/0x190
[  301.738165][T10400]  should_fail_ex.cold+0x5/0xa
[  301.738183][T10400]  should_failslab+0xc2/0x120
[  301.738202][T10400]  __kmalloc_noprof+0xfc/0x840
[  301.738217][T10400]  ? x509_get_sig_params+0x39e/0x6c0
[  301.738236][T10400]  x509_get_sig_params+0x39e/0x6c0
[  301.738255][T10400]  x509_cert_parse+0x4e9/0x910
[  301.738271][T10400]  x509_key_preparse+0x65/0x9c0
[  301.738288][T10400]  asymmetric_key_preparse+0xce/0x1d0
[  301.738308][T10400]  ? __pfx_asymmetric_key_preparse+0x10/0x10
[  301.738328][T10400]  __key_create_or_update+0x463/0xe30
[  301.738351][T10400]  ? __pfx___key_create_or_update+0x10/0x10
[  301.738371][T10400]  ? lookup_user_key+0x3f3/0x1300
[  301.738397][T10400]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  301.738437][T10400]  ? __pfx_keyring_search_iterator+0x10/0x10
[  301.738465][T10400]  key_create_or_update+0x42/0x60
[  301.738491][T10400]  __do_sys_add_key+0x2e8/0x460
[  301.738508][T10400]  ? __pfx___do_sys_add_key+0x10/0x10
[  301.738530][T10400]  __do_fast_syscall_32+0x13a/0x8b0
[  301.738554][T10400]  do_fast_syscall_32+0x32/0x70
[  301.738573][T10400]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  301.738591][T10400] RIP: 0023:0xf70aefec
[  301.738606][T10400] Code: Unable to access opcode bytes at 0xf70aefc2.
[  301.738614][T10400] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 000000000000011e
[  301.738629][T10400] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000000000000
[  301.738637][T10400] RDX: 0000000080000200 RSI: 0000000000000559 RDI: 00000000008ce91f
[  301.738645][T10400] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  301.738653][T10400] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  301.738662][T10400] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  301.738681][T10400]  </TASK>
[  301.738946][ T8373] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  301.741489][T10397] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  301.850498][T10405] tipc: Started in network mode
[  301.850523][T10405] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711
[  301.850560][T10405] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  301.909000][T10408] FAULT_INJECTION: forcing a failure.
[  301.909000][T10408] name failslab, interval 1, probability 0, space 0, times 0
[  301.909079][T10408] CPU: 0 UID: 0 PID: 10408 Comm: syz.4.1349 Not tainted syzkaller #0 PREEMPT(full) 
[  301.909112][T10408] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  301.909122][T10408] Call Trace:
[  301.909126][T10408]  <TASK>
[  301.909132][T10408]  dump_stack_lvl+0x100/0x190
[  301.909153][T10408]  should_fail_ex.cold+0x5/0xa
[  301.909169][T10408]  should_failslab+0xc2/0x120
[  301.909185][T10408]  __kmalloc_node_noprof+0xff/0x880
[  301.909199][T10408]  ? crypto_create_tfm_node+0x8d/0x3b0
[  301.909232][T10408]  crypto_create_tfm_node+0x8d/0x3b0
[  301.909249][T10408]  crypto_alloc_tfm_node+0x102/0x260
[  301.909267][T10408]  x509_get_sig_params+0x2bb/0x6c0
[  301.909279][T10408]  ? __asan_memcpy+0x3c/0x60
[  301.909292][T10408]  x509_cert_parse+0x4e9/0x910
[  301.909309][T10408]  x509_key_preparse+0x65/0x9c0
[  301.909327][T10408]  asymmetric_key_preparse+0xce/0x1d0
[  301.909344][T10408]  ? __pfx_asymmetric_key_preparse+0x10/0x10
[  301.909361][T10408]  __key_create_or_update+0x463/0xe30
[  301.909383][T10408]  ? __pfx___key_create_or_update+0x10/0x10
[  301.909405][T10408]  ? lookup_user_key+0x3f3/0x1300
[  301.909426][T10408]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  301.909442][T10408]  ? __pfx_keyring_search_iterator+0x10/0x10
[  301.909461][T10408]  key_create_or_update+0x42/0x60
[  301.909479][T10408]  __do_sys_add_key+0x2e8/0x460
[  301.909492][T10408]  ? __pfx___do_sys_add_key+0x10/0x10
[  301.909509][T10408]  __do_fast_syscall_32+0x13a/0x8b0
[  301.909531][T10408]  do_fast_syscall_32+0x32/0x70
[  301.909552][T10408]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  301.909573][T10408] RIP: 0023:0xf7fe5fec
[  301.909594][T10408] Code: Unable to access opcode bytes at 0xf7fe5fc2.
[  301.909601][T10408] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e
[  301.909618][T10408] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000000000000
[  301.909633][T10408] RDX: 0000000080000200 RSI: 0000000000000559 RDI: 0000000023241138
[  301.909646][T10408] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  301.909656][T10408] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  301.909665][T10408] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  301.909689][T10408]  </TASK>
[  301.969385][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1351'.
[  301.986390][T10415] xt_l2tp: missing protocol rule (udp|l2tpip)
[  302.026215][T10417] FAULT_INJECTION: forcing a failure.
[  302.026215][T10417] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  302.026270][T10417] CPU: 1 UID: 0 PID: 10417 Comm: syz.0.1352 Not tainted syzkaller #0 PREEMPT(full) 
[  302.026294][T10417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  302.026302][T10417] Call Trace:
[  302.026306][T10417]  <TASK>
[  302.026311][T10417]  dump_stack_lvl+0x100/0x190
[  302.026330][T10417]  should_fail_ex.cold+0x5/0xa
[  302.026344][T10417]  _copy_from_user+0x2e/0xd0
[  302.026357][T10417]  sk_getsockopt+0x2f4/0x3440
[  302.026372][T10417]  ? __lock_acquire+0x4c5/0x1ec0
[  302.026387][T10417]  ? _parse_integer_limit+0x1ac/0x220
[  302.026404][T10417]  ? __pfx_sk_getsockopt+0x10/0x10
[  302.026417][T10417]  ? _kstrtoull+0x144/0x200
[  302.026433][T10417]  ? lock_acquire+0x1d1/0x380
[  302.026447][T10417]  ? __might_fault+0xc5/0x140
[  302.026468][T10417]  ? aa_sk_perm+0x389/0xab0
[  302.026499][T10417]  ? __pfx_aa_sk_perm+0x10/0x10
[  302.026515][T10417]  ? lock_acquire+0x1d1/0x380
[  302.026530][T10417]  ? aa_sock_opt_perm+0x114/0x1e0
[  302.026544][T10417]  do_sock_getsockopt+0x60e/0x6e0
[  302.026567][T10417]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  302.026585][T10417]  ? __fget_files+0x34/0x3d0
[  302.026597][T10417]  ? find_held_lock+0x2b/0x80
[  302.026611][T10417]  ? __fget_files+0x21f/0x3d0
[  302.026625][T10417]  __sys_getsockopt+0x133/0x1d0
[  302.026642][T10417]  ? __ia32_sys_getsockopt+0xbc/0x160
[  302.026653][T10417]  __ia32_sys_getsockopt+0xbc/0x160
[  302.026665][T10417]  ? __do_fast_syscall_32+0xb3/0x8b0
[  302.026680][T10417]  ? lockdep_hardirqs_on+0x7d/0x110
[  302.026694][T10417]  __do_fast_syscall_32+0x13a/0x8b0
[  302.026708][T10417]  ? lockdep_hardirqs_on+0x7d/0x110
[  302.026722][T10417]  do_fast_syscall_32+0x32/0x70
[  302.026737][T10417]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  302.026751][T10417] RIP: 0023:0xf7f74fec
[  302.026764][T10417] Code: Unable to access opcode bytes at 0xf7f74fc2.
[  302.026769][T10417] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 000000000000016d
[  302.026780][T10417] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001
[  302.026787][T10417] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000080000180
[  302.026793][T10417] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  302.026800][T10417] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  302.026806][T10417] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  302.026819][T10417]  </TASK>
[  302.149820][T10430] FAULT_INJECTION: forcing a failure.
[  302.149820][T10430] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  302.149923][T10430] CPU: 2 UID: 0 PID: 10430 Comm: syz.5.1359 Not tainted syzkaller #0 PREEMPT(full) 
[  302.149964][T10430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  302.149978][T10430] Call Trace:
[  302.149986][T10430]  <TASK>
[  302.149994][T10430]  dump_stack_lvl+0x100/0x190
[  302.150026][T10430]  should_fail_ex.cold+0x5/0xa
[  302.150052][T10430]  _copy_to_user+0x32/0xd0
[  302.150096][T10430]  simple_read_from_buffer+0xcb/0x170
[  302.150130][T10430]  proc_fail_nth_read+0x1af/0x230
[  302.150161][T10430]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  302.150194][T10430]  ? rw_verify_area+0xce/0x6d0
[  302.150223][T10430]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  302.150254][T10430]  vfs_read+0x1e4/0xb40
[  302.150272][T10430]  ? lock_acquire+0x1d1/0x380
[  302.150296][T10430]  ? __fget_files+0x34/0x3d0
[  302.150317][T10430]  ? __pfx_vfs_read+0x10/0x10
[  302.150334][T10430]  ? find_held_lock+0x2b/0x80
[  302.150356][T10430]  ? __fget_files+0x215/0x3d0
[  302.150381][T10430]  ? __fget_files+0x21f/0x3d0
[  302.150410][T10430]  ksys_read+0x12a/0x250
[  302.150427][T10430]  ? __pfx_ksys_read+0x10/0x10
[  302.150455][T10430]  do_int80_emulation+0x166/0x650
[  302.150486][T10430]  asm_int80_emulation+0x1a/0x20
[  302.150506][T10430] RIP: 0023:0xf71e75ab
[  302.150523][T10430] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  302.150543][T10430] RSP: 002b:00000000f549d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  302.150561][T10430] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f549d5d0
[  302.150573][T10430] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  302.150585][T10430] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  302.150596][T10430] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  302.150618][T10430] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  302.150644][T10430]  </TASK>
[  302.260693][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1362'.
[  302.335608][ T8373] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  302.340004][T10443] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  302.421126][T10446] mmap: syz.0.1365 (10446) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  302.653859][T10462] FAULT_INJECTION: forcing a failure.
[  302.653859][T10462] name failslab, interval 1, probability 0, space 0, times 0
[  302.653926][T10462] CPU: 3 UID: 0 PID: 10462 Comm: syz.5.1369 Not tainted syzkaller #0 PREEMPT(full) 
[  302.653963][T10462] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  302.653977][T10462] Call Trace:
[  302.653983][T10462]  <TASK>
[  302.653991][T10462]  dump_stack_lvl+0x100/0x190
[  302.654012][T10462]  should_fail_ex.cold+0x5/0xa
[  302.654028][T10462]  should_failslab+0xc2/0x120
[  302.654044][T10462]  __kvmalloc_node_noprof+0x113/0x9b0
[  302.654065][T10462]  ? traverse.part.0.constprop.0+0x397/0x650
[  302.654080][T10462]  traverse.part.0.constprop.0+0x397/0x650
[  302.654093][T10462]  ? find_held_lock+0x2b/0x80
[  302.654105][T10462]  ? aa_file_perm+0x7e4/0x14d0
[  302.654119][T10462]  seq_read_iter+0x93f/0x1270
[  302.654130][T10462]  ? aa_file_perm+0x7f3/0x14d0
[  302.654146][T10462]  seq_read+0x344/0x4d0
[  302.654158][T10462]  ? __pfx_seq_read+0x10/0x10
[  302.654169][T10462]  ? lock_acquire+0x1d1/0x380
[  302.654186][T10462]  ? get_pid_task+0xfc/0x250
[  302.654197][T10462]  ? get_pid_task+0xfc/0x250
[  302.654210][T10462]  ? common_file_perm+0x266/0x500
[  302.654228][T10462]  ? __pfx_seq_read+0x10/0x10
[  302.654239][T10462]  proc_reg_read+0x240/0x330
[  302.654253][T10462]  ? __pfx_proc_reg_read+0x10/0x10
[  302.654268][T10462]  vfs_read+0x1e4/0xb40
[  302.654279][T10462]  ? lock_acquire+0x1d1/0x380
[  302.654294][T10462]  ? __fget_files+0x34/0x3d0
[  302.654306][T10462]  ? __pfx_vfs_read+0x10/0x10
[  302.654315][T10462]  ? find_held_lock+0x2b/0x80
[  302.654326][T10462]  ? __fget_files+0x215/0x3d0
[  302.654337][T10462]  ? __fget_files+0x215/0x3d0
[  302.654351][T10462]  ? __fget_files+0x21f/0x3d0
[  302.654367][T10462]  ksys_pread64+0x161/0x1a0
[  302.654379][T10462]  ? __pfx_ksys_pread64+0x10/0x10
[  302.654389][T10462]  ? ksys_write+0x1ac/0x250
[  302.654400][T10462]  ? __pfx_ksys_write+0x10/0x10
[  302.654414][T10462]  __do_fast_syscall_32+0x13a/0x8b0
[  302.654431][T10462]  ? lockdep_hardirqs_on+0x7d/0x110
[  302.654447][T10462]  do_fast_syscall_32+0x32/0x70
[  302.654463][T10462]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  302.654478][T10462] RIP: 0023:0xf70aefec
[  302.654491][T10462] Code: Unable to access opcode bytes at 0xf70aefc2.
[  302.654496][T10462] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000b4
[  302.654509][T10462] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008001a240
[  302.654516][T10462] RDX: 0000000000019000 RSI: 0000000000000004 RDI: 0000000000000000
[  302.654523][T10462] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  302.654530][T10462] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  302.654536][T10462] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  302.654551][T10462]  </TASK>
[  302.845337][ T5841] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  303.005324][ T5841] usb 9-1: Using ep0 maxpacket: 8
[  303.006111][ T5841] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  303.007194][ T5841] usb 9-1: config 0 has an invalid interface number: 55 but max is 0
[  303.007215][ T5841] usb 9-1: config 0 has no interface number 0
[  303.007244][ T5841] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  303.007263][ T5841] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  303.007283][ T5841] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  303.007304][ T5841] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  303.007335][ T5841] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.009408][ T5841] usb 9-1: config 0 descriptor??
[  303.017506][ T5841] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  303.156326][ T8384] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  303.158704][T10479] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  303.195738][T10483] FAULT_INJECTION: forcing a failure.
[  303.195738][T10483] name failslab, interval 1, probability 0, space 0, times 0
[  303.195814][T10483] CPU: 2 UID: 0 PID: 10483 Comm: syz.0.1377 Not tainted syzkaller #0 PREEMPT(full) 
[  303.195844][T10483] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  303.195854][T10483] Call Trace:
[  303.195860][T10483]  <TASK>
[  303.195865][T10483]  dump_stack_lvl+0x100/0x190
[  303.195890][T10483]  should_fail_ex.cold+0x5/0xa
[  303.195911][T10483]  should_failslab+0xc2/0x120
[  303.195930][T10483]  __kmalloc_noprof+0xfc/0x840
[  303.195946][T10483]  ? rcu_is_watching+0x13/0xc0
[  303.195961][T10483]  ? tomoyo_realpath_from_path+0xb6/0x690
[  303.195988][T10483]  tomoyo_realpath_from_path+0xb6/0x690
[  303.196014][T10483]  tomoyo_path_number_perm+0x23c/0x580
[  303.196033][T10483]  ? tomoyo_path_number_perm+0x22e/0x580
[  303.196054][T10483]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  303.196073][T10483]  ? get_pid_task+0x106/0x250
[  303.196094][T10483]  ? __lock_acquire+0x4c5/0x1ec0
[  303.196123][T10483]  ? __fget_files+0x34/0x3d0
[  303.196139][T10483]  ? find_held_lock+0x2b/0x80
[  303.196153][T10483]  ? __fget_files+0x215/0x3d0
[  303.196167][T10483]  ? hook_file_ioctl_common+0x140/0x440
[  303.196187][T10483]  ? __fget_files+0x215/0x3d0
[  303.196206][T10483]  ? __fget_files+0x21f/0x3d0
[  303.196224][T10483]  security_file_ioctl_compat+0xd3/0x230
[  303.196247][T10483]  __ia32_compat_sys_ioctl+0xc2/0x360
[  303.196272][T10483]  __do_fast_syscall_32+0x13a/0x8b0
[  303.196292][T10483]  ? lockdep_hardirqs_on+0x7d/0x110
[  303.196313][T10483]  do_fast_syscall_32+0x32/0x70
[  303.196333][T10483]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  303.196369][T10483] RIP: 0023:0xf7f74fec
[  303.196388][T10483] Code: Unable to access opcode bytes at 0xf7f74fc2.
[  303.196395][T10483] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  303.196410][T10483] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c018aa09
[  303.196420][T10483] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000
[  303.196429][T10483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  303.196437][T10483] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  303.196446][T10483] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  303.196466][T10483]  </TASK>
[  303.196628][T10483] ERROR: Out of memory at tomoyo_realpath_from_path.
[  304.098464][T10519] FAULT_INJECTION: forcing a failure.
[  304.098464][T10519] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  304.098557][T10519] CPU: 0 UID: 0 PID: 10519 Comm: syz.5.1384 Not tainted syzkaller #0 PREEMPT(full) 
[  304.098592][T10519] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  304.098604][T10519] Call Trace:
[  304.098611][T10519]  <TASK>
[  304.098618][T10519]  dump_stack_lvl+0x100/0x190
[  304.098648][T10519]  should_fail_ex.cold+0x5/0xa
[  304.098673][T10519]  _copy_from_user+0x2e/0xd0
[  304.098694][T10519]  __sys_bpf+0x2f5/0x4a30
[  304.098718][T10519]  ? __pfx___sys_bpf+0x10/0x10
[  304.098739][T10519]  ? lock_acquire+0x1d1/0x380
[  304.098759][T10519]  ? get_pid_task+0x2a/0x250
[  304.098778][T10519]  ? find_held_lock+0x2b/0x80
[  304.098795][T10519]  ? get_pid_task+0xfc/0x250
[  304.098809][T10519]  ? get_pid_task+0xfc/0x250
[  304.098829][T10519]  ? proc_fail_nth_write+0x9f/0x220
[  304.098846][T10519]  ? find_held_lock+0x2b/0x80
[  304.098867][T10519]  ? rcu_read_lock_any_held+0x6a/0x90
[  304.098886][T10519]  ? find_held_lock+0x2b/0x80
[  304.098939][T10519]  ? ksys_write+0x190/0x250
[  304.098956][T10519]  ? ksys_write+0x190/0x250
[  304.098971][T10519]  ? lock_acquire+0x1d1/0x380
[  304.099004][T10519]  ? fput+0x7c/0x100
[  304.099026][T10519]  ? __ia32_sys_bpf+0xcc/0x170
[  304.099041][T10519]  __ia32_sys_bpf+0xcc/0x170
[  304.099058][T10519]  ? __do_fast_syscall_32+0xb3/0x8b0
[  304.099085][T10519]  __do_fast_syscall_32+0x13a/0x8b0
[  304.099106][T10519]  ? lockdep_hardirqs_on+0x7d/0x110
[  304.099128][T10519]  do_fast_syscall_32+0x32/0x70
[  304.099149][T10519]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  304.099170][T10519] RIP: 0023:0xf70aefec
[  304.099191][T10519] Code: Unable to access opcode bytes at 0xf70aefc2.
[  304.099200][T10519] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  304.099219][T10519] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000400
[  304.099230][T10519] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000
[  304.099240][T10519] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  304.099249][T10519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  304.099259][T10519] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  304.099281][T10519]  </TASK>
[  304.595293][ T5927] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  304.642623][ T1157] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  304.642918][T10548] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  304.644347][T10508] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1382'.
[  304.763488][ T5927] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  304.764906][ T5927] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  304.764948][ T5927] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  304.764976][ T5927] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  304.764993][ T5927] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  304.769013][ T5927] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  304.769039][ T5927] usb 10-1: Manufacturer: syz
[  304.773386][ T5927] usb 10-1: config 0 descriptor??
[  305.197588][ T5927] appleir 0003:05AC:8243.0002: unknown main item tag 0x0
[  305.211565][ T8386] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  305.212009][T10561] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  305.267896][ T5927] appleir 0003:05AC:8243.0002: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[  305.400199][T10537] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1386'.
[  305.620861][ T5841] usb 9-1: USB disconnect, device number 10
[  305.638262][ T5841] ldusb 9-1:0.55: LD USB Device #0 now disconnected
[  305.674135][T10573] lo: Caught tx_queue_len zero misconfig
[  306.220691][   T74] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  306.223831][T10586] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  307.249576][  T607] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  307.253018][T10607] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  307.336339][ T5841] usb 10-1: USB disconnect, device number 7
[  307.538457][T10620] FAULT_INJECTION: forcing a failure.
[  307.538457][T10620] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  307.538524][T10620] CPU: 3 UID: 0 PID: 10620 Comm: syz.0.1409 Not tainted syzkaller #0 PREEMPT(full) 
[  307.538549][T10620] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  307.538557][T10620] Call Trace:
[  307.538562][T10620]  <TASK>
[  307.538567][T10620]  dump_stack_lvl+0x100/0x190
[  307.538590][T10620]  should_fail_ex.cold+0x5/0xa
[  307.538606][T10620]  _copy_from_iter+0x1f4/0x1690
[  307.538621][T10620]  ? __lock_acquire+0x4c5/0x1ec0
[  307.538639][T10620]  ? __pfx__copy_from_iter+0x10/0x10
[  307.538653][T10620]  ? lock_acquire+0x1d1/0x380
[  307.538679][T10620]  ? aa_file_perm+0x197/0x14d0
[  307.538691][T10620]  ? find_held_lock+0x2b/0x80
[  307.538704][T10620]  tun_get_user+0x265/0x3cc0
[  307.538725][T10620]  ? __lock_acquire+0x4c5/0x1ec0
[  307.538739][T10620]  ? __pfx_tun_get_user+0x10/0x10
[  307.538753][T10620]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  307.538774][T10620]  ? find_held_lock+0x2b/0x80
[  307.538784][T10620]  ? tun_get+0x191/0x370
[  307.538795][T10620]  ? tun_get+0x191/0x370
[  307.538809][T10620]  tun_chr_write_iter+0xdc/0x200
[  307.538824][T10620]  vfs_write+0x6af/0x1050
[  307.538836][T10620]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  307.538856][T10620]  ? __pfx_vfs_write+0x10/0x10
[  307.538865][T10620]  ? find_held_lock+0x2b/0x80
[  307.538927][T10620]  ksys_write+0x12a/0x250
[  307.538943][T10620]  ? __pfx_ksys_write+0x10/0x10
[  307.538952][T10620]  ? ksys_write+0x1ac/0x250
[  307.538963][T10620]  ? __pfx_ksys_write+0x10/0x10
[  307.538975][T10620]  __do_fast_syscall_32+0x13a/0x8b0
[  307.538992][T10620]  ? lockdep_hardirqs_on+0x7d/0x110
[  307.539007][T10620]  do_fast_syscall_32+0x32/0x70
[  307.539022][T10620]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  307.539037][T10620] RIP: 0023:0xf7f74fec
[  307.539054][T10620] Code: Unable to access opcode bytes at 0xf7f74fc2.
[  307.539059][T10620] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  307.539071][T10620] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380
[  307.539078][T10620] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000
[  307.539084][T10620] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  307.539091][T10620] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  307.539097][T10620] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  307.539111][T10620]  </TASK>
[  307.773250][T10630] FAULT_INJECTION: forcing a failure.
[  307.773250][T10630] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  307.773320][T10630] CPU: 2 UID: 0 PID: 10630 Comm: syz.0.1412 Not tainted syzkaller #0 PREEMPT(full) 
[  307.773344][T10630] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  307.773352][T10630] Call Trace:
[  307.773356][T10630]  <TASK>
[  307.773361][T10630]  dump_stack_lvl+0x100/0x190
[  307.773384][T10630]  should_fail_ex.cold+0x5/0xa
[  307.773406][T10630]  _copy_from_user+0x2e/0xd0
[  307.773429][T10630]  get_old_timespec32+0x82/0x130
[  307.773452][T10630]  ? __pfx_get_old_timespec32+0x10/0x10
[  307.773476][T10630]  ? __pfx___seccomp_filter+0x10/0x10
[  307.773500][T10630]  __ia32_sys_clock_settime32+0x17d/0x2a0
[  307.773524][T10630]  ? __pfx___ia32_sys_clock_settime32+0x10/0x10
[  307.773541][T10630]  ? ksys_write+0x1ac/0x250
[  307.773556][T10630]  __do_fast_syscall_32+0x13a/0x8b0
[  307.773572][T10630]  ? lockdep_hardirqs_on+0x7d/0x110
[  307.773587][T10630]  do_fast_syscall_32+0x32/0x70
[  307.773602][T10630]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  307.773615][T10630] RIP: 0023:0xf7f74fec
[  307.773629][T10630] Code: Unable to access opcode bytes at 0xf7f74fc2.
[  307.773634][T10630] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000108
[  307.773645][T10630] RAX: ffffffffffffffda RBX: 00000000fffffffb RCX: 0000000000000000
[  307.773652][T10630] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  307.773658][T10630] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  307.773664][T10630] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  307.773670][T10630] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  307.773683][T10630]  </TASK>
[  308.048607][   T74] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  308.048777][T10640] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  308.260653][T10662] FAULT_INJECTION: forcing a failure.
[  308.260653][T10662] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  308.260729][T10662] CPU: 3 UID: 0 PID: 10662 Comm: syz.3.1419 Not tainted syzkaller #0 PREEMPT(full) 
[  308.260761][T10662] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  308.260774][T10662] Call Trace:
[  308.260781][T10662]  <TASK>
[  308.260789][T10662]  dump_stack_lvl+0x100/0x190
[  308.260817][T10662]  should_fail_ex.cold+0x5/0xa
[  308.260841][T10662]  _copy_to_user+0x32/0xd0
[  308.260864][T10662]  simple_read_from_buffer+0xcb/0x170
[  308.260886][T10662]  proc_fail_nth_read+0x1af/0x230
[  308.260917][T10662]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  308.260948][T10662]  ? rw_verify_area+0xce/0x6d0
[  308.260975][T10662]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  308.261004][T10662]  vfs_read+0x1e4/0xb40
[  308.261022][T10662]  ? lock_acquire+0x1d1/0x380
[  308.261045][T10662]  ? __fget_files+0x34/0x3d0
[  308.261063][T10662]  ? __pfx_vfs_read+0x10/0x10
[  308.261078][T10662]  ? find_held_lock+0x2b/0x80
[  308.261097][T10662]  ? __fget_files+0x215/0x3d0
[  308.261118][T10662]  ? __fget_files+0x21f/0x3d0
[  308.261144][T10662]  ksys_read+0x12a/0x250
[  308.261161][T10662]  ? __pfx_ksys_read+0x10/0x10
[  308.261185][T10662]  do_int80_emulation+0x166/0x650
[  308.261214][T10662]  asm_int80_emulation+0x1a/0x20
[  308.261237][T10662] RIP: 0023:0xf71e75ab
[  308.261254][T10662] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  308.261271][T10662] RSP: 002b:00000000f54a64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  308.261290][T10662] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54a65d0
[  308.261301][T10662] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  308.261311][T10662] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  308.261321][T10662] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  308.261331][T10662] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  308.261355][T10662]  </TASK>
[  308.353583][T10665] syzkaller0: entered promiscuous mode
[  308.355498][T10665] syzkaller0: entered allmulticast mode
[  308.413939][T10672] FAULT_INJECTION: forcing a failure.
[  308.413939][T10672] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  308.414001][T10672] CPU: 3 UID: 0 PID: 10672 Comm: syz.4.1423 Not tainted syzkaller #0 PREEMPT(full) 
[  308.414026][T10672] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  308.414035][T10672] Call Trace:
[  308.414040][T10672]  <TASK>
[  308.414044][T10672]  dump_stack_lvl+0x100/0x190
[  308.414064][T10672]  should_fail_ex.cold+0x5/0xa
[  308.414079][T10672]  _copy_from_user+0x2e/0xd0
[  308.414092][T10672]  get_compat_msghdr+0xb3/0x480
[  308.414109][T10672]  ? __pfx_get_compat_msghdr+0x10/0x10
[  308.414129][T10672]  ___sys_sendmsg+0x1b6/0x1e0
[  308.414148][T10672]  ? __pfx____sys_sendmsg+0x10/0x10
[  308.414171][T10672]  ? find_held_lock+0x2b/0x80
[  308.414192][T10672]  __sys_sendmsg+0x160/0x210
[  308.414206][T10672]  ? __pfx___sys_sendmsg+0x10/0x10
[  308.414223][T10672]  ? __pfx_ksys_write+0x10/0x10
[  308.414237][T10672]  __do_fast_syscall_32+0x13a/0x8b0
[  308.414254][T10672]  ? lockdep_hardirqs_on+0x7d/0x110
[  308.414269][T10672]  do_fast_syscall_32+0x32/0x70
[  308.414285][T10672]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  308.414299][T10672] RIP: 0023:0xf7fe5fec
[  308.414312][T10672] Code: Unable to access opcode bytes at 0xf7fe5fc2.
[  308.414317][T10672] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  308.414328][T10672] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000600
[  308.414335][T10672] RDX: 0000000004000010 RSI: 0000000000000000 RDI: 0000000000000000
[  308.414342][T10672] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  308.414348][T10672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  308.414354][T10672] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  308.414368][T10672]  </TASK>
[  308.490839][T10675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1425'.
[  308.550302][T10683] FAULT_INJECTION: forcing a failure.
[  308.550302][T10683] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  308.550378][T10683] CPU: 3 UID: 0 PID: 10683 Comm: syz.0.1428 Not tainted syzkaller #0 PREEMPT(full) 
[  308.550402][T10683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  308.550411][T10683] Call Trace:
[  308.550415][T10683]  <TASK>
[  308.550420][T10683]  dump_stack_lvl+0x100/0x190
[  308.550439][T10683]  should_fail_ex.cold+0x5/0xa
[  308.550454][T10683]  _copy_to_user+0x32/0xd0
[  308.550475][T10683]  simple_read_from_buffer+0xcb/0x170
[  308.550488][T10683]  proc_fail_nth_read+0x1af/0x230
[  308.550507][T10683]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  308.550525][T10683]  ? rw_verify_area+0xce/0x6d0
[  308.550541][T10683]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  308.550559][T10683]  vfs_read+0x1e4/0xb40
[  308.550570][T10683]  ? lock_acquire+0x1d1/0x380
[  308.550584][T10683]  ? __fget_files+0x34/0x3d0
[  308.550596][T10683]  ? __pfx_vfs_read+0x10/0x10
[  308.550605][T10683]  ? find_held_lock+0x2b/0x80
[  308.550616][T10683]  ? __fget_files+0x215/0x3d0
[  308.550630][T10683]  ? __fget_files+0x21f/0x3d0
[  308.550648][T10683]  ksys_read+0x12a/0x250
[  308.550658][T10683]  ? __pfx_ksys_read+0x10/0x10
[  308.550672][T10683]  do_int80_emulation+0x166/0x650
[  308.550690][T10683]  asm_int80_emulation+0x1a/0x20
[  308.550700][T10683] RIP: 0023:0xf71775ab
[  308.550710][T10683] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  308.550721][T10683] RSP: 002b:00000000f54364bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  308.550731][T10683] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54365d0
[  308.550738][T10683] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  308.550745][T10683] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  308.550751][T10683] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  308.550757][T10683] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  308.550771][T10683]  </TASK>
[  308.746570][ T8373] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  308.747623][T10688] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  308.909931][T10702] syzkaller0: entered promiscuous mode
[  308.910001][T10702] syzkaller0: entered allmulticast mode
[  309.042857][ T1157] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  309.046400][T10679] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  309.065006][T10708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1435'.
[  309.113470][T10714] netlink: 844 bytes leftover after parsing attributes in process `syz.0.1438'.
[  309.113538][T10714] netlink: 844 bytes leftover after parsing attributes in process `syz.0.1438'.
[  309.275108][T10724] netlink: 'syz.4.1442': attribute type 5 has an invalid length.
[  309.419105][T10734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1444'.
[  309.470604][T10736] syzkaller0: entered promiscuous mode
[  309.472569][T10736] syzkaller0: entered allmulticast mode
[  309.685445][ T8373] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  309.689347][T10738] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  309.972718][T10744] FAULT_INJECTION: forcing a failure.
[  309.972718][T10744] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  309.972789][T10744] CPU: 0 UID: 0 PID: 10744 Comm: syz.3.1448 Not tainted syzkaller #0 PREEMPT(full) 
[  309.972822][T10744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  309.972835][T10744] Call Trace:
[  309.972841][T10744]  <TASK>
[  309.972849][T10744]  dump_stack_lvl+0x100/0x190
[  309.972892][T10744]  should_fail_ex.cold+0x5/0xa
[  309.972916][T10744]  _copy_from_user+0x2e/0xd0
[  309.972938][T10744]  get_compat_msghdr+0xb3/0x480
[  309.972964][T10744]  ? __pfx_get_compat_msghdr+0x10/0x10
[  309.972998][T10744]  ___sys_sendmsg+0x1b6/0x1e0
[  309.973027][T10744]  ? __pfx____sys_sendmsg+0x10/0x10
[  309.973065][T10744]  ? find_held_lock+0x2b/0x80
[  309.973100][T10744]  __sys_sendmsg+0x160/0x210
[  309.973122][T10744]  ? __pfx___sys_sendmsg+0x10/0x10
[  309.973151][T10744]  ? __pfx_ksys_write+0x10/0x10
[  309.973175][T10744]  __do_fast_syscall_32+0x13a/0x8b0
[  309.973201][T10744]  ? lockdep_hardirqs_on+0x7d/0x110
[  309.973225][T10744]  do_fast_syscall_32+0x32/0x70
[  309.973250][T10744]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  309.973273][T10744] RIP: 0023:0xf7fe8fec
[  309.973293][T10744] Code: Unable to access opcode bytes at 0xf7fe8fc2.
[  309.973302][T10744] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  309.973320][T10744] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000
[  309.973332][T10744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  309.973343][T10744] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  309.973354][T10744] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  309.973364][T10744] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  309.973387][T10744]  </TASK>
[  310.532163][T10758] syzkaller0: entered promiscuous mode
[  310.535278][T10758] syzkaller0: entered allmulticast mode
[  311.426723][ T8384] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  311.432156][T10762] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  311.910821][  T607] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  311.911153][T10766] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  312.811773][   T43] audit: type=1800 audit(1788539743.612:664): pid=10776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1453" name="MaxPower" dev="configfs" ino=34797 res=0 errno=0
[  312.847719][T10776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1453'.
[  312.881958][T10776] netlink: 'syz.3.1453': attribute type 2 has an invalid length.
[  312.991794][T10786] FAULT_INJECTION: forcing a failure.
[  312.991794][T10786] name failslab, interval 1, probability 0, space 0, times 0
[  312.991881][T10786] CPU: 3 UID: 0 PID: 10786 Comm: syz.4.1461 Not tainted syzkaller #0 PREEMPT(full) 
[  312.991921][T10786] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  312.991935][T10786] Call Trace:
[  312.991943][T10786]  <TASK>
[  312.991952][T10786]  dump_stack_lvl+0x100/0x190
[  312.991986][T10786]  should_fail_ex.cold+0x5/0xa
[  312.992015][T10786]  should_failslab+0xc2/0x120
[  312.992043][T10786]  __kmalloc_noprof+0xfc/0x840
[  312.992065][T10786]  ? rcu_is_watching+0x13/0xc0
[  312.992087][T10786]  ? tomoyo_realpath_from_path+0xb6/0x690
[  312.992126][T10786]  tomoyo_realpath_from_path+0xb6/0x690
[  312.992176][T10786]  tomoyo_path_number_perm+0x23c/0x580
[  312.992204][T10786]  ? tomoyo_path_number_perm+0x22e/0x580
[  312.992236][T10786]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  312.992266][T10786]  ? get_pid_task+0x106/0x250
[  312.992302][T10786]  ? __lock_acquire+0x4c5/0x1ec0
[  312.992347][T10786]  ? __fget_files+0x34/0x3d0
[  312.992372][T10786]  ? find_held_lock+0x2b/0x80
[  312.992394][T10786]  ? __fget_files+0x215/0x3d0
[  312.992415][T10786]  ? hook_file_ioctl_common+0x140/0x440
[  312.992443][T10786]  ? __fget_files+0x215/0x3d0
[  312.992469][T10786]  ? __fget_files+0x21f/0x3d0
[  312.992495][T10786]  security_file_ioctl_compat+0xd3/0x230
[  312.992526][T10786]  __ia32_compat_sys_ioctl+0xc2/0x360
[  312.992563][T10786]  __do_fast_syscall_32+0x13a/0x8b0
[  312.992600][T10786]  ? lockdep_hardirqs_on+0x7d/0x110
[  312.992630][T10786]  do_fast_syscall_32+0x32/0x70
[  312.992659][T10786]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  312.992687][T10786] RIP: 0023:0xf7fe5fec
[  312.992710][T10786] Code: Unable to access opcode bytes at 0xf7fe5fc2.
[  312.992719][T10786] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  312.992741][T10786] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0049364
[  312.992755][T10786] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000
[  312.992768][T10786] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  312.992781][T10786] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  312.992793][T10786] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  312.992822][T10786]  </TASK>
[  312.997835][T10786] ERROR: Out of memory at tomoyo_realpath_from_path.
[  313.121745][T10792] FAULT_INJECTION: forcing a failure.
[  313.121745][T10792] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  313.121822][T10792] CPU: 2 UID: 0 PID: 10792 Comm: syz.4.1464 Not tainted syzkaller #0 PREEMPT(full) 
[  313.121856][T10792] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  313.121870][T10792] Call Trace:
[  313.121875][T10792]  <TASK>
[  313.121882][T10792]  dump_stack_lvl+0x100/0x190
[  313.121913][T10792]  should_fail_ex.cold+0x5/0xa
[  313.121937][T10792]  _copy_from_user+0x2e/0xd0
[  313.121959][T10792]  get_compat_msghdr+0xb3/0x480
[  313.121984][T10792]  ? __pfx_get_compat_msghdr+0x10/0x10
[  313.122018][T10792]  ___sys_sendmsg+0x1b6/0x1e0
[  313.122047][T10792]  ? __pfx____sys_sendmsg+0x10/0x10
[  313.122084][T10792]  ? find_held_lock+0x2b/0x80
[  313.122119][T10792]  __sys_sendmsg+0x160/0x210
[  313.122141][T10792]  ? __pfx___sys_sendmsg+0x10/0x10
[  313.122168][T10792]  ? __pfx_ksys_write+0x10/0x10
[  313.122192][T10792]  __do_fast_syscall_32+0x13a/0x8b0
[  313.122230][T10792]  ? lockdep_hardirqs_on+0x7d/0x110
[  313.122252][T10792]  do_fast_syscall_32+0x32/0x70
[  313.122276][T10792]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  313.122297][T10792] RIP: 0023:0xf7fe5fec
[  313.122317][T10792] Code: Unable to access opcode bytes at 0xf7fe5fc2.
[  313.122326][T10792] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  313.122343][T10792] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000
[  313.122353][T10792] RDX: 0000000000044001 RSI: 0000000000000000 RDI: 0000000000000000
[  313.122363][T10792] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  313.122375][T10792] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  313.122387][T10792] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  313.122407][T10792]  </TASK>
[  313.217355][T10794] syzkaller0: entered promiscuous mode
[  313.217415][T10794] syzkaller0: entered allmulticast mode
[  313.449862][   T74] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  313.449975][T10799] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  313.478811][T10805] MTRR 1 not used
[  313.834496][T10818] FAULT_INJECTION: forcing a failure.
[  313.834496][T10818] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  313.834567][T10818] CPU: 2 UID: 0 PID: 10818 Comm: syz.0.1472 Not tainted syzkaller #0 PREEMPT(full) 
[  313.834591][T10818] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  313.834600][T10818] Call Trace:
[  313.834604][T10818]  <TASK>
[  313.834609][T10818]  dump_stack_lvl+0x100/0x190
[  313.834628][T10818]  should_fail_ex.cold+0x5/0xa
[  313.834643][T10818]  _copy_to_user+0x32/0xd0
[  313.834657][T10818]  simple_read_from_buffer+0xcb/0x170
[  313.834671][T10818]  proc_fail_nth_read+0x1af/0x230
[  313.834689][T10818]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  313.834708][T10818]  ? rw_verify_area+0xce/0x6d0
[  313.834724][T10818]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  313.834742][T10818]  vfs_read+0x1e4/0xb40
[  313.834752][T10818]  ? lock_acquire+0x1d1/0x380
[  313.834767][T10818]  ? __fget_files+0x34/0x3d0
[  313.834778][T10818]  ? __pfx_vfs_read+0x10/0x10
[  313.834787][T10818]  ? find_held_lock+0x2b/0x80
[  313.834799][T10818]  ? __fget_files+0x215/0x3d0
[  313.834812][T10818]  ? __fget_files+0x21f/0x3d0
[  313.834832][T10818]  ksys_read+0x12a/0x250
[  313.834862][T10818]  ? __pfx_ksys_read+0x10/0x10
[  313.834880][T10818]  do_int80_emulation+0x166/0x650
[  313.834901][T10818]  asm_int80_emulation+0x1a/0x20
[  313.834916][T10818] RIP: 0023:0xf71775ab
[  313.834929][T10818] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  313.834944][T10818] RSP: 002b:00000000f53f44bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  313.834960][T10818] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f53f45d0
[  313.834971][T10818] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  313.834981][T10818] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  313.834990][T10818] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  313.835000][T10818] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  313.835016][T10818]  </TASK>
[  313.947347][  T607] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  313.947528][T10815] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  314.072068][T10821] loop5: detected capacity change from 0 to 7
[  314.083290][T10821] Dev loop5: unable to read RDB block 7
[  314.084887][T10821]  loop5: AHDI p1
[  314.084910][T10821] loop5: partition table partially beyond EOD, truncated
[  314.722914][T10835] FAULT_INJECTION: forcing a failure.
[  314.722914][T10835] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  314.722994][T10835] CPU: 0 UID: 0 PID: 10835 Comm: syz.4.1478 Not tainted syzkaller #0 PREEMPT(full) 
[  314.723028][T10835] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  314.723041][T10835] Call Trace:
[  314.723048][T10835]  <TASK>
[  314.723056][T10835]  dump_stack_lvl+0x100/0x190
[  314.723091][T10835]  should_fail_ex.cold+0x5/0xa
[  314.723117][T10835]  strncpy_from_user+0x3b/0x2d0
[  314.723144][T10835]  __do_sys_add_key+0xd4/0x460
[  314.723165][T10835]  ? __pfx___do_sys_add_key+0x10/0x10
[  314.723182][T10835]  ? fput+0x7c/0x100
[  314.723202][T10835]  ? __pfx_ksys_write+0x10/0x10
[  314.723220][T10835]  __do_fast_syscall_32+0x13a/0x8b0
[  314.723244][T10835]  ? lockdep_hardirqs_on+0x7d/0x110
[  314.723267][T10835]  do_fast_syscall_32+0x32/0x70
[  314.723290][T10835]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  314.723329][T10835] RIP: 0023:0xf7fe5fec
[  314.723350][T10835] Code: Unable to access opcode bytes at 0xf7fe5fc2.
[  314.723358][T10835] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e
[  314.723377][T10835] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000
[  314.723388][T10835] RDX: 0000000080000200 RSI: 00000000000001d8 RDI: 00000000ffffffff
[  314.723399][T10835] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  314.723408][T10835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  314.723419][T10835] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  314.723441][T10835]  </TASK>
[  314.952393][T10839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1480'.
[  315.210755][T10840] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1479'.
[  315.359374][ T8386] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  315.362053][T10842] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  315.558658][T10854] loop5: detected capacity change from 0 to 9839
[  315.949990][ T5748] Buffer I/O error on dev loop5, logical block 1229, async page read
[  316.725534][T10870] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1489'.
[  316.734819][T10870] veth0_to_bond: Caught tx_queue_len zero misconfig
[  316.759940][ T1436] ieee802154 phy0 wpan0: encryption failed: -22
[  316.760024][ T1436] ieee802154 phy1 wpan1: encryption failed: -22
[  316.781957][T10870] netlink: 'syz.5.1489': attribute type 6 has an invalid length.
[  316.896693][T10876] CUSE: DEVNAME unspecified
[  317.138957][ T1157] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  317.139193][T10877] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  317.143521][T10884] all: renamed from lo (while UP)
[  317.417575][T10888] FAULT_INJECTION: forcing a failure.
[  317.417575][T10888] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  317.417646][T10888] CPU: 2 UID: 0 PID: 10888 Comm: syz.5.1496 Not tainted syzkaller #0 PREEMPT(full) 
[  317.417669][T10888] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  317.417677][T10888] Call Trace:
[  317.417682][T10888]  <TASK>
[  317.417686][T10888]  dump_stack_lvl+0x100/0x190
[  317.417705][T10888]  should_fail_ex.cold+0x5/0xa
[  317.417721][T10888]  _copy_from_user+0x2e/0xd0
[  317.417735][T10888]  get_compat_msghdr+0xb3/0x480
[  317.417752][T10888]  ? __pfx_get_compat_msghdr+0x10/0x10
[  317.417773][T10888]  ___sys_sendmsg+0x1b6/0x1e0
[  317.417792][T10888]  ? __pfx____sys_sendmsg+0x10/0x10
[  317.417815][T10888]  ? find_held_lock+0x2b/0x80
[  317.417836][T10888]  __sys_sendmsg+0x160/0x210
[  317.417850][T10888]  ? __pfx___sys_sendmsg+0x10/0x10
[  317.417867][T10888]  ? __pfx_ksys_write+0x10/0x10
[  317.417881][T10888]  __do_fast_syscall_32+0x13a/0x8b0
[  317.417897][T10888]  ? lockdep_hardirqs_on+0x7d/0x110
[  317.417912][T10888]  do_fast_syscall_32+0x32/0x70
[  317.417927][T10888]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  317.417942][T10888] RIP: 0023:0xf70aefec
[  317.417956][T10888] Code: Unable to access opcode bytes at 0xf70aefc2.
[  317.417961][T10888] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  317.417972][T10888] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0
[  317.417979][T10888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  317.417986][T10888] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  317.417992][T10888] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  317.417998][T10888] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  317.418011][T10888]  </TASK>
[  317.530955][T10892] xt_CT: You must specify a L4 protocol and not use inversions on it
[  318.055650][ T2350] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  318.206966][ T2350] usb 5-1: Using ep0 maxpacket: 16
[  318.209386][ T2350] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20
[  318.213491][ T2350] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  318.213562][ T2350] usb 5-1: config 0 interface 0 has no altsetting 0
[  318.223976][ T2350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.224017][ T2350] usb 5-1: Product: syz
[  318.224062][ T2350] usb 5-1: Manufacturer: syz
[  318.224086][ T2350] usb 5-1: SerialNumber: syz
[  318.235230][ T2350] usb 5-1: config 0 descriptor??
[  318.355944][   T43] audit: type=1804 audit(1788539749.152:665): pid=10904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1502" name="/newroot/175/file1" dev="tmpfs" ino=961 res=1 errno=0
[  318.460448][    C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  318.474978][ T2350] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input111
[  318.487195][ T2350] imon:send_packet: packet tx failed (-71)
[  318.505970][ T2350] imon 5-1:0.0: panel buttons/knobs setup failed
[  318.595305][ T2350] rc_core: IR keymap rc-imon-pad not found
[  318.597369][ T2350] Registered IR keymap rc-empty
[  318.599300][ T2350] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  318.602678][ T2350] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  318.608759][ T2350] imon:send_packet: packet tx failed (-71)
[  318.625329][ T2350] imon 5-1:0.0: remote input dev register failed
[  318.630019][ T2350] imon 5-1:0.0: imon_init_intf0: rc device setup failed
[  318.641564][ T2350] imon 5-1:0.0: unable to initialize intf0, err 0
[  318.644492][ T2350] imon:imon_probe: failed to initialize context!
[  318.646975][ T2350] imon 5-1:0.0: unable to register, err -19
[  318.650931][ T2350] usb 5-1: USB disconnect, device number 31
[  318.670624][ T8386] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  318.670786][T10914] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  318.685005][T10911] overlay: ./file0 is not a directory
[  318.725558][   T43] audit: type=1326 audit(1788539749.532:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10917 comm="syz.3.1506" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x7ffc0000
[  318.725752][   T43] audit: type=1326 audit(1788539749.532:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10917 comm="syz.3.1506" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x7ffc0000
[  318.725999][   T43] audit: type=1326 audit(1788539749.532:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10917 comm="syz.3.1506" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7fe8fec code=0x7ffc0000
[  318.733636][   T43] audit: type=1326 audit(1788539749.532:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10917 comm="syz.3.1506" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x7ffc0000
[  318.733786][   T43] audit: type=1326 audit(1788539749.532:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10919 comm="syz.3.1506" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71e75ab code=0x7ffc0000
[  318.733810][   T43] audit: type=1326 audit(1788539749.532:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10917 comm="syz.3.1506" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x7ffc0000
[  318.739697][   T43] audit: type=1326 audit(1788539749.532:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10917 comm="syz.3.1506" exe="/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf7fe8fec code=0x7ffc0000
[  318.739765][   T43] audit: type=1326 audit(1788539749.552:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10917 comm="syz.3.1506" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x7ffc0000
[  318.739788][   T43] audit: type=1326 audit(1788539749.552:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10917 comm="syz.3.1506" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x7ffc0000
[  318.806047][T10922] FAULT_INJECTION: forcing a failure.
[  318.806047][T10922] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  318.806113][T10922] CPU: 1 UID: 0 PID: 10922 Comm: syz.3.1508 Not tainted syzkaller #0 PREEMPT(full) 
[  318.806138][T10922] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  318.806147][T10922] Call Trace:
[  318.806152][T10922]  <TASK>
[  318.806156][T10922]  dump_stack_lvl+0x100/0x190
[  318.806180][T10922]  should_fail_ex.cold+0x5/0xa
[  318.806197][T10922]  _copy_from_user+0x2e/0xd0
[  318.806211][T10922]  get_compat_msghdr+0xb3/0x480
[  318.806229][T10922]  ? __pfx_get_compat_msghdr+0x10/0x10
[  318.806250][T10922]  ___sys_sendmsg+0x1b6/0x1e0
[  318.806269][T10922]  ? __pfx____sys_sendmsg+0x10/0x10
[  318.806292][T10922]  ? find_held_lock+0x2b/0x80
[  318.806313][T10922]  __sys_sendmsg+0x160/0x210
[  318.806327][T10922]  ? __pfx___sys_sendmsg+0x10/0x10
[  318.806343][T10922]  ? __pfx_ksys_write+0x10/0x10
[  318.806357][T10922]  __do_fast_syscall_32+0x13a/0x8b0
[  318.806374][T10922]  ? lockdep_hardirqs_on+0x7d/0x110
[  318.806389][T10922]  do_fast_syscall_32+0x32/0x70
[  318.806404][T10922]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  318.806419][T10922] RIP: 0023:0xf7fe8fec
[  318.806433][T10922] Code: Unable to access opcode bytes at 0xf7fe8fc2.
[  318.806438][T10922] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  318.806451][T10922] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140
[  318.806458][T10922] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  318.806464][T10922] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  318.806470][T10922] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  318.806477][T10922] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  318.806490][T10922]  </TASK>
[  318.893852][T10926] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1511'.
[  319.015986][ T2350] usb 5-1: new full-speed USB device number 32 using dummy_hcd
[  319.028442][T10936] netlink: 'syz.5.1512': attribute type 10 has an invalid length.
[  319.044028][T10936] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  319.046106][T10936] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  319.054726][T10936] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1512'.
[  319.070543][T10936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  319.077123][T10936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  319.084393][T10936] bond0 (unregistering): (slave netdevsim1): Releasing backup interface
[  319.091254][T10936] bond0 (unregistering): Released all slaves
[  319.118586][T10940] syz.5.1512: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  319.118895][T10940] CPU: 1 UID: 0 PID: 10940 Comm: syz.5.1512 Not tainted syzkaller #0 PREEMPT(full) 
[  319.118911][T10940] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  319.118919][T10940] Call Trace:
[  319.118924][T10940]  <TASK>
[  319.118929][T10940]  dump_stack_lvl+0x100/0x190
[  319.118951][T10940]  warn_alloc.cold+0x9e/0xb2
[  319.118965][T10940]  ? __pfx_warn_alloc+0x10/0x10
[  319.118991][T10940]  ? __lock_acquire+0x4c5/0x1ec0
[  319.119010][T10940]  __vmalloc_node_range_noprof+0x123b/0x1420
[  319.119026][T10940]  ? __lock_acquire+0x4c5/0x1ec0
[  319.119045][T10940]  ? do_replace+0x1c6/0x490
[  319.119058][T10940]  ? do_raw_spin_lock+0x128/0x260
[  319.119077][T10940]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  319.119093][T10940]  ? __lock_acquire+0x4c5/0x1ec0
[  319.119108][T10940]  ? do_raw_spin_unlock+0x145/0x1e0
[  319.119142][T10940]  ? do_replace+0x1c6/0x490
[  319.119153][T10940]  __vmalloc_node_noprof+0xad/0xf0
[  319.119168][T10940]  ? do_replace+0x1c6/0x490
[  319.119181][T10940]  __vmalloc_noprof+0xa3/0x120
[  319.119195][T10940]  ? __pfx___vmalloc_noprof+0x10/0x10
[  319.119215][T10940]  do_replace+0x1c6/0x490
[  319.119227][T10940]  ? __pfx_do_replace+0x10/0x10
[  319.119244][T10940]  ? register_lock_class+0x3f/0x7b0
[  319.119264][T10940]  compat_do_replace+0x589/0x7a0
[  319.119277][T10940]  ? __pfx_compat_do_replace+0x10/0x10
[  319.119298][T10940]  ? bpf_lsm_capable+0x9/0x10
[  319.119315][T10940]  ? security_capable+0x80/0x260
[  319.119331][T10940]  do_ebt_set_ctl+0x3f4/0x4a0
[  319.119345][T10940]  ? __pfx_do_ebt_set_ctl+0x10/0x10
[  319.119358][T10940]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  319.119385][T10940]  ? nf_sockopt_find.isra.0+0x222/0x290
[  319.119409][T10940]  nf_setsockopt+0x8d/0xf0
[  319.119430][T10940]  ip_setsockopt+0xcb/0xf0
[  319.119456][T10940]  tcp_setsockopt+0xa7/0x100
[  319.119475][T10940]  smc_setsockopt+0x1b6/0xa40
[  319.119497][T10940]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  319.119530][T10940]  ? __pfx_smc_setsockopt+0x10/0x10
[  319.119551][T10940]  ? aa_sock_opt_perm+0x114/0x1e0
[  319.119575][T10940]  ? __pfx_smc_setsockopt+0x10/0x10
[  319.119597][T10940]  do_sock_setsockopt+0xf3/0x1d0
[  319.119626][T10940]  __sys_setsockopt+0x119/0x190
[  319.119652][T10940]  __ia32_sys_setsockopt+0xbc/0x160
[  319.119674][T10940]  ? __do_fast_syscall_32+0xb3/0x8b0
[  319.119700][T10940]  ? lockdep_hardirqs_on+0x7d/0x110
[  319.119726][T10940]  __do_fast_syscall_32+0x13a/0x8b0
[  319.119755][T10940]  do_fast_syscall_32+0x32/0x70
[  319.119783][T10940]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  319.119808][T10940] RIP: 0023:0xf70aefec
[  319.119829][T10940] Code: Unable to access opcode bytes at 0xf70aefc2.
[  319.119837][T10940] RSP: 002b:00000000f547c50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e
[  319.119855][T10940] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000000000
[  319.119868][T10940] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 0000000000000108
[  319.119880][T10940] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  319.119891][T10940] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  319.119903][T10940] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  319.119929][T10940]  </TASK>
[  319.120061][T10940] Mem-Info:
[  319.120072][T10940] active_anon:632 inactive_anon:887 isolated_anon:0
[  319.120072][T10940]  active_file:1788 inactive_file:6431 isolated_file:0
[  319.120072][T10940]  unevictable:1000 dirty:43 writeback:0
[  319.120072][T10940]  slab_reclaimable:7115 slab_unreclaimable:61803
[  319.120072][T10940]  mapped:22448 shmem:1002 pagetables:1395
[  319.120072][T10940]  sec_pagetables:344 bounce:0
[  319.120072][T10940]  kernel_misc_reclaimable:0
[  319.120072][T10940]  free:23815 free_pcp:981 free_cma:0
[  319.120124][T10940] Node 0 active_anon:144kB inactive_anon:52kB active_file:256kB inactive_file:440kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:284kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8704kB pagetables:1260kB sec_pagetables:1208kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  319.120179][T10940] Node 1 active_anon:2384kB inactive_anon:3496kB active_file:6896kB inactive_file:25284kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:89508kB dirty:172kB writeback:0kB shmem:2008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6592kB pagetables:4320kB sec_pagetables:168kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  319.120229][T10940] Node 0 DMA free:2604kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  319.120283][T10940] lowmem_reserve[]: 0 277 277 277 277
[  319.120318][T10940] Node 0 DMA32 free:21472kB boost:12288kB min:24916kB low:28072kB high:31228kB reserved_highatomic:2048kB free_highatomic:104kB active_anon:144kB inactive_anon:52kB active_file:256kB inactive_file:340kB unevictable:2000kB writepending:0kB zspages:1160kB present:1032196kB managed:284632kB mlocked:0kB bounce:0kB free_pcp:812kB local_pcp:160kB free_cma:0kB
[  319.120374][T10940] lowmem_reserve[]: 0 0 0 0 0
[  319.120415][T10940] Node 1 DMA32 free:71184kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:2384kB inactive_anon:3496kB active_file:6896kB inactive_file:25284kB unevictable:2000kB writepending:172kB zspages:5708kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:3100kB local_pcp:836kB free_cma:0kB
[  319.120475][T10940] lowmem_reserve[]: 0 0 0 0 0
[  319.120510][T10940] Node 0 DMA: 107*4kB (U) 26*8kB (U) 9*16kB (U) 9*32kB (U) 10*64kB (U) 1*128kB (U) 3*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2604kB
[  319.120669][T10940] Node 0 DMA32: 116*4kB (UME) 200*8kB (UMEH) 61*16kB (UMEH) 126*32kB (UMEH) 51*64kB (UME) 9*128kB (UME) 7*256kB (UM) 6*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 0*4096kB = 21472kB
[  319.120811][T10940] Node 1 DMA32: 910*4kB (UME) 669*8kB (UME) 313*16kB (UME) 89*32kB (UME) 95*64kB (UME) 67*128kB (UME) 43*256kB (UME) 18*512kB (UM) 13*1024kB (UM) 3*2048kB (UM) 0*4096kB = 71184kB
[  319.121025][T10940] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  319.121042][T10940] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  319.121058][T10940] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  319.121073][T10940] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  319.121088][T10940] 10300 total pagecache pages
[  319.121095][T10940] 975 pages in swap cache
[  319.121102][T10940] Free swap  = 97500kB
[  319.121109][T10940] Total swap = 124996kB
[  319.121117][T10940] 524155 pages RAM
[  319.121123][T10940] 0 pages HighMem/MovableOnly
[  319.121129][T10940] 212105 pages reserved
[  319.121135][T10940] 0 pages cma reserved
[  319.179257][ T2350] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20
[  319.186277][ T2350] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  319.186301][ T2350] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64
[  319.186320][ T2350] usb 5-1: config 0 interface 0 has no altsetting 0
[  319.200504][ T2350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.200525][ T2350] usb 5-1: Product: syz
[  319.200535][ T2350] usb 5-1: Manufacturer: syz
[  319.200543][ T2350] usb 5-1: SerialNumber: syz
[  319.260563][ T2350] usb 5-1: config 0 descriptor??
[  319.271909][T10900] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  319.418635][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1512'.
[  319.485224][    C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  319.489812][ T2350] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input113
[  319.785322][ T2350] rc_core: IR keymap rc-imon-pad not found
[  319.785400][ T2350] Registered IR keymap rc-empty
[  319.785469][ T2350] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  319.785483][ T2350] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  319.907238][ T2350] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0
[  319.908191][ T2350] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input114
[  319.937215][ T2350] imon 5-1:0.0: iMON device (15c2:0045, intf0) on usb<5:32> initialized
[  319.949152][T10952] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 2
[  319.957178][T10952] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.957680][T10952] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.103110][T10900] imon:lcd_write: invalid payload size: 7 (expected 8)
[  320.151975][T10955] FAULT_INJECTION: forcing a failure.
[  320.151975][T10955] name failslab, interval 1, probability 0, space 0, times 0
[  320.152062][T10955] CPU: 0 UID: 0 PID: 10955 Comm: syz.4.1516 Not tainted syzkaller #0 PREEMPT(full) 
[  320.152105][T10955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  320.152121][T10955] Call Trace:
[  320.152129][T10955]  <TASK>
[  320.152139][T10955]  dump_stack_lvl+0x100/0x190
[  320.152175][T10955]  should_fail_ex.cold+0x5/0xa
[  320.152205][T10955]  should_failslab+0xc2/0x120
[  320.152234][T10955]  __kmalloc_noprof+0xfc/0x840
[  320.152257][T10955]  ? trace_kmalloc+0xeb/0x110
[  320.152281][T10955]  ? lsm_blob_alloc+0x68/0x90
[  320.152304][T10955]  lsm_blob_alloc+0x68/0x90
[  320.152330][T10955]  security_sk_alloc+0x2d/0x290
[  320.152356][T10955]  sk_prot_alloc+0x12a/0x2a0
[  320.152384][T10955]  sk_alloc+0x36/0xe80
[  320.152408][T10955]  can_create+0x1e5/0x630
[  320.152438][T10955]  __sock_create+0x339/0x860
[  320.152474][T10955]  __sys_socket+0x14d/0x260
[  320.152504][T10955]  ? xfd_validate_state+0x129/0x190
[  320.152535][T10955]  ? __pfx___sys_socket+0x10/0x10
[  320.152575][T10955]  __ia32_sys_socket+0x72/0xb0
[  320.152606][T10955]  ? lockdep_hardirqs_on+0x7d/0x110
[  320.152633][T10955]  __do_fast_syscall_32+0x13a/0x8b0
[  320.152666][T10955]  do_fast_syscall_32+0x32/0x70
[  320.152694][T10955]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  320.152721][T10955] RIP: 0023:0xf7fe5fec
[  320.152744][T10955] Code: Unable to access opcode bytes at 0xf7fe5fc2.
[  320.152754][T10955] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167
[  320.152774][T10955] RAX: ffffffffffffffda RBX: 000000000000001d RCX: 0000000000000002
[  320.152788][T10955] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[  320.152815][T10955] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  320.152831][T10955] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  320.152847][T10955] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  320.152878][T10955]  </TASK>
[  320.274478][T10960] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  320.654375][T10969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1521'.
[  321.003229][T10976] ip6gretap0: entered promiscuous mode
[  321.005797][T10976] ip6gretap0: entered allmulticast mode
[  321.108947][T10980] FAULT_INJECTION: forcing a failure.
[  321.108947][T10980] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  321.109030][T10980] CPU: 2 UID: 0 PID: 10980 Comm: syz.5.1526 Not tainted syzkaller #0 PREEMPT(full) 
[  321.109054][T10980] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  321.109063][T10980] Call Trace:
[  321.109068][T10980]  <TASK>
[  321.109073][T10980]  dump_stack_lvl+0x100/0x190
[  321.109095][T10980]  should_fail_ex.cold+0x5/0xa
[  321.109108][T10980]  ? prepare_alloc_pages+0x16d/0x5b0
[  321.109125][T10980]  should_fail_alloc_page+0xeb/0x140
[  321.109141][T10980]  prepare_alloc_pages+0x1f0/0x5b0
[  321.109157][T10980]  __alloc_frozen_pages_noprof+0x1e9/0x3300
[  321.109176][T10980]  ? unwind_get_return_address+0x59/0xa0
[  321.109198][T10980]  ? __lock_acquire+0x4c5/0x1ec0
[  321.109217][T10980]  ? tomoyo_check_open_permission+0x1a2/0x3c0
[  321.109235][T10980]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  321.109253][T10980]  ? look_up_lock_class+0x55/0x120
[  321.109269][T10980]  ? register_lock_class+0x3f/0x7b0
[  321.109284][T10980]  ? find_held_lock+0x2b/0x80
[  321.109295][T10980]  ? ima_match_policy+0x8c4/0x23f0
[  321.109313][T10980]  ? __lock_acquire+0x4c5/0x1ec0
[  321.109333][T10980]  ? __lock_acquire+0x4c5/0x1ec0
[  321.109347][T10980]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  321.109364][T10980]  ? policy_nodemask+0xed/0x4f0
[  321.109380][T10980]  alloc_pages_mpol+0x201/0x550
[  321.109395][T10980]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  321.109413][T10980]  ? do_raw_spin_lock+0x128/0x260
[  321.109430][T10980]  ? find_held_lock+0x2b/0x80
[  321.109441][T10980]  ? swap_cache_alloc_folio+0x374/0xc50
[  321.109454][T10980]  folio_alloc_mpol_noprof+0x36/0x260
[  321.109472][T10980]  swap_cache_alloc_folio+0x3d7/0xc50
[  321.109486][T10980]  ? __pfx_swap_cache_alloc_folio+0x10/0x10
[  321.109497][T10980]  ? swap_cache_get_folio+0x28d/0x360
[  321.109520][T10980]  ? __pfx_swap_cache_get_folio+0x10/0x10
[  321.109538][T10980]  ? lock_acquire+0x1d1/0x380
[  321.109552][T10980]  ? unwind_next_frame+0xbd/0x2090
[  321.109566][T10980]  swap_cache_read_folio+0x47/0x140
[  321.109579][T10980]  swap_cluster_readahead+0x369/0x5d0
[  321.109594][T10980]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  321.109607][T10980]  ? lock_acquire+0x1d1/0x380
[  321.109621][T10980]  ? swap_table_get+0x28/0x2c0
[  321.109645][T10980]  swapin_readahead+0xf0/0x260
[  321.109656][T10980]  ? __pfx_swapin_readahead+0x10/0x10
[  321.109666][T10980]  ? __pfx_get_swap_device+0x10/0x10
[  321.109683][T10980]  do_swap_page+0xf72/0x5580
[  321.109706][T10980]  ? __pfx_do_swap_page+0x10/0x10
[  321.109719][T10980]  ? lock_acquire+0x1d1/0x380
[  321.109733][T10980]  ? __pte_offset_map+0x2f/0x310
[  321.109749][T10980]  ? rcu_is_watching+0x13/0xc0
[  321.109761][T10980]  ? __pte_offset_map+0x179/0x310
[  321.109774][T10980]  __handle_mm_fault+0x15bd/0x2f60
[  321.109792][T10980]  ? lock_vma_under_rcu+0x11d/0x590
[  321.109808][T10980]  ? __pfx___handle_mm_fault+0x10/0x10
[  321.109826][T10980]  ? lock_vma_under_rcu+0x17c/0x590
[  321.109849][T10980]  handle_mm_fault+0x363/0xa20
[  321.109867][T10980]  do_user_addr_fault+0x59c/0x12f0
[  321.109884][T10980]  exc_page_fault+0x6f/0xd0
[  321.109898][T10980]  asm_exc_page_fault+0x26/0x30
[  321.109909][T10980] RIP: 0023:0xf70dd558
[  321.109919][T10980] Code: 0c 8b 44 24 10 8d 80 ff 93 e3 ff 50 e8 31 3b ff ff 83 c4 7c 5b 5e 5f 5d c3 2e 8d b4 26 00 00 00 00 90 8b 44 24 20 8b 5c 24 08 <8b> 90 80 00 00 00 8b 40 04 8d 4b 2c e8 17 8b ff ff 89 43 5c e9 db
[  321.109929][T10980] RSP: 002b:00000000f549d580 EFLAGS: 00010246
[  321.109940][T10980] RAX: 00000000f746ef94 RBX: 00000000f74a4f80 RCX: 00000000c7368d28
[  321.109947][T10980] RDX: 00000000f549da6c RSI: 0000000000000005 RDI: 00000000f549d5c0
[  321.109953][T10980] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  321.109959][T10980] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  321.109965][T10980] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  321.109979][T10980]  </TASK>
[  321.144860][ T5828] usb 5-1: USB disconnect, device number 32
[  321.249019][T10983] wg0: Caught tx_queue_len zero misconfig
[  321.391291][T10987] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1527'.
[  321.396106][T10987] openvswitch: netlink: Flow actions attr not present in new flow.
[  321.545290][T10985] FAULT_INJECTION: forcing a failure.
[  321.545290][T10985] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  321.545333][T10985] CPU: 3 UID: 0 PID: 10985 Comm: syz.0.1528 Not tainted syzkaller #0 PREEMPT(full) 
[  321.545358][T10985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  321.545367][T10985] Call Trace:
[  321.545371][T10985]  <TASK>
[  321.545376][T10985]  dump_stack_lvl+0x100/0x190
[  321.545446][T10985]  should_fail_ex.cold+0x5/0xa
[  321.545463][T10985]  _copy_from_user+0x2e/0xd0
[  321.545501][T10985]  do_sys_poll+0x345/0xe90
[  321.545512][T10985]  ? find_held_lock+0x2b/0x80
[  321.545526][T10985]  ? is_bpf_text_address+0x8a/0x1a0
[  321.545542][T10985]  ? is_bpf_text_address+0x8a/0x1a0
[  321.545558][T10985]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  321.545575][T10985]  ? __pfx_do_sys_poll+0x10/0x10
[  321.545586][T10985]  ? __kernel_text_address+0xd/0x30
[  321.545614][T10985]  ? lock_acquire+0x1d1/0x380
[  321.545664][T10985]  ? ksys_write+0x190/0x250
[  321.545678][T10985]  ? lock_acquire+0x1d1/0x380
[  321.545694][T10985]  ? set_compat_user_sigmask+0x1d9/0x260
[  321.545711][T10985]  ? __pfx_set_compat_user_sigmask+0x10/0x10
[  321.545729][T10985]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  321.545771][T10985]  __ia32_compat_sys_ppoll_time32+0x2b6/0x350
[  321.545787][T10985]  ? __pfx___ia32_compat_sys_ppoll_time32+0x10/0x10
[  321.545801][T10985]  ? fput+0x7c/0x100
[  321.545814][T10985]  ? ksys_write+0x1ac/0x250
[  321.545825][T10985]  ? __pfx_ksys_write+0x10/0x10
[  321.545839][T10985]  __do_fast_syscall_32+0x13a/0x8b0
[  321.545854][T10985]  ? lockdep_hardirqs_on+0x7d/0x110
[  321.545870][T10985]  do_fast_syscall_32+0x32/0x70
[  321.545886][T10985]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  321.545901][T10985] RIP: 0023:0xf7f74fec
[  321.545916][T10985] Code: Unable to access opcode bytes at 0xf7f74fc2.
[  321.545921][T10985] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000135
[  321.545933][T10985] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 0000000000000001
[  321.545941][T10985] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  321.545947][T10985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  321.545954][T10985] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  321.545960][T10985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  321.545974][T10985]  </TASK>
[  321.693345][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1531'.
[  321.715264][T10993] syzkaller0: entered promiscuous mode
[  321.715316][T10993] syzkaller0: entered allmulticast mode
[  321.879673][T11001] FAULT_INJECTION: forcing a failure.
[  321.879673][T11001] name failslab, interval 1, probability 0, space 0, times 0
[  321.879737][T11001] CPU: 0 UID: 0 PID: 11001 Comm: syz.3.1537 Not tainted syzkaller #0 PREEMPT(full) 
[  321.879763][T11001] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  321.879772][T11001] Call Trace:
[  321.879777][T11001]  <TASK>
[  321.879783][T11001]  dump_stack_lvl+0x100/0x190
[  321.879804][T11001]  should_fail_ex.cold+0x5/0xa
[  321.879820][T11001]  should_failslab+0xc2/0x120
[  321.879837][T11001]  __kmalloc_noprof+0xfc/0x840
[  321.879849][T11001]  ? rcu_is_watching+0x13/0xc0
[  321.879862][T11001]  ? tomoyo_realpath_from_path+0xb6/0x690
[  321.879885][T11001]  tomoyo_realpath_from_path+0xb6/0x690
[  321.879907][T11001]  tomoyo_path_number_perm+0x23c/0x580
[  321.879922][T11001]  ? tomoyo_path_number_perm+0x22e/0x580
[  321.879939][T11001]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  321.879956][T11001]  ? get_pid_task+0x106/0x250
[  321.879972][T11001]  ? __lock_acquire+0x4c5/0x1ec0
[  321.879995][T11001]  ? __fget_files+0x34/0x3d0
[  321.880008][T11001]  ? find_held_lock+0x2b/0x80
[  321.880020][T11001]  ? __fget_files+0x215/0x3d0
[  321.880031][T11001]  ? hook_file_ioctl_common+0x140/0x440
[  321.880046][T11001]  ? __fget_files+0x215/0x3d0
[  321.880061][T11001]  ? __fget_files+0x21f/0x3d0
[  321.880076][T11001]  security_file_ioctl_compat+0xd3/0x230
[  321.880093][T11001]  __ia32_compat_sys_ioctl+0xc2/0x360
[  321.880114][T11001]  __do_fast_syscall_32+0x13a/0x8b0
[  321.880131][T11001]  ? lockdep_hardirqs_on+0x7d/0x110
[  321.880148][T11001]  do_fast_syscall_32+0x32/0x70
[  321.880164][T11001]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  321.880179][T11001] RIP: 0023:0xf7fe8fec
[  321.880193][T11001] Code: Unable to access opcode bytes at 0xf7fe8fc2.
[  321.880199][T11001] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  321.880212][T11001] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004020744f
[  321.880219][T11001] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000
[  321.880226][T11001] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  321.880233][T11001] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  321.880240][T11001] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  321.880255][T11001]  </TASK>
[  321.882466][T11001] ERROR: Out of memory at tomoyo_realpath_from_path.
[  321.897923][T11001] Process accounting paused
[  321.957643][T11004] FAULT_INJECTION: forcing a failure.
[  321.957643][T11004] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  321.957683][T11004] CPU: 1 UID: 0 PID: 11004 Comm: syz.4.1536 Not tainted syzkaller #0 PREEMPT(full) 
[  321.957708][T11004] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  321.957723][T11004] Call Trace:
[  321.957731][T11004]  <TASK>
[  321.957739][T11004]  dump_stack_lvl+0x100/0x190
[  321.957776][T11004]  should_fail_ex.cold+0x5/0xa
[  321.957806][T11004]  _copy_from_user+0x2e/0xd0
[  321.957832][T11004]  get_compat_msghdr+0xb3/0x480
[  321.957914][T11004]  ? __pfx_get_compat_msghdr+0x10/0x10
[  321.958030][T11004]  ___sys_sendmsg+0x1b6/0x1e0
[  321.958069][T11004]  ? __pfx____sys_sendmsg+0x10/0x10
[  321.958141][T11004]  ? find_held_lock+0x2b/0x80
[  321.958185][T11004]  __sys_sendmsg+0x160/0x210
[  321.958214][T11004]  ? __pfx___sys_sendmsg+0x10/0x10
[  321.958247][T11004]  ? __pfx_ksys_write+0x10/0x10
[  321.958274][T11004]  __do_fast_syscall_32+0x13a/0x8b0
[  321.958306][T11004]  ? lockdep_hardirqs_on+0x7d/0x110
[  321.958348][T11004]  do_fast_syscall_32+0x32/0x70
[  321.958378][T11004]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  321.958405][T11004] RIP: 0023:0xf7fe5fec
[  321.958432][T11004] Code: Unable to access opcode bytes at 0xf7fe5fc2.
[  321.958441][T11004] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  321.958464][T11004] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100
[  321.958478][T11004] RDX: 0000000004008094 RSI: 0000000000000000 RDI: 0000000000000000
[  321.958491][T11004] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  321.958504][T11004] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  321.958518][T11004] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  321.958544][T11004]  </TASK>
[  322.640836][T11028] FAULT_INJECTION: forcing a failure.
[  322.640836][T11028] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  322.640907][T11028] CPU: 0 UID: 0 PID: 11028 Comm: syz.5.1545 Not tainted syzkaller #0 PREEMPT(full) 
[  322.640932][T11028] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  322.640941][T11028] Call Trace:
[  322.640945][T11028]  <TASK>
[  322.640950][T11028]  dump_stack_lvl+0x100/0x190
[  322.640969][T11028]  should_fail_ex.cold+0x5/0xa
[  322.640984][T11028]  _copy_from_user+0x2e/0xd0
[  322.640998][T11028]  do_tcp_setsockopt+0x73e/0x2b50
[  322.641011][T11028]  ? __pfx_do_tcp_setsockopt+0x10/0x10
[  322.641024][T11028]  ? __lock_acquire+0x4c5/0x1ec0
[  322.641045][T11028]  ? lock_acquire+0x1d1/0x380
[  322.641060][T11028]  ? __fget_files+0x34/0x3d0
[  322.641071][T11028]  ? find_held_lock+0x2b/0x80
[  322.641086][T11028]  tcp_setsockopt+0xe2/0x100
[  322.641096][T11028]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  322.641114][T11028]  do_sock_setsockopt+0xf3/0x1d0
[  322.641132][T11028]  __sys_setsockopt+0x119/0x190
[  322.641147][T11028]  __ia32_sys_setsockopt+0xbc/0x160
[  322.641159][T11028]  ? __do_fast_syscall_32+0xb3/0x8b0
[  322.641175][T11028]  ? lockdep_hardirqs_on+0x7d/0x110
[  322.641188][T11028]  __do_fast_syscall_32+0x13a/0x8b0
[  322.641203][T11028]  ? lockdep_hardirqs_on+0x7d/0x110
[  322.641218][T11028]  do_fast_syscall_32+0x32/0x70
[  322.641234][T11028]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  322.641249][T11028] RIP: 0023:0xf70aefec
[  322.641261][T11028] Code: Unable to access opcode bytes at 0xf70aefc2.
[  322.641266][T11028] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e
[  322.641278][T11028] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006
[  322.641285][T11028] RDX: 0000000000000013 RSI: 00000000800001c0 RDI: 0000000000000004
[  322.641291][T11028] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  322.641298][T11028] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  322.641304][T11028] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  322.641326][T11028]  </TASK>
[  322.744915][ T1157] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  322.745029][T11005] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  323.006334][ T5841] usb 8-1: new high-speed USB device number 38 using dummy_hcd
[  323.016313][T11041] FAULT_INJECTION: forcing a failure.
[  323.016313][T11041] name failslab, interval 1, probability 0, space 0, times 0
[  323.016388][T11041] CPU: 0 UID: 0 PID: 11041 Comm: syz.4.1548 Not tainted syzkaller #0 PREEMPT(full) 
[  323.016412][T11041] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  323.016420][T11041] Call Trace:
[  323.016425][T11041]  <TASK>
[  323.016430][T11041]  dump_stack_lvl+0x100/0x190
[  323.016451][T11041]  should_fail_ex.cold+0x5/0xa
[  323.016467][T11041]  should_failslab+0xc2/0x120
[  323.016483][T11041]  __kmalloc_noprof+0xfc/0x840
[  323.016494][T11041]  ? rcu_is_watching+0x13/0xc0
[  323.016506][T11041]  ? tomoyo_realpath_from_path+0xb6/0x690
[  323.016528][T11041]  tomoyo_realpath_from_path+0xb6/0x690
[  323.016549][T11041]  tomoyo_path_number_perm+0x23c/0x580
[  323.016563][T11041]  ? tomoyo_path_number_perm+0x22e/0x580
[  323.016578][T11041]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  323.016594][T11041]  ? get_pid_task+0x106/0x250
[  323.016611][T11041]  ? __lock_acquire+0x4c5/0x1ec0
[  323.016632][T11041]  ? __fget_files+0x34/0x3d0
[  323.016649][T11041]  ? find_held_lock+0x2b/0x80
[  323.016660][T11041]  ? __fget_files+0x215/0x3d0
[  323.016670][T11041]  ? hook_file_ioctl_common+0x140/0x440
[  323.016686][T11041]  ? __fget_files+0x215/0x3d0
[  323.016699][T11041]  ? __fget_files+0x21f/0x3d0
[  323.016713][T11041]  security_file_ioctl_compat+0xd3/0x230
[  323.016730][T11041]  __ia32_compat_sys_ioctl+0xc2/0x360
[  323.016749][T11041]  __do_fast_syscall_32+0x13a/0x8b0
[  323.016765][T11041]  ? lockdep_hardirqs_on+0x7d/0x110
[  323.016781][T11041]  do_fast_syscall_32+0x32/0x70
[  323.016796][T11041]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  323.016811][T11041] RIP: 0023:0xf7fe5fec
[  323.016825][T11041] Code: Unable to access opcode bytes at 0xf7fe5fc2.
[  323.016830][T11041] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  323.016842][T11041] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004601
[  323.016849][T11041] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000
[  323.016855][T11041] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  323.016862][T11041] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  323.016868][T11041] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  323.016882][T11041]  </TASK>
[  323.016897][T11041] ERROR: Out of memory at tomoyo_realpath_from_path.
[  323.165446][ T5841] usb 8-1: Using ep0 maxpacket: 16
[  323.168363][ T5841] usb 8-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  323.172155][ T5841] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  323.172187][ T5841] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  323.180596][ T5841] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.180632][ T5841] usb 8-1: Product: syz
[  323.180661][ T5841] usb 8-1: Manufacturer: syz
[  323.180686][ T5841] usb 8-1: SerialNumber: syz
[  323.193601][ T5841] usb 8-1: config 0 descriptor??
[  323.224110][ T8384] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  323.224260][T11047] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  323.516945][T11052] FAULT_INJECTION: forcing a failure.
[  323.516945][T11052] name failslab, interval 1, probability 0, space 0, times 0
[  323.517024][T11052] CPU: 3 UID: 0 PID: 11052 Comm: syz.4.1552 Not tainted syzkaller #0 PREEMPT(full) 
[  323.517050][T11052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  323.517059][T11052] Call Trace:
[  323.517063][T11052]  <TASK>
[  323.517068][T11052]  dump_stack_lvl+0x100/0x190
[  323.517088][T11052]  should_fail_ex.cold+0x5/0xa
[  323.517106][T11052]  should_failslab+0xc2/0x120
[  323.517122][T11052]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  323.517137][T11052]  ? __alloc_skb+0x5b7/0x710
[  323.517149][T11052]  ? __alloc_skb+0x140/0x710
[  323.517164][T11052]  __alloc_skb+0x140/0x710
[  323.517177][T11052]  ? __alloc_skb+0x5b7/0x710
[  323.517189][T11052]  ? __pfx___alloc_skb+0x10/0x10
[  323.517201][T11052]  ? common_file_perm+0x266/0x500
[  323.517223][T11052]  vhci_write+0xc1/0x490
[  323.517241][T11052]  vfs_write+0x6af/0x1050
[  323.517254][T11052]  ? __pfx_vhci_write+0x10/0x10
[  323.517272][T11052]  ? __pfx_vfs_write+0x10/0x10
[  323.517289][T11052]  ? find_held_lock+0x2b/0x80
[  323.517322][T11052]  ksys_write+0x12a/0x250
[  323.517339][T11052]  ? __pfx_ksys_write+0x10/0x10
[  323.517356][T11052]  ? ksys_write+0x1ac/0x250
[  323.517389][T11052]  ? __pfx_ksys_write+0x10/0x10
[  323.517414][T11052]  __do_fast_syscall_32+0x13a/0x8b0
[  323.517439][T11052]  ? lockdep_hardirqs_on+0x7d/0x110
[  323.517464][T11052]  do_fast_syscall_32+0x32/0x70
[  323.517488][T11052]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  323.517517][T11052] RIP: 0023:0xf7fe5fec
[  323.517538][T11052] Code: Unable to access opcode bytes at 0xf7fe5fc2.
[  323.517546][T11052] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  323.517565][T11052] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280
[  323.517577][T11052] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[  323.517589][T11052] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  323.517600][T11052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  323.517610][T11052] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  323.517625][T11052]  </TASK>
[  323.611238][T11016] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1541'.
[  324.121784][ T8386] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  324.126772][T11056] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  324.438622][T11045] syz.5.1550 (11045) used greatest stack depth: 18552 bytes left
[  324.984751][T11067] tipc: Enabled bearer <udp:syz0>, priority 10
[  324.994501][T11067] ip6gretap0: left promiscuous mode
[  324.994576][T11067] ip6gretap0: left allmulticast mode
[  324.996733][T11067] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.996786][T11067] bridge0: port 2(bridge_slave_1) entered listening state
[  324.996905][T11067] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.996951][T11067] bridge0: port 1(bridge_slave_0) entered listening state
[  325.027496][T11067] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  325.039085][T11067] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  325.041038][T11067] mac80211_hwsim hwsim12 wlan0: left promiscuous mode
[  325.041098][T11067] mac80211_hwsim hwsim12 wlan0: left allmulticast mode
[  325.044541][T11067] 8021q: adding VLAN 0 to HW filter on device batadv1
[  325.086910][ T5927] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  325.127063][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  325.132747][  T854] usb 8-1: USB disconnect, device number 38
[  325.195401][ T8385] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  325.197794][T11059] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  325.318323][T11074] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  325.318540][T11074] xt_TPROXY: Can be used only with -p tcp or -p udp
[  325.341402][T11078] FAULT_INJECTION: forcing a failure.
[  325.341402][T11078] name failslab, interval 1, probability 0, space 0, times 0
[  325.341466][T11078] CPU: 0 UID: 0 PID: 11078 Comm: syz.5.1561 Not tainted syzkaller #0 PREEMPT(full) 
[  325.341491][T11078] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  325.341501][T11078] Call Trace:
[  325.341505][T11078]  <TASK>
[  325.341511][T11078]  dump_stack_lvl+0x100/0x190
[  325.341534][T11078]  should_fail_ex.cold+0x5/0xa
[  325.341551][T11078]  should_failslab+0xc2/0x120
[  325.341566][T11078]  __kmalloc_noprof+0xfc/0x840
[  325.341578][T11078]  ? rcu_is_watching+0x13/0xc0
[  325.341591][T11078]  ? tomoyo_realpath_from_path+0xb6/0x690
[  325.341612][T11078]  tomoyo_realpath_from_path+0xb6/0x690
[  325.341646][T11078]  tomoyo_path_number_perm+0x23c/0x580
[  325.341661][T11078]  ? tomoyo_path_number_perm+0x22e/0x580
[  325.341677][T11078]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  325.341692][T11078]  ? get_pid_task+0x106/0x250
[  325.341709][T11078]  ? __lock_acquire+0x4c5/0x1ec0
[  325.341732][T11078]  ? __fget_files+0x34/0x3d0
[  325.341744][T11078]  ? find_held_lock+0x2b/0x80
[  325.341756][T11078]  ? __fget_files+0x215/0x3d0
[  325.341766][T11078]  ? hook_file_ioctl_common+0x140/0x440
[  325.341783][T11078]  ? __fget_files+0x215/0x3d0
[  325.341797][T11078]  ? __fget_files+0x21f/0x3d0
[  325.341811][T11078]  security_file_ioctl_compat+0xd3/0x230
[  325.341827][T11078]  __ia32_compat_sys_ioctl+0xc2/0x360
[  325.341848][T11078]  __do_fast_syscall_32+0x13a/0x8b0
[  325.341864][T11078]  ? lockdep_hardirqs_on+0x7d/0x110
[  325.341880][T11078]  do_fast_syscall_32+0x32/0x70
[  325.341895][T11078]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  325.341910][T11078] RIP: 0023:0xf70aefec
[  325.341925][T11078] Code: Unable to access opcode bytes at 0xf70aefc2.
[  325.341931][T11078] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  325.341943][T11078] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000002285
[  325.341950][T11078] RDX: 00000000800033c0 RSI: 0000000000000000 RDI: 0000000000000000
[  325.341957][T11078] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  325.341964][T11078] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  325.341970][T11078] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  325.341984][T11078]  </TASK>
[  325.343958][T11078] ERROR: Out of memory at tomoyo_realpath_from_path.
[  325.375744][T11079] f2fs: Unknown parameter '”õ kHota4'
[  325.454630][T11086] FAULT_INJECTION: forcing a failure.
[  325.454630][T11086] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  325.454696][T11086] CPU: 0 UID: 0 PID: 11086 Comm: syz.3.1563 Not tainted syzkaller #0 PREEMPT(full) 
[  325.454725][T11086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  325.454736][T11086] Call Trace:
[  325.454742][T11086]  <TASK>
[  325.454748][T11086]  dump_stack_lvl+0x100/0x190
[  325.454770][T11086]  should_fail_ex.cold+0x5/0xa
[  325.454809][T11086]  _copy_from_user+0x2e/0xd0
[  325.454829][T11086]  __ia32_compat_sys_socketcall+0x187/0x770
[  325.454850][T11086]  ? __fget_files+0x21f/0x3d0
[  325.454865][T11086]  ? __pfx___ia32_compat_sys_socketcall+0x10/0x10
[  325.454887][T11086]  ? fput+0x7c/0x100
[  325.454903][T11086]  ? ksys_write+0x1ac/0x250
[  325.454915][T11086]  ? __pfx_ksys_write+0x10/0x10
[  325.454932][T11086]  do_int80_emulation+0x166/0x650
[  325.454954][T11086]  asm_int80_emulation+0x1a/0x20
[  325.454968][T11086] RIP: 0023:0xf71e75ab
[  325.454979][T11086] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  325.454993][T11086] RSP: 002b:00000000f54a534c EFLAGS: 00000246 ORIG_RAX: 0000000000000066
[  325.455007][T11086] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f54a53f4
[  325.455015][T11086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  325.455037][T11086] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  325.455045][T11086] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  325.455053][T11086] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  325.455069][T11086]  </TASK>
[  325.465376][ T6545] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  325.828825][   T38] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  325.833967][T11089] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  325.875839][ T5927] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  325.997796][   T10] tipc: Node number set to 4278190081
[  326.047049][ T5927] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  326.048243][ T5927] usb 10-1: config index 0 descriptor too short (expected 45, got 36)
[  326.048285][ T5927] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10
[  326.048307][ T5927] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024
[  326.048331][ T5927] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  326.048366][ T5927] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.050595][ T5927] usb 10-1: config 0 descriptor??
[  326.495624][ T6544] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  326.495770][ T6544] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  326.573967][T11104] FAULT_INJECTION: forcing a failure.
[  326.573967][T11104] name failslab, interval 1, probability 0, space 0, times 0
[  326.574022][T11104] CPU: 3 UID: 0 PID: 11104 Comm: syz.0.1568 Not tainted syzkaller #0 PREEMPT(full) 
[  326.574049][T11104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  326.574059][T11104] Call Trace:
[  326.574064][T11104]  <TASK>
[  326.574069][T11104]  dump_stack_lvl+0x100/0x190
[  326.574090][T11104]  should_fail_ex.cold+0x5/0xa
[  326.574107][T11104]  should_failslab+0xc2/0x120
[  326.574124][T11104]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  326.574139][T11104]  ? find_held_lock+0x2b/0x80
[  326.574153][T11104]  ? alloc_io_context+0x21/0x2f0
[  326.574170][T11104]  alloc_io_context+0x21/0x2f0
[  326.574183][T11104]  set_task_ioprio+0x49e/0x670
[  326.574197][T11104]  __do_sys_ioprio_set+0x74c/0xb40
[  326.574218][T11104]  __do_fast_syscall_32+0x13a/0x8b0
[  326.574236][T11104]  ? lockdep_hardirqs_on+0x7d/0x110
[  326.574253][T11104]  do_fast_syscall_32+0x32/0x70
[  326.574270][T11104]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  326.574286][T11104] RIP: 0023:0xf7f74fec
[  326.574299][T11104] Code: Unable to access opcode bytes at 0xf7f74fc2.
[  326.574306][T11104] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000121
[  326.574319][T11104] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000000
[  326.574326][T11104] RDX: 0000000000004004 RSI: 0000000000000000 RDI: 0000000000000000
[  326.574334][T11104] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  326.574344][T11104] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  326.574354][T11104] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  326.574369][T11104]  </TASK>
[  326.973488][ T5927] usbhid 10-1:0.0: can't add hid device: -71
[  326.973598][ T5927] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  327.114596][   T42] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  327.217286][ T8386] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  327.220068][T11114] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  327.323848][ T5927] usb 10-1: USB disconnect, device number 8
[  327.448614][T11118] FAULT_INJECTION: forcing a failure.
[  327.448614][T11118] name failslab, interval 1, probability 0, space 0, times 0
[  327.448667][T11118] CPU: 1 UID: 0 PID: 11118 Comm: syz.4.1572 Not tainted syzkaller #0 PREEMPT(full) 
[  327.448694][T11118] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  327.448703][T11118] Call Trace:
[  327.448708][T11118]  <TASK>
[  327.448713][T11118]  dump_stack_lvl+0x100/0x190
[  327.448735][T11118]  should_fail_ex.cold+0x5/0xa
[  327.448751][T11118]  should_failslab+0xc2/0x120
[  327.448767][T11118]  __kmalloc_noprof+0xfc/0x840
[  327.448780][T11118]  ? rcu_is_watching+0x13/0xc0
[  327.448791][T11118]  ? tomoyo_realpath_from_path+0xb6/0x690
[  327.448813][T11118]  tomoyo_realpath_from_path+0xb6/0x690
[  327.448834][T11118]  tomoyo_path_number_perm+0x23c/0x580
[  327.448849][T11118]  ? tomoyo_path_number_perm+0x22e/0x580
[  327.448866][T11118]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  327.448882][T11118]  ? get_pid_task+0x106/0x250
[  327.448898][T11118]  ? __lock_acquire+0x4c5/0x1ec0
[  327.448920][T11118]  ? __fget_files+0x34/0x3d0
[  327.448933][T11118]  ? find_held_lock+0x2b/0x80
[  327.448944][T11118]  ? __fget_files+0x215/0x3d0
[  327.448955][T11118]  ? hook_file_ioctl_common+0x140/0x440
[  327.448970][T11118]  ? __fget_files+0x215/0x3d0
[  327.448984][T11118]  ? __fget_files+0x21f/0x3d0
[  327.448998][T11118]  security_file_ioctl_compat+0xd3/0x230
[  327.449016][T11118]  __ia32_compat_sys_ioctl+0xc2/0x360
[  327.449036][T11118]  __do_fast_syscall_32+0x13a/0x8b0
[  327.449052][T11118]  ? lockdep_hardirqs_on+0x7d/0x110
[  327.449068][T11118]  do_fast_syscall_32+0x32/0x70
[  327.449088][T11118]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  327.449104][T11118] RIP: 0023:0xf7fe5fec
[  327.449118][T11118] Code: Unable to access opcode bytes at 0xf7fe5fc2.
[  327.449124][T11118] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  327.449135][T11118] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c008ae88
[  327.449143][T11118] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000
[  327.449149][T11118] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  327.449156][T11118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  327.449163][T11118] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  327.449177][T11118]  </TASK>
[  327.449258][T11118] ERROR: Out of memory at tomoyo_realpath_from_path.
[  327.965749][  T607] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  327.965869][T11122] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  328.505234][   T58] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  328.655627][   T58] usb 5-1: Using ep0 maxpacket: 8
[  328.656528][   T58] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  328.657398][   T58] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  328.657416][   T58] usb 5-1: config 0 has no interface number 0
[  328.657439][   T58] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  328.657453][   T58] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  328.657469][   T58] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  328.657486][   T58] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  328.657510][   T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.674911][   T58] usb 5-1: config 0 descriptor??
[  328.682297][   T58] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  329.154983][T11142] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  329.160251][T11142] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  329.500160][ T8384] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  329.505409][T11145] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  329.513051][T11146] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  329.513116][T11146] CIFS mount error: No usable UNC path provided in device string!
[  329.513116][T11146] 
[  329.513321][T11146] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  329.572599][T11143] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  329.572661][T11143] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.588148][T11146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1580'.
[  329.609756][T11146] hsr_slave_1 (unregistering): left promiscuous mode
[  329.629444][T11134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1577'.
[  329.686886][T11143] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  329.687049][T11143] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.735839][T11153] FAULT_INJECTION: forcing a failure.
[  329.735839][T11153] name failslab, interval 1, probability 0, space 0, times 0
[  329.735882][T11153] CPU: 1 UID: 0 PID: 11153 Comm: syz.4.1583 Not tainted syzkaller #0 PREEMPT(full) 
[  329.735897][T11153] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  329.735905][T11153] Call Trace:
[  329.735909][T11153]  <TASK>
[  329.735914][T11153]  dump_stack_lvl+0x100/0x190
[  329.735935][T11153]  should_fail_ex.cold+0x5/0xa
[  329.735951][T11153]  should_failslab+0xc2/0x120
[  329.735965][T11153]  kmem_cache_alloc_noprof+0x92/0x6a0
[  329.735978][T11153]  ? __pfx_map_id_range_down+0x10/0x10
[  329.735993][T11153]  ? security_inode_alloc+0x3b/0x2c0
[  329.736010][T11153]  security_inode_alloc+0x3b/0x2c0
[  329.736024][T11153]  inode_init_always_gfp+0xc6f/0xfb0
[  329.736041][T11153]  alloc_inode+0x8e/0x250
[  329.736057][T11153]  new_inode+0x22/0x1c0
[  329.736073][T11153]  proc_pid_make_inode+0x22/0x160
[  329.736088][T11153]  proc_pid_make_base_inode.constprop.0+0x25/0x180
[  329.736104][T11153]  proc_task_instantiate+0x51/0x1e0
[  329.736119][T11153]  proc_task_lookup+0x4c2/0x5c0
[  329.736134][T11153]  __lookup_slow+0x155/0x320
[  329.736152][T11153]  lookup_slow+0x50/0x70
[  329.736167][T11153]  link_path_walk+0x1712/0x1cc0
[  329.736190][T11153]  path_openat+0x1ac/0x2440
[  329.736204][T11153]  ? __pfx_path_openat+0x10/0x10
[  329.736220][T11153]  do_file_open+0x20e/0x430
[  329.736234][T11153]  ? __pfx_do_file_open+0x10/0x10
[  329.736251][T11153]  ? __pfx_kfree_link+0x10/0x10
[  329.736265][T11153]  ? _raw_spin_unlock+0x28/0x50
[  329.736278][T11153]  ? alloc_fd+0x471/0x7a0
[  329.736294][T11153]  do_sys_openat2+0x10f/0x1e0
[  329.736309][T11153]  ? __pfx_do_sys_openat2+0x10/0x10
[  329.736326][T11153]  ? __ia32_sys_futex_time32+0x2f4/0x470
[  329.736338][T11153]  ? __ia32_sys_futex_time32+0x2fd/0x470
[  329.736351][T11153]  __ia32_compat_sys_openat+0x12d/0x210
[  329.736367][T11153]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  329.736389][T11153]  do_int80_emulation+0x166/0x650
[  329.736413][T11153]  asm_int80_emulation+0x1a/0x20
[  329.736437][T11153] RIP: 0023:0xf71e75ab
[  329.736447][T11153] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  329.736458][T11153] RSP: 002b:00000000f54a64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  329.736469][T11153] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f72b1b2e
[  329.736476][T11153] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[  329.736483][T11153] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  329.736489][T11153] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  329.736581][T11153] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  329.736596][T11153]  </TASK>
[  329.797583][T11143] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  329.797696][T11143] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.840849][T11159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1585'.
[  329.937064][ T9391] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  329.937164][ T9391] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  329.945373][ T6544] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  329.945443][ T6544] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  329.955975][ T6544] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  329.956112][ T6544] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  329.975381][ T6544] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  329.975464][ T6544] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  330.072390][T11169] FAULT_INJECTION: forcing a failure.
[  330.072390][T11169] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  330.072473][T11169] CPU: 1 UID: 0 PID: 11169 Comm: syz.3.1589 Not tainted syzkaller #0 PREEMPT(full) 
[  330.072512][T11169] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  330.072525][T11169] Call Trace:
[  330.072533][T11169]  <TASK>
[  330.072542][T11169]  dump_stack_lvl+0x100/0x190
[  330.072573][T11169]  should_fail_ex.cold+0x5/0xa
[  330.072598][T11169]  _copy_from_user+0x2e/0xd0
[  330.072622][T11169]  get_compat_msghdr+0xb3/0x480
[  330.072649][T11169]  ? __pfx_get_compat_msghdr+0x10/0x10
[  330.072685][T11169]  ___sys_sendmsg+0x1b6/0x1e0
[  330.072715][T11169]  ? __pfx____sys_sendmsg+0x10/0x10
[  330.072754][T11169]  ? find_held_lock+0x2b/0x80
[  330.072791][T11169]  __sys_sendmsg+0x160/0x210
[  330.072814][T11169]  ? __pfx___sys_sendmsg+0x10/0x10
[  330.072843][T11169]  ? __pfx_ksys_write+0x10/0x10
[  330.072868][T11169]  __do_fast_syscall_32+0x13a/0x8b0
[  330.072901][T11169]  ? lockdep_hardirqs_on+0x7d/0x110
[  330.072927][T11169]  do_fast_syscall_32+0x32/0x70
[  330.072952][T11169]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  330.072975][T11169] RIP: 0023:0xf7fe8fec
[  330.072997][T11169] Code: Unable to access opcode bytes at 0xf7fe8fc2.
[  330.073006][T11169] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  330.073026][T11169] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040
[  330.073038][T11169] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  330.073050][T11169] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  330.073061][T11169] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  330.073073][T11169] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  330.073115][T11169]  </TASK>
[  330.175534][    C2] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  330.219696][ T1646] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  330.367048][ T1646] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  330.367871][ T1646] usb 9-1: config index 0 descriptor too short (expected 45, got 36)
[  330.367899][ T1646] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10
[  330.367919][ T1646] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024
[  330.367932][ T1646] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  330.367952][ T1646] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.369093][ T1646] usb 9-1: config 0 descriptor??
[  330.508391][ T1161] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  330.508683][T11173] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  330.563589][T11186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1595'.
[  331.056320][ T1646] usbhid 9-1:0.0: can't add hid device: -71
[  331.056398][ T1646] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  331.057607][ T1646] usb 9-1: USB disconnect, device number 11
[  331.260100][ T5828] usb 5-1: USB disconnect, device number 33
[  331.373981][T11199] syzkaller0: entered promiscuous mode
[  331.376026][T11199] syzkaller0: entered allmulticast mode
[  331.466382][ T5828] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  331.675370][ T1161] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  331.678958][T11201] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  331.997742][T11209] syzkaller0: entered promiscuous mode
[  331.999721][T11209] syzkaller0: entered allmulticast mode
[  332.029072][   T43] kauditd_printk_skb: 23 callbacks suppressed
[  332.029161][   T43] audit: type=1326 audit(1788539762.832:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11210 comm="syz.3.1603" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x7ffc0000
[  332.029195][   T43] audit: type=1326 audit(1788539762.832:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11210 comm="syz.3.1603" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x7ffc0000
[  332.049385][   T43] audit: type=1326 audit(1788539762.852:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11210 comm="syz.3.1603" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x7ffc0000
[  332.049481][   T43] audit: type=1326 audit(1788539762.852:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11210 comm="syz.3.1603" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x7ffc0000
[  332.049565][   T43] audit: type=1326 audit(1788539762.852:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11210 comm="syz.3.1603" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fe8fec code=0x7ffc0000
[  332.049597][   T43] audit: type=1326 audit(1788539762.852:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11210 comm="syz.3.1603" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x7ffc0000
[  332.059124][   T43] audit: type=1326 audit(1788539762.862:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11210 comm="syz.3.1603" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x7ffc0000
[  332.059157][   T43] audit: type=1326 audit(1788539762.862:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11210 comm="syz.3.1603" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x7ffc0000
[  332.120829][   T43] audit: type=1326 audit(1788539762.922:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11210 comm="syz.3.1603" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fe8fec code=0x7ffc0000
[  332.120925][   T43] audit: type=1326 audit(1788539762.922:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11210 comm="syz.3.1603" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x7ffc0000
[  332.139996][T11211] Config c/1 of g1 needs at least one function.
[  332.143881][T11211] udc dummy_udc.0: failed to start g1: -22
[  332.146048][T11211] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[  332.154595][T11211] UDC core: g1: couldn't find an available UDC or it's busy
[  332.342510][T11211] XFS (nullb0): Invalid superblock magic number
[  332.352452][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1604'.
[  332.872738][ T8384] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  332.873120][T11213] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  333.249685][ T8386] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  333.254596][T11230] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  333.985919][ T7094] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  334.105350][ T5841] usb 8-1: new high-speed USB device number 39 using dummy_hcd
[  334.135304][ T7094] usb 10-1: Using ep0 maxpacket: 8
[  334.139538][ T7094] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  334.154579][ T7094] usb 10-1: config 0 has an invalid interface number: 55 but max is 0
[  334.155753][ T7094] usb 10-1: config 0 has no interface number 0
[  334.155776][ T7094] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  334.155954][ T7094] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  334.156025][ T7094] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  334.156040][ T7094] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  334.156064][ T7094] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.186007][ T7094] usb 10-1: config 0 descriptor??
[  334.247625][ T7094] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  334.265839][ T5841] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  334.270323][ T5841] usb 8-1: config index 0 descriptor too short (expected 45, got 36)
[  334.273347][ T5841] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10
[  334.277692][ T5841] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024
[  334.281589][ T5841] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  334.285978][ T5841] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.299533][ T5841] usb 8-1: config 0 descriptor??
[  334.334211][T11250] syzkaller0: entered promiscuous mode
[  334.334308][T11250] syzkaller0: entered allmulticast mode
[  334.616737][T11255] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1611'.
[  334.801231][ T1161] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  334.801990][T11252] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  334.922406][ T5841] usbhid 8-1:0.0: can't add hid device: -71
[  334.922549][ T5841] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  334.933292][ T5841] usb 8-1: USB disconnect, device number 39
[  335.492892][   T58] usb 10-1: USB disconnect, device number 9
[  335.498373][   T58] ldusb 10-1:0.55: LD USB Device #0 now disconnected
[  336.292027][ T8385] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  336.292169][T11266] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  336.465322][T11279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1618'.
[  337.216073][    C2] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  337.555056][ T8385] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  337.561026][T11301] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  337.718965][T11306] FAULT_INJECTION: forcing a failure.
[  337.718965][T11306] name failslab, interval 1, probability 0, space 0, times 0
[  337.719044][T11306] CPU: 0 UID: 0 PID: 11306 Comm: syz.0.1626 Not tainted syzkaller #0 PREEMPT(full) 
[  337.719070][T11306] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  337.719080][T11306] Call Trace:
[  337.719085][T11306]  <TASK>
[  337.719090][T11306]  dump_stack_lvl+0x100/0x190
[  337.719110][T11306]  should_fail_ex.cold+0x5/0xa
[  337.719126][T11306]  should_failslab+0xc2/0x120
[  337.719141][T11306]  kmem_cache_alloc_noprof+0x92/0x6a0
[  337.719155][T11306]  ? do_getname+0x35/0x390
[  337.719174][T11306]  do_getname+0x35/0x390
[  337.719191][T11306]  do_sys_openat2+0xc7/0x1e0
[  337.719208][T11306]  ? __pfx_do_sys_openat2+0x10/0x10
[  337.719224][T11306]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  337.719242][T11306]  ? __fget_files+0x21f/0x3d0
[  337.719270][T11306]  __ia32_compat_sys_openat+0x12d/0x210
[  337.719289][T11306]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  337.719306][T11306]  ? ksys_write+0x1ac/0x250
[  337.719323][T11306]  do_int80_emulation+0x166/0x650
[  337.719340][T11306]  asm_int80_emulation+0x1a/0x20
[  337.719352][T11306] RIP: 0023:0xf71775ab
[  337.719363][T11306] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  337.719375][T11306] RSP: 002b:00000000f54153cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  337.719387][T11306] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5415490
[  337.719394][T11306] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[  337.719401][T11306] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  337.719408][T11306] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  337.719420][T11306] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  337.719435][T11306]  </TASK>
[  338.315065][T11318] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1632'.
[  338.377676][T11319] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb
[  338.496280][ T5828] usb 8-1: new full-speed USB device number 40 using dummy_hcd
[  338.505417][   T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  338.645980][ T5828] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  338.646895][ T5828] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  338.646910][ T5828] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  338.653299][ T5828] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.653318][ T5828] usb 8-1: Product: syz
[  338.653327][ T5828] usb 8-1: Manufacturer: syz
[  338.653335][ T5828] usb 8-1: SerialNumber: syz
[  338.656570][   T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  338.657734][   T10] usb 5-1: config index 0 descriptor too short (expected 45, got 36)
[  338.657767][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10
[  338.657782][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024
[  338.657798][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  338.657827][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.699727][ T5828] usb 8-1: 0:2 : does not exist
[  338.704830][   T10] usb 5-1: config 0 descriptor??
[  338.905776][T11312] tmpfs: Bad value for 'mpol'
[  338.915681][ T5828] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[  338.960894][ T5828] usb 8-1: USB disconnect, device number 40
[  339.007127][ T5748] udevd[5748]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  339.117351][ T8384] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  339.124264][T11327] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  339.538680][   T10] usbhid 5-1:0.0: can't add hid device: -71
[  339.539650][   T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  339.564093][   T10] usb 5-1: USB disconnect, device number 34
[  339.712973][T11339] syzkaller0: entered promiscuous mode
[  339.713036][T11339] syzkaller0: entered allmulticast mode
[  340.179705][ T7094] kernel read not supported for file /video9 (pid: 7094 comm: kworker/3:4)
[  340.473244][T11351] FAULT_INJECTION: forcing a failure.
[  340.473244][T11351] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  340.473350][T11351] CPU: 0 UID: 0 PID: 11351 Comm: syz.5.1643 Not tainted syzkaller #0 PREEMPT(full) 
[  340.473384][T11351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  340.473397][T11351] Call Trace:
[  340.473404][T11351]  <TASK>
[  340.473411][T11351]  dump_stack_lvl+0x100/0x190
[  340.473444][T11351]  should_fail_ex.cold+0x5/0xa
[  340.473468][T11351]  _copy_from_user+0x2e/0xd0
[  340.473490][T11351]  get_compat_msghdr+0xb3/0x480
[  340.473518][T11351]  ? __pfx_get_compat_msghdr+0x10/0x10
[  340.473551][T11351]  ___sys_sendmsg+0x1b6/0x1e0
[  340.473586][T11351]  ? __pfx____sys_sendmsg+0x10/0x10
[  340.473629][T11351]  ? find_held_lock+0x2b/0x80
[  340.473664][T11351]  __sys_sendmsg+0x160/0x210
[  340.473685][T11351]  ? __pfx___sys_sendmsg+0x10/0x10
[  340.473712][T11351]  ? __pfx_ksys_write+0x10/0x10
[  340.473735][T11351]  __do_fast_syscall_32+0x13a/0x8b0
[  340.473761][T11351]  ? lockdep_hardirqs_on+0x7d/0x110
[  340.473785][T11351]  do_fast_syscall_32+0x32/0x70
[  340.473810][T11351]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  340.473833][T11351] RIP: 0023:0xf70aefec
[  340.473854][T11351] Code: Unable to access opcode bytes at 0xf70aefc2.
[  340.473863][T11351] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  340.473882][T11351] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200
[  340.473893][T11351] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  340.473904][T11351] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  340.473914][T11351] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  340.473926][T11351] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  340.473949][T11351]  </TASK>
[  340.826374][ T9391] netdevsim netdevsim10 eth4: set [0, 0] type 1 family 0 port 8472 - 0
[  340.826847][ T9391] netdevsim netdevsim10 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  340.878880][   T38] Bluetooth: hci5: Frame reassembly failed (-84)
[  341.458436][   T66] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  341.508216][T11380] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1650'.
[  342.032520][T11400] jffs2: notice: (11400) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  342.043823][T11397] BUG: unable to handle page fault for address: fffffffffffffc10
[  342.046441][T11397] #PF: supervisor read access in kernel mode
[  342.049582][T11397] #PF: error_code(0x0000) - not-present page
[  342.053388][T11397] PGD eb99067 P4D eb99067 PUD eb9b067 PMD 0 
[  342.055696][T11397] Oops: Oops: 0000 [#1] SMP KASAN NOPTI
[  342.058038][T11397] CPU: 1 UID: 0 PID: 11397 Comm: syz.0.1658 Not tainted syzkaller #0 PREEMPT(full) 
[  342.061428][T11397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  342.065022][T11397] RIP: 0010:strnlen+0x4b/0x80
[  342.066801][T11397] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c c3 cc cc cc cc 48
[  342.073080][T11397] RSP: 0018:ffffc90002ea70e8 EFLAGS: 00010246
[  342.075130][T11397] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000
[  342.077812][T11397] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10
[  342.081074][T11397] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000
[  342.084490][T11397] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10
[  342.087188][T11397] R13: ffff88801c6f3e00 R14: 0000000000000006 R15: 0000000000000010
[  342.089804][T11397] FS:  0000000000000000(0000) GS:ffff888096a64000(0063) knlGS:00000000f5436b40
[  342.092766][T11397] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  342.095000][T11397] CR2: fffffffffffffc10 CR3: 0000000053f4e000 CR4: 0000000000352ef0
[  342.097587][T11397] Call Trace:
[  342.098789][T11397]  <TASK>
[  342.099900][T11397]  trace_event_raw_event_drv_net_setup_tc+0x101/0x5d0
[  342.102293][T11397]  ? __pfx_trace_event_raw_event_drv_net_setup_tc+0x10/0x10
[  342.105056][T11397]  ? __pfx___might_resched+0x10/0x10
[  342.107374][T11397]  ? __mutex_lock+0x26c/0x1bd0
[  342.109138][T11397]  ieee80211_netdev_setup_tc+0x2c6/0x3e0
[  342.110959][T11397]  ? __pfx_ieee80211_netdev_setup_tc+0x10/0x10
[  342.112931][T11397]  tcf_block_offload_cmd.isra.0+0x1c4/0x310
[  342.114857][T11397]  ? __pfx_tcf_block_offload_cmd.isra.0+0x10/0x10
[  342.116874][T11397]  ? __pfx_down_write+0x10/0x10
[  342.118542][T11397]  tcf_block_get_ext+0x7ed/0x1950
[  342.120388][T11397]  tcf_block_get+0xa8/0x100
[  342.122210][T11397]  ? __pfx_tcf_block_get+0x10/0x10
[  342.124409][T11397]  ? __pfx_tcf_chain_head_change_dflt+0x10/0x10
[  342.126640][T11397]  ? lockdep_init_map_type+0x5c/0x250
[  342.128409][T11397]  fq_codel_init+0x4a5/0x9d0
[  342.129933][T11397]  ? qdisc_alloc+0x81b/0xb30
[  342.131422][T11397]  ? __pfx_fq_codel_init+0x10/0x10
[  342.133023][T11397]  qdisc_create+0x47b/0x1060
[  342.134494][T11397]  tc_modify_qdisc+0xdcf/0x2120
[  342.136063][T11397]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  342.137866][T11397]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  342.139758][T11397]  rtnetlink_rcv_msg+0x3c9/0xe90
[  342.141607][T11397]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  342.143751][T11397]  ? ref_tracker_free+0x37e/0x6c0
[  342.145441][T11397]  netlink_rcv_skb+0x159/0x420
[  342.146967][T11397]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  342.148648][T11397]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  342.150290][T11397]  ? netlink_deliver_tap+0x1ae/0xcc0
[  342.152011][T11397]  netlink_unicast+0x585/0x850
[  342.153559][T11397]  ? __pfx_netlink_unicast+0x10/0x10
[  342.155360][T11397]  netlink_sendmsg+0x8b0/0xda0
[  342.156984][T11397]  ? __pfx_netlink_sendmsg+0x10/0x10
[  342.158903][T11397]  ? apparmor_socket_sendmsg+0x165/0x280
[  342.160961][T11397]  ____sys_sendmsg+0xa4d/0xbe0
[  342.162707][T11397]  ? __pfx_netlink_sendmsg+0x10/0x10
[  342.164455][T11397]  ? __pfx_____sys_sendmsg+0x10/0x10
[  342.166137][T11397]  ___sys_sendmsg+0x190/0x1e0
[  342.167649][T11397]  ? __pfx____sys_sendmsg+0x10/0x10
[  342.169282][T11397]  ? futex_wait+0x11e/0x370
[  342.170730][T11397]  ? find_held_lock+0x2b/0x80
[  342.172193][T11397]  __sys_sendmsg+0x160/0x210
[  342.173697][T11397]  ? __pfx___sys_sendmsg+0x10/0x10
[  342.175515][T11397]  __do_fast_syscall_32+0x13a/0x8b0
[  342.177444][T11397]  do_fast_syscall_32+0x32/0x70
[  342.179374][T11397]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  342.181734][T11397] RIP: 0023:0xf7f74fec
[  342.183112][T11397] Code: Unable to access opcode bytes at 0xf7f74fc2.
[  342.185206][T11397] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  342.187817][T11397] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800012c0
[  342.190273][T11397] RDX: 0000000020008850 RSI: 0000000000000000 RDI: 0000000000000000
[  342.192797][T11397] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  342.195317][T11397] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  342.197853][T11397] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  342.201507][T11397]  </TASK>
[  342.203093][T11397] Modules linked in:
[  342.204546][T11397] CR2: fffffffffffffc10
[  342.206000][T11397] ---[ end trace 0000000000000000 ]---
[  342.207911][T11397] RIP: 0010:strnlen+0x4b/0x80
[  342.207939][T11397] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c c3 cc cc cc cc 48
[  342.207952][T11397] RSP: 0018:ffffc90002ea70e8 EFLAGS: 00010246
[  342.207964][T11397] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000
[  342.207973][T11397] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10
[  342.207980][T11397] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000
[  342.207988][T11397] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10
[  342.207996][T11397] R13: ffff88801c6f3e00 R14: 0000000000000006 R15: 0000000000000010
[  342.208004][T11397] FS:  0000000000000000(0000) GS:ffff888096a64000(0063) knlGS:00000000f5436b40
[  342.208027][T11397] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  342.208038][T11397] CR2: 00000000f7f75000 CR3: 0000000053f4e000 CR4: 0000000000352ef0
[  342.208046][T11397] Kernel panic - not syncing: Fatal exception
[  342.243087][T11397] Kernel Offset: disabled
[  342.244729][T11397] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:36:13  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000080000 RBX=0000000000000000 RCX=ffffc9002f851000 RDX=0000000000080000
RSI=ffffffff89df7bb5 RDI=ffffffff8d40a5e0 RBP=ffff888029cca580 RSP=ffffc90002ad7758
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000003
R12=1ffff9200055aefb R13=ffffc90002a4e000 R14=ffffc90002ad78a8 R15=dffffc0000000000
RIP=ffffffff8bd0f660 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888096964000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000000c43c260 CR3=000000006806c000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85ae3a25 RDI=ffffffff9bc531e0 RBP=ffffffff9bc531a0 RSP=ffffc90002ea67f8
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023
R12=0000000000000000 R13=0000000000000020 R14=0000000000000002 R15=ffffc90002ea6b10
RIP=ffffffff85ae3a4f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888096a64000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=fffffffffffffc10 CR3=0000000053f4e000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000055400000000 0000001300000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000345794 RBX=ffff88801cbfa580 RCX=ffffffff8bcdc115 RDX=0000000000000001
RSI=ffffffff8c622400 RDI=ffffffff81dfaf4e RBP=ffffed100397f4b0 RSP=ffffc9000048fe00
R8 =0000000000000000 R9 =ffffed10056867bd R10=ffff88802b433deb R11=ffffffff81d697b9
R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=dffffc0000000000
RIP=ffffffff8bcda6bf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096b64000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fe93c2d9380 CR3=0000000024e24000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000004000001 Opmask01=0000000000000001 Opmask02=0000000000001000 Opmask03=0000000000000000
Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd02f5c64b 00007ffd02f5c64b
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd02f5cb50 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd02f5cb50 0000003000000018
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 205b3e343c006538 78302f343878302b 656d61726677685f 72657466615f7400
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2051343436006532 7230253432723021 6567617266776255 7265746661557400
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7561662065676170 20656c646e616820 6f7420656c62616e 75203a475542205d
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e646e756f662029 6e616870726f2030 202c646165642030 2820666572782066
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f203020646e6120 296e616870726f20 30202c64656b6365 68636e7520302820
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d75746164782066 6f2030202c6d6574 7379736275732072 7474617820676e69
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 646c697562206574 656c706d6f63203a 6d65747379736275 735f72747461785f
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65636361206f7420 7463656c61696420 31424d5320657275 636573207373656c
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=ffffc90000415000 RBX=ffff888029004c00 RCX=0000000001000000 RDX=1ffff11005200a09
RSI=ffffffff86be2124 RDI=ffff888029005048 RBP=0000000000000001 RSP=ffffc90004e77dd0
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=ffffc90000415008 R13=dffffc0000000000 R14=ffff888029005038 R15=0000000000000000
RIP=ffffffff86be2172 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888096c64000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7fda190 CR3=000000006806c000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000016400000000 0000000300000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000