last executing test programs:

7.603108858s ago: executing program 1 (id=3254):
r0 = socket(0x1e, 0x1, 0x0)
connect$tipc(r0, &(0x7f0000000180)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r0, &(0x7f00000001c0), 0x2000011a)
write(r0, &(0x7f0000000200)="b4", 0x1)
recvmmsg$unix(r0, 0x0, 0x0, 0x121, 0x0)

7.483576454s ago: executing program 1 (id=3255):
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x1)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)
r1 = openat$pfkey(0xffffff9c, &(0x7f0000000040), 0x402280, 0x0)
syz_usb_connect(0x2, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x36, 0xbd, 0xb7, 0x20, 0x20f4, 0x624d, 0x1750, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x2, 0x3, 0x7, 0x60, 0xf, "", [{{0x9, 0x4, 0xeb, 0xa, 0x2, 0xb9, 0x65, 0x15, 0x9, [], [{{0x9, 0x5, 0xb, 0x5cac415b26e4add7, 0x40, 0x7, 0x2, 0x8b}}, {{0x9, 0x5, 0x0, 0x2, 0x200, 0x1, 0x40, 0x2}}]}}, {{0x9, 0x4, 0x82, 0x80, 0x0, 0xfc, 0xb4, 0x59, 0x40}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x16}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8004}, 0x4)

7.123698672s ago: executing program 2 (id=3256):
clock_gettime(0x7, &(0x7f00000009c0))
io_setup(0x6, &(0x7f00000000c0))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, &(0x7f00000005c0))
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r4)
getsockname$packet(r4, &(0x7f0000000580)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000100)=@newtfilter={0xe0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xefe58de28999decf}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x8c, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x2}, @TCA_FLOW_EMATCHES={0x58, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7, 0x8, 0x8}, {0x2, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0xfc, 0x2, 0x101}, {0x6b, 0x1, 0x2, 'X'}}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0xa, 0x2, 0x6}, {0x100, 0x0, 0x1}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xfffa, 0x8, 0x9}, {0x0, 0x4, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1000}}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x8, 0xb}}, @TCA_FLOW_XOR={0x8, 0x7, 0x28000}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xf}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x16bc}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x3}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0x2}}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x400c040}, 0x4000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000004a80)='./mnt\x00', 0x1ff)
mount(&(0x7f0000004ac0)=@filename='ubi0_0\x00', &(0x7f0000004b00)='./mnt\x00', &(0x7f0000004b40)='ubifs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004b80)='./file1\x00', 0x542, 0x0)
pwritev2(r6, &(0x7f0000004bc0)=[{&(0x7f0000004c00)=')', 0x1}], 0x1, 0x2, 0x0, 0xa1)
ioctl$KVM_CAP_X86_GUEST_MODE(r6, 0x4068aea3, &(0x7f0000004c40))
sendmsg$nl_route_sched(r1, &(0x7f0000004cc0)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004d40)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x20, {0x0, 0x0, 0x74, r5, {0x0, 0x3}, {0x4, 0xb}, {0x9, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x30000080)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
mount$9p_virtio(&(0x7f0000004ec0), &(0x7f0000004f00)='.\x00', &(0x7f0000004f40), 0x4, &(0x7f0000004f80)=ANY=[@ANYBLOB='trans=virtio,cache=0x00'])

6.592155465s ago: executing program 0 (id=3259):
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x8000}, 0x1c)
listen(0xffffffffffffffff, 0x7c2)
syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0c080045a000284000000004069078000000000a0101014e214e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="501900e89dd63bc7ca6c527cbf03df8cc390780000"], 0x0)
add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000140), &(0x7f0000000500), 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x110)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000065c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000006580)={&(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x3a8}, 0x1, 0x0, 0x0, 0x880}, 0x4800)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$vnet(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x8, 0x0, 0x1, 0x7f, 0x6, @random="2d22aece4334"}, 0x14)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r3, 0x0, 0x25, 0x8, @void}, 0x10)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000780))
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000007c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000800)={0x0, 0x0, 0x0})
r6 = dup3(r5, r4, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000008c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000900)={0x73622a85, 0x100, 0x1})

5.869763209s ago: executing program 1 (id=3261):
syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0)
syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x1, 0x4000)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x30b5, 0x0, 0x2, 0x1000158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYBLOB="e89732c5205c122b39a3254cf3df3b3a48ba421243236804c610f919363761d7e99d5139e14f10cf", @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000580)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000c5b3ba", @ANYRES16=0x0, @ANYBLOB="010026bd7000fddbdf253500000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000805d0000000a000600da7c16575b9200001400fe005dc5eb5d9f9639c9fd3916264dc6646a0a000600db170b0c98a200001400fe007fbe3f323d9d46d5abef236bd3784b7d1400550083a1c5c0e033909a1b6c752c089648f80500200155000000"], 0x84}}, 0x40004010)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x5694, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe27, 0x0, 0x0, 0x1000, 0x10004, 0xffffffffffffffff, 0x0, 0x14b}}}, &(0x7f0000000480))
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x0)
sigaltstack(&(0x7f0000000940)={&(0x7f0000000d00)=""/4096, 0x0, 0x1000}, 0x0)
sigaltstack(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000001d40)='./debug\x00', &(0x7f0000001d80)='debugfs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000001dc0)='./debug/split_huge_pages\x00', 0x1, 0x0)
write$FUSE_IOCTL(r8, 0x0, 0x2f)
r9 = inotify_init1(0x800)
mkdirat(0xffffffffffffff9c, &(0x7f0000001e00)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000001e40)='./proc_mnt\x00', &(0x7f0000001e80)='proc\x00', 0x0, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f0000001ec0)='./proc_mnt/sys/net/ipv4/vs/svc_lfactor\x00', 0x101002, 0x0)
sendfile(r10, r10, 0x0, 0xf2)
inotify_add_watch(r9, &(0x7f0000001f00)='./file0\x00', 0x40000000)
inotify_add_watch(r9, &(0x7f0000001f40)='./file0\x00', 0x2000080)

5.752751385s ago: executing program 2 (id=3262):
gettid() (async)
r0 = gettid()
timer_create(0x1, &(0x7f0000000000)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000400)) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1c1) (async)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x80, &(0x7f0000004e00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="37ca9aec21d6a54da8e4b359f8f9aef7f2c4458dd1fcd623a7b3194254e4816e0deaacadf823b4dfd23b5f86c2d7fb9b27412e923f423f48625a495b3566b323ec5b909fa60b348e81e838802ce427df3b56bcf49b6c899d554cd77f7a7d93408c76a1662a70a9eea4e435c4ee0c310c55fb9da819cd", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x2c) (async)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000480)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002500)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002540)={0x4, &(0x7f0000000200)=[{0x5, 0x0, 0x4, 0x3}, {0x7, 0x43, 0x3, 0xc}, {0xe, 0x3, 0x8, 0x6}, {0x7, 0x5, 0xa, 0x1}]}) (async)
r3 = add_key$keyring(&(0x7f00000025c0), &(0x7f0000002600)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000002640)='id_legacy\x00', &(0x7f0000002680)={'syz', 0x3}, &(0x7f0000004cc0)="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", 0xfffffffffffffed4, r3)
request_key(&(0x7f0000002780)='dns_resolver\x00', &(0x7f00000027c0)={'syz', 0x3}, 0x0, 0xfffffffffffffffd) (async)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002800)="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", 0x2000, &(0x7f0000004800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
getdents64(r2, 0x0, 0x0)
write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000004880)={0x2f, 0x6, 0x0, {0x1, 0x2, 0x6, 0x0, '\x9e\xaf\x82\xa7\x13&'}}, 0x2f) (async)
sendmsg$nl_route(r1, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004900)={&(0x7f0000004940)=@newlink={0x58, 0x10, 0x401, 0x400402, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc574450d1af3b5a4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24044054}, 0x4040) (async)
timer_settime(0x0, 0x1, &(0x7f00000049c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async)
r4 = mq_open(&(0x7f0000004a00)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000004a40)={0x2000000000002000, 0x1, 0x56, 0x3})
mq_timedsend(r4, 0x0, 0x0, 0x3, 0x0) (async)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000004a80)={'wg2\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000004ac0)={0x0, 0x0, &(0x7f0000004b00)={&(0x7f0000004b40)=@newqdisc={0x38, 0x24, 0x100, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xfff1}, {0xffe0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8850) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004bc0)={&(0x7f0000004c00)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0x302}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @loopback}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @private1={0xfc, 0x1, '\x00', 0x1}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041891}, 0x0) (async)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCGIFNETMASK(r7, 0x891b, &(0x7f0000004c80)={'vxcan1\x00', {0x2, 0x0, @private}}) (async)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c25000000001d2020207b1af8ff00000000bfa10000000000000701000046486458eec1e7f8ffffffb702000008000000b703000000000000850000001000000085100000050000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.751999516s ago: executing program 1 (id=3263):
socket(0x2, 0xa, 0x300)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000b80), 0x8, 0x10, &(0x7f0000000bc0), 0x10}, 0x94)
openat$sysctl(0xffffff9c, &(0x7f0000000c00)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000c40), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c80)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000cc0)='./sys\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000d80)='./config\x00', &(0x7f0000000dc0)='configfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000e40)='wwnn=0x1000000044001122,wwpn=0x2000000044001122', 0x2f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./config/nvmet/ports/1\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000f40)={'ip6gretap0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=@newlink={0x70, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r6}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x43}]}}}]}, 0x70}}, 0x0)
sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000001080)={0x11, 0x7, r6, 0x1, 0x0, 0x6, @local}, 0x14)
write(r3, &(0x7f00000010c0)='fc', 0x2)
r7 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r7, &(0x7f00000011c0)='nn-0x1000000044001122:pn-0x2000000044001122', 0x2b)
symlinkat(&(0x7f0000001200)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
openat$snapshot(0xffffffffffffff9c, &(0x7f00000012c0), 0x400, 0x0)
landlock_create_ruleset(&(0x7f0000001300)={0x7f6e}, 0x18, 0x0)

5.651912437s ago: executing program 0 (id=3264):
socket(0x2, 0xa, 0x300)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000b80), 0x8, 0x10, &(0x7f0000000bc0), 0x10}, 0x94)
openat$sysctl(0xffffff9c, &(0x7f0000000c00)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000c40), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c80)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000cc0)='./sys\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000d80)='./config\x00', &(0x7f0000000dc0)='configfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000e40)='wwnn=0x1000000044001122,wwpn=0x2000000044001122', 0x2f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./config/nvmet/ports/1\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000f40)={'ip6gretap0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=@newlink={0x70, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r6}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x43}]}}}]}, 0x70}}, 0x0)
sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000001080)={0x11, 0x7, r6, 0x1, 0x0, 0x6, @local}, 0x14)
write(r3, &(0x7f00000010c0)='fc', 0x2)
r7 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r7, &(0x7f00000011c0)='nn-0x1000000044001122:pn-0x2000000044001122', 0x2b)
symlinkat(&(0x7f0000001200)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
openat$snapshot(0xffffffffffffff9c, &(0x7f00000012c0), 0x400, 0x0)
landlock_create_ruleset(&(0x7f0000001300)={0x7f6e}, 0x18, 0x0)

5.252663629s ago: executing program 2 (id=3266):
r0 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000015}, 0xc844)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
write$nci(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x850003d1)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40042, 0x1)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
read$FUSE(r3, &(0x7f0000000880)={0x2020, 0x0, <r4=>0x0}, 0xfffffe14)
write$FUSE_INIT(r3, &(0x7f00000028c0)={0x50, 0x0, r4, {0x7, 0x1f, 0x8, 0x800002, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0xb3f97f6c43c4fec6, 0x8001}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f0000002940)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000004940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000049c0)={0x20, 0x0, 0xfffffffffffffffe, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000004a00)='./file0\x00', 0x22001, 0xa)
syz_fuse_handle_req(r3, &(0x7f0000004a40)="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", 0x2000, &(0x7f0000006a40)={&(0x7f0000006ac0)={0x50, 0x0, 0x4000009, {0x7, 0x2d, 0x5, 0x4c020844, 0xeea, 0x200a, 0x8, 0x6, 0x0, 0x0, 0x8, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
dup3(r3, r5, 0x6700000000000000)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r7, @ANYBLOB="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"], 0x1c8}}, 0x0)

2.734295829s ago: executing program 2 (id=3267):
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0xfffffff9, 0x3, 0x16, "006247f0cb6b4fca210200"})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x1)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)
r1 = openat$pfkey(0xffffff9c, &(0x7f0000000040), 0x402280, 0x0)
syz_usb_connect(0x2, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x36, 0xbd, 0xb7, 0x20, 0x20f4, 0x624d, 0x1750, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x2, 0x3, 0x7, 0x60, 0xf, "", [{{0x9, 0x4, 0xeb, 0xa, 0x2, 0xb9, 0x65, 0x15, 0x9, [], [{{0x9, 0x5, 0xb, 0x5cac415b26e4add7, 0x40, 0x7, 0x2, 0x8b}}, {{0x9, 0x5, 0x0, 0x2, 0x200, 0x1, 0x40, 0x2}}]}}, {{0x9, 0x4, 0x82, 0x80, 0x0, 0xfc, 0xb4, 0x59, 0x40}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x16}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8004}, 0x4)

2.723227543s ago: executing program 0 (id=3268):
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xff03, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48)

2.66362991s ago: executing program 3 (id=3269):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f00000005c0), 0x8)
listen(r0, 0x3)

2.662828011s ago: executing program 3 (id=3270):
clock_gettime(0x7, &(0x7f00000009c0))
io_setup(0x6, &(0x7f00000000c0))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, &(0x7f00000005c0))
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r4)
getsockname$packet(r4, &(0x7f0000000580)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000100)=@newtfilter={0xe0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xefe58de28999decf}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x8c, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x2}, @TCA_FLOW_EMATCHES={0x58, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7, 0x8, 0x8}, {0x2, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0xfc, 0x2, 0x101}, {0x6b, 0x1, 0x2, 'X'}}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0xa, 0x2, 0x6}, {0x100, 0x0, 0x1}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xfffa, 0x8, 0x9}, {0x0, 0x4, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1000}}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x8, 0xb}}, @TCA_FLOW_XOR={0x8, 0x7, 0x28000}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xf}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x16bc}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x3}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0x2}}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x400c040}, 0x4000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000004a80)='./mnt\x00', 0x1ff)
mount(&(0x7f0000004ac0)=@filename='ubi0_0\x00', &(0x7f0000004b00)='./mnt\x00', &(0x7f0000004b40)='ubifs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004b80)='./file1\x00', 0x542, 0x0)
pwritev2(r6, &(0x7f0000004bc0)=[{&(0x7f0000004c00)=')', 0x1}], 0x1, 0x2, 0x0, 0xa1)
ioctl$KVM_CAP_X86_GUEST_MODE(r6, 0x4068aea3, &(0x7f0000004c40))
sendmsg$nl_route_sched(r1, &(0x7f0000004cc0)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004d40)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x20, {0x0, 0x0, 0x74, r5, {0x0, 0x3}, {0x4, 0xb}, {0x9, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x30000080)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
mount$9p_virtio(&(0x7f0000004ec0), &(0x7f0000004f00)='.\x00', &(0x7f0000004f40), 0x4, &(0x7f0000004f80)=ANY=[@ANYBLOB='trans=virtio,cache=0x00'])

2.543668844s ago: executing program 1 (id=3271):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket(0x10, 0x803, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000001000)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000f80)="27030200dc0f14000e00", 0xa}], 0x1}, 0x0) (fail_nth: 4)

1.81561545s ago: executing program 0 (id=3272):
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x8000}, 0x1c)
listen(0xffffffffffffffff, 0x7c2)
syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0c080045a000284000000004069078000000000a0101014e214e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="501900e89dd63bc7ca6c527cbf03df8cc390780000"], 0x0)
add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000140), &(0x7f0000000500), 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x110)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000065c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000006580)={&(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x3a8}, 0x1, 0x0, 0x0, 0x880}, 0x4800)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$vnet(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x8, 0x0, 0x1, 0x7f, 0x6, @random="2d22aece4334"}, 0x14)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r3, 0x0, 0x25, 0x8, @void}, 0x10)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000780))
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000007c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000800)={0x0, 0x0, 0x0})
r6 = dup3(r5, r4, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000008c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000900)={0x73622a85, 0x100, 0x1})

1.663761927s ago: executing program 3 (id=3273):
r0 = socket(0x1e, 0x1, 0x0)
connect$tipc(r0, &(0x7f0000000180)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r0, &(0x7f00000001c0), 0x2000011a)
write(r0, &(0x7f0000000200)="b4", 0x1)
recvmmsg$unix(r0, &(0x7f0000000240), 0x0, 0x121, 0x0)

1.462037378s ago: executing program 2 (id=3274):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket(0x10, 0x803, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket(0x15, 0x5, 0x0)
getsockopt(r3, 0x200000000114, 0x271e, 0x0, &(0x7f0000000000))
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000001000)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000f80)="27030200dc0f14000e00", 0xa}], 0x1}, 0x0)

1.461741731s ago: executing program 3 (id=3275):
syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x102)

880.141223ms ago: executing program 3 (id=3276):
unshare(0x22020600)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fff3ffc}]})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000400)={@mcast1, 0x1, 0x2, 0x2, 0x2, 0x2, 0x5}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000440)={'virt_wifi0\x00', 0x77dde4e1})
ioctl(r1, 0x8b32, &(0x7f0000000480))
close_range(r0, r0, 0x200000000000000)
syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/net\x00')
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1e, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r3 = syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/net\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@cgroup=<r4=>r3, 0x11, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@cgroup=r4, 0x24, 0x0, 0x10001, &(0x7f0000000780)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000380)={{0xffffffffffffffff, &(0x7f0000000080)='dctcp', 0x1000, &(0x7f00000001c0)={@align=0xe21, {0xfc, 0x40, 0x7, 0x7fffffff}}, 0xa948, &(0x7f0000000200), &(0x7f0000000240)=0x39fb}, {[0x152, 0x8, 0xffffffff, 0x4]}, 0x3, 0x9e, &(0x7f00000002c0)=""/158})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x15)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = syz_ublk_setup_io_uring(0xd, &(0x7f00000007c0)={0x0, 0x8985, 0x0, 0x2, 0x154}, &(0x7f0000000840)=<r8=>0x0, &(0x7f0000000880)=<r9=>0x0, &(0x7f00000008c0)=<r10=>0x0)
syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000900)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000980)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f00000009c0)=<r11=>0x0)
r12 = dup(r6)
syz_ublk_setup_queues(r12, r11, &(0x7f0000000a00)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r7}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r7}}], 0x1, &(0x7f0000000d00)={0x2e, 0x3e, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000e40)=0x3)
r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000e80), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r13, 0x40047438, &(0x7f0000000ec0)=0x1)
dup2(r13, r5)
setuid(0xee00)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)

332.674622ms ago: executing program 0 (id=3277):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, 0x0) (fail_nth: 3)

332.365791ms ago: executing program 1 (id=3278):
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x1e)
connect$pptp(r0, &(0x7f0000002340)={0x18, 0x2, {0x3, @broadcast}}, 0x1e)
close(0x3)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]})
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x3, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0)
ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x3, 0x208002)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000800000043000e007f00000001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r1}, 0x38)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000300)={0xfffe, 0x0, 0x3, 0x8, @vifc_lcl_addr=@multicast1, @empty}, 0x10)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0xffffffffffffffff, 0x2000403, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00}, 0x94)
read(0xffffffffffffffff, &(0x7f00000010c0)=""/4096, 0x1000)
bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0xb, 0x0, &(0x7f0000000340), &(0x7f0000000500)='syzkaller\x00', 0x2, 0xeb, &(0x7f0000000540)=""/235, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x23, r3, 0x8, &(0x7f00000006c0)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, &(0x7f00000020c0)=[r1, r4, r1, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, r1, r1, r2], &(0x7f0000002100)=[{0x0, 0x2, 0xd, 0x9}, {0x2, 0x1, 0xe, 0x8}, {0x2, 0x3, 0x5}, {0x4, 0x4, 0x6, 0x9}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6, 0x3}, {0x5, 0x5, 0x4, 0x8}, {0x4, 0x1, 0x7, 0x8}, {0x0, 0x2, 0x4, 0x8}, {0x5, 0x1, 0x6, 0x2}], 0x10, 0x5}, 0x94)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0)
r5 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x8001, 0x30, 0x80000000, 0x53b}, &(0x7f0000000280)=0x18)
shmctl$IPC_INFO(r5, 0x3, &(0x7f0000000400)=""/249)
r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x8000]}, 0x8, 0x800)
fcntl$getownex(r6, 0x10, &(0x7f0000000000))

223.36092ms ago: executing program 0 (id=3279):
socket(0x2, 0xa, 0x300)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000b80), 0x8, 0x10, &(0x7f0000000bc0), 0x10}, 0x94)
openat$sysctl(0xffffff9c, &(0x7f0000000c00)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000c40), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c80)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000cc0)='./sys\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000d80)='./config\x00', &(0x7f0000000dc0)='configfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000e40)='wwnn=0x1000000044001122,wwpn=0x2000000044001122', 0x2f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./config/nvmet/ports/1\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000f40)={'ip6gretap0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=@newlink={0x70, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r6}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x43}]}}}]}, 0x70}}, 0x0)
sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000001080)={0x11, 0x7, r6, 0x1, 0x0, 0x6, @local}, 0x14)
write(r3, &(0x7f00000010c0)='fc', 0x2)
r7 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r7, &(0x7f00000011c0)='nn-0x1000000044001122:pn-0x2000000044001122', 0x2b)
symlinkat(&(0x7f0000001200)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
openat$snapshot(0xffffffffffffff9c, &(0x7f00000012c0), 0x400, 0x0)
landlock_create_ruleset(&(0x7f0000001300)={0x7f6e}, 0x18, 0x0)

163.699131ms ago: executing program 2 (id=3280):
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
mount_setattr(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0)
syz_socket_connect_nvme_tcp()
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1)
mkdir(&(0x7f0000000540)='./sys\x00', 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r2, &(0x7f00000000c0)='1', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r3, &(0x7f0000000600)="3100f3a70c57aab9346531b3f6ad5b6ec75a0fc0a6c0bbd4b2d8ee9d3c891dff36500980fc1652c71193785d5ff7f83552ca2dbca8aee1c26bb0337897ace4fb85cc40c273cd67ec01764ee2f7de0223a5bea506f5f997938cd33aef9a85636fc3", 0x61) (fail_nth: 4)

0s ago: executing program 3 (id=3281):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x12, 0x11, 0xa, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x2000000003, 0x20000, 0x82a, 0x0, 0xc1, 0x80})
io_setup(0x2, &(0x7f0000000000))
connect(r2, &(0x7f0000000300)=@phonet={0x23, 0x5, 0x8, 0x8}, 0x80)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)=@newchain={0x310, 0x1e, 0x101, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x4, 0x1}, {0x10, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x9, 0xa}}, @filter_kind_options=@f_route={{0xa}, {0x2c8, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x17c, 0x6, [@m_gact={0x78, 0x1f, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x8ec, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x400, 0x8001, 0x6, 0x1, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x10d3, 0x7}}]}, {0x1b, 0x6, "24d5d66420ac2c23173fc2a19f246709cc1e334885a84f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0x100, 0xf, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x7fffffff, 0x8, 0x0, 0x7fff}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}]}, {0xb8, 0x6, "7cc7da08ea380449d1f7ee7e68ae1df50a4316bcbdc5619a9db5f14ef1095f6a6ca54316a9348c31924903e7abecffaec2a578e5bbf49bfc68cdf77d74177307aa7877bcdf67d643ce7231b71a8cc253eb973a7d196503153dce9495b4d10dc19382ecead807e414df4f79cc90c6ea8b20ea0b6ded887f6b6071bf73909d2ba5673159cc9e89ac355a6ba80f3ab6b8a610d0b0f729816557670d72e30c82174afd1e760122c8c78ab325a62c15327b8eb2a5effb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_ROUTE4_ACT={0x138, 0x6, [@m_xt={0x134, 0xf, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0xa3b7, 'security\x00', 0xfb, 0xdcc8}}, @TCA_IPT_INDEX={0x8, 0x3, 0x10001}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffff893}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0xc7, 0x6, "f863ab28e16cdd03a59debafaf753c148e0bd9ddaa70e9e729bc702c024c4ad44d941c7925267a70e6fe0766b7c8a81aef64606cc8f2e8e19b59acfdc4bf2754c829bc11e68ce86f5e1a886ffe7c250a69172d3f1da5a79c4518efa8e19ab3a3b8082c209714b1c63788218cdb2b404b06050944107a876823c0cec5ba2a48fb85ae5b63cd2d8b8d1876effd2520d93c8ad72b9e1116460c6b91cfca1ba570194467cdc3809b9b967a5fcc0fe4d786f57aab6d97eed229df63102217206d03d441ecf2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x81}}, @TCA_RATE={0x6, 0x5, {0xb}}]}, 0x310}}, 0x44004)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000080)={0x40000002})
write$P9_RSTATu(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a8"], 0x21e)
openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0)
ioctl$SIOCX25SENDCALLACCPT(r3, 0x89e9)

kernel console output (not intermixed with test programs):

.
[  580.553174][T15413] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  580.553185][T15413] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000400454ca
[  580.553192][T15413] RDX: 0000000080000380 RSI: 0000000000000000 RDI: 0000000000000000
[  580.553198][T15413] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  580.553205][T15413] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  580.553211][T15413] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  580.553225][T15413]  </TASK>
[  581.465241][T15421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2999'.
[  582.334699][T15448] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3008'.
[  582.567707][T15463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  582.568038][T15463] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  582.635908][T15465] FAULT_INJECTION: forcing a failure.
[  582.635908][T15465] name failslab, interval 1, probability 0, space 0, times 0
[  582.635946][T15465] CPU: 0 UID: 0 PID: 15465 Comm: syz.3.3014 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  582.635995][T15465] Tainted: [L]=SOFTLOCKUP
[  582.636003][T15465] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  582.636015][T15465] Call Trace:
[  582.636022][T15465]  <TASK>
[  582.636029][T15465]  dump_stack_lvl+0x100/0x190
[  582.636051][T15465]  should_fail_ex.cold+0x5/0xa
[  582.636067][T15465]  should_failslab+0xc2/0x120
[  582.636088][T15465]  kmem_cache_alloc_noprof+0x92/0x6a0
[  582.636107][T15465]  ? security_file_alloc+0x34/0x2c0
[  582.636128][T15465]  security_file_alloc+0x34/0x2c0
[  582.636145][T15465]  init_file+0x95/0x480
[  582.636164][T15465]  alloc_empty_file_noaccount+0x45/0xd0
[  582.636177][T15465]  alloc_file_pseudo_noaccount+0x183/0x290
[  582.636192][T15465]  ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10
[  582.636207][T15465]  ? iput+0x3a/0x40
[  582.636220][T15465]  bdev_file_open_by_dev+0x13a/0x210
[  582.636235][T15465]  setup_bdev_super+0x78/0x770
[  582.636251][T15465]  get_tree_bdev_flags+0x363/0x620
[  582.636266][T15465]  ? __pfx_zonefs_fill_super+0x10/0x10
[  582.636280][T15465]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  582.636299][T15465]  ? bpf_lsm_capable+0x9/0x10
[  582.636312][T15465]  ? security_capable+0x80/0x260
[  582.636325][T15465]  vfs_get_tree+0x92/0x320
[  582.636338][T15465]  path_mount+0x7d0/0x2850
[  582.636360][T15465]  ? __pfx_path_mount+0x10/0x10
[  582.636372][T15465]  ? lockdep_hardirqs_on+0x7d/0x110
[  582.636388][T15465]  ? putname+0xb1/0x110
[  582.636408][T15465]  ? kmem_cache_free+0x127/0x6c0
[  582.636428][T15465]  ? __ia32_sys_mount+0x292/0x310
[  582.636441][T15465]  __ia32_sys_mount+0x292/0x310
[  582.636455][T15465]  ? __pfx___ia32_sys_mount+0x10/0x10
[  582.636472][T15465]  __do_fast_syscall_32+0x13a/0x8b0
[  582.636488][T15465]  do_fast_syscall_32+0x32/0x70
[  582.636501][T15465]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  582.636518][T15465] RIP: 0023:0xf7fb3fec
[  582.636532][T15465] Code: Unable to access opcode bytes at 0xf7fb3fc2.
[  582.636539][T15465] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015
[  582.636553][T15465] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 0000000080000200
[  582.636560][T15465] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000
[  582.636568][T15465] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  582.636575][T15465] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  582.636583][T15465] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  582.636600][T15465]  </TASK>
[  582.637720][T15465] /dev/nullb0: Can't open blockdev
[  582.741054][T15471] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3017'.
[  582.792820][T15478] FAULT_INJECTION: forcing a failure.
[  582.792820][T15478] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  582.792851][T15478] CPU: 2 UID: 0 PID: 15478 Comm: syz.3.3020 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  582.792882][T15478] Tainted: [L]=SOFTLOCKUP
[  582.792889][T15478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  582.792900][T15478] Call Trace:
[  582.792906][T15478]  <TASK>
[  582.792914][T15478]  dump_stack_lvl+0x100/0x190
[  582.792943][T15478]  should_fail_ex.cold+0x5/0xa
[  582.792968][T15478]  _copy_from_iter+0x1f4/0x1690
[  582.792992][T15478]  ? __asan_memset+0x23/0x50
[  582.793016][T15478]  ? __pfx__copy_from_iter+0x10/0x10
[  582.793035][T15478]  ? __pfx___alloc_skb+0x10/0x10
[  582.793068][T15478]  netlink_sendmsg+0x808/0xda0
[  582.793093][T15478]  ? __pfx_netlink_sendmsg+0x10/0x10
[  582.793116][T15478]  ? apparmor_socket_sendmsg+0x165/0x280
[  582.793140][T15478]  ____sys_sendmsg+0xa4d/0xbe0
[  582.793166][T15478]  ? __pfx_netlink_sendmsg+0x10/0x10
[  582.793188][T15478]  ? __pfx_____sys_sendmsg+0x10/0x10
[  582.793228][T15478]  ___sys_sendmsg+0x190/0x1e0
[  582.793257][T15478]  ? __pfx____sys_sendmsg+0x10/0x10
[  582.793298][T15478]  ? find_held_lock+0x2b/0x80
[  582.793337][T15478]  __sys_sendmsg+0x160/0x210
[  582.793360][T15478]  ? __pfx___sys_sendmsg+0x10/0x10
[  582.793390][T15478]  ? __pfx_ksys_write+0x10/0x10
[  582.793418][T15478]  __do_fast_syscall_32+0x13a/0x8b0
[  582.793439][T15478]  ? lockdep_hardirqs_on+0x7d/0x110
[  582.793459][T15478]  do_fast_syscall_32+0x32/0x70
[  582.793479][T15478]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  582.793502][T15478] RIP: 0023:0xf7fb3fec
[  582.793522][T15478] Code: Unable to access opcode bytes at 0xf7fb3fc2.
[  582.793530][T15478] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  582.793548][T15478] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140
[  582.793560][T15478] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  582.793571][T15478] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  582.793582][T15478] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  582.793592][T15478] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  582.793617][T15478]  </TASK>
[  582.868200][T15484] FAULT_INJECTION: forcing a failure.
[  582.868200][T15484] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  582.868221][T15484] CPU: 0 UID: 0 PID: 15484 Comm: syz.1.3023 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  582.868236][T15484] Tainted: [L]=SOFTLOCKUP
[  582.868240][T15484] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  582.868247][T15484] Call Trace:
[  582.868251][T15484]  <TASK>
[  582.868256][T15484]  dump_stack_lvl+0x100/0x190
[  582.868276][T15484]  should_fail_ex.cold+0x5/0xa
[  582.868297][T15484]  _copy_to_user+0x32/0xd0
[  582.868311][T15484]  simple_read_from_buffer+0xcb/0x170
[  582.868329][T15484]  proc_fail_nth_read+0x1af/0x230
[  582.868344][T15484]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  582.868361][T15484]  ? rw_verify_area+0xce/0x6d0
[  582.868373][T15484]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  582.868428][T15484]  vfs_read+0x1e4/0xb40
[  582.868444][T15484]  ? lock_acquire+0x1d1/0x380
[  582.868460][T15484]  ? __fget_files+0x34/0x3d0
[  582.868475][T15484]  ? __pfx_vfs_read+0x10/0x10
[  582.868488][T15484]  ? find_held_lock+0x2b/0x80
[  582.868502][T15484]  ? __fget_files+0x215/0x3d0
[  582.868519][T15484]  ? __fget_files+0x21f/0x3d0
[  582.868538][T15484]  ksys_read+0x12a/0x250
[  582.868552][T15484]  ? __pfx_ksys_read+0x10/0x10
[  582.868570][T15484]  do_int80_emulation+0x166/0x650
[  582.868584][T15484]  asm_int80_emulation+0x1a/0x20
[  582.868596][T15484] RIP: 0023:0xf71077eb
[  582.868606][T15484] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  582.868617][T15484] RSP: 002b:00000000f53c64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  582.868628][T15484] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f53c65d0
[  582.868635][T15484] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  582.868641][T15484] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  582.868647][T15484] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  582.868654][T15484] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  582.868668][T15484]  </TASK>
[  582.978281][T15487] syzkaller0: entered promiscuous mode
[  582.978297][T15487] syzkaller0: entered allmulticast mode
[  583.338449][T15492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3026'.
[  583.385748][T15492] UBIFS error (pid: 15492): cannot open "ubi0_0", error -19
[  583.391582][T15492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3026'.
[  583.469825][T15496] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3028'.
[  583.748921][T15501] validate_nla: 23 callbacks suppressed
[  583.748936][T15501] netlink: 'syz.2.3027': attribute type 1 has an invalid length.
[  583.752130][T15502] netlink: 'syz.2.3027': attribute type 1 has an invalid length.
[  584.047638][T15501] bond1: entered promiscuous mode
[  584.051497][T15501] 8021q: adding VLAN 0 to HW filter on device bond1
[  584.067265][T15509] syzkaller0: entered promiscuous mode
[  584.067278][T15509] syzkaller0: entered allmulticast mode
[  584.137007][T15515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  584.137285][T15515] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  584.673537][T15528] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3038'.
[  584.731976][T15531] nvme_fcloop: unknown parameter or missing value 'ww'
[  584.957275][T15546] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  584.958403][T15546] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  585.443176][T15556] netlink: 'syz.1.3047': attribute type 5 has an invalid length.
[  585.477852][T15561] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3048'.
[  585.985361][T15569] FAULT_INJECTION: forcing a failure.
[  585.985361][T15569] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  585.985394][T15569] CPU: 1 UID: 0 PID: 15569 Comm: syz.3.3051 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  585.985419][T15569] Tainted: [L]=SOFTLOCKUP
[  585.985426][T15569] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  585.985438][T15569] Call Trace:
[  585.985445][T15569]  <TASK>
[  585.985453][T15569]  dump_stack_lvl+0x100/0x190
[  585.985484][T15569]  should_fail_ex.cold+0x5/0xa
[  585.985510][T15569]  _copy_to_user+0x32/0xd0
[  585.985532][T15569]  simple_read_from_buffer+0xcb/0x170
[  585.985561][T15569]  proc_fail_nth_read+0x1af/0x230
[  585.985587][T15569]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  585.985614][T15569]  ? rw_verify_area+0xce/0x6d0
[  585.985636][T15569]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  585.985660][T15569]  vfs_read+0x1e4/0xb40
[  585.985685][T15569]  ? lock_acquire+0x1d1/0x380
[  585.985712][T15569]  ? __fget_files+0x34/0x3d0
[  585.985737][T15569]  ? __pfx_vfs_read+0x10/0x10
[  585.985757][T15569]  ? find_held_lock+0x2b/0x80
[  585.985779][T15569]  ? __fget_files+0x215/0x3d0
[  585.985808][T15569]  ? __fget_files+0x21f/0x3d0
[  585.985841][T15569]  ksys_read+0x12a/0x250
[  585.985864][T15569]  ? __pfx_ksys_read+0x10/0x10
[  585.985901][T15569]  do_int80_emulation+0x166/0x650
[  585.985925][T15569]  asm_int80_emulation+0x1a/0x20
[  585.985944][T15569] RIP: 0023:0xf71a77eb
[  585.985959][T15569] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  585.985976][T15569] RSP: 002b:00000000f54664bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  585.985995][T15569] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54665d0
[  585.986007][T15569] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  585.986018][T15569] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  585.986029][T15569] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  585.986040][T15569] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  585.986065][T15569]  </TASK>
[  587.050016][T15546] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[  587.050262][ T5107] Bluetooth: hci4: command 0x0c1a tx timeout
[  587.373962][T15580] fuse: Bad value for 'fd'
[  587.844299][T15566] syz.0.3050 (15566) used greatest stack depth: 16736 bytes left
[  587.938312][T15546] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  587.941068][T15546] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  587.941387][T15546] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  588.292125][T13271] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  588.440942][T13271] usb 6-1: not running at top speed; connect to a high speed hub
[  588.440971][T13271] usb 6-1: New USB device found, idVendor=20f4, idProduct=624d, bcdDevice=17.50
[  588.444253][T13271] usb 6-1: config 3 has an invalid interface number: 235 but max is 1
[  588.444275][T13271] usb 6-1: config 3 has an invalid interface number: 130 but max is 1
[  588.444289][T13271] usb 6-1: config 3 has no interface number 0
[  588.444302][T13271] usb 6-1: config 3 has no interface number 1
[  588.444345][T13271] usb 6-1: config 3 interface 235 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  588.444361][T13271] usb 6-1: config 3 interface 235 has no altsetting 0
[  588.444376][T13271] usb 6-1: config 3 interface 130 has no altsetting 0
[  588.447647][T13271] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  588.447666][T13271] usb 6-1: Product: syz
[  588.447678][T13271] usb 6-1: Manufacturer: syz
[  588.447689][T13271] usb 6-1: SerialNumber: syz
[  588.463260][T15592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  588.681282][T13271] usb 6-1: USB disconnect, device number 7
[  589.139802][ T5107] Bluetooth: hci1: command 0x0c1a tx timeout
[  589.215984][T15641] jffs2: notice: (15641) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  589.469876][ T5638] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  589.649830][ T5638] usb 6-1: Using ep0 maxpacket: 8
[  589.656820][T15641] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  589.663949][T15655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3069'.
[  589.677253][T15655] UBIFS error (pid: 15655): cannot open "ubi0_0", error -19
[  589.686951][T15655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3069'.
[  589.998469][T15660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  589.998826][T15660] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  590.011313][   T66] Bluetooth: hci3: command 0x040f tx timeout
[  590.011998][ T5107] Bluetooth: hci2: command 0x0c1a tx timeout
[  590.218132][ T5638] usb 6-1: unable to get BOS descriptor or descriptor too short
[  590.218353][ T5638] usb 6-1: New USB device found, idVendor=413c, idProduct=8137, bcdDevice=e3.82
[  590.221274][ T5638] usb 6-1: unable to read config index 0 descriptor/start: -71
[  590.221455][ T5638] usb 6-1: can't read configurations, error -71
[  590.561279][T15678] FAULT_INJECTION: forcing a failure.
[  590.561279][T15678] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  590.561302][T15678] CPU: 2 UID: 0 PID: 15678 Comm: syz.0.3078 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  590.561318][T15678] Tainted: [L]=SOFTLOCKUP
[  590.561322][T15678] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  590.561329][T15678] Call Trace:
[  590.561333][T15678]  <TASK>
[  590.561338][T15678]  dump_stack_lvl+0x100/0x190
[  590.561357][T15678]  should_fail_ex.cold+0x5/0xa
[  590.561372][T15678]  _copy_from_iter+0x1f4/0x1690
[  590.561386][T15678]  ? __asan_memset+0x23/0x50
[  590.561401][T15678]  ? __pfx__copy_from_iter+0x10/0x10
[  590.561412][T15678]  ? __pfx___alloc_skb+0x10/0x10
[  590.561431][T15678]  netlink_sendmsg+0x808/0xda0
[  590.561446][T15678]  ? __pfx_netlink_sendmsg+0x10/0x10
[  590.561460][T15678]  ? apparmor_socket_sendmsg+0x165/0x280
[  590.561475][T15678]  ____sys_sendmsg+0xa4d/0xbe0
[  590.561491][T15678]  ? __pfx_netlink_sendmsg+0x10/0x10
[  590.561504][T15678]  ? __pfx_____sys_sendmsg+0x10/0x10
[  590.561527][T15678]  ___sys_sendmsg+0x190/0x1e0
[  590.561545][T15678]  ? __pfx____sys_sendmsg+0x10/0x10
[  590.561569][T15678]  ? find_held_lock+0x2b/0x80
[  590.561591][T15678]  __sys_sendmsg+0x160/0x210
[  590.561605][T15678]  ? __pfx___sys_sendmsg+0x10/0x10
[  590.561623][T15678]  ? __pfx_ksys_write+0x10/0x10
[  590.561640][T15678]  __do_fast_syscall_32+0x13a/0x8b0
[  590.561652][T15678]  ? lockdep_hardirqs_on+0x7d/0x110
[  590.561664][T15678]  do_fast_syscall_32+0x32/0x70
[  590.561676][T15678]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  590.561691][T15678] RIP: 0023:0xf747efec
[  590.561703][T15678] Code: Unable to access opcode bytes at 0xf747efc2.
[  590.561709][T15678] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  590.561720][T15678] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000
[  590.561727][T15678] RDX: 00000000000040c0 RSI: 0000000000000000 RDI: 0000000000000000
[  590.561734][T15678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  590.561746][T15678] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  590.561753][T15678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  590.561766][T15678]  </TASK>
[  590.859807][ T5638] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  591.030299][ T5638] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  591.031423][ T5638] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0
[  591.031444][ T5638] usb 6-1: config 0 interface 0 has no altsetting 0
[  591.033696][ T5638] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  591.033715][ T5638] usb 6-1: Product: syz
[  591.033727][ T5638] usb 6-1: Manufacturer: syz
[  591.033926][ T5638] usb 6-1: SerialNumber: syz
[  591.036992][ T5638] usb 6-1: config 0 descriptor??
[  591.041690][ T5638] usb 6-1: selecting invalid altsetting 0
[  591.159765][ T5840] usb 7-1: new full-speed USB device number 17 using dummy_hcd
[  591.173856][T15688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3082'.
[  591.226665][T15688] UBIFS error (pid: 15688): cannot open "ubi0_0", error -19
[  591.228581][T15688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3082'.
[  591.273516][T14260] usb 6-1: USB disconnect, device number 9
[  591.313174][ T5840] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  591.316903][ T5840] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0
[  591.316927][ T5840] usb 7-1: config 0 interface 0 has no altsetting 0
[  591.322472][ T5840] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  591.322494][ T5840] usb 7-1: Product: syz
[  591.322507][ T5840] usb 7-1: Manufacturer: syz
[  591.322519][ T5840] usb 7-1: SerialNumber: syz
[  591.331298][ T5840] usb 7-1: config 0 descriptor??
[  591.353351][ T5840] usb 7-1: selecting invalid altsetting 0
[  591.548867][T14260] usb 7-1: USB disconnect, device number 17
[  591.605102][T15691] FAULT_INJECTION: forcing a failure.
[  591.605102][T15691] name failslab, interval 1, probability 0, space 0, times 0
[  591.605134][T15691] CPU: 3 UID: 0 PID: 15691 Comm: syz.0.3083 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  591.605157][T15691] Tainted: [L]=SOFTLOCKUP
[  591.605163][T15691] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  591.605174][T15691] Call Trace:
[  591.605181][T15691]  <TASK>
[  591.605188][T15691]  dump_stack_lvl+0x100/0x190
[  591.605216][T15691]  should_fail_ex.cold+0x5/0xa
[  591.605238][T15691]  should_failslab+0xc2/0x120
[  591.605264][T15691]  __kmalloc_noprof+0xfc/0x840
[  591.605288][T15691]  ? blk_rq_map_user_iov+0x2a5/0x1440
[  591.605310][T15691]  blk_rq_map_user_iov+0x2a5/0x1440
[  591.605333][T15691]  ? sg_common_write.isra.0+0xb79/0x1b90
[  591.605354][T15691]  ? __pfx_blk_rq_map_user_iov+0x10/0x10
[  591.605374][T15691]  ? rcu_is_watching+0x13/0xc0
[  591.605394][T15691]  ? trace_contention_end+0x126/0x160
[  591.605420][T15691]  ? __mutex_lock+0x26c/0x1bd0
[  591.605438][T15691]  ? sg_common_write.isra.0+0xb79/0x1b90
[  591.605456][T15691]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  591.605480][T15691]  ? find_held_lock+0x2b/0x80
[  591.605499][T15691]  ? sg_common_write.isra.0+0xe26/0x1b90
[  591.605517][T15691]  ? import_ubuf+0x1b6/0x220
[  591.605536][T15691]  blk_rq_map_user_io+0x1ff/0x230
[  591.605555][T15691]  ? __pfx_blk_rq_map_user_io+0x10/0x10
[  591.605584][T15691]  sg_common_write.isra.0+0xf74/0x1b90
[  591.605633][T15691]  ? __pfx_sg_common_write.isra.0+0x10/0x10
[  591.605663][T15691]  sg_write+0x7eb/0xdb0
[  591.605685][T15691]  ? __pfx_sg_write+0x10/0x10
[  591.605708][T15691]  ? __pfx_aa_file_perm+0x10/0x10
[  591.605752][T15691]  ? bpf_lsm_file_permission+0x9/0x10
[  591.605777][T15691]  ? security_file_permission+0x76/0x210
[  591.605800][T15691]  ? rw_verify_area+0xce/0x6d0
[  591.605821][T15691]  ? __pfx_sg_write+0x10/0x10
[  591.605839][T15691]  vfs_writev+0x5ed/0xdd0
[  591.605866][T15691]  ? __pfx_vfs_writev+0x10/0x10
[  591.605895][T15691]  ? lock_acquire+0x1d1/0x380
[  591.605919][T15691]  ? __fget_files+0x34/0x3d0
[  591.605949][T15691]  ? __fget_files+0x21f/0x3d0
[  591.605977][T15691]  ? do_writev+0x13e/0x340
[  591.605995][T15691]  do_writev+0x13e/0x340
[  591.606015][T15691]  ? __pfx_do_writev+0x10/0x10
[  591.606033][T15691]  ? ksys_write+0x1ac/0x250
[  591.606053][T15691]  ? __pfx_ksys_write+0x10/0x10
[  591.606079][T15691]  __do_fast_syscall_32+0x13a/0x8b0
[  591.606097][T15691]  ? lockdep_hardirqs_on+0x7d/0x110
[  591.606116][T15691]  do_fast_syscall_32+0x32/0x70
[  591.606135][T15691]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  591.606156][T15691] RIP: 0023:0xf747efec
[  591.606177][T15691] Code: Unable to access opcode bytes at 0xf747efc2.
[  591.606185][T15691] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000092
[  591.606204][T15691] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040
[  591.606238][T15691] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[  591.606249][T15691] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  591.606259][T15691] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  591.606268][T15691] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  591.606292][T15691]  </TASK>
[  592.071451][T14260] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  592.219709][T14260] usb 6-1: Using ep0 maxpacket: 32
[  592.220260][T14260] usb 6-1: New USB device found, idVendor=2b73, idProduct=0034, bcdDevice= 0.40
[  592.222486][T14260] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  592.222519][T14260] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  592.224458][T14260] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.224477][T14260] usb 6-1: Product: syz
[  592.224489][T14260] usb 6-1: Manufacturer: syz
[  592.224500][T14260] usb 6-1: SerialNumber: syz
[  592.338689][T15708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3090'.
[  592.359727][T15708] UBIFS error (pid: 15708): cannot open "ubi0_0", error -19
[  592.361612][T15708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3090'.
[  592.527980][T14260] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  592.733447][T14260] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71
[  592.738508][T14260] usb 6-1: USB disconnect, device number 10
[  592.758643][T10162] udevd[10162]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[  592.988626][T15718] FAULT_INJECTION: forcing a failure.
[  592.988626][T15718] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  592.988647][T15718] CPU: 3 UID: 0 PID: 15718 Comm: syz.1.3092 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  592.988663][T15718] Tainted: [L]=SOFTLOCKUP
[  592.988667][T15718] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  592.988673][T15718] Call Trace:
[  592.988677][T15718]  <TASK>
[  592.988682][T15718]  dump_stack_lvl+0x100/0x190
[  592.988701][T15718]  should_fail_ex.cold+0x5/0xa
[  592.988727][T15718]  _copy_to_user+0x32/0xd0
[  592.988743][T15718]  bpf_test_finish.isra.0+0x4aa/0x650
[  592.988763][T15718]  ? __might_fault+0xc5/0x140
[  592.988776][T15718]  ? __pfx_bpf_test_finish.isra.0+0x10/0x10
[  592.988796][T15718]  ? _copy_from_user+0x59/0xd0
[  592.988810][T15718]  bpf_prog_test_run_xdp+0xa79/0x1670
[  592.988827][T15718]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  592.988843][T15718]  ? fput+0x7c/0x100
[  592.988860][T15718]  ? __bpf_prog_get+0x97/0x290
[  592.988876][T15718]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  592.988888][T15718]  __sys_bpf+0x2265/0x4a30
[  592.988905][T15718]  ? __pfx___sys_bpf+0x10/0x10
[  592.988917][T15718]  ? lock_acquire+0x1d1/0x380
[  592.988933][T15718]  ? get_pid_task+0x2a/0x250
[  592.988946][T15718]  ? find_held_lock+0x2b/0x80
[  592.988959][T15718]  ? get_pid_task+0xfc/0x250
[  592.988970][T15718]  ? get_pid_task+0xfc/0x250
[  592.988985][T15718]  ? proc_fail_nth_write+0x9f/0x220
[  592.989001][T15718]  ? find_held_lock+0x2b/0x80
[  592.989017][T15718]  ? rcu_read_lock_any_held+0x6a/0x90
[  592.989031][T15718]  ? find_held_lock+0x2b/0x80
[  592.989044][T15718]  ? ksys_write+0x190/0x250
[  592.989057][T15718]  ? ksys_write+0x190/0x250
[  592.989071][T15718]  ? lock_acquire+0x1d1/0x380
[  592.989097][T15718]  ? fput+0x7c/0x100
[  592.989115][T15718]  ? __ia32_sys_bpf+0xcc/0x170
[  592.989128][T15718]  __ia32_sys_bpf+0xcc/0x170
[  592.989141][T15718]  ? __do_fast_syscall_32+0xb3/0x8b0
[  592.989156][T15718]  __do_fast_syscall_32+0x13a/0x8b0
[  592.989167][T15718]  ? lockdep_hardirqs_on+0x7d/0x110
[  592.989179][T15718]  do_fast_syscall_32+0x32/0x70
[  592.989191][T15718]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  592.989205][T15718] RIP: 0023:0xf73aefec
[  592.989219][T15718] Code: Unable to access opcode bytes at 0xf73aefc2.
[  592.989224][T15718] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  592.989236][T15718] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000240
[  592.989243][T15718] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000
[  592.989249][T15718] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  592.989256][T15718] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  592.989262][T15718] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  592.989276][T15718]  </TASK>
[  593.499785][ T5840] usb 8-1: new full-speed USB device number 106 using dummy_hcd
[  593.653007][ T5840] usb 8-1: not running at top speed; connect to a high speed hub
[  593.653026][ T5840] usb 8-1: New USB device found, idVendor=20f4, idProduct=624d, bcdDevice=17.50
[  593.654151][ T5840] usb 8-1: config 3 has an invalid interface number: 235 but max is 1
[  593.654165][ T5840] usb 8-1: config 3 has an invalid interface number: 130 but max is 1
[  593.654174][ T5840] usb 8-1: config 3 has no interface number 0
[  593.654318][ T5840] usb 8-1: config 3 has no interface number 1
[  593.654342][ T5840] usb 8-1: config 3 interface 235 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  593.654353][ T5840] usb 8-1: config 3 interface 235 has no altsetting 0
[  593.654362][ T5840] usb 8-1: config 3 interface 130 has no altsetting 0
[  593.656143][ T5840] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  593.656156][ T5840] usb 8-1: Product: syz
[  593.656163][ T5840] usb 8-1: Manufacturer: syz
[  593.656171][ T5840] usb 8-1: SerialNumber: syz
[  593.659011][T15729] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  593.823995][T15742] FAULT_INJECTION: forcing a failure.
[  593.823995][T15742] name failslab, interval 1, probability 0, space 0, times 0
[  593.824029][T15742] CPU: 0 UID: 0 PID: 15742 Comm: syz.0.3099 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  593.824053][T15742] Tainted: [L]=SOFTLOCKUP
[  593.824061][T15742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  593.824072][T15742] Call Trace:
[  593.824078][T15742]  <TASK>
[  593.824085][T15742]  dump_stack_lvl+0x100/0x190
[  593.824111][T15742]  should_fail_ex.cold+0x5/0xa
[  593.824133][T15742]  should_failslab+0xc2/0x120
[  593.824158][T15742]  __kmalloc_cache_noprof+0x91/0x6d0
[  593.824177][T15742]  ? fuse_chan_new+0x40/0x320
[  593.824204][T15742]  fuse_chan_new+0x40/0x320
[  593.824227][T15742]  fuse_dev_chan_new+0x14/0x2b0
[  593.824242][T15742]  ? kobject_get_unless_zero+0x156/0x200
[  593.824263][T15742]  cuse_channel_open+0x1f/0x8f0
[  593.824286][T15742]  ? __pfx_cuse_channel_open+0x10/0x10
[  593.824311][T15742]  misc_open+0x26d/0x450
[  593.824328][T15742]  ? __pfx_misc_open+0x10/0x10
[  593.824344][T15742]  chrdev_open+0x234/0x6a0
[  593.824368][T15742]  ? __pfx_apparmor_file_open+0x10/0x10
[  593.824389][T15742]  ? __pfx_chrdev_open+0x10/0x10
[  593.824414][T15742]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  593.824437][T15742]  do_dentry_open+0x6ab/0x14d0
[  593.824458][T15742]  ? __pfx_chrdev_open+0x10/0x10
[  593.824484][T15742]  vfs_open+0x82/0x3f0
[  593.824503][T15742]  path_openat+0x1a23/0x2450
[  593.824528][T15742]  ? __pfx_path_openat+0x10/0x10
[  593.824557][T15742]  do_file_open+0x20e/0x430
[  593.824584][T15742]  ? __pfx_do_file_open+0x10/0x10
[  593.824651][T15742]  ? _raw_spin_unlock+0x28/0x50
[  593.824682][T15742]  ? alloc_fd+0x471/0x7a0
[  593.824720][T15742]  do_sys_openat2+0x10f/0x1e0
[  593.824740][T15742]  ? __pfx_do_sys_openat2+0x10/0x10
[  593.824762][T15742]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  593.824792][T15742]  __ia32_compat_sys_openat+0x12d/0x210
[  593.824816][T15742]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  593.824849][T15742]  __do_fast_syscall_32+0x13a/0x8b0
[  593.824871][T15742]  ? lockdep_hardirqs_on+0x7d/0x110
[  593.824894][T15742]  do_fast_syscall_32+0x32/0x70
[  593.824916][T15742]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  593.824941][T15742] RIP: 0023:0xf747efec
[  593.824971][T15742] Code: Unable to access opcode bytes at 0xf747efc2.
[  593.824981][T15742] RSP: 002b:00000000f547550c EFLAGS: 00000292 ORIG_RAX: 0000000000000127
[  593.825000][T15742] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800004c0
[  593.825014][T15742] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[  593.825025][T15742] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  593.825037][T15742] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  593.825047][T15742] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  593.825073][T15742]  </TASK>
[  593.906063][ T5840] usb 8-1: USB disconnect, device number 106
[  593.931315][T15734] Cannot find add_set index 0 as target
[  593.933270][T15740] Cannot find add_set index 0 as target
[  593.979431][T15748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  593.983472][T15748] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  594.202498][T15758] 9pnet_fd: Insufficient options for proto=fd
[  594.242080][T15760] FAULT_INJECTION: forcing a failure.
[  594.242080][T15760] name failslab, interval 1, probability 0, space 0, times 0
[  594.242101][T15760] CPU: 0 UID: 0 PID: 15760 Comm: syz.2.3106 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  594.242117][T15760] Tainted: [L]=SOFTLOCKUP
[  594.242121][T15760] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  594.242128][T15760] Call Trace:
[  594.242132][T15760]  <TASK>
[  594.242137][T15760]  dump_stack_lvl+0x100/0x190
[  594.242156][T15760]  should_fail_ex.cold+0x5/0xa
[  594.242170][T15760]  should_failslab+0xc2/0x120
[  594.242189][T15760]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[  594.242227][T15760]  ? __d_alloc+0x35/0xa50
[  594.242247][T15760]  __d_alloc+0x35/0xa50
[  594.242262][T15760]  ? security_inode_alloc+0xcf/0x2c0
[  594.242276][T15760]  d_alloc_pseudo+0x1c/0xc0
[  594.242292][T15760]  alloc_file_pseudo+0x118/0x290
[  594.242304][T15760]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  594.242315][T15760]  ? security_inode_init_security_anon+0x7b/0x230
[  594.242332][T15760]  __anon_inode_getfile+0xe8/0x280
[  594.242348][T15760]  io_zcrx_ctrl+0x264/0x550
[  594.242364][T15760]  ? __pfx_io_zcrx_ctrl+0x10/0x10
[  594.242388][T15760]  __do_sys_io_uring_register+0xc26/0x1c20
[  594.242406][T15760]  ? __pfx___do_sys_io_uring_register+0x10/0x10
[  594.242420][T15760]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  594.242434][T15760]  ? __fget_files+0x21f/0x3d0
[  594.242451][T15760]  ? fput+0x7c/0x100
[  594.242467][T15760]  ? ksys_write+0x1ac/0x250
[  594.242481][T15760]  ? __pfx_ksys_write+0x10/0x10
[  594.242498][T15760]  __do_fast_syscall_32+0x13a/0x8b0
[  594.242510][T15760]  ? lockdep_hardirqs_on+0x7d/0x110
[  594.242522][T15760]  do_fast_syscall_32+0x32/0x70
[  594.242534][T15760]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  594.242562][T15760] RIP: 0023:0xf740efec
[  594.242575][T15760] Code: Unable to access opcode bytes at 0xf740efc2.
[  594.242580][T15760] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 00000000000001ab
[  594.242592][T15760] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000024
[  594.242599][T15760] RDX: 0000000080000400 RSI: 0000000000000000 RDI: 0000000000000000
[  594.242606][T15760] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  594.242612][T15760] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  594.242619][T15760] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  594.242633][T15760]  </TASK>
[  594.431250][T15767] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3108'.
[  594.432576][T15767] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3108'.
[  594.533302][T15772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3110'.
[  594.535387][T15772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  594.587115][T15772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  594.638139][T15772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  595.517399][T15796] rxe_eth0 speed is unknown, defaulting to 1000
[  595.520762][  T854] usb 6-1: new low-speed USB device number 11 using dummy_hcd
[  595.700682][  T854] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  595.701472][  T854] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[  595.701508][  T854] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  595.701529][  T854] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  595.702284][  T854] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[  595.702304][  T854] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  595.702318][  T854] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  595.703049][  T854] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[  595.703069][  T854] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  595.703082][  T854] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  595.705299][  T854] usb 6-1: string descriptor 0 read error: -22
[  595.705352][  T854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  595.710148][  T854] adutux 6-1:168.0: interrupt endpoints not found
[  595.779568][T14260] usb 8-1: new full-speed USB device number 107 using dummy_hcd
[  595.914565][  T854] usb 6-1: USB disconnect, device number 11
[  595.935298][T14260] usb 8-1: not running at top speed; connect to a high speed hub
[  595.935322][T14260] usb 8-1: New USB device found, idVendor=20f4, idProduct=624d, bcdDevice=17.50
[  595.939144][T14260] usb 8-1: config 3 has an invalid interface number: 235 but max is 1
[  595.939158][T14260] usb 8-1: config 3 has an invalid interface number: 130 but max is 1
[  595.939168][T14260] usb 8-1: config 3 has no interface number 0
[  595.939176][T14260] usb 8-1: config 3 has no interface number 1
[  595.939292][T14260] usb 8-1: config 3 interface 235 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  595.939305][T14260] usb 8-1: config 3 interface 235 has no altsetting 0
[  595.939318][T14260] usb 8-1: config 3 interface 130 has no altsetting 0
[  595.948015][T14260] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  595.948175][T14260] usb 8-1: Product: syz
[  595.948183][T14260] usb 8-1: Manufacturer: syz
[  595.948191][T14260] usb 8-1: SerialNumber: syz
[  595.962365][T15798] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  596.192252][T14260] usb 8-1: USB disconnect, device number 107
[  596.226580][T15803] evm: overlay not supported
[  596.458090][T15825] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3127'.
[  596.568034][T15832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3129'.
[  596.738838][T15841] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3132'.
[  596.750477][T15841] bridge0: port 2(bridge_slave_1) entered disabled state
[  596.750676][T15841] bridge0: port 1(bridge_slave_0) entered disabled state
[  596.759882][T15841] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3132'.
[  596.862138][T15851] tipc: Started in network mode
[  596.862166][T15851] tipc: Node identity aaaaaaaaaa17, cluster identity 4711
[  596.862448][T15851] tipc: Enabled bearer <eth:bond_slave_0>, priority 10
[  597.233098][T15862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  597.237093][T15862] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  597.631599][T15868] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3143'.
[  597.979598][ T5840] tipc: Node number set to 12429994
[  598.016758][T15875] 0x000000000000-0x000000010000 : ""
[  598.043313][T15875] ftl_cs: FTL header not found.
[  598.970156][T15889] overlay: ./file0 is not a directory
[  599.222503][T15896] FAULT_INJECTION: forcing a failure.
[  599.222503][T15896] name failslab, interval 1, probability 0, space 0, times 0
[  599.222524][T15896] CPU: 3 UID: 0 PID: 15896 Comm: syz.3.3153 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  599.222540][T15896] Tainted: [L]=SOFTLOCKUP
[  599.222544][T15896] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  599.222550][T15896] Call Trace:
[  599.222554][T15896]  <TASK>
[  599.222559][T15896]  dump_stack_lvl+0x100/0x190
[  599.222578][T15896]  should_fail_ex.cold+0x5/0xa
[  599.222593][T15896]  should_failslab+0xc2/0x120
[  599.222610][T15896]  __kmalloc_cache_noprof+0x91/0x6d0
[  599.222624][T15896]  ? init_srcu_struct_fields+0xa67/0xfa0
[  599.222645][T15896]  init_srcu_struct_fields+0xa67/0xfa0
[  599.222664][T15896]  kvm_dev_ioctl+0x58c/0x1b50
[  599.222679][T15896]  ? find_held_lock+0x2b/0x80
[  599.222693][T15896]  ? hook_file_ioctl_common+0x140/0x440
[  599.222707][T15896]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  599.222721][T15896]  ? __fget_files+0x21f/0x3d0
[  599.222738][T15896]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  599.222751][T15896]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  599.222766][T15896]  __do_fast_syscall_32+0x13a/0x8b0
[  599.222778][T15896]  ? lockdep_hardirqs_on+0x7d/0x110
[  599.222790][T15896]  do_fast_syscall_32+0x32/0x70
[  599.222802][T15896]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  599.222817][T15896] RIP: 0023:0xf7fb3fec
[  599.222830][T15896] Code: Unable to access opcode bytes at 0xf7fb3fc2.
[  599.222835][T15896] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  599.222846][T15896] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01
[  599.222854][T15896] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  599.222860][T15896] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  599.222867][T15896] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  599.222873][T15896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  599.222887][T15896]  </TASK>
[  599.387326][T15904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3155'.
[  599.435944][T15904] UBIFS error (pid: 15904): cannot open "ubi0_0", error -19
[  599.442747][T15904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3155'.
[  599.603682][T15917] LUN: removable file: (no medium)
[  599.660350][T15917] netlink: 'syz.2.3160': attribute type 1 has an invalid length.
[  599.767628][T15917] 8021q: adding VLAN 0 to HW filter on device bond2
[  599.932845][T15924] syzkaller1: entered promiscuous mode
[  599.932860][T15924] syzkaller1: entered allmulticast mode
[  600.207039][T15935] FAULT_INJECTION: forcing a failure.
[  600.207039][T15935] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  600.207060][T15935] CPU: 1 UID: 0 PID: 15935 Comm: syz.1.3165 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  600.207076][T15935] Tainted: [L]=SOFTLOCKUP
[  600.207080][T15935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  600.207087][T15935] Call Trace:
[  600.207091][T15935]  <TASK>
[  600.207096][T15935]  dump_stack_lvl+0x100/0x190
[  600.207117][T15935]  should_fail_ex.cold+0x5/0xa
[  600.207132][T15935]  _copy_to_user+0x32/0xd0
[  600.207145][T15935]  simple_read_from_buffer+0xcb/0x170
[  600.207162][T15935]  proc_fail_nth_read+0x1af/0x230
[  600.207179][T15935]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  600.207194][T15935]  ? rw_verify_area+0xce/0x6d0
[  600.207207][T15935]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  600.207222][T15935]  vfs_read+0x1e4/0xb40
[  600.207236][T15935]  ? lock_acquire+0x1d1/0x380
[  600.207252][T15935]  ? __fget_files+0x34/0x3d0
[  600.207267][T15935]  ? __pfx_vfs_read+0x10/0x10
[  600.207279][T15935]  ? find_held_lock+0x2b/0x80
[  600.207293][T15935]  ? __fget_files+0x215/0x3d0
[  600.207310][T15935]  ? __fget_files+0x21f/0x3d0
[  600.207329][T15935]  ksys_read+0x12a/0x250
[  600.207343][T15935]  ? __pfx_ksys_read+0x10/0x10
[  600.207360][T15935]  do_int80_emulation+0x166/0x650
[  600.207378][T15935]  asm_int80_emulation+0x1a/0x20
[  600.207394][T15935] RIP: 0023:0xf71077eb
[  600.207407][T15935] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  600.207422][T15935] RSP: 002b:00000000f53c64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  600.207439][T15935] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53c65d0
[  600.207452][T15935] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  600.207462][T15935] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  600.207472][T15935] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  600.207482][T15935] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  600.207504][T15935]  </TASK>
[  600.408933][T15943] rxe_eth0 speed is unknown, defaulting to 1000
[  600.555933][T15950] FAULT_INJECTION: forcing a failure.
[  600.555933][T15950] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  600.555955][T15950] CPU: 0 UID: 0 PID: 15950 Comm: syz.3.3167 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  600.555971][T15950] Tainted: [L]=SOFTLOCKUP
[  600.555975][T15950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  600.555982][T15950] Call Trace:
[  600.555986][T15950]  <TASK>
[  600.555991][T15950]  dump_stack_lvl+0x100/0x190
[  600.556009][T15950]  should_fail_ex.cold+0x5/0xa
[  600.556022][T15950]  ? prepare_alloc_pages+0x16d/0x5b0
[  600.556041][T15950]  should_fail_alloc_page+0xeb/0x140
[  600.556060][T15950]  prepare_alloc_pages+0x1f0/0x5b0
[  600.556077][T15950]  ? is_bpf_text_address+0x94/0x1a0
[  600.556096][T15950]  __alloc_frozen_pages_noprof+0x1e9/0x3300
[  600.556117][T15950]  ? stack_trace_save+0x8e/0xc0
[  600.556132][T15950]  ? __pfx_stack_trace_save+0x10/0x10
[  600.556147][T15950]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  600.556163][T15950]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  600.556177][T15950]  ? is_bpf_text_address+0x94/0x1a0
[  600.556196][T15950]  ? kasan_save_stack+0x3f/0x50
[  600.556212][T15950]  ? kasan_save_stack+0x30/0x50
[  600.556238][T15950]  ? kasan_save_track+0x14/0x30
[  600.556254][T15950]  ? __kasan_slab_alloc+0x89/0x90
[  600.556270][T15950]  ? kmem_cache_alloc_node_noprof+0x282/0x6e0
[  600.556285][T15950]  ? alloc_vmap_area+0x640/0x2bb0
[  600.556300][T15950]  ? __get_vm_area_node+0x1ed/0x350
[  600.556315][T15950]  ? __vmalloc_node_range_noprof+0x268/0x1420
[  600.556326][T15950]  ? __vmalloc_node_noprof+0xad/0xf0
[  600.556342][T15950]  ? __vmalloc_noprof+0xa3/0x120
[  600.556358][T15950]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  600.556374][T15950]  ? bpf_prog_alloc+0x3b/0x200
[  600.556389][T15950]  ? bpf_prog_load+0x49e/0x2ab0
[  600.556404][T15950]  ? __sys_bpf+0x1f46/0x4a30
[  600.556416][T15950]  ? __ia32_sys_bpf+0xcc/0x170
[  600.556429][T15950]  ? __do_fast_syscall_32+0x13a/0x8b0
[  600.556441][T15950]  ? do_fast_syscall_32+0x32/0x70
[  600.556458][T15950]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  600.556476][T15950]  ? policy_nodemask+0xed/0x4f0
[  600.556488][T15950]  alloc_pages_mpol+0x201/0x550
[  600.556500][T15950]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  600.556514][T15950]  alloc_pages_noprof+0x1a/0x160
[  600.556527][T15950]  get_free_pages_noprof+0x10/0xb0
[  600.556542][T15950]  __kasan_populate_vmalloc+0xa0/0x210
[  600.556560][T15950]  alloc_vmap_area+0x95d/0x2bb0
[  600.556580][T15950]  ? kasan_save_track+0x14/0x30
[  600.556595][T15950]  ? __kasan_kmalloc+0xaa/0xb0
[  600.556610][T15950]  ? __pfx_alloc_vmap_area+0x10/0x10
[  600.556626][T15950]  ? __get_vm_area_node+0x124/0x350
[  600.556645][T15950]  __get_vm_area_node+0x1ed/0x350
[  600.556664][T15950]  __vmalloc_node_range_noprof+0x268/0x1420
[  600.556675][T15950]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  600.556691][T15950]  ? process_measurement+0x4c8/0x2350
[  600.556703][T15950]  ? down_write+0x146/0x1f0
[  600.556716][T15950]  ? up_write+0x2dc/0x5b0
[  600.556728][T15950]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  600.556747][T15950]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  600.556765][T15950]  ? __lock_acquire+0x5c0/0x1f40
[  600.556786][T15950]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  600.556802][T15950]  __vmalloc_node_noprof+0xad/0xf0
[  600.556820][T15950]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  600.556837][T15950]  __vmalloc_noprof+0xa3/0x120
[  600.556848][T15950]  ? __pfx___vmalloc_noprof+0x10/0x10
[  600.556858][T15950]  ? lock_acquire+0x1d1/0x380
[  600.556874][T15950]  ? is_bpf_text_address+0x25/0x1a0
[  600.556891][T15950]  ? rcu_is_watching+0x13/0xc0
[  600.556904][T15950]  ? apparmor_capable+0x1d7/0x4d0
[  600.556917][T15950]  bpf_prog_alloc_no_stats+0x58/0x690
[  600.556933][T15950]  ? security_capable+0x80/0x260
[  600.556945][T15950]  bpf_prog_alloc+0x3b/0x200
[  600.556961][T15950]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  600.556978][T15950]  bpf_prog_load+0x49e/0x2ab0
[  600.556995][T15950]  ? __lock_acquire+0x5c0/0x1f40
[  600.557013][T15950]  ? __pfx_bpf_prog_load+0x10/0x10
[  600.557042][T15950]  __sys_bpf+0x1f46/0x4a30
[  600.557059][T15950]  ? __pfx___sys_bpf+0x10/0x10
[  600.557071][T15950]  ? lock_acquire+0x1d1/0x380
[  600.557087][T15950]  ? get_pid_task+0x2a/0x250
[  600.557099][T15950]  ? find_held_lock+0x2b/0x80
[  600.557115][T15950]  ? get_pid_task+0xfc/0x250
[  600.557126][T15950]  ? get_pid_task+0xfc/0x250
[  600.557142][T15950]  ? proc_fail_nth_write+0x9f/0x220
[  600.557157][T15950]  ? find_held_lock+0x2b/0x80
[  600.557173][T15950]  ? rcu_read_lock_any_held+0x6a/0x90
[  600.557188][T15950]  ? find_held_lock+0x2b/0x80
[  600.557200][T15950]  ? ksys_write+0x190/0x250
[  600.557214][T15950]  ? ksys_write+0x190/0x250
[  600.557227][T15950]  ? lock_acquire+0x1d1/0x380
[  600.557264][T15950]  ? fput+0x7c/0x100
[  600.557284][T15950]  ? __ia32_sys_bpf+0xcc/0x170
[  600.557297][T15950]  __ia32_sys_bpf+0xcc/0x170
[  600.557311][T15950]  ? __do_fast_syscall_32+0xb3/0x8b0
[  600.557323][T15950]  __do_fast_syscall_32+0x13a/0x8b0
[  600.557335][T15950]  ? lockdep_hardirqs_on+0x7d/0x110
[  600.557350][T15950]  do_fast_syscall_32+0x32/0x70
[  600.557363][T15950]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  600.557377][T15950] RIP: 0023:0xf7fb3fec
[  600.557389][T15950] Code: Unable to access opcode bytes at 0xf7fb3fc2.
[  600.557394][T15950] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  600.557406][T15950] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000680
[  600.557413][T15950] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000
[  600.557419][T15950] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  600.557426][T15950] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  600.557432][T15950] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  600.557446][T15950]  </TASK>
[  600.557813][T15950] syz.3.3167: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  600.558469][T15950] CPU: 0 UID: 0 PID: 15950 Comm: syz.3.3167 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  600.558485][T15950] Tainted: [L]=SOFTLOCKUP
[  600.558489][T15950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  600.558495][T15950] Call Trace:
[  600.558500][T15950]  <TASK>
[  600.558504][T15950]  dump_stack_lvl+0x100/0x190
[  600.558522][T15950]  warn_alloc.cold+0x9e/0xb2
[  600.558534][T15950]  ? __pfx_warn_alloc+0x10/0x10
[  600.558547][T15950]  ? lockdep_hardirqs_on+0x7d/0x110
[  600.558560][T15950]  ? __get_vm_area_node+0x2f0/0x350
[  600.558579][T15950]  ? __get_vm_area_node+0x22b/0x350
[  600.558615][T15950]  __vmalloc_node_range_noprof+0xfa2/0x1420
[  600.558626][T15950]  ? process_measurement+0x4c8/0x2350
[  600.558638][T15950]  ? down_write+0x146/0x1f0
[  600.558651][T15950]  ? up_write+0x2dc/0x5b0
[  600.558663][T15950]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  600.558683][T15950]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  600.558701][T15950]  ? __lock_acquire+0x5c0/0x1f40
[  600.558721][T15950]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  600.558737][T15950]  __vmalloc_node_noprof+0xad/0xf0
[  600.558755][T15950]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  600.558773][T15950]  __vmalloc_noprof+0xa3/0x120
[  600.558783][T15950]  ? __pfx___vmalloc_noprof+0x10/0x10
[  600.558793][T15950]  ? lock_acquire+0x1d1/0x380
[  600.558809][T15950]  ? is_bpf_text_address+0x25/0x1a0
[  600.558826][T15950]  ? rcu_is_watching+0x13/0xc0
[  600.558839][T15950]  ? apparmor_capable+0x1d7/0x4d0
[  600.558852][T15950]  bpf_prog_alloc_no_stats+0x58/0x690
[  600.558868][T15950]  ? security_capable+0x80/0x260
[  600.558880][T15950]  bpf_prog_alloc+0x3b/0x200
[  600.558895][T15950]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  600.558912][T15950]  bpf_prog_load+0x49e/0x2ab0
[  600.558929][T15950]  ? __lock_acquire+0x5c0/0x1f40
[  600.558947][T15950]  ? __pfx_bpf_prog_load+0x10/0x10
[  600.558976][T15950]  __sys_bpf+0x1f46/0x4a30
[  600.558992][T15950]  ? __pfx___sys_bpf+0x10/0x10
[  600.559004][T15950]  ? lock_acquire+0x1d1/0x380
[  600.559020][T15950]  ? get_pid_task+0x2a/0x250
[  600.559032][T15950]  ? find_held_lock+0x2b/0x80
[  600.559045][T15950]  ? get_pid_task+0xfc/0x250
[  600.559056][T15950]  ? get_pid_task+0xfc/0x250
[  600.559071][T15950]  ? proc_fail_nth_write+0x9f/0x220
[  600.559086][T15950]  ? find_held_lock+0x2b/0x80
[  600.559102][T15950]  ? rcu_read_lock_any_held+0x6a/0x90
[  600.559116][T15950]  ? find_held_lock+0x2b/0x80
[  600.559128][T15950]  ? ksys_write+0x190/0x250
[  600.559141][T15950]  ? ksys_write+0x190/0x250
[  600.559155][T15950]  ? lock_acquire+0x1d1/0x380
[  600.559180][T15950]  ? fput+0x7c/0x100
[  600.559198][T15950]  ? __ia32_sys_bpf+0xcc/0x170
[  600.559211][T15950]  __ia32_sys_bpf+0xcc/0x170
[  600.559225][T15950]  ? __do_fast_syscall_32+0xb3/0x8b0
[  600.559237][T15950]  __do_fast_syscall_32+0x13a/0x8b0
[  600.559249][T15950]  ? lockdep_hardirqs_on+0x7d/0x110
[  600.559260][T15950]  do_fast_syscall_32+0x32/0x70
[  600.559272][T15950]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  600.559286][T15950] RIP: 0023:0xf7fb3fec
[  600.559298][T15950] Code: Unable to access opcode bytes at 0xf7fb3fc2.
[  600.559303][T15950] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  600.559313][T15950] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000680
[  600.559320][T15950] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000
[  600.559327][T15950] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  600.559333][T15950] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  600.559341][T15950] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  600.559368][T15950]  </TASK>
[  600.559569][T15950] Mem-Info:
[  600.559577][T15950] active_anon:3973 inactive_anon:151 isolated_anon:0
[  600.559577][T15950]  active_file:2668 inactive_file:15003 isolated_file:0
[  600.559577][T15950]  unevictable:1000 dirty:47 writeback:100
[  600.559577][T15950]  slab_reclaimable:6299 slab_unreclaimable:58602
[  600.559577][T15950]  mapped:27476 shmem:3852 pagetables:1415
[  600.559577][T15950]  sec_pagetables:315 bounce:0
[  600.559577][T15950]  kernel_misc_reclaimable:0
[  600.559577][T15950]  free:65913 free_pcp:7054 free_cma:0
[  600.559603][T15950] Node 0 active_anon:4kB inactive_anon:36kB active_file:8kB inactive_file:236kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:4kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8152kB pagetables:936kB sec_pagetables:1132kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  600.559630][T15950] Node 1 active_anon:15888kB inactive_anon:568kB active_file:10664kB inactive_file:59776kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:109848kB dirty:184kB writeback:400kB shmem:13408kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6720kB pagetables:4724kB sec_pagetables:128kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  600.559658][T15950] Node 0 DMA free:1556kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB zspages:60kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:588kB local_pcp:0kB free_cma:0kB
[  600.559687][T15950] lowmem_reserve[]: 0 259 259 259 259
[  600.559705][T15950] Node 0 DMA32 free:11540kB boost:8192kB min:19896kB low:22820kB high:25744kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:36kB active_file:8kB inactive_file:232kB unevictable:2000kB writepending:0kB zspages:2372kB present:1032196kB managed:265348kB mlocked:0kB bounce:0kB free_pcp:6824kB local_pcp:24kB free_cma:0kB
[  600.559734][T15950] lowmem_reserve[]: 0 0 0 0 0
[  600.559752][T15950] Node 1 DMA32 free:250556kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:15888kB inactive_anon:568kB active_file:10664kB inactive_file:59776kB unevictable:2000kB writepending:584kB zspages:4364kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:20804kB local_pcp:1064kB free_cma:0kB
[  600.559782][T15950] lowmem_reserve[]: 0 0 0 0 0
[  600.559799][T15950] Node 0 DMA: 25*4kB (UM) 34*8kB (UM) 10*16kB (U) 4*32kB (UM) 8*64kB (UM) 1*128kB (U) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1556kB
[  600.559870][T15950] Node 0 DMA32: 415*4kB (UME) 47*8kB (UME) 94*16kB (UME) 108*32kB (UME) 31*64kB (UME) 8*128kB (UME) 6*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 11540kB
[  600.559940][T15950] Node 1 DMA32: 11193*4kB (M) 2834*8kB (UME) 762*16kB (ME) 397*32kB (UME) 204*64kB (UME) 155*128kB (UME) 167*256kB (UME) 69*512kB (UME) 22*1024kB (ME) 6*2048kB (UM) 3*4096kB (UM) = 250420kB
[  600.560022][T15950] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  600.560030][T15950] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  600.560039][T15950] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  600.560046][T15950] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  600.560054][T15950] 21779 total pagecache pages
[  600.560058][T15950] 231 pages in swap cache
[  600.560062][T15950] Free swap  = 99768kB
[  600.560066][T15950] Total swap = 124996kB
[  600.560070][T15950] 524155 pages RAM
[  600.560074][T15950] 0 pages HighMem/MovableOnly
[  600.560078][T15950] 216926 pages reserved
[  600.560081][T15950] 0 pages cma reserved
[  600.914476][T15958] FAULT_INJECTION: forcing a failure.
[  600.914476][T15958] name failslab, interval 1, probability 0, space 0, times 0
[  600.914497][T15958] CPU: 2 UID: 0 PID: 15958 Comm: syz.2.3174 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  600.914513][T15958] Tainted: [L]=SOFTLOCKUP
[  600.914517][T15958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  600.914523][T15958] Call Trace:
[  600.914527][T15958]  <TASK>
[  600.914532][T15958]  dump_stack_lvl+0x100/0x190
[  600.914552][T15958]  should_fail_ex.cold+0x5/0xa
[  600.914566][T15958]  should_failslab+0xc2/0x120
[  600.914584][T15958]  __kmalloc_noprof+0xfc/0x840
[  600.914600][T15958]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[  600.914620][T15958]  genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[  600.914638][T15958]  genl_family_rcv_msg_doit+0xc7/0x300
[  600.914654][T15958]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  600.914668][T15958]  ? genl_get_cmd+0x3e7/0x760
[  600.914685][T15958]  ? netlink_sendmsg+0x680/0xda0
[  600.914696][T15958]  ? ____sys_sendmsg+0xa4d/0xbe0
[  600.914712][T15958]  ? __radix_tree_lookup+0x217/0x2b0
[  600.914732][T15958]  genl_rcv_msg+0x560/0x800
[  600.914748][T15958]  ? __pfx_genl_rcv_msg+0x10/0x10
[  600.914762][T15958]  ? __lock_acquire+0x5c0/0x1f40
[  600.914778][T15958]  ? __pfx_nbd_genl_connect+0x10/0x10
[  600.914796][T15958]  ? __lock_acquire+0x5c0/0x1f40
[  600.914815][T15958]  netlink_rcv_skb+0x159/0x420
[  600.914827][T15958]  ? __pfx_genl_rcv_msg+0x10/0x10
[  600.914842][T15958]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  600.914860][T15958]  ? netlink_deliver_tap+0x1ae/0xcc0
[  600.914873][T15958]  genl_rcv+0x28/0x40
[  600.914886][T15958]  netlink_unicast+0x65f/0x950
[  600.914901][T15958]  ? __pfx_netlink_unicast+0x10/0x10
[  600.914917][T15958]  netlink_sendmsg+0x8b0/0xda0
[  600.914932][T15958]  ? __pfx_netlink_sendmsg+0x10/0x10
[  600.914945][T15958]  ? apparmor_socket_sendmsg+0x165/0x280
[  600.914960][T15958]  ____sys_sendmsg+0xa4d/0xbe0
[  600.914976][T15958]  ? __pfx_netlink_sendmsg+0x10/0x10
[  600.914989][T15958]  ? __pfx_____sys_sendmsg+0x10/0x10
[  600.915013][T15958]  ___sys_sendmsg+0x190/0x1e0
[  600.915031][T15958]  ? __pfx____sys_sendmsg+0x10/0x10
[  600.915055][T15958]  ? find_held_lock+0x2b/0x80
[  600.915078][T15958]  __sys_sendmsg+0x160/0x210
[  600.915092][T15958]  ? __pfx___sys_sendmsg+0x10/0x10
[  600.915110][T15958]  ? __pfx_ksys_write+0x10/0x10
[  600.915127][T15958]  __do_fast_syscall_32+0x13a/0x8b0
[  600.915139][T15958]  ? lockdep_hardirqs_on+0x7d/0x110
[  600.915151][T15958]  do_fast_syscall_32+0x32/0x70
[  600.915163][T15958]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  600.915178][T15958] RIP: 0023:0xf740efec
[  600.915191][T15958] Code: Unable to access opcode bytes at 0xf740efc2.
[  600.915196][T15958] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  600.915208][T15958] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001ac0
[  600.915215][T15958] RDX: 000000000400400c RSI: 0000000000000000 RDI: 0000000000000000
[  600.915221][T15958] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  600.915232][T15958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  600.915239][T15958] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  600.915253][T15958]  </TASK>
[  601.030528][T15962] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  601.030821][T15962] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  601.103751][T15964] veth1_to_team: entered promiscuous mode
[  601.165328][T15970] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3178'.
[  601.288618][T15980] FAULT_INJECTION: forcing a failure.
[  601.288618][T15980] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  601.288640][T15980] CPU: 3 UID: 0 PID: 15980 Comm: syz.1.3181 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  601.288655][T15980] Tainted: [L]=SOFTLOCKUP
[  601.288659][T15980] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  601.288666][T15980] Call Trace:
[  601.288670][T15980]  <TASK>
[  601.288675][T15980]  dump_stack_lvl+0x100/0x190
[  601.288693][T15980]  should_fail_ex.cold+0x5/0xa
[  601.288708][T15980]  _copy_to_user+0x32/0xd0
[  601.288732][T15980]  binder_ioctl+0x48c9/0x74a0
[  601.288755][T15980]  ? tomoyo_path_number_perm+0x188/0x580
[  601.288771][T15980]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  601.288786][T15980]  ? __pfx_binder_ioctl+0x10/0x10
[  601.288803][T15980]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  601.288821][T15980]  ? do_vfs_ioctl+0x226/0x13e0
[  601.288835][T15980]  ? __pfx_autoremove_wake_function+0x10/0x10
[  601.288854][T15980]  ? find_held_lock+0x2b/0x80
[  601.288871][T15980]  ? __fget_files+0x21f/0x3d0
[  601.288888][T15980]  ? __pfx_binder_ioctl+0x10/0x10
[  601.288901][T15980]  compat_ptr_ioctl+0x6e/0xa0
[  601.288913][T15980]  ? __pfx_compat_ptr_ioctl+0x10/0x10
[  601.288925][T15980]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  601.288941][T15980]  __do_fast_syscall_32+0x13a/0x8b0
[  601.288953][T15980]  ? lockdep_hardirqs_on+0x7d/0x110
[  601.288965][T15980]  do_fast_syscall_32+0x32/0x70
[  601.288977][T15980]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  601.288991][T15980] RIP: 0023:0xf73aefec
[  601.289003][T15980] Code: Unable to access opcode bytes at 0xf73aefc2.
[  601.289009][T15980] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  601.289020][T15980] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c0306201
[  601.289027][T15980] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000
[  601.289033][T15980] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  601.289040][T15980] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  601.289046][T15980] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  601.289060][T15980]  </TASK>
[  601.289100][T15980] binder: 15979:15980 ioctl c0306201 80000180 returned -14
[  603.209583][T15962] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[  603.209640][   T66] Bluetooth: hci4: command 0x0c1a tx timeout
[  603.958383][T15962] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  603.958687][T15962] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  603.958913][T15962] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  604.094015][T15996] FAULT_INJECTION: forcing a failure.
[  604.094015][T15996] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  604.094039][T15996] CPU: 2 UID: 0 PID: 15996 Comm: syz.3.3186 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  604.094061][T15996] Tainted: [L]=SOFTLOCKUP
[  604.094067][T15996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  604.094077][T15996] Call Trace:
[  604.094083][T15996]  <TASK>
[  604.094089][T15996]  dump_stack_lvl+0x100/0x190
[  604.094120][T15996]  should_fail_ex.cold+0x5/0xa
[  604.094143][T15996]  strncpy_from_user+0x3b/0x2d0
[  604.094187][T15996]  do_getname+0x78/0x390
[  604.094209][T15996]  __ia32_sys_renameat2+0xd8/0x140
[  604.094230][T15996]  __do_fast_syscall_32+0x13a/0x8b0
[  604.094249][T15996]  ? lockdep_hardirqs_on+0x7d/0x110
[  604.094270][T15996]  do_fast_syscall_32+0x32/0x70
[  604.094290][T15996]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  604.094313][T15996] RIP: 0023:0xf7fb3fec
[  604.094333][T15996] Code: Unable to access opcode bytes at 0xf7fb3fc2.
[  604.094341][T15996] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000161
[  604.094360][T15996] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000580
[  604.094372][T15996] RDX: 00000000ffffff9c RSI: 00000000800005c0 RDI: 0000000000000002
[  604.094383][T15996] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  604.094394][T15996] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  604.094406][T15996] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  604.094430][T15996]  </TASK>
[  604.160720][   T66] Bluetooth: hci3: unexpected event for opcode 0x1002
[  604.199519][T13271] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  604.208893][T16000] netlink: 'syz.3.3188': attribute type 1 has an invalid length.
[  604.225514][T16000] 8021q: adding VLAN 0 to HW filter on device bond2
[  604.273133][T16000] 8021q: adding VLAN 0 to HW filter on device bond2
[  604.273302][T16000] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address
[  604.273651][T16000] bond2: (slave wireguard0): Error -95 calling set_mac_address
[  604.400003][T13271] usb 6-1: not running at top speed; connect to a high speed hub
[  604.400033][T13271] usb 6-1: New USB device found, idVendor=20f4, idProduct=624d, bcdDevice=17.50
[  604.400829][T13271] usb 6-1: config 3 has an invalid interface number: 235 but max is 1
[  604.400843][T13271] usb 6-1: config 3 has an invalid interface number: 130 but max is 1
[  604.400853][T13271] usb 6-1: config 3 has no interface number 0
[  604.400861][T13271] usb 6-1: config 3 has no interface number 1
[  604.400882][T13271] usb 6-1: config 3 interface 235 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  604.400893][T13271] usb 6-1: config 3 interface 235 has no altsetting 0
[  604.400902][T13271] usb 6-1: config 3 interface 130 has no altsetting 0
[  604.402702][T13271] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  604.402715][T13271] usb 6-1: Product: syz
[  604.402722][T13271] usb 6-1: Manufacturer: syz
[  604.402732][T13271] usb 6-1: SerialNumber: syz
[  604.404718][T15988] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  604.626245][T13271] usb 6-1: USB disconnect, device number 12
[  604.948502][T16010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3189'.
[  605.004003][T16010] UBIFS error (pid: 16010): cannot open "ubi0_0", error -19
[  605.007031][T16010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3189'.
[  605.197068][T16013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3190'.
[  605.304251][   T66] Bluetooth: hci1: command 0x0c1a tx timeout
[  605.435478][T16013] UBIFS error (pid: 16013): cannot open "ubi0_0", error -19
[  605.440713][T16013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3190'.
[  605.453506][T16018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3192'.
[  605.497049][T16022] 9pnet_virtio: no channels available for device syz
[  605.594913][T16025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3193'.
[  605.719093][T16025] UBIFS error (pid: 16025): cannot open "ubi0_0", error -19
[  605.736281][T16025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3193'.
[  605.961657][T16028] vlan0: entered promiscuous mode
[  606.009590][   T66] Bluetooth: hci2: command 0x0c1a tx timeout
[  606.349317][T16033] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3196'.
[  606.642501][T16042] syz.2.3199 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  606.687201][   T42] audit: type=1326 audit(1792267404.838:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16043 comm="syz.2.3202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000
[  606.687802][   T42] audit: type=1326 audit(1792267404.838:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16043 comm="syz.2.3202" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf740efec code=0x7ffc0000
[  606.687827][   T42] audit: type=1326 audit(1792267404.838:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16043 comm="syz.2.3202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000
[  606.687928][   T42] audit: type=1326 audit(1792267404.838:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16043 comm="syz.2.3202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000
[  606.688113][   T42] audit: type=1326 audit(1792267404.838:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16043 comm="syz.2.3202" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf740efec code=0x7ffc0000
[  606.690668][   T42] audit: type=1326 audit(1792267404.838:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16043 comm="syz.2.3202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000
[  606.690694][   T42] audit: type=1326 audit(1792267404.838:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16043 comm="syz.2.3202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000
[  606.691047][   T42] audit: type=1326 audit(1792267404.848:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16043 comm="syz.2.3202" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71677eb code=0x7ffc0000
[  606.691288][   T42] audit: type=1326 audit(1792267404.848:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16043 comm="syz.2.3202" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf740efec code=0x7ffc0000
[  606.691488][   T42] audit: type=1326 audit(1792267404.848:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16043 comm="syz.2.3202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000
[  606.748430][T16045] netlink: 'syz.2.3202': attribute type 30 has an invalid length.
[  606.860100][T16051] FAULT_INJECTION: forcing a failure.
[  606.860100][T16051] name failslab, interval 1, probability 0, space 0, times 0
[  606.860132][T16051] CPU: 0 UID: 0 PID: 16051 Comm: syz.0.3203 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  606.860156][T16051] Tainted: [L]=SOFTLOCKUP
[  606.860163][T16051] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  606.860173][T16051] Call Trace:
[  606.860179][T16051]  <TASK>
[  606.860186][T16051]  dump_stack_lvl+0x100/0x190
[  606.860214][T16051]  should_fail_ex.cold+0x5/0xa
[  606.860237][T16051]  should_failslab+0xc2/0x120
[  606.860263][T16051]  __kmalloc_cache_noprof+0x91/0x6d0
[  606.860285][T16051]  ? ppp_register_net_channel+0x52/0x680
[  606.860317][T16051]  ppp_register_net_channel+0x52/0x680
[  606.860338][T16051]  ? sk_setup_caps+0x312/0xbc0
[  606.860360][T16051]  pptp_connect+0xad2/0xdf0
[  606.860382][T16051]  ? __pfx_pptp_connect+0x10/0x10
[  606.860407][T16051]  ? apparmor_socket_connect+0x116/0x1f0
[  606.860430][T16051]  __sys_connect_file+0x146/0x1a0
[  606.860452][T16051]  __sys_connect+0x141/0x170
[  606.860469][T16051]  ? __pfx___sys_connect+0x10/0x10
[  606.860486][T16051]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  606.860513][T16051]  ? ksys_write+0x1ac/0x250
[  606.860535][T16051]  ? __pfx_ksys_write+0x10/0x10
[  606.860558][T16051]  __ia32_sys_connect+0x71/0xb0
[  606.860576][T16051]  ? lockdep_hardirqs_on+0x7d/0x110
[  606.860592][T16051]  __do_fast_syscall_32+0x13a/0x8b0
[  606.860609][T16051]  ? lockdep_hardirqs_on+0x7d/0x110
[  606.860627][T16051]  do_fast_syscall_32+0x32/0x70
[  606.860646][T16051]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  606.860667][T16051] RIP: 0023:0xf747efec
[  606.860686][T16051] Code: Unable to access opcode bytes at 0xf747efc2.
[  606.860694][T16051] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 000000000000016a
[  606.860711][T16051] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002340
[  606.860722][T16051] RDX: 000000000000001e RSI: 0000000000000000 RDI: 0000000000000000
[  606.860732][T16051] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  606.860742][T16051] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  606.860752][T16051] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  606.860775][T16051]  </TASK>
[  606.860783][T16051] PPTP: failed to register PPP channel (-12)
[  606.869924][T16051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  606.870265][T16051] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  606.919489][   T34] usb 6-1: new low-speed USB device number 13 using dummy_hcd
[  606.922041][T16051] netlink: 'syz.0.3203': attribute type 30 has an invalid length.
[  607.044887][T16055] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  607.091948][   T34] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  607.092820][   T34] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  607.092849][   T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  607.092862][   T34] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  607.092874][   T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  607.092887][   T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  607.093683][   T34] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  607.093720][   T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  607.093742][   T34] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  607.093759][   T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  607.093772][   T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  607.094587][   T34] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  607.094607][   T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  607.094620][   T34] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  607.094632][   T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  607.094645][   T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  607.096934][   T34] usb 6-1: string descriptor 0 read error: -22
[  607.096988][   T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.106537][   T34] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  607.116625][T16060] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3205'.
[  607.202585][T16063] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  607.325873][T16065] netlink: 'syz.2.3207': attribute type 1 has an invalid length.
[  607.346098][T16065] 8021q: adding VLAN 0 to HW filter on device bond4
[  607.459629][   T12] bond0: (slave syz_tun): interface is now down
[  607.461079][   T12] bond0: now running without any active interface!
[  607.485757][T16073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  607.486133][T16073] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  607.535866][T16073] netlink: 'syz.0.3209': attribute type 30 has an invalid length.
[  607.599455][  T854] usb 8-1: new high-speed USB device number 108 using dummy_hcd
[  607.760235][  T854] usb 8-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00
[  607.763939][  T854] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.763954][  T854] usb 8-1: Product: syz
[  607.763962][  T854] usb 8-1: Manufacturer: syz
[  607.763969][  T854] usb 8-1: SerialNumber: syz
[  607.770835][  T854] usb 8-1: USB2VGA dongle found at address 108
[  607.771929][  T854] usb 8-1: Allocated 8 output buffers
[  608.044567][T16068] netlink: 'syz.3.3208': attribute type 30 has an invalid length.
[  608.076858][  T854] usb 8-1: Failed to early initialize device
[  608.084971][  T854] usb 8-1: USB disconnect, device number 108
[  608.275160][T16084] FAULT_INJECTION: forcing a failure.
[  608.275160][T16084] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  608.275181][T16084] CPU: 0 UID: 0 PID: 16084 Comm: syz.2.3212 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  608.275196][T16084] Tainted: [L]=SOFTLOCKUP
[  608.275201][T16084] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  608.275207][T16084] Call Trace:
[  608.275211][T16084]  <TASK>
[  608.275216][T16084]  dump_stack_lvl+0x100/0x190
[  608.275235][T16084]  should_fail_ex.cold+0x5/0xa
[  608.275261][T16084]  _copy_from_user+0x2e/0xd0
[  608.275275][T16084]  binder_thread_write+0x97b/0x4db0
[  608.275292][T16084]  ? kasan_save_free_info+0x3b/0x70
[  608.275307][T16084]  ? __lock_acquire+0x5c0/0x1f40
[  608.275324][T16084]  ? __pfx_binder_thread_write+0x10/0x10
[  608.275339][T16084]  ? binder_debug+0xe0/0x190
[  608.275351][T16084]  ? __pfx_binder_debug+0x10/0x10
[  608.275367][T16084]  ? __might_fault+0xc5/0x140
[  608.275386][T16084]  ? __pfx_binder_ioctl+0x10/0x10
[  608.275400][T16084]  binder_ioctl+0x28ca/0x74a0
[  608.275416][T16084]  ? tomoyo_path_number_perm+0x28f/0x580
[  608.275430][T16084]  ? tomoyo_path_number_perm+0x28f/0x580
[  608.275446][T16084]  ? tomoyo_path_number_perm+0x188/0x580
[  608.275460][T16084]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  608.275474][T16084]  ? __pfx_binder_ioctl+0x10/0x10
[  608.275491][T16084]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  608.275509][T16084]  ? do_vfs_ioctl+0x226/0x13e0
[  608.275522][T16084]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  608.275539][T16084]  ? find_held_lock+0x2b/0x80
[  608.275552][T16084]  ? __fget_files+0x215/0x3d0
[  608.275566][T16084]  ? hook_file_ioctl_common+0x140/0x440
[  608.275583][T16084]  ? __fget_files+0x21f/0x3d0
[  608.275599][T16084]  ? __pfx_binder_ioctl+0x10/0x10
[  608.275613][T16084]  compat_ptr_ioctl+0x6e/0xa0
[  608.275625][T16084]  ? __pfx_compat_ptr_ioctl+0x10/0x10
[  608.275637][T16084]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  608.275653][T16084]  __do_fast_syscall_32+0x13a/0x8b0
[  608.275665][T16084]  ? lockdep_hardirqs_on+0x7d/0x110
[  608.275677][T16084]  do_fast_syscall_32+0x32/0x70
[  608.275689][T16084]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  608.275703][T16084] RIP: 0023:0xf740efec
[  608.275716][T16084] Code: Unable to access opcode bytes at 0xf740efc2.
[  608.275721][T16084] RSP: 002b:00000000f540550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  608.275732][T16084] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0306201
[  608.275740][T16084] RDX: 0000000080000880 RSI: 0000000000000000 RDI: 0000000000000000
[  608.275746][T16084] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  608.275753][T16084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  608.275759][T16084] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  608.275773][T16084]  </TASK>
[  608.275814][T16084] binder: 16081:16084 ioctl c0306201 80000880 returned -14
[  608.618922][T16088] FAULT_INJECTION: forcing a failure.
[  608.618922][T16088] name failslab, interval 1, probability 0, space 0, times 0
[  608.618942][T16088] CPU: 2 UID: 0 PID: 16088 Comm: syz.3.3213 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  608.618957][T16088] Tainted: [L]=SOFTLOCKUP
[  608.618961][T16088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  608.618967][T16088] Call Trace:
[  608.618972][T16088]  <TASK>
[  608.618976][T16088]  dump_stack_lvl+0x100/0x190
[  608.618995][T16088]  should_fail_ex.cold+0x5/0xa
[  608.619010][T16088]  should_failslab+0xc2/0x120
[  608.619028][T16088]  __kmalloc_noprof+0xfc/0x840
[  608.619043][T16088]  ? aa_label_asxprint+0x75/0x130
[  608.619059][T16088]  aa_label_asxprint+0x75/0x130
[  608.619072][T16088]  apparmor_lsmprop_to_secctx+0xb2/0x1a0
[  608.619089][T16088]  security_lsmprop_to_secctx+0x146/0x1a0
[  608.619108][T16088]  audit_log_subj_ctx+0x34f/0x460
[  608.619123][T16088]  ? map_id_range_up+0x2ce/0x3b0
[  608.619140][T16088]  ? __pfx_audit_log_subj_ctx+0x10/0x10
[  608.619156][T16088]  ? audit_log_format+0xe8/0x130
[  608.619170][T16088]  ? apparmor_current_getlsmprop_subj+0x107/0x3c0
[  608.619185][T16088]  audit_log_task_context+0x88/0xb0
[  608.619199][T16088]  ? __pfx_audit_log_task_context+0x10/0x10
[  608.619217][T16088]  audit_log_task+0x1b7/0x3a0
[  608.619228][T16088]  ? __pfx_audit_log_task+0x10/0x10
[  608.619242][T16088]  audit_seccomp+0x79/0x190
[  608.619256][T16088]  __seccomp_filter+0x88c/0x1130
[  608.619272][T16088]  ? __pfx___seccomp_filter+0x10/0x10
[  608.619284][T16088]  ? count_memcg_events_mm.constprop.0+0x109/0x2a0
[  608.619306][T16088]  __seccomp_permit_syscall+0x207/0x2d0
[  608.619321][T16088]  do_int80_emulation+0x408/0x650
[  608.619335][T16088]  asm_int80_emulation+0x1a/0x20
[  608.619347][T16088] RIP: 0023:0xf71a77eb
[  608.619356][T16088] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  608.619367][T16088] RSP: 002b:00000000f546438c EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  608.619378][T16088] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f7271fa1
[  608.619397][T16088] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[  608.619405][T16088] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  608.619411][T16088] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  608.619417][T16088] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  608.619432][T16088]  </TASK>
[  608.869491][ T5840] usb 8-1: new high-speed USB device number 109 using dummy_hcd
[  609.007029][T16091] netlink: 'syz.0.3214': attribute type 1 has an invalid length.
[  609.022041][ T5840] usb 8-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00
[  609.031778][T16091] 8021q: adding VLAN 0 to HW filter on device bond3
[  609.036493][ T5840] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  609.036513][ T5840] usb 8-1: Product: syz
[  609.036528][ T5840] usb 8-1: Manufacturer: syz
[  609.036542][ T5840] usb 8-1: SerialNumber: syz
[  609.055480][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.055493][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.068052][ T5840] usb 8-1: USB2VGA dongle found at address 109
[  609.074939][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.074951][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.075007][ T5840] usb 8-1: Allocated 8 output buffers
[  609.078693][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.078709][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.099141][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.099160][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.111513][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.111530][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.116386][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.116404][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.121042][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.121057][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.133885][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.133896][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.137076][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.137086][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.142102][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.142118][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.145628][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.145638][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.148657][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.148672][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.152275][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.152285][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.155336][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.155345][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.158383][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.158393][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.161737][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.161746][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.164742][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.164751][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.167873][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.167883][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.171528][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.171542][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.174579][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.174589][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.177040][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.177049][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.181448][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.181461][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.185055][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.185067][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.188536][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.188546][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.193349][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.193365][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.198605][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.198620][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.207349][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.207366][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.211926][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.211941][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.216403][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.216418][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.221525][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.221540][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.225778][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.225792][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.230252][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.230268][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.234590][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.234604][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.238903][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.238912][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.241847][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.241856][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.246315][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.246324][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.248671][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.248685][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.251939][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.251949][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.254780][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.254789][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.257577][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.257586][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.261412][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.261422][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.264270][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.264279][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.267046][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.267055][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.269976][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.269986][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.272357][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.272366][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.275160][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.275169][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.278183][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.278193][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.281037][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.281046][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.283964][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.283973][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.288476][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.288486][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.291737][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.291747][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.294927][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.294937][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.300119][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.300133][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.303632][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.303646][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.306300][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.306311][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.311081][T16096] FAT-fs (sr0): bogus number of reserved sectors
[  609.311094][T16096] FAT-fs (sr0): Can't find a valid FAT filesystem
[  609.313988][T16088] netlink: 'syz.3.3213': attribute type 30 has an invalid length.
[  609.345974][ T5840] usb 8-1: Failed to early initialize device
[  609.354049][   T34] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  609.354166][ T5840] usb 8-1: USB disconnect, device number 109
[  609.449940][ T2322] usb 6-1: USB disconnect, device number 13
[  609.500792][   T34] usb 7-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00
[  609.507535][   T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  609.507559][   T34] usb 7-1: Product: syz
[  609.507571][   T34] usb 7-1: Manufacturer: syz
[  609.507584][   T34] usb 7-1: SerialNumber: syz
[  609.514104][   T34] usb 7-1: USB2VGA dongle found at address 18
[  609.515786][   T34] usb 7-1: Allocated 8 output buffers
[  609.772748][T16099] netlink: 'syz.2.3215': attribute type 30 has an invalid length.
[  609.791332][   T34] usb 7-1: Failed to early initialize device
[  609.796788][   T34] usb 7-1: USB disconnect, device number 18
[  609.819481][ T2322] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  609.861447][T16106] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3217'.
[  609.871119][T16109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  609.871437][T16109] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  609.878700][T16109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  609.880049][T16109] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  609.897273][T16111] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11)
[  609.897289][T16111] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  609.900170][T16111] vhci_hcd vhci_hcd.0: Device attached
[  609.900984][T16111] binder: 16110:16111 ioctl 50009403 80000b40 returned -22
[  609.901427][T16111] netdevsim netdevsim3 : renamed from netdevsim0 (while UP)
[  609.970668][ T2322] usb 6-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00
[  609.974388][ T2322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  609.974402][ T2322] usb 6-1: Product: syz
[  609.974410][ T2322] usb 6-1: Manufacturer: syz
[  609.974417][ T2322] usb 6-1: SerialNumber: syz
[  609.981240][ T2322] usb 6-1: USB2VGA dongle found at address 14
[  609.982725][ T2322] usb 6-1: Allocated 8 output buffers
[  610.079588][T13271] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  610.139458][T13271] usb 43-1: new full-speed USB device number 2 using vhci_hcd
[  610.261498][T16102] netlink: 'syz.1.3216': attribute type 30 has an invalid length.
[  610.293447][ T2322] usb 6-1: Failed to early initialize device
[  610.298521][ T2322] usb 6-1: USB disconnect, device number 14
[  610.609503][T14113] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  610.720724][T16112] vhci_hcd: connection reset by peer
[  610.730960][   T12] vhci_hcd vhci_hcd.3: stop threads
[  610.731529][   T12] vhci_hcd vhci_hcd.3: release socket
[  610.732601][   T12] vhci_hcd vhci_hcd.3: disconnect device
[  610.760752][T14113] usb 7-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00
[  610.765889][T14113] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  610.765912][T14113] usb 7-1: Product: syz
[  610.765927][T14113] usb 7-1: Manufacturer: syz
[  610.765939][T14113] usb 7-1: SerialNumber: syz
[  610.773235][T14113] usb 7-1: USB2VGA dongle found at address 19
[  610.774809][T14113] usb 7-1: Allocated 8 output buffers
[  611.071449][T16116] netlink: 'syz.2.3220': attribute type 30 has an invalid length.
[  611.114230][T14113] usb 7-1: Failed to early initialize device
[  611.124067][T14113] usb 7-1: USB disconnect, device number 19
[  611.520050][ T5847] usb 8-1: new high-speed USB device number 110 using dummy_hcd
[  611.659489][ T5847] usb 8-1: device descriptor read/64, error -71
[  611.965156][   T42] kauditd_printk_skb: 749 callbacks suppressed
[  611.965169][   T42] audit: type=1326 audit(1792267409.124:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.3.3223" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb3fec code=0x7ffc0000
[  611.966399][   T42] audit: type=1326 audit(1792267409.124:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.3.3223" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb3fec code=0x7ffc0000
[  611.993487][T16135] FAULT_INJECTION: forcing a failure.
[  611.993487][T16135] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  611.993507][T16135] CPU: 2 UID: 0 PID: 16135 Comm: syz.1.3226 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  611.993535][T16135] Tainted: [L]=SOFTLOCKUP
[  611.993540][T16135] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  611.993546][T16135] Call Trace:
[  611.993551][T16135]  <TASK>
[  611.993555][T16135]  dump_stack_lvl+0x100/0x190
[  611.993574][T16135]  should_fail_ex.cold+0x5/0xa
[  611.993590][T16135]  _copy_to_user+0x32/0xd0
[  611.993603][T16135]  simple_read_from_buffer+0xcb/0x170
[  611.993621][T16135]  proc_fail_nth_read+0x1af/0x230
[  611.993636][T16135]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  611.993652][T16135]  ? rw_verify_area+0xce/0x6d0
[  611.993665][T16135]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  611.993680][T16135]  vfs_read+0x1e4/0xb40
[  611.993694][T16135]  ? lock_acquire+0x1d1/0x380
[  611.993710][T16135]  ? __fget_files+0x34/0x3d0
[  611.993725][T16135]  ? __pfx_vfs_read+0x10/0x10
[  611.993738][T16135]  ? find_held_lock+0x2b/0x80
[  611.993751][T16135]  ? __fget_files+0x215/0x3d0
[  611.993769][T16135]  ? __fget_files+0x21f/0x3d0
[  611.993788][T16135]  ksys_read+0x12a/0x250
[  611.993801][T16135]  ? __pfx_ksys_read+0x10/0x10
[  611.993820][T16135]  do_int80_emulation+0x166/0x650
[  611.993835][T16135]  asm_int80_emulation+0x1a/0x20
[  611.993847][T16135] RIP: 0023:0xf71077eb
[  611.993856][T16135] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  611.993867][T16135] RSP: 002b:00000000f53c64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  611.993890][T16135] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f53c65d0
[  611.993898][T16135] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  611.993905][T16135] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  611.993911][T16135] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  611.993918][T16135] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  611.993933][T16135]  </TASK>
[  612.030548][   T42] audit: type=1326 audit(1792267409.194:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.3.3223" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb3fec code=0x7ffc0000
[  612.089833][ T5847] usb 8-1: new high-speed USB device number 111 using dummy_hcd
[  612.090381][   T42] audit: type=1326 audit(1792267409.254:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.3.3223" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb3fec code=0x7ffc0000
[  612.091987][   T42] audit: type=1326 audit(1792267409.254:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.3.3223" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb3fec code=0x7ffc0000
[  612.092029][   T42] audit: type=1326 audit(1792267409.254:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.3.3223" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb3fec code=0x7ffc0000
[  612.159967][   T42] audit: type=1326 audit(1792267409.324:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.3.3223" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb3fec code=0x7ffc0000
[  612.219495][ T5847] usb 8-1: device descriptor read/64, error -71
[  612.299464][ T5840] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  612.330260][ T5847] usb usb8-port1: attempt power cycle
[  612.331461][   T42] audit: type=1326 audit(1792267409.494:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.3.3223" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb3fec code=0x7ffc0000
[  612.331494][   T42] audit: type=1326 audit(1792267409.494:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.3.3223" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb3fec code=0x7ffc0000
[  612.331515][   T42] audit: type=1326 audit(1792267409.494:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.3.3223" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb3fec code=0x7ffc0000
[  612.429518][ T5840] usb 6-1: device descriptor read/64, error -71
[  612.671616][ T5840] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  612.718105][ T5847] usb 8-1: new high-speed USB device number 112 using dummy_hcd
[  612.740799][ T5847] usb 8-1: device descriptor read/8, error -71
[  612.787785][T16148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  612.787986][T16148] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  612.799455][ T5840] usb 6-1: device descriptor read/64, error -71
[  612.833173][T16148] netlink: 'syz.0.3229': attribute type 30 has an invalid length.
[  612.883964][T16151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3232'.
[  612.894326][T16151] 8021q: adding VLAN 0 to HW filter on device bond7
[  612.911959][ T5840] usb usb6-port1: attempt power cycle
[  612.940341][T16151] bond7 (unregistering): Released all slaves
[  612.999464][ T5847] usb 8-1: new high-speed USB device number 113 using dummy_hcd
[  613.030192][ T5847] usb 8-1: device descriptor read/8, error -71
[  613.150865][ T5847] usb usb8-port1: unable to enumerate USB device
[  613.249599][ T5840] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  613.270051][ T5840] usb 6-1: device descriptor read/8, error -71
[  613.519552][ T5840] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  613.541425][ T5840] usb 6-1: device descriptor read/8, error -71
[  613.581317][T16162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3235'.
[  613.624530][T16162] UBIFS error (pid: 16162): cannot open "ubi0_0", error -19
[  613.627519][T16162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3235'.
[  613.651613][ T5840] usb usb6-port1: unable to enumerate USB device
[  614.329714][T16169] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3237'.
[  614.729486][T14113] usb 8-1: new full-speed USB device number 114 using dummy_hcd
[  614.880359][T14113] usb 8-1: not running at top speed; connect to a high speed hub
[  614.880378][T14113] usb 8-1: New USB device found, idVendor=20f4, idProduct=624d, bcdDevice=17.50
[  614.881129][T14113] usb 8-1: config 3 has an invalid interface number: 235 but max is 1
[  614.881142][T14113] usb 8-1: config 3 has an invalid interface number: 130 but max is 1
[  614.881152][T14113] usb 8-1: config 3 has no interface number 0
[  614.881160][T14113] usb 8-1: config 3 has no interface number 1
[  614.881181][T14113] usb 8-1: config 3 interface 235 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  614.881192][T14113] usb 8-1: config 3 interface 235 has no altsetting 0
[  614.881201][T14113] usb 8-1: config 3 interface 130 has no altsetting 0
[  614.882709][T14113] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  614.882722][T14113] usb 8-1: Product: syz
[  614.882730][T14113] usb 8-1: Manufacturer: syz
[  614.882737][T14113] usb 8-1: SerialNumber: syz
[  614.884861][T16172] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  614.948852][T16182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3242'.
[  615.051789][T16182] UBIFS error (pid: 16182): cannot open "ubi0_0", error -19
[  615.054592][T16182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3242'.
[  615.097613][T14113] usb 8-1: USB disconnect, device number 114
[  615.282410][T16187] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  615.282855][T16187] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  615.329582][T13271] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  615.700759][T16194] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3246'.
[  616.255199][T16212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3253'.
[  617.369586][T16187] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[  617.369589][   T66] Bluetooth: hci4: command 0x0c1a tx timeout
[  618.264022][T16187] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  618.264181][T16187] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  618.264272][T16187] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  618.266052][T16209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  618.266290][T16209] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  618.266555][   T42] kauditd_printk_skb: 87 callbacks suppressed
[  618.266565][   T42] audit: type=1326 audit(1792267415.424:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16201 comm="syz.3.3250" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb3fec code=0x7ffc0000
[  618.266593][   T42] audit: type=1326 audit(1792267415.424:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16201 comm="syz.3.3250" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb3fec code=0x7ffc0000
[  618.266614][   T42] audit: type=1326 audit(1792267415.424:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16201 comm="syz.3.3250" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb3fec code=0x7ffc0000
[  618.266634][   T42] audit: type=1326 audit(1792267415.424:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16201 comm="syz.3.3250" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb3fec code=0x7ffc0000
[  618.369836][   T42] audit: type=1326 audit(1792267415.534:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16201 comm="syz.3.3250" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb3fec code=0x7ffc0000
[  618.440262][   T42] audit: type=1326 audit(1792267415.604:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16201 comm="syz.3.3250" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb3fec code=0x7ffc0000
[  618.499686][ T5638] usb 8-1: new high-speed USB device number 115 using dummy_hcd
[  618.500822][   T42] audit: type=1326 audit(1792267415.664:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16201 comm="syz.3.3250" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb3fec code=0x7ffc0000
[  618.501433][   T42] audit: type=1326 audit(1792267415.664:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16201 comm="syz.3.3250" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb3fec code=0x7ffc0000
[  618.501578][   T42] audit: type=1326 audit(1792267415.664:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16201 comm="syz.3.3250" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb3fec code=0x7ffc0000
[  618.569982][   T42] audit: type=1326 audit(1792267415.734:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16201 comm="syz.3.3250" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb3fec code=0x7ffc0000
[  618.660145][ T5638] usb 8-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00
[  618.664549][ T5638] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.664570][ T5638] usb 8-1: Product: syz
[  618.664582][ T5638] usb 8-1: Manufacturer: syz
[  618.664596][ T5638] usb 8-1: SerialNumber: syz
[  618.669964][ T5638] usb 8-1: USB2VGA dongle found at address 115
[  618.671460][ T5638] usb 8-1: Allocated 8 output buffers
[  618.679478][ T5840] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[  618.807555][T16220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  618.807760][T16220] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  618.831057][ T5840] usb 6-1: not running at top speed; connect to a high speed hub
[  618.831076][ T5840] usb 6-1: New USB device found, idVendor=20f4, idProduct=624d, bcdDevice=17.50
[  618.831834][ T5840] usb 6-1: config 3 has an invalid interface number: 235 but max is 1
[  618.831847][ T5840] usb 6-1: config 3 has an invalid interface number: 130 but max is 1
[  618.831862][ T5840] usb 6-1: config 3 has no interface number 0
[  618.831870][ T5840] usb 6-1: config 3 has no interface number 1
[  618.831891][ T5840] usb 6-1: config 3 interface 235 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  618.831902][ T5840] usb 6-1: config 3 interface 235 has no altsetting 0
[  618.831911][ T5840] usb 6-1: config 3 interface 130 has no altsetting 0
[  618.833415][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.833427][ T5840] usb 6-1: Product: syz
[  618.833434][ T5840] usb 6-1: Manufacturer: syz
[  618.833441][ T5840] usb 6-1: SerialNumber: syz
[  618.835347][T16218] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  618.904629][T16223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3256'.
[  618.921303][T16223] UBIFS error (pid: 16223): cannot open "ubi0_0", error -19
[  618.922666][T16223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3256'.
[  618.930685][T16202] netlink: 'syz.3.3250': attribute type 30 has an invalid length.
[  618.968770][T16202] FAULT_INJECTION: forcing a failure.
[  618.968770][T16202] name failslab, interval 1, probability 0, space 0, times 0
[  618.968793][T16202] CPU: 3 UID: 0 PID: 16202 Comm: syz.3.3250 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  618.968809][T16202] Tainted: [L]=SOFTLOCKUP
[  618.968813][T16202] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  618.968820][T16202] Call Trace:
[  618.968824][T16202]  <TASK>
[  618.968829][T16202]  dump_stack_lvl+0x100/0x190
[  618.968847][T16202]  should_fail_ex.cold+0x5/0xa
[  618.968862][T16202]  should_failslab+0xc2/0x120
[  618.968880][T16202]  __kmalloc_noprof+0xfc/0x840
[  618.968896][T16202]  ? aa_label_asxprint+0x75/0x130
[  618.968912][T16202]  aa_label_asxprint+0x75/0x130
[  618.968925][T16202]  apparmor_lsmprop_to_secctx+0xb2/0x1a0
[  618.968942][T16202]  security_lsmprop_to_secctx+0x146/0x1a0
[  618.968962][T16202]  audit_log_subj_ctx+0x34f/0x460
[  618.968977][T16202]  ? map_id_range_up+0x2ce/0x3b0
[  618.968994][T16202]  ? __pfx_audit_log_subj_ctx+0x10/0x10
[  618.969010][T16202]  ? audit_log_format+0xe8/0x130
[  618.969024][T16202]  ? apparmor_current_getlsmprop_subj+0x107/0x3c0
[  618.969039][T16202]  audit_log_task_context+0x88/0xb0
[  618.969054][T16202]  ? __pfx_audit_log_task_context+0x10/0x10
[  618.969072][T16202]  audit_log_task+0x1b7/0x3a0
[  618.969082][T16202]  ? __pfx_audit_log_task+0x10/0x10
[  618.969093][T16202]  ? rcu_read_lock_any_held+0x6a/0x90
[  618.969107][T16202]  ? find_held_lock+0x2b/0x80
[  618.969123][T16202]  audit_seccomp+0x79/0x190
[  618.969137][T16202]  __seccomp_filter+0x88c/0x1130
[  618.969153][T16202]  ? __pfx___seccomp_filter+0x10/0x10
[  618.969169][T16202]  ? fput+0x7c/0x100
[  618.969185][T16202]  ? ksys_write+0x1ac/0x250
[  618.969201][T16202]  __seccomp_permit_syscall+0x207/0x2d0
[  618.969216][T16202]  __do_fast_syscall_32+0x420/0x8b0
[  618.969228][T16202]  ? lockdep_hardirqs_on+0x7d/0x110
[  618.969240][T16202]  do_fast_syscall_32+0x32/0x70
[  618.969252][T16202]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  618.969269][T16202] RIP: 0023:0xf7fb3fec
[  618.969292][T16202] Code: Unable to access opcode bytes at 0xf7fb3fc2.
[  618.969299][T16202] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000037
[  618.969314][T16202] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000010
[  618.969323][T16202] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000
[  618.969333][T16202] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  618.969343][T16202] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  618.969351][T16202] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  618.969365][T16202]  </TASK>
[  619.055089][ T5840] usb 6-1: USB disconnect, device number 19
[  619.338978][ T5638] usb 8-1: Failed to early initialize device
[  619.449501][   T66] Bluetooth: hci1: command 0x0c1a tx timeout
[  620.030037][ T5638] usb 8-1: USB disconnect, device number 115
[  620.155668][T16236] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3261'.
[  620.216713][T16239] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  620.217044][T16239] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  620.331000][T16245] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  620.331541][T16245] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  620.339640][   T66] Bluetooth: hci2: command 0x0c1a tx timeout
[  620.339664][ T5107] Bluetooth: hci3: command 0x040f tx timeout
[  620.535975][T16253] fuse: Bad value for 'fd'
[  622.329688][T16239] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[  622.329928][ T5107] Bluetooth: hci4: command 0x0c1a tx timeout
[  623.199113][T16239] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  623.199244][T16239] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  623.199312][T16239] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  623.397850][T16275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3270'.
[  623.452926][T16275] UBIFS error (pid: 16275): cannot open "ubi0_0", error -19
[  623.455298][T16275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3270'.
[  623.469518][ T5638] usb 7-1: new full-speed USB device number 20 using dummy_hcd
[  623.620681][ T5638] usb 7-1: not running at top speed; connect to a high speed hub
[  623.620701][ T5638] usb 7-1: New USB device found, idVendor=20f4, idProduct=624d, bcdDevice=17.50
[  623.621551][ T5638] usb 7-1: config 3 has an invalid interface number: 235 but max is 1
[  623.621564][ T5638] usb 7-1: config 3 has an invalid interface number: 130 but max is 1
[  623.621574][ T5638] usb 7-1: config 3 has no interface number 0
[  623.621582][ T5638] usb 7-1: config 3 has no interface number 1
[  623.621603][ T5638] usb 7-1: config 3 interface 235 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  623.621614][ T5638] usb 7-1: config 3 interface 235 has no altsetting 0
[  623.621623][ T5638] usb 7-1: config 3 interface 130 has no altsetting 0
[  623.623093][ T5638] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  623.623106][ T5638] usb 7-1: Product: syz
[  623.623113][ T5638] usb 7-1: Manufacturer: syz
[  623.623120][ T5638] usb 7-1: SerialNumber: syz
[  623.625633][T16266] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  623.662311][T16280] FAULT_INJECTION: forcing a failure.
[  623.662311][T16280] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  623.662331][T16280] CPU: 1 UID: 0 PID: 16280 Comm: syz.1.3271 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  623.662346][T16280] Tainted: [L]=SOFTLOCKUP
[  623.662351][T16280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  623.662357][T16280] Call Trace:
[  623.662361][T16280]  <TASK>
[  623.662366][T16280]  dump_stack_lvl+0x100/0x190
[  623.662398][T16280]  should_fail_ex.cold+0x5/0xa
[  623.662414][T16280]  _copy_to_user+0x32/0xd0
[  623.662428][T16280]  simple_read_from_buffer+0xcb/0x170
[  623.662445][T16280]  proc_fail_nth_read+0x1af/0x230
[  623.662461][T16280]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  623.662477][T16280]  ? rw_verify_area+0xce/0x6d0
[  623.662490][T16280]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  623.662505][T16280]  vfs_read+0x1e4/0xb40
[  623.662519][T16280]  ? lock_acquire+0x1d1/0x380
[  623.662536][T16280]  ? __fget_files+0x34/0x3d0
[  623.662551][T16280]  ? __pfx_vfs_read+0x10/0x10
[  623.662564][T16280]  ? find_held_lock+0x2b/0x80
[  623.662578][T16280]  ? __fget_files+0x215/0x3d0
[  623.662595][T16280]  ? __fget_files+0x21f/0x3d0
[  623.662614][T16280]  ksys_read+0x12a/0x250
[  623.662628][T16280]  ? __pfx_ksys_read+0x10/0x10
[  623.662650][T16280]  do_int80_emulation+0x166/0x650
[  623.662665][T16280]  asm_int80_emulation+0x1a/0x20
[  623.662676][T16280] RIP: 0023:0xf71077eb
[  623.662685][T16280] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  623.662696][T16280] RSP: 002b:00000000f53a54bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  623.662708][T16280] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f53a55d0
[  623.662715][T16280] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  623.662722][T16280] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  623.662729][T16280] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  623.662735][T16280] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  623.662750][T16280]  </TASK>
[  623.760339][T16277] syzkaller0: entered promiscuous mode
[  623.760410][T16277] syzkaller0: entered allmulticast mode
[  623.847777][ T5638] usb 7-1: USB disconnect, device number 20
[  623.851238][ T1438] ieee802154 phy0 wpan0: encryption failed: -22
[  623.851314][ T1438] ieee802154 phy1 wpan1: encryption failed: -22
[  624.409539][   T66] Bluetooth: hci1: command 0x0c1a tx timeout
[  625.219493][   T66] Bluetooth: hci3: command 0x040f tx timeout
[  625.219519][   T66] Bluetooth: hci2: command 0x0c1a tx timeout
[  625.602942][T16308] FAULT_INJECTION: forcing a failure.
[  625.602942][T16308] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  625.602963][T16308] CPU: 1 UID: 0 PID: 16308 Comm: syz.0.3277 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  625.602979][T16308] Tainted: [L]=SOFTLOCKUP
[  625.602983][T16308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  625.602990][T16308] Call Trace:
[  625.602994][T16308]  <TASK>
[  625.602999][T16308]  dump_stack_lvl+0x100/0x190
[  625.603018][T16308]  should_fail_ex.cold+0x5/0xa
[  625.603033][T16308]  _copy_to_user+0x32/0xd0
[  625.603046][T16308]  simple_read_from_buffer+0xcb/0x170
[  625.603062][T16308]  proc_fail_nth_read+0x1af/0x230
[  625.603078][T16308]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  625.603094][T16308]  ? rw_verify_area+0xce/0x6d0
[  625.603107][T16308]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  625.603121][T16308]  vfs_read+0x1e4/0xb40
[  625.603137][T16308]  ? lock_acquire+0x1d1/0x380
[  625.603160][T16308]  ? __fget_files+0x34/0x3d0
[  625.603181][T16308]  ? __pfx_vfs_read+0x10/0x10
[  625.603202][T16308]  ? find_held_lock+0x2b/0x80
[  625.603224][T16308]  ? __fget_files+0x215/0x3d0
[  625.603254][T16308]  ? __fget_files+0x21f/0x3d0
[  625.603286][T16308]  ksys_read+0x12a/0x250
[  625.603305][T16308]  ? __pfx_ksys_read+0x10/0x10
[  625.603323][T16308]  do_int80_emulation+0x166/0x650
[  625.603338][T16308]  asm_int80_emulation+0x1a/0x20
[  625.603349][T16308] RIP: 0023:0xf71d77eb
[  625.603359][T16308] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  625.603370][T16308] RSP: 002b:00000000f54964bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  625.603382][T16308] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54965d0
[  625.603389][T16308] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  625.603395][T16308] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  625.603402][T16308] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  625.603408][T16308] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  625.603422][T16308]  </TASK>
[  625.671770][   T42] kauditd_printk_skb: 85 callbacks suppressed
[  625.671785][   T42] audit: type=1326 audit(1792267422.834:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16309 comm="syz.1.3278" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefec code=0x7ffc0000
[  625.671966][   T42] audit: type=1326 audit(1792267422.834:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16309 comm="syz.1.3278" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefec code=0x7ffc0000
[  625.672710][   T42] audit: type=1326 audit(1792267422.834:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16309 comm="syz.1.3278" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73aefec code=0x7ffc0000
[  625.673218][   T42] audit: type=1326 audit(1792267422.834:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16309 comm="syz.1.3278" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefec code=0x7ffc0000
[  625.673256][   T42] audit: type=1326 audit(1792267422.834:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16309 comm="syz.1.3278" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefec code=0x7ffc0000
[  625.673568][   T42] audit: type=1326 audit(1792267422.834:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16309 comm="syz.1.3278" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf73aefec code=0x7ffc0000
[  625.674835][   T42] audit: type=1326 audit(1792267422.834:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16309 comm="syz.1.3278" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefec code=0x7ffc0000
[  625.675095][   T42] audit: type=1326 audit(1792267422.834:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16309 comm="syz.1.3278" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefec code=0x7ffc0000
[  625.677945][   T42] audit: type=1326 audit(1792267422.834:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16309 comm="syz.1.3278" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71077eb code=0x7ffc0000
[  625.677990][   T42] audit: type=1326 audit(1792267422.834:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16309 comm="syz.1.3278" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73aefec code=0x7ffc0000
[  625.855940][T16317] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  625.856492][T16317] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  625.959707][T14113] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  625.970382][T16316] Console: switching to colour dummy device 80x25
[  626.132487][T14113] usb 6-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00
[  626.139558][T14113] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  626.139581][T14113] usb 6-1: Product: syz
[  626.139594][T14113] usb 6-1: Manufacturer: syz
[  626.139607][T14113] usb 6-1: SerialNumber: syz
[  626.160204][T14113] usb 6-1: USB2VGA dongle found at address 20
[  626.165811][T14113] usb 6-1: Allocated 8 output buffers
[  626.751282][T16318] FAULT_INJECTION: forcing a failure.
[  626.751282][T16318] name failslab, interval 1, probability 0, space 0, times 0
[  626.751305][T16318] CPU: 0 UID: 0 PID: 16318 Comm: syz.2.3280 Tainted: G             L      syzkaller #0
** replaying previous printk message **
[  626.751305][T16318] CPU: 0 UID: 0 PID: 16318 Comm: syz.2.3280 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  626.751321][T16318] Tainted: [L]=SOFTLOCKUP
[  626.751325][T16318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  626.751332][T16318] Call Trace:
[  626.751336][T16318]  <TASK>
[  626.751341][T16318]  dump_stack_lvl+0x100/0x190
[  626.751360][T16318]  should_fail_ex.cold+0x5/0xa
[  626.751377][T16318]  should_failslab+0xc2/0x120
[  626.751408][T16318]  __kmalloc_node_track_caller_noprof+0xfa/0x870
[  626.751427][T16318]  ? kvasprintf_const+0x66/0x1a0
[  626.751442][T16318]  kvasprintf+0xbc/0x150
[  626.751454][T16318]  ? __pfx_kvasprintf+0x10/0x10
[  626.751467][T16318]  ? acpi_dev_for_each_child+0x88/0xc0
[  626.751483][T16318]  ? find_held_lock+0x2b/0x80
[  626.751499][T16318]  kvasprintf_const+0x66/0x1a0
[  626.751511][T16318]  kobject_set_name_vargs+0x5a/0x140
[  626.751528][T16318]  dev_set_name+0xc7/0x100
[  626.751545][T16318]  ? __pfx_dev_set_name+0x10/0x10
[  626.751565][T16318]  ? set_primary_fwnode+0x11a/0x2a0
[  626.751579][T16318]  ? pci_dev_assign_slot+0x1ea/0x270
[  626.751597][T16318]  pci_setup_device+0x5f5/0x2500
[  626.751617][T16318]  ? __pfx_pci_setup_device+0x10/0x10
[  626.751640][T16318]  ? kasan_save_track+0x14/0x30
[  626.751656][T16318]  ? __kasan_kmalloc+0xaa/0xb0
[  626.751672][T16318]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  626.751686][T16318]  ? lockdep_init_map_type+0x5c/0x250
[  626.751704][T16318]  ? __raw_spin_lock_init+0x3a/0x110
[  626.751718][T16318]  pci_scan_single_device+0x1ac/0x240
[  626.751735][T16318]  ? __pfx_pci_scan_single_device+0x10/0x10
[  626.751752][T16318]  ? lockdep_hardirqs_on+0x7d/0x110
[  626.751764][T16318]  ? __mutex_lock+0x829/0x1bd0
[  626.751778][T16318]  pci_scan_slot+0x1c9/0x7c0
[  626.751796][T16318]  ? __pfx_pci_scan_slot+0x10/0x10
[  626.751814][T16318]  ? rcu_is_watching+0x13/0xc0
[  626.751830][T16318]  pci_scan_child_bus_extend+0x6b/0x7b0
[  626.751847][T16318]  ? pci_find_next_bus+0x60/0xb0
[  626.751861][T16318]  pci_rescan_bus+0x18/0x40
[  626.751878][T16318]  rescan_store+0xfb/0x130
[  626.751894][T16318]  ? __pfx_rescan_store+0x10/0x10
[  626.751922][T16318]  ? sysfs_file_kobj+0xe4/0x290
[  626.751941][T16318]  ? __pfx_rescan_store+0x10/0x10
[  626.751957][T16318]  bus_attr_store+0x74/0xb0
[  626.751973][T16318]  ? __pfx_bus_attr_store+0x10/0x10
[  626.751989][T16318]  sysfs_kf_write+0xf2/0x150
[  626.752005][T16318]  kernfs_fop_write_iter+0x3e0/0x5f0
[  626.752017][T16318]  ? __pfx_sysfs_kf_write+0x10/0x10
[  626.752034][T16318]  vfs_write+0x6af/0x1050
[  626.752049][T16318]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  626.752064][T16318]  ? __pfx_vfs_write+0x10/0x10
[  626.752077][T16318]  ? find_held_lock+0x2b/0x80
[  626.752101][T16318]  ksys_write+0x12a/0x250
[  626.752120][T16318]  ? __pfx_ksys_write+0x10/0x10
[  626.752138][T16318]  ? ksys_write+0x1ac/0x250
[  626.752159][T16318]  ? __pfx_ksys_write+0x10/0x10
[  626.752195][T16318]  __do_fast_syscall_32+0x13a/0x8b0
[  626.752214][T16318]  ? lockdep_hardirqs_on+0x7d/0x110
[  626.752233][T16318]  do_fast_syscall_32+0x32/0x70
[  626.752251][T16318]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  626.752275][T16318] RIP: 0023:0xf740efec
[  626.752296][T16318] Code: Unable to access opcode bytes at 0xf740efc2.
[  626.752304][T16318] RSP: 002b:00000000f53e450c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  626.752322][T16318] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000600
[  626.752334][T16318] RDX: 0000000000000061 RSI: 0000000000000000 RDI: 0000000000000000
[  626.752345][T16318] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  626.752355][T16318] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  626.752366][T16318] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  626.752386][T16318]  </TASK>
[  626.752560][T16318] pci (null): [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  626.768191][T16318] pci (null): BAR 0 [mem 0xfd000000-0xfdffffff pref]
[  626.768360][T16318] pci (null): BAR 2 [mem 0xfeaf4000-0xfeaf4fff]
[  626.768591][T16318] pci (null): ROM [mem 0xfeae0000-0xfeaeffff pref]
[  626.769227][T16318] pci (null): Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  626.770566][T16318] ------------[ cut here ]------------
[  626.770572][T16318] ret < 0
[  626.770576][T16318] WARNING: drivers/pci/probe.c:2770 at pci_device_add+0x1343/0x1820, CPU#0: syz.2.3280/16318
[  626.792264][T16310] netlink: 'syz.1.3278': attribute type 30 has an invalid length.
[  626.911738][T16318] Modules linked in:
[  626.912976][T16318] CPU: 0 UID: 0 PID: 16318 Comm: syz.2.3280 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  626.916353][T16318] Tainted: [L]=SOFTLOCKUP
[  626.917672][T16318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  626.920697][T16318] RIP: 0010:pci_device_add+0x1343/0x1820
[  626.922406][T16318] Code: e5 04 83 e0 8f 09 e8 88 83 c8 00 00 00 e9 20 f4 ff ff e8 e0 c6 a2 fc 90 0f 0b 90 90 0f 0b 90 e9 06 f7 ff ff e8 ce c6 a2 fc 90 <0f> 0b 90 e9 7e fa ff ff e8 c0 c6 a2 fc 90 0f 0b 90 e9 11 fa ff ff
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  626.928384][T16318] RSP: 0018:ffffc90004607910 EFLAGS: 00010293
[  626.930381][T16318] RAX: 0000000000000000 RBX: 00000000ffffffea RCX: 0000000000000000
[  626.932746][T16318] RDX: ffff88801df82580 RSI: ffffffff8568dcc2 RDI: ffff88801df82580
[  626.935214][T16318] RBP: ffff88801d6e5000 R08: 0000000000000005 R09: 0000000000000000
[  626.937912][T16318] R10: 00000000ffffffea R11: 0000000000000001 R12: ffff888022d63028
[  626.940354][T16318] R13: ffff888022d63000 R14: 0000000000000001 R15: ffff88804c770000
[  626.942828][T16318] FS:  0000000000000000(0000) GS:ffff88809574a000(0063) knlGS:00000000f53e4b40
[  626.945686][T16318] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  626.947727][T16318] CR2: 00000000f740f000 CR3: 0000000060550000 CR4: 0000000000352ef0
[  626.950287][T16318] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[  626.952730][T16318] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  626.955117][T16318] Call Trace:
[  626.956242][T16318]  <TASK>
[  626.957256][T16318]  ? __pfx_pci_device_add+0x10/0x10
[  626.958983][T16318]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  626.960901][T16318]  ? __raw_spin_lock_init+0x3a/0x110
[  626.962833][T16318]  pci_scan_single_device+0x1d0/0x240
[  626.964652][T16318]  ? __pfx_pci_scan_single_device+0x10/0x10
[  626.966471][T16318]  ? lockdep_hardirqs_on+0x7d/0x110
[  626.968054][T16318]  ? __mutex_lock+0x829/0x1bd0
[  626.969552][T16318]  pci_scan_slot+0x1c9/0x7c0
[  626.970959][T16318]  ? __pfx_pci_scan_slot+0x10/0x10
[  626.972550][T16318]  ? rcu_is_watching+0x13/0xc0
[  626.974019][T16318]  pci_scan_child_bus_extend+0x6b/0x7b0
[  626.975766][T16318]  ? pci_find_next_bus+0x60/0xb0
[  626.977341][T16318]  pci_rescan_bus+0x18/0x40
[  626.978912][T16318]  rescan_store+0xfb/0x130
[  626.980473][T16318]  ? __pfx_rescan_store+0x10/0x10
[  626.982106][T16318]  ? sysfs_file_kobj+0xe4/0x290
[  626.983627][T16318]  ? __pfx_rescan_store+0x10/0x10
[  626.985208][T16318]  bus_attr_store+0x74/0xb0
[  626.986653][T16318]  ? __pfx_bus_attr_store+0x10/0x10
[  626.988231][T16318]  sysfs_kf_write+0xf2/0x150
[  626.990224][T16317] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  626.990344][T16317] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  626.990412][T16317] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  626.990476][T16317] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  626.999256][T16318]  kernfs_fop_write_iter+0x3e0/0x5f0
[  627.000993][T16318]  ? __pfx_sysfs_kf_write+0x10/0x10
[  627.002651][T16318]  vfs_write+0x6af/0x1050
[  627.004084][T16318]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  627.005851][T16318]  ? __pfx_vfs_write+0x10/0x10
[  627.007419][T16318]  ? find_held_lock+0x2b/0x80
[  627.008879][T16318]  ksys_write+0x12a/0x250
[  627.010312][T16318]  ? __pfx_ksys_write+0x10/0x10
[  627.011806][T16318]  ? ksys_write+0x1ac/0x250
[  627.013188][T16318]  ? __pfx_ksys_write+0x10/0x10
[  627.014695][T16318]  __do_fast_syscall_32+0x13a/0x8b0
[  627.016235][T16318]  ? lockdep_hardirqs_on+0x7d/0x110
[  627.017860][T16318]  do_fast_syscall_32+0x32/0x70
[  627.019357][T16318]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  627.021324][T16318] RIP: 0023:0xf740efec
[  627.022630][T16318] Code: Unable to access opcode bytes at 0xf740efc2.
[  627.024632][T16318] RSP: 002b:00000000f53e450c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  627.027122][T16318] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000600
[  627.029855][T16318] RDX: 0000000000000061 RSI: 0000000000000000 RDI: 0000000000000000
[  627.032294][T16318] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  627.034662][T16318] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  627.037101][T16318] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  627.039573][T16318]  </TASK>
[  627.040535][T16318] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  627.042719][T16318] CPU: 0 UID: 0 PID: 16318 Comm: syz.2.3280 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  627.045871][T16318] Tainted: [L]=SOFTLOCKUP
[  627.047224][T16318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  627.050395][T16318] Call Trace:
[  627.051477][T16318]  <TASK>
[  627.052449][T16318]  dump_stack_lvl+0x100/0x190
[  627.053960][T16318]  vpanic+0x553/0x970
[  627.055241][T16318]  ? __pfx_vpanic+0x10/0x10
[  627.056690][T16318]  panic+0xd1/0xe0
[  627.057934][T16318]  ? __pfx_panic+0x10/0x10
[  627.059358][T16318]  check_panic_on_warn.cold+0x19/0x34
[  627.061058][T16318]  ? pci_device_add+0x1343/0x1820
[  627.062628][T16318]  __warn.cold+0x191/0x318
[  627.064057][T16318]  __report_bug+0x30f/0x440
[  627.065472][T16318]  ? pci_device_add+0x1343/0x1820
[  627.067032][T16318]  ? __pfx___report_bug+0x10/0x10
[  627.068873][T16318]  ? kasan_quarantine_put+0x104/0x240
[  627.070768][T16318]  ? lockdep_hardirqs_on+0x7d/0x110
[  627.072491][T16318]  ? device_add+0x310/0x1970
[  627.074013][T16318]  ? pci_device_add+0x1343/0x1820
[  627.075557][T16318]  report_bug+0xb3/0x220
[  627.076937][T16318]  ? pci_device_add+0x1343/0x1820
[  627.078769][T16318]  handle_bug+0x16a/0x2a0
[  627.080149][T16318]  exc_invalid_op+0x17/0x50
[  627.081622][T16318]  asm_exc_invalid_op+0x1a/0x20
[  627.083178][T16318] RIP: 0010:pci_device_add+0x1343/0x1820
[  627.084945][T16318] Code: e5 04 83 e0 8f 09 e8 88 83 c8 00 00 00 e9 20 f4 ff ff e8 e0 c6 a2 fc 90 0f 0b 90 90 0f 0b 90 e9 06 f7 ff ff e8 ce c6 a2 fc 90 <0f> 0b 90 e9 7e fa ff ff e8 c0 c6 a2 fc 90 0f 0b 90 e9 11 fa ff ff
[  627.090922][T16318] RSP: 0018:ffffc90004607910 EFLAGS: 00010293
[  627.092823][T16318] RAX: 0000000000000000 RBX: 00000000ffffffea RCX: 0000000000000000
[  627.095385][T16318] RDX: ffff88801df82580 RSI: ffffffff8568dcc2 RDI: ffff88801df82580
[  627.097773][T16318] RBP: ffff88801d6e5000 R08: 0000000000000005 R09: 0000000000000000
[  627.100418][T16318] R10: 00000000ffffffea R11: 0000000000000001 R12: ffff888022d63028
[  627.103247][T16318] R13: ffff888022d63000 R14: 0000000000000001 R15: ffff88804c770000
[  627.105854][T16318]  ? pci_device_add+0x1342/0x1820
[  627.107424][T16318]  ? __pfx_pci_device_add+0x10/0x10
[  627.109021][T16318]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  627.110867][T16318]  ? __raw_spin_lock_init+0x3a/0x110
[  627.113002][T16318]  pci_scan_single_device+0x1d0/0x240
[  627.115266][T16318]  ? __pfx_pci_scan_single_device+0x10/0x10
[  627.117723][T16318]  ? lockdep_hardirqs_on+0x7d/0x110
[  627.119892][T16318]  ? __mutex_lock+0x829/0x1bd0
[  627.121883][T16318]  pci_scan_slot+0x1c9/0x7c0
[  627.123790][T16318]  ? __pfx_pci_scan_slot+0x10/0x10
[  627.125857][T16318]  ? rcu_is_watching+0x13/0xc0
[  627.127840][T16318]  pci_scan_child_bus_extend+0x6b/0x7b0
[  627.130184][T16318]  ? pci_find_next_bus+0x60/0xb0
[  627.132289][T16318]  pci_rescan_bus+0x18/0x40
[  627.134218][T16318]  rescan_store+0xfb/0x130
[  627.136102][T16318]  ? __pfx_rescan_store+0x10/0x10
[  627.138281][T16318]  ? sysfs_file_kobj+0xe4/0x290
[  627.140357][T16318]  ? __pfx_rescan_store+0x10/0x10
[  627.142473][T16318]  bus_attr_store+0x74/0xb0
[  627.144383][T16318]  ? __pfx_bus_attr_store+0x10/0x10
[  627.146581][T16318]  sysfs_kf_write+0xf2/0x150
[  627.148565][T16318]  kernfs_fop_write_iter+0x3e0/0x5f0
[  627.150801][T16318]  ? __pfx_sysfs_kf_write+0x10/0x10
[  627.153007][T16318]  vfs_write+0x6af/0x1050
[  627.154833][T16318]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  627.157248][T16318]  ? __pfx_vfs_write+0x10/0x10
[  627.159379][T16318]  ? find_held_lock+0x2b/0x80
[  627.161386][T16318]  ksys_write+0x12a/0x250
[  627.163247][T16318]  ? __pfx_ksys_write+0x10/0x10
[  627.164848][T16318]  ? ksys_write+0x1ac/0x250
[  627.166293][T16318]  ? __pfx_ksys_write+0x10/0x10
[  627.167858][T16318]  __do_fast_syscall_32+0x13a/0x8b0
[  627.169503][T16318]  ? lockdep_hardirqs_on+0x7d/0x110
[  627.171133][T16318]  do_fast_syscall_32+0x32/0x70
[  627.172658][T16318]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  627.174662][T16318] RIP: 0023:0xf740efec
[  627.175950][T16318] Code: Unable to access opcode bytes at 0xf740efc2.
[  627.178029][T16318] RSP: 002b:00000000f53e450c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  627.180627][T16318] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000600
[  627.183068][T16318] RDX: 0000000000000061 RSI: 0000000000000000 RDI: 0000000000000000
[  627.185562][T16318] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  627.188024][T16318] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  627.190415][T16318] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  627.192719][T16318]  </TASK>
[  627.194319][T16318] Kernel Offset: disabled
[  627.195527][T16318] Rebooting in 86400 seconds..