last executing test programs:

1m53.335782756s ago: executing program 0 (id=229):
r0 = socket$inet6(0xa, 0x2, 0x0)
fsetxattr(r0, &(0x7f0000000180)=@known='system.posix_acl_default\x00', &(0x7f0000000240)='\x00', 0x1, 0x1)
r1 = socket(0x10, 0x80002, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000100)={0x5, 0x20001000, 0xffffffffffffffff, 0x1}, 0x10)
modify_ldt$write2(0x11, &(0x7f0000000000)={0x3, 0x20000000, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x44}}, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
openat$cdrom(0xffffff9c, &(0x7f0000000280), 0x0, 0x0)
bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}}, 0x0)
ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100))
ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000012c0)=[@window={0x3, 0x1, 0x8}, @timestamp, @window={0x3, 0x8000, 0x627}, @mss={0x2, 0x4}, @sack_perm, @timestamp, @sack_perm], 0x7)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)

1m53.134624639s ago: executing program 0 (id=232):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000210000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x6000, 0x0}, 0x10)

1m53.064845633s ago: executing program 0 (id=233):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002300000002001200ff19010005"], 0x48)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {}, {0xfff1, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8}]}}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x9}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x55}, 0x10)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$vga_arbiter(r5, &(0x7f0000000600)=@other={'unlock', ' ', 'none'}, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x4, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044081}, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_open_dev$dvb_demux(0x0, 0x237c, 0x402a43)
close_range(r7, 0xffffffffffffffff, 0x2)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007500000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x0, 0x12, 0x0, &(0x7f0000000140)="c1188e99b95d02ff4284860188a88aa286dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r10 = fanotify_init(0x4, 0x1000)
fanotify_mark(r10, 0x1, 0x800002b, r9, 0x0)
r11 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0)
fcntl$notify(r11, 0x402, 0x8000003d)

1m52.965048062s ago: executing program 0 (id=236):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0xe, 0xfffffffffffffead, &(0x7f0000000080)="3a173357f297c605804ab3828443", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x600, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6gre0\x00', <r2=>0x0, 0x4, 0xd, 0x8, 0x5, 0x90, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x1, 0x4597, 0x8}})
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r4=>r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000004c0)={{0x1, 0x1, 0x18, <r5=>r0, {0xa61}}, './file0\x00'})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x1c)
r7 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000800)={'vxcan0\x00'})
r8 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000005c0), 0x4a0841, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='blkio.bfq.io_queued\x00', 0x0, 0x0)
r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x4, 0x18}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0x2, &(0x7f0000000040)=@raw=[@exit, @generic={0x4, 0x2, 0x3, 0x0, 0x7fffffff}], &(0x7f00000001c0)='syzkaller\x00', 0x8000, 0x94, &(0x7f0000000200)=""/148, 0x40f00, 0x7, '\x00', r2, @fallback=0x36, r3, 0x8, &(0x7f0000000400)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x9, 0x44, 0xfffffffa}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f00000006c0)=[r4, r5, r6, r8, r9, r10], &(0x7f0000000700)=[{0x2, 0x5, 0xc, 0x2}, {0x0, 0x1, 0x1, 0xa}], 0x10, 0xc}, 0x94)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xffffffffffffff92, &(0x7f0000000080), 0x1}, 0x8100)

1m52.89462378s ago: executing program 0 (id=238):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0x2, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040021}, 0x30)
syz_open_procfs(0x0, &(0x7f0000000180)='limits\x00')
capset(0x0, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140))
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
getresuid(0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff}}, './file0\x00'})
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$pokeuser(0x6, r4, 0x118, 0xffffb453)
ptrace$pokeuser(0x6, r4, 0x118, 0x7)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r5, 0x5b14, 0x0)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x4b45, 0x3)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r7}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
sendfile(r0, r6, 0x0, 0x6)

1m52.372156169s ago: executing program 0 (id=240):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27033f00591214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1, 0x0, 0x0, 0x1000000}, 0x0)

1m50.084373465s ago: executing program 1 (id=268):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002300000002001200ff"], 0x48)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {}, {0xfff1, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8}]}}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x9}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x55}, 0x10)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$vga_arbiter(r5, &(0x7f0000000600)=@other={'unlock', ' ', 'none'}, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x4, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044081}, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x237c, 0x402a43)
close_range(r7, 0xffffffffffffffff, 0x2)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007500000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x0, 0x12, 0x0, &(0x7f0000000140)="c1188e99b95d02ff4284860188a88aa286dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r10 = fanotify_init(0x4, 0x1000)
fanotify_mark(r10, 0x1, 0x800002b, r9, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d)

1m50.052470359s ago: executing program 1 (id=269):
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xfffe, @any, 0xfffc}, 0xe)
listen(0xffffffffffffffff, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)

1m49.963381827s ago: executing program 1 (id=270):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/asound/seq/clients\x00', 0x0, 0x0)
modify_ldt$write(0x1, &(0x7f0000000a40)={0x476, 0x20000000, 0x1000, 0x0, 0x1, 0x0, 0x1}, 0x10)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={&(0x7f00000003c0)="c94522e546f93f6dedf11f1509683b4ff6ed90bb6d8ca47dc829c0daa3feec0f1f88d7547f05841e", 0x28})
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r2 = syz_io_uring_setup(0x66e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000280))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r3, 0x800448d4, &(0x7f0000000080)={0x0, 0x200, "408b7c", 0x3})
openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x2}, 0x1)
r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$6lowpan_enable(r5, &(0x7f00000001c0)='1', 0x1)
write$6lowpan_control(r4, &(0x7f0000000280)='connect aa:aa:aa:aa:aa:10 2', 0x1b)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x28, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7f8000, 0x3}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xa}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004000)
sendmsg$TIPC_NL_KEY_SET(r1, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
syz_open_procfs(0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)

1m49.144181892s ago: executing program 1 (id=274):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000002c80)='./file0\x00', &(0x7f00000004c0), 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB])
chdir(&(0x7f0000000080)='./file0\x00')
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x80)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2, 0x83, 0x0, 0x3, 0xc, 0x0, 0xeff, 0x0, [@sadb_key={0x2, 0x9, 0x40, 0x0, "88bc9122e989532d"}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x5, 0x2, 0xe0000000}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x60}, 0x1, 0x7}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f00000005c0)=[{&(0x7f00000000c0)="94", 0x1}, {0x0}, {&(0x7f0000000500)="7bc1feeb68d84f5e1129fec75f8ccb251c28a8d95115b163b502fea6c8a78f22ae695eddcea77abd3dc6ef9d4de4bf5e04cdda8ad5c802eba460a24aac852de1d128137d4007301f3dd342e61c9708da9e74b5bca45708ce8cbc7aa7112d7c9179cc90f475fa6431c815e2331a3186bf2e953898306ab291a43579c20bfbb11afb6b07effa9c52e44edae263f4bc9fa343fa1c4ba3dd052b8c417f00483130", 0x9f}], 0x3)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r5], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x830b, 0x0)
socket$inet6(0xa, 0x2, 0x0)
getgroups(0x2, &(0x7f0000000600)=[0x0, 0x0])

1m49.053148822s ago: executing program 1 (id=276):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0x2, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040021}, 0x30)
syz_open_procfs(0x0, &(0x7f0000000180)='limits\x00')
capset(0x0, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140))
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
getresuid(0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff}}, './file0\x00'})
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$pokeuser(0x6, r4, 0x118, 0xffffb453)
ptrace$pokeuser(0x6, r4, 0x118, 0x7)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r5, 0x5b14, 0x0)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x4b45, 0x3)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r7}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
sendfile(r0, r6, 0x0, 0x6)

1m48.211190017s ago: executing program 1 (id=286):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='namespace0.0', 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x44, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x667}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x4814)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x25}, 0xff}, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x31}, 0x4}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x9}, @in={0x2, 0x4e22, @rand_addr=0x64010101}, @in={0x2, 0x4e24, @broadcast}], 0x84)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0)
ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000040)={0x2, 0x80})
write(r5, &(0x7f0000000d00)='namespace0.0', 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) (async)
write(r0, &(0x7f0000000300)='namespace0.0', 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x44, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x667}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x4814) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x25}, 0xff}, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x31}, 0x4}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x9}, @in={0x2, 0x4e22, @rand_addr=0x64010101}, @in={0x2, 0x4e24, @broadcast}], 0x84) (async)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0) (async)
ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000040)={0x2, 0x80}) (async)
write(r5, &(0x7f0000000d00)='namespace0.0', 0xc) (async)

1m47.924418144s ago: executing program 3 (id=288):
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xfffe, @any, 0xfffc}, 0xe)
listen(0xffffffffffffffff, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)

1m47.924047303s ago: executing program 3 (id=289):
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/pm_print_times', 0x80240, 0x31840384d1ba4b17)
finit_module(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5ec800000000000000fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'})
syz_open_dev$video4linux(0x0, 0x403, 0xe0801)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x2000008, 0xd, 0x40000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x20000000)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x4040)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, 0x0)
mlock(&(0x7f0000080000/0x4000)=nil, 0x4000)
capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040))
socket$netlink(0x10, 0x3, 0x8000000004)

1m47.65270395s ago: executing program 3 (id=292):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002300000002001200ff19010005"], 0x48)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {}, {0xfff1, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8}]}}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x9}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x55}, 0x10)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$vga_arbiter(r5, &(0x7f0000000600)=@other={'unlock', ' ', 'none'}, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x4, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044081}, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x237c, 0x402a43)
close_range(r7, 0xffffffffffffffff, 0x2)
r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x0, 0x12, 0x0, &(0x7f0000000140)="c1188e99b95d02ff4284860188a88aa286dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r10 = fanotify_init(0x4, 0x1000)
fanotify_mark(r10, 0x1, 0x800002b, r9, 0x0)
r11 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0)
fcntl$notify(r11, 0x402, 0x8000003d)

1m47.593815368s ago: executing program 3 (id=293):
mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x81, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRESDEC=0x0, @ANYRES16=r0])
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[], 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mount$fuseblk(0x0, 0x0, 0x0, 0x8470, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={0x0, 0xa0}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
socket$inet_smc(0x2b, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
syz_emit_vhci(0x0, 0x7)
mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000)
timer_create(0x2, 0x0, &(0x7f0000000480))
timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_delete(0x0) (fail_nth: 1)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, 0x0, 0x0)

1m47.333239895s ago: executing program 3 (id=296):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0x2, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040021}, 0x30)
syz_open_procfs(0x0, &(0x7f0000000180)='limits\x00')
capset(0x0, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140))
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
getresuid(0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff}}, './file0\x00'})
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$pokeuser(0x6, r4, 0x118, 0xffffb453)
ptrace$pokeuser(0x6, r4, 0x118, 0x7)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r5, 0x5b14, 0x0)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x4b45, 0x3)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r7}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
sendfile(r0, r6, 0x0, 0x6)

1m37.00982183s ago: executing program 32 (id=240):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27033f00591214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1, 0x0, 0x0, 0x1000000}, 0x0)

1m36.963838529s ago: executing program 3 (id=304):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/stat\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000001100)=""/216, 0xd8, 0x401)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000005000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x6, 0x0, 0x7fffffff}]})
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000a00)={&(0x7f0000002d80)=ANY=[@ANYBLOB="918c7587b0b1a84c80d50af762dfde6fdfc6e3750e2036a1713f2e54c806772b481ccc2ec3e16ba314a1d8f8f23002c86f388a5de9d824f74b99687d8293da6c33f68cddc0fed7c513f2dad4b1253f119c484bb7d79ce4952a50e5b0f37fc45f43f712adb52fd80aace996dd4c54c23cba4a0d8c4cd5b41e1a5b1c7d4ec8cd52f3181e7ec47c8cc620f78a13917b5df767bf510d85a8384437cebff6f85bed4e8e48d72f7c5040c08a7e6c1b25625225feec88647d530cede6c8e8aa4b5658f1d8320474548ae8", @ANYBLOB="0204000204000000a8c85cc6fe483b27ef50ba0379d858a27800000000000002000100000004d6000000000000002047f416f899ba279f916bcb5441170229a075875731830216911b41aee92c27"], 0x20}, 0x1, 0x7}, 0x4000810)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x40039, 0x0, 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000500), 0x8, 0x64, 0x8, 0x8, &(0x7f0000000200)}}, 0x10)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x1, 0x6, 0x0, 0x100, 0x2, 0x500000})
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180104, r6})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x400c0c4)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="adea08c7beef905d069c564c90c200", 0xf)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
socket$inet_tcp(0x2, 0x1, 0x0)
getpeername$l2tp6(r7, 0x0, 0x0)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$inet_mptcp(0x2, 0x1, 0x106)
r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r10, &(0x7f0000000200), 0x12)
bind$x25(r9, &(0x7f0000000080), 0x12)
ioctl$sock_ifreq(r8, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6})

1m33.132427582s ago: executing program 33 (id=286):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='namespace0.0', 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x44, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x667}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x4814)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x25}, 0xff}, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x31}, 0x4}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x9}, @in={0x2, 0x4e22, @rand_addr=0x64010101}, @in={0x2, 0x4e24, @broadcast}], 0x84)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0)
ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000040)={0x2, 0x80})
write(r5, &(0x7f0000000d00)='namespace0.0', 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) (async)
write(r0, &(0x7f0000000300)='namespace0.0', 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x44, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x667}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x4814) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x25}, 0xff}, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x31}, 0x4}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x9}, @in={0x2, 0x4e22, @rand_addr=0x64010101}, @in={0x2, 0x4e24, @broadcast}], 0x84) (async)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0) (async)
ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000040)={0x2, 0x80}) (async)
write(r5, &(0x7f0000000d00)='namespace0.0', 0xc) (async)

1m21.880207984s ago: executing program 34 (id=304):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/stat\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000001100)=""/216, 0xd8, 0x401)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000005000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x6, 0x0, 0x7fffffff}]})
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000a00)={&(0x7f0000002d80)=ANY=[@ANYBLOB="918c7587b0b1a84c80d50af762dfde6fdfc6e3750e2036a1713f2e54c806772b481ccc2ec3e16ba314a1d8f8f23002c86f388a5de9d824f74b99687d8293da6c33f68cddc0fed7c513f2dad4b1253f119c484bb7d79ce4952a50e5b0f37fc45f43f712adb52fd80aace996dd4c54c23cba4a0d8c4cd5b41e1a5b1c7d4ec8cd52f3181e7ec47c8cc620f78a13917b5df767bf510d85a8384437cebff6f85bed4e8e48d72f7c5040c08a7e6c1b25625225feec88647d530cede6c8e8aa4b5658f1d8320474548ae8", @ANYBLOB="0204000204000000a8c85cc6fe483b27ef50ba0379d858a27800000000000002000100000004d6000000000000002047f416f899ba279f916bcb5441170229a075875731830216911b41aee92c27"], 0x20}, 0x1, 0x7}, 0x4000810)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x40039, 0x0, 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000500), 0x8, 0x64, 0x8, 0x8, &(0x7f0000000200)}}, 0x10)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x1, 0x6, 0x0, 0x100, 0x2, 0x500000})
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180104, r6})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x400c0c4)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="adea08c7beef905d069c564c90c200", 0xf)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
socket$inet_tcp(0x2, 0x1, 0x0)
getpeername$l2tp6(r7, 0x0, 0x0)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$inet_mptcp(0x2, 0x1, 0x106)
r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r10, &(0x7f0000000200), 0x12)
bind$x25(r9, &(0x7f0000000080), 0x12)
ioctl$sock_ifreq(r8, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6})

3.103386852s ago: executing program 6 (id=972):
r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0x1b, 0x4e20, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, {0xa, 0x4e23, 0x0, @local, 0x2}, 0xffffffffffffffff, 0x1}}, 0x48)

3.102915345s ago: executing program 6 (id=973):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x91}}, 0x5}, 0x1c) (async, rerun: 64)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) (rerun: 64)
r1 = fcntl$dupfd(r0, 0x406, r0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000080)='blkio.reset_stats\x00', 0x2, 0x0)
write$cgroup_int(r4, &(0x7f0000000100)=0x8000000000000000, 0x12) (async)
r5 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0xd)
fchdir(r6) (async)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x2d80, 0x82)
preadv2(r7, &(0x7f00000018c0)=[{&(0x7f0000000000)=""/217, 0xd9}], 0x1, 0x4f, 0x40, 0x0)
madvise(&(0x7f0000bde000/0x4000)=nil, 0x4000, 0xc) (async, rerun: 64)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async, rerun: 64)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xca}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
syz_clone3(&(0x7f0000000200)={0x40020100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={0x44c, 0x14, 0x9, 0x70bd25, 0x0, {0x4}, [@nested={0x438, 0x40, 0x0, 0x1, [@nested={0x310, 0x14f, 0x0, 0x1, [@typed={0x4, 0x7c}, @generic="04dfbac6c3f5be304bf3e378cffee6f5314644729602adea4a8fbb241850080e1fcec167dbf647848103a982f8535201bc62c188b1c6d38d413d9762fea9be57b6238f895a3f63d3f88183efaf22d7374d3fa3f74f575e1abd2a1352b1ec3e7fe189", @nested={0x4, 0x5c}, @typed={0x8, 0x27, 0x0, 0x0, @fd=r0}, @generic="2e216e22f0f433b2f712d7b40c83c1c36f045a9e9c5de48e1fa6cc848e31d649a49cedf9b61db9d026f7dabc8a8004efd09cf413f2717e5441288cede5be16355ec9d32662f02c208374ef4943bc16e85a57256b0f49ec5fa29b5a961bf9386c3920a37514f97a003609315e9b71c3d578e521dad4b98be428af753eefd17dea0b4a3ae295a895cd8d1375dc5b5ca722dda9d0e32e1ab814e449ceae41d5e71508c9da9bc1e80bf0152b7367f5c79a73696969287f53387200607d834b79d2f9b20a57bfff4a2c4ea09632a6b677cb58b9b8c78c31f94ce7360335e05ef6be8bb5175117", @generic="27be5148ade06dab0b729f67528e1e350ab6715d4a4fcf62433763db7e88e2f4a0593d4c62bc5bc542b46f77df1378d0ef55f6bf69f7fcfbfa51aab01bdf85193d0ad8c12c2aba44a7ee197eca9731b1f85240a8dc45a516a1b557da9fb9dfd17ad17802dd6b46e17ee8711dc63cb0785dc600db83f109d1bee1f15a509cb69b05a2731b6d4fb9a153ec3fc59644285f8a5c546135ef6f49d876b3f15e6d4d975876cfccfed52eb9afa257dc423515879f2779f01b4b5cc55b8f671d651d4bc3cceaf0baf4bd731f227d22bd56dc97af083815011796ed9884b93eae0c25fcb7436699624ff5b5ae171c73fb928f8f", @generic="5d599393282fd347bd1a411bf73ac2e207d364cabc24f7887e7104b1a4f4cb058d9b304e8daef4af3e64431a992b2e5c99728e5027b77d322ae6aeaf5ddcb4bcfb5bc4ad2b73b2724d0c6cc63176ba2a4061cf2e8465b98bba1adf43a32263ff9925642f4fb581d9b612866165191df8d8ff013952dca3e8d779af181ad33247904ea76a37e434fa35eb14dd17f9c4897893c995273bff4a9cc79bee3590cef136e1f8723c53d2b2fcec7a09d72b0f9f57940dba7062706f9db4e707b2cc41c33b8ff7ae8144ba"]}, @nested={0x124, 0xf8, 0x0, 0x1, [@generic="823710ebb5f45f1a746bc6e4cfeca1d98003bcb2bceb641879757e3e3262260b1416c334d862441fb3b52604065f7ec5187c5471d5d01bf9506ad26d8d0d2865dd791cb5b2dfcdb3a704e1a81e56a04ca6fdbd61d52e8fff16407030d8e45b3c08251bc09fc1bc09d82d7ca0a8083b9bc701d828839773e57d97961dacb91c88dde6b4023461", @nested={0x4, 0x53}, @typed={0xc, 0x149, 0x0, 0x0, @u64=0x8}, @nested={0x4, 0x65}, @generic="3a12a61eb8d8a5d7a5884a99a7766d315fa28642e3cc8289226b64f0cb21e7ca32f271a7e6176a5078c731cdb469da66d4cc4dd75fa8d5ce1ae07e1736a7868a5fb8672e07ace302ad1deb73566f7dc8be4e936d9b2164e3cef05e6ea4d0ae65f64bc72a145691cc9514714f0b7fc3a167725182e128f99e6a4d89963bbaefabbfed0bef9ab5"]}]}]}, 0x44c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) (async)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000380)=0x10, 0x1c) (async, rerun: 32)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x4855}, 0x8811) (async, rerun: 32)
shutdown(r1, 0x1)

2.741985453s ago: executing program 6 (id=975):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000881}, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4c9, 0xffff, 0x9dfe, 0x5, "8003e3ffff072000"})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x4000000, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x4) (fail_nth: 8)

2.142356762s ago: executing program 4 (id=978):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000002c80)='./file0\x00', &(0x7f00000004c0), 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000080)='./file0\x00')
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x80)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2, 0x83, 0x0, 0x3, 0xc, 0x0, 0xeff, 0x0, [@sadb_key={0x2, 0x9, 0x40, 0x0, "88bc9122e989532d"}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x5, 0x2, 0xe0000000}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x60}, 0x1, 0x7}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f00000005c0)=[{&(0x7f00000000c0)="94", 0x1}, {0x0}, {&(0x7f0000000500)="7bc1feeb68d84f5e1129fec75f8ccb251c28a8d95115b163b502fea6c8a78f22ae695eddcea77abd3dc6ef9d4de4bf5e04cdda8ad5c802eba460a24aac852de1d128137d4007301f3dd342e61c9708da9e74b5bca45708ce8cbc7aa7112d7c9179cc90f475fa6431c815e2331a3186bf2e953898306ab291a43579c20bfbb11afb6b07effa9c52e44edae263f4bc9fa343fa1c4ba3dd052b8c417f00483130", 0x9f}], 0x3)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r5], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x830b, 0x0)
socket$inet6(0xa, 0x2, 0x0)
getgroups(0x2, &(0x7f0000000600)=[0x0, 0x0])

2.020972287s ago: executing program 4 (id=980):
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x8880)
r1 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee00000000000000008500"], 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94)
sendmsg$nl_route(r1, 0x0, 0x20000880)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x727, 0x7ffffd, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r3 = dup(r2)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x1, {0x2011}, 0x2})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
r4 = syz_io_uring_setup(0xf51, &(0x7f0000000580)={0x0, 0xbbda, 0x13520}, &(0x7f0000000240), &(0x7f0000000180), &(0x7f0000000000))
r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
read(r5, 0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x21, &(0x7f0000000440), 0x1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
getsockopt$llc_int(r8, 0x10c, 0x5, 0x0, &(0x7f0000000180))
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r6, 0x0, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r9, {0x9}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x5, 0x400, 0x9, 0x81, 0x101, 0x86a4, 0xc40, 0x7fffffff, 0xfffffffd, 0x1, 0xb, 0x19, 0x6, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x845}, 0x24008004)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r3, 0x0, 0xffffffdb)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x2, 0x0, 0x0, 0x2)
syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080))

1.824673131s ago: executing program 6 (id=983):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x1000000, 0x4005c}, 0x0)

1.674388628s ago: executing program 6 (id=984):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000200)=0xfe)
ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x24, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x24}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="240000002100df4c2abd70000000000002001000000000010000000008000200e0000001"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={[{@verity_require, 0x3a}], [], 0x2f})
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f00000003c0))
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121500, 0x38)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000081800000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r5}, 0x54)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000076000d0b"], 0x18}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000faf7ffff00000000000000008500000007000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
lseek(r4, 0x8000000000000000, 0x0)
write(r0, &(0x7f0000000180)='T3', 0x2)

1.533409759s ago: executing program 2 (id=985):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x1007, 0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
getpid()
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0)
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES16, @ANYRES8=0x0, @ANYRESOCT=r3, @ANYBLOB])
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000100))
mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff)
writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aeae41b5fde2f28d891ffda7e94646233f4e80b9ff2507f07db3ee231cecc4f81c70d0c5a37b16e6b254ad7bd22e49ddb83263ace4aabe6b0937a16821b6895fc9850f484d076854903d422", 0x95}], 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r4, &(0x7f00000000c0)='1\x00', 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r5, &(0x7f00000001c0)='1', 0x1)
connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c)

1.354311484s ago: executing program 6 (id=986):
move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
membarrier(0x10, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000140)={'macvlan0\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x44, r5, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x64}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xff}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x10)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
pwrite64(r6, 0x0, 0x0, 0x6)
pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

1.164085535s ago: executing program 4 (id=987):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000580)=@ethtool_drvinfo={0x3, "7559dc226573b59d7d8be098e840ca36520cf881ddefc61713ac8cf4ade94776", "494fb1a50ea96c12b986b09c89394821c41e9d44e696ae6a5bf324895aecdba1", "a5ade5a86c1a95854c41e9a6b930b328bfb7f06831aeb6c98799a4e41ba11031", "942fab0d0c6c88f93ddce63b9fa533b76206010000006761f9efa28da247f351", "e9d2cd08001781000000b9398971000000800100", "31b996883fe7a5c1bf7071f7", 0x5, 0x1, 0x9, 0x1}})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r1, r1, 0x200000000000000)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000007a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000001880), 0xc)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0)
write(r3, &(0x7f00000001c0)='0000:00:01.0\x00', 0xd)

884.452246ms ago: executing program 4 (id=988):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000002c80)='./file0\x00', &(0x7f00000004c0), 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000080)='./file0\x00')
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x80)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2, 0x83, 0x0, 0x3, 0xc, 0x0, 0xeff, 0x0, [@sadb_key={0x2, 0x9, 0x40, 0x0, "88bc9122e989532d"}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x5, 0x2, 0xe0000000}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x60}, 0x1, 0x7}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f00000005c0)=[{&(0x7f00000000c0)="94", 0x1}, {0x0}, {&(0x7f0000000500)="7bc1feeb68d84f5e1129fec75f8ccb251c28a8d95115b163b502fea6c8a78f22ae695eddcea77abd3dc6ef9d4de4bf5e04cdda8ad5c802eba460a24aac852de1d128137d4007301f3dd342e61c9708da9e74b5bca45708ce8cbc7aa7112d7c9179cc90f475fa6431c815e2331a3186bf2e953898306ab291a43579c20bfbb11afb6b07effa9c52e44edae263f4bc9fa343fa1c4ba3dd052b8c417f00483130", 0x9f}], 0x3)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r5], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x830b, 0x0)
socket$inet6(0xa, 0x2, 0x0)
getgroups(0x2, &(0x7f0000000600)=[0x0, 0x0])

659.005685ms ago: executing program 5 (id=990):
r0 = socket(0x28, 0x5, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @rand_addr, <r1=>0x0}, &(0x7f0000000140)=0xc)
sendmmsg(r0, &(0x7f0000001a40)=[{{&(0x7f0000000180)=@can={0x1d, r1}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)="5d849c92ab2c80019781062cb4412cf73c957f442e9bff11266bd42f6dfa5bffdf0776f57826c7", 0x27}, {&(0x7f0000000240)="a4ac428af618a242599400cd8ca96c86f8f6c577a858a8ba1e5f014f6a30aa49b73ecb320ba6eb475d86735f87ee0b04fd131b6e1a25571cd795145f2b4edf79e78d3de6672e68225377422cd99ab57d3b1becf8ea2c08872f9476ad7c297cf95b66bcc08027dfec7ba2c763dcbc3788441647147bddd271a461d4f6fdb817355e9e782d3351421a827f7e275ef3a644fc474a3fbf500c149b85d3e01494ad7859199fab44a99f982db5055382224cde7c75", 0xb2}, {&(0x7f0000000340)="9aa5b900791e29d482a7f39b37fb235b1f7d515f94c3ed292b0c85eab4c4d2fa9f5ca9e8c527d0604738960274162da65317163ac030b8b50c7aa7344843934444b4b5e978468c3aa4257905f848170b42b086bf55b4c01c4702a4185baca297e3ea7c5a2f75d152ed95bc7cec92a9381173802c873f2c55525532e2aa9aa1467e2514dfafdf8e9deedf5d56b1134fa72727cac3b5", 0x95}], 0x3}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000480)=@hci={0x1f, 0xfffc, 0x2}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000500)}, {&(0x7f0000000540)="ee10338b4c14f5c8bd803eb45fb88316412662db28641a55e3fda795b295364c667d0f399935d33202874149e0aa3f5ec649a10bdbfdc3ec0cbc50bc2f70f15479a2b7d3e84fd886ef67be3aa0a110a3c1eb3edbf08a26d75f578d803b5a5ea950bd635c00ebc0bbe893b1a20f8785b9837eb039763372005660463840639da52880b94d5e6a28a7ebef4066d2e79ed1e22b0cadba07bdae062c590840c3d75882e724d791dedcfe69437baff0b508c20fcb500c132fae9e1d42ea7c6fda", 0xbe}, {&(0x7f0000000600)="cb5db50f2873661254f4ffc664c6809c89d0cc69ce615e765af622f2d4fd0c262905cd6f01dde3dde6363a9912f9fe85a0e6067c00d274e7ec6187e5fe5545be9380451f3990c251b98f3e94fa262ad9db081db8549c245d342ebadddbb1de7cfde7e303085096f8ab618352e91d7b63ae928b166ba77794d77e3f01f7e0", 0x7e}, {&(0x7f0000000680)="d55d1e18466b8be3afb0d6b5ed9cc3e27723f564730bc248d2cf4e1a6abc609682858f22538d64aa0fa28739db1ffe0da3f19a907abb61b2da76912f7955bb79d49496b0c35feb2433626b6f238fdd458c48fec6d18fb01711c71a2035d357423a530e1ed3e9c65c11be4c3e7e8dcb", 0x6f}, {&(0x7f0000000700)="e994db81c80713", 0x7}, {&(0x7f0000000740)="df345d72f7ab98b7dc6d40db78004df313f0c142cac652b3fa83fd891b7a057b41e28bfe992278452a2feed1c3a613ee27f1c28cc6c4d887f1565537b436ada3289c389c673e9e68d2de177d8a06762cb7e4e9c3d5", 0x55}], 0x6, &(0x7f0000001ac0)=[{0xc4, 0x101, 0x5, "ca15f6586f32c310b03ec7fd78885ec26caa556878535ba3f34e053b40b3bc7f79f16e9d1b5f293636da2f4742ccf78faad18429599f94a3fdd04f2e8c19be22f34a76a78a52645b901e3cbfe6a0e4065134fa5ca5d9d49f582e37a6d9c4cd9302fdab9285b5eff6c2f6c655d15883bd7fb0a754a453c0e9c547b02edc2084b5394debb8b3d7bde120123232c57ae57e2b7747986b1cf58e3cf0272ba3dc917b259985998f6f4e5e0078418a9b8a563695a3ab370e365c05"}, {0xb4, 0x1, 0x401, "dec29ced459b3d7354c955fc2656e24fc038e92d6c3ee93ab50b37ff556b3ca9a2e5ee090052e144d954813b1227a36cdb79539c70a5e7cab63683573eca308eec289034b088146797b1e331af1db5f32aa401c24d31561189725951f9a1ab4e964333ee5719ce5ddf78fa15e28918e88cde9663690e57456570d105bc931f7afe313dfc89b112e8e1b54145d81917f6e86323c5d514bca984b802b44d9d82344d9b85ee6a2a"}, {0x100c, 0x112, 0x5, "237fca6e7f06ed0783283d1b56210454833c30e05877013fc73636dcb1b3b84c46c354374eebb94e11803c626a803cad8a6653ec3539cb2373e99eef48635f582b59415dada7bed423409390778120ba06cd417a42b794b8c2e7ce72e3d586ea20a5f7158d499419c633564ddcd774fb2bbee8a419794cd5214b4eb522bad70da27e59ece2338671d5304729aff8136fb7ce265834f1448ae4a096130f6cf5c42624ce2a7742ccc32c1881d473bf45264b55621208360e5c1e45909fb8d5cdb18ef5d4cf2d2375808c42db530b04a4144fe8c899c78fceced13e09e1e1e9e2b02e589c2dbafe5c1f2626472ec96f67bd756cc8a718f80f012464af5f3fd41a17bb6e4fbd6554bc977a37b7780b1ec28e34c46a4d6b6b35b2ffef1e08314d7a7486464de11f20757ac826f9a387071b30a0a26647865326fa01ce00b553d91e580db39c8ac764800def6a7948c0cd8db8f7c0fd3e2dfcd64aede16387daee28ab0d6b29d2997e767b58a6ee20a7dd322cc3f4455043c5f06dde94c6594b886af9b11bb4ab9ae0ce1e2da409ce65c90f7b6063681f33926162925ae680779bb0c64775af476a67240a04ca1ec18a560461e11cb30b1b9f6d6f9fbd93a76ef959d4959ab4628a49c0a9e7747c2643630cdce7ebfac2c957fadff52741bb55b4a15205d4c578a3fd665090fb8618c5e8c3c8ffcc04b3416354e10f13b87c6c0526e19ec06dea4d5cc1755d66a98e8258ab337e4bc1fa3298eeeb810d00f056cebab0d3d002dea234c131d955d26ec96937a8e0c53087962b5775cf3462a2456cf696a1f284aa21dad4620d29726d91cd2dbac9b29b6740e7b300e07eb3c182d0e6b138c12e7c451b0459732bfdb9a9df42ace83e4c824a9bbe3eb28f83a0d35f2a78ef182c933bfd1301ee1af631d98735f45f0507e9e566044208cc935132c5223bd4a2c115c6f16785a326eb5e019856b79489eff2feff1fe6f2d33d019611412406d8314055afb834a3f60b707ee2f584937e3ecedcd71fe2f535299ee11a71af5a41d7ddf54fc8d0103c51f0b3682459202b2dfa69e8884bf0260f9684bbadeaeccef67cf50d2680f991e72c3cb22b723601d276215bb8dfbbee0561634f093a28531aef1da7197a2d5c600bf5fae209989c69c96e71039370e337b458ab1a66007df2eb85f34a7d9b17632b12ac2a6c036a9a9da331dcf9c6bd88b241abe4e829187000bcfd7e2d3897f6bedf455e1a75a30f99e87ace044991342f072453c9f2351f6ba2c0158664ab320aa7ef8fca1a5560b2e762f815d0eed04a0af7e043a8fc8fcf4e6573f4ac8115541fbf7d19fbd2e1ee129d3c546706adc64c2a436322be5b8870757b788de0f3e4dfc93d04194b297506451d97c86a4f56f8e8dca7a04729d9aeabf54c86fe048f68f195d113c3600a7057b25b2bf7bdc88b642e6bced07398618ef28d150fe799ec891c8e069fd9121b637cc63e8c3855259587c00deb645dc0e1059f53371549c4702bf1252315e44617870fa26e18b6bf974de8de5e140cc7d5c1938ff7fbfd9c1b741a320530334ed9d45a905394cf31388ec92c7154e7f964a63a5f704b0b0aedde6334ea13a299aae8003b38884d8d99f532ea7882b2cdaaaca8591c00fd993ecc348e23bcb696fa35e5bbc74e77779d8631bd9f00818dbcc5063e425c611838b1a9f64364d0b7016654735f4298240570b5db294e260917f7b08065bf57a58fd62ba16e40a6232eb32d071080c7430a412c1d45df65731a470bb1bf9b29dd2edd3baca8310e3fb3edfd191a5037548a2c6a74d4d927fcd7dc55811655bf60e21bc3f4bec271988174e46053117eaa2dad226638e02ec1d49720bc49fdb7381a1a1a3f4bb94134dfc3fad57dd5f76336208632fc010b340fe8984cf35fcb1ee3f06d140c587ef55020b2ba9e8d80b8490660e829812540755acdec787fd0825cabc5cbfee87643b244612965d1ae5a142707b64fd9304ab224165d9b447d4870a38dcf5442f123d13e1d8b91d058a9b3a4cdb1800f42a9e177d1fc1ef26124a209899b573ca3b36ab58cc3c7f49e0dfc20dbc2664320cd352f9eeb691e22dd8320e659ebc337a1d81b4042b494c67bf958c961c1d9e36639b518d9391b28b6d3d45c827df7c6c86c2f17fa820aa620be7285383c777f74b3a8997e2e6f6ff7d2a4283c55c3ebc4382c435b2fdca2e9a4453d81504632e713f902c45437f047e832c76e90aee673df6b608a0b9ff69f14c1ba62682567ec2a2c4af9da0d3ee9f908344992077163e66a138f09bceb2f4d4fbf3d87a4b90ce7dd36c2a2377a09d4d70d00c13b9d88bd3b985a25cea566091db8b02f5ca857485198993eaf961f86054d2bcc331f48d2c1c78575520414955882ebe46109c6e564cd14868e6d741dcdd7d2e1b45e1c7d3b082591ee249ab36c36fbf03e35085aa415fc0ed2ff8beb5f55c5d508ddcab6366ad774b7abbbd3b60b5fdb9e90e24e80755d42b22d05482ee7ec1e7770dd9b1e71df28b193c53d0591fb82fe85828d726d5957e422ded26768c89c0c2e81db071bf9c1c79374688780518b7bcc03bbe9aca81a868232bfd0e7acc2f66a619a400012451b7bfb89154f0c4df52100bbea1d2026347d257d506e629477641bd9284665491162c816637c0822b90349403beb29e4c81ccd4b11447d00f93d3b81cc3d8ad320e2a8b7f73e45e0f0fd7120ddf7e157dc06bf80245c04697090881b4327166f3612cc400c37492cd8672f306a0dbae44170e805026c8e44625659e7971f6ba20646b67a7eb5005407f4d3764b2880a562708045783734e36682e74cbcce7bcebd2c13b3f316a49e05538fefcc94061cf1ff1b5f61855fa1ccc162206b0b062d9a5be1aa15e067fc602051556c1b8fd289d536cfc6a1e93726b2ef381a36344ef5f11effad2ace0cbdd964b07af38518e3a517954ee16c15c31da41efc2b613de1027c8a8931a985a55ca317b319392e6dd24fcfe697cd0414bd8d30d2e59f2acd553b970289aada13eb17c373a775d4b908346d3ea0d1cb0e7d3c7583961b0687b1c113889294c433e05034839192c2c468cbdb7e65cef3c764dcdd816703804e7c1a813b87c529d15dbbb5663c0123ad1f0cd47456ca519e3b4e9944f91776cf71be37c540f433fe6f3e371e5ac1a31c101a8e887e773bf190b20f0ea64d4e4ac87a9efe2967918bbecb39e4550d2a64ddb218001fe2d8be4e2551b652095820069474e14c69c0ab92a6c6ee8092949b0e78ae81e8c11c5a7d9e8d5d91ac7df62388a205c191286d2e0c944d1744074d80dd7e5573ffd7e987909b1a51673cc39f78cda0aebc0aa5a56b2594596d136be74aaa71754f20f683f8c1889242ebc2330f5461e119cc8a964b009d2c3c834cab28a2ffca26b60895c71fde6d683c672e70bced902b4c98123925222cb1a189b97191fb35548b2e947b913596d6ae3dbff2e02b8ab3c415c81fc6faa18e38fd73f96bef9e1b3c8eec36e3fbcb861285763570507d788354e77b89856ededf939dbccf7b4240ed7039f00a75a82de286c5c712cdcd5f673863b18f06f0fe2a5509499efa0292d72113da0e60fac4433d311dbf504a4cbb40ed7f905f70364bc9080c97e16f91cc16057a3ee6592298db5189f764823cc9102df4eab5de360eed776901da3aa4f8aa557bc862c9e502336033d094f911052a79765d2f206d593bdffed952ff4f88cb08c6d6309a87086f4c92608ad971b04147d864dd1865cbc0f802d6f54b193f7e79cf6536d27a31746babd5cccdd7e3906d45411263854ce17fc3bf9d59a5ee693d303550846a93a30544fac3a4bbfae8d2ac2eaa6fc544808d8fd877f88fc781a3f8f1ac9acb5b8d380afcf499782f28a5b0aa8b709f3f1abae3731021488701915dff20a074659154b04462100773cdc06d749b076af24b51a045789cc126cb154032f70a704ca7708b8525bf2c6435ddc9414b621e72624a0591151a9beaf68e87c38976e706bc8740d1d8d5a38f3b553c9898a8fd3fa9f6e01175dbbe2d59c23c0390032d80d76715672a41cb30b7758e601d6ff44adfe67833f077d1d05350cb2daf38798e60d053e026bcc0fb1b72cfb456c22f2217e8fa13484cf5cc2ee0d436f68a955bef499b08988773866e8a0e1d7d7bd9c8b251ea0049cca5c16a20085f937aa049eb5a4c636d59634b94d562c48ebe98d57beeb0b67012c5b17de09335c1ed5a877790e1f1b991c4195ecca3951de81d1807b5db0ac61a5081c4efc58f18f4ad076d8b76d1043c6ee1993ab6802cd142fd1f03e6ac79b69b36084852a30a72b5a8b13d31ccd02b60d7eeeadc3bd385426ebfa1db7a2340fcba516cc1c40cd174a4e898ba560e8e9eefd272170d3167567aa37857bc1419c213c82c5fb141c68a83047008addfd443f7910a5243f38f2e838a21060f6abd19ed449284ef5ae2b3317bfca6c97d3c3211bed2e02a9de58342966d68354fb788d70095b1b50d795b0a73a0df5e95841606f922cb8a152c9883d2594b75423d801ddbe95271e6627e0d28e5227ffa5ad2d03ae17d378000d4dc28ea339f62bde22f535aab925f15c607210d4e3b8fe2c307f85645714d26b81a807967d63cd3d043932d32da68981a9284b38ba8d89efde0ee0931d8f39d408e86304a142ba92bd81eca6f07049665e60363fea95034b08308b577fd12cfb636354115a9c45ff2e17ae6dc88d59fe1d0a6ca9dd0149b70256001164c34ac108f5ecc0ccb7857159f80307238ada6cde7cf54bdb9cc1c8d90d436a0fab8abb8d6d4a5b58049a1fb0e0cd23d4a4e63dbd6f315a62ccf96214eca0dd3cf517954167b818ebbe3192729a045966aa184ec3fcad73e410af346c32c3c2e4a5d0ab8040154b2543a54b270c936255b8d42ad70ebe7c175b70e6d37936a4970e1daad5df4a11912f6cb2b2521060e2c70f98f34ac7cca5a5b22b8fda2220e02558f37ddef1b20968785aef1e7cc8d3bfbe381a8641c82ff5eaf5a3ecda14aaf564160cce46eb3d4757d5f6800f669c45393e62ce9d393b86d8ff4bfad818ffec69d6be0d4b3196fbc16e62e639ceb38ea6c572dc61732cf3a897851ae1e7cfa71f3b7e88682d464ea641c341425902e40e2b47e1ad59e1007e638afda37b09e09f0a4edebb5013770675296d826d9aa6d6d546a13067186aca979eaf9e80d10d091d19b77cf90c96dcc5072ba8bd1e0a1c61d3cae36d79d4a8108f99cb853c8d2f7ff90b82293535acc060fef8bed6f11e88ebd74090192297d4b437b1c7a18eabcc53891f1f72b32d0fbb2c91759a452940c285a9a6a974f29ddeaf80131ac12f43c25a215b11a11e3f9b99354d71c7cb09aab7ece7ab61b9e8ca813b257a26894665401af91c43cdecd362720133112d44f89b207edae2f474d9a4a7d2ee9c5276f0f171c72f67550bf471a5913ee138ca48ded23eea9517f1dde84a80d385ea287d7a72dee6fa20bcc0c7ee0f8e4938c863c9b112aac02e8450b3d46fe83cc81703bae65e9c9b932be57794a3fb5356fd6a850e95f526c21ea5a4b5023eb7a23a389ab29b036e59f8bf3d1d670e3b0b1617865159fa565ddf1b173d1d8068cb2557c09ba014ff45f2089290ef0006ea0dfcee575db5f6fe75cdb459086a61bc9be63632a8a4b33258c5715b866c87cc692b94e381ec6c2541fc6bf9de7ab1da6aa88aae9564eb076537d308f6cd231fe3406fde056bc0d58a726f6c29e352735b59bff3023b40bcd0e56df390ee4e51604513bc22549d2aa"}, {0x30, 0x111, 0x9, "2bcb1ae47a5b6d6ea058a99ee3545c1c8ce277ce182e4e616a285c697d4b6a94a90e"}, {0x18, 0x0, 0x5, "5117b3ad5a0e421d5759"}, {0x68, 0x3a, 0x80000001, "6a581c68524f4ef636880d58d1516aa1def8ebbf5ef039124dd1e2d66899e7fb3a7a890a821106d6040018e841307051a7ca08362d0ffbc1daadfaf0138dcb84e6ac4bc6c27d35011f3bf3146f34d26ad4b036f4ac0f863f23c936"}], 0x1234}}], 0x3, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = getpid()
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r4, 0x0, 0x3}}, 0x20)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (fail_nth: 6)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x101c02, 0x0)
r5 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0, &(0x7f0000000180)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r5, 0x521c, 0x1, 0x61, 0x0, 0x18)
mprotect(&(0x7f0000692000/0x9000)=nil, 0x9000, 0x2)
stat64(&(0x7f0000000100)='./file0\x00', &(0x7f0000000800))
socket$alg(0x26, 0x5, 0x0)
prctl$PR_SET_IO_FLUSHER(0x41, 0x3)
mprotect(&(0x7f00003b6000/0x2000)=nil, 0x2000, 0x100000a)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, r9}, 0x94)
openat$cgroup_procs(r9, &(0x7f0000000880)='cgroup.threads\x00', 0x2, 0x0)

566.336387ms ago: executing program 2 (id=991):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) (async)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0) (async)
close(r0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0)
ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000080)={'bridge_slave_1\x00'}) (async)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000000), 0x4) (async)
write(r1, &(0x7f0000000400)='0x5678', 0x6) (async)
close(r1) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0)
write(r3, &(0x7f0000000140)="e5971b1e2fbd641ffae0eaf5a6c670a973724bdd2fa755c3160e970b200c6bdbae0f88fc30ddda2adae7f5b7ff3b5d4022583318e5d8b982d15986f083c114f5a271d2fbc51d13c04c6a99446037bccff55daac2dab18de7", 0x58) (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000a40)=0xe4) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0)
write(r4, &(0x7f0000000900)='3\n', 0x2) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x3069e}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x9}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x2}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
pipe2(&(0x7f0000000040), 0x4000) (async)
close(r4) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) (async)
symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e24, @private=0xa010101}, @in={0x2, 0x4e22, @broadcast}], 0x40) (async)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0)
write(r6, &(0x7f0000001600)='usbip-vudc.0', 0xc)

481.33432ms ago: executing program 4 (id=992):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (fail_nth: 3)

481.081143ms ago: executing program 5 (id=993):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480))
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r4, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0xc, "3eccd8000000000000000010000000040100"})
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0xf9)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000280)=0xb7)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x5)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0xb7)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x1)

480.936882ms ago: executing program 2 (id=994):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/pppol2tp\x00', 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {}, 0xa}}, 0x26)
read(r1, &(0x7f0000000400), 0x120)
read(r1, &(0x7f0000000500), 0x1000)
close_range(r0, 0xffffffffffffffff, 0x2000000)

439.5816ms ago: executing program 5 (id=995):
r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
r1 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x4, 0x0, "37bb54f0"}}) (async)
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x4, 0x0, "37bb54f0"}})

439.253252ms ago: executing program 2 (id=996):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000580)=@ethtool_drvinfo={0x3, "7559dc226573b59d7d8be098e840ca36520cf881ddefc61713ac8cf4ade94776", "494fb1a50ea96c12b986b09c89394821c41e9d44e696ae6a5bf324895aecdba1", "a5ade5a86c1a95854c41e9a6b930b328bfb7f06831aeb6c98799a4e41ba11031", "942fab0d0c6c88f93ddce63b9fa533b76206010000006761f9efa28da247f351", "e9d2cd08001781000000b9398971000000800100", "31b996883fe7a5c1bf7071f7", 0x5, 0x1, 0x9, 0x1}})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r1, r1, 0x200000000000000)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000007a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000001880), 0xc)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0)
write(r3, &(0x7f00000001c0)='0000:00:01.0\x00', 0xd)

438.9107ms ago: executing program 2 (id=997):
r0 = socket(0x28, 0x5, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @rand_addr, <r1=>0x0}, &(0x7f0000000140)=0xc)
sendmmsg(r0, &(0x7f0000001a40)=[{{&(0x7f0000000180)=@can={0x1d, r1}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)="5d849c92ab2c80019781062cb4412cf73c957f442e9bff11266bd42f6dfa5bffdf0776f57826c7", 0x27}, {&(0x7f0000000240)="a4ac428af618a242599400cd8ca96c86f8f6c577a858a8ba1e5f014f6a30aa49b73ecb320ba6eb475d86735f87ee0b04fd131b6e1a25571cd795145f2b4edf79e78d3de6672e68225377422cd99ab57d3b1becf8ea2c08872f9476ad7c297cf95b66bcc08027dfec7ba2c763dcbc3788441647147bddd271a461d4f6fdb817355e9e782d3351421a827f7e275ef3a644fc474a3fbf500c149b85d3e01494ad7859199fab44a99f982db5055382224cde7c75", 0xb2}, {&(0x7f0000000340)="9aa5b900791e29d482a7f39b37fb235b1f7d515f94c3ed292b0c85eab4c4d2fa9f5ca9e8c527d0604738960274162da65317163ac030b8b50c7aa7344843934444b4b5e978468c3aa4257905f848170b42b086bf55b4c01c4702a4185baca297e3ea7c5a2f75d152ed95bc7cec92a9381173802c873f2c55525532e2aa9aa1467e2514dfafdf8e9deedf5d56b1134fa72727cac3b5", 0x95}], 0x3}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000480)=@hci={0x1f, 0xfffc, 0x2}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000500)}, {&(0x7f0000000540)="ee10338b4c14f5c8bd803eb45fb88316412662db28641a55e3fda795b295364c667d0f399935d33202874149e0aa3f5ec649a10bdbfdc3ec0cbc50bc2f70f15479a2b7d3e84fd886ef67be3aa0a110a3c1eb3edbf08a26d75f578d803b5a5ea950bd635c00ebc0bbe893b1a20f8785b9837eb039763372005660463840639da52880b94d5e6a28a7ebef4066d2e79ed1e22b0cadba07bdae062c590840c3d75882e724d791dedcfe69437baff0b508c20fcb500c132fae9e1d42ea7c6fda", 0xbe}, {&(0x7f0000000600)="cb5db50f2873661254f4ffc664c6809c89d0cc69ce615e765af622f2d4fd0c262905cd6f01dde3dde6363a9912f9fe85a0e6067c00d274e7ec6187e5fe5545be9380451f3990c251b98f3e94fa262ad9db081db8549c245d342ebadddbb1de7cfde7e303085096f8ab618352e91d7b63ae928b166ba77794d77e3f01f7e0", 0x7e}, {&(0x7f0000000680)="d55d1e18466b8be3afb0d6b5ed9cc3e27723f564730bc248d2cf4e1a6abc609682858f22538d64aa0fa28739db1ffe0da3f19a907abb61b2da76912f7955bb79d49496b0c35feb2433626b6f238fdd458c48fec6d18fb01711c71a2035d357423a530e1ed3e9c65c11be4c3e7e8dcb", 0x6f}, {&(0x7f0000000700)="e994db81c80713", 0x7}, {&(0x7f0000000740)="df345d72f7ab98b7dc6d40db78004df313f0c142cac652b3fa83fd891b7a057b41e28bfe992278452a2feed1c3a613ee27f1c28cc6c4d887f1565537b436ada3289c389c673e9e68d2de177d8a06762cb7e4e9c3d5", 0x55}], 0x6, &(0x7f0000001ac0)=[{0xc4, 0x101, 0x5, "ca15f6586f32c310b03ec7fd78885ec26caa556878535ba3f34e053b40b3bc7f79f16e9d1b5f293636da2f4742ccf78faad18429599f94a3fdd04f2e8c19be22f34a76a78a52645b901e3cbfe6a0e4065134fa5ca5d9d49f582e37a6d9c4cd9302fdab9285b5eff6c2f6c655d15883bd7fb0a754a453c0e9c547b02edc2084b5394debb8b3d7bde120123232c57ae57e2b7747986b1cf58e3cf0272ba3dc917b259985998f6f4e5e0078418a9b8a563695a3ab370e365c05"}, {0xb4, 0x1, 0x401, "dec29ced459b3d7354c955fc2656e24fc038e92d6c3ee93ab50b37ff556b3ca9a2e5ee090052e144d954813b1227a36cdb79539c70a5e7cab63683573eca308eec289034b088146797b1e331af1db5f32aa401c24d31561189725951f9a1ab4e964333ee5719ce5ddf78fa15e28918e88cde9663690e57456570d105bc931f7afe313dfc89b112e8e1b54145d81917f6e86323c5d514bca984b802b44d9d82344d9b85ee6a2a"}, {0x100c, 0x112, 0x5, "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"}, {0x30, 0x111, 0x9, "2bcb1ae47a5b6d6ea058a99ee3545c1c8ce277ce182e4e616a285c697d4b6a94a90e"}, {0x18, 0x0, 0x5, "5117b3ad5a0e421d5759"}, {0x68, 0x3a, 0x80000001, "6a581c68524f4ef636880d58d1516aa1def8ebbf5ef039124dd1e2d66899e7fb3a7a890a821106d6040018e841307051a7ca08362d0ffbc1daadfaf0138dcb84e6ac4bc6c27d35011f3bf3146f34d26ad4b036f4ac0f863f23c936"}], 0x1234}}], 0x3, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = getpid()
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r4, 0x0, 0x3}}, 0x20)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x900)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x101c02, 0x0)
r5 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0, &(0x7f0000000180)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r5, 0x521c, 0x1, 0x61, 0x0, 0x18)
mprotect(&(0x7f0000692000/0x9000)=nil, 0x9000, 0x2)
stat64(&(0x7f0000000100)='./file0\x00', &(0x7f0000000800))
socket$alg(0x26, 0x5, 0x0)
prctl$PR_SET_IO_FLUSHER(0x41, 0x3)
mprotect(&(0x7f00003b6000/0x2000)=nil, 0x2000, 0x100000a)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, r9}, 0x94)
openat$cgroup_procs(r9, &(0x7f0000000880)='cgroup.threads\x00', 0x2, 0x0)

433.774888ms ago: executing program 5 (id=998):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
write$tun(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="002000006081090004"], 0x7a)

323.35254ms ago: executing program 2 (id=999):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x0})
r2 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x280, 0x0)
ioctl$CDROMSUBCHNL(r2, 0x530b, &(0x7f0000000040)={0x2, 0xb4, 0x2, 0x0, 0x9, 0x7, @lba=0x6, @msf={0x9, 0x75, 0x3}})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x118f}, 0x0)
r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2)
syz_open_dev$video(0x0, 0x1d24, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}], {0x52}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0)
syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socket$xdp(0x2c, 0x3, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil)
mremap(&(0x7f000081e000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001900000125bd7000fe7ddf2502208001fd00000b0003000005001b0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000180)=0xd)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="ab26c0381d7804426d4f0ffeb17ad39b63362343370409f922040d63962fc2aeececbb3caeac9078a61cd82cd18765242b2dcebd0d4ff85fe6905ff54ef66387522551cdf76761c6370caf27f2992f1665d5d39e016fae7579a3b9255ce20c8c68fa9fbdf0d3fe6786f38019f7f803b323515bbc59f5ebfb620276a9f768603f8c17b3e8856af9155d3247349dc4bc29af164f8bd6c3317f21f04bb7047c6d4fc6186e49baf7f7ca520d4a17ccf651629e88a92f3e0cb8b771d447c0bb51a3eee9d64beeaf4de4584ddc6ed048722fde6f4db950d410e96ef621c2a89ebd98f103dd02106bf5135ef3dac237d8573a813c2b61d56d6f4a07ff46105f870da50745", 0x101}, {&(0x7f0000000140)="fa5cf2e9f531fb0969f9185e70e92cdc9c578dfad370ac8bf37435a70fd07e734b398c2615a9cd7a34ee41cc51b26e2829bf8dc17401669862766a05bf9a9c9c175d2e9c2de6f5b8b77a38e616fca1db5a2c1d4f69b8d64b5d4ce3a9bde53e5c3e6103421a38ad276686161286b64996b09b5d09f78cfb7e27c38be8e0e7346f8ba3453065c6d01bcece056fb93efd3997d82531970613a7c7e55d0e22f3b107774ca1bb3526e6c5524e8307b9012440403f", 0xb2}], 0x2}, 0x0)

251.728255ms ago: executing program 5 (id=1000):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000002c80)='./file0\x00', &(0x7f00000004c0), 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000080)='./file0\x00')
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x80)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2, 0x83, 0x0, 0x3, 0xc, 0x0, 0xeff, 0x0, [@sadb_key={0x2, 0x9, 0x40, 0x0, "88bc9122e989532d"}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x5, 0x2, 0xe0000000}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x60}, 0x1, 0x7}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f00000005c0)=[{&(0x7f00000000c0)="94", 0x1}, {0x0}, {&(0x7f0000000500)="7bc1feeb68d84f5e1129fec75f8ccb251c28a8d95115b163b502fea6c8a78f22ae695eddcea77abd3dc6ef9d4de4bf5e04cdda8ad5c802eba460a24aac852de1d128137d4007301f3dd342e61c9708da9e74b5bca45708ce8cbc7aa7112d7c9179cc90f475fa6431c815e2331a3186bf2e953898306ab291a43579c20bfbb11afb6b07effa9c52e44edae263f4bc9fa343fa1c4ba3dd052b8c417f00483130", 0x9f}], 0x3)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r5], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x830b, 0x0)
socket$inet6(0xa, 0x2, 0x0)
getgroups(0x2, &(0x7f0000000600)=[0x0, 0x0])

251.531485ms ago: executing program 4 (id=1001):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x1007, 0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
getpid()
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0)
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES16, @ANYRES8=0x0, @ANYRESOCT=r3, @ANYBLOB])
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000100))
mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff)
writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aeae41b5fde2f28d891ffda7e94646233f4e80b9ff2507f07db3ee231cecc4f81c70d0c5a37b16e6b254ad7bd22e49ddb83263ace4aabe6b0937a16821b6895fc9850f484d076854903d422", 0x95}], 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r4, &(0x7f00000000c0)='1\x00', 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r5, &(0x7f00000001c0)='1', 0x1)
connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c)

0s ago: executing program 5 (id=1002):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x40}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000004900010000000000000000000a00076e08000000e0000001140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x40}}, 0x0)
sendmmsg$inet(r4, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084)
ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000200)={r2, 0xffff, 0x0, "aae62c988630e58981"})
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0)

kernel console output (not intermixed with test programs):

]  dump_stack_lvl+0x100/0x190
[  144.006278][ T7804]  should_fail_ex.cold+0x5/0xa
[  144.006298][ T7804]  _copy_to_user+0x32/0xd0
[  144.006328][ T7804]  simple_read_from_buffer+0xcb/0x170
[  144.006356][ T7804]  proc_fail_nth_read+0x1af/0x230
[  144.006374][ T7804]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  144.006391][ T7804]  ? rw_verify_area+0xce/0x6d0
[  144.006407][ T7804]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  144.006422][ T7804]  vfs_read+0x1e4/0xb40
[  144.006434][ T7804]  ? __pfx_vfs_read+0x10/0x10
[  144.006443][ T7804]  ? find_held_lock+0x2b/0x80
[  144.006458][ T7804]  ? __fget_files+0x215/0x3d0
[  144.006471][ T7804]  ? __fget_files+0x21f/0x3d0
[  144.006485][ T7804]  ksys_read+0x12a/0x250
[  144.006495][ T7804]  ? __pfx_ksys_read+0x10/0x10
[  144.006509][ T7804]  do_int80_emulation+0x14b/0x720
[  144.006526][ T7804]  asm_int80_emulation+0x1a/0x20
[  144.006537][ T7804] RIP: 0023:0xf71f74eb
[  144.006547][ T7804] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  144.006570][ T7804] RSP: 002b:00000000f54ad4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  144.006583][ T7804] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54ad5d0
[  144.006589][ T7804] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  144.006595][ T7804] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  144.006601][ T7804] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  144.006607][ T7804] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  144.006621][ T7804]  </TASK>
[  144.155055][ T7806] netlink: 72 bytes leftover after parsing attributes in process `syz.2.594'.
[  144.200646][ T7806] veth0_virt_wifi: entered allmulticast mode
[  144.263134][ T7805] veth0_virt_wifi: left allmulticast mode
[  144.396114][ T7830] netlink: 'syz.4.599': attribute type 10 has an invalid length.
[  144.403150][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.599'.
[  144.443683][ T7833] FAULT_INJECTION: forcing a failure.
[  144.443683][ T7833] name failslab, interval 1, probability 0, space 0, times 0
[  144.451406][ T7833] CPU: 3 UID: 0 PID: 7833 Comm: syz.2.600 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  144.451425][ T7833] Tainted: [L]=SOFTLOCKUP
[  144.451429][ T7833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  144.451436][ T7833] Call Trace:
[  144.451440][ T7833]  <TASK>
[  144.451445][ T7833]  dump_stack_lvl+0x100/0x190
[  144.451464][ T7833]  should_fail_ex.cold+0x5/0xa
[  144.451475][ T7833]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  144.451521][ T7833]  should_failslab+0xc2/0x120
[  144.451539][ T7833]  kmem_cache_alloc_noprof+0x91/0x6a0
[  144.451554][ T7833]  ? skb_clone+0x190/0x400
[  144.451597][ T7833]  skb_clone+0x190/0x400
[  144.451613][ T7833]  netlink_deliver_tap+0xaed/0xcc0
[  144.451642][ T7833]  netlink_dump+0x631/0xd00
[  144.451656][ T7833]  ? __pfx_netlink_dump+0x10/0x10
[  144.451676][ T7833]  __netlink_dump_start+0x6d6/0x990
[  144.451690][ T7833]  ip_set_dump+0x1c2/0x200
[  144.451708][ T7833]  ? __pfx_ip_set_dump+0x10/0x10
[  144.451723][ T7833]  ? __pfx_ip_set_dump_start+0x10/0x10
[  144.451739][ T7833]  ? __pfx_ip_set_dump_do+0x10/0x10
[  144.451748][ T7833]  ? __pfx_ip_set_dump_done+0x10/0x10
[  144.451764][ T7833]  nfnetlink_rcv_msg+0x9d5/0x11e0
[  144.451785][ T7833]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  144.451800][ T7833]  ? skb_release_data+0x6ca/0x8e0
[  144.451817][ T7833]  ? kfree_skbmem+0x19f/0x210
[  144.451842][ T7833]  ? __pfx___dev_queue_xmit+0x10/0x10
[  144.451857][ T7833]  netlink_rcv_skb+0x159/0x420
[  144.451870][ T7833]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  144.451887][ T7833]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  144.451906][ T7833]  ? ns_capable+0xd2/0xf0
[  144.451920][ T7833]  nfnetlink_rcv+0x1b3/0x440
[  144.451936][ T7833]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  144.451951][ T7833]  ? netlink_deliver_tap+0x1ae/0xcc0
[  144.451966][ T7833]  netlink_unicast+0x585/0x850
[  144.451980][ T7833]  ? __pfx_netlink_unicast+0x10/0x10
[  144.451996][ T7833]  netlink_sendmsg+0x8b0/0xda0
[  144.452011][ T7833]  ? __pfx_netlink_sendmsg+0x10/0x10
[  144.452026][ T7833]  ? apparmor_socket_sendmsg+0x15b/0x270
[  144.452045][ T7833]  ____sys_sendmsg+0xa4d/0xbe0
[  144.452057][ T7833]  ? __pfx_netlink_sendmsg+0x10/0x10
[  144.452090][ T7833]  ? __pfx_____sys_sendmsg+0x10/0x10
[  144.452108][ T7833]  ___sys_sendmsg+0x190/0x1e0
[  144.452121][ T7833]  ? __pfx____sys_sendmsg+0x10/0x10
[  144.452140][ T7833]  ? find_held_lock+0x2b/0x80
[  144.452163][ T7833]  __sys_sendmsg+0x160/0x210
[  144.452179][ T7833]  ? __pfx___sys_sendmsg+0x10/0x10
[  144.452198][ T7833]  ? __pfx_ksys_write+0x10/0x10
[  144.452212][ T7833]  __do_fast_syscall_32+0xe7/0x970
[  144.452227][ T7833]  ? lockdep_hardirqs_on+0x78/0x100
[  144.452240][ T7833]  do_fast_syscall_32+0x32/0x70
[  144.452256][ T7833]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  144.452272][ T7833] RIP: 0023:0xf70befec
[  144.452285][ T7833] Code: Unable to access opcode bytes at 0xf70befc2.
[  144.452290][ T7833] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  144.452301][ T7833] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140
[  144.452307][ T7833] RDX: 0000000000048810 RSI: 0000000000000000 RDI: 0000000000000000
[  144.452313][ T7833] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  144.452319][ T7833] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  144.452325][ T7833] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  144.452338][ T7833]  </TASK>
[  144.841452][ T7839] input: syz0 as /devices/virtual/input/input7
[  145.194461][ T7866] fuse: Unknown parameter '0x0000000000000008'
[  145.318718][ T7869] 9p: Bad value for 'wfdno'
[  145.329609][ T7869] input: syz1 as /devices/virtual/input/input8
[  145.343435][ T7865] netlink: 'syz.4.612': attribute type 1 has an invalid length.
[  145.942566][ T7873] FAULT_INJECTION: forcing a failure.
[  145.942566][ T7873] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  145.949022][ T7873] CPU: 2 UID: 0 PID: 7873 Comm: syz.6.615 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  145.949042][ T7873] Tainted: [L]=SOFTLOCKUP
[  145.949046][ T7873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  145.949053][ T7873] Call Trace:
[  145.949057][ T7873]  <TASK>
[  145.949062][ T7873]  dump_stack_lvl+0x100/0x190
[  145.949080][ T7873]  should_fail_ex.cold+0x5/0xa
[  145.949093][ T7873]  _copy_from_user+0x2e/0xd0
[  145.949112][ T7873]  get_compat_msghdr+0xb3/0x480
[  145.949125][ T7873]  ? __pfx_get_compat_msghdr+0x10/0x10
[  145.949140][ T7873]  ___sys_sendmsg+0x1b6/0x1e0
[  145.949154][ T7873]  ? __pfx____sys_sendmsg+0x10/0x10
[  145.949186][ T7873]  ? find_held_lock+0x2b/0x80
[  145.949212][ T7873]  __sys_sendmsg+0x160/0x210
[  145.949228][ T7873]  ? __pfx___sys_sendmsg+0x10/0x10
[  145.949248][ T7873]  ? __pfx_ksys_write+0x10/0x10
[  145.949262][ T7873]  __do_fast_syscall_32+0xe7/0x970
[  145.949277][ T7873]  ? lockdep_hardirqs_on+0x78/0x100
[  145.949291][ T7873]  do_fast_syscall_32+0x32/0x70
[  145.949305][ T7873]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  145.949321][ T7873] RIP: 0023:0xf7fc4fec
[  145.949334][ T7873] Code: Unable to access opcode bytes at 0xf7fc4fc2.
[  145.949339][ T7873] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  145.949350][ T7873] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000
[  145.949356][ T7873] RDX: 0000000004000080 RSI: 0000000000000000 RDI: 0000000000000000
[  145.949362][ T7873] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  145.949375][ T7873] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  145.949382][ T7873] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  145.949396][ T7873]  </TASK>
[  146.066395][ T7875] dvmrp8: entered allmulticast mode
[  146.071116][ T7877] netlink: 'syz.6.617': attribute type 10 has an invalid length.
[  146.080113][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.6.617'.
[  146.296127][ T7812] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  146.303331][ T7892] netlink: 'syz.4.624': attribute type 1 has an invalid length.
[  146.318461][ T7892] 8021q: adding VLAN 0 to HW filter on device bond2
[  146.784288][ T7900] netlink: 'syz.6.625': attribute type 1 has an invalid length.
[  146.983143][ T7904] netlink: 4 bytes leftover after parsing attributes in process `syz.5.627'.
[  147.655817][ T7918] netlink: 'syz.6.634': attribute type 10 has an invalid length.
[  147.691303][ T7918] netlink: 4 bytes leftover after parsing attributes in process `syz.6.634'.
[  147.765807][ T7912] ucsi-stm32g0-i2c 0-0003: i2c read 03, 00 error: -95
[  147.776748][ T7912] ucsi-stm32g0-i2c 0-0003: probe with driver ucsi-stm32g0-i2c failed with error -95
[  147.797533][ T7912] i2c i2c-0: new_device: Instantiated device stm32g0-typec at 0x03
[  147.882900][ T7924] 9p: Bad value for 'rfdno'
[  147.908473][ T7924] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  147.934454][ T7924] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  147.936405][ T7926] netlink: 'syz.2.638': attribute type 1 has an invalid length.
[  147.937097][ T7924] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  147.941515][ T7924] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  147.948126][ T7924] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  147.971433][ T7926] 8021q: adding VLAN 0 to HW filter on device bond15
[  147.981723][ T7924] pci 0000:00:01.0: Adding to iommu group 1
[  147.996993][ T7924] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  147.999126][ T7924] pci 0000:00:01.0: vgaarb: bridge control possible
[  148.001112][ T7924] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  148.017253][ T7924] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  148.020089][ T7924] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  148.025597][ T7924] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  148.070851][ T5881] usb 10-1: new full-speed USB device number 7 using dummy_hcd
[  148.101452][ T7924] [drm] Found bochs VGA, ID 0xb0c5.
[  148.103406][ T7924] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  148.125249][ T7924] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[  148.262545][ T5881] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  148.272569][ T5881] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  148.272650][ T5881] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  148.302870][ T5881] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.302917][ T5881] usb 10-1: Product: syz
[  148.303064][ T5881] usb 10-1: Manufacturer: syz
[  148.303098][ T5881] usb 10-1: SerialNumber: syz
[  148.340906][ T7924] Console: switching to colour frame buffer device 160x50
[  148.368202][ T5881] usb 10-1: config 0 descriptor??
[  148.422062][ T5881] hub 10-1:0.0: bad descriptor, ignoring hub
[  148.422228][ T5881] hub 10-1:0.0: probe with driver hub failed with error -5
[  148.484132][ T5881] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input9
[  148.497009][ T7924] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[  149.176757][ T5895] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  149.316234][ T5895] usb 9-1: device descriptor read/64, error -71
[  149.412102][ T7962] netlink: 'syz.5.648': attribute type 10 has an invalid length.
[  149.421561][ T5807] usb 10-1: USB disconnect, device number 7
[  149.430935][ T7959] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[  149.433036][ T7959] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  149.437173][ T7959] vhci_hcd vhci_hcd.0: Device attached
[  149.510340][ T7965] 9p: Bad value for 'rfdno'
[  149.551548][ T7962] netlink: 4 bytes leftover after parsing attributes in process `syz.5.648'.
[  149.576134][ T5895] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  149.706309][ T5895] usb 9-1: device descriptor read/64, error -71
[  149.756124][ T5877] usb 50-1: SetAddress Request (2) to port 0
[  149.756180][ T5877] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd
[  149.826341][ T5895] usb usb9-port1: attempt power cycle
[  150.038318][ T7963] vhci_hcd: connection reset by peer
[  150.040894][ T6767] vhci_hcd vhci_hcd.6: stop threads
[  150.042616][ T6767] vhci_hcd vhci_hcd.6: release socket
[  150.044477][ T6767] vhci_hcd vhci_hcd.6: disconnect device
[  150.176125][ T5895] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  150.198800][ T5895] usb 9-1: device descriptor read/8, error -71
[  150.436203][ T5895] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  150.457377][ T5895] usb 9-1: device descriptor read/8, error -71
[  150.566738][ T5895] usb usb9-port1: unable to enumerate USB device
[  150.734591][ T7992] netlink: 32 bytes leftover after parsing attributes in process `syz.2.658'.
[  150.812179][ T7994] netlink: 'syz.2.659': attribute type 1 has an invalid length.
[  150.825461][ T7994] 8021q: adding VLAN 0 to HW filter on device bond16
[  151.048892][ T7998] 9p: Bad value for 'rfdno'
[  151.339032][ T8003] netlink: 'syz.2.663': attribute type 10 has an invalid length.
[  151.344845][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.663'.
[  151.352510][ T8004] loop4: detected capacity change from 0 to 7
[  151.359790][ T8004] Dev loop4: unable to read RDB block 7
[  151.362389][ T8004]  loop4: unable to read partition table
[  151.364263][ T8004] loop4: partition table beyond EOD, truncated
[  151.367957][ T8004] loop_reread_partitions: partition scan of loop4 (�่ขซx�—Ÿัเ– ) failed (rc=-5)
[  151.986670][ T8019] loop4: detected capacity change from 0 to 7
[  151.993367][ T8019] Dev loop4: unable to read RDB block 7
[  151.995211][ T8019]  loop4: unable to read partition table
[  151.998139][ T8019] loop4: partition table beyond EOD, truncated
[  152.000203][ T8019] loop_reread_partitions: partition scan of loop4 (�่ขซx�—Ÿัเ– ) failed (rc=-5)
[  152.004602][ T8019] FAULT_INJECTION: forcing a failure.
[  152.004602][ T8019] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  152.010007][ T8019] CPU: 1 UID: 0 PID: 8019 Comm: syz.4.667 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  152.010024][ T8019] Tainted: [L]=SOFTLOCKUP
[  152.010028][ T8019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  152.010035][ T8019] Call Trace:
[  152.010045][ T8019]  <TASK>
[  152.010049][ T8019]  dump_stack_lvl+0x100/0x190
[  152.010207][ T8019]  should_fail_ex.cold+0x5/0xa
[  152.010226][ T8019]  _copy_from_user+0x2e/0xd0
[  152.010287][ T8019]  __ia32_compat_sys_socketcall+0x187/0x770
[  152.010343][ T8019]  ? __fget_files+0x21f/0x3d0
[  152.010365][ T8019]  ? __pfx___ia32_compat_sys_socketcall+0x10/0x10
[  152.010380][ T8019]  ? fput+0x79/0x100
[  152.010393][ T8019]  ? ksys_write+0x1ac/0x250
[  152.010403][ T8019]  ? __pfx_ksys_write+0x10/0x10
[  152.010417][ T8019]  do_int80_emulation+0x14b/0x720
[  152.010460][ T8019]  asm_int80_emulation+0x1a/0x20
[  152.010472][ T8019] RIP: 0023:0xf71574eb
[  152.010482][ T8019] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  152.010493][ T8019] RSP: 002b:00000000f540c34c EFLAGS: 00000246 ORIG_RAX: 0000000000000066
[  152.010514][ T8019] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f540c3f4
[  152.010521][ T8019] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  152.010528][ T8019] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  152.010534][ T8019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  152.010540][ T8019] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  152.010553][ T8019]  </TASK>
[  152.052508][ T8021] netlink: 'syz.2.675': attribute type 10 has an invalid length.
[  152.074713][ T8021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'.
[  152.103802][ T8023] netlink: 32 bytes leftover after parsing attributes in process `syz.4.668'.
[  152.175563][ T8025] netlink: 'syz.4.669': attribute type 1 has an invalid length.
[  152.188560][ T8025] 8021q: adding VLAN 0 to HW filter on device bond3
[  152.237692][ T8029] loop4: detected capacity change from 0 to 7
[  152.245646][ T8029] Dev loop4: unable to read RDB block 7
[  152.248423][ T8029]  loop4: unable to read partition table
[  152.250297][ T8029] loop4: partition table beyond EOD, truncated
[  152.254649][ T8029] loop_reread_partitions: partition scan of loop4 (�่ขซx�—Ÿัเ– ) failed (rc=-5)
[  152.262940][ T8029] netlink: 24 bytes leftover after parsing attributes in process `syz.6.670'.
[  152.274165][ T5141] Dev loop4: unable to read RDB block 7
[  152.277306][ T5141]  loop4: unable to read partition table
[  152.279207][ T5141] loop4: partition table beyond EOD, truncated
[  152.400009][ T8034] 9p: Bad value for 'wfdno'
[  152.405427][ T8034] input: syz1 as /devices/virtual/input/input10
[  152.603053][ T8040] 9p: Bad value for 'rfdno'
[  152.669840][ T8043] 9p: Bad value for 'rfdno'
[  153.545473][ T8045] FAULT_INJECTION: forcing a failure.
[  153.545473][ T8045] name fail_futex, interval 1, probability 0, space 0, times 1
[  153.553089][ T8045] CPU: 1 UID: 0 PID: 8045 Comm: syz.4.677 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  153.553117][ T8045] Tainted: [L]=SOFTLOCKUP
[  153.553122][ T8045] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  153.553148][ T8045] Call Trace:
[  153.553154][ T8045]  <TASK>
[  153.553161][ T8045]  dump_stack_lvl+0x100/0x190
[  153.553184][ T8045]  should_fail_ex.cold+0x5/0xa
[  153.553200][ T8045]  ? _raw_spin_unlock_irq+0x2e/0x50
[  153.553215][ T8045]  get_futex_key+0x1d2/0x14f0
[  153.553240][ T8045]  ? __pfx_get_futex_key+0x10/0x10
[  153.553256][ T8045]  futex_wait_setup+0x91/0x540
[  153.553275][ T8045]  __futex_wait+0x19f/0x300
[  153.553290][ T8045]  ? __pfx___futex_wait+0x10/0x10
[  153.553307][ T8045]  ? __pfx_futex_wake_mark+0x10/0x10
[  153.553323][ T8045]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  153.553335][ T8045]  ? __hrtimer_setup+0x208/0x330
[  153.553348][ T8045]  ? ktime_add_safe+0x60/0x70
[  153.553361][ T8045]  futex_wait+0xe6/0x370
[  153.553375][ T8045]  ? __pfx_futex_wait+0x10/0x10
[  153.553391][ T8045]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  153.553407][ T8045]  futex_wait_restart+0x110/0x160
[  153.553423][ T8045]  do_int80_emulation+0x14b/0x720
[  153.553439][ T8045]  asm_int80_emulation+0x1a/0x20
[  153.553450][ T8045] RIP: 0023:0xf701efec
[  153.553464][ T8045] Code: Unable to access opcode bytes at 0xf701efc2.
[  153.553482][ T8045] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000000
[  153.553493][ T8045] RAX: ffffffffffffffda RBX: 000000008000cffc RCX: 0000000000000000
[  153.553500][ T8045] RDX: 0000000000000004 RSI: 0000000080edfff0 RDI: 0000000000000000
[  153.553506][ T8045] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  153.553511][ T8045] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  153.553517][ T8045] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  153.553531][ T8045]  </TASK>
[  153.674175][ T8052] 9p: Bad value for 'rfdno'
[  153.699670][ T8052] Console: switching to colour dummy device 80x25
[  153.839803][ T8054] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  153.861549][ T8054] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  153.864108][ T8054] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  153.866979][ T8054] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  153.897460][ T8054] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  153.935843][ T8054] pci 0000:00:01.0: Adding to iommu group 1
[  153.951315][ T8054] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  153.954080][ T8054] pci 0000:00:01.0: vgaarb: bridge control possible
[  153.956723][ T8054] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  153.968646][ T8054] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  153.971495][ T8054] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  153.976749][ T8054] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  153.990094][ T8054] [drm] Found bochs VGA, ID 0xb0c5.
[  153.992334][ T8054] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  154.024304][ T8054] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[  154.121138][ T8054] Console: switching to colour frame buffer device 160x50
[  154.146979][ T8054] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[  154.373494][ T8059] netlink: 32 bytes leftover after parsing attributes in process `syz.6.680'.
[  154.428240][ T8062] netlink: 'syz.4.681': attribute type 1 has an invalid length.
[  154.443660][ T8062] 8021q: adding VLAN 0 to HW filter on device bond4
[  154.446366][ T8068] netlink: 'syz.2.684': attribute type 10 has an invalid length.
[  154.453878][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.684'.
[  154.586113][ T8075] FAULT_INJECTION: forcing a failure.
[  154.586113][ T8075] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  154.590295][ T8075] CPU: 0 UID: 0 PID: 8075 Comm: syz.5.687 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  154.590314][ T8075] Tainted: [L]=SOFTLOCKUP
[  154.590318][ T8075] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  154.590324][ T8075] Call Trace:
[  154.590335][ T8075]  <TASK>
[  154.590339][ T8075]  dump_stack_lvl+0x100/0x190
[  154.590444][ T8075]  should_fail_ex.cold+0x5/0xa
[  154.590463][ T8075]  _copy_to_user+0x32/0xd0
[  154.590536][ T8075]  simple_read_from_buffer+0xcb/0x170
[  154.590568][ T8075]  proc_fail_nth_read+0x1af/0x230
[  154.590591][ T8075]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  154.590607][ T8075]  ? rw_verify_area+0xce/0x6d0
[  154.590623][ T8075]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  154.590638][ T8075]  vfs_read+0x1e4/0xb40
[  154.590651][ T8075]  ? __pfx_vfs_read+0x10/0x10
[  154.590660][ T8075]  ? find_held_lock+0x2b/0x80
[  154.590685][ T8075]  ? __fget_files+0x215/0x3d0
[  154.590698][ T8075]  ? __fget_files+0x21f/0x3d0
[  154.590712][ T8075]  ksys_read+0x12a/0x250
[  154.590722][ T8075]  ? __pfx_ksys_read+0x10/0x10
[  154.590737][ T8075]  do_int80_emulation+0x14b/0x720
[  154.590801][ T8075]  asm_int80_emulation+0x1a/0x20
[  154.590813][ T8075] RIP: 0023:0xf71174eb
[  154.590823][ T8075] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  154.590833][ T8075] RSP: 002b:00000000f53d64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  154.590856][ T8075] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53d65d0
[  154.590863][ T8075] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  154.590869][ T8075] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  154.590876][ T8075] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  154.590882][ T8075] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  154.590895][ T8075]  </TASK>
[  154.772325][ T8083] 9p: Bad value for 'rfdno'
[  154.897470][ T5877] usb 50-1: device descriptor read/8, error -110
[  154.914562][ T8083] Console: switching to colour dummy device 80x25
[  155.012441][ T8091] FAULT_INJECTION: forcing a failure.
[  155.012441][ T8091] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  155.017853][ T8091] CPU: 1 UID: 0 PID: 8091 Comm: syz.4.690 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  155.017885][ T8091] Tainted: [L]=SOFTLOCKUP
[  155.017889][ T8091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  155.017895][ T8091] Call Trace:
[  155.017900][ T8091]  <TASK>
[  155.017905][ T8091]  dump_stack_lvl+0x100/0x190
[  155.017923][ T8091]  should_fail_ex.cold+0x5/0xa
[  155.017937][ T8091]  _copy_to_user+0x32/0xd0
[  155.017956][ T8091]  simple_read_from_buffer+0xcb/0x170
[  155.017976][ T8091]  proc_fail_nth_read+0x1af/0x230
[  155.017992][ T8091]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  155.018009][ T8091]  ? rw_verify_area+0xce/0x6d0
[  155.018025][ T8091]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  155.018040][ T8091]  vfs_read+0x1e4/0xb40
[  155.018052][ T8091]  ? __pfx_vfs_read+0x10/0x10
[  155.018061][ T8091]  ? find_held_lock+0x2b/0x80
[  155.018075][ T8091]  ? __fget_files+0x215/0x3d0
[  155.018088][ T8091]  ? __fget_files+0x21f/0x3d0
[  155.018102][ T8091]  ksys_read+0x12a/0x250
[  155.018112][ T8091]  ? __pfx_ksys_read+0x10/0x10
[  155.018126][ T8091]  do_int80_emulation+0x14b/0x720
[  155.018143][ T8091]  asm_int80_emulation+0x1a/0x20
[  155.018154][ T8091] RIP: 0023:0xf71574eb
[  155.018163][ T8091] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  155.018179][ T8091] RSP: 002b:00000000f53cb4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  155.018192][ T8091] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f53cb5d0
[  155.018202][ T8091] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  155.018211][ T8091] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  155.018219][ T8091] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  155.018228][ T8091] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  155.018245][ T8091]  </TASK>
[  155.316925][ T5877] usb usb50-port1: attempt power cycle
[  155.325159][ T8095] netlink: 24 bytes leftover after parsing attributes in process `syz.6.693'.
[  155.355581][ T8100] netlink: 'syz.2.694': attribute type 1 has an invalid length.
[  155.374673][ T8100] 8021q: adding VLAN 0 to HW filter on device bond17
[  155.389005][ T8087] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  155.415472][ T8087] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  155.418069][ T8087] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  155.421264][ T8087] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  155.424122][ T8087] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  155.432267][ T8087] pci 0000:00:01.0: Adding to iommu group 1
[  155.438695][ T8087] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  155.440836][ T8087] pci 0000:00:01.0: vgaarb: bridge control possible
[  155.442876][ T8087] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  155.455156][ T8087] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  155.460954][ T8087] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  155.464361][ T8087] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  155.472546][ T8087] [drm] Found bochs VGA, ID 0xb0c5.
[  155.474204][ T8087] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  155.490266][ T8087] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[  155.592718][ T8087] Console: switching to colour frame buffer device 160x50
[  155.622238][ T8087] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[  155.736274][ T5566] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.743060][ T5566] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.746500][ T5566] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.749459][ T5566] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.832444][ T8117] IPVS: sh: FWM 3 0x00000003 - no destination available
[  155.896612][ T5877] usb usb50-port1: unable to enumerate USB device
[  156.248487][ T8120] netlink: 'syz.6.703': attribute type 10 has an invalid length.
[  156.256435][ T8120] netlink: 4 bytes leftover after parsing attributes in process `syz.6.703'.
[  156.760515][ T8124] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  156.763290][ T8124] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  156.777052][ T8124] vhci_hcd vhci_hcd.0: Device attached
[  156.889789][ T8132] 9p: Bad value for 'rfdno'
[  157.056163][ T5877] usb 42-1: SetAddress Request (6) to port 0
[  157.058200][ T5877] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd
[  157.298840][ T8125] vhci_hcd: connection reset by peer
[  157.301741][ T6767] vhci_hcd vhci_hcd.2: stop threads
[  157.304113][ T6767] vhci_hcd vhci_hcd.2: release socket
[  157.306488][ T6767] vhci_hcd vhci_hcd.2: disconnect device
[  157.834957][ T8147] netlink: 132 bytes leftover after parsing attributes in process `syz.5.710'.
[  157.945354][ T8156] netlink: 'syz.6.713': attribute type 10 has an invalid length.
[  157.953551][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.6.713'.
[  157.982610][ T8159] IPVS: sh: FWM 3 0x00000003 - no destination available
[  158.049619][ T8161] netlink: 'syz.5.715': attribute type 1 has an invalid length.
[  158.065892][ T8161] bond2: entered promiscuous mode
[  158.068733][ T8161] 8021q: adding VLAN 0 to HW filter on device bond2
[  158.075850][ T8161] netlink: 28 bytes leftover after parsing attributes in process `syz.5.715'.
[  158.078867][ T8161] bond2: entered allmulticast mode
[  158.098122][ T8161] bond2: (slave bridge0): making interface the new active one
[  158.101513][ T8161] bridge0: entered promiscuous mode
[  158.103933][ T8161] bridge0: entered allmulticast mode
[  158.110216][ T8161] bond2: (slave bridge0): Enslaving as an active interface with an up link
[  158.537404][ T8170] ieee802154 phy0 wpan0: encryption failed: -22
[  158.563659][ T8173] FAULT_INJECTION: forcing a failure.
[  158.563659][ T8173] name failslab, interval 1, probability 0, space 0, times 0
[  158.568596][ T8173] CPU: 3 UID: 0 PID: 8173 Comm: syz.4.719 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  158.568615][ T8173] Tainted: [L]=SOFTLOCKUP
[  158.568619][ T8173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  158.568626][ T8173] Call Trace:
[  158.568636][ T8173]  <TASK>
[  158.568640][ T8173]  dump_stack_lvl+0x100/0x190
[  158.568758][ T8173]  should_fail_ex.cold+0x5/0xa
[  158.568777][ T8173]  should_failslab+0xc2/0x120
[  158.568806][ T8173]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  158.568822][ T8173]  ? __alloc_skb+0x5b7/0x710
[  158.568881][ T8173]  ? __alloc_skb+0x140/0x710
[  158.568898][ T8173]  __alloc_skb+0x140/0x710
[  158.568911][ T8173]  ? __alloc_skb+0x5b7/0x710
[  158.568925][ T8173]  ? __pfx___alloc_skb+0x10/0x10
[  158.568940][ T8173]  ? look_up_lock_class+0x55/0x120
[  158.568987][ T8173]  alloc_skb_with_frags+0xdd/0x760
[  158.569008][ T8173]  sock_alloc_send_pskb+0x801/0x980
[  158.569026][ T8173]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  158.569045][ T8173]  ? raw_sendmsg+0x14c/0x880
[  158.569064][ T8173]  ? find_held_lock+0x2b/0x80
[  158.569102][ T8173]  ? raw_sendmsg+0x14c/0x880
[  158.569122][ T8173]  ? raw_sendmsg+0x14c/0x880
[  158.569144][ T8173]  ? __local_bh_enable_ip+0x9e/0x120
[  158.569175][ T8173]  raw_sendmsg+0x3d7/0x880
[  158.569190][ T8173]  ? __pfx_raw_sendmsg+0x10/0x10
[  158.569203][ T8173]  ? apparmor_socket_sendmsg+0x15b/0x270
[  158.569267][ T8173]  ____sys_sendmsg+0xa4d/0xbe0
[  158.569278][ T8173]  ? __pfx_ieee802154_sock_sendmsg+0x10/0x10
[  158.569292][ T8173]  ? __pfx_____sys_sendmsg+0x10/0x10
[  158.569307][ T8173]  ? _kstrtoull+0x13c/0x1f0
[  158.569325][ T8173]  ? __pfx__kstrtoull+0x10/0x10
[  158.569338][ T8173]  ___sys_sendmsg+0x190/0x1e0
[  158.569352][ T8173]  ? __pfx____sys_sendmsg+0x10/0x10
[  158.569363][ T8173]  ? __lock_acquire+0x49f/0x1a40
[  158.569389][ T8173]  __sys_sendmmsg+0x309/0x440
[  158.569407][ T8173]  ? __pfx___sys_sendmmsg+0x10/0x10
[  158.569422][ T8173]  ? find_held_lock+0x2b/0x80
[  158.569439][ T8173]  ? __mutex_unlock_slowpath+0x35d/0x930
[  158.569459][ T8173]  ? fput+0x79/0x100
[  158.569474][ T8173]  ? ksys_write+0x1ac/0x250
[  158.569486][ T8173]  __ia32_compat_sys_sendmmsg+0x9d/0x100
[  158.569499][ T8173]  ? lockdep_hardirqs_on+0x78/0x100
[  158.569511][ T8173]  __do_fast_syscall_32+0xe7/0x970
[  158.569525][ T8173]  ? lockdep_hardirqs_on+0x78/0x100
[  158.569539][ T8173]  do_fast_syscall_32+0x32/0x70
[  158.569553][ T8173]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  158.569567][ T8173] RIP: 0023:0xf701efec
[  158.569581][ T8173] Code: Unable to access opcode bytes at 0xf701efc2.
[  158.569598][ T8173] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159
[  158.569608][ T8173] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080004b00
[  158.569615][ T8173] RDX: 0000000000000001 RSI: 0000000020000010 RDI: 0000000000000000
[  158.569621][ T8173] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  158.569627][ T8173] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  158.569633][ T8173] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  158.569646][ T8173]  </TASK>
[  158.599182][ T8174] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  158.942227][ T8183] 9p: Bad value for 'rfdno'
[  159.321999][   T29] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  159.403154][ T8184] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  159.405496][ T8184] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  159.560275][   T29] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  159.569589][ T8184] vhci_hcd vhci_hcd.0: Device attached
[  159.662607][   T29] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 110, changing to 10
[  159.730491][   T29] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25354, setting to 1024
[  159.750020][   T29] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 110, changing to 10
[  159.762546][   T29] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25354, setting to 1024
[  159.784501][   T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.789577][   T29] usb 7-1: Product: syz
[  159.794373][   T29] usb 7-1: Manufacturer: syz
[  159.798508][   T29] usb 7-1: SerialNumber: syz
[  159.885354][   T29] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected
[  159.951840][   T29] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  159.961956][   T29] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  160.018239][ T6553] usb 46-1: SetAddress Request (2) to port 0
[  160.020168][ T6553] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd
[  160.048043][ T8185] vhci_hcd: connection reset by peer
[  160.051947][ T6931] vhci_hcd vhci_hcd.4: stop threads
[  160.053678][ T6931] vhci_hcd vhci_hcd.4: release socket
[  160.057971][ T6931] vhci_hcd vhci_hcd.4: disconnect device
[  160.076304][ T5839] usb 11-1: new high-speed USB device number 2 using dummy_hcd
[  160.095330][ T8193] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  160.206092][ T5839] usb 11-1: device descriptor read/64, error -71
[  160.446102][ T5839] usb 11-1: new high-speed USB device number 3 using dummy_hcd
[  160.576453][ T5839] usb 11-1: device descriptor read/64, error -71
[  160.663053][ T8197] netlink: 'syz.4.725': attribute type 10 has an invalid length.
[  160.674044][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.725'.
[  160.686773][ T5839] usb usb11-port1: attempt power cycle
[  160.864132][ T8199] netlink: 'syz.5.726': attribute type 1 has an invalid length.
[  160.886262][ T8199] 8021q: adding VLAN 0 to HW filter on device bond3
[  160.925840][ T8194] ieee802154 phy0 wpan0: encryption failed: -22
[  161.026496][ T5839] usb 11-1: new high-speed USB device number 4 using dummy_hcd
[  161.046859][ T5839] usb 11-1: device descriptor read/8, error -71
[  161.279150][ T8209] comedi comedi0: pcmda12: I/O base address not correctly aligned
[  161.296072][ T5839] usb 11-1: new high-speed USB device number 5 using dummy_hcd
[  161.316517][ T5839] usb 11-1: device descriptor read/8, error -71
[  161.428583][ T5839] usb usb11-port1: unable to enumerate USB device
[  161.734226][ T8215] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  161.738435][ T8180] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -110
[  161.744424][ T5814] usb 7-1: USB disconnect, device number 7
[  161.746638][ T8216] FAULT_INJECTION: forcing a failure.
[  161.746638][ T8216] name failslab, interval 1, probability 0, space 0, times 0
[  161.751360][ T8216] CPU: 3 UID: 0 PID: 8216 Comm: syz.4.732 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  161.751385][ T8216] Tainted: [L]=SOFTLOCKUP
[  161.751392][ T8216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  161.751401][ T8216] Call Trace:
[  161.751408][ T8216]  <TASK>
[  161.751415][ T8216]  dump_stack_lvl+0x100/0x190
[  161.751440][ T8216]  should_fail_ex.cold+0x5/0xa
[  161.751461][ T8216]  should_failslab+0xc2/0x120
[  161.751481][ T8216]  __kmalloc_cache_noprof+0x91/0x6c0
[  161.751494][ T8216]  ? fscontext_alloc_log+0x4a/0x1b0
[  161.751523][ T8216]  fscontext_alloc_log+0x4a/0x1b0
[  161.751539][ T8216]  __ia32_sys_fsopen+0x15b/0x230
[  161.751554][ T8216]  __do_fast_syscall_32+0xe7/0x970
[  161.751569][ T8216]  ? lockdep_hardirqs_on+0x78/0x100
[  161.751583][ T8216]  do_fast_syscall_32+0x32/0x70
[  161.751597][ T8216]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  161.751612][ T8216] RIP: 0023:0xf701efec
[  161.751620][ T8216] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  161.751631][ T8216] RSP: 002b:00000000f53ec50c EFLAGS: 00000292 ORIG_RAX: 00000000000001ae
[  161.751642][ T8216] RAX: ffffffffffffffda RBX: 0000000080000280 RCX: 0000000000000000
[  161.751649][ T8216] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  161.751655][ T8216] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  161.751663][ T8216] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  161.751672][ T8216] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  161.751693][ T8216]  </TASK>
[  161.811678][ T5814] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  161.819939][ T5814] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  161.825039][ T5814] ti_usb_3410_5052 7-1:2.0: device disconnected
[  162.146134][ T5877] usb 42-1: device descriptor read/8, error -110
[  162.440622][ T8224] 9p: Bad value for 'rfdno'
[  162.556792][ T5877] usb usb42-port1: attempt power cycle
[  162.606608][ T8227] comedi comedi0: pcmda12: I/O base address not correctly aligned
[  162.687971][ T8227] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.697905][ T8227] 8021q: adding VLAN 0 to HW filter on device team0
[  162.736265][ T8227] 8021q: adding VLAN 0 to HW filter on device batadv0
[  163.292535][ T8227] batman_adv: batadv0: Interface activated: batadv_slave_0
[  163.311184][ T8227] batman_adv: batadv0: Interface activated: batadv_slave_1
[  163.383910][ T8227] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  163.390996][ T8227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  163.428940][ T8227] veth1_vlan: left promiscuous mode
[  163.441691][ T8227] veth0_vlan: left promiscuous mode
[  163.445898][ T8227] veth0_vlan: entered promiscuous mode
[  163.453035][ T8227] veth1_vlan: entered promiscuous mode
[  163.467396][ T8227] veth0_macvtap: left promiscuous mode
[  163.471067][ T8227] veth0_macvtap: entered promiscuous mode
[  163.490103][ T8227] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  163.499453][ T8227] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  163.510986][ T8227] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  163.558690][ T8227] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  163.664269][ T8236] netlink: 'syz.2.739': attribute type 10 has an invalid length.
[  163.720204][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.739'.
[  163.796770][ T5877] usb usb42-port1: unable to enumerate USB device
[  163.923180][ T8227] 8021q: adding VLAN 0 to HW filter on device bond1
[  164.034666][ T8241] netlink: 'syz.5.741': attribute type 4 has an invalid length.
[  164.056278][ T6767] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  164.060553][ T6767] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  164.064217][ T6767] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  164.068935][ T6767] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  164.254622][ T8250] overlayfs: overlapping lowerdir path
[  164.353918][ T8255] netlink: 'syz.6.746': attribute type 1 has an invalid length.
[  164.366688][ T8255] 8021q: adding VLAN 0 to HW filter on device bond1
[  164.397923][ T8255] bond1: (slave geneve2): making interface the new active one
[  164.402347][ T8255] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  164.611224][ T6789] batman_adv: batadv0: Removing interface: geneve2
[  164.663656][ T8263] comedi comedi0: pcmda12: I/O base address not correctly aligned
[  164.719220][ T6789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  164.725676][ T6789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  164.731146][ T6789] bond0 (unregistering): Released all slaves
[  164.736589][ T6789] bond1 (unregistering): Released all slaves
[  164.744967][ T6789] bond2 (unregistering): Released all slaves
[  164.755842][ T6789] bond3 (unregistering): Released all slaves
[  164.767082][ T6789] bond4 (unregistering): Released all slaves
[  164.781694][ T6789] bond5 (unregistering): Released all slaves
[  164.795231][ T6789] bond6 (unregistering): Released all slaves
[  164.847645][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.6.747'.
[  165.108767][ T6553] usb 46-1: device descriptor read/8, error -110
[  165.610305][ T6553] usb usb46-port1: attempt power cycle
[  165.771414][ T8269] FAULT_INJECTION: forcing a failure.
[  165.771414][ T8269] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  165.779399][ T8269] CPU: 3 UID: 0 PID: 8269 Comm: syz.5.751 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  165.779444][ T8269] Tainted: [L]=SOFTLOCKUP
[  165.779451][ T8269] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  165.779460][ T8269] Call Trace:
[  165.779466][ T8269]  <TASK>
[  165.779473][ T8269]  dump_stack_lvl+0x100/0x190
[  165.779500][ T8269]  should_fail_ex.cold+0x5/0xa
[  165.779520][ T8269]  _copy_from_user+0x2e/0xd0
[  165.779545][ T8269]  kstrtouint_from_user+0xd6/0x1d0
[  165.779564][ T8269]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  165.779582][ T8269]  ? __lock_acquire+0x49f/0x1a40
[  165.779608][ T8269]  proc_fail_nth_write+0x83/0x220
[  165.779645][ T8269]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  165.779674][ T8269]  vfs_write+0x2aa/0x1050
[  165.779691][ T8269]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  165.779716][ T8269]  ? __pfx_vfs_write+0x10/0x10
[  165.779729][ T8269]  ? find_held_lock+0x2b/0x80
[  165.779750][ T8269]  ? __fget_files+0x215/0x3d0
[  165.779770][ T8269]  ? __fget_files+0x21f/0x3d0
[  165.779792][ T8269]  ksys_write+0x12a/0x250
[  165.779807][ T8269]  ? __pfx_ksys_write+0x10/0x10
[  165.779830][ T8269]  do_int80_emulation+0x14b/0x720
[  165.779854][ T8269]  asm_int80_emulation+0x1a/0x20
[  165.779871][ T8269] RIP: 0023:0xf71174eb
[  165.779884][ T8269] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  165.779899][ T8269] RSP: 002b:00000000f53b54bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[  165.779916][ T8269] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53b55d0
[  165.779926][ T8269] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  165.779935][ T8269] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  165.779944][ T8269] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  165.779953][ T8269] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  165.779995][ T8269]  </TASK>
[  165.781152][ T8263] 8021q: adding VLAN 0 to HW filter on device bond4
[  165.862580][ T8263] 8021q: adding VLAN 0 to HW filter on device bond10
[  165.969992][ T8274] random: crng reseeded on system resumption
[  165.992149][ T8275] fuse: Unknown parameter 'g๖†žกึIิ00000000000000000000'
[  166.031503][ T8275] typec_fusb302 0-0022: supply vbus not found, using dummy regulator
[  166.064366][ T8275] typec_fusb302 0-0022: failed to request gpio_int_n
[  166.087181][ T8286] netlink: 'syz.6.757': attribute type 8 has an invalid length.
[  166.132740][ T8275] typec_fusb302 0-0022: probe with driver typec_fusb302 failed with error -2
[  166.134436][ T8285] typec_fusb302 1-0022: I2C/SMBus block functionality not supported!
[  166.136747][ T8275] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22
[  166.144230][ T8285] i2c i2c-1: new_device: Instantiated device typec_fusb302 at 0x22
[  166.186956][ T6553] usb usb46-port1: unable to enumerate USB device
[  166.189457][ T8284] netlink: 'syz.4.756': attribute type 1 has an invalid length.
[  166.206045][ T8284] 8021q: adding VLAN 0 to HW filter on device bond5
[  166.267397][ T8275] Invalid option length (38331) for dns_resolver key
[  166.328751][ T6789] hsr_slave_0: left promiscuous mode
[  166.331357][ T6789] hsr_slave_1: left promiscuous mode
[  166.335154][ T6789] batman_adv: batadv0: Removing interface: batadv_slave_0
[  166.371167][ T8301] 9p: Bad value for 'rfdno'
[  166.377737][   T24] usb 11-1: new high-speed USB device number 6 using dummy_hcd
[  166.490898][ T8303] netlink: 'syz.4.759': attribute type 1 has an invalid length.
[  166.534431][ T6789] team0 (unregistering): Port device team_slave_1 removed
[  166.572720][ T6789] team0 (unregistering): Port device team_slave_0 removed
[  166.916402][   T24] usb 11-1: Using ep0 maxpacket: 8
[  166.961396][ T1162] smbdirect: ib_dev[syz0] removed
[  167.274023][   T24] usb 11-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  167.280051][   T24] usb 11-1: config index 0 descriptor too short (expected 5924, got 36)
[  167.283440][   T24] usb 11-1: config 250 has an invalid interface number: 228 but max is -1
[  167.289625][   T24] usb 11-1: config 250 has 1 interface, different from the descriptor's value: 0
[  167.302837][   T24] usb 11-1: config 250 has no interface number 0
[  167.304960][   T24] usb 11-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  167.309003][   T24] usb 11-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  167.312353][   T24] usb 11-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  167.315156][ T8307] 9pnet_virtio: no channels available for device syz
[  167.316689][   T24] usb 11-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  167.320971][   T24] usb 11-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  167.325739][   T24] usb 11-1: config 250 interface 228 has no altsetting 0
[  167.325896][ T8307] random: crng reseeded on system resumption
[  167.329253][   T24] usb 11-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  167.329268][   T24] usb 11-1: Product: syz
[  167.329275][   T24] usb 11-1: SerialNumber: syz
[  167.332268][   T24] hub 11-1:250.228: bad descriptor, ignoring hub
[  167.338924][   T24] hub 11-1:250.228: probe with driver hub failed with error -5
[  167.347880][ T8275] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.427103][ T5443] 8021q: adding VLAN 0 to HW filter on device eth2
[  167.431122][ T8303] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  167.538912][   T24] usblp 11-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  167.680744][ T5443] 8021q: adding VLAN 0 to HW filter on device eth3
[  167.846535][ T8334] comedi comedi0: pcmda12: I/O base address not correctly aligned
[  168.026534][ T8334] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.037597][ T8334] 8021q: adding VLAN 0 to HW filter on device team0
[  168.055744][ T8334] 8021q: adding VLAN 0 to HW filter on device batadv0
[  168.136560][   T41] usb 11-1: USB disconnect, device number 6
[  168.147771][   T41] usblp0: removed
[  168.221040][ T8334] batman_adv: batadv0: Interface activated: batadv_slave_0
[  168.229511][ T8334] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.245497][ T8334] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  168.249680][ T8334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  168.265199][ T8334] veth1_vlan: left promiscuous mode
[  168.270273][ T8334] veth0_vlan: left promiscuous mode
[  168.273529][ T8334] veth0_vlan: entered promiscuous mode
[  168.274232][ T8347] 9p: Bad value for 'rfdno'
[  168.302362][ T8334] veth1_vlan: entered promiscuous mode
[  168.337093][ T8334] veth0_macvtap: left promiscuous mode
[  168.341922][ T8334] veth0_macvtap: entered promiscuous mode
[  168.361602][ T8334] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  168.367455][ T8334] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  168.375029][ T8334] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  168.391833][ T8334] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  168.411783][ T8334] 8021q: adding VLAN 0 to HW filter on device bond1
[  168.446381][ T6931] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.449445][ T6931] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.452703][ T6931] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.460193][ T6931] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.484319][ T5443] 8021q: adding VLAN 0 to HW filter on device eth4
[  168.509497][ T8342] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  168.993932][ T5443] 8021q: adding VLAN 0 to HW filter on device eth5
[  169.138701][ T8360] netlink: 'syz.2.771': attribute type 1 has an invalid length.
[  169.153013][ T8360] 8021q: adding VLAN 0 to HW filter on device bond18
[  169.203778][ T5443] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  169.266232][ T8368] fuse: Unknown parameter 'g๖†žกึIิ00000000000000000000'
[  169.272887][ T8368] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16)
[  169.278980][ T8368] i2c i2c-1: Failed to register i2c client typec_fusb302 at 0x22 (-16)
[  169.291459][ T8368] Invalid option length (38331) for dns_resolver key
[  169.353710][ T8375] FAULT_INJECTION: forcing a failure.
[  169.353710][ T8375] name failslab, interval 1, probability 0, space 0, times 0
[  169.358089][ T8375] CPU: 1 UID: 0 PID: 8375 Comm: syz.6.775 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  169.358107][ T8375] Tainted: [L]=SOFTLOCKUP
[  169.358110][ T8375] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  169.358117][ T8375] Call Trace:
[  169.358121][ T8375]  <TASK>
[  169.358126][ T8375]  dump_stack_lvl+0x100/0x190
[  169.358143][ T8375]  should_fail_ex.cold+0x5/0xa
[  169.358157][ T8375]  should_failslab+0xc2/0x120
[  169.358173][ T8375]  kmem_cache_alloc_noprof+0x91/0x6a0
[  169.358187][ T8375]  ? trace_kmem_cache_alloc+0xdd/0x100
[  169.358202][ T8375]  ? security_file_alloc+0x34/0x2c0
[  169.358240][ T8375]  security_file_alloc+0x34/0x2c0
[  169.358255][ T8375]  init_file+0x95/0x480
[  169.358269][ T8375]  alloc_empty_file+0x79/0x1c0
[  169.358282][ T8375]  alloc_file_pseudo+0x183/0x290
[  169.358297][ T8375]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  169.358312][ T8375]  ? _raw_spin_unlock+0x28/0x50
[  169.358324][ T8375]  ? alloc_fd+0x471/0x7a0
[  169.358337][ T8375]  __anon_inode_getfile+0xe8/0x280
[  169.358354][ T8375]  __anon_inode_getfd+0x5c/0xe0
[  169.358369][ T8375]  map_create+0x16f6/0x3120
[  169.358393][ T8375]  ? __pfx_map_create+0x10/0x10
[  169.358413][ T8375]  ? __might_fault+0xc5/0x140
[  169.358429][ T8375]  __sys_bpf+0x2a6e/0x4e80
[  169.358445][ T8375]  ? __pfx___sys_bpf+0x10/0x10
[  169.358457][ T8375]  ? find_held_lock+0x2b/0x80
[  169.358471][ T8375]  ? get_pid_task+0xfc/0x250
[  169.358485][ T8375]  ? get_pid_task+0xfc/0x250
[  169.358501][ T8375]  ? proc_fail_nth_write+0x9f/0x220
[  169.358517][ T8375]  ? find_held_lock+0x2b/0x80
[  169.358533][ T8375]  ? rcu_read_lock_any_held+0x6a/0xa0
[  169.358548][ T8375]  ? find_held_lock+0x2b/0x80
[  169.358560][ T8375]  ? ksys_write+0x190/0x250
[  169.358570][ T8375]  ? ksys_write+0x190/0x250
[  169.358589][ T8375]  ? fput+0x79/0x100
[  169.358603][ T8375]  ? __ia32_sys_bpf+0xcc/0x170
[  169.358613][ T8375]  __ia32_sys_bpf+0xcc/0x170
[  169.358630][ T8375]  ? __do_fast_syscall_32+0x98/0x970
[  169.358645][ T8375]  __do_fast_syscall_32+0xe7/0x970
[  169.358659][ T8375]  ? lockdep_hardirqs_on+0x78/0x100
[  169.358672][ T8375]  do_fast_syscall_32+0x32/0x70
[  169.358686][ T8375]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  169.358700][ T8375] RIP: 0023:0xf7fc4fec
[  169.358712][ T8375] Code: Unable to access opcode bytes at 0xf7fc4fc2.
[  169.358717][ T8375] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  169.358728][ T8375] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000740
[  169.358735][ T8375] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000
[  169.358741][ T8375] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  169.358747][ T8375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  169.358753][ T8375] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  169.358765][ T8375]  </TASK>
[  169.451112][ T8377] Console: switching to colour dummy device 80x25
[  169.494000][ T8378] vfio-pci 0000:00:01.0: vgaarb: deactivate vga console
[  169.496559][ T8378] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  169.630859][ T8389] pim6reg: entered allmulticast mode
[  169.634127][ T8389] pim6reg: left allmulticast mode
[  169.771496][ T8392] could not allocate digest TFM handle blake2b-512-generic
[  169.856170][ T5085] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[  170.017697][ T5085] usb 7-1: unable to get BOS descriptor or descriptor too short
[  170.021319][ T5085] usb 7-1: not running at top speed; connect to a high speed hub
[  170.023992][ T5085] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  170.029829][ T5085] usb 7-1: config 14 has an invalid interface number: 57 but max is 1
[  170.032918][ T5085] usb 7-1: config 14 has an invalid interface number: 228 but max is 1
[  170.035566][ T5085] usb 7-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config
[  170.038960][ T5085] usb 7-1: config 14 has no interface number 0
[  170.041000][ T5085] usb 7-1: config 14 has no interface number 1
[  170.043048][ T5085] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  170.046539][ T5085] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  170.050286][ T5085] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  170.053827][ T5085] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64
[  170.057469][ T5085] usb 7-1: config 14 interface 57 has no altsetting 0
[  170.059711][ T5085] usb 7-1: config 14 interface 228 has no altsetting 0
[  170.063505][ T5085] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.066150][ T5085] usb 7-1: Product: syz
[  170.067473][ T5085] usb 7-1: Manufacturer: syz
[  170.068960][ T5085] usb 7-1: SerialNumber: syz
[  170.505126][ T8405] comedi comedi0: pcmda12: I/O base address not correctly aligned
[  170.757364][ T8410] netlink: 'syz.5.784': attribute type 1 has an invalid length.
[  171.017630][ T8410] 8021q: adding VLAN 0 to HW filter on device bond4
[  171.221699][ T5085] legousbtower 7-1:14.57: interrupt endpoints not found
[  171.254760][ T5085] legousbtower 7-1:14.228: get version request failed: -71
[  171.258334][ T5085] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71
[  171.269431][ T8419] FAULT_INJECTION: forcing a failure.
[  171.269431][ T8419] name failslab, interval 1, probability 0, space 0, times 0
[  171.277092][ T8419] CPU: 0 UID: 0 PID: 8419 Comm: syz.2.787 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  171.277128][ T8419] Tainted: [L]=SOFTLOCKUP
[  171.277135][ T8419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  171.277145][ T8419] Call Trace:
[  171.277153][ T8419]  <TASK>
[  171.277159][ T8419]  dump_stack_lvl+0x100/0x190
[  171.277188][ T8419]  should_fail_ex.cold+0x5/0xa
[  171.277210][ T8419]  should_failslab+0xc2/0x120
[  171.277235][ T8419]  __kmalloc_cache_noprof+0x91/0x6c0
[  171.277255][ T8419]  ? rdma_resolve_addr+0x732/0x20e0
[  171.277311][ T8419]  rdma_resolve_addr+0x732/0x20e0
[  171.277333][ T8419]  ? xa_load+0x153/0x2c0
[  171.277359][ T8419]  ? __pfx_xa_load+0x10/0x10
[  171.277386][ T8419]  ? ucma_get_ctx+0xc7/0x280
[  171.277406][ T8419]  ? __pfx_rdma_resolve_addr+0x10/0x10
[  171.277427][ T8419]  ? do_raw_spin_unlock+0x145/0x1e0
[  171.277452][ T8419]  ? __pfx_ucma_get_ctx+0x10/0x10
[  171.277477][ T8419]  ? ucma_resolve_addr+0x1ac/0x270
[  171.277495][ T8419]  ucma_resolve_addr+0x1ac/0x270
[  171.277514][ T8419]  ? __pfx_ucma_resolve_addr+0x10/0x10
[  171.277559][ T8419]  ? __pfx_ucma_resolve_addr+0x10/0x10
[  171.277580][ T8419]  ucma_write+0x1fb/0x330
[  171.277599][ T8419]  ? __pfx_ucma_write+0x10/0x10
[  171.277616][ T8419]  ? bpf_lsm_file_permission+0x9/0x10
[  171.277635][ T8419]  ? security_file_permission+0x76/0x210
[  171.277661][ T8419]  ? rw_verify_area+0xce/0x6d0
[  171.277691][ T8419]  vfs_write+0x2aa/0x1050
[  171.277709][ T8419]  ? __pfx_ucma_write+0x10/0x10
[  171.277729][ T8419]  ? __pfx_vfs_write+0x10/0x10
[  171.277745][ T8419]  ? find_held_lock+0x2b/0x80
[  171.277767][ T8419]  ? __fget_files+0x215/0x3d0
[  171.277785][ T8419]  ? __fget_files+0x215/0x3d0
[  171.277808][ T8419]  ? __fget_files+0x21f/0x3d0
[  171.277833][ T8419]  ksys_write+0x1f8/0x250
[  171.277850][ T8419]  ? __pfx_ksys_write+0x10/0x10
[  171.277866][ T8419]  ? ksys_write+0x1ac/0x250
[  171.277883][ T8419]  ? __pfx_ksys_write+0x10/0x10
[  171.277905][ T8419]  __do_fast_syscall_32+0xe7/0x970
[  171.277928][ T8419]  ? lockdep_hardirqs_on+0x78/0x100
[  171.277953][ T8419]  do_fast_syscall_32+0x32/0x70
[  171.277976][ T8419]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  171.277999][ T8419] RIP: 0023:0xf70befec
[  171.278021][ T8419] Code: Unable to access opcode bytes at 0xf70befc2.
[  171.278029][ T8419] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  171.278046][ T8419] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280
[  171.278058][ T8419] RDX: 0000000000000118 RSI: 0000000000000000 RDI: 0000000000000000
[  171.278068][ T8419] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  171.278078][ T8419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  171.278088][ T8419] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  171.278117][ T8419]  </TASK>
[  171.300687][ T5085] usb 7-1: USB disconnect, device number 8
[  171.378020][ T8423] 9p: Bad value for 'rfdno'
[  171.528526][ T8422] 9p: Bad value for 'rfdno'
[  172.311778][ T8441] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  172.339858][ T8442] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  172.380577][ T8438] FAULT_INJECTION: forcing a failure.
[  172.380577][ T8438] name failslab, interval 1, probability 0, space 0, times 0
[  172.385923][ T8438] CPU: 2 UID: 0 PID: 8438 Comm: syz.4.792 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  172.385950][ T8438] Tainted: [L]=SOFTLOCKUP
[  172.385956][ T8438] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  172.385967][ T8438] Call Trace:
[  172.385973][ T8438]  <TASK>
[  172.385980][ T8438]  dump_stack_lvl+0x100/0x190
[  172.386022][ T8438]  should_fail_ex.cold+0x5/0xa
[  172.386042][ T8438]  should_failslab+0xc2/0x120
[  172.386066][ T8438]  kmem_cache_alloc_noprof+0x91/0x6a0
[  172.386087][ T8438]  ? stack_trace_save+0x8e/0xc0
[  172.386110][ T8438]  ? alloc_empty_file+0x5b/0x1c0
[  172.386135][ T8438]  alloc_empty_file+0x5b/0x1c0
[  172.386156][ T8438]  path_openat+0xe7/0x4280
[  172.386172][ T8438]  ? kasan_save_track+0x14/0x30
[  172.386192][ T8438]  ? __kasan_slab_alloc+0x89/0x90
[  172.386217][ T8438]  ? kmem_cache_alloc_noprof+0x26b/0x6a0
[  172.386235][ T8438]  ? do_getname+0x35/0x390
[  172.386254][ T8438]  ? do_sys_openat2+0xc7/0x1e0
[  172.386274][ T8438]  ? __ia32_compat_sys_openat+0x12d/0x210
[  172.386295][ T8438]  ? do_int80_emulation+0x14b/0x720
[  172.386324][ T8438]  ? __pfx_path_openat+0x10/0x10
[  172.386347][ T8438]  do_file_open+0x20e/0x430
[  172.386363][ T8438]  ? __lock_acquire+0x49f/0x1a40
[  172.386380][ T8438]  ? __pfx_do_file_open+0x10/0x10
[  172.386412][ T8438]  ? _raw_spin_unlock+0x28/0x50
[  172.386428][ T8438]  ? alloc_fd+0x471/0x7a0
[  172.386451][ T8438]  do_sys_openat2+0x10f/0x1e0
[  172.386473][ T8438]  ? __pfx_do_sys_openat2+0x10/0x10
[  172.386501][ T8438]  __ia32_compat_sys_openat+0x12d/0x210
[  172.386524][ T8438]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  172.386548][ T8438]  ? trace_irq_enable.constprop.0+0x2f/0x160
[  172.386571][ T8438]  do_int80_emulation+0x14b/0x720
[  172.386595][ T8438]  asm_int80_emulation+0x1a/0x20
[  172.386610][ T8438] RIP: 0023:0xf71574eb
[  172.386624][ T8438] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  172.386639][ T8438] RSP: 002b:00000000f53ec03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  172.386656][ T8438] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53ec100
[  172.386666][ T8438] RDX: 0000000000002581 RSI: 0000000000000000 RDI: 0000000000000000
[  172.386675][ T8438] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  172.386685][ T8438] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  172.386694][ T8438] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  172.386714][ T8438]  </TASK>
[  172.984439][ T8448] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  173.159489][ T8454] FAULT_INJECTION: forcing a failure.
[  173.159489][ T8454] name failslab, interval 1, probability 0, space 0, times 0
[  173.163818][ T8454] CPU: 3 UID: 0 PID: 8454 Comm: syz.6.799 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  173.163837][ T8454] Tainted: [L]=SOFTLOCKUP
[  173.163841][ T8454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  173.163848][ T8454] Call Trace:
[  173.163851][ T8454]  <TASK>
[  173.163856][ T8454]  dump_stack_lvl+0x100/0x190
[  173.163874][ T8454]  should_fail_ex.cold+0x5/0xa
[  173.163888][ T8454]  should_failslab+0xc2/0x120
[  173.163904][ T8454]  __kmalloc_noprof+0xfc/0x820
[  173.163917][ T8454]  ? rcu_is_watching+0x12/0xc0
[  173.163954][ T8454]  ? tomoyo_encode2+0xfb/0x3c0
[  173.163984][ T8454]  tomoyo_encode2+0xfb/0x3c0
[  173.163999][ T8454]  ? prepend_copy+0x3f/0x80
[  173.164016][ T8454]  tomoyo_encode+0x29/0x50
[  173.164030][ T8454]  tomoyo_realpath_from_path+0x18c/0x690
[  173.164049][ T8454]  tomoyo_path_number_perm+0x23c/0x580
[  173.164063][ T8454]  ? tomoyo_path_number_perm+0x22e/0x580
[  173.164077][ T8454]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  173.164091][ T8454]  ? get_pid_task+0x106/0x250
[  173.164118][ T8454]  ? find_held_lock+0x2b/0x80
[  173.164131][ T8454]  ? __fget_files+0x215/0x3d0
[  173.164144][ T8454]  ? hook_file_ioctl_common+0x140/0x440
[  173.164157][ T8454]  ? __fget_files+0x215/0x3d0
[  173.164169][ T8454]  ? __fget_files+0x21f/0x3d0
[  173.164182][ T8454]  security_file_ioctl_compat+0xd3/0x230
[  173.164197][ T8454]  __ia32_compat_sys_ioctl+0xc2/0x360
[  173.164215][ T8454]  __do_fast_syscall_32+0xe7/0x970
[  173.164230][ T8454]  ? lockdep_hardirqs_on+0x78/0x100
[  173.164244][ T8454]  do_fast_syscall_32+0x32/0x70
[  173.164258][ T8454]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  173.164271][ T8454] RIP: 0023:0xf7fc4fec
[  173.164285][ T8454] Code: Unable to access opcode bytes at 0xf7fc4fc2.
[  173.164290][ T8454] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  173.164301][ T8454] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000402c5828
[  173.164308][ T8454] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000
[  173.164314][ T8454] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  173.164320][ T8454] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  173.164326][ T8454] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  173.164339][ T8454]  </TASK>
[  173.164350][ T8454] ERROR: Out of memory at tomoyo_realpath_from_path.
[  173.172249][ T8456] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  173.186658][ T8452] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  173.254928][ T8459] vfio-pci 0000:00:01.0: vgaarb: deactivate vga console
[  173.258428][ T8459] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  173.365673][ T8469] 9p: Bad value for 'rfdno'
[  173.397839][ T8472] pim6reg: entered allmulticast mode
[  173.410924][ T8471] netlink: 'syz.2.806': attribute type 1 has an invalid length.
[  173.434683][ T8471] 8021q: adding VLAN 0 to HW filter on device bond19
[  173.438148][ T8472] pim6reg: left allmulticast mode
[  173.699796][ T8476] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  174.016538][ T5085] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  174.122472][ T8480] ubi0: attaching mtd0
[  174.127529][ T8480] ubi0: scanning is finished
[  174.129378][ T8480] ubi0: empty MTD device detected
[  174.188015][ T5085] usb 7-1: Using ep0 maxpacket: 32
[  174.190579][ T5085] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  174.194541][ T5085] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  174.202063][ T5085] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  174.209680][ T5085] usb 7-1: Product: syz
[  174.212210][ T5085] usb 7-1: Manufacturer: syz
[  174.215687][ T5085] usb 7-1: SerialNumber: syz
[  174.223734][ T5085] usb 7-1: config 0 descriptor??
[  174.230546][ T8478] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  174.234411][ T5085] hub 7-1:0.0: bad descriptor, ignoring hub
[  174.236783][ T5085] hub 7-1:0.0: probe with driver hub failed with error -5
[  174.322158][ T8489] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  174.323208][ T8480] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  174.328118][ T8480] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  174.330802][ T8480] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  174.333749][ T8480] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  174.336649][ T8480] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  174.338988][ T8480] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  174.341585][ T8480] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3080369861
[  174.344944][ T8480] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  174.351768][ T8492] ubi0: background thread "ubi_bgt0d" started, PID 8492
[  174.494915][ T8504] FAULT_INJECTION: forcing a failure.
[  174.494915][ T8504] name failslab, interval 1, probability 0, space 0, times 0
[  174.500229][ T8504] CPU: 1 UID: 0 PID: 8504 Comm: syz.5.813 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  174.500263][ T8504] Tainted: [L]=SOFTLOCKUP
[  174.500269][ T8504] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  174.500280][ T8504] Call Trace:
[  174.500286][ T8504]  <TASK>
[  174.500294][ T8504]  dump_stack_lvl+0x100/0x190
[  174.500323][ T8504]  should_fail_ex.cold+0x5/0xa
[  174.500345][ T8504]  should_failslab+0xc2/0x120
[  174.500372][ T8504]  __kmalloc_noprof+0xfc/0x820
[  174.500394][ T8504]  ? rcu_is_watching+0x12/0xc0
[  174.500417][ T8504]  ? tomoyo_realpath_from_path+0xb6/0x690
[  174.500450][ T8504]  tomoyo_realpath_from_path+0xb6/0x690
[  174.500483][ T8504]  tomoyo_path_number_perm+0x23c/0x580
[  174.500506][ T8504]  ? tomoyo_path_number_perm+0x22e/0x580
[  174.500530][ T8504]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  174.500553][ T8504]  ? get_pid_task+0x106/0x250
[  174.500601][ T8504]  ? find_held_lock+0x2b/0x80
[  174.500623][ T8504]  ? __fget_files+0x215/0x3d0
[  174.500639][ T8504]  ? hook_file_ioctl_common+0x140/0x440
[  174.500662][ T8504]  ? __fget_files+0x215/0x3d0
[  174.500684][ T8504]  ? __fget_files+0x21f/0x3d0
[  174.500706][ T8504]  security_file_ioctl_compat+0xd3/0x230
[  174.500732][ T8504]  __ia32_compat_sys_ioctl+0xc2/0x360
[  174.500761][ T8504]  __do_fast_syscall_32+0xe7/0x970
[  174.500785][ T8504]  ? lockdep_hardirqs_on+0x78/0x100
[  174.500809][ T8504]  do_fast_syscall_32+0x32/0x70
[  174.500833][ T8504]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  174.500855][ T8504] RIP: 0023:0xf7f17fec
[  174.500876][ T8504] Code: Unable to access opcode bytes at 0xf7f17fc2.
[  174.500884][ T8504] RSP: 002b:00000000f53b550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  174.500902][ T8504] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000004004af61
[  174.500913][ T8504] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000
[  174.500923][ T8504] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  174.500932][ T8504] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  174.500941][ T8504] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  174.500962][ T8504]  </TASK>
[  174.500969][ T8504] ERROR: Out of memory at tomoyo_realpath_from_path.
[  174.639020][ T8478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  174.641983][ T8478] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  174.704925][ T8516] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality.
[  174.711418][ T8514] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  174.723385][ T8514] vfio-pci 0000:00:01.0: vgaarb: deactivate vga console
[  174.726961][ T8514] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  174.769477][   T24] usb 7-1: USB disconnect, device number 9
[  175.077663][ T8520] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  175.097207][ T8525] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  175.112641][ T8529] netlink: 'syz.5.821': attribute type 10 has an invalid length.
[  175.119251][ T8529] netlink: 4 bytes leftover after parsing attributes in process `syz.5.821'.
[  175.167116][ T8532] pim6reg: entered allmulticast mode
[  175.173235][ T8532] pim6reg: left allmulticast mode
[  175.997419][ T8546] FAULT_INJECTION: forcing a failure.
[  175.997419][ T8546] name failslab, interval 1, probability 0, space 0, times 0
[  176.004262][ T8546] CPU: 1 UID: 0 PID: 8546 Comm: syz.2.830 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  176.004283][ T8546] Tainted: [L]=SOFTLOCKUP
[  176.004289][ T8546] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  176.004296][ T8546] Call Trace:
[  176.004301][ T8546]  <TASK>
[  176.004305][ T8546]  dump_stack_lvl+0x100/0x190
[  176.004324][ T8546]  should_fail_ex.cold+0x5/0xa
[  176.004337][ T8546]  should_failslab+0xc2/0x120
[  176.004354][ T8546]  kmem_cache_alloc_noprof+0x91/0x6a0
[  176.004369][ T8546]  ? skb_clone+0x190/0x400
[  176.004387][ T8546]  skb_clone+0x190/0x400
[  176.004403][ T8546]  packet_rcv_spkt+0x184/0x670
[  176.004430][ T8546]  ? __pfx_packet_rcv_spkt+0x10/0x10
[  176.004443][ T8546]  deliver_skb+0x1aa/0x260
[  176.004456][ T8546]  __netif_receive_skb_core.constprop.0+0x1b68/0x3530
[  176.004474][ T8546]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  176.004494][ T8546]  ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10
[  176.004512][ T8546]  ? __pfx___skb_flow_dissect+0x10/0x10
[  176.004530][ T8546]  ? __lock_acquire+0x49f/0x1a40
[  176.004543][ T8546]  __netif_receive_skb_one_core+0xb0/0x1e0
[  176.004558][ T8546]  ? __pfx___netif_receive_skb_one_core+0x10/0x10
[  176.004573][ T8546]  ? lock_acquire+0x1b9/0x370
[  176.004585][ T8546]  __netif_receive_skb+0x1f/0x120
[  176.004599][ T8546]  netif_receive_skb+0x139/0x7d0
[  176.004613][ T8546]  ? __pfx_netif_receive_skb+0x10/0x10
[  176.004631][ T8546]  tun_rx_batched.isra.0+0x3f6/0x750
[  176.004676][ T8546]  ? __pfx_tun_rx_batched.isra.0+0x10/0x10
[  176.004691][ T8546]  ? tun_get_user+0x1cc8/0x3c20
[  176.004706][ T8546]  tun_get_user+0x1e31/0x3c20
[  176.004725][ T8546]  ? __pfx_tun_get_user+0x10/0x10
[  176.004738][ T8546]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  176.004761][ T8546]  ? find_held_lock+0x2b/0x80
[  176.004774][ T8546]  ? tun_get+0x191/0x370
[  176.004789][ T8546]  ? tun_get+0x191/0x370
[  176.004804][ T8546]  tun_chr_write_iter+0xdc/0x200
[  176.004818][ T8546]  vfs_write+0x6ac/0x1050
[  176.004830][ T8546]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  176.004844][ T8546]  ? __pfx_vfs_write+0x10/0x10
[  176.004853][ T8546]  ? find_held_lock+0x2b/0x80
[  176.004874][ T8546]  ksys_write+0x12a/0x250
[  176.004884][ T8546]  ? __pfx_ksys_write+0x10/0x10
[  176.004898][ T8546]  do_int80_emulation+0x14b/0x720
[  176.004915][ T8546]  asm_int80_emulation+0x1a/0x20
[  176.004926][ T8546] RIP: 0023:0xf71f74eb
[  176.004935][ T8546] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  176.004945][ T8546] RSP: 002b:00000000f54ad44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[  176.004957][ T8546] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000400
[  176.004963][ T8546] RDX: 0000000000000066 RSI: 0000000000000000 RDI: 0000000000000000
[  176.004969][ T8546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  176.004975][ T8546] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  176.004981][ T8546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  176.004993][ T8546]  </TASK>
[  176.020089][ T8549] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  176.082298][ T8551] netlink: 16 bytes leftover after parsing attributes in process `syz.2.831'.
[  176.104332][ T8549] vfio-pci 0000:00:01.0: vgaarb: deactivate vga console
[  176.106898][ T8551] netlink: 16 bytes leftover after parsing attributes in process `syz.2.831'.
[  176.115746][ T8551] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22)
[  176.115749][ T8549] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  176.125348][ T8551] iwpm_hello_cb: Unable to parse nlmsg
[  176.166138][ T8556] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  176.213453][ T8562] netlink: 'syz.5.834': attribute type 10 has an invalid length.
[  176.222504][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.5.834'.
[  176.273922][ T8564] netlink: 'syz.6.836': attribute type 1 has an invalid length.
[  176.292353][ T8564] 8021q: adding VLAN 0 to HW filter on device bond2
[  176.775260][ T8579] bridge0: port 1(syz_tun) entered blocking state
[  176.780243][ T8579] bridge0: port 1(syz_tun) entered disabled state
[  176.785392][ T8579] syz_tun: entered allmulticast mode
[  176.789782][ T8579] syz_tun: entered promiscuous mode
[  176.792986][ T8579] bridge0: port 1(syz_tun) entered blocking state
[  176.796554][ T8579] bridge0: port 1(syz_tun) entered forwarding state
[  177.036855][ T8585] xt_connbytes: Forcing CT accounting to be enabled
[  177.039479][ T8585] xt_TPROXY: Can be used only with -p tcp or -p udp
[  177.203294][ T8587] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  177.249654][ T8589] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  177.302071][ T8591] netlink: 'syz.2.847': attribute type 1 has an invalid length.
[  177.315655][ T8591] 8021q: adding VLAN 0 to HW filter on device bond20
[  177.495492][ T8594] vfio-pci 0000:00:01.0: vgaarb: deactivate vga console
[  177.500002][ T8594] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  177.727103][ T8598] netlink: 'syz.4.850': attribute type 10 has an invalid length.
[  177.734294][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.850'.
[  177.781176][ T8605] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  178.056504][ T5814] usb 11-1: new high-speed USB device number 7 using dummy_hcd
[  178.177953][ T8615] netlink: 'syz.5.856': attribute type 1 has an invalid length.
[  178.191967][ T8615] 8021q: adding VLAN 0 to HW filter on device bond5
[  178.197469][ T5814] usb 11-1: device descriptor read/64, error -71
[  178.276834][ T8618] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.858'.
[  178.400666][ T8621] 9p: Bad value for 'rfdno'
[  178.482225][ T8624] 9p: Bad value for 'rfdno'
[  178.552621][ T8621] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  178.656098][ T5814] usb 11-1: new high-speed USB device number 8 using dummy_hcd
[  178.763510][ T8625] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  178.790563][ T8625] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  178.793357][ T8625] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  178.796469][ T8625] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  178.801860][ T8625] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  178.886728][ T8625] pci 0000:00:01.0: Adding to iommu group 1
[  178.928042][ T8625] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  178.930240][ T8625] pci 0000:00:01.0: vgaarb: bridge control possible
[  178.932308][ T8625] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  178.951719][ T8625] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  178.954790][ T8625] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  178.961581][ T8625] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  179.026987][ T8625] [drm] Found bochs VGA, ID 0xb0c5.
[  179.028961][ T8625] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  179.087427][ T8625] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[  179.356316][ T5814] usb 11-1: device descriptor read/64, error -71
[  179.454529][ T8625] Console: switching to colour frame buffer device 160x50
[  179.467036][ T5814] usb usb11-port1: attempt power cycle
[  179.501518][ T8625] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[  179.531049][ T8629] Console: switching to colour dummy device 80x25
[  179.614685][ T8630] vfio-pci 0000:00:01.0: vgaarb: deactivate vga console
[  179.617580][ T8630] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  179.652752][ T8647] netlink: 64 bytes leftover after parsing attributes in process `syz.4.863'.
[  179.713560][ T8658] netlink: 'syz.2.865': attribute type 1 has an invalid length.
[  179.731640][ T8658] 8021q: adding VLAN 0 to HW filter on device bond21
[  179.784757][ T8664] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.868'.
[  179.788227][ T8664] FAULT_INJECTION: forcing a failure.
[  179.788227][ T8664] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  179.792462][ T8664] CPU: 1 UID: 0 PID: 8664 Comm: syz.4.868 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  179.792479][ T8664] Tainted: [L]=SOFTLOCKUP
[  179.792483][ T8664] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  179.792490][ T8664] Call Trace:
[  179.792500][ T8664]  <TASK>
[  179.792505][ T8664]  dump_stack_lvl+0x100/0x190
[  179.792614][ T8664]  should_fail_ex.cold+0x5/0xa
[  179.792633][ T8664]  _copy_to_user+0x32/0xd0
[  179.792702][ T8664]  simple_read_from_buffer+0xcb/0x170
[  179.792745][ T8664]  proc_fail_nth_read+0x1af/0x230
[  179.792771][ T8664]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  179.792787][ T8664]  ? rw_verify_area+0xce/0x6d0
[  179.792803][ T8664]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  179.792819][ T8664]  vfs_read+0x1e4/0xb40
[  179.792831][ T8664]  ? __pfx_vfs_read+0x10/0x10
[  179.792840][ T8664]  ? find_held_lock+0x2b/0x80
[  179.792879][ T8664]  ? __fget_files+0x215/0x3d0
[  179.792893][ T8664]  ? __fget_files+0x21f/0x3d0
[  179.792907][ T8664]  ksys_read+0x12a/0x250
[  179.792917][ T8664]  ? __pfx_ksys_read+0x10/0x10
[  179.792931][ T8664]  do_int80_emulation+0x14b/0x720
[  179.793002][ T8664]  asm_int80_emulation+0x1a/0x20
[  179.793014][ T8664] RIP: 0023:0xf71574eb
[  179.793023][ T8664] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  179.793033][ T8664] RSP: 002b:00000000f540d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  179.793060][ T8664] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f540d5d0
[  179.793066][ T8664] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  179.793072][ T8664] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  179.793078][ T8664] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  179.793084][ T8664] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  179.793098][ T8664]  </TASK>
[  179.816130][ T5814] usb 11-1: new high-speed USB device number 9 using dummy_hcd
[  179.877241][ T5814] usb 11-1: device descriptor read/8, error -71
[  179.983468][ T8670] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.867'.
[  180.053507][ T8675] netlink: 'syz.2.871': attribute type 10 has an invalid length.
[  180.060466][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.871'.
[  180.126111][ T5814] usb 11-1: new high-speed USB device number 10 using dummy_hcd
[  180.146580][ T5814] usb 11-1: device descriptor read/8, error -71
[  180.172859][ T8678] 9p: Bad value for 'rfdno'
[  180.211469][ T8678] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  180.239244][ T8678] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  180.257733][ T5814] usb usb11-port1: unable to enumerate USB device
[  180.260390][ T8678] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  180.263752][ T8678] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  180.267149][ T8678] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  180.271945][ T8678] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  180.299260][ T8678] pci 0000:00:01.0: Adding to iommu group 1
[  180.309381][ T8678] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  180.311552][ T8678] pci 0000:00:01.0: vgaarb: bridge control possible
[  180.313614][ T8678] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  180.326549][ T8678] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  180.329421][ T8678] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  180.341157][ T8678] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  180.387237][ T8678] [drm] Found bochs VGA, ID 0xb0c5.
[  180.389110][ T8678] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  180.400168][ T8678] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[  180.553467][ T8678] Console: switching to colour frame buffer device 160x50
[  180.579632][ T8678] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[  180.803074][ T8686] Console: switching to colour dummy device 80x25
[  180.821465][ T8688] netlink: 'syz.4.876': attribute type 1 has an invalid length.
[  180.842933][ T8688] 8021q: adding VLAN 0 to HW filter on device bond6
[  181.005662][ T8689] vfio-pci 0000:00:01.0: vgaarb: deactivate vga console
[  181.020828][ T8689] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  181.021916][ T8694] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.879'.
[  181.094385][ T8700] netlink: 'syz.2.881': attribute type 10 has an invalid length.
[  181.101916][ T8700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.881'.
[  181.117440][ T8702] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  181.292492][ T8713] 9p: Bad value for 'rfdno'
[  181.308819][ T8719] netlink: 'syz.6.887': attribute type 1 has an invalid length.
[  181.336709][ T8719] 8021q: adding VLAN 0 to HW filter on device bond3
[  181.443881][ T8717] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  181.499370][ T8717] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  181.502202][ T8717] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  181.505071][ T8717] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  181.509590][ T8717] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  181.691914][ T8717] pci 0000:00:01.0: Adding to iommu group 1
[  181.746937][ T8717] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  181.749069][ T8717] pci 0000:00:01.0: vgaarb: bridge control possible
[  181.751021][ T8717] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  181.768165][ T8717] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  181.770820][ T8717] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  181.777282][ T8717] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  181.823637][ T8717] [drm] Found bochs VGA, ID 0xb0c5.
[  181.825665][ T8717] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  181.925196][ T8717] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[  182.196333][ T8740] 9p: Bad value for 'rfdno'
[  182.309027][ T8717] Console: switching to colour frame buffer device 160x50
[  182.384630][ T8717] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[  182.544472][ T8740] Console: switching to colour dummy device 80x25
[  182.679543][ T8759] netlink: 'syz.4.896': attribute type 1 has an invalid length.
[  182.705539][ T8759] 8021q: adding VLAN 0 to HW filter on device bond7
[  182.857207][   T29] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  182.879363][ T8741] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  182.902183][ T8741] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  182.952150][ T8741] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  182.960346][ T8741] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  182.989301][ T8741] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  183.019115][ T8741] pci 0000:00:01.0: Adding to iommu group 1
[  183.024925][ T8741] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  183.026089][   T29] usb 10-1: Using ep0 maxpacket: 8
[  183.027004][ T8741] pci 0000:00:01.0: vgaarb: bridge control possible
[  183.029208][   T29] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  183.030714][ T8741] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  183.034505][   T29] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[  183.040769][   T29] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  183.044541][ T8741] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  183.048392][   T29] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  183.049639][ T8741] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  183.052814][   T29] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  183.057260][ T8741] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  183.059009][   T29] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  183.064786][   T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.079288][ T8741] [drm] Found bochs VGA, ID 0xb0c5.
[  183.080971][ T8741] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  183.084451][ T8741] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4
[  183.272121][   T29] usb 10-1: usb_control_msg returned -32
[  183.275852][   T29] usbtmc 10-1:16.0: can't read capabilities
[  183.474299][   T29] usb 10-1: USB disconnect, device number 8
[  183.796169][   T29] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  183.959030][   T29] usb 10-1: New USB device found, idVendor=10c4, idProduct=8066, bcdDevice=52.4c
[  183.962929][   T29] usb 10-1: config 224 has an invalid interface number: 95 but max is 0
[  183.965902][   T29] usb 10-1: config 224 has no interface number 0
[  183.968265][   T29] usb 10-1: config 224 interface 95 altsetting 7 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  183.971686][   T29] usb 10-1: config 224 interface 95 altsetting 7 bulk endpoint 0xA has invalid maxpacket 16
[  183.974819][   T29] usb 10-1: config 224 interface 95 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  183.978807][   T29] usb 10-1: config 224 interface 95 altsetting 7 has a duplicate endpoint with address 0x5, skipping
[  183.982178][   T29] usb 10-1: config 224 interface 95 has no altsetting 0
[  183.986409][   T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.995757][   T29] usb 10-1: Product: syz
[  183.997187][   T29] usb 10-1: Manufacturer: เกก
[  183.998701][   T29] usb 10-1: SerialNumber: syz
[  184.002227][ T8753] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  184.159825][ T8782] 9p: Bad value for 'rfdno'
[  184.253262][   T29] cp210x 10-1:224.95: cp210x converter detected
[  184.263812][   T29] cp210x 10-1:224.95: failed to get vendor val 0x370b size 1: -71
[  184.271109][   T29] cp210x 10-1:224.95: querying part number failed
[  184.282026][ T8787] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  184.301972][ T8787] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  184.304503][ T8787] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  184.306976][ T8787] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  184.317325][ T8787] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  184.398873][   T29] usb 10-1: cp210x converter now attached to ttyUSB0
[  184.406386][ T8792] netlink: 'syz.4.905': attribute type 1 has an invalid length.
[  184.458913][ T8797] 9p: Bad value for 'rfdno'
[  184.529222][   T29] usb 10-1: USB disconnect, device number 9
[  184.530264][ T8792] 8021q: adding VLAN 0 to HW filter on device bond8
[  184.563052][ T8787] pci 0000:00:01.0: Adding to iommu group 1
[  184.563158][   T29] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  184.569532][   T29] cp210x 10-1:224.95: device disconnected
[  184.631594][ T8787] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  184.633777][ T8787] pci 0000:00:01.0: vgaarb: bridge control possible
[  184.635821][ T8787] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  184.659846][ T8787] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  184.662882][ T8787] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  184.675647][ T8787] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  184.743242][ T8787] [drm] Found bochs VGA, ID 0xb0c5.
[  184.745147][ T8787] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  184.792778][ T8787] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[  184.973985][ T8803] netlink: 'syz.4.917': attribute type 1 has an invalid length.
[  185.087004][ T8803] 8021q: adding VLAN 0 to HW filter on device bond9
[  185.111065][ T8808] 9p: Bad value for 'rfdno'
[  185.233064][ T8787] Console: switching to colour frame buffer device 160x50
[  185.276157][ T8787] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[  185.314867][ T8795] Console: switching to colour dummy device 80x25
[  185.456504][ T8797] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  185.478331][ T8797] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  185.480785][ T8797] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  185.483203][ T8797] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  185.489419][ T8797] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  185.502671][ T8797] pci 0000:00:01.0: Adding to iommu group 1
[  185.510226][ T8797] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  185.512414][ T8797] pci 0000:00:01.0: vgaarb: bridge control possible
[  185.514872][ T8797] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  185.525440][ T8797] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  185.529376][ T8797] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  185.533606][ T8797] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  185.543680][ T8797] [drm] Found bochs VGA, ID 0xb0c5.
[  185.545545][ T8797] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  185.565474][ T8797] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[  185.676577][ T8797] Console: switching to colour frame buffer device 160x50
[  185.698156][ T8797] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[  185.713303][ T8814] netlink: 'syz.4.919': attribute type 1 has an invalid length.
[  185.748035][ T8814] 8021q: adding VLAN 0 to HW filter on device bond10
[  185.800713][ T8820] Console: switching to colour dummy device 80x25
[  186.759337][ T8851] vfio-pci 0000:00:01.0: vgaarb: deactivate vga console
[  186.768612][ T8851] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  186.872411][ T8856] 9p: Bad value for 'rfdno'
[  186.881666][ T8857] 9p: Bad value for 'rfdno'
[  186.935575][ T8857] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  187.040088][ T8863] 9p: Bad value for 'rfdno'
[  187.331668][ T8856] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  187.361283][ T8856] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  187.364182][ T8856] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  187.371803][ T8856] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  187.377358][ T8856] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  187.434713][ T8856] pci 0000:00:01.0: Adding to iommu group 1
[  187.533293][ T8856] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  187.535611][ T8856] pci 0000:00:01.0: vgaarb: bridge control possible
[  187.537812][ T8856] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  187.571894][ T8856] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  187.578171][ T8856] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  187.593596][ T8856] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  187.685215][ T8856] [drm] Found bochs VGA, ID 0xb0c5.
[  187.689060][ T8856] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  187.749675][ T8856] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[  187.989712][ T8871] netlink: 'syz.2.925': attribute type 1 has an invalid length.
[  188.007282][ T8871] 8021q: adding VLAN 0 to HW filter on device bond22
[  188.089339][ T8856] Console: switching to colour frame buffer device 160x50
[  188.119017][ T8856] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[  188.240027][ T8880] netlink: 'syz.4.932': attribute type 4 has an invalid length.
[  188.261107][ T8877] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.930'.
[  188.277484][ T8883] Console: switching to colour dummy device 80x25
[  188.293881][ T8887] netlink: 20 bytes leftover after parsing attributes in process `syz.5.933'.
[  188.311284][ T8880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.932'.
[  188.357491][ T8887] team0 (unregistering): Port device team_slave_0 removed
[  188.366771][ T8887] team0 (unregistering): Port device team_slave_1 removed
[  188.372895][ T8894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.934'.
[  188.410408][ T8897] lo: entered promiscuous mode
[  188.416628][ T8897] tunl0: entered promiscuous mode
[  188.420965][ T8897] gre0: entered promiscuous mode
[  188.433520][ T8897] gretap0: entered promiscuous mode
[  188.441037][ T8897] erspan0: entered promiscuous mode
[  188.445074][ T8897] ip_vti0: entered promiscuous mode
[  188.449343][ T8897] ip6_vti0: entered promiscuous mode
[  188.455634][ T8897] sit0: entered promiscuous mode
[  188.464410][ T8897] ip6tnl0: entered promiscuous mode
[  188.472982][ T8897] ip6gre0: entered promiscuous mode
[  188.477769][ T8904] netlink: 'syz.5.937': attribute type 1 has an invalid length.
[  188.480389][ T8897] syz_tun: entered promiscuous mode
[  188.495849][ T8897] ip6gretap0: entered promiscuous mode
[  188.530909][ T8904] 8021q: adding VLAN 0 to HW filter on device bond6
[  188.636273][ T5839] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  188.787361][ T5839] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  188.792437][ T5839] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  188.796733][ T5839] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  188.800415][ T5839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.015460][ T5839] usb 7-1: USB disconnect, device number 10
[  189.557959][ T8915] netlink: 'syz.4.947': attribute type 1 has an invalid length.
[  189.570532][ T8915] 8021q: adding VLAN 0 to HW filter on device bond11
[  189.608045][ T8920] 9p: Bad value for 'rfdno'
[  189.668684][ T8914] 9p: Bad value for 'rfdno'
[  189.683084][ T8914] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  189.704557][ T8914] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  189.707493][ T8914] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  189.710312][ T8914] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  189.716366][ T8914] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  189.773238][ T8914] pci 0000:00:01.0: Adding to iommu group 1
[  190.010832][ T8914] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  190.013014][ T8914] pci 0000:00:01.0: vgaarb: bridge control possible
[  190.015082][ T8914] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  190.031064][ T8914] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  190.034126][ T8914] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  190.042931][ T8914] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  190.088655][ T8914] [drm] Found bochs VGA, ID 0xb0c5.
[  190.090561][ T8914] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  190.189632][ T8914] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[  190.641925][ T8934] FAULT_INJECTION: forcing a failure.
[  190.641925][ T8934] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  190.642007][ T8934] CPU: 0 UID: 0 PID: 8934 Comm: syz.4.945 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  190.642022][ T8934] Tainted: [L]=SOFTLOCKUP
[  190.642026][ T8934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  190.642033][ T8934] Call Trace:
[  190.642078][ T8934]  <TASK>
[  190.642083][ T8934]  dump_stack_lvl+0x100/0x190
[  190.642184][ T8934]  should_fail_ex.cold+0x5/0xa
[  190.642209][ T8934]  _copy_from_user+0x2e/0xd0
[  190.642276][ T8934]  bpf_ctx_init+0x14e/0x1e0
[  190.642334][ T8934]  bpf_prog_test_run_sk_lookup+0x2c6/0x1300
[  190.642351][ T8934]  ? find_held_lock+0x2b/0x80
[  190.642380][ T8934]  ? __pfx_bpf_prog_test_run_sk_lookup+0x10/0x10
[  190.642393][ T8934]  ? __fget_files+0x215/0x3d0
[  190.642412][ T8934]  ? __fget_files+0x21f/0x3d0
[  190.642425][ T8934]  ? fput+0x79/0x100
[  190.642437][ T8934]  ? __bpf_prog_get+0x97/0x2a0
[  190.642454][ T8934]  ? __pfx_bpf_prog_test_run_sk_lookup+0x10/0x10
[  190.642467][ T8934]  __sys_bpf+0x2a12/0x4e80
[  190.642483][ T8934]  ? __pfx___sys_bpf+0x10/0x10
[  190.642495][ T8934]  ? find_held_lock+0x2b/0x80
[  190.642508][ T8934]  ? get_pid_task+0xfc/0x250
[  190.642522][ T8934]  ? get_pid_task+0xfc/0x250
[  190.642539][ T8934]  ? proc_fail_nth_write+0x9f/0x220
[  190.642560][ T8934]  ? find_held_lock+0x2b/0x80
[  190.642576][ T8934]  ? rcu_read_lock_any_held+0x6a/0xa0
[  190.642591][ T8934]  ? find_held_lock+0x2b/0x80
[  190.642604][ T8934]  ? ksys_write+0x190/0x250
[  190.642617][ T8934]  ? ksys_write+0x190/0x250
[  190.642637][ T8934]  ? fput+0x79/0x100
[  190.642651][ T8934]  ? __ia32_sys_bpf+0xcc/0x170
[  190.642662][ T8934]  __ia32_sys_bpf+0xcc/0x170
[  190.642674][ T8934]  ? __do_fast_syscall_32+0x98/0x970
[  190.642717][ T8934]  __do_fast_syscall_32+0xe7/0x970
[  190.642731][ T8934]  ? lockdep_hardirqs_on+0x78/0x100
[  190.642745][ T8934]  do_fast_syscall_32+0x32/0x70
[  190.642759][ T8934]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  190.642773][ T8934] RIP: 0023:0xf701efec
[  190.642787][ T8934] Code: Unable to access opcode bytes at 0xf701efc2.
[  190.642819][ T8934] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  190.642830][ T8934] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000440
[  190.642836][ T8934] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000
[  190.642842][ T8934] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  190.642848][ T8934] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  190.642854][ T8934] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  190.642868][ T8934]  </TASK>
[  190.720881][ T8914] Console: switching to colour frame buffer device 160x50
[  191.018803][ T8914] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[  191.043318][ T8927] Console: switching to colour dummy device 80x25
[  191.137617][ T8942] netlink: 'syz.6.949': attribute type 13 has an invalid length.
[  191.169704][ T8942] FAULT_INJECTION: forcing a failure.
[  191.169704][ T8942] name failslab, interval 1, probability 0, space 0, times 0
[  191.173674][ T8942] CPU: 1 UID: 0 PID: 8942 Comm: syz.6.949 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  191.173693][ T8942] Tainted: [L]=SOFTLOCKUP
[  191.173697][ T8942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  191.173703][ T8942] Call Trace:
[  191.173708][ T8942]  <TASK>
[  191.173712][ T8942]  dump_stack_lvl+0x100/0x190
[  191.173730][ T8942]  should_fail_ex.cold+0x5/0xa
[  191.173743][ T8942]  should_failslab+0xc2/0x120
[  191.173761][ T8942]  __kmalloc_cache_noprof+0x91/0x6c0
[  191.173774][ T8942]  ? qfq_change_class+0xe12/0x1d60
[  191.173791][ T8942]  qfq_change_class+0xe12/0x1d60
[  191.173805][ T8942]  ? ktime_expiry_to_cycles+0xc0/0x2c0
[  191.173818][ T8942]  ? __pfx_qfq_change_class+0x10/0x10
[  191.173833][ T8942]  ? qdisc_match_from_root+0x16f/0x260
[  191.173858][ T8942]  ? __pfx_qfq_change_class+0x10/0x10
[  191.173870][ T8942]  tc_ctl_tclass+0x5ae/0x1690
[  191.173886][ T8942]  ? __hrtimer_rearm_deferred+0x23c/0x720
[  191.173901][ T8942]  ? __pfx_tc_ctl_tclass+0x10/0x10
[  191.173918][ T8942]  ? irqentry_exit+0x24d/0xa00
[  191.173934][ T8942]  ? lockdep_hardirqs_on+0x78/0x100
[  191.173956][ T8942]  ? __pfx_tc_ctl_tclass+0x10/0x10
[  191.173971][ T8942]  rtnetlink_rcv_msg+0x3c9/0xe90
[  191.173990][ T8942]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  191.174010][ T8942]  ? ref_tracker_free+0x37e/0x6c0
[  191.174031][ T8942]  netlink_rcv_skb+0x159/0x420
[  191.174044][ T8942]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  191.174062][ T8942]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  191.174080][ T8942]  ? netlink_deliver_tap+0x1ae/0xcc0
[  191.174095][ T8942]  netlink_unicast+0x585/0x850
[  191.174110][ T8942]  ? __pfx_netlink_unicast+0x10/0x10
[  191.174126][ T8942]  netlink_sendmsg+0x8b0/0xda0
[  191.174141][ T8942]  ? __pfx_netlink_sendmsg+0x10/0x10
[  191.174155][ T8942]  ? apparmor_socket_sendmsg+0x15b/0x270
[  191.174176][ T8942]  ____sys_sendmsg+0xa4d/0xbe0
[  191.174189][ T8942]  ? __pfx_netlink_sendmsg+0x10/0x10
[  191.174202][ T8942]  ? __pfx_____sys_sendmsg+0x10/0x10
[  191.174224][ T8942]  ___sys_sendmsg+0x190/0x1e0
[  191.174237][ T8942]  ? __pfx____sys_sendmsg+0x10/0x10
[  191.174256][ T8942]  ? find_held_lock+0x2b/0x80
[  191.174278][ T8942]  __sys_sendmsg+0x160/0x210
[  191.174294][ T8942]  ? __pfx___sys_sendmsg+0x10/0x10
[  191.174314][ T8942]  ? __pfx_ksys_write+0x10/0x10
[  191.174327][ T8942]  __do_fast_syscall_32+0xe7/0x970
[  191.174341][ T8942]  ? lockdep_hardirqs_on+0x78/0x100
[  191.174355][ T8942]  do_fast_syscall_32+0x32/0x70
[  191.174369][ T8942]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  191.174382][ T8942] RIP: 0023:0xf7fc4fec
[  191.174395][ T8942] Code: Unable to access opcode bytes at 0xf7fc4fc2.
[  191.174400][ T8942] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  191.174411][ T8942] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000000
[  191.174417][ T8942] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  191.174424][ T8942] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  191.174430][ T8942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  191.174436][ T8942] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  191.174449][ T8942]  </TASK>
[  191.192533][ T8945] dummy_hcd dummy_hcd.0: remove, state 4
[  191.297263][ T8949] netlink: 'syz.2.951': attribute type 1 has an invalid length.
[  191.297512][ T8945] usb usb5: USB disconnect, device number 1
[  191.348090][ T8949] 8021q: adding VLAN 0 to HW filter on device bond23
[  191.352613][ T8945] dummy_hcd dummy_hcd.0: stopped
[  191.355349][ T8945] dummy_hcd dummy_hcd.0: USB bus 5 deregistered
[  191.550017][ T8959] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  191.569936][ T8959] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  191.572754][ T8959] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  191.575327][ T8959] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  191.581052][ T8959] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  191.625064][ T8959] pci 0000:00:01.0: Adding to iommu group 1
[  191.641018][ T8967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.957'.
[  191.681964][ T8971] 9p: Bad value for 'rfdno'
[  191.690301][ T8959] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  191.692837][ T8959] pci 0000:00:01.0: vgaarb: bridge control possible
[  191.695354][ T8959] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  191.710786][ T8959] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  191.714075][ T5814] usb 11-1: new high-speed USB device number 11 using dummy_hcd
[  191.714490][ T8959] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  191.727843][ T8959] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  191.785523][ T8959] [drm] Found bochs VGA, ID 0xb0c5.
[  191.788027][ T8959] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  191.899133][ T8959] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[  191.910182][ T5814] usb 11-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00
[  192.003355][ T5814] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  192.003384][ T5814] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.238218][ T8958] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  192.409426][ T8959] Console: switching to colour frame buffer device 160x50
[  192.478362][ T5814] opticon 11-1:1.0: opticon converter detected
[  192.519622][ T8959] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[  192.574416][ T5814] usb 11-1: opticon converter now attached to ttyUSB0
[  192.590142][ T8971] Console: switching to colour dummy device 80x25
[  192.692049][ T8978] netlink: 'syz.4.960': attribute type 1 has an invalid length.
[  192.715138][ T8978] 8021q: adding VLAN 0 to HW filter on device bond12
[  192.939202][ T8972] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  192.969601][ T8972] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  192.972025][ T8972] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  192.974516][ T8972] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  192.978011][ T8972] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  192.990412][ T8972] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 12249 usecs
[  193.005886][ T8972] pci 0000:00:01.0: Adding to iommu group 1
[  193.013180][ T8972] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  193.015338][ T8972] pci 0000:00:01.0: vgaarb: bridge control possible
[  193.017445][ T8972] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  193.029038][ T8972] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  193.031873][ T8972] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  193.035661][ T8972] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  193.043923][ T8972] [drm] Found bochs VGA, ID 0xb0c5.
[  193.045719][ T8972] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  193.049451][ T8972] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4
[  193.336126][   T29] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  193.446100][ T5878] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  193.487742][   T29] usb 9-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00
[  193.491607][   T29] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  193.494742][   T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.500252][ T8984] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  193.508441][   T29] opticon 9-1:1.0: opticon converter detected
[  193.516863][   T29] usb 9-1: opticon converter now attached to ttyUSB1
[  193.606225][ T5878] usb 7-1: Using ep0 maxpacket: 32
[  193.610657][ T5878] usb 7-1: unable to get BOS descriptor or descriptor too short
[  193.614173][ T5878] usb 7-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40
[  193.620236][ T5878] usb 7-1: config 1 interface 2 has no altsetting 1
[  193.626089][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.629535][ T5878] usb 7-1: Product: syz
[  193.631214][ T5878] usb 7-1: Manufacturer: syz
[  193.633174][ T5878] usb 7-1: SerialNumber: syz
[  193.830739][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[  193.832812][ T1433] ieee802154 phy1 wpan1: encryption failed: -22
[  193.864574][ T5878] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[  193.886815][ T5806] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.886829][ T5878] usb 7-1: USB disconnect, device number 11
[  193.964878][ T5806] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.034536][ T5806] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.102471][ T5806] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.256137][ T5736] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  194.291247][ T5806] bond1 (unregistering): (slave geneve2): Releasing active interface
[  194.306077][ T5806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  194.310430][ T5806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  194.313991][ T5806] bond0 (unregistering): Released all slaves
[  194.321690][ T5806] bond1 (unregistering): Released all slaves
[  194.329028][ T5806] bond2 (unregistering): Released all slaves
[  194.341828][ T5806] bond3 (unregistering): Released all slaves
[  194.348988][ T5806] bond4 (unregistering): Released all slaves
[  194.359312][ T5806] bond5 (unregistering): Released all slaves
[  194.407477][ T5736] usb 10-1: Using ep0 maxpacket: 32
[  194.415096][ T5736] usb 10-1: unable to get BOS descriptor or descriptor too short
[  194.419224][ T5736] usb 10-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40
[  194.424302][ T5736] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.431927][ T5736] usb 10-1: Product: syz
[  194.433330][ T5736] usb 10-1: Manufacturer: syz
[  194.438642][ T5736] usb 10-1: SerialNumber: syz
[  194.490346][   T29] usb 11-1: USB disconnect, device number 11
[  194.504552][   T29] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0
[  194.515001][   T29] opticon 11-1:1.0: device disconnected
[  194.518190][ T5814] kernel write not supported for file /input/event2 (pid: 5814 comm: kworker/0:3)
[  194.623422][ T5443] 8021q: adding VLAN 0 to HW filter on device eth6
[  194.696654][ T5736] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22
[  194.720662][ T5736] usb 10-1: USB disconnect, device number 10
[  194.758073][ T9020] netlink: 'syz.2.969': attribute type 1 has an invalid length.
[  194.803549][ T9020] 8021q: adding VLAN 0 to HW filter on device bond24
[  194.840049][ T5806] hsr_slave_0: left promiscuous mode
[  194.850746][ T5806] hsr_slave_1: left promiscuous mode
[  194.859422][ T5806] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  194.862265][ T5806] batman_adv: batadv0: Removing interface: batadv_slave_0
[  194.865527][ T5806] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  194.870336][ T5806] batman_adv: batadv0: Removing interface: batadv_slave_1
[  194.881001][ T5806] veth1_macvtap: left promiscuous mode
[  194.883515][ T5806] veth0_macvtap: left promiscuous mode
[  194.885359][ T5806] veth1_vlan: left promiscuous mode
[  194.888794][ T5806] veth0_vlan: left promiscuous mode
[  194.981599][ T9028] FAULT_INJECTION: forcing a failure.
[  194.981599][ T9028] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  194.985834][ T9028] CPU: 2 UID: 0 PID: 9028 Comm: syz.6.971 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  194.985863][ T9028] Tainted: [L]=SOFTLOCKUP
[  194.985869][ T9028] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  194.985880][ T9028] Call Trace:
[  194.985902][ T9028]  <TASK>
[  194.985910][ T9028]  dump_stack_lvl+0x100/0x190
[  194.985976][ T9028]  should_fail_ex.cold+0x5/0xa
[  194.986011][ T9028]  _copy_from_user+0x2e/0xd0
[  194.986095][ T9028]  ucma_resolve_ip+0x92/0x220
[  194.986136][ T9028]  ? __pfx_ucma_resolve_ip+0x10/0x10
[  194.986153][ T9028]  ? __pfx_ucma_resolve_ip+0x10/0x10
[  194.986165][ T9028]  ucma_write+0x1fb/0x330
[  194.986176][ T9028]  ? __pfx_ucma_write+0x10/0x10
[  194.986187][ T9028]  ? bpf_lsm_file_permission+0x9/0x10
[  194.986210][ T9028]  ? security_file_permission+0x76/0x210
[  194.986238][ T9028]  ? rw_verify_area+0xce/0x6d0
[  194.986257][ T9028]  vfs_write+0x2aa/0x1050
[  194.986268][ T9028]  ? __pfx_ucma_write+0x10/0x10
[  194.986280][ T9028]  ? __pfx_vfs_write+0x10/0x10
[  194.986289][ T9028]  ? find_held_lock+0x2b/0x80
[  194.986316][ T9028]  ? __fget_files+0x215/0x3d0
[  194.986327][ T9028]  ? __fget_files+0x215/0x3d0
[  194.986339][ T9028]  ? __fget_files+0x21f/0x3d0
[  194.986353][ T9028]  ksys_write+0x1f8/0x250
[  194.986363][ T9028]  ? __pfx_ksys_write+0x10/0x10
[  194.986378][ T9028]  ? ksys_write+0x1ac/0x250
[  194.986388][ T9028]  ? __pfx_ksys_write+0x10/0x10
[  194.986406][ T9028]  __do_fast_syscall_32+0xe7/0x970
[  194.986423][ T9028]  ? lockdep_hardirqs_on+0x78/0x100
[  194.986437][ T9028]  do_fast_syscall_32+0x32/0x70
[  194.986451][ T9028]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  194.986466][ T9028] RIP: 0023:0xf7fc4fec
[  194.986480][ T9028] Code: Unable to access opcode bytes at 0xf7fc4fc2.
[  194.986498][ T9028] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  194.986514][ T9028] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340
[  194.986520][ T9028] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000
[  194.986526][ T9028] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  194.986532][ T9028] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  194.986545][ T9028] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  194.986559][ T9028]  </TASK>
[  195.162642][ T5806] team0 (unregistering): Port device team_slave_1 removed
[  195.170585][ T5806] team0 (unregistering): Port device team_slave_0 removed
[  195.182774][ T9037] 9p: Bad value for 'rfdno'
[  195.218232][ T9037] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  195.235190][ T9037] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  195.238807][ T9037] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  195.243767][ T9037] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  195.249136][ T9037] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  195.283932][ T9037] pci 0000:00:01.0: Adding to iommu group 1
[  195.296298][ T9037] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  195.298493][ T9037] pci 0000:00:01.0: vgaarb: bridge control possible
[  195.300563][ T9037] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  195.312837][ T9037] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  195.315791][ T9037] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  195.321865][ T9037] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  195.343082][ T5443] 8021q: adding VLAN 0 to HW filter on device eth7
[  195.397734][ T9037] [drm] Found bochs VGA, ID 0xb0c5.
[  195.400015][ T9037] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  195.461908][ T9037] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[  195.719444][ T5443] 8021q: adding VLAN 0 to HW filter on device eth8
[  195.804061][ T9037] Console: switching to colour frame buffer device 160x50
[  195.837756][ T9037] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[  195.919526][ T5443] 8021q: adding VLAN 0 to HW filter on device eth9
[  196.037217][ T6553] usb 9-1: USB disconnect, device number 6
[  196.052590][ T6553] opticon ttyUSB1: opticon converter now disconnected from ttyUSB1
[  196.056686][ T6553] opticon 9-1:1.0: device disconnected
[  196.089903][ T9067] Console: switching to colour dummy device 80x25
[  196.108077][ T9069] netlink: 'syz.4.978': attribute type 1 has an invalid length.
[  196.149268][ T9069] 8021q: adding VLAN 0 to HW filter on device bond13
[  196.379071][ T9081] netlink: 'syz.6.983': attribute type 13 has an invalid length.
[  196.665324][ T9090] overlay: Bad value for 'verity'
[  196.735724][ T9091] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  196.738489][ T9091] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  196.750139][ T9091] vhci_hcd vhci_hcd.0: Device attached
[  196.754971][ T9096] 9p: Bad value for 'rfdno'
[  196.791804][ T9096] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  196.810112][ T9096] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  196.810443][ T9096] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  196.810790][ T9096] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  196.823490][ T9096] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  196.838459][ T9096] pci 0000:00:01.0: Adding to iommu group 1
[  196.855507][ T9096] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  196.857670][ T9096] pci 0000:00:01.0: vgaarb: bridge control possible
[  196.859742][ T9096] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  196.875666][ T9096] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  196.879343][ T9096] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  196.891135][ T9096] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  196.914560][ T9096] [drm] Found bochs VGA, ID 0xb0c5.
[  196.917197][ T9096] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  196.942677][ T9096] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[  197.030067][ T5814] usb 48-1: SetAddress Request (2) to port 0
[  197.030226][ T5814] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd
[  197.134859][ T9101] team0: No ports can be present during mode change
[  197.194099][ T9096] Console: switching to colour frame buffer device 160x50
[  197.237087][ T9094] vhci_hcd: connection reset by peer
[  197.238395][ T9096] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[  197.240060][ T5806] vhci_hcd vhci_hcd.5: stop threads
[  197.243930][ T5806] vhci_hcd vhci_hcd.5: release socket
[  197.252248][ T5806] vhci_hcd vhci_hcd.5: disconnect device
[  197.255226][ T9104] Console: switching to colour dummy device 80x25
[  197.458702][ T9108] netlink: 'syz.4.988': attribute type 1 has an invalid length.
[  197.510018][ T9113] FAULT_INJECTION: forcing a failure.
[  197.510018][ T9113] name failslab, interval 1, probability 0, space 0, times 0
[  197.517667][ T9113] CPU: 1 UID: 0 PID: 9113 Comm: syz.5.990 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  197.517694][ T9113] Tainted: [L]=SOFTLOCKUP
[  197.517709][ T9113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  197.517718][ T9113] Call Trace:
[  197.517733][ T9113]  <TASK>
[  197.517739][ T9113]  dump_stack_lvl+0x100/0x190
[  197.517875][ T9113]  should_fail_ex.cold+0x5/0xa
[  197.517905][ T9113]  should_failslab+0xc2/0x120
[  197.517945][ T9113]  kmem_cache_alloc_noprof+0x91/0x6a0
[  197.517967][ T9113]  ? __thp_vma_allowable_orders+0x1d9/0xf00
[  197.517995][ T9113]  ? ptlock_alloc+0x1f/0x70
[  197.518017][ T9113]  ptlock_alloc+0x1f/0x70
[  197.518034][ T9113]  pte_alloc_one+0x82/0x3d0
[  197.518078][ T9113]  do_fault+0x86c/0x1750
[  197.518108][ T9113]  __handle_mm_fault+0x187d/0x2a00
[  197.518131][ T9113]  ? mt_find+0x45e/0x8e0
[  197.518226][ T9113]  ? __pfx___handle_mm_fault+0x10/0x10
[  197.518242][ T9113]  ? __pfx_mt_find+0x10/0x10
[  197.518271][ T9113]  ? __lock_acquire+0x49f/0x1a40
[  197.518295][ T9113]  ? pmdp_set_access_flags+0x12d/0x1a0
[  197.518318][ T9113]  handle_mm_fault+0x37b/0xa30
[  197.518339][ T9113]  __get_user_pages+0x1178/0x32a0
[  197.518374][ T9113]  ? __pfx___get_user_pages+0x10/0x10
[  197.518403][ T9113]  __gup_longterm_locked+0x87d/0x16f0
[  197.518434][ T9113]  ? __pfx___gup_longterm_locked+0x10/0x10
[  197.518470][ T9113]  pin_user_pages_remote+0xed/0x140
[  197.518496][ T9113]  ? __pfx_pin_user_pages_remote+0x10/0x10
[  197.518531][ T9113]  process_vm_rw_core.constprop.0+0x412/0x950
[  197.518566][ T9113]  ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10
[  197.518589][ T9113]  ? rcu_is_watching+0x12/0xc0
[  197.518612][ T9113]  ? trace_kmalloc+0xeb/0x110
[  197.518648][ T9113]  ? iovec_from_user+0xda/0x140
[  197.518739][ T9113]  process_vm_rw+0x226/0x2d0
[  197.518764][ T9113]  ? __pfx_process_vm_rw+0x10/0x10
[  197.518785][ T9113]  ? find_held_lock+0x2b/0x80
[  197.518813][ T9113]  ? rcu_read_lock_any_held+0x6a/0xa0
[  197.518861][ T9113]  ? fput+0x79/0x100
[  197.518885][ T9113]  ? ksys_write+0x1ac/0x250
[  197.518905][ T9113]  __ia32_sys_process_vm_readv+0xdf/0x1b0
[  197.518929][ T9113]  ? __do_fast_syscall_32+0x98/0x970
[  197.518953][ T9113]  ? lockdep_hardirqs_on+0x78/0x100
[  197.518976][ T9113]  __do_fast_syscall_32+0xe7/0x970
[  197.518999][ T9113]  ? lockdep_hardirqs_on+0x78/0x100
[  197.519022][ T9113]  do_fast_syscall_32+0x32/0x70
[  197.519046][ T9113]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  197.519069][ T9113] RIP: 0023:0xf7f17fec
[  197.519091][ T9113] Code: Unable to access opcode bytes at 0xf7f17fc2.
[  197.519114][ T9113] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 000000000000015b
[  197.519149][ T9113] RAX: ffffffffffffffda RBX: 00000000000001d5 RCX: 0000000080008400
[  197.519165][ T9113] RDX: 0000000000000002 RSI: 0000000080008640 RDI: 0000000000000286
[  197.519175][ T9113] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  197.519184][ T9113] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  197.519193][ T9113] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  197.519218][ T9113]  </TASK>
[  197.556897][ T9108] 8021q: adding VLAN 0 to HW filter on device bond14
[  197.940406][ T9142] netlink: 'syz.5.1000': attribute type 1 has an invalid length.
[  198.029701][ T9147] 9p: Bad value for 'rfdno'
[  198.077399][ T9142] 8021q: adding VLAN 0 to HW filter on device bond7
[  198.096367][ T9147] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  198.122754][ T9147] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  198.125332][ T9147] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  198.129012][ T9147] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  198.134235][ T9147] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  198.191865][ T9147] pci 0000:00:01.0: Adding to iommu group 1
[  198.208992][ T9147] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  198.211118][ T9147] pci 0000:00:01.0: vgaarb: bridge control possible
[  198.213185][ T9147] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  198.235422][ T9147] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  198.239393][ T9147] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  198.248381][ T9147] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  198.275506][ T9147] [drm] Found bochs VGA, ID 0xb0c5.
[  198.277467][ T9147] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  198.297028][ T5878] ------------[ cut here ]------------
[  198.300102][ T5878] pci 0000:00:01.0: [drm] vblank wait timed out on crtc 0
[  198.302262][ T5878] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x322/0x590, CPU#2: kworker/2:5/5878
[  198.306151][ T5878] Modules linked in:
[  198.308172][ T5878] CPU: 2 UID: 0 PID: 5878 Comm: kworker/2:5 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  198.311505][ T5878] Tainted: [L]=SOFTLOCKUP
[  198.312881][ T5878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  198.315976][ T5878] Workqueue: events drm_fb_helper_damage_work
[  198.318033][ T5878] RIP: 0010:drm_crtc_wait_one_vblank+0x328/0x590
[  198.324553][ T5878] Code: 48 8b 6b 50 48 85 ed 0f 84 dc 01 00 00 e8 10 1f 42 fc 48 89 df e8 88 03 91 00 48 89 c6 48 8d 3d 6e 30 66 0b 44 89 e9 48 89 ea <67> 48 0f b9 3a 44 89 ee 4c 89 e7 41 be 92 ff ff ff e8 52 f7 ff ff
[  198.330581][ T5878] RSP: 0018:ffffc9000692fa60 EFLAGS: 00010293
[  198.332544][ T5878] RAX: ffffffff8c436020 RBX: ffff88801330e0d0 RCX: 0000000000000000
[  198.335050][ T5878] RDX: ffff88802725f3a0 RSI: ffffffff8c436020 RDI: ffffffff912de150
[  198.337642][ T5878] RBP: ffff88802725f3a0 R08: 0000000000000005 R09: 0000000000000000
[  198.340158][ T5878] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888026c28000
[  198.342636][ T5878] R13: 0000000000000000 R14: 0000000000000000 R15: 000000000000000b
[  198.345157][ T5878] FS:  0000000000000000(0000) GS:ffff888096de7000(0000) knlGS:0000000000000000
[  198.348045][ T5878] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  198.350153][ T5878] CR2: 00000000f71d8b50 CR3: 00000000525d0000 CR4: 0000000000352ef0
[  198.352992][ T5878] Call Trace:
[  198.354062][ T5878]  <TASK>
[  198.355027][ T5878]  ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10
[  198.357586][ T5878]  ? __pfx_autoremove_wake_function+0x10/0x10
[  198.359511][ T5878]  ? lockdep_hardirqs_on+0x78/0x100
[  198.361273][ T5878]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  198.363116][ T5878]  ? drm_vblank_get+0x14f/0x2d0
[  198.364670][ T5878]  drm_client_modeset_wait_for_vblank+0xef/0x120
[  198.366825][ T5878]  drm_fb_helper_damage_work+0x2e2/0xab0
[  198.368633][ T5878]  ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[  198.370575][ T5878]  ? preempt_schedule_thunk+0x16/0x40
[  198.372297][ T5878]  process_one_work+0xa23/0x1940
[  198.373880][ T5878]  ? __pfx_process_one_work+0x10/0x10
[  198.375562][ T5878]  ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[  198.377602][ T5878]  worker_thread+0x5ef/0xe50
[  198.379010][ T5878]  ? __pfx_worker_thread+0x10/0x10
[  198.380449][ T5878]  ? kthread+0x13a/0x450
[  198.381799][ T5878]  ? __pfx_worker_thread+0x10/0x10
[  198.383419][ T5878]  kthread+0x370/0x450
[  198.384739][ T5878]  ? __pfx_kthread+0x10/0x10
[  198.386321][ T5878]  ret_from_fork+0x72b/0xd50
[  198.387809][ T5878]  ? __pfx_ret_from_fork+0x10/0x10
[  198.389479][ T5878]  ? rcu_is_watching+0x12/0xc0
[  198.390970][ T5878]  ? __switch_to+0x800/0x10f0
[  198.392489][ T5878]  ? __pfx_kthread+0x10/0x10
[  198.393979][ T5878]  ret_from_fork_asm+0x1a/0x30
[  198.395501][ T5878]  </TASK>
[  198.396633][ T5878] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  198.398997][ T5878] CPU: 2 UID: 0 PID: 5878 Comm: kworker/2:5 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  198.402381][ T5878] Tainted: [L]=SOFTLOCKUP
[  198.403750][ T5878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  198.406828][ T5878] Workqueue: events drm_fb_helper_damage_work
[  198.408733][ T5878] Call Trace:
[  198.409795][ T5878]  <TASK>
[  198.410741][ T5878]  dump_stack_lvl+0x100/0x190
[  198.412236][ T5878]  vpanic+0x552/0x970
[  198.413521][ T5878]  ? __pfx_vpanic+0x10/0x10
[  198.414970][ T5878]  panic+0xd1/0xe0
[  198.416170][ T5878]  ? __pfx_panic+0x10/0x10
[  198.417587][ T5878]  ? check_panic_on_warn+0x1f/0x90
[  198.419225][ T5878]  check_panic_on_warn.cold+0x19/0x34
[  198.420935][ T5878]  ? drm_crtc_wait_one_vblank+0x322/0x590
[  198.422729][ T5878]  __warn.cold+0x191/0x318
[  198.424173][ T5878]  __report_bug+0x30f/0x440
[  198.425605][ T5878]  ? drm_crtc_wait_one_vblank+0x322/0x590
[  198.427394][ T5878]  ? __pfx___report_bug+0x10/0x10
[  198.429015][ T5878]  ? report_bug_entry+0x9d/0x290
[  198.430612][ T5878]  report_bug_entry+0xe1/0x290
[  198.432136][ T5878]  ? drm_crtc_wait_one_vblank+0x328/0x590
[  198.433922][ T5878]  handle_bug+0x1cd/0x2a0
[  198.435296][ T5878]  exc_invalid_op+0x17/0x50
[  198.436751][ T5878]  asm_exc_invalid_op+0x1a/0x20
[  198.438301][ T5878] RIP: 0010:drm_crtc_wait_one_vblank+0x328/0x590
[  198.440313][ T5878] Code: 48 8b 6b 50 48 85 ed 0f 84 dc 01 00 00 e8 10 1f 42 fc 48 89 df e8 88 03 91 00 48 89 c6 48 8d 3d 6e 30 66 0b 44 89 e9 48 89 ea <67> 48 0f b9 3a 44 89 ee 4c 89 e7 41 be 92 ff ff ff e8 52 f7 ff ff
[  198.446301][ T5878] RSP: 0018:ffffc9000692fa60 EFLAGS: 00010293
[  198.448220][ T5878] RAX: ffffffff8c436020 RBX: ffff88801330e0d0 RCX: 0000000000000000
[  198.450682][ T5878] RDX: ffff88802725f3a0 RSI: ffffffff8c436020 RDI: ffffffff912de150
[  198.453159][ T5878] RBP: ffff88802725f3a0 R08: 0000000000000005 R09: 0000000000000000
[  198.455622][ T5878] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888026c28000
[  198.458098][ T5878] R13: 0000000000000000 R14: 0000000000000000 R15: 000000000000000b
[  198.460582][ T5878]  ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10
[  198.462460][ T5878]  ? __pfx_autoremove_wake_function+0x10/0x10
[  198.464424][ T5878]  ? lockdep_hardirqs_on+0x78/0x100
[  198.466023][ T5878]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  198.467790][ T5878]  ? drm_vblank_get+0x14f/0x2d0
[  198.469371][ T5878]  drm_client_modeset_wait_for_vblank+0xef/0x120
[  198.471328][ T5878]  drm_fb_helper_damage_work+0x2e2/0xab0
[  198.473046][ T5878]  ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[  198.474989][ T5878]  ? preempt_schedule_thunk+0x16/0x40
[  198.476621][ T5878]  process_one_work+0xa23/0x1940
[  198.478129][ T5878]  ? __pfx_process_one_work+0x10/0x10
[  198.479727][ T5878]  ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[  198.481625][ T5878]  worker_thread+0x5ef/0xe50
[  198.483102][ T5878]  ? __pfx_worker_thread+0x10/0x10
[  198.484721][ T5878]  ? kthread+0x13a/0x450
[  198.486066][ T5878]  ? __pfx_worker_thread+0x10/0x10
[  198.487721][ T5878]  kthread+0x370/0x450
[  198.489044][ T5878]  ? __pfx_kthread+0x10/0x10
[  198.490524][ T5878]  ret_from_fork+0x72b/0xd50
[  198.492008][ T5878]  ? __pfx_ret_from_fork+0x10/0x10
[  198.493617][ T5878]  ? rcu_is_watching+0x12/0xc0
[  198.495143][ T5878]  ? __switch_to+0x800/0x10f0
[  198.496637][ T5878]  ? __pfx_kthread+0x10/0x10
[  198.498100][ T5878]  ret_from_fork_asm+0x1a/0x30
[  198.499619][ T5878]  </TASK>
[  198.501193][ T5878] Kernel Offset: disabled
[  198.502571][ T5878] Rebooting in 86400 seconds..