last executing test programs:

5.581656308s ago: executing program 0 (id=3857):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x2000000068ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202})
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x100000, 0x0, 0x10, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0xffffffff, 0x10000, 0xa, 0x5, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xe6ee2000, 0x3000, 0xc, 0x0, 0x8, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0x1ffe, 0xeee96000, 0xa, 0x0, 0x1, 0xa6, 0x9, 0x0, 0x8, 0x10, 0x7, 0x4}, {0xf000, 0x4000, 0xe, 0x0, 0x0, 0x4, 0x8, 0xfd, 0x0, 0x3c}, {0x8000000, 0x0, 0xb, 0x8, 0x5, 0x83, 0x0, 0x0, 0x3, 0xff, 0x1}, {0x1ffe, 0xeeee0000, 0xa, 0x4, 0x0, 0x5, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x81a0002, 0x6000, 0xb, 0x0, 0x0, 0x5, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x41000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x134, 0xd, 0x0, 0x0, [0x80000005, 0x8, 0x1]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.084465651s ago: executing program 3 (id=3861):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x82000, 0x0)
ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000240)={0x29, 0x2})
r1 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x42300, 0x0)
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e0c0b1c20"], 0xf)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x0, &(0x7f0000000200)=0xa9, 0x4)
ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82187201, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r3 = socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$can_raw(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x10)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000100)={0xeb, 0x0, [{0x1, 0x0, 0x5, 0x7, 0x800, 0x7fffffff, 0x2}]})
ioctl$KVM_GET_CPUID2(r6, 0xc008ae91, &(0x7f0000000000))
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000002)
r7 = socket$nl_crypto(0x10, 0x3, 0x15)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(r8, 0x0, 0x29, 0x0, 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2aa0800756d31f7ad9d757e040290e0000002000100010000000000000000"], 0x0)
sendmsg$nl_crypto(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="e0000000130001002abd7000fbdbdf2561656769733132382d6165736e6900000000000000000000000000000000000000000000000000c720db9238d5c41a00000000000000000000000000000000002000"/118], 0xe0}, 0x1, 0x0, 0x0, 0x40801}, 0x10)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000001c0)=0x8000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x1b}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x8e}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r9 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80800)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[<r10=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[<r11=>0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r9, 0xc01064ab, &(0x7f0000000000)={0x100000000, r11, r10})

5.002879187s ago: executing program 0 (id=3863):
r0 = syz_open_pts(0xffffffffffffffff, 0x400000)
futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0x1)
ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x9840)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008)
socket$inet6_sctp(0xa, 0x801, 0x84)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r6=>0x0}, &(0x7f0000000000)=0x8)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r6}, &(0x7f0000000080)=0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
fsetxattr$security_ima(r9, &(0x7f0000000000), &(0x7f0000000740)=ANY=[@ANYBLOB="0634fdc242"], 0xfce7, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r9, 0x1000)
ioperm(0xe, 0x9, 0x20)
r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

3.950062843s ago: executing program 2 (id=3867):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r1)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001540)=ANY=[@ANYBLOB="00800800", @ANYRES16=r2, @ANYBLOB="919b2cbd7000fedbdf25010000000400030004000280"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1d, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r6, r4, 0x25, 0x2, @val=@iter={&(0x7f0000000400), 0x10}}, 0x18)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000080)=0x4000000)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)

3.901601693s ago: executing program 0 (id=3868):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRES8=r0, @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xa043}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4054)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000c40), 0x12)
syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r5=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r5, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
recvfrom$inet(r6, 0x0, 0x0, 0x2, 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x7fffffff, 0xffffffff, 0x7fff, 0x7fff, 0x3})

3.843975432s ago: executing program 2 (id=3869):
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x100)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000300)="7bc53b609a0cbd719cf94f13e36a7c05f239ac1c05e43583b0a51224bc4d4025d4dfba49", 0x24, r0}, 0x64)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
socket(0x2d, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04380aaaaaaaaaaa10d5590000"], 0xd)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, 0x0, 0x7, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xba18}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xa}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xca}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}]}, 0x60}}, 0x48040)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4)
timer_create(0x0, 0x0, 0x0)
syz_open_dev$vim2m(0x0, 0x20023, 0x2)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03000000ac04ef8dac52dc629c04000000040000000a000000c1865fe0c76a548e49ae9e19", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020}, 0x2020)
ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x21)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')

3.781431092s ago: executing program 3 (id=3870):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r2=>0x0})
sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x40000)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0)
r3 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fsmount(r3, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x2200, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000580)={0x1, 0x0, [{0xc0000101, 0x0, 0x800000000009}]})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000002100010326bd7078fadbdf2505"], 0x14}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r8 = syz_usb_connect$cdc_ncm(0x5, 0xa4, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x2, 0x1, 0x9, 0xd0, 0x1, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "a7be251fed0d"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1, 0x3}, {0x6, 0x24, 0x1a, 0x4, 0x1d}, [@dmm={0x7, 0x24, 0x14, 0x1, 0x3}, @dmm={0x7, 0x24, 0x14, 0x3, 0x7}, @obex={0x5, 0x24, 0x15, 0x6}, @mbim={0xc, 0x24, 0x1b, 0xa, 0x40, 0x3, 0x3, 0x7, 0x1}, @mbim={0xc, 0x24, 0x1b, 0xfffe, 0x4, 0x7, 0xa1, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xf7}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x40, 0x8, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0xd4, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x9, 0x0, 0x57}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x2, 0xf3, 0x23, 0xff, 0xf7}, 0x90, &(0x7f00000001c0)={0x5, 0xf, 0x90, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0xff, 0x7, 0xfff}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x9, 0x7, 0xa}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xfa, "7aaa88717b5da2c9d2e10b74a6a2e018"}, @generic={0x60, 0x10, 0x2, "498bd3d60de5892a015e1a00c20d264c4033c785675adc88f8d53d37aea26450d5f14c075fca65b1f136420bc88c11e9039efaddc2e6f1bab63c1c8af79e128806a63e5ee6c786c2ee41df213304dfb7d790771b5789a501a56c0fb34f"}]}, 0x8, [{0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="4a03c16c02d2addc6b636736edf279b230f6be67939241888166d1bb6721ab740789c51ae6ad185c4eb30919b2e16e1f235265f54256dd25ec1cec6005a9ab945a23526bc7cc3ce86998"]}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x5b, &(0x7f0000000340)=@string={0x5b, 0x3, "c923b0443f8ab38465979277459f77a2f3884bc0833e1576fa6d507a9f344f2041195b36f81039103244d5da91f81a3478348eb75662cce0e0963a474c97f98261c06cb30b0f945077b2f10d3cb2835471f65dcd9b22d70040"}}, {0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="3f03ca700cac26a7fd9ff1b05d085311f8f39f0ff124da90cafa0e6b87a11e6a69e89334377195c0d308f7eb83cfa0cde9ade8c4b252f38ffd9d0c3c144011"]}, {0xd4, &(0x7f0000000400)=@string={0xd4, 0x3, "efbc300605c49af5920235dc3adae10583c6e0246d9fa86cfb38f7e37575983bc9aea1182abab76b9aa821f9dc2380920d55ed63b8c9e2d0f33bb486fed8f27ffde467ad438ba70dd7ec691f623a1778b43f8fa87c36dc8b7affa136ee5549590e4682620a3b818198cc266e32e3d26dd85ffa1267aeb4bd96ecef2f9dadb46668db44e29e9144f34449a11be05bb41b6ef30c2393c069fd53b703b34b6edc86332eba40082fb4458f11316015583e5365babda70302c6ce230ece3e2922825b2611feccb13472da9922d3153c708fdc3e59"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x459}}, {0x65, &(0x7f00000005c0)=@string={0x65, 0x3, "6898ae404b0331eb4548241bff3a2164098a2b8ef13fcd9e176e1969dedd13f3843afd802bd98de976858ae476dcce1c88c6c9168f30c6f90f93c44202861a15cc082d3b01f6977eaa33e79a47c64a8988d10e6b7ddcabedaea671ae0bc5271f8dea17"}}]})
syz_usb_control_io$cdc_ncm(r8, &(0x7f0000000740)={0xc, &(0x7f00000006c0)={0x20, 0x6, 0x2d, {0x2d, 0x7, "0679e9ecf91f6eff1a12a7efd097184e7edb499b2e4ec047e32b041b7a48540fe7a7e5e8ceba18e8e514c8"}}, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a00)={0x24, &(0x7f0000000780)={0x20, 0x30, 0x3e, "b43e2b82c1f1fbfbdff8fc5efc8289007f067d64356200b8ac85eab3bdac5ee0c900d89ff6877cf1984d2e867d73082bfcf3012ede6deb438d7a5288a561"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000008c0)={0x20, 0x80, 0x1c, {0x3, 0xb55, 0x19fc, 0x7, 0x5, 0x5, 0x3, 0x8, 0x3646, 0x4, 0xffff, 0x3}}, &(0x7f0000000900)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000940)={0x20, 0x83, 0x2}, &(0x7f0000000980)={0x20, 0x87, 0x2, 0x1}, &(0x7f00000009c0)={0x20, 0x89, 0x2}})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000a80)={'vxcan1\x00'})
syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x40)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r10, r9, 0x2f}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)

3.023684383s ago: executing program 2 (id=3871):
r0 = socket(0x10, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
write(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uac1.usb0/p_chmask\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1fe)
symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, 0x0)
write$vga_arbiter(r5, &(0x7f0000000240), 0xf)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0x82, 0x9, 0x3, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x7, 0x80, 0x3, 0x1}})

2.994812847s ago: executing program 0 (id=3872):
r0 = socket(0x10, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
write(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uac1.usb0/p_chmask\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1fe)
symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, 0x0)
write$vga_arbiter(r5, &(0x7f0000000240), 0xf)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0x82, 0x9, 0x3, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x7, 0x80, 0x3, 0x1}})

2.196467506s ago: executing program 1 (id=3874):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x10, 0x6, 0x4f0, 0x428, 0x428, 0x340, 0x258, 0x258, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'virt_wifi0\x00', 'veth0_to_bond\x00', {}, {}, 0x3a}, 0x0, 0xa4, 0xc8, 0x0, {0x7a00000000000000}}, @HL={0x24}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0xffffffff], [], 'pimreg\x00', 'veth1_macvtap\x00', {}, {}, 0x0, 0x25, 0x7}, 0x0, 0xa4, 0xc8}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x6}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0xffffffff, 0xff], [0xffffff00, 0xffffffff, 0xff, 0xff000000], 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x5, 0x22}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private1, [0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffffff, 0x0, 0xff], 'dvmrp1\x00', 'netpci0\x00', {}, {0xff}, 0x0, 0x9, 0x4, 0x13}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv4=@remote, 0x15, 0x39, 0x7}}}, {{@ipv6={@private1, @loopback, [0xff, 0x0, 0x0, 0xffffff00], [0xffffff00, 0xff000000, 0xffffff00, 0xff], 'bond_slave_0\x00', 'erspan0\x00', {0xff}, {}, 0x2b, 0x3, 0x0, 0x20}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@multicast1, 0x80, 0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x54c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001}, 0x44004)

2.104141974s ago: executing program 1 (id=3875):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs/usb/devices\x00', 0x0, 0x0)
lseek(r1, 0x408caf, 0x2)
r2 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)}], 0x1}, 0x48043)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080)

2.014727581s ago: executing program 1 (id=3876):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
r0 = fcntl$getown(0xffffffffffffffff, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, &(0x7f0000000240)="cd742d85ea", 0x0}, 0x4c)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}]}], {0x14}}, 0x84}}, 0x4048010)
sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x4c, r6, 0x20, 0x1, 0x0, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x42}}}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x1d, 0x5b, "9212aafc2be381c21b1bcc9c0f5b6496d9f07159ddf948b924"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0xd0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r12=>0x0})
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r14, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x14, r4, 0x1, 0x0, 0x0, {{0x8}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

1.998182062s ago: executing program 2 (id=3877):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r1)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001540)=ANY=[@ANYBLOB="00800800", @ANYRES16=r2, @ANYBLOB="919b2cbd7000fedbdf25010000000400030004000280"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1d, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r6, r4, 0x25, 0x2, @val=@iter={&(0x7f0000000400), 0x10}}, 0x18)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000080)=0x4000000)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)

1.897977238s ago: executing program 2 (id=3878):
r0 = syz_open_pts(0xffffffffffffffff, 0x400000)
futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0x1)
ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x9840)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008)
socket$inet6_sctp(0xa, 0x801, 0x84)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r6=>0x0}, &(0x7f0000000000)=0x8)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r6}, &(0x7f0000000080)=0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
fsetxattr$security_ima(r9, &(0x7f0000000000), &(0x7f0000000740)=ANY=[@ANYBLOB="0634fdc242"], 0xfce7, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r9, 0x1000)
ioperm(0xe, 0x9, 0x20)
r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

1.841313773s ago: executing program 1 (id=3879):
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x100)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000300)="7bc53b609a0cbd719cf94f13e36a7c05f239ac1c05e43583b0a51224bc4d4025d4df", 0x22, r0}, 0x64)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
socket(0x2d, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04380aaaaaaaaaaa10d5590000"], 0xd)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, 0x0, 0x7, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xba18}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xa}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xca}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}]}, 0x60}}, 0x48040)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4)
timer_create(0x0, 0x0, 0x0)
syz_open_dev$vim2m(0x0, 0x20023, 0x2)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03000000ac04ef8dac52dc629c04000000040000000a000000c1865fe0c76a548e49ae9e19", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020}, 0x2020)
ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x21)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')

1.543930701s ago: executing program 0 (id=3880):
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x100)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000300)="7bc53b609a0cbd719cf94f13e36a7c05f239ac1c05e43583b0a51224bc4d4025d4dfba49", 0x24, r0}, 0x64)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
socket(0x2d, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04380aaaaaaaaaaa10d5590000"], 0xd)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, 0x0, 0x7, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xba18}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xa}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xca}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}]}, 0x60}}, 0x48040)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4)
timer_create(0x0, 0x0, 0x0)
syz_open_dev$vim2m(0x0, 0x20023, 0x2)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03000000ac04ef8dac52dc629c04000000040000000a000000c1865fe0c76a548e49ae9e19", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020}, 0x2020)
ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x21)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')

1.383699412s ago: executing program 3 (id=3881):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRES8=r0, @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xa043}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4054)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9)
r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000c40), 0x12)
syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r5=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r5, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
recvfrom$inet(r6, 0x0, 0x0, 0x2, 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x7fffffff, 0xffffffff, 0x7fff, 0x7fff, 0x3})

733.780967ms ago: executing program 2 (id=3882):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r2=>0x0})
sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x40000)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0)
r3 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fsmount(r3, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x2200, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000580)={0x1, 0x0, [{0xc0000101, 0x0, 0x800000000009}]})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000002100010326bd7078fadbdf2505"], 0x14}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r8 = syz_usb_connect$cdc_ncm(0x5, 0xa4, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x2, 0x1, 0x9, 0xd0, 0x1, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "a7be251fed0d"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1, 0x3}, {0x6, 0x24, 0x1a, 0x4, 0x1d}, [@dmm={0x7, 0x24, 0x14, 0x1, 0x3}, @dmm={0x7, 0x24, 0x14, 0x3, 0x7}, @obex={0x5, 0x24, 0x15, 0x6}, @mbim={0xc, 0x24, 0x1b, 0xa, 0x40, 0x3, 0x3, 0x7, 0x1}, @mbim={0xc, 0x24, 0x1b, 0xfffe, 0x4, 0x7, 0xa1, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xf7}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x40, 0x8, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0xd4, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x9, 0x0, 0x57}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x2, 0xf3, 0x23, 0xff, 0xf7}, 0x90, &(0x7f00000001c0)={0x5, 0xf, 0x90, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0xff, 0x7, 0xfff}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x9, 0x7, 0xa}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xfa, "7aaa88717b5da2c9d2e10b74a6a2e018"}, @generic={0x60, 0x10, 0x2, "498bd3d60de5892a015e1a00c20d264c4033c785675adc88f8d53d37aea26450d5f14c075fca65b1f136420bc88c11e9039efaddc2e6f1bab63c1c8af79e128806a63e5ee6c786c2ee41df213304dfb7d790771b5789a501a56c0fb34f"}]}, 0x8, [{0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="4a03c16c02d2addc6b636736edf279b230f6be67939241888166d1bb6721ab740789c51ae6ad185c4eb30919b2e16e1f235265f54256dd25ec1cec6005a9ab945a23526bc7cc3ce86998"]}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x5b, &(0x7f0000000340)=@string={0x5b, 0x3, "c923b0443f8ab38465979277459f77a2f3884bc0833e1576fa6d507a9f344f2041195b36f81039103244d5da91f81a3478348eb75662cce0e0963a474c97f98261c06cb30b0f945077b2f10d3cb2835471f65dcd9b22d70040"}}, {0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="3f03ca700cac26a7fd9ff1b05d085311f8f39f0ff124da90cafa0e6b87a11e6a69e89334377195c0d308f7eb83cfa0cde9ade8c4b252f38ffd9d0c3c144011"]}, {0xd4, &(0x7f0000000400)=@string={0xd4, 0x3, "efbc300605c49af5920235dc3adae10583c6e0246d9fa86cfb38f7e37575983bc9aea1182abab76b9aa821f9dc2380920d55ed63b8c9e2d0f33bb486fed8f27ffde467ad438ba70dd7ec691f623a1778b43f8fa87c36dc8b7affa136ee5549590e4682620a3b818198cc266e32e3d26dd85ffa1267aeb4bd96ecef2f9dadb46668db44e29e9144f34449a11be05bb41b6ef30c2393c069fd53b703b34b6edc86332eba40082fb4458f11316015583e5365babda70302c6ce230ece3e2922825b2611feccb13472da9922d3153c708fdc3e59"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x459}}, {0x65, &(0x7f00000005c0)=@string={0x65, 0x3, "6898ae404b0331eb4548241bff3a2164098a2b8ef13fcd9e176e1969dedd13f3843afd802bd98de976858ae476dcce1c88c6c9168f30c6f90f93c44202861a15cc082d3b01f6977eaa33e79a47c64a8988d10e6b7ddcabedaea671ae0bc5271f8dea17"}}]})
syz_usb_control_io$cdc_ncm(r8, &(0x7f0000000740)={0xc, &(0x7f00000006c0)={0x20, 0x6, 0x2d, {0x2d, 0x7, "0679e9ecf91f6eff1a12a7efd097184e7edb499b2e4ec047e32b041b7a48540fe7a7e5e8ceba18e8e514c8"}}, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a00)={0x24, &(0x7f0000000780)={0x20, 0x30, 0x3e, "b43e2b82c1f1fbfbdff8fc5efc8289007f067d64356200b8ac85eab3bdac5ee0c900d89ff6877cf1984d2e867d73082bfcf3012ede6deb438d7a5288a561"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000008c0)={0x20, 0x80, 0x1c, {0x3, 0xb55, 0x19fc, 0x7, 0x5, 0x5, 0x3, 0x8, 0x3646, 0x4, 0xffff, 0x3}}, &(0x7f0000000900)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000940)={0x20, 0x83, 0x2}, &(0x7f0000000980)={0x20, 0x87, 0x2, 0x1}, &(0x7f00000009c0)={0x20, 0x89, 0x2}})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000a80)={'vxcan1\x00'})
syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x40)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r10, r9, 0x2f}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)

466.76319ms ago: executing program 3 (id=3883):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x44080}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x4)
write(r1, &(0x7f0000000000)='3', 0x4e)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

362.013976ms ago: executing program 3 (id=3884):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, r3)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'})
sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, 0x0, 0x24000890)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x20}}, 0x80)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0xc000)

256.075032ms ago: executing program 3 (id=3885):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r1)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = userfaultfd(0x80001)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x109482, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11)
write$tcp_mem(r5, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ecfff4001000130720000000fedbdf25e0000001000000000000000000000000ac1414bb00000000000000baa1b38b195d09e82e0000000000000400ff4e210002400021000000deb82f1cc20000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e000000200000000000000000000000000000000000000000000000000000000020000000000000009000000000000000d00000000000000000000000000000001000080000000004305000000000000040000000000000000000000000000800000000000000000fdffffffffffffff0000000000000000020000002cbd700003350000020000004d000000"], 0xec}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10)
write$cgroup_int(r6, &(0x7f0000000180)=0xfe5f, 0x12)
set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00001a1000/0x3000)=nil, 0x3000}, 0x2})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700))
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05042bbd7000fedbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000001065f8e30600000000000000616462616c616e636500"], 0x60}, 0x1, 0x0, 0x0, 0x4000445}, 0x44084)

237.365972ms ago: executing program 0 (id=3886):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x8, 0x242000)
ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000100))
ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000140)={0x0, 0xffff, 0x0, 0x0, <r2=>0x0})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x20040084)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0xf870, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x9, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x7fff, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r8, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0xfff7, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x86, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x9, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r9 = socket(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000200)={0x0, 0xffff, 0x0, 0x0, <r10=>r2})
sched_setscheduler(r10, 0x6, &(0x7f00000001c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x400000009)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xa)

188.597703ms ago: executing program 1 (id=3887):
lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0)

0s ago: executing program 1 (id=3888):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x130)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
fgetxattr(r2, 0x0, 0x0, 0x0)
write(r1, 0x0, 0x0)

kernel console output (not intermixed with test programs):

itizer_cov_trace_switch+0x54/0x90
[  868.408937][T18369]  bpf_prog_load+0x49e/0x2a80
[  868.408955][T18369]  ? __lock_acquire+0x5c0/0x1f40
[  868.408983][T18369]  ? __pfx_bpf_prog_load+0x10/0x10
[  868.409030][T18369]  __sys_bpf+0x1f46/0x4a30
[  868.409056][T18369]  ? do_anonymous_page+0x1f70/0x2050
[  868.409076][T18369]  ? __pfx___sys_bpf+0x10/0x10
[  868.409095][T18369]  ? rcu_is_watching+0x13/0xc0
[  868.409110][T18369]  ? __handle_mm_fault+0x4ec/0x2f60
[  868.409122][T18369]  ? __lock_acquire+0x5c0/0x1f40
[  868.409139][T18369]  ? __css_rstat_updated+0x1ce/0x590
[  868.409156][T18369]  ? __pfx___handle_mm_fault+0x10/0x10
[  868.409167][T18369]  ? __pfx___css_rstat_updated+0x10/0x10
[  868.409194][T18369]  ? count_memcg_events_mm.constprop.0+0x109/0x2a0
[  868.409209][T18369]  ? find_held_lock+0x2b/0x80
[  868.409221][T18369]  ? exc_page_fault+0x6f/0xd0
[  868.409233][T18369]  ? exc_page_fault+0x6f/0xd0
[  868.409247][T18369]  ? __ia32_sys_bpf+0xcc/0x170
[  868.409260][T18369]  __ia32_sys_bpf+0xcc/0x170
[  868.409289][T18369]  ? __do_fast_syscall_32+0xb3/0x8b0
[  868.409308][T18369]  __do_fast_syscall_32+0x13a/0x8b0
[  868.409324][T18369]  do_fast_syscall_32+0x32/0x70
[  868.409338][T18369]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  868.409352][T18369] RIP: 0023:0xf704efec
[  868.409365][T18369] Code: Unable to access opcode bytes at 0xf704efc2.
[  868.409370][T18369] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  868.409382][T18369] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000380
[  868.409389][T18369] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000
[  868.409395][T18369] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  868.409402][T18369] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  868.409409][T18369] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  868.409422][T18369]  </TASK>
[  868.409441][T18369] syz.3.3533: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  868.409477][T18369] CPU: 3 UID: 0 PID: 18369 Comm: syz.3.3533 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  868.409492][T18369] Tainted: [L]=SOFTLOCKUP
[  868.409496][T18369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  868.409503][T18369] Call Trace:
[  868.409507][T18369]  <TASK>
[  868.409511][T18369]  dump_stack_lvl+0x100/0x190
[  868.409542][T18369]  warn_alloc.cold+0x9e/0xb2
[  868.409554][T18369]  ? __pfx_warn_alloc+0x10/0x10
[  868.409566][T18369]  ? __kasan_kmalloc+0x8a/0xb0
[  868.409586][T18369]  ? __get_vm_area_node+0x22b/0x350
[  868.409605][T18369]  __vmalloc_node_range_noprof+0xfa2/0x1420
[  868.409622][T18369]  ? process_measurement+0x4c8/0x2350
[  868.409639][T18369]  ? down_write+0x146/0x1f0
[  868.409654][T18369]  ? up_write+0x2dc/0x5b0
[  868.409666][T18369]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  868.409685][T18369]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  868.409702][T18369]  ? __lock_acquire+0x5c0/0x1f40
[  868.409722][T18369]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  868.409739][T18369]  __vmalloc_node_noprof+0xad/0xf0
[  868.409755][T18369]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  868.409773][T18369]  __vmalloc_noprof+0xa3/0x120
[  868.409793][T18369]  ? __pfx___vmalloc_noprof+0x10/0x10
[  868.409811][T18369]  ? lock_acquire+0x1d1/0x380
[  868.409827][T18369]  ? rcu_is_watching+0x13/0xc0
[  868.409840][T18369]  ? apparmor_capable+0x1d7/0x4d0
[  868.409858][T18369]  bpf_prog_alloc_no_stats+0x58/0x690
[  868.409874][T18369]  ? security_capable+0x80/0x260
[  868.409891][T18369]  bpf_prog_alloc+0x3b/0x200
[  868.409906][T18369]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  868.409923][T18369]  bpf_prog_load+0x49e/0x2a80
[  868.409940][T18369]  ? __lock_acquire+0x5c0/0x1f40
[  868.409958][T18369]  ? __pfx_bpf_prog_load+0x10/0x10
[  868.409986][T18369]  __sys_bpf+0x1f46/0x4a30
[  868.410001][T18369]  ? do_anonymous_page+0x1f70/0x2050
[  868.410012][T18369]  ? __pfx___sys_bpf+0x10/0x10
[  868.410028][T18369]  ? rcu_is_watching+0x13/0xc0
[  868.410044][T18369]  ? __handle_mm_fault+0x4ec/0x2f60
[  868.410056][T18369]  ? __lock_acquire+0x5c0/0x1f40
[  868.410076][T18369]  ? __css_rstat_updated+0x1ce/0x590
[  868.410101][T18369]  ? __pfx___handle_mm_fault+0x10/0x10
[  868.410122][T18369]  ? __pfx___css_rstat_updated+0x10/0x10
[  868.410165][T18369]  ? count_memcg_events_mm.constprop.0+0x109/0x2a0
[  868.410190][T18369]  ? find_held_lock+0x2b/0x80
[  868.410205][T18369]  ? exc_page_fault+0x6f/0xd0
[  868.410217][T18369]  ? exc_page_fault+0x6f/0xd0
[  868.410231][T18369]  ? __ia32_sys_bpf+0xcc/0x170
[  868.410243][T18369]  __ia32_sys_bpf+0xcc/0x170
[  868.410257][T18369]  ? __do_fast_syscall_32+0xb3/0x8b0
[  868.410272][T18369]  __do_fast_syscall_32+0x13a/0x8b0
[  868.410290][T18369]  do_fast_syscall_32+0x32/0x70
[  868.410305][T18369]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  868.410319][T18369] RIP: 0023:0xf704efec
[  868.410330][T18369] Code: Unable to access opcode bytes at 0xf704efc2.
[  868.410335][T18369] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  868.410346][T18369] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000380
[  868.410352][T18369] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000
[  868.410359][T18369] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  868.410365][T18369] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  868.410372][T18369] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  868.410385][T18369]  </TASK>
[  868.411880][T18369] Mem-Info:
[  868.411889][T18369] active_anon:3998 inactive_anon:1177 isolated_anon:25
[  868.411889][T18369]  active_file:5141 inactive_file:19951 isolated_file:51
[  868.411889][T18369]  unevictable:1000 dirty:324 writeback:0
[  868.411889][T18369]  slab_reclaimable:7173 slab_unreclaimable:74628
[  868.411889][T18369]  mapped:27364 shmem:3899 pagetables:1355
[  868.411889][T18369]  sec_pagetables:321 bounce:0
[  868.411889][T18369]  kernel_misc_reclaimable:0
[  868.411889][T18369]  free:36970 free_pcp:7692 free_cma:0
[  868.411916][T18369] Node 0 active_anon:36kB inactive_anon:200kB active_file:76kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:4kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8800kB pagetables:1208kB sec_pagetables:1124kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  868.411943][T18369] Node 1 active_anon:15956kB inactive_anon:4508kB active_file:20588kB inactive_file:79736kB unevictable:4000kB isolated(anon):100kB isolated(file):204kB mapped:109428kB dirty:1296kB writeback:0kB shmem:15592kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6404kB pagetables:4212kB sec_pagetables:160kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  868.411971][T18369] Node 0 DMA free:3448kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  868.412001][T18369] lowmem_reserve[]: 0 278 278 278 278
[  868.412021][T18369] Node 0 DMA32 free:22148kB boost:10240kB min:22864kB low:26020kB high:29176kB reserved_highatomic:0kB free_highatomic:0kB active_anon:36kB inactive_anon:196kB active_file:76kB inactive_file:68kB unevictable:0kB writepending:0kB zspages:1760kB present:1032196kB managed:284792kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  868.412051][T18369] lowmem_reserve[]: 0 0 0 0 0
[  868.412069][T18369] Node 1 DMA32 free:122284kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:15956kB inactive_anon:4508kB active_file:20588kB inactive_file:79736kB unevictable:4000kB writepending:1296kB zspages:9468kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:30824kB local_pcp:10752kB free_cma:0kB
[  868.412114][T18369] lowmem_reserve[]: 0 0 0 0 0
[  868.412142][T18369] Node 0 DMA: 134*4kB (UE) 70*8kB (UE) 31*16kB (UE) 36*32kB (UE) 7*64kB (UE) 0*128kB 1*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3448kB
[  868.412314][T18369] Node 0 DMA32: 861*4kB (UME) 222*8kB (UME) 94*16kB (UME) 92*32kB (UME) 51*64kB (ME) 14*128kB (ME) 5*256kB (UM) 8*512kB (M) 2*1024kB (M) 0*2048kB 0*4096kB = 22148kB
[  868.412394][T18369] Node 1 DMA32: 1683*4kB (ME) 658*8kB (UME) 515*16kB (UME) 342*32kB (UME) 210*64kB (ME) 120*128kB (ME) 95*256kB (UME) 34*512kB (UME) 12*1024kB (UM) 2*2048kB (U) 1*4096kB (U) = 122188kB
[  868.412480][T18369] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  868.412489][T18369] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  868.412497][T18369] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  868.412506][T18369] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  868.412514][T18369] 30403 total pagecache pages
[  868.412518][T18369] 1338 pages in swap cache
[  868.412522][T18369] Free swap  = 32980kB
[  868.412526][T18369] Total swap = 124996kB
[  868.412530][T18369] 524155 pages RAM
[  868.412534][T18369] 0 pages HighMem/MovableOnly
[  868.412538][T18369] 212065 pages reserved
[  868.412542][T18369] 0 pages cma reserved
[  869.572708][ T1438] ieee802154 phy0 wpan0: encryption failed: -22
[  869.584732][ T1438] ieee802154 phy1 wpan1: encryption failed: -22
[  870.941835][T18392] team0: Device ipip0 is up. Set it down before adding it as a team port
[  870.971757][T18394] FAULT_INJECTION: forcing a failure.
[  870.971757][T18394] name failslab, interval 1, probability 0, space 0, times 0
[  870.971807][T18394] CPU: 0 UID: 0 PID: 18394 Comm: syz.0.3542 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  870.971833][T18394] Tainted: [L]=SOFTLOCKUP
[  870.971841][T18394] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  870.971852][T18394] Call Trace:
[  870.971859][T18394]  <TASK>
[  870.971868][T18394]  dump_stack_lvl+0x100/0x190
[  870.971899][T18394]  should_fail_ex.cold+0x5/0xa
[  870.971924][T18394]  should_failslab+0xc2/0x120
[  870.971952][T18394]  __kmalloc_noprof+0xfc/0x840
[  870.971978][T18394]  ? tomoyo_encode2+0xfb/0x3c0
[  870.972005][T18394]  tomoyo_encode2+0xfb/0x3c0
[  870.972030][T18394]  tomoyo_encode+0x29/0x50
[  870.972051][T18394]  tomoyo_realpath_from_path+0x18c/0x690
[  870.972101][T18394]  tomoyo_path_number_perm+0x23c/0x580
[  870.972121][T18394]  ? tomoyo_path_number_perm+0x22e/0x580
[  870.972142][T18394]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  870.972161][T18394]  ? get_pid_task+0x106/0x250
[  870.972187][T18394]  ? __lock_acquire+0x5c0/0x1f40
[  870.972224][T18394]  ? __fget_files+0x34/0x3d0
[  870.972270][T18394]  ? find_held_lock+0x2b/0x80
[  870.972290][T18394]  ? __fget_files+0x215/0x3d0
[  870.972310][T18394]  ? hook_file_ioctl_common+0x140/0x440
[  870.972328][T18394]  ? __fget_files+0x215/0x3d0
[  870.972353][T18394]  ? __fget_files+0x21f/0x3d0
[  870.972379][T18394]  security_file_ioctl_compat+0xd3/0x230
[  870.972401][T18394]  __ia32_compat_sys_ioctl+0xc2/0x360
[  870.972426][T18394]  __do_fast_syscall_32+0x13a/0x8b0
[  870.972450][T18394]  ? lockdep_hardirqs_on+0x7d/0x110
[  870.972475][T18394]  do_fast_syscall_32+0x32/0x70
[  870.972499][T18394]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  870.972521][T18394] RIP: 0023:0xf709efec
[  870.972542][T18394] Code: Unable to access opcode bytes at 0xf709efc2.
[  870.972550][T18394] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  870.972569][T18394] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000002202
[  870.972580][T18394] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  870.972591][T18394] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  870.972602][T18394] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  870.972613][T18394] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  870.972639][T18394]  </TASK>
[  870.972659][T18394] ERROR: Out of memory at tomoyo_realpath_from_path.
[  871.026196][T18396] FAULT_INJECTION: forcing a failure.
[  871.026196][T18396] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  871.026218][T18396] CPU: 0 UID: 0 PID: 18396 Comm: syz.0.3543 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  871.026233][T18396] Tainted: [L]=SOFTLOCKUP
[  871.026238][T18396] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  871.026245][T18396] Call Trace:
[  871.026249][T18396]  <TASK>
[  871.026254][T18396]  dump_stack_lvl+0x100/0x190
[  871.026274][T18396]  should_fail_ex.cold+0x5/0xa
[  871.026289][T18396]  _copy_to_user+0x32/0xd0
[  871.026306][T18396]  simple_read_from_buffer+0xcb/0x170
[  871.026323][T18396]  proc_fail_nth_read+0x1af/0x230
[  871.026337][T18396]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  871.026352][T18396]  ? rw_verify_area+0xce/0x6d0
[  871.026364][T18396]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  871.026377][T18396]  vfs_read+0x1e4/0xb40
[  871.026391][T18396]  ? lock_acquire+0x1d1/0x380
[  871.026407][T18396]  ? __fget_files+0x34/0x3d0
[  871.026421][T18396]  ? __pfx_vfs_read+0x10/0x10
[  871.026433][T18396]  ? find_held_lock+0x2b/0x80
[  871.026447][T18396]  ? __fget_files+0x215/0x3d0
[  871.026463][T18396]  ? __fget_files+0x21f/0x3d0
[  871.026481][T18396]  ksys_read+0x12a/0x250
[  871.026494][T18396]  ? __pfx_ksys_read+0x10/0x10
[  871.026513][T18396]  do_int80_emulation+0x166/0x650
[  871.026530][T18396]  asm_int80_emulation+0x1a/0x20
[  871.026543][T18396] RIP: 0023:0xf71d75ab
[  871.026553][T18396] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  871.026564][T18396] RSP: 002b:00000000f548d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  871.026576][T18396] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f548d5d0
[  871.026583][T18396] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  871.026590][T18396] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  871.026596][T18396] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  871.026603][T18396] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  871.026617][T18396]  </TASK>
[  871.158372][   T43] usb 8-1: new high-speed USB device number 52 using dummy_hcd
[  871.305239][   T43] usb 8-1: Using ep0 maxpacket: 8
[  871.306035][   T43] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  871.307087][   T43] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  871.307126][   T43] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  871.307146][   T43] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  871.307166][   T43] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  871.307185][   T43] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  871.307217][   T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  871.344268][ T5809] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  871.505818][ T5809] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  871.506616][ T5809] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  871.506632][ T5809] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  871.506643][ T5809] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  871.506663][ T5809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  871.508261][ T5809] usb 7-1: config 0 descriptor??
[  871.519756][   T43] usb 8-1: usb_control_msg returned -71
[  871.519789][   T43] usbtmc 8-1:16.0: can't read capabilities
[  871.547713][   T43] usb 8-1: USB disconnect, device number 52
[  871.938334][ T5809] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  872.071924][T18411] FAULT_INJECTION: forcing a failure.
[  872.071924][T18411] name failslab, interval 1, probability 0, space 0, times 0
[  872.071958][T18411] CPU: 0 UID: 0 PID: 18411 Comm: syz.3.3550 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  872.072000][T18411] Tainted: [L]=SOFTLOCKUP
[  872.072007][T18411] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  872.072018][T18411] Call Trace:
[  872.072025][T18411]  <TASK>
[  872.072034][T18411]  dump_stack_lvl+0x100/0x190
[  872.072064][T18411]  should_fail_ex.cold+0x5/0xa
[  872.072089][T18411]  should_failslab+0xc2/0x120
[  872.072117][T18411]  __kmalloc_noprof+0xfc/0x840
[  872.072141][T18411]  ? tomoyo_encode2+0xfb/0x3c0
[  872.072168][T18411]  tomoyo_encode2+0xfb/0x3c0
[  872.072194][T18411]  tomoyo_encode+0x29/0x50
[  872.072215][T18411]  tomoyo_realpath_from_path+0x18c/0x690
[  872.072264][T18411]  tomoyo_path_number_perm+0x23c/0x580
[  872.072284][T18411]  ? tomoyo_path_number_perm+0x22e/0x580
[  872.072306][T18411]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  872.072326][T18411]  ? get_pid_task+0x106/0x250
[  872.072353][T18411]  ? __lock_acquire+0x5c0/0x1f40
[  872.072390][T18411]  ? __fget_files+0x34/0x3d0
[  872.072414][T18411]  ? find_held_lock+0x2b/0x80
[  872.072434][T18411]  ? __fget_files+0x215/0x3d0
[  872.072455][T18411]  ? hook_file_ioctl_common+0x140/0x440
[  872.072476][T18411]  ? __fget_files+0x215/0x3d0
[  872.072549][T18411]  ? __fget_files+0x21f/0x3d0
[  872.072578][T18411]  security_file_ioctl_compat+0xd3/0x230
[  872.072599][T18411]  __ia32_compat_sys_ioctl+0xc2/0x360
[  872.072625][T18411]  __do_fast_syscall_32+0x13a/0x8b0
[  872.072649][T18411]  ? lockdep_hardirqs_on+0x7d/0x110
[  872.072674][T18411]  do_fast_syscall_32+0x32/0x70
[  872.072697][T18411]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  872.072721][T18411] RIP: 0023:0xf704efec
[  872.072744][T18411] Code: Unable to access opcode bytes at 0xf704efc2.
[  872.072753][T18411] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  872.072774][T18411] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000001263
[  872.072785][T18411] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000
[  872.072798][T18411] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  872.072808][T18411] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  872.072818][T18411] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  872.072842][T18411]  </TASK>
[  872.072902][T18411] ERROR: Out of memory at tomoyo_realpath_from_path.
[  872.302822][T18427] team0: Device ipip0 is up. Set it down before adding it as a team port
[  872.363701][T18431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  872.364158][T18431] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  872.675241][ T5881] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  872.728670][T11756] usb 7-1: USB disconnect, device number 43
[  872.845289][ T5881] usb 6-1: Using ep0 maxpacket: 8
[  872.846135][ T5881] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  872.847066][ T5881] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  872.847103][ T5881] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  872.847122][ T5881] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  872.847140][ T5881] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  872.847159][ T5881] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  872.847189][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  873.062358][ T5881] usb 6-1: usb_control_msg returned -71
[  873.062395][ T5881] usbtmc 6-1:16.0: can't read capabilities
[  873.093994][ T5881] usb 6-1: USB disconnect, device number 43
[  873.301601][T18447] FAULT_INJECTION: forcing a failure.
[  873.301601][T18447] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  873.301631][T18447] CPU: 3 UID: 0 PID: 18447 Comm: syz.2.3563 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  873.301656][T18447] Tainted: [L]=SOFTLOCKUP
[  873.301662][T18447] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  873.301674][T18447] Call Trace:
[  873.301681][T18447]  <TASK>
[  873.301688][T18447]  dump_stack_lvl+0x100/0x190
[  873.301719][T18447]  should_fail_ex.cold+0x5/0xa
[  873.301744][T18447]  _copy_to_user+0x32/0xd0
[  873.301780][T18447]  simple_read_from_buffer+0xcb/0x170
[  873.301806][T18447]  proc_fail_nth_read+0x1af/0x230
[  873.301831][T18447]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  873.301855][T18447]  ? rw_verify_area+0xce/0x6d0
[  873.301874][T18447]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  873.301896][T18447]  vfs_read+0x1e4/0xb40
[  873.301918][T18447]  ? lock_acquire+0x1d1/0x380
[  873.301945][T18447]  ? __fget_files+0x34/0x3d0
[  873.301969][T18447]  ? __pfx_vfs_read+0x10/0x10
[  873.301988][T18447]  ? find_held_lock+0x2b/0x80
[  873.302011][T18447]  ? __fget_files+0x215/0x3d0
[  873.302039][T18447]  ? __fget_files+0x21f/0x3d0
[  873.302069][T18447]  ksys_read+0x12a/0x250
[  873.302091][T18447]  ? __pfx_ksys_read+0x10/0x10
[  873.302120][T18447]  do_int80_emulation+0x166/0x650
[  873.302148][T18447]  asm_int80_emulation+0x1a/0x20
[  873.302171][T18447] RIP: 0023:0xf71675ab
[  873.302187][T18447] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  873.302208][T18447] RSP: 002b:00000000f541d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  873.302227][T18447] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f541d5d0
[  873.302242][T18447] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  873.302253][T18447] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  873.302264][T18447] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  873.302275][T18447] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  873.302299][T18447]  </TASK>
[  873.357163][T18451] netlink: 'syz.0.3565': attribute type 12 has an invalid length.
[  873.420212][T18455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3566'.
[  873.489613][T18459] team0: Device ipip0 is up. Set it down before adding it as a team port
[  873.848817][T18472] can: request_module (can-proto-0) failed.
[  874.190298][T18472] pi3usb30532 0-0005: Error reading config register -6
[  874.199641][T18472] i2c i2c-0: new_device: Instantiated device pi3usb30532 at 0x05
[  874.803432][T18477] FAULT_INJECTION: forcing a failure.
[  874.803432][T18477] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  874.803465][T18477] CPU: 2 UID: 0 PID: 18477 Comm: syz.0.3572 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  874.803492][T18477] Tainted: [L]=SOFTLOCKUP
[  874.803500][T18477] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  874.803511][T18477] Call Trace:
[  874.803518][T18477]  <TASK>
[  874.803526][T18477]  dump_stack_lvl+0x100/0x190
[  874.803557][T18477]  should_fail_ex.cold+0x5/0xa
[  874.803583][T18477]  _copy_from_iter+0x1f4/0x1690
[  874.803617][T18477]  ? __pfx__copy_from_iter+0x10/0x10
[  874.803646][T18477]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  874.803677][T18477]  ? lock_acquire+0x1d1/0x380
[  874.803710][T18477]  copy_page_from_iter+0x238/0x300
[  874.803740][T18477]  tun_build_skb.constprop.0+0x2ea/0x18f0
[  874.803779][T18477]  ? __pfx_tun_build_skb.constprop.0+0x10/0x10
[  874.803811][T18477]  ? __lock_acquire+0x5c0/0x1f40
[  874.803850][T18477]  ? aa_file_perm+0x197/0x14d0
[  874.803875][T18477]  ? find_held_lock+0x2b/0x80
[  874.803900][T18477]  tun_get_user+0x1674/0x3cc0
[  874.803937][T18477]  ? __lock_acquire+0x5c0/0x1f40
[  874.803964][T18477]  ? __pfx_tun_get_user+0x10/0x10
[  874.803994][T18477]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  874.804023][T18477]  ? find_held_lock+0x2b/0x80
[  874.804044][T18477]  ? tun_get+0x191/0x370
[  874.804070][T18477]  ? tun_get+0x191/0x370
[  874.804103][T18477]  tun_chr_write_iter+0xdc/0x200
[  874.804134][T18477]  vfs_write+0x6af/0x1050
[  874.804157][T18477]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  874.804188][T18477]  ? __pfx_vfs_write+0x10/0x10
[  874.804209][T18477]  ? find_held_lock+0x2b/0x80
[  874.804270][T18477]  ksys_write+0x12a/0x250
[  874.804293][T18477]  ? __pfx_ksys_write+0x10/0x10
[  874.804329][T18477]  do_int80_emulation+0x166/0x650
[  874.804356][T18477]  asm_int80_emulation+0x1a/0x20
[  874.804375][T18477] RIP: 0023:0xf71d75ab
[  874.804391][T18477] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  874.804409][T18477] RSP: 002b:00000000f548d44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[  874.804428][T18477] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080001280
[  874.804441][T18477] RDX: 0000000000000042 RSI: 0000000000000000 RDI: 0000000000000000
[  874.804452][T18477] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  874.804464][T18477] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  874.804475][T18477] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  874.804499][T18477]  </TASK>
[  875.097087][T18491] FAULT_INJECTION: forcing a failure.
[  875.097087][T18491] name failslab, interval 1, probability 0, space 0, times 0
[  875.097118][T18491] CPU: 3 UID: 0 PID: 18491 Comm: syz.1.3576 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  875.097144][T18491] Tainted: [L]=SOFTLOCKUP
[  875.097152][T18491] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  875.097163][T18491] Call Trace:
[  875.097170][T18491]  <TASK>
[  875.097178][T18491]  dump_stack_lvl+0x100/0x190
[  875.097209][T18491]  should_fail_ex.cold+0x5/0xa
[  875.097234][T18491]  should_failslab+0xc2/0x120
[  875.097262][T18491]  __kmalloc_noprof+0xfc/0x840
[  875.097284][T18491]  ? rcu_is_watching+0x13/0xc0
[  875.097306][T18491]  ? tomoyo_realpath_from_path+0xb6/0x690
[  875.097335][T18491]  tomoyo_realpath_from_path+0xb6/0x690
[  875.097365][T18491]  tomoyo_path_number_perm+0x23c/0x580
[  875.097385][T18491]  ? tomoyo_path_number_perm+0x22e/0x580
[  875.097406][T18491]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  875.097427][T18491]  ? get_pid_task+0x106/0x250
[  875.097456][T18491]  ? __lock_acquire+0x5c0/0x1f40
[  875.097495][T18491]  ? __fget_files+0x34/0x3d0
[  875.097520][T18491]  ? find_held_lock+0x2b/0x80
[  875.097542][T18491]  ? __fget_files+0x215/0x3d0
[  875.097564][T18491]  ? hook_file_ioctl_common+0x140/0x440
[  875.097584][T18491]  ? __fget_files+0x215/0x3d0
[  875.097612][T18491]  ? __fget_files+0x21f/0x3d0
[  875.097640][T18491]  security_file_ioctl_compat+0xd3/0x230
[  875.097662][T18491]  __ia32_compat_sys_ioctl+0xc2/0x360
[  875.097686][T18491]  __do_fast_syscall_32+0x13a/0x8b0
[  875.097707][T18491]  ? lockdep_hardirqs_on+0x7d/0x110
[  875.097730][T18491]  do_fast_syscall_32+0x32/0x70
[  875.097753][T18491]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  875.097776][T18491] RIP: 0023:0xf70aefec
[  875.097795][T18491] Code: Unable to access opcode bytes at 0xf70aefc2.
[  875.097803][T18491] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  875.097821][T18491] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004b47
[  875.097833][T18491] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000
[  875.097844][T18491] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  875.097854][T18491] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  875.097865][T18491] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  875.097889][T18491]  </TASK>
[  875.097897][T18491] ERROR: Out of memory at tomoyo_realpath_from_path.
[  875.268571][T18500] team0: Device ipip0 is up. Set it down before adding it as a team port
[  875.272007][T18502] FAULT_INJECTION: forcing a failure.
[  875.272007][T18502] name failslab, interval 1, probability 0, space 0, times 0
[  875.272028][T18502] CPU: 2 UID: 0 PID: 18502 Comm: syz.1.3581 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  875.272044][T18502] Tainted: [L]=SOFTLOCKUP
[  875.272049][T18502] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  875.272056][T18502] Call Trace:
[  875.272060][T18502]  <TASK>
[  875.272066][T18502]  dump_stack_lvl+0x100/0x190
[  875.272084][T18502]  should_fail_ex.cold+0x5/0xa
[  875.272100][T18502]  should_failslab+0xc2/0x120
[  875.272117][T18502]  __kmalloc_noprof+0xfc/0x840
[  875.272131][T18502]  ? __pfx_dynamic_dname+0x10/0x10
[  875.272143][T18502]  ? tomoyo_encode2+0xfb/0x3c0
[  875.272159][T18502]  tomoyo_encode2+0xfb/0x3c0
[  875.272175][T18502]  tomoyo_encode+0x29/0x50
[  875.272188][T18502]  tomoyo_realpath_from_path+0x18c/0x690
[  875.272205][T18502]  tomoyo_path_number_perm+0x23c/0x580
[  875.272216][T18502]  ? tomoyo_path_number_perm+0x22e/0x580
[  875.272250][T18502]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  875.272262][T18502]  ? get_pid_task+0x106/0x250
[  875.272278][T18502]  ? __lock_acquire+0x5c0/0x1f40
[  875.272302][T18502]  ? __fget_files+0x34/0x3d0
[  875.272316][T18502]  ? find_held_lock+0x2b/0x80
[  875.272329][T18502]  ? __fget_files+0x215/0x3d0
[  875.272342][T18502]  ? hook_file_ioctl_common+0x140/0x440
[  875.272354][T18502]  ? __fget_files+0x215/0x3d0
[  875.272370][T18502]  ? __fget_files+0x21f/0x3d0
[  875.272386][T18502]  security_file_ioctl_compat+0xd3/0x230
[  875.272399][T18502]  __ia32_compat_sys_ioctl+0xc2/0x360
[  875.272414][T18502]  __do_fast_syscall_32+0x13a/0x8b0
[  875.272429][T18502]  ? lockdep_hardirqs_on+0x7d/0x110
[  875.272444][T18502]  do_fast_syscall_32+0x32/0x70
[  875.272458][T18502]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  875.272473][T18502] RIP: 0023:0xf70aefec
[  875.272486][T18502] Code: Unable to access opcode bytes at 0xf70aefc2.
[  875.272491][T18502] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  875.272503][T18502] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008982
[  875.272511][T18502] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000
[  875.272517][T18502] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  875.272524][T18502] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  875.272531][T18502] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  875.272545][T18502]  </TASK>
[  875.272556][T18502] ERROR: Out of memory at tomoyo_realpath_from_path.
[  875.315206][T11756] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  875.466562][T11756] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  875.467691][T11756] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  875.467728][T11756] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  875.470012][T11756] usb 5-1: config 0 descriptor??
[  875.694174][T11756] usbhid 5-1:0.0: can't add hid device: -71
[  875.694252][T11756] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  875.699185][T11756] usb 5-1: USB disconnect, device number 50
[  876.125385][   T65] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  876.188077][T18512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3584'.
[  876.297799][   T65] usb 5-1: Using ep0 maxpacket: 32
[  876.301956][   T65] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.66
[  876.302971][   T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  876.303005][   T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  876.307828][   T65] usb 5-1: config 0 descriptor??
[  876.310972][   T65] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  876.324485][   T65] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  876.787914][    T9] usb 5-1: USB disconnect, device number 51
[  876.789378][    T9] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  877.090730][T18539] team0: Device ipip0 is up. Set it down before adding it as a team port
[  877.328634][T18544] random: crng reseeded on system resumption
[  877.359168][T18544] tc_dump_action: action bad kind
[  877.362641][T18547] smc: net device lo applied user defined pnetid SYZ0
[  877.362790][T18547] smc: smcd device lo applied user defined pnetid SYZ0
[  877.411518][T18547] lo speed is unknown, defaulting to 1000
[  877.573216][T18559] FAULT_INJECTION: forcing a failure.
[  877.573216][T18559] name failslab, interval 1, probability 0, space 0, times 0
[  877.573239][T18559] CPU: 2 UID: 0 PID: 18559 Comm: syz.2.3599 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  877.573255][T18559] Tainted: [L]=SOFTLOCKUP
[  877.573259][T18559] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  877.573267][T18559] Call Trace:
[  877.573271][T18559]  <TASK>
[  877.573276][T18559]  dump_stack_lvl+0x100/0x190
[  877.573296][T18559]  should_fail_ex.cold+0x5/0xa
[  877.573311][T18559]  should_failslab+0xc2/0x120
[  877.573329][T18559]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  877.573343][T18559]  ? __alloc_skb+0x5b7/0x710
[  877.573361][T18559]  ? __alloc_skb+0x140/0x710
[  877.573380][T18559]  __alloc_skb+0x140/0x710
[  877.573396][T18559]  ? __alloc_skb+0x5b7/0x710
[  877.573412][T18559]  ? __pfx___alloc_skb+0x10/0x10
[  877.573433][T18559]  netlink_alloc_large_skb+0x69/0x150
[  877.573456][T18559]  netlink_sendmsg+0x680/0xda0
[  877.573475][T18559]  ? __pfx_netlink_sendmsg+0x10/0x10
[  877.573493][T18559]  ? apparmor_socket_sendmsg+0x165/0x280
[  877.573512][T18559]  ____sys_sendmsg+0xa4d/0xbe0
[  877.573525][T18559]  ? __pfx_netlink_sendmsg+0x10/0x10
[  877.573543][T18559]  ? __pfx_____sys_sendmsg+0x10/0x10
[  877.573563][T18559]  ___sys_sendmsg+0x190/0x1e0
[  877.573579][T18559]  ? __pfx____sys_sendmsg+0x10/0x10
[  877.573599][T18559]  ? find_held_lock+0x2b/0x80
[  877.573621][T18559]  __sys_sendmsg+0x160/0x210
[  877.573632][T18559]  ? __pfx___sys_sendmsg+0x10/0x10
[  877.573646][T18559]  ? __pfx_ksys_write+0x10/0x10
[  877.573663][T18559]  __do_fast_syscall_32+0x13a/0x8b0
[  877.573677][T18559]  ? lockdep_hardirqs_on+0x7d/0x110
[  877.573692][T18559]  do_fast_syscall_32+0x32/0x70
[  877.573706][T18559]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  877.573721][T18559] RIP: 0023:0xf702efec
[  877.573734][T18559] Code: Unable to access opcode bytes at 0xf702efc2.
[  877.573739][T18559] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  877.573751][T18559] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000900
[  877.573758][T18559] RDX: 0000000020000800 RSI: 0000000000000000 RDI: 0000000000000000
[  877.573765][T18559] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  877.573772][T18559] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  877.573778][T18559] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  877.573792][T18559]  </TASK>
[  877.831704][T18547] lo speed is unknown, defaulting to 1000
[  878.248545][T18578] random: crng reseeded on system resumption
[  878.261378][T18578] tc_dump_action: action bad kind
[  878.405316][ T5809] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  878.556260][ T5809] usb 5-1: Using ep0 maxpacket: 8
[  878.556957][ T5809] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  878.558581][ T5809] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  878.558622][ T5809] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  878.558643][ T5809] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  878.558663][ T5809] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  878.558684][ T5809] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  878.558716][ T5809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  878.606104][T18584] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  878.745844][T18590] FAULT_INJECTION: forcing a failure.
[  878.745844][T18590] name failslab, interval 1, probability 0, space 0, times 0
[  878.745867][T18590] CPU: 3 UID: 0 PID: 18590 Comm: syz.3.3613 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  878.745883][T18590] Tainted: [L]=SOFTLOCKUP
[  878.745887][T18590] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  878.745894][T18590] Call Trace:
[  878.745905][T18590]  <TASK>
[  878.745910][T18590]  dump_stack_lvl+0x100/0x190
[  878.745928][T18590]  should_fail_ex.cold+0x5/0xa
[  878.745944][T18590]  should_failslab+0xc2/0x120
[  878.745961][T18590]  __kmalloc_noprof+0xfc/0x840
[  878.745975][T18590]  ? __pfx_dynamic_dname+0x10/0x10
[  878.745988][T18590]  ? tomoyo_encode2+0xfb/0x3c0
[  878.746005][T18590]  tomoyo_encode2+0xfb/0x3c0
[  878.746020][T18590]  tomoyo_encode+0x29/0x50
[  878.746033][T18590]  tomoyo_realpath_from_path+0x18c/0x690
[  878.746050][T18590]  tomoyo_path_number_perm+0x23c/0x580
[  878.746061][T18590]  ? tomoyo_path_number_perm+0x22e/0x580
[  878.746073][T18590]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  878.746086][T18590]  ? get_pid_task+0x106/0x250
[  878.746102][T18590]  ? __lock_acquire+0x5c0/0x1f40
[  878.746125][T18590]  ? __fget_files+0x34/0x3d0
[  878.746140][T18590]  ? find_held_lock+0x2b/0x80
[  878.746153][T18590]  ? __fget_files+0x215/0x3d0
[  878.746166][T18590]  ? hook_file_ioctl_common+0x140/0x440
[  878.746178][T18590]  ? __fget_files+0x215/0x3d0
[  878.746194][T18590]  ? __fget_files+0x21f/0x3d0
[  878.746210][T18590]  security_file_ioctl_compat+0xd3/0x230
[  878.746224][T18590]  __ia32_compat_sys_ioctl+0xc2/0x360
[  878.746239][T18590]  __do_fast_syscall_32+0x13a/0x8b0
[  878.746254][T18590]  ? lockdep_hardirqs_on+0x7d/0x110
[  878.746268][T18590]  do_fast_syscall_32+0x32/0x70
[  878.746283][T18590]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  878.746297][T18590] RIP: 0023:0xf704efec
[  878.746311][T18590] Code: Unable to access opcode bytes at 0xf704efc2.
[  878.746316][T18590] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  878.746328][T18590] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008923
[  878.746335][T18590] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000
[  878.746342][T18590] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  878.746348][T18590] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  878.746355][T18590] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  878.746369][T18590]  </TASK>
[  878.746379][T18590] ERROR: Out of memory at tomoyo_realpath_from_path.
[  878.748467][T18590] netdevsim netdevsim3 : renamed from netdevsim0 (while UP)
[  878.781546][T18592] Bluetooth: hci0: Frame reassembly failed (-84)
[  878.798562][   T75] Bluetooth: hci0: Frame reassembly failed (-84)
[  878.823287][ T5809] usb 5-1: usb_control_msg returned -71
[  878.823324][ T5809] usbtmc 5-1:16.0: can't read capabilities
[  878.836625][ T5809] usb 5-1: USB disconnect, device number 52
[  878.845769][T18594] team0: Device ipip0 is up. Set it down before adding it as a team port
[  879.351134][T18599] FAULT_INJECTION: forcing a failure.
[  879.351134][T18599] name failslab, interval 1, probability 0, space 0, times 0
[  879.351167][T18599] CPU: 0 UID: 0 PID: 18599 Comm: syz.2.3615 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  879.351193][T18599] Tainted: [L]=SOFTLOCKUP
[  879.351200][T18599] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  879.351211][T18599] Call Trace:
[  879.351219][T18599]  <TASK>
[  879.351226][T18599]  dump_stack_lvl+0x100/0x190
[  879.351257][T18599]  should_fail_ex.cold+0x5/0xa
[  879.351284][T18599]  should_failslab+0xc2/0x120
[  879.351313][T18599]  kmem_cache_alloc_noprof+0x92/0x6a0
[  879.351339][T18599]  ? do_epoll_ctl_file+0xccf/0x36e0
[  879.351375][T18599]  do_epoll_ctl_file+0xccf/0x36e0
[  879.351405][T18599]  ? get_pid_task+0xfc/0x250
[  879.351433][T18599]  ? __pfx_do_epoll_ctl_file+0x10/0x10
[  879.351461][T18599]  ? lock_acquire+0x1d1/0x380
[  879.351489][T18599]  ? __fget_files+0x34/0x3d0
[  879.351513][T18599]  ? find_held_lock+0x2b/0x80
[  879.351537][T18599]  ? __fget_files+0x215/0x3d0
[  879.351567][T18599]  ? __fget_files+0x21f/0x3d0
[  879.351598][T18599]  ? do_epoll_ctl+0xfd/0x1a0
[  879.351625][T18599]  do_epoll_ctl+0xfd/0x1a0
[  879.351655][T18599]  ? __pfx_do_epoll_ctl+0x10/0x10
[  879.351693][T18599]  __ia32_sys_epoll_ctl+0x15b/0x1e0
[  879.351724][T18599]  ? __pfx___ia32_sys_epoll_ctl+0x10/0x10
[  879.351768][T18599]  ? ksys_write+0x1ac/0x250
[  879.351791][T18599]  ? __pfx_ksys_write+0x10/0x10
[  879.351825][T18599]  __do_fast_syscall_32+0x13a/0x8b0
[  879.351850][T18599]  ? lockdep_hardirqs_on+0x7d/0x110
[  879.351877][T18599]  do_fast_syscall_32+0x32/0x70
[  879.351903][T18599]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  879.351928][T18599] RIP: 0023:0xf702efec
[  879.351950][T18599] Code: Unable to access opcode bytes at 0xf702efc2.
[  879.351960][T18599] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000ff
[  879.351980][T18599] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001
[  879.351993][T18599] RDX: 0000000000000004 RSI: 00000000800000c0 RDI: 0000000000000000
[  879.352005][T18599] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  879.352016][T18599] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  879.352027][T18599] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  879.352052][T18599]  </TASK>
[  879.769929][T18608] fuse: Bad value for 'user_id'
[  879.769942][T18608] fuse: Bad value for 'user_id'
[  880.405672][T18622] FAULT_INJECTION: forcing a failure.
[  880.405672][T18622] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  880.405695][T18622] CPU: 3 UID: 0 PID: 18622 Comm: syz.3.3621 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  880.405711][T18622] Tainted: [L]=SOFTLOCKUP
[  880.405716][T18622] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  880.405723][T18622] Call Trace:
[  880.405727][T18622]  <TASK>
[  880.405732][T18622]  dump_stack_lvl+0x100/0x190
[  880.405750][T18622]  should_fail_ex.cold+0x5/0xa
[  880.405766][T18622]  _copy_from_user+0x2e/0xd0
[  880.405783][T18622]  memdup_user+0x6b/0xe0
[  880.405796][T18622]  strndup_user+0x78/0xe0
[  880.405809][T18622]  __ia32_sys_fsopen+0xa0/0x230
[  880.405822][T18622]  __do_fast_syscall_32+0x13a/0x8b0
[  880.405842][T18622]  ? lockdep_hardirqs_on+0x7d/0x110
[  880.405857][T18622]  do_fast_syscall_32+0x32/0x70
[  880.405871][T18622]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  880.405886][T18622] RIP: 0023:0xf704efec
[  880.405899][T18622] Code: Unable to access opcode bytes at 0xf704efc2.
[  880.405905][T18622] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 00000000000001ae
[  880.405916][T18622] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 0000000000000001
[  880.405924][T18622] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  880.405930][T18622] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  880.405937][T18622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  880.405944][T18622] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  880.405958][T18622]  </TASK>
[  880.727453][T18625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3624'.
[  880.727470][T18625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3624'.
[  880.798797][T18627] syzkaller1: entered promiscuous mode
[  880.798821][T18627] syzkaller1: entered allmulticast mode
[  880.846085][ T5743] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[  881.160167][T18640] team0: Device ipip0 is up. Set it down before adding it as a team port
[  881.361800][T18651] /dev/nullb0: Can't open blockdev
[  881.428328][T18652] can: request_module (can-proto-0) failed.
[  881.477762][T18652] i2c i2c-0: Failed to register i2c client pi3usb30532 at 0x05 (-16)
[  882.152303][T18663] Bluetooth: hci0: Frame reassembly failed (-84)
[  882.235219][ T5819] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[  882.275267][   T65] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  882.385743][ T5819] usb 7-1: Using ep0 maxpacket: 8
[  882.386402][ T5819] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  882.387498][ T5819] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  882.387539][ T5819] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  882.387560][ T5819] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  882.387580][ T5819] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  882.387602][ T5819] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  882.387636][ T5819] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  882.456085][   T65] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  882.457700][   T65] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  882.457728][   T65] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  882.457798][   T65] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  882.457838][   T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  882.462777][   T65] usb 6-1: config 0 descriptor??
[  882.604040][ T5819] usb 7-1: usb_control_msg returned -71
[  882.604132][ T5819] usbtmc 7-1:16.0: can't read capabilities
[  882.614290][ T5819] usb 7-1: USB disconnect, device number 44
[  882.881314][   T65] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  883.173136][T18668] lo speed is unknown, defaulting to 1000
[  883.278179][T18674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  883.280536][T18674] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  883.473261][T18668] lo speed is unknown, defaulting to 1000
[  883.844052][    T9] usb 6-1: USB disconnect, device number 44
[  884.215433][T13430] Bluetooth: hci0: command 0xfc11 tx timeout
[  884.215463][ T5743] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[  884.694115][T18700] FAULT_INJECTION: forcing a failure.
[  884.694115][T18700] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  884.694148][T18700] CPU: 1 UID: 0 PID: 18700 Comm: syz.3.3643 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  884.694174][T18700] Tainted: [L]=SOFTLOCKUP
[  884.694181][T18700] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  884.694193][T18700] Call Trace:
[  884.694200][T18700]  <TASK>
[  884.694208][T18700]  dump_stack_lvl+0x100/0x190
[  884.694238][T18700]  should_fail_ex.cold+0x5/0xa
[  884.694262][T18700]  _copy_from_user+0x2e/0xd0
[  884.694289][T18700]  kstrtouint_from_user+0xd6/0x1d0
[  884.694310][T18700]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  884.694337][T18700]  ? lock_acquire+0x1d1/0x380
[  884.694370][T18700]  proc_fail_nth_write+0x83/0x220
[  884.694394][T18700]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  884.694423][T18700]  vfs_write+0x2aa/0x1050
[  884.694448][T18700]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  884.694470][T18700]  ? lock_acquire+0x1d1/0x380
[  884.694495][T18700]  ? __fget_files+0x34/0x3d0
[  884.694518][T18700]  ? __pfx_vfs_write+0x10/0x10
[  884.694536][T18700]  ? find_held_lock+0x2b/0x80
[  884.694558][T18700]  ? __fget_files+0x215/0x3d0
[  884.694584][T18700]  ? __fget_files+0x21f/0x3d0
[  884.694613][T18700]  ksys_write+0x12a/0x250
[  884.694635][T18700]  ? __pfx_ksys_write+0x10/0x10
[  884.694664][T18700]  do_int80_emulation+0x166/0x650
[  884.694691][T18700]  asm_int80_emulation+0x1a/0x20
[  884.694710][T18700] RIP: 0023:0xf71875ab
[  884.694725][T18700] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  884.694743][T18700] RSP: 002b:00000000f543d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[  884.694762][T18700] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f543d5d0
[  884.694790][T18700] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  884.694808][T18700] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  884.694818][T18700] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  884.694827][T18700] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  884.694852][T18700]  </TASK>
[  884.707081][T14727] netdevsim netdevsim3 : set [0, 0] type 1 family 0 port 8472 - 0
[  884.707274][T14727] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  884.707323][T14727] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  884.707352][T14727] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  884.788090][T18702] team0: Device ipip0 is up. Set it down before adding it as a team port
[  884.917873][T18707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3646'.
[  884.918569][T18710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3646'.
[  885.821856][T18713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3656'.
[  885.930186][T18713] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3656'.
[  886.105232][ T5819] usb 8-1: new high-speed USB device number 53 using dummy_hcd
[  886.135056][T18721] 9pnet_virtio: no channels available for device /dev/sr0
[  886.185494][ T5809] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  886.346037][ T5809] usb 5-1: Using ep0 maxpacket: 8
[  886.346864][ T5809] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  886.348017][ T5809] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  886.348057][ T5809] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  886.348079][ T5809] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  886.348100][ T5809] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  886.348122][ T5809] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  886.348157][ T5809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  886.577131][ T5809] usb 5-1: usb_control_msg returned -71
[  886.577174][ T5809] usbtmc 5-1:16.0: can't read capabilities
[  886.589359][ T5809] usb 5-1: USB disconnect, device number 53
[  886.615226][ T5819] usb 8-1: Using ep0 maxpacket: 8
[  886.617570][ T5819] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  886.641878][ T5819] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  886.641923][ T5819] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  886.641941][ T5819] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  886.641959][ T5819] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  886.641976][ T5819] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  886.642004][ T5819] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  887.307009][T18731] random: crng reseeded on system resumption
[  887.407946][ T5809] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  887.464098][T18734] tc_dump_action: action bad kind
[  887.471784][ T5819] usb 8-1: usb_control_msg returned -71
[  887.471808][ T5819] usbtmc 8-1:16.0: can't read capabilities
[  887.483363][ T5819] usb 8-1: USB disconnect, device number 53
[  887.535750][T18736] team0: Device ipip0 is up. Set it down before adding it as a team port
[  887.575866][ T5809] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  887.576789][ T5809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  887.576813][ T5809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  887.576830][ T5809] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  887.576860][ T5809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  887.578672][ T5809] usb 5-1: config 0 descriptor??
[  888.014332][ T5809] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  888.028440][T18740] FAULT_INJECTION: forcing a failure.
[  888.028440][T18740] name failslab, interval 1, probability 0, space 0, times 0
[  888.028463][T18740] CPU: 0 UID: 0 PID: 18740 Comm: syz.3.3659 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  888.028481][T18740] Tainted: [L]=SOFTLOCKUP
[  888.028486][T18740] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  888.028494][T18740] Call Trace:
[  888.028498][T18740]  <TASK>
[  888.028504][T18740]  dump_stack_lvl+0x100/0x190
[  888.028526][T18740]  should_fail_ex.cold+0x5/0xa
[  888.028543][T18740]  should_failslab+0xc2/0x120
[  888.028563][T18740]  __kmalloc_node_track_caller_noprof+0xfa/0x870
[  888.028580][T18740]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  888.028601][T18740]  ? ovl_mount_dir+0x26/0x1c0
[  888.028616][T18740]  kstrdup+0x51/0xe0
[  888.028633][T18740]  ovl_mount_dir+0x26/0x1c0
[  888.028647][T18740]  ovl_parse_param+0x11a8/0x1600
[  888.028661][T18740]  ? rcu_is_watching+0x13/0xc0
[  888.028676][T18740]  ? __pfx_ovl_parse_param+0x10/0x10
[  888.028691][T18740]  ? static_key_count+0x5a/0x70
[  888.028726][T18740]  ? __pfx_ovl_parse_param+0x10/0x10
[  888.028740][T18740]  vfs_parse_fs_param+0x200/0x3b0
[  888.028763][T18740]  vfs_parse_fs_qstr+0x138/0x1c0
[  888.028784][T18740]  ? __pfx_vfs_parse_fs_qstr+0x10/0x10
[  888.028806][T18740]  ? lockdep_init_map_type+0x5c/0x250
[  888.028829][T18740]  ? ovl_next_opt+0x143/0x1c0
[  888.028842][T18740]  ? __pfx_ovl_next_opt+0x10/0x10
[  888.028853][T18740]  vfs_parse_monolithic_sep+0x195/0x210
[  888.028875][T18740]  ? __pfx_vfs_parse_monolithic_sep+0x10/0x10
[  888.028897][T18740]  ? alloc_fs_context+0x65a/0xf40
[  888.028918][T18740]  path_mount+0x77f/0x24c0
[  888.028939][T18740]  ? __pfx_path_mount+0x10/0x10
[  888.028957][T18740]  ? lockdep_hardirqs_on+0x7d/0x110
[  888.028975][T18740]  ? putname+0xb1/0x110
[  888.028991][T18740]  ? kmem_cache_free+0x127/0x6c0
[  888.029009][T18740]  ? __ia32_sys_mount+0x292/0x310
[  888.029028][T18740]  __ia32_sys_mount+0x292/0x310
[  888.029049][T18740]  ? __pfx___ia32_sys_mount+0x10/0x10
[  888.029071][T18740]  __do_fast_syscall_32+0x13a/0x8b0
[  888.029089][T18740]  do_fast_syscall_32+0x32/0x70
[  888.029106][T18740]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  888.029122][T18740] RIP: 0023:0xf704efec
[  888.029136][T18740] Code: Unable to access opcode bytes at 0xf704efc2.
[  888.029143][T18740] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015
[  888.029157][T18740] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000200
[  888.029165][T18740] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000080000280
[  888.029173][T18740] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  888.029181][T18740] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  888.029189][T18740] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  888.029207][T18740]  </TASK>
[  888.153538][T18746] FAULT_INJECTION: forcing a failure.
[  888.153538][T18746] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  888.153561][T18746] CPU: 1 UID: 0 PID: 18746 Comm: syz.3.3660 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  888.153576][T18746] Tainted: [L]=SOFTLOCKUP
[  888.153581][T18746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  888.153588][T18746] Call Trace:
[  888.153592][T18746]  <TASK>
[  888.153597][T18746]  dump_stack_lvl+0x100/0x190
[  888.153616][T18746]  should_fail_ex.cold+0x5/0xa
[  888.153632][T18746]  _copy_from_user+0x2e/0xd0
[  888.153649][T18746]  kstrtouint_from_user+0xd6/0x1d0
[  888.153662][T18746]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  888.153677][T18746]  ? lock_acquire+0x1d1/0x380
[  888.153697][T18746]  proc_fail_nth_write+0x83/0x220
[  888.153712][T18746]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  888.153730][T18746]  vfs_write+0x2aa/0x1050
[  888.153745][T18746]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  888.153758][T18746]  ? lock_acquire+0x1d1/0x380
[  888.153774][T18746]  ? __fget_files+0x34/0x3d0
[  888.153788][T18746]  ? __pfx_vfs_write+0x10/0x10
[  888.153805][T18746]  ? find_held_lock+0x2b/0x80
[  888.153819][T18746]  ? __fget_files+0x215/0x3d0
[  888.153835][T18746]  ? __fget_files+0x21f/0x3d0
[  888.153853][T18746]  ksys_write+0x12a/0x250
[  888.153866][T18746]  ? __pfx_ksys_write+0x10/0x10
[  888.153884][T18746]  do_int80_emulation+0x166/0x650
[  888.153900][T18746]  asm_int80_emulation+0x1a/0x20
[  888.153911][T18746] RIP: 0023:0xf71875ab
[  888.153921][T18746] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  888.153932][T18746] RSP: 002b:00000000f543d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[  888.153943][T18746] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f543d5c0
[  888.153950][T18746] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  888.153956][T18746] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  888.153963][T18746] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  888.153969][T18746] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  888.153983][T18746]  </TASK>
[  888.619270][T18752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  888.623006][T18752] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  888.636548][T18754] netlink: 'syz.3.3664': attribute type 10 has an invalid length.
[  888.692016][T18756] team0: Device ipip0 is up. Set it down before adding it as a team port
[  888.973416][   T43] usb 5-1: USB disconnect, device number 54
[  889.553938][T18769] netlink: 'syz.2.3669': attribute type 10 has an invalid length.
[  889.617792][T18773] team0: Device ipip0 is up. Set it down before adding it as a team port
[  889.648134][T18771] team0: Device ipip0 is up. Set it down before adding it as a team port
[  889.765772][ T5882] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  889.915401][ T5882] usb 5-1: Using ep0 maxpacket: 8
[  889.917996][ T5882] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  889.921326][ T5882] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  889.921578][ T5882] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  889.921671][ T5882] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  889.921709][ T5882] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  889.921800][ T5882] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  889.921954][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  890.333374][ T5882] usb 5-1: usb_control_msg returned -71
[  890.333399][ T5882] usbtmc 5-1:16.0: can't read capabilities
[  890.365440][ T5882] usb 5-1: USB disconnect, device number 55
[  890.660083][T18793] FAULT_INJECTION: forcing a failure.
[  890.660083][T18793] name failslab, interval 1, probability 0, space 0, times 0
[  890.660106][T18793] CPU: 1 UID: 0 PID: 18793 Comm: syz.3.3674 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  890.660122][T18793] Tainted: [L]=SOFTLOCKUP
[  890.660126][T18793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  890.660133][T18793] Call Trace:
[  890.660137][T18793]  <TASK>
[  890.660142][T18793]  dump_stack_lvl+0x100/0x190
[  890.660210][T18793]  should_fail_ex.cold+0x5/0xa
[  890.660226][T18793]  should_failslab+0xc2/0x120
[  890.660243][T18793]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  890.660258][T18793]  ? __alloc_skb+0x5b7/0x710
[  890.660276][T18793]  ? __alloc_skb+0x140/0x710
[  890.660295][T18793]  __alloc_skb+0x140/0x710
[  890.660310][T18793]  ? __alloc_skb+0x5b7/0x710
[  890.660327][T18793]  ? __pfx___alloc_skb+0x10/0x10
[  890.660348][T18793]  netlink_alloc_large_skb+0x69/0x150
[  890.660366][T18793]  netlink_sendmsg+0x680/0xda0
[  890.660384][T18793]  ? __pfx_netlink_sendmsg+0x10/0x10
[  890.660402][T18793]  ? apparmor_socket_sendmsg+0x165/0x280
[  890.660422][T18793]  ____sys_sendmsg+0xa4d/0xbe0
[  890.660436][T18793]  ? __pfx_netlink_sendmsg+0x10/0x10
[  890.660453][T18793]  ? __pfx_____sys_sendmsg+0x10/0x10
[  890.660474][T18793]  ___sys_sendmsg+0x190/0x1e0
[  890.660489][T18793]  ? __pfx____sys_sendmsg+0x10/0x10
[  890.660510][T18793]  ? find_held_lock+0x2b/0x80
[  890.660532][T18793]  __sys_sendmsg+0x160/0x210
[  890.660544][T18793]  ? __pfx___sys_sendmsg+0x10/0x10
[  890.660558][T18793]  ? __pfx_ksys_write+0x10/0x10
[  890.660575][T18793]  __do_fast_syscall_32+0x13a/0x8b0
[  890.660589][T18793]  ? lockdep_hardirqs_on+0x7d/0x110
[  890.660603][T18793]  do_fast_syscall_32+0x32/0x70
[  890.660618][T18793]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  890.660633][T18793] RIP: 0023:0xf704efec
[  890.660647][T18793] Code: Unable to access opcode bytes at 0xf704efc2.
[  890.660652][T18793] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  890.660664][T18793] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000600
[  890.660671][T18793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  890.660678][T18793] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  890.660690][T18793] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  890.660697][T18793] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  890.660710][T18793]  </TASK>
[  890.758428][T18796] /dev/nullb0: Can't open blockdev
[  891.354561][T18805] FAULT_INJECTION: forcing a failure.
[  891.354561][T18805] name failslab, interval 1, probability 0, space 0, times 0
[  891.354590][T18805] CPU: 1 UID: 0 PID: 18805 Comm: syz.0.3677 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  891.354612][T18805] Tainted: [L]=SOFTLOCKUP
[  891.354618][T18805] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  891.354627][T18805] Call Trace:
[  891.354634][T18805]  <TASK>
[  891.354640][T18805]  dump_stack_lvl+0x100/0x190
[  891.354666][T18805]  should_fail_ex.cold+0x5/0xa
[  891.354687][T18805]  should_failslab+0xc2/0x120
[  891.354711][T18805]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  891.354732][T18805]  ? __alloc_skb+0x5b7/0x710
[  891.354755][T18805]  ? __alloc_skb+0x140/0x710
[  891.354782][T18805]  __alloc_skb+0x140/0x710
[  891.354804][T18805]  ? __alloc_skb+0x5b7/0x710
[  891.354826][T18805]  ? __pfx___alloc_skb+0x10/0x10
[  891.354850][T18805]  ? aa_sk_perm+0x389/0xab0
[  891.354878][T18805]  netlink_alloc_large_skb+0x69/0x150
[  891.354903][T18805]  netlink_sendmsg+0x680/0xda0
[  891.354928][T18805]  ? __pfx_netlink_sendmsg+0x10/0x10
[  891.354953][T18805]  ? apparmor_socket_sendmsg+0x165/0x280
[  891.354980][T18805]  ____sys_sendmsg+0xa4d/0xbe0
[  891.354998][T18805]  ? __pfx_netlink_sendmsg+0x10/0x10
[  891.355023][T18805]  ? __pfx_____sys_sendmsg+0x10/0x10
[  891.355052][T18805]  ___sys_sendmsg+0x190/0x1e0
[  891.355074][T18805]  ? __pfx____sys_sendmsg+0x10/0x10
[  891.355124][T18805]  ? find_held_lock+0x2b/0x80
[  891.355157][T18805]  __sys_sendmsg+0x160/0x210
[  891.355173][T18805]  ? __pfx___sys_sendmsg+0x10/0x10
[  891.355195][T18805]  ? __pfx_ksys_write+0x10/0x10
[  891.355233][T18805]  __do_fast_syscall_32+0x13a/0x8b0
[  891.355256][T18805]  ? lockdep_hardirqs_on+0x7d/0x110
[  891.355276][T18805]  do_fast_syscall_32+0x32/0x70
[  891.355297][T18805]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  891.355317][T18805] RIP: 0023:0xf709efec
[  891.355337][T18805] Code: Unable to access opcode bytes at 0xf709efc2.
[  891.355345][T18805] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  891.355362][T18805] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0
[  891.355373][T18805] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  891.355382][T18805] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  891.355392][T18805] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  891.355402][T18805] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  891.355422][T18805]  </TASK>
[  891.525622][T18809] team0: Device ipip0 is up. Set it down before adding it as a team port
[  891.791034][T18814] team0: Device ipip0 is up. Set it down before adding it as a team port
[  892.255954][T18821] Bluetooth: hci0: Frame reassembly failed (-84)
[  892.416934][T18829] netlink: 'syz.0.3685': attribute type 42 has an invalid length.
[  892.520568][T18837] syzkaller0: entered promiscuous mode
[  892.520584][T18837] syzkaller0: entered allmulticast mode
[  892.544201][T18837] tipc: Started in network mode
[  892.544221][T18837] tipc: Node identity 0a13e6b85d2, cluster identity 4711
[  892.548478][T18837] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  892.550557][T18836] tipc: Resetting bearer <eth:syzkaller0>
[  892.567713][T18836] tipc: Disabling bearer <eth:syzkaller0>
[  892.881025][T18847] FAULT_INJECTION: forcing a failure.
[  892.881025][T18847] name failslab, interval 1, probability 0, space 0, times 0
[  892.881057][T18847] CPU: 1 UID: 0 PID: 18847 Comm: syz.2.3691 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  892.881081][T18847] Tainted: [L]=SOFTLOCKUP
[  892.881089][T18847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  892.881100][T18847] Call Trace:
[  892.881107][T18847]  <TASK>
[  892.881114][T18847]  dump_stack_lvl+0x100/0x190
[  892.881143][T18847]  should_fail_ex.cold+0x5/0xa
[  892.881169][T18847]  should_failslab+0xc2/0x120
[  892.881198][T18847]  __kmalloc_cache_noprof+0x91/0x6d0
[  892.881218][T18847]  ? cgroup_init_fs_context+0x4eb/0x9c0
[  892.881250][T18847]  ? fscontext_alloc_log+0x4a/0x1b0
[  892.881275][T18847]  fscontext_alloc_log+0x4a/0x1b0
[  892.881295][T18847]  __ia32_sys_fsopen+0x15b/0x230
[  892.881319][T18847]  __do_fast_syscall_32+0x13a/0x8b0
[  892.881349][T18847]  do_fast_syscall_32+0x32/0x70
[  892.881376][T18847]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  892.881402][T18847] RIP: 0023:0xf702efec
[  892.881425][T18847] Code: Unable to access opcode bytes at 0xf702efc2.
[  892.881435][T18847] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 00000000000001ae
[  892.881458][T18847] RAX: ffffffffffffffda RBX: 00000000800010c0 RCX: 0000000000000000
[  892.881473][T18847] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  892.881485][T18847] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  892.881498][T18847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  892.881510][T18847] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  892.881536][T18847]  </TASK>
[  893.575054][T18851] team0: Device ipip0 is up. Set it down before adding it as a team port
[  894.289295][T13430] Bluetooth: hci0: command 0xfc11 tx timeout
[  894.291608][ T5743] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[  894.695342][ T5833] usb 8-1: new high-speed USB device number 54 using dummy_hcd
[  894.786435][T18874] team0: Device ipip0 is up. Set it down before adding it as a team port
[  894.865643][ T5833] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  894.866496][ T5833] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  894.866514][ T5833] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  894.866526][ T5833] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  894.866546][ T5833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  894.869480][ T5833] usb 8-1: config 0 descriptor??
[  895.897158][ T5833] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  896.133879][T18869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  896.134079][T18869] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  896.536154][    T9] usb 8-1: USB disconnect, device number 54
[  896.822770][T18897] Bluetooth: hci0: Frame reassembly failed (-84)
[  896.835703][   T75] Bluetooth: hci0: Frame reassembly failed (-84)
[  896.856764][T18901] team0: Device ipip0 is up. Set it down before adding it as a team port
[  897.460940][T18913] team0: Device ipip0 is up. Set it down before adding it as a team port
[  897.487849][T18911] FAULT_INJECTION: forcing a failure.
[  897.487849][T18911] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  897.487883][T18911] CPU: 1 UID: 0 PID: 18911 Comm: syz.3.3709 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  897.487906][T18911] Tainted: [L]=SOFTLOCKUP
[  897.487913][T18911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  897.487924][T18911] Call Trace:
[  897.487930][T18911]  <TASK>
[  897.487937][T18911]  dump_stack_lvl+0x100/0x190
[  897.487966][T18911]  should_fail_ex.cold+0x5/0xa
[  897.487990][T18911]  _copy_from_iter+0x1f4/0x1690
[  897.488019][T18911]  ? rcu_is_watching+0x13/0xc0
[  897.488040][T18911]  ? __pfx__copy_from_iter+0x10/0x10
[  897.488064][T18911]  ? __kasan_kmalloc+0xaa/0xb0
[  897.488088][T18911]  ? __kvmalloc_node_noprof+0x377/0x9b0
[  897.488111][T18911]  ? file_tty_write.isra.0+0x694/0x890
[  897.488166][T18911]  ? rcu_is_watching+0x13/0xc0
[  897.488185][T18911]  ? file_tty_write.isra.0+0x694/0x890
[  897.488218][T18911]  ? kfree+0x1e5/0x6d0
[  897.488241][T18911]  file_tty_write.isra.0+0x45b/0x890
[  897.488277][T18911]  vfs_write+0x6af/0x1050
[  897.488300][T18911]  ? __pfx_tty_write+0x10/0x10
[  897.488330][T18911]  ? __pfx_vfs_write+0x10/0x10
[  897.488350][T18911]  ? find_held_lock+0x2b/0x80
[  897.488390][T18911]  ksys_write+0x12a/0x250
[  897.488412][T18911]  ? __pfx_ksys_write+0x10/0x10
[  897.488433][T18911]  ? ksys_write+0x1ac/0x250
[  897.488454][T18911]  ? __pfx_ksys_write+0x10/0x10
[  897.488482][T18911]  __do_fast_syscall_32+0x13a/0x8b0
[  897.488506][T18911]  ? lockdep_hardirqs_on+0x7d/0x110
[  897.488531][T18911]  do_fast_syscall_32+0x32/0x70
[  897.488555][T18911]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  897.488578][T18911] RIP: 0023:0xf704efec
[  897.488599][T18911] Code: Unable to access opcode bytes at 0xf704efc2.
[  897.488608][T18911] RSP: 002b:00000000f53b950c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  897.488627][T18911] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080001040
[  897.488638][T18911] RDX: 000000000000096d RSI: 0000000000000000 RDI: 0000000000000000
[  897.488647][T18911] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  897.488657][T18911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  897.488666][T18911] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  897.488689][T18911]  </TASK>
[  898.145608][ T5881] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  898.295291][ T5881] usb 5-1: Using ep0 maxpacket: 8
[  898.296888][ T5881] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  898.297675][ T5881] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  898.297706][ T5881] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  898.297718][ T5881] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  898.297735][ T5881] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  898.297748][ T5881] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  898.297767][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  898.516527][ T5881] usb 5-1: usb_control_msg returned -71
[  898.516551][ T5881] usbtmc 5-1:16.0: can't read capabilities
[  898.522809][ T5881] usb 5-1: USB disconnect, device number 56
[  898.845338][T13430] Bluetooth: hci0: command 0xfc11 tx timeout
[  898.849639][ T5743] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[  899.395261][    T9] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  899.552577][    T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  899.555605][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  899.555633][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  899.555652][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  899.555687][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  899.559267][    T9] usb 6-1: config 0 descriptor??
[  899.663610][T18939] team0: Device ipip0 is up. Set it down before adding it as a team port
[  899.998399][    T9] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  900.420654][T18945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  900.431834][T18945] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  900.640573][T18949] syzkaller0: entered promiscuous mode
[  900.640592][T18949] syzkaller0: entered allmulticast mode
[  900.789063][ T5881] usb 6-1: USB disconnect, device number 45
[  900.835540][ T5809] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  901.016320][ T5809] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  901.017702][ T5809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  901.017729][ T5809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  901.017749][ T5809] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  901.017781][ T5809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  901.020224][ T5809] usb 5-1: config 0 descriptor??
[  901.117093][T18951] team0: Device ipip0 is up. Set it down before adding it as a team port
[  901.257231][T18961] Bluetooth: hci0: Frame reassembly failed (-84)
[  901.452786][ T5809] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  901.897158][T18975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  901.897526][T18975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  902.155327][ T5881] usb 8-1: new high-speed USB device number 55 using dummy_hcd
[  902.327321][ T5881] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  902.338045][ T5881] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  902.338103][ T5881] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  902.338321][ T5881] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  902.414028][ T5881] spcp8x5 8-1:1.0: SPCP8x5 converter detected
[  902.543273][ T5881] usb 8-1: SPCP8x5 converter now attached to ttyUSB0
[  902.637950][T18977] FAULT_INJECTION: forcing a failure.
[  902.637950][T18977] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  902.637983][T18977] CPU: 2 UID: 0 PID: 18977 Comm: syz.3.3730 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  902.638024][T18977] Tainted: [L]=SOFTLOCKUP
[  902.638031][T18977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  902.638041][T18977] Call Trace:
[  902.638048][T18977]  <TASK>
[  902.638056][T18977]  dump_stack_lvl+0x100/0x190
[  902.638086][T18977]  should_fail_ex.cold+0x5/0xa
[  902.638112][T18977]  strncpy_from_user+0x3b/0x2d0
[  902.638142][T18977]  do_getname+0x78/0x390
[  902.638169][T18977]  do_sys_openat2+0xc7/0x1e0
[  902.638198][T18977]  ? __pfx_do_sys_openat2+0x10/0x10
[  902.638229][T18977]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  902.638256][T18977]  __ia32_compat_sys_openat+0x12d/0x210
[  902.638275][T18977]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  902.638294][T18977]  ? fput+0x7c/0x100
[  902.638320][T18977]  ? ksys_write+0x1ac/0x250
[  902.638342][T18977]  ? __pfx_ksys_write+0x10/0x10
[  902.638368][T18977]  __do_fast_syscall_32+0x13a/0x8b0
[  902.638389][T18977]  ? lockdep_hardirqs_on+0x7d/0x110
[  902.638413][T18977]  do_fast_syscall_32+0x32/0x70
[  902.638437][T18977]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  902.638461][T18977] RIP: 0023:0xf704efec
[  902.638481][T18977] Code: Unable to access opcode bytes at 0xf704efc2.
[  902.638488][T18977] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127
[  902.638507][T18977] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000700
[  902.638520][T18977] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  902.638531][T18977] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  902.638542][T18977] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  902.638553][T18977] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  902.638577][T18977]  </TASK>
[  902.680157][ T5881] usb 8-1: USB disconnect, device number 55
[  902.766232][T11756] usb 5-1: USB disconnect, device number 57
[  902.811319][ T5881] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  902.824660][ T5881] spcp8x5 8-1:1.0: device disconnected
[  902.976609][T18984] FAULT_INJECTION: forcing a failure.
[  902.976609][T18984] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  902.976631][T18984] CPU: 0 UID: 0 PID: 18984 Comm: syz.2.3732 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  902.976647][T18984] Tainted: [L]=SOFTLOCKUP
[  902.976651][T18984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  902.976658][T18984] Call Trace:
[  902.976662][T18984]  <TASK>
[  902.976667][T18984]  dump_stack_lvl+0x100/0x190
[  902.976688][T18984]  should_fail_ex.cold+0x5/0xa
[  902.976704][T18984]  strncpy_from_user+0x3b/0x2d0
[  902.976723][T18984]  do_getname+0x78/0x390
[  902.976736][T18984]  do_sys_openat2+0xc7/0x1e0
[  902.976755][T18984]  ? __pfx_do_sys_openat2+0x10/0x10
[  902.976774][T18984]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  902.976792][T18984]  __ia32_compat_sys_openat+0x12d/0x210
[  902.976803][T18984]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  902.976814][T18984]  ? fput+0x7c/0x100
[  902.976830][T18984]  ? ksys_write+0x1ac/0x250
[  902.976843][T18984]  ? __pfx_ksys_write+0x10/0x10
[  902.976859][T18984]  __do_fast_syscall_32+0x13a/0x8b0
[  902.976873][T18984]  ? lockdep_hardirqs_on+0x7d/0x110
[  902.976887][T18984]  do_fast_syscall_32+0x32/0x70
[  902.976902][T18984]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  902.976916][T18984] RIP: 0023:0xf702efec
[  902.976929][T18984] Code: Unable to access opcode bytes at 0xf702efc2.
[  902.976934][T18984] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127
[  902.976946][T18984] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000100
[  902.976953][T18984] RDX: 0000000000100141 RSI: 000000000000000a RDI: 0000000000000000
[  902.976960][T18984] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  902.976966][T18984] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  902.976973][T18984] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  902.976987][T18984]  </TASK>
[  903.060681][   T38] Bluetooth: hci0: Frame reassembly failed (-84)
[  903.080646][T18986] Bluetooth: hci0: Frame reassembly failed (-84)
[  903.140128][T18988] team0: Device ipip0 is up. Set it down before adding it as a team port
[  903.223150][T18990] lo speed is unknown, defaulting to 1000
[  903.245651][T18992] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:19996
[  903.348671][T18990] lo speed is unknown, defaulting to 1000
[  903.400674][T18999] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3736'.
[  903.675317][T15151] usb 8-1: new high-speed USB device number 56 using dummy_hcd
[  903.835225][T15151] usb 8-1: Using ep0 maxpacket: 8
[  903.835904][T15151] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  903.837133][T15151] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  903.837162][T15151] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  903.837187][T15151] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  903.837206][T15151] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  903.837254][T15151] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  904.066724][T15151] usb 8-1: GET_CAPABILITIES returned 0
[  904.066762][T15151] usbtmc 8-1:16.0: can't read capabilities
[  904.292756][T19010] team0: Device ipip0 is up. Set it down before adding it as a team port
[  904.316172][   T65] usb 8-1: USB disconnect, device number 56
[  905.089915][ T5743] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[  905.094846][T13430] Bluetooth: hci0: command 0xfc11 tx timeout
[  905.317265][T19020] team0: Device ipip0 is up. Set it down before adding it as a team port
[  905.361001][T19022] team0: Device ipip0 is up. Set it down before adding it as a team port
[  905.985356][   T65] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  906.156062][   T65] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  906.157179][   T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  906.157205][   T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  906.157226][   T65] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  906.157262][   T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  906.159509][   T65] usb 5-1: config 0 descriptor??
[  906.218412][T19041] ucma_write: process 1007 (syz.1.3748) changed security contexts after opening file descriptor, this is not allowed.
[  906.245933][ T5809] usb 8-1: new high-speed USB device number 57 using dummy_hcd
[  906.324941][T19048] team0: Device ipip0 is up. Set it down before adding it as a team port
[  906.416322][ T5809] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  906.419018][ T5809] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  906.421181][ T5809] usb 8-1: config 0 descriptor??
[  906.573746][   T65] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  906.573784][   T65] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  906.573807][   T65] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  906.573829][   T65] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  906.573851][   T65] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  906.573872][   T65] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  906.573894][   T65] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  906.573915][   T65] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  906.573938][   T65] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  906.573959][   T65] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  906.626112][   T65] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  906.849101][T11756] usb 5-1: USB disconnect, device number 58
[  906.881269][T19052] fido_id[19052]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb5/report_descriptor': No such file or directory
[  906.895597][ T5809] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  906.901998][ T5809] [drm:udl_init] *ERROR* Selecting channel failed
[  907.382507][ T5809] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2
[  907.382533][ T5809] [drm] Initialized udl on minor 2
[  907.434020][ T5809] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  907.460544][ T5809] udl 8-1:0.0: [drm] Cannot find any crtc or sizes
[  907.634585][ T5809] usb 8-1: USB disconnect, device number 57
[  907.713226][T19059] team0: Device ipip0 is up. Set it down before adding it as a team port
[  909.074780][T19073] team0: Device ipip0 is up. Set it down before adding it as a team port
[  909.118646][T19077] team0: Device ipip0 is up. Set it down before adding it as a team port
[  909.151248][T19080] ipip0: entered promiscuous mode
[  909.217613][T19085] team0: Device ipip1 is up. Set it down before adding it as a team port
[  909.268481][T19081] loop5: detected capacity change from 0 to 6
[  909.282174][T19081] Dev loop5: unable to read RDB block 6
[  909.282463][T19081]  loop5: unable to read partition table
[  909.291885][T19081] loop5: partition table beyond EOD, truncated
[  909.291995][T19081] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  910.524409][T19092] FAULT_INJECTION: forcing a failure.
[  910.524409][T19092] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  910.524554][T19092] CPU: 1 UID: 0 PID: 19092 Comm: syz.2.3761 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  910.524582][T19092] Tainted: [L]=SOFTLOCKUP
[  910.524587][T19092] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  910.524594][T19092] Call Trace:
[  910.524598][T19092]  <TASK>
[  910.524603][T19092]  dump_stack_lvl+0x100/0x190
[  910.524622][T19092]  should_fail_ex.cold+0x5/0xa
[  910.524640][T19092]  strncpy_from_user+0x3b/0x2d0
[  910.524659][T19092]  do_getname+0x78/0x390
[  910.524672][T19092]  do_sys_openat2+0xc7/0x1e0
[  910.524690][T19092]  ? __pfx_do_sys_openat2+0x10/0x10
[  910.524709][T19092]  ? irqentry_exit+0x24d/0xa10
[  910.524723][T19092]  ? lockdep_hardirqs_on+0x7d/0x110
[  910.524738][T19092]  __ia32_compat_sys_openat+0x12d/0x210
[  910.524750][T19092]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  910.524767][T19092]  do_int80_emulation+0x166/0x650
[  910.524783][T19092]  asm_int80_emulation+0x1a/0x20
[  910.524794][T19092] RIP: 0023:0xf71675ab
[  910.524804][T19092] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  910.524815][T19092] RSP: 002b:00000000f53fc03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  910.524826][T19092] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53fc100
[  910.524833][T19092] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  910.524840][T19092] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  910.524846][T19092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  910.524853][T19092] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  910.524867][T19092]  </TASK>
[  910.744801][T19097] FAULT_INJECTION: forcing a failure.
[  910.744801][T19097] name failslab, interval 1, probability 0, space 0, times 0
[  910.744836][T19097] CPU: 2 UID: 0 PID: 19097 Comm: syz.1.3763 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  910.744863][T19097] Tainted: [L]=SOFTLOCKUP
[  910.744869][T19097] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  910.744880][T19097] Call Trace:
[  910.744886][T19097]  <TASK>
[  910.744894][T19097]  dump_stack_lvl+0x100/0x190
[  910.744928][T19097]  should_fail_ex.cold+0x5/0xa
[  910.744956][T19097]  should_failslab+0xc2/0x120
[  910.744988][T19097]  __kmalloc_noprof+0xfc/0x840
[  910.745013][T19097]  ? tomoyo_encode2+0xfb/0x3c0
[  910.745043][T19097]  tomoyo_encode2+0xfb/0x3c0
[  910.745070][T19097]  tomoyo_encode+0x29/0x50
[  910.745110][T19097]  tomoyo_realpath_from_path+0x18c/0x690
[  910.745168][T19097]  tomoyo_path_number_perm+0x23c/0x580
[  910.745189][T19097]  ? tomoyo_path_number_perm+0x22e/0x580
[  910.745213][T19097]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  910.745235][T19097]  ? get_pid_task+0x106/0x250
[  910.745266][T19097]  ? __lock_acquire+0x5c0/0x1f40
[  910.745310][T19097]  ? __fget_files+0x34/0x3d0
[  910.745337][T19097]  ? find_held_lock+0x2b/0x80
[  910.745362][T19097]  ? __fget_files+0x215/0x3d0
[  910.745385][T19097]  ? hook_file_ioctl_common+0x140/0x440
[  910.745406][T19097]  ? __fget_files+0x215/0x3d0
[  910.745436][T19097]  ? __fget_files+0x21f/0x3d0
[  910.745466][T19097]  security_file_ioctl_compat+0xd3/0x230
[  910.745489][T19097]  __ia32_compat_sys_ioctl+0xc2/0x360
[  910.745517][T19097]  __do_fast_syscall_32+0x13a/0x8b0
[  910.745545][T19097]  ? lockdep_hardirqs_on+0x7d/0x110
[  910.745573][T19097]  do_fast_syscall_32+0x32/0x70
[  910.745601][T19097]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  910.745626][T19097] RIP: 0023:0xf70aefec
[  910.745649][T19097] Code: Unable to access opcode bytes at 0xf70aefc2.
[  910.745659][T19097] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  910.745679][T19097] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c138fd0e
[  910.745692][T19097] RDX: 0000000080003000 RSI: 0000000000000000 RDI: 0000000000000000
[  910.745704][T19097] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  910.745716][T19097] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  910.745729][T19097] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  910.745753][T19097]  </TASK>
[  910.871826][T19097] ERROR: Out of memory at tomoyo_realpath_from_path.
[  910.913703][T19099] team0: Device ipip1 is up. Set it down before adding it as a team port
[  912.519321][T19111] team0: Device ipip0 is up. Set it down before adding it as a team port
[  914.971114][T19129] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  916.202867][T19142] FAULT_INJECTION: forcing a failure.
[  916.202867][T19142] name failslab, interval 1, probability 0, space 0, times 0
[  916.202901][T19142] CPU: 3 UID: 0 PID: 19142 Comm: syz.0.3775 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  916.202930][T19142] Tainted: [L]=SOFTLOCKUP
[  916.202938][T19142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  916.202950][T19142] Call Trace:
[  916.202958][T19142]  <TASK>
[  916.202968][T19142]  dump_stack_lvl+0x100/0x190
[  916.202999][T19142]  should_fail_ex.cold+0x5/0xa
[  916.203027][T19142]  should_failslab+0xc2/0x120
[  916.203059][T19142]  __kmalloc_noprof+0xfc/0x840
[  916.203085][T19142]  ? tomoyo_encode2+0xfb/0x3c0
[  916.203114][T19142]  tomoyo_encode2+0xfb/0x3c0
[  916.203142][T19142]  tomoyo_encode+0x29/0x50
[  916.203167][T19142]  tomoyo_realpath_from_path+0x18c/0x690
[  916.203198][T19142]  tomoyo_path_number_perm+0x23c/0x580
[  916.203219][T19142]  ? tomoyo_path_number_perm+0x22e/0x580
[  916.203241][T19142]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  916.203264][T19142]  ? get_pid_task+0x106/0x250
[  916.203292][T19142]  ? __lock_acquire+0x5c0/0x1f40
[  916.203334][T19142]  ? __fget_files+0x34/0x3d0
[  916.203361][T19142]  ? find_held_lock+0x2b/0x80
[  916.203385][T19142]  ? __fget_files+0x215/0x3d0
[  916.203408][T19142]  ? hook_file_ioctl_common+0x140/0x440
[  916.203429][T19142]  ? __fget_files+0x215/0x3d0
[  916.203459][T19142]  ? __fget_files+0x21f/0x3d0
[  916.203488][T19142]  security_file_ioctl_compat+0xd3/0x230
[  916.203512][T19142]  __ia32_compat_sys_ioctl+0xc2/0x360
[  916.203538][T19142]  __do_fast_syscall_32+0x13a/0x8b0
[  916.203565][T19142]  ? lockdep_hardirqs_on+0x7d/0x110
[  916.203591][T19142]  do_fast_syscall_32+0x32/0x70
[  916.203617][T19142]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  916.203642][T19142] RIP: 0023:0xf709efec
[  916.203666][T19142] Code: Unable to access opcode bytes at 0xf709efc2.
[  916.203677][T19142] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  916.203698][T19142] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c138fd09
[  916.203711][T19142] RDX: 0000000080001000 RSI: 0000000000000000 RDI: 0000000000000000
[  916.203724][T19142] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  916.203737][T19142] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  916.203750][T19142] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  916.203777][T19142]  </TASK>
[  916.203814][T19142] ERROR: Out of memory at tomoyo_realpath_from_path.
[  916.645792][T14692] usb 8-1: new high-speed USB device number 58 using dummy_hcd
[  916.715603][T19160] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  916.795625][T14692] usb 8-1: Using ep0 maxpacket: 8
[  916.797955][T14692] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  916.799044][T14692] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  916.799082][T14692] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  916.799101][T14692] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  916.799120][T14692] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  916.799139][T14692] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  916.799198][T14692] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  917.035399][   T30] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[  917.075375][   T65] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  917.122725][T14692] usb 8-1: usb_control_msg returned -71
[  917.122764][T14692] usbtmc 8-1:16.0: can't read capabilities
[  917.133376][T14692] usb 8-1: USB disconnect, device number 58
[  917.188149][T19174] veth3: entered promiscuous mode
[  917.188174][T19174] veth3: entered allmulticast mode
[  917.202429][   T30] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  917.203664][   T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  917.203687][   T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  917.203705][   T30] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  917.203736][   T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  917.225742][   T65] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  917.226547][   T65] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  917.226565][   T65] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  917.226576][   T65] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  917.226596][   T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  917.230699][   T65] usb 6-1: config 0 descriptor??
[  917.254649][   T30] usb 7-1: config 0 descriptor??
[  917.674386][   T65] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  917.696983][   T30] plantronics 0003:047F:FFFF.0015: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  917.713835][T19188] FAULT_INJECTION: forcing a failure.
[  917.713835][T19188] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  917.713857][T19188] CPU: 3 UID: 0 PID: 19188 Comm: syz.0.3792 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  917.713873][T19188] Tainted: [L]=SOFTLOCKUP
[  917.713877][T19188] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  917.713884][T19188] Call Trace:
[  917.713888][T19188]  <TASK>
[  917.713892][T19188]  dump_stack_lvl+0x100/0x190
[  917.713925][T19188]  should_fail_ex.cold+0x5/0xa
[  917.713940][T19188]  strncpy_from_user+0x3b/0x2d0
[  917.713960][T19188]  do_getname+0x78/0x390
[  917.713972][T19188]  do_sys_openat2+0xc7/0x1e0
[  917.713990][T19188]  ? __pfx_do_sys_openat2+0x10/0x10
[  917.714009][T19188]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  917.714027][T19188]  __ia32_compat_sys_openat+0x12d/0x210
[  917.714039][T19188]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  917.714050][T19188]  ? fput+0x7c/0x100
[  917.714065][T19188]  ? ksys_write+0x1ac/0x250
[  917.714078][T19188]  ? __pfx_ksys_write+0x10/0x10
[  917.714094][T19188]  __do_fast_syscall_32+0x13a/0x8b0
[  917.714108][T19188]  ? lockdep_hardirqs_on+0x7d/0x110
[  917.714122][T19188]  do_fast_syscall_32+0x32/0x70
[  917.714136][T19188]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  917.714151][T19188] RIP: 0023:0xf709efec
[  917.714164][T19188] Code: Unable to access opcode bytes at 0xf709efc2.
[  917.714170][T19188] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127
[  917.714181][T19188] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000300
[  917.714189][T19188] RDX: 0000000000000802 RSI: 0000000000000000 RDI: 0000000000000000
[  917.714195][T19188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  917.714202][T19188] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  917.714208][T19188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  917.714222][T19188]  </TASK>
[  918.042597][T19195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  918.042796][T19195] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  918.079989][T19196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  918.080432][T19196] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  918.228855][    T9] usb 7-1: USB disconnect, device number 45
[  918.388239][ T5819] usb 6-1: USB disconnect, device number 46
[  918.708340][T19204] team0: Device ipip0 is up. Set it down before adding it as a team port
[  918.759949][T19207] team0: Device ipip1 is up. Set it down before adding it as a team port
[  919.019809][T19220] team0: Device ipip0 is up. Set it down before adding it as a team port
[  919.115579][   T30] usb 8-1: new high-speed USB device number 59 using dummy_hcd
[  919.276524][   T30] usb 8-1: Using ep0 maxpacket: 32
[  919.277295][   T30] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  919.278426][   T30] usb 8-1: config index 0 descriptor too short (expected 29220, got 36)
[  919.278448][   T30] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  919.278465][   T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81
[  919.278501][   T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  919.278519][   T30] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  919.278539][   T30] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  919.278574][   T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  919.295359][   T30] usb 8-1: config 0 descriptor??
[  919.527350][   T30] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 59 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  919.783911][    C1] usblp0: nonzero read bulk status received: -71
[  919.784230][   T65] usb 8-1: USB disconnect, device number 59
[  919.786672][T19212] usblp0: error -71 reading from printer
[  919.793025][   T65] usblp0: removed
[  919.993732][T19236] team0: Device ipip1 is up. Set it down before adding it as a team port
[  920.308977][T19244] input: syz1 as /devices/virtual/input/input28
[  920.337471][T19251] FAULT_INJECTION: forcing a failure.
[  920.337471][T19251] name failslab, interval 1, probability 0, space 0, times 0
[  920.337494][T19251] CPU: 1 UID: 0 PID: 19251 Comm: syz.2.3813 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  920.337511][T19251] Tainted: [L]=SOFTLOCKUP
[  920.337516][T19251] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  920.337524][T19251] Call Trace:
[  920.337529][T19251]  <TASK>
[  920.337535][T19251]  dump_stack_lvl+0x100/0x190
[  920.337562][T19251]  should_fail_ex.cold+0x5/0xa
[  920.337579][T19251]  should_failslab+0xc2/0x120
[  920.337598][T19251]  __kmalloc_cache_noprof+0x91/0x6d0
[  920.337613][T19251]  ? ktime_get+0x22c/0x320
[  920.337631][T19251]  ? cec_queue_event_fh+0xcc/0x1060
[  920.337645][T19251]  cec_queue_event_fh+0xcc/0x1060
[  920.337658][T19251]  ? lockdep_init_map_type+0x5c/0x250
[  920.337680][T19251]  cec_open+0x40e/0x690
[  920.337694][T19251]  ? __pfx_cec_open+0x10/0x10
[  920.337710][T19251]  ? chrdev_open+0x10b/0x6a0
[  920.337728][T19251]  ? __pfx_cec_open+0x10/0x10
[  920.337740][T19251]  chrdev_open+0x234/0x6a0
[  920.337755][T19251]  ? __pfx_apparmor_file_open+0x10/0x10
[  920.337769][T19251]  ? __pfx_chrdev_open+0x10/0x10
[  920.337786][T19251]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  920.337807][T19251]  do_dentry_open+0x6ab/0x14d0
[  920.337822][T19251]  ? __pfx_chrdev_open+0x10/0x10
[  920.337841][T19251]  vfs_open+0x82/0x3f0
[  920.337861][T19251]  path_openat+0x19fa/0x2440
[  920.337880][T19251]  ? __pfx_path_openat+0x10/0x10
[  920.337900][T19251]  do_file_open+0x20e/0x430
[  920.337917][T19251]  ? __pfx_do_file_open+0x10/0x10
[  920.337943][T19251]  ? _raw_spin_unlock+0x28/0x50
[  920.337955][T19251]  ? alloc_fd+0x471/0x7a0
[  920.337974][T19251]  do_sys_openat2+0x10f/0x1e0
[  920.337992][T19251]  ? __pfx_do_sys_openat2+0x10/0x10
[  920.338011][T19251]  ? trace_event_raw_event_msr_trace_class+0x1a1/0x270
[  920.338032][T19251]  ? __pfx_trace_event_raw_event_msr_trace_class+0x10/0x10
[  920.338053][T19251]  __ia32_compat_sys_openat+0x12d/0x210
[  920.338065][T19251]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  920.338083][T19251]  do_int80_emulation+0x166/0x650
[  920.338101][T19251]  asm_int80_emulation+0x1a/0x20
[  920.338114][T19251] RIP: 0023:0xf71675ab
[  920.338124][T19251] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  920.338136][T19251] RSP: 002b:00000000f541d03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  920.338148][T19251] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f541d100
[  920.338156][T19251] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  920.338163][T19251] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  920.338169][T19251] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  920.338177][T19251] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  920.338191][T19251]  </TASK>
[  920.339558][T19251] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3813'.
[  920.498107][   T30] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  920.536941][T19259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3815'.
[  920.551637][T19259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3815'.
[  920.552303][T19259] hsr_slave_0: left promiscuous mode
[  920.557181][T19259] hsr_slave_1: left promiscuous mode
[  920.641120][T19263] FAULT_INJECTION: forcing a failure.
[  920.641120][T19263] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  920.641154][T19263] CPU: 0 UID: 0 PID: 19263 Comm: syz.3.3818 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  920.641179][T19263] Tainted: [L]=SOFTLOCKUP
[  920.641186][T19263] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  920.641197][T19263] Call Trace:
[  920.641204][T19263]  <TASK>
[  920.641212][T19263]  dump_stack_lvl+0x100/0x190
[  920.641244][T19263]  should_fail_ex.cold+0x5/0xa
[  920.641268][T19263]  _copy_from_user+0x2e/0xd0
[  920.641296][T19263]  cache_do_downcall+0x47/0x130
[  920.641323][T19263]  cache_write_procfs+0xfb/0x170
[  920.641347][T19263]  ? __pfx_cache_write_procfs+0x10/0x10
[  920.641372][T19263]  proc_reg_write+0x240/0x330
[  920.641403][T19263]  vfs_write+0x2aa/0x1050
[  920.641426][T19263]  ? __pfx_proc_reg_write+0x10/0x10
[  920.641452][T19263]  ? lock_acquire+0x1d1/0x380
[  920.641479][T19263]  ? __fget_files+0x34/0x3d0
[  920.641502][T19263]  ? __pfx_vfs_write+0x10/0x10
[  920.641523][T19263]  ? find_held_lock+0x2b/0x80
[  920.641545][T19263]  ? __fget_files+0x215/0x3d0
[  920.641573][T19263]  ? __fget_files+0x21f/0x3d0
[  920.641604][T19263]  ksys_write+0x12a/0x250
[  920.641626][T19263]  ? __pfx_ksys_write+0x10/0x10
[  920.641646][T19263]  ? ksys_write+0x1ac/0x250
[  920.641668][T19263]  ? __pfx_ksys_write+0x10/0x10
[  920.641695][T19263]  __do_fast_syscall_32+0x13a/0x8b0
[  920.641719][T19263]  ? lockdep_hardirqs_on+0x7d/0x110
[  920.641743][T19263]  do_fast_syscall_32+0x32/0x70
[  920.641773][T19263]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  920.641812][T19263] RIP: 0023:0xf704efec
[  920.641834][T19263] Code: Unable to access opcode bytes at 0xf704efc2.
[  920.641843][T19263] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  920.641863][T19263] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500
[  920.641875][T19263] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000000
[  920.641885][T19263] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  920.641896][T19263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  920.641908][T19263] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  920.641933][T19263]  </TASK>
[  920.666258][   T30] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  920.667257][   T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  920.667282][   T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  920.667300][   T30] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  920.667332][   T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  920.669556][   T30] usb 5-1: config 0 descriptor??
[  920.823144][T19265] team0: Device ipip0 is up. Set it down before adding it as a team port
[  921.112801][   T30] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  921.535863][T19285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  921.536253][T19285] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  921.905506][ T5809] usb 5-1: USB disconnect, device number 59
[  922.257206][T19296] team0: Device ipip0 is up. Set it down before adding it as a team port
[  922.333337][T19303] team0: Device ipip0 is up. Set it down before adding it as a team port
[  922.516858][T19311] jffs2: notice: (19311) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  922.851493][T19316] Bluetooth: hci0: Frame reassembly failed (-84)
[  923.657420][T19307] syz.3.3829 (19307) used greatest stack depth: 16480 bytes left
[  923.811192][T19330] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  923.867510][T19331] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3836'.
[  923.870824][T19334] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3836'.
[  924.926017][ T5743] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[  925.160017][T19345] FAULT_INJECTION: forcing a failure.
[  925.160017][T19345] name failslab, interval 1, probability 0, space 0, times 0
[  925.160055][T19345] CPU: 3 UID: 0 PID: 19345 Comm: syz.0.3839 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  925.160098][T19345] Tainted: [L]=SOFTLOCKUP
[  925.160106][T19345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  925.160118][T19345] Call Trace:
[  925.160125][T19345]  <TASK>
[  925.160135][T19345]  dump_stack_lvl+0x100/0x190
[  925.160169][T19345]  should_fail_ex.cold+0x5/0xa
[  925.160198][T19345]  should_failslab+0xc2/0x120
[  925.160230][T19345]  __kmalloc_cache_noprof+0x91/0x6d0
[  925.160257][T19345]  ? call_usermodehelper_setup+0xaf/0x360
[  925.160292][T19345]  ? __pfx_free_modprobe_argv+0x10/0x10
[  925.160317][T19345]  call_usermodehelper_setup+0xaf/0x360
[  925.160350][T19345]  __request_module+0x3c7/0x6a0
[  925.160376][T19345]  ? __pfx___request_module+0x10/0x10
[  925.160413][T19345]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  925.160443][T19345]  nvmf_dev_write+0x1f5/0xb60
[  925.160472][T19345]  vfs_write+0x2aa/0x1050
[  925.160498][T19345]  ? __pfx_nvmf_dev_write+0x10/0x10
[  925.160521][T19345]  ? lock_acquire+0x1d1/0x380
[  925.160552][T19345]  ? __fget_files+0x34/0x3d0
[  925.160579][T19345]  ? __pfx_vfs_write+0x10/0x10
[  925.160602][T19345]  ? find_held_lock+0x2b/0x80
[  925.160626][T19345]  ? __fget_files+0x215/0x3d0
[  925.160660][T19345]  ? __fget_files+0x215/0x3d0
[  925.160694][T19345]  ? __fget_files+0x21f/0x3d0
[  925.160733][T19345]  ksys_write+0x12a/0x250
[  925.160761][T19345]  ? __pfx_ksys_write+0x10/0x10
[  925.160797][T19345]  __do_fast_syscall_32+0x13a/0x8b0
[  925.160853][T19345]  do_fast_syscall_32+0x32/0x70
[  925.160885][T19345]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  925.160913][T19345] RIP: 0023:0xf709efec
[  925.160934][T19345] Code: Unable to access opcode bytes at 0xf709efc2.
[  925.160944][T19345] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  925.160964][T19345] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000
[  925.160977][T19345] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  925.160991][T19345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  925.161005][T19345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  925.161020][T19345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  925.161047][T19345]  </TASK>
[  925.163527][T19345] nvme_fabrics: missing parameter 'transport=%s'
[  925.163596][T19345] nvme_fabrics: missing parameter 'nqn=%s'
[  925.377954][T19351] team0: Device ipip1 is up. Set it down before adding it as a team port
[  925.535184][ T5818] usb 8-1: new high-speed USB device number 60 using dummy_hcd
[  925.685931][ T5818] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  925.687442][ T5818] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  925.687469][ T5818] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  925.687490][ T5818] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  925.687524][ T5818] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  925.689672][ T5818] usb 8-1: config 0 descriptor??
[  926.135736][ T5818] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  926.569568][T19368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  926.569974][T19368] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  926.738315][T19371] EXT4-fs warning (device sda1): __ext4_ioctl:1563: Setting inode version is not supported with metadata_csum enabled.
[  926.752226][ T5819] usb 8-1: USB disconnect, device number 60
[  926.798853][    T9] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  926.948116][    T9] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  926.949122][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  926.951138][    T9] usb 6-1: config 0 descriptor??
[  927.339686][    T9] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  927.339956][    T9] [drm:udl_init] *ERROR* Selecting channel failed
[  927.346189][    T9] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2
[  927.346202][    T9] [drm] Initialized udl on minor 2
[  927.355283][    T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  927.355459][    T9] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  927.372298][    T9] usb 6-1: USB disconnect, device number 47
[  927.383286][T15151] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  927.384917][T15151] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  927.690112][T19390] FAULT_INJECTION: forcing a failure.
[  927.690112][T19390] name failslab, interval 1, probability 0, space 0, times 0
[  927.690194][T19390] CPU: 3 UID: 0 PID: 19390 Comm: syz.0.3853 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  927.690218][T19390] Tainted: [L]=SOFTLOCKUP
[  927.690225][T19390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  927.690237][T19390] Call Trace:
[  927.690244][T19390]  <TASK>
[  927.690252][T19390]  dump_stack_lvl+0x100/0x190
[  927.690279][T19390]  should_fail_ex.cold+0x5/0xa
[  927.690300][T19390]  should_failslab+0xc2/0x120
[  927.690330][T19390]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[  927.690356][T19390]  ? __d_alloc+0x35/0xa50
[  927.690383][T19390]  __d_alloc+0x35/0xa50
[  927.690409][T19390]  ? __lock_acquire+0x5c0/0x1f40
[  927.690437][T19390]  d_alloc_parallel+0x105/0x14c0
[  927.690460][T19390]  ? rcu_is_watching+0x13/0xc0
[  927.690486][T19390]  ? lock_acquire+0x1d1/0x380
[  927.690511][T19390]  ? lookup_slow+0x42/0x70
[  927.690541][T19390]  ? __pfx_d_alloc_parallel+0x10/0x10
[  927.690564][T19390]  ? __pfx___might_resched+0x10/0x10
[  927.690588][T19390]  ? rcu_is_watching+0x13/0xc0
[  927.690612][T19390]  ? down_read+0x13b/0x4c0
[  927.690640][T19390]  ? __pfx_down_read+0x10/0x10
[  927.690669][T19390]  __lookup_slow+0x98/0x320
[  927.690692][T19390]  lookup_slow+0x50/0x70
[  927.690706][T19390]  link_path_walk+0x1377/0x1cc0
[  927.690739][T19390]  path_openat+0x1ac/0x2440
[  927.690763][T19390]  ? __pfx_path_openat+0x10/0x10
[  927.690798][T19390]  do_file_open+0x20e/0x430
[  927.690826][T19390]  ? __pfx_do_file_open+0x10/0x10
[  927.690862][T19390]  ? __pfx_kfree_link+0x10/0x10
[  927.690887][T19390]  ? _raw_spin_unlock+0x28/0x50
[  927.690905][T19390]  ? alloc_fd+0x471/0x7a0
[  927.690938][T19390]  do_sys_openat2+0x10f/0x1e0
[  927.690962][T19390]  ? __pfx_do_sys_openat2+0x10/0x10
[  927.690991][T19390]  ? irqentry_exit+0x24d/0xa10
[  927.691014][T19390]  ? lockdep_hardirqs_on+0x7d/0x110
[  927.691040][T19390]  __ia32_compat_sys_openat+0x12d/0x210
[  927.691059][T19390]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  927.691096][T19390]  do_int80_emulation+0x166/0x650
[  927.691121][T19390]  asm_int80_emulation+0x1a/0x20
[  927.691140][T19390] RIP: 0023:0xf71d75ab
[  927.691156][T19390] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  927.691174][T19390] RSP: 002b:00000000f548d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  927.691194][T19390] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f72a1b71
[  927.691204][T19390] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[  927.691213][T19390] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  927.691226][T19390] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  927.691237][T19390] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  927.691263][T19390]  </TASK>
[  930.189970][T19402] usb 1-1: USB disconnect, device number 2
[  930.309161][   T28] process 19384 (syz.0.3847) no longer affine to cpu1
[  930.327409][T19400] process 19388 (syz.3.3851) no longer affine to cpu1
[  930.457763][T19407] smpboot: CPU 1 is now offline
[  930.717996][T19407] smpboot: CPU 3 is now offline
[  930.859202][T19428] FAULT_INJECTION: forcing a failure.
[  930.859202][T19428] name failslab, interval 1, probability 0, space 0, times 0
[  930.859224][T19428] CPU: 0 UID: 0 PID: 19428 Comm: syz.2.3862 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  930.859241][T19428] Tainted: [L]=SOFTLOCKUP
[  930.859246][T19428] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  930.859254][T19428] Call Trace:
[  930.859258][T19428]  <TASK>
[  930.859263][T19428]  dump_stack_lvl+0x100/0x190
[  930.859283][T19428]  should_fail_ex.cold+0x5/0xa
[  930.859299][T19428]  should_failslab+0xc2/0x120
[  930.859319][T19428]  __kmalloc_node_track_caller_noprof+0xfa/0x870
[  930.859335][T19428]  ? __kasan_kmalloc+0xaa/0xb0
[  930.859350][T19428]  ? __request_module+0x2d5/0x6a0
[  930.859367][T19428]  kstrdup+0x51/0xe0
[  930.859380][T19428]  __request_module+0x2d5/0x6a0
[  930.859393][T19428]  ? __pfx___request_module+0x10/0x10
[  930.859412][T19428]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  930.859428][T19428]  nvmf_dev_write+0x1f5/0xb60
[  930.859444][T19428]  vfs_write+0x2aa/0x1050
[  930.859458][T19428]  ? __pfx_nvmf_dev_write+0x10/0x10
[  930.859470][T19428]  ? lock_acquire+0x1d1/0x380
[  930.859486][T19428]  ? __fget_files+0x34/0x3d0
[  930.859501][T19428]  ? __pfx_vfs_write+0x10/0x10
[  930.859514][T19428]  ? find_held_lock+0x2b/0x80
[  930.859528][T19428]  ? __fget_files+0x215/0x3d0
[  930.859543][T19428]  ? __fget_files+0x215/0x3d0
[  930.859560][T19428]  ? __fget_files+0x21f/0x3d0
[  930.859579][T19428]  ksys_write+0x12a/0x250
[  930.859593][T19428]  ? __pfx_ksys_write+0x10/0x10
[  930.859632][T19428]  __do_fast_syscall_32+0x13a/0x8b0
[  930.859651][T19428]  do_fast_syscall_32+0x32/0x70
[  930.859668][T19428]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  930.859683][T19428] RIP: 0023:0xf702efec
[  930.859696][T19428] Code: Unable to access opcode bytes at 0xf702efc2.
[  930.859702][T19428] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  930.859720][T19428] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000
[  930.859728][T19428] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  930.859735][T19428] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  930.859742][T19428] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  930.859749][T19428] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  930.859765][T19428]  </TASK>
[  930.859801][T19428] nvme_fabrics: missing parameter 'transport=%s'
[  930.859809][T19428] nvme_fabrics: missing parameter 'nqn=%s'
[  931.018554][ T1438] ieee802154 phy0 wpan0: encryption failed: -22
[  931.018678][ T1438] ieee802154 phy1 wpan1: encryption failed: -22
[  931.635206][T15151] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[  931.790837][T15151] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  931.791768][T15151] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  931.791784][T15151] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  931.791795][T15151] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  931.791815][T15151] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  931.794548][T15151] usb 6-1: config 0 descriptor??
[  931.958338][T19453] team0: Device ipip1 is up. Set it down before adding it as a team port
[  932.299353][T15151] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  932.315325][T15002] usb 8-1: new high-speed USB device number 61 using dummy_hcd
[  932.465822][T15002] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  932.466615][T15002] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  932.466632][T15002] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  932.466643][T15002] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  932.466662][T15002] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  932.468532][T15002] usb 8-1: config 0 descriptor??
[  932.601733][T19466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  932.603311][T19466] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  932.869815][T15151] usb 6-1: USB disconnect, device number 48
[  932.891364][T15002] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  933.277653][T19477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  933.277857][T19477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  933.620398][T19487] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  933.643799][T15151] usb 8-1: USB disconnect, device number 61
[  933.775765][T19494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3876'.
[  933.775812][T19494] bridge_slave_1: left allmulticast mode
[  933.775824][T19494] bridge_slave_1: left promiscuous mode
[  933.775938][T19494] bridge0: port 2(bridge_slave_1) entered disabled state
[  933.780833][T19494] bridge_slave_0: left allmulticast mode
[  933.780849][T19494] bridge_slave_0: left promiscuous mode
[  933.780948][T19494] bridge0: port 1(bridge_slave_0) entered disabled state
[  934.493507][T19522] team0: Device ipip0 is up. Set it down before adding it as a team port
[  935.349456][ T5819] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[  935.495659][ T5819] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  935.496561][ T5819] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  935.496579][ T5819] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  935.496592][ T5819] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  935.496612][ T5819] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  935.497914][ T5819] usb 7-1: config 0 descriptor??
[  935.624861][T19537] bond0: (slave syz_tun): Releasing backup interface
[  935.657995][T19537] bridge_slave_0: left allmulticast mode
[  935.658017][T19537] bridge_slave_0: left promiscuous mode
[  935.658148][T19537] bridge0: port 1(bridge_slave_0) entered disabled state
[  935.677302][T19537] bridge_slave_1: left allmulticast mode
[  935.677321][T19537] bridge_slave_1: left promiscuous mode
[  935.680295][T19537] bridge0: port 2(bridge_slave_1) entered disabled state
[  935.771931][T19537] bond0: (slave bond_slave_0): Releasing backup interface
[  935.787899][T19537] bond0: (slave bond_slave_1): Releasing backup interface
[  935.822454][T19537] team0: Port device team_slave_0 removed
[  935.837861][T19539] kernel profiling enabled (shift: 7)
[  935.851455][T19537] team0: Port device team_slave_1 removed
[  935.860955][T19537] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  935.861009][T19537] batman_adv: batadv0: Removing interface: batadv_slave_0
[  935.884533][T19537] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  935.884548][T19537] batman_adv: batadv0: Removing interface: batadv_slave_1
[  935.893332][T19537] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  935.909744][T19550] FAULT_INJECTION: forcing a failure.
[  935.909744][T19550] name failslab, interval 1, probability 0, space 0, times 0
[  935.909766][T19550] CPU: 0 UID: 0 PID: 19550 Comm: syz.1.3888 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  935.909783][T19550] Tainted: [L]=SOFTLOCKUP
[  935.909788][T19550] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  935.909795][T19550] Call Trace:
[  935.909800][T19550]  <TASK>
[  935.909805][T19550]  dump_stack_lvl+0x100/0x190
[  935.909828][T19550]  should_fail_ex.cold+0x5/0xa
[  935.909844][T19550]  should_failslab+0xc2/0x120
[  935.909864][T19550]  __kmalloc_node_track_caller_noprof+0xfa/0x870
[  935.909882][T19550]  ? __kasan_kmalloc+0xaa/0xb0
[  935.909897][T19550]  ? __request_module+0x2d5/0x6a0
[  935.909912][T19550]  kstrdup+0x51/0xe0
[  935.909926][T19550]  __request_module+0x2d5/0x6a0
[  935.909939][T19550]  ? __pfx___request_module+0x10/0x10
[  935.909959][T19550]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  935.909976][T19550]  nvmf_dev_write+0x1f5/0xb60
[  935.909991][T19550]  vfs_write+0x2aa/0x1050
[  935.910006][T19550]  ? __pfx_nvmf_dev_write+0x10/0x10
[  935.910018][T19550]  ? lock_acquire+0x1d1/0x380
[  935.910035][T19550]  ? __fget_files+0x34/0x3d0
[  935.910051][T19550]  ? __pfx_vfs_write+0x10/0x10
[  935.910064][T19550]  ? find_held_lock+0x2b/0x80
[  935.910077][T19550]  ? __fget_files+0x215/0x3d0
[  935.910090][T19550]  ? __fget_files+0x215/0x3d0
[  935.910109][T19550]  ? __fget_files+0x21f/0x3d0
[  935.910128][T19550]  ksys_write+0x12a/0x250
[  935.910141][T19550]  ? __pfx_ksys_write+0x10/0x10
[  935.910159][T19550]  __do_fast_syscall_32+0x13a/0x8b0
[  935.910176][T19550]  do_fast_syscall_32+0x32/0x70
[  935.910210][T19550]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  935.910227][T19550] RIP: 0023:0xf70aefec
[  935.910241][T19550] Code: Unable to access opcode bytes at 0xf70aefc2.
[  935.910246][T19550] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  935.910258][T19550] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000
[  935.910266][T19550] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  935.910273][T19550] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  935.910280][T19550] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  935.910286][T19550] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  935.910301][T19550]  </TASK>
[  935.910341][T19550] nvme_fabrics: missing parameter 'transport=%s'
[  935.910348][T19550] nvme_fabrics: missing parameter 'nqn=%s'
[  935.933606][T19541] Bluetooth: hci0: Frame reassembly failed (-84)
[  935.979662][   T57] Bluetooth: hci0: Frame reassembly failed (-84)
[  936.036780][ T5819] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  936.062819][T19537] 
[  936.063644][T19537] ======================================================
[  936.065852][T19537] WARNING: possible circular locking dependency detected
[  936.068052][T19537] syzkaller #0 Tainted: G             L     
[  936.070511][T19537] ------------------------------------------------------
[  936.073260][T19537] syz.3.3885/19537 is trying to acquire lock:
[  936.075650][T19537] ffff88801cbf5540 ((wq_completion)md_misc){+.+.}-{0:0}, at: touch_wq_lockdep_map+0x9c/0x1c0
[  936.079627][T19537] 
[  936.079627][T19537] but task is already holding lock:
[  936.082546][T19537] ffffffff8f9be700 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0
[  936.085677][T19537] 
[  936.085677][T19537] which lock already depends on the new lock.
[  936.085677][T19537] 
[  936.089532][T19537] 
[  936.089532][T19537] the existing dependency chain (in reverse order) is:
[  936.092961][T19537] 
[  936.092961][T19537] -> #3 (major_names_lock){+.+.}-{4:4}:
[  936.095721][T19537]        lock_acquire+0x1d1/0x380
[  936.097568][T19537]        __mutex_lock+0x1a4/0x1bd0
[  936.099384][T19537]        blk_probe_dev+0x28/0x1e0
[  936.101275][T19537]        blk_request_module+0x16/0xc0
[  936.103057][T19537]        blkdev_get_no_open+0x9b/0xf0
[  936.104834][T19537]        bdev_file_open_by_dev+0x70/0x210
[  936.106634][T19537]        md_import_device+0x120/0x360
[  936.108344][T19537]        md_add_new_disk+0xcc0/0x1820
[  936.110039][T19537]        md_ioctl+0x2bec/0x36d0
[  936.111624][T19537]        compat_blkdev_ioctl+0x682/0x7b0
[  936.113404][T19537]        __ia32_compat_sys_ioctl+0x2cf/0x360
[  936.115282][T19537]        __do_fast_syscall_32+0x13a/0x8b0
[  936.117079][T19537]        do_fast_syscall_32+0x32/0x70
[  936.118765][T19537]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  936.120908][T19537] 
[  936.120908][T19537] -> #2 (&mddev->reconfig_mutex){+.+.}-{4:4}:
[  936.123464][T19537]        lock_acquire+0x1d1/0x380
[  936.125072][T19537]        __mutex_lock+0x1a4/0x1bd0
[  936.126711][T19537]        md_start_sync+0xc4/0xea0
[  936.128324][T19537]        process_one_work+0xac7/0x1b10
[  936.130050][T19537]        worker_thread+0x5ef/0xe50
[  936.131709][T19537]        kthread+0x373/0x450
[  936.133205][T19537]        ret_from_fork+0x730/0xd60
[  936.134816][T19537]        ret_from_fork_asm+0x1a/0x30
[  936.136477][T19537] 
[  936.136477][T19537] -> #1 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}:
[  936.139393][T19537]        lock_acquire+0x1d1/0x380
[  936.141014][T19537]        process_one_work+0xa32/0x1b10
[  936.142721][T19537]        worker_thread+0x5ef/0xe50
[  936.144345][T19537]        kthread+0x373/0x450
[  936.145812][T19537]        ret_from_fork+0x730/0xd60
[  936.147418][T19537]        ret_from_fork_asm+0x1a/0x30
[  936.149108][T19537] 
[  936.149108][T19537] -> #0 ((wq_completion)md_misc){+.+.}-{0:0}:
[  936.152162][T19537]        check_prev_add+0xeb/0xe60
[  936.154184][T19537]        __lock_acquire+0x1528/0x1f40
[  936.156307][T19537]        lock_acquire+0x1d1/0x380
[  936.158293][T19537]        touch_wq_lockdep_map+0xad/0x1c0
[  936.160531][T19537]        __flush_workqueue+0x131/0x1200
[  936.162719][T19537]        md_alloc+0x30/0x10a0
[  936.164595][T19537]        md_probe+0x73/0xf0
[  936.166397][T19537]        blk_probe_dev+0x149/0x1e0
[  936.168435][T19537]        blk_request_module+0x16/0xc0
[  936.170570][T19537]        blkdev_get_no_open+0x9b/0xf0
[  936.172704][T19537]        bdev_file_open_by_dev+0x70/0x210
[  936.174946][T19537]        swsusp_check+0x72/0x470
[  936.176936][T19537]        software_resume+0x6f/0x330
[  936.178996][T19537]        resume_store+0x248/0x460
[  936.180997][T19537]        kobj_attr_store+0x58/0x80
[  936.183029][T19537]        sysfs_kf_write+0xf2/0x150
[  936.185066][T19537]        kernfs_fop_write_iter+0x3e0/0x5f0
[  936.187365][T19537]        vfs_write+0x6af/0x1050
[  936.189308][T19537]        ksys_write+0x12a/0x250
[  936.191268][T19537]        __do_fast_syscall_32+0x13a/0x8b0
[  936.193538][T19537]        do_fast_syscall_32+0x32/0x70
[  936.195667][T19537]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  936.198350][T19537] 
[  936.198350][T19537] other info that might help us debug this:
[  936.198350][T19537] 
[  936.202315][T19537] Chain exists of:
[  936.202315][T19537]   (wq_completion)md_misc --> &mddev->reconfig_mutex --> major_names_lock
[  936.202315][T19537] 
[  936.207845][T19537]  Possible unsafe locking scenario:
[  936.207845][T19537] 
[  936.210873][T19537]        CPU0                    CPU1
[  936.212783][T19537]        ----                    ----
[  936.214455][T19537]   lock(major_names_lock);
[  936.215902][T19537]                                lock(&mddev->reconfig_mutex);
[  936.218267][T19537]                                lock(major_names_lock);
[  936.220474][T19537]   lock((wq_completion)md_misc);
[  936.222010][T19537] 
[  936.222010][T19537]  *** DEADLOCK ***
[  936.222010][T19537] 
[  936.224452][T19537] locks held by syz.3.3885/19537: 6, last CPU#2:
[  936.226429][T19537]  #0: ffff888021371b30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  936.229262][T19537]  #1: ffff888000258460 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  936.232115][T19537]  #2: ffff88801cbf4080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  936.235112][T19537]  #3: ffff88801d3695a8 (kn->active#104){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  936.238227][T19537]  #4: ffffffff8eca2700 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x65/0x330
[  936.241700][T19537]  #5: ffffffff8f9be700 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0
[  936.245396][T19537] 
[  936.245396][T19537] stack backtrace:
[  936.247725][T19537] CPU: 2 UID: 0 PID: 19537 Comm: syz.3.3885 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  936.251902][T19537] Tainted: [L]=SOFTLOCKUP
[  936.253495][T19537] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  936.256735][T19537] Call Trace:
[  936.257924][T19537]  <TASK>
[  936.258894][T19537]  dump_stack_lvl+0x100/0x190
[  936.260428][T19537]  print_circular_bug.cold+0x178/0x1be
[  936.262166][T19537]  check_noncircular+0x146/0x160
[  936.263751][T19537]  check_prev_add+0xeb/0xe60
[  936.265251][T19537]  __lock_acquire+0x1528/0x1f40
[  936.266813][T19537]  ? check_prev_add+0x354/0xe60
[  936.268376][T19537]  lock_acquire+0x1d1/0x380
[  936.269890][T19537]  ? touch_wq_lockdep_map+0x9c/0x1c0
[  936.271927][T19537]  ? lockdep_init_map_type+0x5c/0x250
[  936.273641][T19537]  ? touch_wq_lockdep_map+0x9c/0x1c0
[  936.275305][T19537]  touch_wq_lockdep_map+0xad/0x1c0
[  936.276930][T19537]  ? touch_wq_lockdep_map+0x9c/0x1c0
[  936.278596][T19537]  __flush_workqueue+0x131/0x1200
[  936.280192][T19537]  ? rcu_is_watching+0x13/0xc0
[  936.281736][T19537]  ? trace_contention_end+0x126/0x160
[  936.283435][T19537]  ? __mutex_lock+0x26c/0x1bd0
[  936.284964][T19537]  ? __pfx___flush_workqueue+0x10/0x10
[  936.286683][T19537]  ? lock_acquire+0x1d1/0x380
[  936.288192][T19537]  ? find_inode_fast+0x1fa/0xa30
[  936.289759][T19537]  md_alloc+0x30/0x10a0
[  936.291102][T19537]  md_probe+0x73/0xf0
[  936.292413][T19537]  ? __pfx_md_probe+0x10/0x10
[  936.293904][T19537]  blk_probe_dev+0x149/0x1e0
[  936.295375][T19537]  blk_request_module+0x16/0xc0
[  936.296922][T19537]  blkdev_get_no_open+0x9b/0xf0
[  936.298455][T19537]  bdev_file_open_by_dev+0x70/0x210
[  936.300112][T19537]  swsusp_check+0x72/0x470
[  936.301555][T19537]  software_resume+0x6f/0x330
[  936.303049][T19537]  resume_store+0x248/0x460
[  936.304409][T19537]  ? __pfx_resume_store+0x10/0x10
[  936.305961][T19537]  ? find_held_lock+0x2b/0x80
[  936.307449][T19537]  ? sysfs_file_kobj+0xe4/0x290
[  936.308985][T19537]  ? sysfs_file_kobj+0xe4/0x290
[  936.310538][T19537]  ? __pfx_resume_store+0x10/0x10
[  936.312159][T19537]  kobj_attr_store+0x58/0x80
[  936.313626][T19537]  ? __pfx_kobj_attr_store+0x10/0x10
[  936.315296][T19537]  sysfs_kf_write+0xf2/0x150
[  936.316770][T19537]  kernfs_fop_write_iter+0x3e0/0x5f0
[  936.318435][T19537]  ? __pfx_sysfs_kf_write+0x10/0x10
[  936.320075][T19537]  vfs_write+0x6af/0x1050
[  936.321461][T19537]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  936.323288][T19537]  ? __pfx_vfs_write+0x10/0x10
[  936.324812][T19537]  ? find_held_lock+0x2b/0x80
[  936.326299][T19537]  ksys_write+0x12a/0x250
[  936.327662][T19537]  ? __pfx_ksys_write+0x10/0x10
[  936.329207][T19537]  __do_fast_syscall_32+0x13a/0x8b0
[  936.330862][T19537]  do_fast_syscall_32+0x32/0x70
[  936.332410][T19537]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  936.334394][T19537] RIP: 0023:0xf704efec
[  936.335698][T19537] Code: Unable to access opcode bytes at 0xf704efc2.
[  936.337793][T19537] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  936.340423][T19537] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 0000000080000180
[  936.342880][T19537] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000
[  936.345363][T19537] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  936.347833][T19537] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  936.350312][T19537] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  936.352844][T19537]  </TASK>
[  936.376727][T19554] team0: Device ipip0 is up. Set it down before adding it as a team port
[  936.394398][T19539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3885'.
[  936.407116][T19537] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  936.407129][T19537] PM: Image not found (code -6)
[  936.459582][T19556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  936.460241][T19556] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  936.746996][T15002] usb 7-1: USB disconnect, device number 46
[  937.965183][ T5743] Bluetooth: hci0: Entering manufacturer mode failed (-110)