last executing test programs:

2m27.785355064s ago: executing program 0 (id=2191):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0)
r1 = openat(r0, &(0x7f0000000380)='./dev/sda\x00', 0x45002, 0x0)
ioctl$VHOST_VDPA_SET_STATUS(r1, 0x1265, 0x0)

2m27.712499827s ago: executing program 0 (id=2193):
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket(0x10, 0x2, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
clock_adjtime(0x0, 0x0)
write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r1, &(0x7f0000002ec0), 0x0, 0x2, 0x0)

2m26.773641989s ago: executing program 0 (id=2197):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = add_key$fscrypt_v1(&(0x7f00000023c0), &(0x7f0000002500)={'fscrypt:', @desc1}, &(0x7f0000002540)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1", 0x14}, 0x48, 0xffffffffffffffff)
keyctl$KEYCTL_WATCH_KEY(0x6, r1, 0xffffffffffffffff, 0x4)
sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000100)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='ext4\x00', 0x8410, 0x0)
chdir(&(0x7f00000022c0)='./mnt\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000002300)='./mnt\x00', 0x0, 0x21)
r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0xfffffffffffffffd)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
kexec_load(0x6cd8, 0x0, &(0x7f00000001c0), 0x140000)
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./dev/sda1\x00', &(0x7f0000000200), &(0x7f0000000240)={0x0, 0xfb, 0x101, 0x7, 0x1b, "0600bb78ffac0977ef81f0514ab4a7d4", "f788496176fcf2d5999aba273d4a85fb8d0eb7a48c2c271022383de28af2fd3a6f25ddf8a989febf58e79cb0544b0eada3ad34621b5903967019f1cf43bb2231d8ab8e0e11be9650686f5d15ab404408d7b6754553a51c80a3286d716297cad21c936ff59b8b808829eccdf5a9a780b10762d045ad69a7299fc1c014f70667e7f97a8fe56369b417b65821f7da813f755ed383b38c4f0d7b1e72eb6db759b190151f8e9ac15a1edee2cd946dbe43897eb8e2cb058047309035bea23079ad9784be3ab57598365b5563ae7293c11b4de5880c9b86ed6aae0e4b1bbe5fdfb7cc2ac52820b7065042045a9be732"}, 0x101, 0x3)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000002340)=@v1={0x0, @aes128, 0x1, @desc1})
r4 = openat$cgroup_subtree(r2, &(0x7f0000002380), 0x2, 0x0)
write$cgroup_subtree(r4, 0x0, 0x5)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000880)={0x1, @in6={{0xa, 0x4e23, 0xa, @rand_addr=' \x01\x00', 0x2}}, 0x6, 0x0, 0x10, 0x5, 0xc0, 0xc05b, 0x6}, &(0x7f0000000940)=0x9c)
mknodat$null(r2, &(0x7f0000000680)='./mnt\x00', 0x200, 0x103)

2m26.617019921s ago: executing program 0 (id=2199):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x400000000010, 0x3, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3)
ioctl$PPPIOCSPASS(r0, 0x40087447, &(0x7f0000000140)={0x0, 0x0})
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$nci(0xffffff9c, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1ff, 0x80800)
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000280))
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
pipe2(0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=<r3=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r4, 0x2000000, 0x5, 0x0, &(0x7f0000000900)="63eced8e46", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
syz_ublk_setup_queues(0xffffffffffffffff, r3, &(0x7f0000000040)={0x0, 0xc1, 0x2, 0x0, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x0, 0x3, 0x37e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x10, 0x0, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626b, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

2m25.665630341s ago: executing program 0 (id=2204):
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='md0\x00', 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='1.2\x00', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='1:0\x00', 0x4)
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/47, 0x2f}], 0x1, 0x5, 0x4000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="3221296006596fe3a545300d01fff9a00925a79a833fe2a292072bd42c7373360acc21226087e4ebe0d67cd6cd7939181e3059ae33d095cb78", @ANYRES64=r1, @ANYBLOB="010028bd7000fbdbdf250600000008000b0002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10004881}, 0x4009000)
request_key(&(0x7f0000001e80)='keyring\x00', &(0x7f0000001ec0)={'syz', 0x0}, &(0x7f0000001f00)='\'\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r5 = getpgrp(0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000440)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000500)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0)
r8 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r8, &(0x7f0000001f40)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f000001af40)='./config\x00', 0x1ff)
mount(0x0, &(0x7f000001af80)='./config\x00', &(0x7f000001afc0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f000001b000)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f000001b040)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)

2m24.50591795s ago: executing program 0 (id=2210):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x1c, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="660a00000010000061114e0000000000850000008900000095"], &(0x7f0000000100)='GPL\x00', 0x2}, 0x94)

2m9.567137747s ago: executing program 32 (id=2210):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x1c, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="660a00000010000061114e0000000000850000008900000095"], &(0x7f0000000100)='GPL\x00', 0x2}, 0x94)

30.090786946s ago: executing program 1 (id=2707):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000000380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_GETXATTR(r0, &(0x7f00000023c0)={0x18, 0x0, r1, {0x7}}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000002400)='./bus\x00', 0x180)
syz_io_uring_setup(0x20e8, &(0x7f0000002500)={0x0, 0x5963, 0x800, 0x4, 0x4e}, 0x0, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002580))
pselect6(0x40, &(0x7f0000002600)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x80000000}, 0x0, &(0x7f0000002640)={0x3ff, 0x4000000000000, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x100000000000000}, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000002440)='./bus\x00', &(0x7f0000002480), 0x8, &(0x7f00000024c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

29.219034721s ago: executing program 1 (id=2710):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f000000ab40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000009400)=[@iv={0x20, 0x117, 0x2, 0x10, "cac84d1a89d22e0c616e7d5b8f0ba9a5"}], 0x21, 0x8800}], 0x1, 0x4000)

28.872579311s ago: executing program 1 (id=2711):
socket$packet(0x11, 0x2, 0x300)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000440))
syz_open_dev$sndpcmp(&(0x7f0000000580), 0x0, 0xa2865)
r2 = syz_open_procfs(0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
readv(r2, 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
ioctl$VHOST_VDPA_SET_CONFIG(r2, 0x4008af74, &(0x7f0000000500)={0x2, 0x58, "cc21d352e2ac49681f8e47298e6033bee6e32fb45f75bb37cbcf60ce741150f94a0a0883b389a6241954cfb538992c4325a92554986d1fb55211c7698678858721896a5833e5f3cf5351f9a933736d4050362bc384844561"})
r3 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2c0000, 0xc8200)
kcmp(0x0, 0x0, 0x1, r3, r0)
r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r8=>0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x11c, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x4, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf930, 0x0, 0x0, 0x1f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x4000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

20.341930228s ago: executing program 3 (id=2745):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x400000000010, 0x3, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3)
ioctl$PPPIOCSPASS(r0, 0x40087447, &(0x7f0000000140)={0x0, 0x0})
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
pipe2(0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x2000000, 0x5, 0x0, &(0x7f0000000900)="63eced8e46", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f0000000040)={0x0, 0xc1, 0x2, 0x0, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x0, 0x3, 0x37e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x10, 0x0, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626b, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

18.567213161s ago: executing program 3 (id=2749):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r0 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000800)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c)

18.565902045s ago: executing program 3 (id=2750):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat$dir(0xffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4000, 0x18)
r1 = openat(r0, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', 0x1, 0x0)
write$binfmt_register(r1, &(0x7f0000000140)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x6969, 0x3a, '!]{', 0x3a, '(^\x1e', 0x3a, './file0'}, 0x2d)
mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x4000, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
mkdir(&(0x7f0000000180)='./my_sys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000480)=0x7f, 0x3)
personality(0x619641b6fb4b8591)
write(r1, &(0x7f0000000380), 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000000314230c2abd7000ffdbdf25090002007300003100000000080041007369770014001400766c616e310000000000000000000098"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20044001)
personality(0x400000d)
ioctl$SNDRV_PCM_IOCTL_PAUSE(r2, 0x40044145, &(0x7f0000000000)=0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async)
openat$dir(0xffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4000, 0x18) (async)
openat(r0, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', 0x1, 0x0) (async)
write$binfmt_register(r1, &(0x7f0000000140)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x6969, 0x3a, '!]{', 0x3a, '(^\x1e', 0x3a, './file0'}, 0x2d) (async)
mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x4000, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async)
mkdir(&(0x7f0000000180)='./my_sys\x00', 0x1ff) (async)
mount(0x0, &(0x7f00000001c0)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) (async)
sendfile(r3, r3, &(0x7f0000000480)=0x7f, 0x3) (async)
personality(0x619641b6fb4b8591) (async)
write(r1, &(0x7f0000000380), 0x0) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000000314230c2abd7000ffdbdf25090002007300003100000000080041007369770014001400766c616e310000000000000000000098"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20044001) (async)
personality(0x400000d) (async)
ioctl$SNDRV_PCM_IOCTL_PAUSE(r2, 0x40044145, &(0x7f0000000000)=0x1) (async)

18.488717935s ago: executing program 3 (id=2751):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r3 = syz_io_uring_setup(0xf00, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)=<r4=>0x0, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000380)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f00000003c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1001, &(0x7f0000000440)={0x0, 0x989680}, 0x1, 0x1})
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000480)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x1, &(0x7f0000000500)={0x0, 0x2710}})
io_uring_enter(r3, 0x2, 0x0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r2, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x12}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000840)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8}]}, 0x9c}, 0x1, 0xfffff000}, 0x8000)

18.391613438s ago: executing program 3 (id=2752):
syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000600)={0x0, 0x7})
syz_open_procfs(0x0, &(0x7f0000000180)='net/rpc\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./trace\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./trace/events/kmem/kmalloc/filter\x00', 0x2, 0x0)
write(r1, &(0x7f0000000580)="63616c6c5f736974652e66756e6374696f6e203d3d207666735f726561640ab3", 0x20)
r2 = memfd_create(&(0x7f0000000980)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x10\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?Y\x96\xab\xc7\x06F\x8e\xab\xc8\x1e\x89]\x13bZ\x8d \x19\x00k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]Z\x88\xecIf\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89vr\xc5j\xec\x1b\xaa\x996\x14e\xff\xffxQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19#\xe8k\xa1\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf]\x0e\a\x00\x91T\x1b\xee\x10\x92\x80m\xc7\x90\x9fU\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\a\x84\xb2j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe0<uc\xbc\xec\xe5\xc79\x9c\xcf\xa4m\x06\x12\xd0IY\x18\x15\x8d\x01P\x12/\xfcd\xfe\xa0\xc7-\x9a+\xf3\xf9R\x85\xa5~\x90\xbeC\xee\xe9\'\x9fW\xa5\xfa\xb9\xc8\x85\x16\xb2\xe2\x8f\xfa)?6\x0e\xac-\x82\xe3\xc1\xf7\xd3\x04\xf7\x0e\xe7v\xb2{\xaa\xfc)\xcb\xd4D\xf6#%I\xad\xaap\xddX\x14e\x11\xd8\xb3\xe9\xf2@\x97\xfa\x16\xe9\xb4l\x0e9\xf4\x9e\xefT\x9d\x18\xba\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00X\xc1\x9c\xd7\xed\xadC\xc6\xc9\xd6\xe6\xfe*t\x06\xeb]\vr-\x04{\x86\xcb\xbb4?\xa1\xb5S\xb8\x10pg\xbd\xce\x84\xe9\xfdZ\f\xeb\xd0c\x02\xdc\x90\t\x9fR\x01C8\xa8\xd9\x93\x1a\x97y\xf5\x88\v\x8b=\x14x\xe4l[$\xfa\x8d\xd0\"-\x82\xad\x1c\f\x9c\xc6$@7\x98c%\x13rSqy\xca\x02\xb0\xc4c\xdc\xba\xca\xec#\xe4:d\x12\xc9 @\xa8\xd9\xd5\x14\x06\xf9r\xcd\xb9n\x03\xfa\x06\x85\x0f\xed03\xef\x01\xe3\x86\x91\xe6\xbc\xcb\x86d\xbei@&\xf8B|nNQ\xe3\'\xb3\x9b\xae\"\xd3\xf0\xa5\x8bT-\x83\xf4\xec\xbf\xa0:\xfa\x8c\xb7\r\xa0\f)p\xa3I;R\xb7v\xf9\x14\x96z\x8d\xbd6\x87\x99\x1f]\x9fMDK\xea\xd1\xdf@\xc1\xb2z\xd6[\xed\xf0mT\xd1\x84V\'\x95\f\x16\xf5I\xb5b\xb5\x1e=\xd8\x13\x92z\f}\x05:[\b\x1a\x03\x04?wx#\x81}\xff\xfb\x99\xe6J\x1d\xf8?sB\xc8)<&\xfc\x91\xe50\xac\xbb\t%Y&\xad\xd8#]\x8e\x7fo\xde\xc4\x16\xa4\x05\xdf\x8c\x99]<\xc0\"\x80|\x19\x8fr\x97\xc4\xc6\xc5\xe6 (T\x8f\xf1\x11\xbdT\x1b\xf2\xd4\xa4}\xcd\xa6D\xcb\xe0Y\xf0\x150\x89\"\x96\xf7\xae^\x1b\xb0\xcd\xe1N\xbc-p\x04\x06_Nt\xce\x93\x9e\xdaD8\xaa9\xe2\xf1\x18BqN\xe2\xc1\xb4,\xcf4\xcc\xa9H8\xacQ\xfe\xac\xa1\xd5\xe7\x87\x93\xee\x1aD\xc0$eR\xdc\xa1\xe5%C*VFH\fN\xa6DX\xaf\x7fj\x00\x00\x00\x00\x00\x00U\xbf8\xf2\x1b\xc1\xd9\a\xf4\xe4*\xb6;\xb9YomDAN\x10)%\xab=\xac\x9d/\xe3\xb0ybns%\xa7e\xcf\xfd\xe8r*\n\xe0\xc19#\xc7\xe2\xbeX\xcb\xc9\xb9\xd3&\x84S-\xfc\xc2\xd6\xa1\x15F\x19\xa7\x93y\xf1]\xd3\x93\xa9m\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x99\xe6\xf5\b(N\x06@\xb3\x05U\xd5\xc9\xca\x85\x1c\x9e\x1d\x9aB\xc0\xd2I\x9f\xf6\xb3\n\x17\xc5\xf3\xae\xea\'\x8f\xa5\a\xf0\xd7\xa9:,e\xdb=\xcb\x81\x8f\xaaE\xfa\x0eM\xabX.\x05\xba\xae6\xe1\nM\xbd\x80\xf3u\xf0\xc2\xc1\xd1\r\xb6\x11\xfd\xb1\xc4\x18\x15v\xc0\xa8\x1c\a\xdd\x0f\xa3 B\x8b\x10\x15\xee\xe6\xbd\xd7A\x9d\x9a\xc9\x8bc(\xc9\x92\x02\x01\xa953\xbbx\x86;\xd8\aQ0\x1dw\xa8z8\xe77`!\xf7\xce\x02\xcaC_\x0f\x8e\xd5\xbe.k\x0e\xdf\x86\b\x00\x00\x00\x00\x9b\x14\xae\xc1\x8d/\x7f\x9c\xaf+\x9f\xa7\x8d\xc2F7\x8f?\xbe>\xeajH\xf43\xe6\x8f\xb5m2\xb2MD\x10\xdf\xebR\xc6\xca\xe6 6\x907L@L\f\xd9\x8d\xa5\x96X\xc0\x16\xc8ZlV\x95r\xeaj\x1d\xfd\x19$t\f\x8c\x90\x8b=\x83\xda\x04W\xdc\xaa\xaf\xc5\x0e\"\x16\xcf\xe7\xfb\x06/\xf3\xf6\t\xcb\xd1\\\x8c\x15\v3\x02\xeatF\xa2R\f\x8e\xea\x1e\xbe\x862\xbe\x82\x11\xdf-\xad\xa3\x8f\x9d\xff\xcc\x00\nD\x92\x8a\xa0ok\x17\x9a \xad\xa1\xe0\x94I\xe2_j\xcb@\x95\x02\xbd\xb0\x96E\xef\x14NI#\xaa[~\xb3E+\xbe\xcf\xa0\xc4\"\xb3R\xccG\\_\x8eT\xbb\xba\x82\x87\x91h\x84!O\xa6\x97-\r\xcbn\xc5V\x9c\xde\xcb\x8c\x94\xdf4\x9c\x97\xbd&\xa0\xf8L\xbd\xd14\x81\xc4}\x82\xb4X\x8e\xf9B9\x19j\x19\xfe}\x11\xd3}f\xd0\x86\xde\xb4Mt\x88c\x93\xc9i8\t|\x9f\x1d\xc6N\xf4A[h\xa6?\xd5\xc9\xed\x9b\xaa%O!\xffr*Q.\xf6\r\v0\\\x91\xea=\xff\xea\x1b\xd3mlc3\xea\x16>\xeb\xdel]\xcfOL\xb2)\xa5\x91|\xbeG\xf3\xc0\xb9\xd8wL\x89]c\xa1\xc2\x06.\x9e\x14C)\x9b\xb2\x99l&\x05d\xe2qrI\x03\x8c\xd4\"\x96\xc9\xec\xe7:\xb4\xb0\xb0\x15m\xbdt\xf8l\x8b\xa9\"\x13*\xba\x9b\x02\xc4\xfa\xf5KXO\xd6k/\x9e\xb0\xc0\a<\x9ftK\xa0V\xfe\x87\x99\x05`<\xf3\xdd[#:\xc2ix\x06\xe1UT\xff\xf3B\x99N\xc8\x84\x92\x88_\x12\xd0X\xc1$\xc4\x03\xb0H ', 0x8)
fcntl$addseals(r2, 0x409, 0xe)
ftruncate(r2, 0xe00)
write(0xffffffffffffffff, &(0x7f0000000200)='- 2000000000 0\n', 0xf)
io_setup(0x1, &(0x7f0000000080))
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_connect(0x5, 0x39, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200000040490d0070010001020301090227000101008032090400000308065000070501020002000705820200020007058303"], 0x0)
syz_usb_disconnect(r3)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, <r4=>0x0], &(0x7f00000007c0)=[0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0], 0x4, 0x2, 0x2, 0x2})
ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000940)={r4, 0x7, &(0x7f0000000880)=[0x3, 0x1, 0x6, 0x3, 0x4, 0xec, 0xd], &(0x7f00000008c0)=[0x0, 0x7, 0x4, 0x5, 0x5, 0x200, 0x5], &(0x7f0000000900)=[0x5, 0x1, 0x4e, 0xb90e, 0x2, 0x80]})
syz_usb_connect$midi(0x3, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x499, 0x1021, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x7, 0x90, 0xd, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x8}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]})
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r5, &(0x7f00000003c0)=""/188, 0xba)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
write$char_usb(r5, 0x0, 0x0)
read$char_usb(r5, 0x0, 0x0)
prctl$PR_SET_IO_FLUSHER(0x4c, 0x2)
syz_usb_disconnect(r3)

16.625879718s ago: executing program 1 (id=2761):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00')
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2)
r3 = syz_open_procfs(0x0, &(0x7f0000000340)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}})
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x4841, 0x0)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0)
write$dsp(r4, &(0x7f00000001c0)='\\', 0x1)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r5, 0x0) (fail_nth: 4)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil)
socket$inet_mptcp(0x2, 0x1, 0x106)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
read$eventfd(r1, &(0x7f0000000040), 0xffffffffffffffd6)
r6 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='size\x00', &(0x7f00000000c0)='10M\x00', 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000480)={0x3, 0xfa}, 0x2)
syz_emit_ethernet(0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a600090000fc020000000000000000000000000000fe8000000000000000000000000000aa223427d5c9a46b9fa1c9cf2f5f915681a5fe46ad18fb92971aae2bceda909b307387e1bbaa219ab10ab946195f8c415d0013036308f59468365489d6b319cbbceabffebda84e413be43e767f3ea76595783ed9371053fc2730419d1a5e865687aba8b44d3da1790dfe6defe75719dce04fbd09aacdf97d9e9b5f1933ee6c3ea0de5abd4a992cd46aea7555d552a16dfe4a6409d6544767e15e423d35d8b5"], 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xe000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="0f20c06635000000400f22c00f01cfb800008ee0bad004b80b00ef660f70420000baf80c66b8502c238166efbafc0c66b80000000066efba610066b8510000000f01cb66b9800000c00f32c0b89257870f30f2a5660f38814b01", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8)

15.853998467s ago: executing program 3 (id=2769):
socket$packet(0x11, 0x2, 0x300)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000440))
syz_open_dev$sndpcmp(&(0x7f0000000580), 0x0, 0xa2865)
r2 = syz_open_procfs(0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
readv(r2, 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
ioctl$VHOST_VDPA_SET_CONFIG(r2, 0x4008af74, &(0x7f0000000500)={0x2, 0x58, "cc21d352e2ac49681f8e47298e6033bee6e32fb45f75bb37cbcf60ce741150f94a0a0883b389a6241954cfb538992c4325a92554986d1fb55211c7698678858721896a5833e5f3cf5351f9a933736d4050362bc384844561"})
r3 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2c0000, 0xc8200)
kcmp(0x0, 0x0, 0x1, r3, r0)
r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r8=>0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x11c, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x4, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf930, 0x0, 0x0, 0x1f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x4000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

15.521724502s ago: executing program 1 (id=2773):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
r1 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r1, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

15.444154431s ago: executing program 1 (id=2776):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x400000000010, 0x3, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3)
ioctl$PPPIOCSPASS(r0, 0x40087447, &(0x7f0000000140)={0x0, 0x0})
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$nci(0xffffff9c, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
syz_open_dev$dri(&(0x7f0000000180), 0x1ff, 0x80800)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
pipe2(0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x2000000, 0x5, 0x0, &(0x7f0000000900)="63eced8e46", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f0000000040)={0x0, 0xc1, 0x2, 0x0, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x0, 0x3, 0x37e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x10, 0x0, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626b, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

5.856998133s ago: executing program 4 (id=2794):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x400000000010, 0x3, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3)
ioctl$PPPIOCSPASS(r0, 0x40087447, &(0x7f0000000140)={0x0, 0x0})
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$nci(0xffffff9c, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000280))
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
pipe2(0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x2000000, 0x5, 0x0, &(0x7f0000000900)="63eced8e46", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f0000000040)={0x0, 0xc1, 0x2, 0x0, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x0, 0x3, 0x37e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x10, 0x0, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626b, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

5.445492332s ago: executing program 2 (id=2795):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x400000000010, 0x3, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3)
ioctl$PPPIOCSPASS(r0, 0x40087447, &(0x7f0000000140)={0x0, 0x0})
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$nci(0xffffff9c, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000280))
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
pipe2(0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x2000000, 0x5, 0x0, &(0x7f0000000900)="63eced8e46", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f0000000040)={0x0, 0xc1, 0x2, 0x0, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x0, 0x3, 0x37e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x10, 0x0, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626b, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

5.250841356s ago: executing program 4 (id=2796):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @broadcast})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={0x0, {0x2, 0x4e20, @rand_addr=0x64810100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="080000fa"], 0xdc)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001})
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000380)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"})
r4 = syz_io_uring_setup(0x1910, &(0x7f00000003c0)={0x0, 0x2346, 0x10000, 0x0, 0x4e}, &(0x7f0000000440)=<r5=>0x0, &(0x7f0000000480)=<r6=>0x0, &(0x7f00000004c0)=<r7=>0x0)
syz_io_uring_submit(r5, r6, r7, &(0x7f0000000500)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2000, @fd_index=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4, '\x00', 0x0}})
io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
close(0x3)
r8 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}})
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r9, &(0x7f0000000100)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10)
listen(r9, 0x5)
write$tun(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005"], 0x4a)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c0000002600010129bd7000fcffffff18000000080003004700"], 0x1c}, 0x1, 0x0, 0x0, 0x40409d6}, 0x0)

5.041619049s ago: executing program 4 (id=2797):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, 0xc3, &(0x7f00000001c0)=""/195, 0x0, 0xe4, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(0x0, 0x81800)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000340), 0x3, 0x4041)
getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0)
r1 = socket(0x11, 0x2, 0x8000)
setsockopt(r1, 0x10b, 0x1, &(0x7f0000000300)="030000001e00040000071a80010061cc", 0x10)
close(0x3)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="642000000206050000000000000000000000000005000400020000000d0003006c6973743a730900000000000900020073797a31000000000c00078008000800000000eb16000300686173683a6e65742c706f72742c6e65740000000500010006000000"], 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='}]\\:\x00')
read$FUSE(r3, &(0x7f0000000c40)={0x2020}, 0x2020)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_ublk_setup_io_uring(0x401d, &(0x7f0000000480)={0x0, 0x2cc0, 0x800, 0x2000, 0x150, 0x0, r0}, &(0x7f0000000540)=<r5=>0x0, &(0x7f00000003c0)=<r6=>0x0, &(0x7f0000000580)=<r7=>0x0)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000005c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000640)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000680))
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000682000/0x4000)=nil, 0xa)
r9 = dup(r8)
mkdirat(r9, &(0x7f0000000400)='./file0/file1\x00', 0x0)
mount$9p_virtio(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000b80)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d)
umount2(0x0, 0x1)
open$dir(&(0x7f0000000c00)='./file0/file0\x00', 0x2000, 0x0)

4.24285364s ago: executing program 2 (id=2798):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000640)='proc\x00', 0x40ce, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/thread-self/fail-nth\x00', 0x1c1301, 0x20)
write(r0, &(0x7f00000006c0)='27', 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000700)={0x2, 'veth1_to_bridge\x00', 0x21}, 0x18)
open(&(0x7f00000000c0)='./file1\x00', 0x109cc2, 0x158)
syz_emit_vhci(0x0, 0x9)

4.12239791s ago: executing program 4 (id=2799):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000000380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_GETXATTR(r0, &(0x7f00000023c0)={0x18, 0x0, r1, {0x7}}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000002400)='./bus\x00', 0x180)
syz_io_uring_setup(0x20e8, &(0x7f0000002500)={0x0, 0x5963, 0x800, 0x4, 0x4e}, 0x0, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002580))
pselect6(0x40, &(0x7f0000002600)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x80000000}, 0x0, &(0x7f0000002640)={0x3ff, 0x4000000000000, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x100000000000000}, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000002440)='./bus\x00', &(0x7f0000002480), 0x8, &(0x7f00000024c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

3.613262143s ago: executing program 2 (id=2800):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x400000000010, 0x3, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3)
ioctl$PPPIOCSPASS(r0, 0x40087447, &(0x7f0000000140)={0x0, 0x0})
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$nci(0xffffff9c, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
pipe2(0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x2000000, 0x5, 0x0, &(0x7f0000000900)="63eced8e46", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f0000000040)={0x0, 0xc1, 0x2, 0x0, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x0, 0x3, 0x37e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x10, 0x0, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626b, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

2.508595514s ago: executing program 2 (id=2801):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, 0xc3, &(0x7f00000001c0)=""/195, 0x0, 0xe4, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(0x0, 0x81800)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000340), 0x3, 0x4041)
getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0)
r1 = socket(0x11, 0x2, 0x8000)
setsockopt(r1, 0x10b, 0x1, &(0x7f0000000300)="030000001e00040000071a80010061cc", 0x10)
close(0x3)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="642000000206050000000000000000000000000005000400020000000d0003006c6973743a730900000000000900020073797a31000000000c00078008000800000000eb16000300686173683a6e65742c706f72742c6e65740000000500010006000000"], 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
read$FUSE(r4, &(0x7f0000000c40)={0x2020}, 0x2020)
add_key(0x0, 0x0, 0x0, 0x0, r3)
r5 = syz_ublk_setup_io_uring(0x401d, &(0x7f0000000480)={0x0, 0x2cc0, 0x800, 0x2000, 0x150, 0x0, r0}, &(0x7f0000000540)=<r6=>0x0, &(0x7f00000003c0)=<r7=>0x0, &(0x7f0000000580)=<r8=>0x0)
syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f00000005c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000640)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000680))
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000682000/0x4000)=nil, 0xa)
r10 = dup(r9)
mkdirat(r10, &(0x7f0000000400)='./file0/file1\x00', 0x0)
mount$9p_virtio(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000b80)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d)
umount2(0x0, 0x1)
open$dir(&(0x7f0000000c00)='./file0/file0\x00', 0x2000, 0x0)

2.504268153s ago: executing program 4 (id=2809):
r0 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./cgroup.cpu/cgroup.procs\x00', 0x480142, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
keyctl$clear(0x11, 0xfffffffffffffffd)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_clone3(&(0x7f0000000580)={0x802000, &(0x7f0000000140), 0x0, &(0x7f00000001c0), {0x29}, &(0x7f0000000200)=""/164, 0xa4, &(0x7f0000000600)=""/142, &(0x7f0000000540)=[0xffffffffffffffff], 0x1, {r0}}, 0x58)
prlimit64(r1, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040)=0x4, 0x4)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'batadv0\x00', 0x2})
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x30400, 0x66)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c)
recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)
shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x4000)
shmctl$IPC_RMID(r4, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000340)={'veth1_virt_wifi\x00', 0x800})
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f00000006c0)={@any, 0x28f8722a, 0x3, 0x7, 0x2, 0x3ff, "b5579b916fcc1ecb4ea4fec28b5fa6b00262ae6ee85c7cd0a3c2e98d1f21cab725ccc2b4ed4d2032c25bdd5f022d3f379ef1ee06ba01ccd45336456670ddd14e2109af45013fb7edfe0e7edb5bbc3d54769d6c928df35d875b4aed12b6b8cba84351a071e13f579ea352896ec08c2def28b5299cd15181007f7db9d916eac903"})

2.227821411s ago: executing program 4 (id=2802):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xc2401, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x26, &(0x7f0000000240)=ANY=[], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x113845, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x84)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="18ff01ffff638e0000005be600003e0300002000000000ed4ed07b74ec0f6ca171cdd47bf0b8c63af5228eb6a1c4d7c079159d6ce71521c2bc54444784f6e9023d9c4f400500d1fb8cdff7cb14ac0c2f442fc5fcf04aaca8b58c6062df5536726dde7b9f", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000060000009500000000000000"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x20004000)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000680), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000006c0)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r6, &(0x7f00000007c0)=[{{&(0x7f0000000800)={0xa, 0x4e23, 0xffff, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xffff0001}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[@pktinfo={{0x20, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @remote}}}}], 0x20}}], 0x1, 0x4010)
write$nci(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="600602"], 0x8)
openat$make_it_fail(0xffffff9c, 0x0, 0x1, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000240000000030800034000000001080001400000001414000000110001"], 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r7 = socket$kcm(0x2, 0x5, 0x84)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x20, 0x1}, 0x48)
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000200)={r8, 0x58, &(0x7f0000000240)}, 0x87)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_generic(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={0x14, 0x27, 0x301, 0x270bda7, 0x25dfdbfa, {0x13}}, 0x14}}, 0x10)
sendmsg$inet(r7, &(0x7f0000000bc0)={&(0x7f0000000c00)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c80)="9c", 0x1}], 0x1}, 0x10)
sendmsg$inet(r7, &(0x7f0000000cc0)={&(0x7f0000000d00)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000d80)="9d", 0x1}], 0x1}, 0x10)

1.619567513s ago: executing program 2 (id=2803):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r1 = dup(r0)
preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000040)=""/112, 0x70}, {&(0x7f00000000c0)=""/104, 0x68}, {0x0}], 0x3, 0xbd, 0x8)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
r2 = syz_open_dev$usbfs(0x0, 0x76, 0x1)
r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x100}, 0x30, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f00000005c0)={0x100}, 0x0)
ioctl$USBDEVFS_GET_SPEED(r2, 0x551f)
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000180)='n', 0x1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, &(0x7f00000001c0))
openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x40, 0x16f)
mount(&(0x7f0000000140)=@sr0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='efs\x00', 0x2000810, &(0x7f0000000500)='!6M#.-:\\\x00')
mount(0x0, 0x0, &(0x7f0000001580)='proc\x00', 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000015c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff1, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x12}]}}]}, 0x38}}, 0x404c800)
write(0xffffffffffffffff, &(0x7f0000002680)='7', 0x1)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
write$cgroup_int(r6, &(0x7f0000000580)=0x2, 0x12)
fcntl$notify(r1, 0x402, 0x17)
setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000300)=[{{0x2, 0x1}}, {{0x4}, {0x2, 0x1}}, {{0x1, 0x1}, {0x2, 0x1, 0x1}}, {{}, {0x4, 0x1, 0x1}}], 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000013c0)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='.\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="f3c0ff710c89a175e0e72a7b3350ff06e2f3b8ef94aa1a9ef5e20a1389fde13cbf9c37e6b7ceb35b7b6a955f1b58b8467f08452d317f154a5307000000", @ANYRES64=0x0], 0x20)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000017c0)={0x1, <r8=>0x0}, 0x8)
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001800)=r8, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_lsm={0x1d, 0x28, &(0x7f0000001900)=ANY=[], &(0x7f0000001940)='syzkaller\x00', 0xb, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, 0x0, 0x1, 0x0, &(0x7f0000001980)=[{0x0, 0x2, 0x20d, 0xb}], 0x10, 0xfffffffb}, 0x94)
r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001a00)=@generic={&(0x7f00000019c0)='./file0\x00', 0x0, 0x18}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1838000002000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="00000085000000860000088520000001000000"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x11, &(0x7f00000003c0)=""/17, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x1f, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001780)={0x1, 0xc, 0x959e, 0x4}, 0x10, r8, r10, 0x5, &(0x7f0000001a40)=[r1, r1, r1], &(0x7f0000001a80)=[{0x2, 0x1, 0x2, 0x6}, {0x0, 0x5, 0x5, 0x3}, {0x0, 0x5, 0x10}, {0x2, 0x3, 0xf, 0x7}, {0x3, 0x3, 0xd, 0x7}], 0x10, 0x21f4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r7, 0x18000000000002a0, 0x36, 0x6000002c, &(0x7f0000001480)="b9ff03316844268cb89e14f0080048e0050000000000002f77fbac141516e0000001440c0510b18000890304000084500806325f003901050b038da1002125181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0x400fe, 0x60000000, 0x0, 0xfffffffe, &(0x7f0000001580), &(0x7f0000002600)}, 0x2c)

698.908344ms ago: executing program 33 (id=2769):
socket$packet(0x11, 0x2, 0x300)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000440))
syz_open_dev$sndpcmp(&(0x7f0000000580), 0x0, 0xa2865)
r2 = syz_open_procfs(0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
readv(r2, 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
ioctl$VHOST_VDPA_SET_CONFIG(r2, 0x4008af74, &(0x7f0000000500)={0x2, 0x58, "cc21d352e2ac49681f8e47298e6033bee6e32fb45f75bb37cbcf60ce741150f94a0a0883b389a6241954cfb538992c4325a92554986d1fb55211c7698678858721896a5833e5f3cf5351f9a933736d4050362bc384844561"})
r3 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2c0000, 0xc8200)
kcmp(0x0, 0x0, 0x1, r3, r0)
r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r8=>0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x11c, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x4, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf930, 0x0, 0x0, 0x1f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x4000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

638.511701ms ago: executing program 2 (id=2805):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000280)=0x10000801d)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x80000001, @empty, 0x2}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000500)="88", 0x1}], 0x1}, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
read$FUSE(r1, 0x0, 0x0)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0x8010008, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50)
write$FUSE_INIT(r1, &(0x7f00000003c0)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2d, 0xfff, 0x400, 0x6, 0x6, 0x1000, 0x48, 0x0, 0x0, 0x2, 0xfffffffb}}, 0x50)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0xe, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
fremovexattr(0xffffffffffffffff, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]})
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000080)='./file0\x00')
r4 = open(&(0x7f0000000600)='./file0\x00', 0x1e3342, 0x82)
mkdir(&(0x7f0000000540)='./file0\x00', 0x11)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000100)='\"', 0x1}], 0x1)
r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r6 = userfaultfd(0x80000)
ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f00008e3000/0x4000)=nil, 0x4000, 0x3})
writev(r5, &(0x7f0000000100)=[{&(0x7f0000000300)="fe", 0x1}], 0x1)
write$FUSE_ATTR(r4, &(0x7f0000000000)={0x78, 0x0, 0x0, {0x6, 0x9, 0x0, {0x2, 0xf, 0x700000000, 0x6, 0x4, 0x5, 0x828, 0x7, 0x8, 0x8000, 0x7, 0x0, 0x0, 0x6, 0x1d88}}}, 0x78)
setuid(0xee00)
fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0)
ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r1, 0x800c4153, &(0x7f0000001ac0)={0x0, &(0x7f0000001a80)=[&(0x7f00000000c0)="d7fc5005b9f13bd3f905e2295fa937bbfdf798facc445d6a0e7fbcdb085768a3622ddbf9e67f78bf97e66cddc3d4ba6bccac7b7b984ddd8d9f34afbaf8c5e6b10de2943119aa73d6657fd09fdb7f71cb290b56ded877f74d5a1e7728a4ab8b311d7cde378c25bd586eac6eb1478ed6aa12a78f70f596b3addebd7fcdf6e90773c77b2365328d54c94e5aad85", &(0x7f0000000180)="5dd70463e4de08ab1fc6f1cb174a2d8f81288420ecf8e28ddd17d74a9566da651962b07f4ac8a56a104e304032cbced484e7254ae387e6b1b270af01cfc5ccbcbc2bd211d06f7f1871b2cfc2335095b6edb6fc6cb6", &(0x7f0000000840)="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", &(0x7f0000001840)="981af6f8d0c18b14a4fc9e52f25c20e38ef889ddcc3245cfab337502766d678250ca7cedf379b53fdd4b153e3b30e117b72e8d612aee7f68dd36a2c6d699e23450d41e2108771f058b2c126d6a560622016e3f788efb31caa9f476be34", &(0x7f00000018c0)="074ef768b786fec23b6b668d19b32f3865f7f120b63d55d6865baef815d21b8eb5636d0c2b91d5169ac46957753ffb54f3e72a8ced8884816fc02e4a9fbd528907d74fca784a170e68e64b73e82a9666fb3a1cb01021f9c4054586a00f134bd7d84ab9c2aa60ecc4047a166127c7ac", 0x0]})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x17}, 0x3}}}, 0x84)

0s ago: executing program 34 (id=2776):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x400000000010, 0x3, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3)
ioctl$PPPIOCSPASS(r0, 0x40087447, &(0x7f0000000140)={0x0, 0x0})
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$nci(0xffffff9c, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
syz_open_dev$dri(&(0x7f0000000180), 0x1ff, 0x80800)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
pipe2(0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x2000000, 0x5, 0x0, &(0x7f0000000900)="63eced8e46", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f0000000040)={0x0, 0xc1, 0x2, 0x0, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x0, 0x3, 0x37e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x10, 0x0, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626b, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

kernel console output (not intermixed with test programs):

th: 17768 bytes left
[  447.088986][T14887] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  447.193820][T14885] NILFS (nullb0): couldn't find nilfs on the device
[  448.241525][ T5945] net_ratelimit: 7 callbacks suppressed
[  448.241544][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.426930][T14892] FAULT_INJECTION: forcing a failure.
[  448.426930][T14892] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  448.426962][T14892] CPU: 2 UID: 0 PID: 14892 Comm: syz.2.2656 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  448.426987][T14892] Tainted: [L]=SOFTLOCKUP
[  448.426993][T14892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  448.427005][T14892] Call Trace:
[  448.427012][T14892]  <TASK>
[  448.427019][T14892]  dump_stack_lvl+0x100/0x190
[  448.427046][T14892]  should_fail_ex.cold+0x5/0xa
[  448.427071][T14892]  should_fail_alloc_page+0xeb/0x140
[  448.427095][T14892]  prepare_alloc_pages+0x1f0/0x5b0
[  448.427122][T14892]  __alloc_frozen_pages_noprof+0x1b9/0x31e0
[  448.427149][T14892]  ? try_to_migrate_one+0x15fd/0x3220
[  448.427180][T14892]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  448.427229][T14892]  ? rcu_is_watching+0x13/0xc0
[  448.427249][T14892]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  448.427273][T14892]  ? policy_nodemask+0xed/0x5e0
[  448.427298][T14892]  alloc_pages_mpol+0x201/0x560
[  448.427340][T14892]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  448.427367][T14892]  folio_alloc_mpol_noprof+0x36/0x260
[  448.427400][T14892]  alloc_migration_target_by_mpol+0x2c1/0x650
[  448.427429][T14892]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  448.427451][T14892]  ? __pfx___might_resched+0x10/0x10
[  448.427478][T14892]  ? folio_get_anon_vma+0x16b/0x980
[  448.427503][T14892]  migrate_pages_batch+0x5c2/0x4700
[  448.427531][T14892]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  448.427560][T14892]  ? __pfx_migrate_pages_batch+0x10/0x10
[  448.427592][T14892]  ? __pfx_remove_migration_pte+0x10/0x10
[  448.427625][T14892]  migrate_pages_sync+0x12c/0x880
[  448.427644][T14892]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  448.427671][T14892]  ? vma_migratable+0x380/0x450
[  448.427697][T14892]  ? __pfx_migrate_pages_sync+0x10/0x10
[  448.427719][T14892]  ? __pfx_queue_pages_test_walk+0x10/0x10
[  448.427742][T14892]  ? walk_page_range_mm_unsafe+0x32c/0xa10
[  448.427773][T14892]  migrate_pages+0x1a79/0x2840
[  448.427800][T14892]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  448.427834][T14892]  ? __pfx_migrate_pages+0x10/0x10
[  448.427859][T14892]  ? do_mbind+0x593/0x1030
[  448.427890][T14892]  do_mbind+0x5e2/0x1030
[  448.427924][T14892]  ? __pfx_do_mbind+0x10/0x10
[  448.427957][T14892]  ? __pfx_get_nodes+0x10/0x10
[  448.427983][T14892]  kernel_mbind+0x1b7/0x200
[  448.428011][T14892]  ? __pfx_kernel_mbind+0x10/0x10
[  448.428041][T14892]  __do_fast_syscall_32+0x14d/0x8e0
[  448.428067][T14892]  do_fast_syscall_32+0x32/0x70
[  448.428092][T14892]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  448.428114][T14892] RIP: 0023:0xf708efbc
[  448.428129][T14892] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  448.428140][T14892] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000112
[  448.428156][T14892] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000c00000
[  448.428167][T14892] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  448.428177][T14892] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  448.428188][T14892] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  448.428197][T14892] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  448.428222][T14892]  </TASK>
[  448.434985][T14897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2657'.
[  448.548931][ T6028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.581645][ T1972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.798155][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.887465][T13915] usb 6-1: new high-speed USB device number 106 using dummy_hcd
[  449.057440][T13915] usb 6-1: Using ep0 maxpacket: 8
[  449.059064][T13915] usb 6-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  449.059939][T13915] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  449.059962][T13915] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  449.059993][T13915] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  449.060014][T13915] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  449.060070][T13915] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  449.060090][T13915] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  449.060109][T13915] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  449.060130][T13915] usb 6-1: config 168 interface 0 has no altsetting 0
[  449.061080][T13915] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  449.061720][T13915] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  449.061743][T13915] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  449.061763][T13915] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  449.061782][T13915] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  449.061801][T13915] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  449.061815][T13915] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  449.061857][T13915] usb 6-1: config 168 interface 0 has no altsetting 0
[  449.063749][T13915] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  449.063773][T13915] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  449.063799][T13915] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  449.063820][T13915] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  449.063839][T13915] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  449.063856][T13915] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  449.063872][T13915] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  449.063892][T13915] usb 6-1: config 168 interface 0 has no altsetting 0
[  449.066884][T13915] usb 6-1: string descriptor 0 read error: -22
[  449.066974][T13915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.094452][T13915] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  449.257586][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.278980][T14909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  449.279504][T14909] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  449.281943][ T1724] usb 6-1: USB disconnect, device number 106
[  449.577925][ T6028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.648278][   T43] audit: type=1326 audit(1794519189.351:58127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14925 comm="syz.4.2665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fbc code=0x7ff00000
[  449.648313][   T43] audit: type=1326 audit(1794519189.351:58128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14925 comm="syz.4.2665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fbc code=0x7ff00000
[  449.649688][   T43] audit: type=1326 audit(1794519189.351:58129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14925 comm="syz.4.2665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fbc code=0x7ff00000
[  449.649712][   T43] audit: type=1326 audit(1794519189.351:58130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14925 comm="syz.4.2665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fbc code=0x7ff00000
[  449.649731][   T43] audit: type=1326 audit(1794519189.351:58131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14925 comm="syz.4.2665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fbc code=0x7ff00000
[  449.649754][   T43] audit: type=1326 audit(1794519189.351:58132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14925 comm="syz.4.2665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fbc code=0x7ff00000
[  449.649785][   T43] audit: type=1326 audit(1794519189.351:58133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14925 comm="syz.4.2665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fbc code=0x7ff00000
[  449.649809][   T43] audit: type=1326 audit(1794519189.351:58134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14925 comm="syz.4.2665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fbc code=0x7ff00000
[  449.649846][   T43] audit: type=1326 audit(1794519189.351:58135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14925 comm="syz.4.2665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fbc code=0x7ff00000
[  449.649868][   T43] audit: type=1326 audit(1794519189.351:58136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14925 comm="syz.4.2665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fbc code=0x7ff00000
[  449.747799][ T1724] usb 6-1: new high-speed USB device number 107 using dummy_hcd
[  449.899083][ T1724] usb 6-1: Using ep0 maxpacket: 8
[  449.901660][ T1724] usb 6-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  449.905511][ T1724] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  449.905529][ T1724] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  449.905547][ T1724] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  449.905560][ T1724] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  449.905572][ T1724] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  449.905584][ T1724] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  449.905597][ T1724] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  449.905609][ T1724] usb 6-1: config 168 interface 0 has no altsetting 0
[  449.906363][ T1724] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  449.906385][ T1724] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  449.906403][ T1724] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  449.906416][ T1724] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  449.906428][ T1724] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  449.906439][ T1724] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  449.906451][ T1724] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  449.906463][ T1724] usb 6-1: config 168 interface 0 has no altsetting 0
[  449.907171][ T1724] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  449.907186][ T1724] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  449.907202][ T1724] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  449.907214][ T1724] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  449.907226][ T1724] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  449.907237][ T1724] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  449.907249][ T1724] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  449.907261][ T1724] usb 6-1: config 168 interface 0 has no altsetting 0
[  449.911745][ T1724] usb 6-1: string descriptor 0 read error: -22
[  449.911802][ T1724] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.919313][ T1724] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  450.064190][T14938] gadgetfs: bound to dummy_udc driver
[  450.286265][ T1972] usb 6-1: USB disconnect, device number 107
[  450.289195][T14940] adutux: No device or device unplugged -19
[  450.289918][T14942] adutux: No device or device unplugged -19
[  450.297658][T12999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.317638][ T1724] usb 5-1: new full-speed USB device number 56 using dummy_hcd
[  450.317869][    C3] gadgetfs: connected
[  450.320262][ T1724] gadgetfs: disconnected
[  450.378424][T14946] FAULT_INJECTION: forcing a failure.
[  450.378424][T14946] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  450.378445][T14946] CPU: 3 UID: 0 PID: 14946 Comm: syz.2.2668 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  450.378460][T14946] Tainted: [L]=SOFTLOCKUP
[  450.378463][T14946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  450.378469][T14946] Call Trace:
[  450.378473][T14946]  <TASK>
[  450.378478][T14946]  dump_stack_lvl+0x100/0x190
[  450.378498][T14946]  should_fail_ex.cold+0x5/0xa
[  450.378515][T14946]  _copy_from_iter+0x1f4/0x16c0
[  450.378534][T14946]  ? __asan_memset+0x23/0x50
[  450.378546][T14946]  ? __pfx__copy_from_iter+0x10/0x10
[  450.378563][T14946]  ? __pfx___alloc_skb+0x10/0x10
[  450.378585][T14946]  netlink_sendmsg+0x8f5/0x10c0
[  450.378598][T14946]  ? __pfx_netlink_sendmsg+0x10/0x10
[  450.378612][T14946]  ? apparmor_socket_sendmsg+0x165/0x280
[  450.378629][T14946]  ? ____sys_sendmsg+0xa99/0xc30
[  450.378640][T14946]  ____sys_sendmsg+0xa99/0xc30
[  450.378651][T14946]  ? __pfx_netlink_sendmsg+0x10/0x10
[  450.378663][T14946]  ? __pfx_____sys_sendmsg+0x10/0x10
[  450.378682][T14946]  ___sys_sendmsg+0x190/0x1e0
[  450.378696][T14946]  ? __pfx____sys_sendmsg+0x10/0x10
[  450.378715][T14946]  ? find_held_lock+0x2b/0x80
[  450.378739][T14946]  __sys_sendmsg+0x160/0x210
[  450.378755][T14946]  ? __pfx___sys_sendmsg+0x10/0x10
[  450.378778][T14946]  __do_fast_syscall_32+0x14d/0x8e0
[  450.378794][T14946]  ? lockdep_hardirqs_on+0x7d/0x110
[  450.378810][T14946]  do_fast_syscall_32+0x32/0x70
[  450.378826][T14946]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  450.378840][T14946] RIP: 0023:0xf708efbc
[  450.378849][T14946] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  450.378859][T14946] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  450.378871][T14946] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0
[  450.378878][T14946] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  450.378884][T14946] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  450.378889][T14946] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  450.378895][T14946] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  450.378909][T14946]  </TASK>
[  450.456899][T14948] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  450.456920][T14948] overlayfs: failed to set xattr on upper
[  450.456933][T14948] overlayfs: ...falling back to redirect_dir=nofollow.
[  450.456940][T14948] overlayfs: ...falling back to metacopy=off.
[  450.456945][T14948] overlayfs: ...falling back to index=off.
[  450.456950][T14948] overlayfs: ...falling back to uuid=null.
[  450.618623][T14107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.628776][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.876739][T14955] fuse: Unknown parameter 'use00000000000000000000'
[  451.099717][ T1972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.331931][T14974] rxe_eth0 speed is unknown, defaulting to 1000
[  452.385104][T14975] FAULT_INJECTION: forcing a failure.
[  452.385104][T14975] name fail_futex, interval 1, probability 0, space 0, times 0
[  452.385124][T14975] CPU: 2 UID: 0 PID: 14975 Comm: syz.2.2677 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  452.385138][T14975] Tainted: [L]=SOFTLOCKUP
[  452.385142][T14975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  452.385148][T14975] Call Trace:
[  452.385153][T14975]  <TASK>
[  452.385157][T14975]  dump_stack_lvl+0x100/0x190
[  452.385177][T14975]  should_fail_ex.cold+0x5/0xa
[  452.385194][T14975]  get_futex_key+0x1c9/0x13e0
[  452.385212][T14975]  ? __pfx_get_futex_key+0x10/0x10
[  452.385228][T14975]  ? enqueue_task+0x1dc/0x4f0
[  452.385243][T14975]  futex_wait_setup+0x91/0x540
[  452.385259][T14975]  __futex_wait+0x19f/0x360
[  452.385271][T14975]  ? __pfx___futex_wait+0x10/0x10
[  452.385281][T14975]  ? __pfx_try_to_wake_up+0x10/0x10
[  452.385292][T14975]  ? futex_hash+0x311/0x400
[  452.385307][T14975]  ? __pfx_futex_wake_mark+0x10/0x10
[  452.385322][T14975]  ? find_held_lock+0x2b/0x80
[  452.385338][T14975]  ? futex_wake+0x4ea/0x5e0
[  452.385352][T14975]  futex_wait+0xe6/0x370
[  452.385363][T14975]  ? __pfx_futex_wait+0x10/0x10
[  452.385377][T14975]  ? vhci_write+0x2fd/0x4a0
[  452.385389][T14975]  ? vfs_write+0x15d/0x1040
[  452.385402][T14975]  do_futex+0x265/0x440
[  452.385417][T14975]  ? __pfx_do_futex+0x10/0x10
[  452.385436][T14975]  __ia32_sys_futex_time32+0x2f4/0x470
[  452.385455][T14975]  ? __pfx___ia32_sys_futex_time32+0x10/0x10
[  452.385471][T14975]  ? __might_fault+0xc5/0x140
[  452.385490][T14975]  __do_fast_syscall_32+0x14d/0x8e0
[  452.385505][T14975]  ? lockdep_hardirqs_on+0x7d/0x110
[  452.385527][T14975]  do_fast_syscall_32+0x32/0x70
[  452.385544][T14975]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  452.385558][T14975] RIP: 0023:0xf708efbc
[  452.385568][T14975] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  452.385579][T14975] RSP: 002b:00000000f545c5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0
[  452.385591][T14975] RAX: ffffffffffffffda RBX: 00000000f7495020 RCX: 0000000000000080
[  452.385598][T14975] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7495024
[  452.385604][T14975] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000
[  452.385611][T14975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  452.385617][T14975] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  452.385630][T14975]  </TASK>
[  452.537435][T14949] Bluetooth: hci0: command 0x0c1a tx timeout
[  452.539779][ T5786] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  452.687302][T14979] FAULT_INJECTION: forcing a failure.
[  452.687302][T14979] name failslab, interval 1, probability 0, space 0, times 0
[  452.687334][T14979] CPU: 1 UID: 0 PID: 14979 Comm: syz.1.2679 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  452.687350][T14979] Tainted: [L]=SOFTLOCKUP
[  452.687354][T14979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  452.687361][T14979] Call Trace:
[  452.687365][T14979]  <TASK>
[  452.687374][T14979]  dump_stack_lvl+0x100/0x190
[  452.687395][T14979]  should_fail_ex.cold+0x5/0xa
[  452.687412][T14979]  should_failslab+0xc2/0x120
[  452.687426][T14979]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[  452.687439][T14979]  ? proc_alloc_inode+0x25/0x200
[  452.687455][T14979]  ? __pfx_proc_alloc_inode+0x10/0x10
[  452.687472][T14979]  proc_alloc_inode+0x25/0x200
[  452.687487][T14979]  alloc_inode+0x68/0x250
[  452.687504][T14979]  new_inode+0x22/0x1c0
[  452.687522][T14979]  proc_pid_make_inode+0x22/0x160
[  452.687538][T14979]  proc_pident_instantiate+0x85/0x310
[  452.687556][T14979]  proc_pident_lookup+0x1e3/0x270
[  452.687572][T14979]  ? __pfx_down_read+0x10/0x10
[  452.687584][T14979]  __lookup_slow+0x155/0x320
[  452.687602][T14979]  lookup_slow+0x54/0x80
[  452.687618][T14979]  link_path_walk+0x1449/0x1bd0
[  452.687635][T14979]  path_openat+0x1a7/0x23f0
[  452.687651][T14979]  ? __pfx_path_openat+0x10/0x10
[  452.687669][T14979]  do_file_open+0x20e/0x430
[  452.687684][T14979]  ? __pfx_do_file_open+0x10/0x10
[  452.687703][T14979]  ? __pfx_kfree_link+0x10/0x10
[  452.687718][T14979]  ? _raw_spin_unlock+0x28/0x50
[  452.687731][T14979]  ? alloc_fd+0x471/0x7a0
[  452.687748][T14979]  do_sys_openat2+0x163/0x1d0
[  452.687764][T14979]  ? __pfx_do_sys_openat2+0x10/0x10
[  452.687780][T14979]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  452.687796][T14979]  ? __fget_files+0x21f/0x3d0
[  452.687811][T14979]  __ia32_compat_sys_openat+0x12d/0x210
[  452.687828][T14979]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  452.687844][T14979]  ? ksys_write+0x1ac/0x250
[  452.687861][T14979]  do_int80_emulation+0x16a/0x670
[  452.687879][T14979]  asm_int80_emulation+0x1a/0x20
[  452.687890][T14979] RIP: 0023:0xf718032b
[  452.687900][T14979] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  452.687910][T14979] RSP: 002b:00000000f542d3cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  452.687920][T14979] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f542d490
[  452.687927][T14979] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[  452.687933][T14979] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  452.687939][T14979] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  452.687945][T14979] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  452.687959][T14979]  </TASK>
[  452.690213][T14980] jffs2: notice: (14980) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  452.854121][T14979] FAULT_INJECTION: forcing a failure.
[  452.854121][T14979] name fail_futex, interval 1, probability 0, space 0, times 0
[  452.854149][T14979] CPU: 2 UID: 0 PID: 14979 Comm: syz.1.2679 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  452.854171][T14979] Tainted: [L]=SOFTLOCKUP
[  452.854177][T14979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  452.854186][T14979] Call Trace:
[  452.854192][T14979]  <TASK>
[  452.854199][T14979]  dump_stack_lvl+0x100/0x190
[  452.854230][T14979]  should_fail_ex.cold+0x5/0xa
[  452.854248][T14979]  get_futex_key+0x1c9/0x13e0
[  452.854265][T14979]  ? __pfx_get_futex_key+0x10/0x10
[  452.854280][T14979]  ? __mutex_unlock_slowpath+0x35d/0x930
[  452.854299][T14979]  futex_wake+0xf4/0x5e0
[  452.854313][T14979]  ? __pfx_futex_wake+0x10/0x10
[  452.854327][T14979]  ? detach_task_ctx_data+0x83/0x490
[  452.854342][T14979]  do_futex+0x2b2/0x440
[  452.854358][T14979]  ? __pfx_do_futex+0x10/0x10
[  452.854373][T14979]  ? __might_fault+0xc5/0x140
[  452.854390][T14979]  mm_exit_exec_release+0x256/0x2f0
[  452.854403][T14979]  do_exit+0x6d8/0x2a00
[  452.854416][T14979]  ? lock_acquire+0x1d1/0x380
[  452.854427][T14979]  ? cgroup1_freezing+0x27/0x3b0
[  452.854439][T14979]  ? find_held_lock+0x2b/0x80
[  452.854454][T14979]  ? __pfx_do_exit+0x10/0x10
[  452.854468][T14979]  ? find_held_lock+0x2b/0x80
[  452.854482][T14979]  ? get_signal+0xa28/0x22e0
[  452.854494][T14979]  do_group_exit+0xd5/0x2a0
[  452.854509][T14979]  get_signal+0x1f58/0x22e0
[  452.854519][T14979]  ? __pfx_futex_wait+0x10/0x10
[  452.854535][T14979]  ? __pfx_get_signal+0x10/0x10
[  452.854547][T14979]  ? do_futex+0x190/0x440
[  452.854564][T14979]  arch_do_signal_or_restart+0x91/0x7a0
[  452.854582][T14979]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  452.854606][T14979]  exit_to_user_mode_loop+0x139/0x700
[  452.854620][T14979]  ? rcu_is_watching+0x13/0xc0
[  452.854637][T14979]  __do_fast_syscall_32+0x651/0x8e0
[  452.854653][T14979]  ? lockdep_hardirqs_on+0x7d/0x110
[  452.854669][T14979]  do_fast_syscall_32+0x32/0x70
[  452.854685][T14979]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  452.854699][T14979] RIP: 0023:0xf703efbc
[  452.854709][T14979] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  452.854719][T14979] RSP: 002b:00000000f542d5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0
[  452.854730][T14979] RAX: fffffffffffffe00 RBX: 00000000f7444f88 RCX: 0000000000000080
[  452.854736][T14979] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7444f8c
[  452.854742][T14979] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000
[  452.854748][T14979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  452.854755][T14979] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  452.854768][T14979]  </TASK>
[  453.057467][T14995] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2682'.
[  453.061750][T14996] 9p: Bad value for 'rfdno'
[  453.064207][T14996] 9p: Bad value for 'rfdno'
[  453.064351][T14996] 9p: Bad value for 'rfdno'
[  453.064491][T14996] 9p: Bad value for 'rfdno'
[  453.064627][T14996] 9p: Bad value for 'rfdno'
[  453.064761][T14996] 9p: Bad value for 'rfdno'
[  453.064888][T14996] 9p: Bad value for 'rfdno'
[  453.065016][T14996] 9p: Bad value for 'rfdno'
[  453.065140][T14996] 9p: Bad value for 'rfdno'
[  453.065266][T14996] 9p: Bad value for 'rfdno'
[  453.065392][T14996] 9p: Bad value for 'rfdno'
[  453.065527][T14996] 9p: Bad value for 'rfdno'
[  453.065657][T14996] 9p: Bad value for 'rfdno'
[  453.065785][T14996] 9p: Bad value for 'rfdno'
[  453.065938][T14996] 9p: Bad value for 'rfdno'
[  453.066152][T14996] 9p: Bad value for 'rfdno'
[  453.066279][T14996] 9p: Bad value for 'rfdno'
[  453.066408][T14996] 9p: Bad value for 'rfdno'
[  453.067018][T14996] 9p: Bad value for 'rfdno'
[  453.068372][T14996] 9p: Bad value for 'rfdno'
[  453.068514][T14996] 9p: Bad value for 'rfdno'
[  453.068924][T14996] 9p: Bad value for 'rfdno'
[  453.069072][T14996] 9p: Bad value for 'rfdno'
[  453.069203][T14996] 9p: Bad value for 'rfdno'
[  453.070127][T14996] 9p: Bad value for 'rfdno'
[  453.070278][T14996] 9p: Bad value for 'rfdno'
[  453.070406][T14996] 9p: Bad value for 'rfdno'
[  453.071113][T14996] 9p: Bad value for 'rfdno'
[  453.071240][T14996] 9p: Bad value for 'rfdno'
[  453.071366][T14996] 9p: Bad value for 'rfdno'
[  453.071501][T14996] 9p: Bad value for 'rfdno'
[  453.072853][T14996] 9p: Bad value for 'rfdno'
[  453.072983][T14996] 9p: Bad value for 'rfdno'
[  453.073110][T14996] 9p: Bad value for 'rfdno'
[  453.073235][T14996] 9p: Bad value for 'rfdno'
[  453.073362][T14996] 9p: Bad value for 'rfdno'
[  453.073492][T14996] 9p: Bad value for 'rfdno'
[  453.073619][T14996] 9p: Bad value for 'rfdno'
[  453.073746][T14996] 9p: Bad value for 'rfdno'
[  453.075124][T14996] 9p: Bad value for 'rfdno'
[  453.075254][T14996] 9p: Bad value for 'rfdno'
[  453.075379][T14996] 9p: Bad value for 'rfdno'
[  453.075907][T14996] 9p: Bad value for 'rfdno'
[  453.077223][T14996] 9p: Bad value for 'rfdno'
[  453.077479][T14996] 9p: Bad value for 'rfdno'
[  453.077612][T14996] 9p: Bad value for 'rfdno'
[  453.077738][T14996] 9p: Bad value for 'rfdno'
[  453.077889][T14996] 9p: Bad value for 'rfdno'
[  453.078019][T14996] 9p: Bad value for 'rfdno'
[  453.078151][T14996] 9p: Bad value for 'rfdno'
[  453.079682][T14996] 9p: Bad value for 'rfdno'
[  453.079819][T14996] 9p: Bad value for 'rfdno'
[  453.079948][T14996] 9p: Bad value for 'rfdno'
[  453.080073][T14996] 9p: Bad value for 'rfdno'
[  453.080293][T14996] 9p: Bad value for 'rfdno'
[  453.080512][T14996] 9p: Bad value for 'rfdno'
[  453.080651][T14996] 9p: Bad value for 'rfdno'
[  453.080776][T14996] 9p: Bad value for 'rfdno'
[  453.080916][T14996] 9p: Bad value for 'rfdno'
[  453.081041][T14996] 9p: Bad value for 'rfdno'
[  453.081169][T14996] 9p: Bad value for 'rfdno'
[  453.081294][T14996] 9p: Bad value for 'rfdno'
[  453.081427][T14996] 9p: Bad value for 'rfdno'
[  453.081627][T14996] 9p: Bad value for 'rfdno'
[  453.081762][T14996] 9p: Bad value for 'rfdno'
[  453.138590][T12999] usb 6-1: new high-speed USB device number 108 using dummy_hcd
[  453.299402][T12999] usb 6-1: Using ep0 maxpacket: 8
[  453.300370][T12999] usb 6-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  453.306443][T12999] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  453.306462][T12999] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  453.306479][T12999] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  453.306491][T12999] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  453.306503][T12999] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  453.306515][T12999] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  453.306527][T12999] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  453.306540][T12999] usb 6-1: config 168 interface 0 has no altsetting 0
[  453.307541][T12999] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  453.307558][T12999] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  453.307575][T12999] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  453.307587][T12999] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  453.307599][T12999] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  453.307611][T12999] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  453.307623][T12999] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  453.307635][T12999] usb 6-1: config 168 interface 0 has no altsetting 0
[  453.308437][T12999] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  453.308470][T12999] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  453.308486][T12999] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  453.308498][T12999] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  453.308510][T12999] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  453.308521][T12999] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  453.308533][T12999] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  453.308544][T12999] usb 6-1: config 168 interface 0 has no altsetting 0
[  453.311448][T12999] usb 6-1: string descriptor 0 read error: -22
[  453.311724][T12999] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.330416][T12999] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  453.417843][   T30] net_ratelimit: 7 callbacks suppressed
[  453.417856][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.526558][T14988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  453.527560][T14988] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  453.528791][ T1972] usb 6-1: USB disconnect, device number 108
[  453.657613][T13915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.697480][ T5945] usb 7-1: new high-speed USB device number 89 using dummy_hcd
[  453.730046][T15009] program syz.4.2684 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  453.739919][T14107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.857972][ T5945] usb 7-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40
[  453.858860][ T5945] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  453.858874][ T5945] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  453.858883][ T5945] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  453.858902][ T5945] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  453.860203][ T5945] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  453.860215][ T5945] usb 7-1: Product: syz
[  453.860222][ T5945] usb 7-1: Manufacturer: syz
[  453.863204][ T5945] cdc_wdm 7-1:1.0: skipping garbage
[  453.863214][ T5945] cdc_wdm 7-1:1.0: skipping garbage
[  453.863876][ T5945] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  453.863884][ T5945] cdc_wdm 7-1:1.0: Unknown control protocol
[  453.970006][ T1972] usb 6-1: new high-speed USB device number 109 using dummy_hcd
[  454.091982][ T5945] usb 7-1: USB disconnect, device number 89
[  454.457843][T12999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.707714][ T5945] usb 7-1: new high-speed USB device number 90 using dummy_hcd
[  454.731541][ T1972] usb 6-1: Using ep0 maxpacket: 8
[  454.740587][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.740695][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.758770][ T1972] usb 6-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  454.777618][T14107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.861479][ T5945] usb 7-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40
[  454.871909][ T5945] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  454.872213][ T5945] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  454.872348][ T5945] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  454.874038][ T5945] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  454.916945][ T5945] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  454.917004][ T5945] usb 7-1: Product: syz
[  454.917051][ T5945] usb 7-1: Manufacturer: syz
[  455.005463][ T5945] cdc_wdm 7-1:1.0: skipping garbage
[  455.005566][ T5945] cdc_wdm 7-1:1.0: skipping garbage
[  455.040473][ T5945] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  455.040602][ T5945] cdc_wdm 7-1:1.0: Unknown control protocol
[  455.129504][ T1972] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  455.129537][ T1972] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  455.129561][ T1972] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  455.129583][ T1972] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  455.129603][ T1972] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  455.129623][ T1972] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  455.129644][ T1972] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  455.129663][ T1972] usb 6-1: config 168 interface 0 has no altsetting 0
[  455.253609][ T1972] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  455.253635][ T1972] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  455.253653][ T1972] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  455.253666][ T1972] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  455.253677][ T1972] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  455.253689][ T1972] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  455.253701][ T1972] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  455.253713][ T1972] usb 6-1: config 168 interface 0 has no altsetting 0
[  455.257520][ T1972] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  455.257543][ T1972] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  455.257579][ T1972] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  455.257593][ T1972] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  455.257605][ T1972] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  455.257616][ T1972] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  455.257628][ T1972] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  455.257640][ T1972] usb 6-1: config 168 interface 0 has no altsetting 0
[  455.279489][ T1972] usb 6-1: string descriptor 0 read error: -22
[  455.279558][ T1972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.288867][ T1972] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux1
[  455.520820][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.652539][ T1724] usb 6-1: USB disconnect, device number 109
[  455.756601][    C1] cdc_wdm 7-1:1.0: unknown notification 136 received: index 4105 len 10284
[  455.760283][    C1] cdc_wdm 7-1:1.0: unknown notification 36 received: index 11205 len 28861
[  455.760508][    C1] cdc_wdm 7-1:1.0: unknown notification 41 received: index 127 len 256
[  455.823827][ T6028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.537972][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.048817][ T6028] usb 7-1: USB disconnect, device number 90
[  457.132453][T15041] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.2690'.
[  457.132478][T15041] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  457.150870][ T1724] hid-generic 0000:0000:0001.000A: unknown main item tag 0x0
[  457.150891][ T1724] hid-generic 0000:0000:0001.000A: unknown main item tag 0x0
[  457.150903][ T1724] hid-generic 0000:0000:0001.000A: unknown main item tag 0x0
[  457.150914][ T1724] hid-generic 0000:0000:0001.000A: unknown main item tag 0x0
[  457.150925][ T1724] hid-generic 0000:0000:0001.000A: unknown main item tag 0x0
[  457.150937][ T1724] hid-generic 0000:0000:0001.000A: unknown main item tag 0x0
[  457.150948][ T1724] hid-generic 0000:0000:0001.000A: unknown main item tag 0x0
[  457.150959][ T1724] hid-generic 0000:0000:0001.000A: unknown main item tag 0x0
[  457.158484][ T1724] hid-generic 0000:0000:0001.000A: hidraw1: <UNKNOWN> HID v0.10 Device [syz0] on syz1
[  457.328977][T15044] fido_id[15044]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  457.416045][T15048] NILFS (nullb0): couldn't find nilfs on the device
[  457.421266][T15048] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  458.623668][T15075] dlm: no locking on control device
[  458.874013][ T5945] net_ratelimit: 7 callbacks suppressed
[  458.874027][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.939378][ T1724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.998554][T15089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.998813][T15089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.998953][T15089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.005294][T15089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.005372][T15089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.005460][T15089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.005577][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.037455][T13670] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  459.048283][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.059494][ T6221] block nbd3: Receive control failed (result -32)
[  459.063095][T15085] block nbd3: shutting down sockets
[  459.108050][T15093] overlayfs: failed to resolve './file2': -2
[  459.144084][T15095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2703'.
[  459.157862][   T25] usb 7-1: new high-speed USB device number 91 using dummy_hcd
[  459.188236][T13670] usb 9-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40
[  459.189102][T13670] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  459.189121][T13670] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  459.189135][T13670] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  459.189218][T13670] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  459.190767][T13670] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  459.190784][T13670] usb 9-1: Product: syz
[  459.190795][T13670] usb 9-1: Manufacturer: syz
[  459.195218][T13670] cdc_wdm 9-1:1.0: skipping garbage
[  459.195228][T13670] cdc_wdm 9-1:1.0: skipping garbage
[  459.196174][T13670] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  459.196184][T13670] cdc_wdm 9-1:1.0: Unknown control protocol
[  459.251707][T15096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2703'.
[  459.312442][T15098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2703'.
[  459.317462][   T25] usb 7-1: Using ep0 maxpacket: 8
[  459.322139][   T25] usb 7-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  459.322958][   T25] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  459.322974][   T25] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  459.322993][   T25] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  459.323006][   T25] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  459.323017][   T25] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  459.323029][   T25] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  459.323041][   T25] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  459.323053][   T25] usb 7-1: config 168 interface 0 has no altsetting 0
[  459.323806][   T25] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  459.323821][   T25] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  459.323836][   T25] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  459.323849][   T25] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  459.323860][   T25] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  459.323871][   T25] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  459.323883][   T25] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  459.323895][   T25] usb 7-1: config 168 interface 0 has no altsetting 0
[  459.324612][   T25] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  459.324627][   T25] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  459.324643][   T25] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  459.324655][   T25] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  459.324667][   T25] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  459.324678][   T25] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  459.324690][   T25] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  459.324702][   T25] usb 7-1: config 168 interface 0 has no altsetting 0
[  459.326827][   T25] usb 7-1: string descriptor 0 read error: -22
[  459.326884][   T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.420664][   T25] adutux 7-1:168.0: ADU100  now attached to /dev/usb/adutux1
[  459.425821][ T1972] usb 9-1: USB disconnect, device number 20
[  459.623151][T15081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  459.623362][T15081] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  459.624286][ T6028] usb 7-1: USB disconnect, device number 91
[  459.667397][T13915] libceph: mon0 (2)0.0.0.0:6789 socket error on write
[  459.674762][T13915] libceph: mon0 (2)0.0.0.0:6789 socket error on write
[  459.867465][ T1972] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[  459.929347][T13915] libceph: mon0 (2)0.0.0.0:6789 socket error on write
[  460.018219][ T1972] usb 9-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40
[  460.019147][ T1972] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  460.019162][ T1972] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  460.019170][ T1972] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  460.019190][ T1972] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  460.020564][ T1972] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  460.020583][ T1972] usb 9-1: Product: syz
[  460.020594][ T1972] usb 9-1: Manufacturer: syz
[  460.025280][ T1972] cdc_wdm 9-1:1.0: skipping garbage
[  460.025296][ T1972] cdc_wdm 9-1:1.0: skipping garbage
[  460.028007][ T1972] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  460.028025][ T1972] cdc_wdm 9-1:1.0: Unknown control protocol
[  460.077431][ T6028] usb 7-1: new high-speed USB device number 92 using dummy_hcd
[  460.247432][ T6028] usb 7-1: Using ep0 maxpacket: 8
[  460.247924][ T6028] usb 7-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  460.248773][ T6028] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  460.248805][ T6028] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  460.248834][ T6028] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  460.248854][ T6028] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  460.248873][ T6028] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  460.248888][ T6028] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  460.248900][ T6028] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  460.248913][ T6028] usb 7-1: config 168 interface 0 has no altsetting 0
[  460.249681][ T6028] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  460.249697][ T6028] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  460.249728][ T6028] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  460.249741][ T6028] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  460.249752][ T6028] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  460.249763][ T6028] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  460.249775][ T6028] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  460.249815][ T6028] usb 7-1: config 168 interface 0 has no altsetting 0
[  460.250561][ T6028] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  460.250584][ T6028] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  460.250610][ T6028] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  460.250630][ T6028] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  460.250650][ T6028] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  460.250666][ T6028] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  460.250678][ T6028] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  460.250690][ T6028] usb 7-1: config 168 interface 0 has no altsetting 0
[  460.253698][ T6028] usb 7-1: string descriptor 0 read error: -22
[  460.253756][ T6028] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.258785][ T6028] adutux 7-1:168.0: ADU100  now attached to /dev/usb/adutux1
[  460.439801][T13915] libceph: mon0 (2)0.0.0.0:6789 socket error on write
[  460.563780][ T6028] usb 7-1: USB disconnect, device number 92
[  460.692576][ T5786] Bluetooth: hci0: Zero size dump init pkt
[  460.698398][T15104] ceph: No mds server is up or the cluster is laggy
[  460.730561][    C0] cdc_wdm 9-1:1.0: unknown notification 136 received: index 4105 len 10284
[  460.732170][    C0] cdc_wdm 9-1:1.0: unknown notification 36 received: index 11205 len 28861
[  460.732344][    C0] cdc_wdm 9-1:1.0: unknown notification 41 received: index 127 len 256
[  461.411581][T15131] fuse: Unknown parameter 'user_i00000000000000000000'
[  461.966236][ T1972] usb 9-1: USB disconnect, device number 21
[  462.307642][ T6028] usb 7-1: new high-speed USB device number 93 using dummy_hcd
[  462.467586][ T6028] usb 7-1: Using ep0 maxpacket: 8
[  462.468139][ T6028] usb 7-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  462.469142][ T6028] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  462.469170][ T6028] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  462.469181][ T6028] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  462.469192][ T6028] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  462.469203][ T6028] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  462.469221][ T6028] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.717117][ T6028] usb 7-1: usb_control_msg returned -32
[  462.717148][ T6028] usbtmc 7-1:16.0: can't read capabilities
[  462.780748][ T6028] usb 7-1: USB disconnect, device number 93
[  462.974890][   T43] kauditd_printk_skb: 28602 callbacks suppressed
[  462.974905][   T43] audit: type=1326 audit(1794519202.671:86739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15150 comm="syz.3.2712" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc4fbc code=0x0
[  463.897664][ T5941] net_ratelimit: 537 callbacks suppressed
[  463.897682][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.946204][T15169] netlink: 'syz.4.2716': attribute type 30 has an invalid length.
[  464.057737][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.095878][T15176] syz.4.2716 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  464.137574][ T1724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.227471][ T6028] usb 8-1: new high-speed USB device number 73 using dummy_hcd
[  464.378475][ T6028] usb 8-1: Using ep0 maxpacket: 8
[  464.379722][ T6028] usb 8-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  464.380676][ T6028] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  464.380704][ T6028] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  464.380735][ T6028] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  464.380757][ T6028] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  464.380776][ T6028] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  464.380796][ T6028] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  464.380817][ T6028] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  464.380838][ T6028] usb 8-1: config 168 interface 0 has no altsetting 0
[  464.392993][ T6028] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  464.393029][ T6028] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  464.393060][ T6028] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  464.393082][ T6028] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  464.393102][ T6028] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  464.393122][ T6028] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  464.393143][ T6028] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  464.393165][ T6028] usb 8-1: config 168 interface 0 has no altsetting 0
[  464.394605][ T6028] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  464.394633][ T6028] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  464.394664][ T6028] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  464.394685][ T6028] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  464.394705][ T6028] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  464.394725][ T6028] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  464.394746][ T6028] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  464.394769][ T6028] usb 8-1: config 168 interface 0 has no altsetting 0
[  464.401880][ T6028] usb 8-1: string descriptor 0 read error: -22
[  464.402014][ T6028] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  464.413031][T15182] rxe_eth0 speed is unknown, defaulting to 1000
[  464.431762][ T6028] adutux 8-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  464.628288][T15172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  464.628667][T15172] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  464.632773][ T6028] usb 8-1: USB disconnect, device number 73
[  465.077451][ T6028] usb 8-1: new high-speed USB device number 74 using dummy_hcd
[  465.097813][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.178137][ T1724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.227732][ T6028] usb 8-1: Using ep0 maxpacket: 8
[  465.228452][ T6028] usb 8-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  465.229358][ T6028] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  465.229386][ T6028] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  465.229416][ T6028] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  465.229438][ T6028] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  465.229458][ T6028] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  465.229479][ T6028] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  465.229500][ T6028] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  465.229522][ T6028] usb 8-1: config 168 interface 0 has no altsetting 0
[  465.230415][ T6028] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  465.230441][ T6028] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  465.230469][ T6028] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  465.230490][ T6028] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  465.230510][ T6028] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  465.230531][ T6028] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  465.230553][ T6028] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  465.230575][ T6028] usb 8-1: config 168 interface 0 has no altsetting 0
[  465.231446][ T6028] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  465.231471][ T6028] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  465.231499][ T6028] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  465.231521][ T6028] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  465.231542][ T6028] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  465.231562][ T6028] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  465.231583][ T6028] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  465.231604][ T6028] usb 8-1: config 168 interface 0 has no altsetting 0
[  465.234238][ T6028] usb 8-1: string descriptor 0 read error: -22
[  465.234345][ T6028] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  465.401058][T14107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.463151][ T6028] adutux 8-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  465.728421][   T25] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[  465.819332][T13915] usb 8-1: USB disconnect, device number 74
[  465.877692][   T25] usb 9-1: Using ep0 maxpacket: 8
[  465.878494][   T25] usb 9-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  465.881493][   T25] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  465.881522][   T25] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  465.881553][   T25] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  465.881575][   T25] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  465.881596][   T25] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  465.881617][   T25] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  465.881638][   T25] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  465.881661][   T25] usb 9-1: config 168 interface 0 has no altsetting 0
[  465.883919][   T25] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  465.883946][   T25] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  465.883976][   T25] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  465.883998][   T25] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  465.884015][   T43] audit: type=1326 audit(1794519205.581:86740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15201 comm="syz.2.2723" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708efbc code=0x0
[  465.884019][   T25] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  465.884042][   T25] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  465.884063][   T25] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  465.884085][   T25] usb 9-1: config 168 interface 0 has no altsetting 0
[  465.885083][   T25] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  465.885109][   T25] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  465.885141][   T25] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  465.885162][   T25] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  465.885181][   T25] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  465.885201][   T25] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  465.885222][   T25] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  465.885243][   T25] usb 9-1: config 168 interface 0 has no altsetting 0
[  465.892693][   T25] usb 9-1: string descriptor 0 read error: -22
[  465.892797][   T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  465.898809][   T25] adutux 9-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  465.977627][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.103604][T15196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  466.103978][T15196] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  466.106777][T13915] usb 9-1: USB disconnect, device number 22
[  466.147958][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.468407][T14107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.559569][ T6028] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[  466.717534][ T6028] usb 9-1: Using ep0 maxpacket: 8
[  466.718009][ T6028] usb 9-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  466.718806][ T6028] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  466.718824][ T6028] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  466.718848][ T6028] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  466.718861][ T6028] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  466.718872][ T6028] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  466.718884][ T6028] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  466.718896][ T6028] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  466.718908][ T6028] usb 9-1: config 168 interface 0 has no altsetting 0
[  466.719629][ T6028] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  466.719644][ T6028] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  466.719660][ T6028] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  466.719672][ T6028] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  466.719683][ T6028] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  466.719695][ T6028] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  466.719707][ T6028] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  466.719718][ T6028] usb 9-1: config 168 interface 0 has no altsetting 0
[  466.720440][ T6028] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  466.720455][ T6028] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  466.720471][ T6028] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  466.720483][ T6028] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  466.720494][ T6028] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  466.720505][ T6028] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  466.720517][ T6028] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  466.720529][ T6028] usb 9-1: config 168 interface 0 has no altsetting 0
[  466.722906][ T6028] usb 9-1: string descriptor 0 read error: -22
[  466.722979][ T6028] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.732810][ T6028] adutux 9-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  466.740656][T15208] ecryptfs_validate_options: eCryptfs doesn't support cipher: ÂçUèhþBöptfs_key_bytes=16
[  466.740678][T15208] Error validating options; rc = [-22]
[  466.845396][T15214] netlink: 'syz.2.2727': attribute type 30 has an invalid length.
[  467.095691][   T30] usb 9-1: USB disconnect, device number 23
[  467.102945][T15224] adutux: No device or device unplugged -19
[  467.111440][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  468.666805][T15246] FAULT_INJECTION: forcing a failure.
[  468.666805][T15246] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  468.666859][T15246] CPU: 1 UID: 0 PID: 15246 Comm: syz.3.2733 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  468.666887][T15246] Tainted: [L]=SOFTLOCKUP
[  468.666891][T15246] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  468.666897][T15246] Call Trace:
[  468.666901][T15246]  <TASK>
[  468.666906][T15246]  dump_stack_lvl+0x100/0x190
[  468.666928][T15246]  should_fail_ex.cold+0x5/0xa
[  468.666944][T15246]  save_fsave_header+0x14c/0x310
[  468.666962][T15246]  ? __pfx_save_fsave_header+0x10/0x10
[  468.666984][T15246]  ? copy_fpstate_to_sigframe+0x2b8/0xb60
[  468.666996][T15246]  ? __local_bh_enable_ip+0xa5/0x120
[  468.667009][T15246]  copy_fpstate_to_sigframe+0x799/0xb60
[  468.667022][T15246]  ? __pfx_copy_fpstate_to_sigframe+0x10/0x10
[  468.667035][T15246]  ? cgroup1_freezing+0x136/0x3b0
[  468.667046][T15246]  ? freezing_slow_path+0xb5/0x1a0
[  468.667057][T15246]  ? x86_task_fpu+0x5f/0x90
[  468.667073][T15246]  get_sigframe+0x3fb/0x940
[  468.667092][T15246]  ? __pfx_get_sigframe+0x10/0x10
[  468.667107][T15246]  ? rcu_is_watching+0x13/0xc0
[  468.667122][T15246]  ? _raw_spin_unlock_irq+0x23/0x50
[  468.667138][T15246]  ? get_signal+0x173/0x22e0
[  468.667151][T15246]  ia32_setup_rt_frame+0xe7/0xaf0
[  468.667165][T15246]  ? rcu_is_watching+0x13/0xc0
[  468.667181][T15246]  ? __pfx_ia32_setup_rt_frame+0x10/0x10
[  468.667198][T15246]  arch_do_signal_or_restart+0x459/0x7a0
[  468.667215][T15246]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  468.667239][T15246]  exit_to_user_mode_loop+0x139/0x700
[  468.667253][T15246]  ? rcu_is_watching+0x13/0xc0
[  468.667270][T15246]  __do_fast_syscall_32+0x651/0x8e0
[  468.667285][T15246]  ? lockdep_hardirqs_on+0x7d/0x110
[  468.667301][T15246]  do_fast_syscall_32+0x32/0x70
[  468.667316][T15246]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  468.667330][T15246] RIP: 0023:0xf7fc4fbc
[  468.667339][T15246] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  468.667349][T15246] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 00000000000000ee
[  468.667360][T15246] RAX: 0000000000000000 RBX: 00000000000001e6 RCX: 0000000000000021
[  468.667366][T15246] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  468.667372][T15246] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  468.667378][T15246] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  468.667384][T15246] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  468.667397][T15246]  </TASK>
[  469.031008][T13670] net_ratelimit: 5 callbacks suppressed
[  469.031022][T13670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.135024][T15252] vxlan0: entered promiscuous mode
[  469.159976][T15253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.160064][T15253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.160219][T15253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.287156][ T9351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.293163][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.317613][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.738565][ T9354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.739929][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.741853][ T6028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.165879][T15266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2740'.
[  470.454543][T15250] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  470.454649][T15250] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  470.483974][T15250] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  470.484308][T15250] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  470.491145][T15250] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  470.491200][T15250] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  470.973928][ T5941] libceph: mon0 (2)0.0.0.0:6789 socket error on write
[  471.187478][ T5786] Bluetooth: hci0: command 0x0c1a tx timeout
[  471.191259][T15250] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  471.229814][T15285] FAULT_INJECTION: forcing a failure.
[  471.229814][T15285] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  471.229842][T15285] CPU: 0 UID: 0 PID: 15285 Comm: syz.2.2746 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  471.229865][T15285] Tainted: [L]=SOFTLOCKUP
[  471.229872][T15285] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  471.229881][T15285] Call Trace:
[  471.229887][T15285]  <TASK>
[  471.229893][T15285]  dump_stack_lvl+0x100/0x190
[  471.229923][T15285]  should_fail_ex.cold+0x5/0xa
[  471.229948][T15285]  _copy_from_iter+0x1f4/0x16c0
[  471.229976][T15285]  ? __asan_memset+0x23/0x50
[  471.229992][T15285]  ? __pfx__copy_from_iter+0x10/0x10
[  471.230014][T15285]  ? __pfx___alloc_skb+0x10/0x10
[  471.230044][T15285]  netlink_sendmsg+0x8f5/0x10c0
[  471.230063][T15285]  ? __pfx_netlink_sendmsg+0x10/0x10
[  471.230082][T15285]  ? apparmor_socket_sendmsg+0x165/0x280
[  471.230105][T15285]  ? ____sys_sendmsg+0xa99/0xc30
[  471.230122][T15285]  ____sys_sendmsg+0xa99/0xc30
[  471.230139][T15285]  ? __pfx_netlink_sendmsg+0x10/0x10
[  471.230156][T15285]  ? __pfx_____sys_sendmsg+0x10/0x10
[  471.230183][T15285]  ___sys_sendmsg+0x190/0x1e0
[  471.230206][T15285]  ? __pfx____sys_sendmsg+0x10/0x10
[  471.230238][T15285]  ? find_held_lock+0x2b/0x80
[  471.230278][T15285]  __sys_sendmsg+0x160/0x210
[  471.230306][T15285]  ? __pfx___sys_sendmsg+0x10/0x10
[  471.230352][T15285]  __do_fast_syscall_32+0x14d/0x8e0
[  471.230378][T15285]  ? lockdep_hardirqs_on+0x7d/0x110
[  471.230404][T15285]  do_fast_syscall_32+0x32/0x70
[  471.230431][T15285]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  471.230453][T15285] RIP: 0023:0xf708efbc
[  471.230468][T15285] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  471.230485][T15285] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  471.230502][T15285] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000680
[  471.230513][T15285] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000
[  471.230524][T15285] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  471.230535][T15285] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  471.230546][T15285] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  471.230571][T15285]  </TASK>
[  471.250277][ T5941] libceph: mon0 (2)0.0.0.0:6789 socket error on write
[  472.032494][ T5941] libceph: mon0 (2)0.0.0.0:6789 socket error on write
[  472.057413][T15273] ceph: No mds server is up or the cluster is laggy
[  472.817496][ T5786] Bluetooth: hci3: command 0x0c1a tx timeout
[  472.817552][ T5786] Bluetooth: hci1: command 0x0c1a tx timeout
[  473.184049][   T43] audit: type=1326 audit(1794519212.881:86741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15314 comm="syz.2.2753" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708efbc code=0x0
[  473.257542][T14949] Bluetooth: hci0: command 0x0c1a tx timeout
[  473.327979][T12999] usb 8-1: new high-speed USB device number 75 using dummy_hcd
[  473.477427][T12999] usb 8-1: Using ep0 maxpacket: 8
[  473.478194][T12999] usb 8-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  473.479179][T12999] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  473.479208][T12999] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  473.479242][T12999] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  473.479264][T12999] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  473.479283][T12999] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  473.479304][T12999] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  473.479325][T12999] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  473.479346][T12999] usb 8-1: config 168 interface 0 has no altsetting 0
[  473.480245][T12999] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  473.480269][T12999] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  473.480294][T12999] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  473.480315][T12999] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  473.480333][T12999] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  473.480351][T12999] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  473.480371][T12999] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  473.480391][T12999] usb 8-1: config 168 interface 0 has no altsetting 0
[  473.481457][T12999] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  473.481481][T12999] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  473.481507][T12999] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  473.481527][T12999] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  473.481545][T12999] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  473.481564][T12999] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  473.481583][T12999] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  473.481604][T12999] usb 8-1: config 168 interface 0 has no altsetting 0
[  473.485034][T12999] usb 8-1: string descriptor 0 read error: -22
[  473.485150][T12999] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.497048][T12999] adutux 8-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  473.694770][T15310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  473.695013][T15310] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  473.696002][ T1724] usb 8-1: USB disconnect, device number 75
[  474.058429][T15320] net_ratelimit: 19 callbacks suppressed
[  474.058458][T15320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.059111][T15320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.059528][T15320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.060065][T15320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.060384][T15320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.061610][T15319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.149171][ T1724] usb 8-1: new high-speed USB device number 76 using dummy_hcd
[  474.218273][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.297448][ T1724] usb 8-1: Using ep0 maxpacket: 8
[  474.299826][ T1724] usb 8-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  474.300754][ T1724] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  474.300771][ T1724] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  474.300788][ T1724] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  474.300800][ T1724] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  474.300811][ T1724] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  474.300823][ T1724] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  474.300835][ T1724] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  474.300847][ T1724] usb 8-1: config 168 interface 0 has no altsetting 0
[  474.302502][ T1724] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  474.302519][ T1724] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  474.302535][ T1724] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  474.302547][ T1724] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  474.302559][ T1724] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  474.302570][ T1724] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  474.302582][ T1724] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  474.302594][ T1724] usb 8-1: config 168 interface 0 has no altsetting 0
[  474.303401][ T1724] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  474.303417][ T1724] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  474.303433][ T1724] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  474.303445][ T1724] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  474.303462][ T1724] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  474.303473][ T1724] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  474.303485][ T1724] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  474.303496][ T1724] usb 8-1: config 168 interface 0 has no altsetting 0
[  474.305893][ T1724] usb 8-1: string descriptor 0 read error: -22
[  474.305948][ T1724] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  474.320898][ T1724] adutux 8-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  474.429337][T15324] FAULT_INJECTION: forcing a failure.
[  474.429337][T15324] name failslab, interval 1, probability 0, space 0, times 0
[  474.429389][T15324] CPU: 2 UID: 0 PID: 15324 Comm: syz.4.2757 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  474.429417][T15324] Tainted: [L]=SOFTLOCKUP
[  474.429424][T15324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  474.429444][T15324] Call Trace:
[  474.429451][T15324]  <TASK>
[  474.429459][T15324]  dump_stack_lvl+0x100/0x190
[  474.429546][T15324]  should_fail_ex.cold+0x5/0xa
[  474.429571][T15324]  should_failslab+0xc2/0x120
[  474.429616][T15324]  __kmalloc_cache_noprof+0x91/0x6d0
[  474.429642][T15324]  ? bpf_prog_alloc_no_stats+0x15f/0x690
[  474.429670][T15324]  bpf_prog_alloc_no_stats+0x15f/0x690
[  474.429695][T15324]  bpf_prog_alloc+0x3b/0x200
[  474.429743][T15324]  bpf_prog_create_from_user+0xb4/0x2e0
[  474.429793][T15324]  ? __pfx_seccomp_check_filter+0x10/0x10
[  474.429822][T15324]  do_seccomp+0x7b4/0x2740
[  474.429846][T15324]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  474.429902][T15324]  ? __pfx_do_seccomp+0x10/0x10
[  474.429929][T15324]  ? lock_acquire+0x1d1/0x380
[  474.429949][T15324]  ? __might_fault+0xc5/0x140
[  474.429971][T15324]  ? find_held_lock+0x2b/0x80
[  474.429994][T15324]  ? __might_fault+0xc5/0x140
[  474.430023][T15324]  __do_fast_syscall_32+0x14d/0x8e0
[  474.430048][T15324]  ? lockdep_hardirqs_on+0x7d/0x110
[  474.430075][T15324]  do_fast_syscall_32+0x32/0x70
[  474.430102][T15324]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  474.430126][T15324] RIP: 0023:0xf7fa4fbc
[  474.430142][T15324] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  474.430158][T15324] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000162
[  474.430191][T15324] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000000
[  474.430203][T15324] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000
[  474.430214][T15324] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  474.430225][T15324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  474.430236][T15324] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  474.430260][T15324]  </TASK>
[  474.447433][   T43] audit: type=1800 audit(1794519214.141:86742): pid=15324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2757" name="file0" dev="9p" ino=79691843 res=0 errno=-2
[  474.688695][T12999] usb 8-1: USB disconnect, device number 76
[  474.694359][T15327] adutux: No device or device unplugged -19
[  474.694398][T15330] adutux: No device or device unplugged -19
[  474.749779][T15331] device-mapper: ioctl: only supply one of name or uuid, cmd(15)
[  474.750563][T15331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2759'.
[  474.754153][T15331] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.764105][T15331] bridge_slave_1 (unregistering): left allmulticast mode
[  474.764132][T15331] bridge_slave_1 (unregistering): left promiscuous mode
[  474.765569][T15331] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.798252][T15337] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2760'.
[  474.802279][T15337] syzkaller1: entered promiscuous mode
[  474.802294][T15337] syzkaller1: entered allmulticast mode
[  474.857472][ T5786] Bluetooth: hci3: command 0x0c1a tx timeout
[  474.857490][T14949] Bluetooth: hci1: command 0x0c1a tx timeout
[  474.901250][T15340] FAULT_INJECTION: forcing a failure.
[  474.901250][T15340] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  474.901280][T15340] CPU: 3 UID: 0 PID: 15340 Comm: syz.1.2761 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  474.901304][T15340] Tainted: [L]=SOFTLOCKUP
[  474.901311][T15340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  474.901320][T15340] Call Trace:
[  474.901327][T15340]  <TASK>
[  474.901335][T15340]  dump_stack_lvl+0x100/0x190
[  474.901364][T15340]  should_fail_ex.cold+0x5/0xa
[  474.901380][T15340]  should_fail_alloc_page+0xeb/0x140
[  474.901396][T15340]  prepare_alloc_pages+0x1f0/0x5b0
[  474.901409][T15340]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  474.901424][T15340]  __alloc_frozen_pages_noprof+0x1b9/0x31e0
[  474.901440][T15340]  ? __kernel_text_address+0xd/0x30
[  474.901457][T15340]  ? arch_stack_walk+0xa6/0xf0
[  474.901477][T15340]  ? __lock_acquire+0x5c0/0x1f40
[  474.901488][T15340]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  474.901507][T15340]  ? __lock_acquire+0x5c0/0x1f40
[  474.901520][T15340]  ? lock_acquire+0x1d1/0x380
[  474.901531][T15340]  ? unwind_next_frame+0xbd/0x2090
[  474.901551][T15340]  ? find_held_lock+0x2b/0x80
[  474.901566][T15340]  ? is_bpf_text_address+0x8a/0x1a0
[  474.901580][T15340]  ? is_bpf_text_address+0x8a/0x1a0
[  474.901594][T15340]  ? bpf_ksym_find+0x124/0x1c0
[  474.901604][T15340]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  474.901620][T15340]  ? policy_nodemask+0xed/0x5e0
[  474.901635][T15340]  alloc_pages_mpol+0x201/0x560
[  474.901650][T15340]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  474.901666][T15340]  ? look_up_lock_class+0x64/0x120
[  474.901699][T15340]  alloc_pages_noprof+0x1a/0x160
[  474.901733][T15340]  pte_alloc_one+0x1c/0x3d0
[  474.901752][T15340]  __pte_alloc+0x6d/0x3e0
[  474.901767][T15340]  ? __pfx___pte_alloc+0x10/0x10
[  474.901784][T15340]  ? walk_to_pmd+0x302/0x4c0
[  474.901797][T15340]  get_locked_pte+0xa1/0xc0
[  474.901809][T15340]  insert_page+0xcc/0x220
[  474.901821][T15340]  ? __pfx_insert_page+0x10/0x10
[  474.901837][T15340]  vm_insert_page+0x161/0x500
[  474.901849][T15340]  ? __pfx_vm_insert_page+0x10/0x10
[  474.901860][T15340]  ? remap_vmalloc_range_partial+0x11c/0x4b0
[  474.901879][T15340]  ? remap_vmalloc_range_partial+0x11c/0x4b0
[  474.901899][T15340]  ? is_vmalloc_addr+0x86/0xa0
[  474.901927][T15340]  remap_vmalloc_range_partial+0x281/0x4b0
[  474.901953][T15340]  ? __pfx_remap_vmalloc_range_partial+0x10/0x10
[  474.901976][T15340]  ? __vma_start_write+0x17f/0x280
[  474.901996][T15340]  ? __pfx___vma_start_write+0x10/0x10
[  474.902012][T15340]  ringbuf_map_mmap_user+0xb8/0x100
[  474.902026][T15340]  bpf_map_mmap+0x48a/0x7f0
[  474.902042][T15340]  __mmap_region+0x18a5/0x3910
[  474.902063][T15340]  ? __pfx___mmap_region+0x10/0x10
[  474.902082][T15340]  ? ima_match_policy+0x8ca/0x2400
[  474.902103][T15340]  ? process_measurement+0x156d/0x2360
[  474.902126][T15340]  ? up_write+0x2dc/0x5b0
[  474.902141][T15340]  ? process_measurement+0x1f4/0x2360
[  474.902165][T15340]  ? lock_acquire+0x1d1/0x380
[  474.902176][T15340]  ? unwind_next_frame+0xbd/0x2090
[  474.902210][T15340]  ? __lock_acquire+0x5c0/0x1f40
[  474.902221][T15340]  ? _parse_integer_limit+0x1ac/0x220
[  474.902243][T15340]  mmap_region+0x5a8/0x6d0
[  474.902261][T15340]  ? __pfx_mmap_region+0x10/0x10
[  474.902277][T15340]  ? memfd_check_seals_mmap+0x24b/0x310
[  474.902294][T15340]  ? __pfx_memfd_check_seals_mmap+0x10/0x10
[  474.902309][T15340]  ? cap_mmap_addr+0x4b/0x120
[  474.902322][T15340]  ? bpf_lsm_mmap_addr+0x9/0x30
[  474.902332][T15340]  ? security_mmap_addr+0x71/0x1e0
[  474.902348][T15340]  ? __get_unmapped_area+0x255/0x3e0
[  474.902363][T15340]  do_mmap+0x12c7/0x1c30
[  474.902385][T15340]  ? lock_acquire+0x1d1/0x380
[  474.902404][T15340]  ? __pfx_do_mmap+0x10/0x10
[  474.902425][T15340]  ? __pfx___might_resched+0x10/0x10
[  474.902452][T15340]  ? bpf_lsm_current_getlsmprop_subj+0x9/0x10
[  474.902473][T15340]  ? security_current_getlsmprop_subj+0x6e/0x130
[  474.902495][T15340]  ? __pfx_down_write_killable+0x10/0x10
[  474.902515][T15340]  vm_mmap_pgoff+0x283/0x490
[  474.902533][T15340]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  474.902546][T15340]  ? __fget_files+0x215/0x3d0
[  474.902561][T15340]  ? __fget_files+0x21f/0x3d0
[  474.902576][T15340]  ksys_mmap_pgoff+0x3cb/0x610
[  474.902588][T15340]  ? find_held_lock+0x2b/0x80
[  474.902602][T15340]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  474.902618][T15340]  __do_fast_syscall_32+0x14d/0x8e0
[  474.902633][T15340]  ? lockdep_hardirqs_on+0x7d/0x110
[  474.902649][T15340]  do_fast_syscall_32+0x32/0x70
[  474.902664][T15340]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  474.902678][T15340] RIP: 0023:0xf703efbc
[  474.902688][T15340] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  474.902698][T15340] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0
[  474.902710][T15340] RAX: ffffffffffffffda RBX: 0000000080ffd000 RCX: 0000000000003000
[  474.902716][T15340] RDX: 0000000000000000 RSI: 0000000000028011 RDI: 0000000000000009
[  474.902723][T15340] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  474.902729][T15340] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  474.902735][T15340] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  474.902751][T15340]  </TASK>
[  474.906810][   T43] audit: type=1326 audit(1794519214.601:86743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15339 comm="syz.1.2761" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703efbc code=0x0
[  474.947619][T12999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.097829][ T1972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.185413][T15349] 9p: Bad value for 'port'
[  475.257552][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.337431][T14949] Bluetooth: hci0: command 0x0c1a tx timeout
[  475.366550][T15353] FAULT_INJECTION: forcing a failure.
[  475.366550][T15353] name failslab, interval 1, probability 0, space 0, times 0
[  475.366582][T15353] CPU: 2 UID: 0 PID: 15353 Comm: syz.4.2766 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  475.366608][T15353] Tainted: [L]=SOFTLOCKUP
[  475.366615][T15353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  475.366625][T15353] Call Trace:
[  475.366631][T15353]  <TASK>
[  475.366639][T15353]  dump_stack_lvl+0x100/0x190
[  475.366670][T15353]  should_fail_ex.cold+0x5/0xa
[  475.366696][T15353]  should_failslab+0xc2/0x120
[  475.366719][T15353]  __kmalloc_noprof+0xfc/0x840
[  475.366738][T15353]  ? hash_netiface_create+0x382/0x1360
[  475.366763][T15353]  hash_netiface_create+0x382/0x1360
[  475.366785][T15353]  ? __nla_parse+0x40/0x60
[  475.366812][T15353]  ? __pfx_hash_netiface_create+0x10/0x10
[  475.366840][T15353]  ip_set_create+0x6c4/0x1510
[  475.366866][T15353]  ? __pfx_ip_set_create+0x10/0x10
[  475.366881][T15353]  ? nfnetlink_rcv_msg+0x8ad/0x11e0
[  475.366922][T15353]  ? find_held_lock+0x2b/0x80
[  475.366952][T15353]  nfnetlink_rcv_msg+0x9d5/0x11e0
[  475.366982][T15353]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  475.367010][T15353]  ? kfree_skbmem+0x19f/0x210
[  475.367057][T15353]  ? __pfx___dev_queue_xmit+0x10/0x10
[  475.367085][T15353]  netlink_rcv_skb+0x159/0x420
[  475.367104][T15353]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  475.367129][T15353]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  475.367160][T15353]  ? ns_capable+0xcd/0xf0
[  475.367181][T15353]  nfnetlink_rcv+0x1b3/0x440
[  475.367204][T15353]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  475.367227][T15353]  ? netlink_deliver_tap+0x1ae/0xb50
[  475.367259][T15353]  netlink_unicast+0x668/0x950
[  475.367281][T15353]  ? __pfx_netlink_unicast+0x10/0x10
[  475.367307][T15353]  netlink_sendmsg+0x9ac/0x10c0
[  475.367347][T15353]  ? __pfx_netlink_sendmsg+0x10/0x10
[  475.367371][T15353]  ? apparmor_socket_sendmsg+0x165/0x280
[  475.367399][T15353]  ? ____sys_sendmsg+0xa99/0xc30
[  475.367419][T15353]  ____sys_sendmsg+0xa99/0xc30
[  475.367450][T15353]  ? __pfx_netlink_sendmsg+0x10/0x10
[  475.367467][T15353]  ? __pfx_____sys_sendmsg+0x10/0x10
[  475.367493][T15353]  ___sys_sendmsg+0x190/0x1e0
[  475.367513][T15353]  ? __pfx____sys_sendmsg+0x10/0x10
[  475.367543][T15353]  ? find_held_lock+0x2b/0x80
[  475.367585][T15353]  __sys_sendmsg+0x160/0x210
[  475.367611][T15353]  ? __pfx___sys_sendmsg+0x10/0x10
[  475.367650][T15353]  __do_fast_syscall_32+0x14d/0x8e0
[  475.367676][T15353]  ? lockdep_hardirqs_on+0x7d/0x110
[  475.367703][T15353]  do_fast_syscall_32+0x32/0x70
[  475.367729][T15353]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  475.367750][T15353] RIP: 0023:0xf7fa4fbc
[  475.367766][T15353] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  475.367784][T15353] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  475.367803][T15353] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800009c0
[  475.367815][T15353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  475.367847][T15353] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  475.367857][T15353] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  475.367867][T15353] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  475.367891][T15353]  </TASK>
[  475.461184][T15355] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  475.461211][T15355] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock
[  475.461492][T15355] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  475.461512][T15355] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock
[  475.598886][T15358] FAULT_INJECTION: forcing a failure.
[  475.598886][T15358] name failslab, interval 1, probability 0, space 0, times 0
[  475.598921][T15358] CPU: 0 UID: 0 PID: 15358 Comm: syz.2.2767 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  475.598948][T15358] Tainted: [L]=SOFTLOCKUP
[  475.598956][T15358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  475.598968][T15358] Call Trace:
[  475.598976][T15358]  <TASK>
[  475.598984][T15358]  dump_stack_lvl+0x100/0x190
[  475.599020][T15358]  should_fail_ex.cold+0x5/0xa
[  475.599047][T15358]  should_failslab+0xc2/0x120
[  475.599073][T15358]  __kmalloc_node_noprof+0xff/0x870
[  475.599092][T15358]  ? __get_vm_area_node+0x1ff/0x350
[  475.599109][T15358]  ? __get_vm_area_node+0x22b/0x350
[  475.599128][T15358]  ? __vmalloc_node_range_noprof+0x424/0x1440
[  475.599157][T15358]  __vmalloc_node_range_noprof+0x424/0x1440
[  475.599178][T15358]  ? stack_trace_save+0x8e/0xc0
[  475.599198][T15358]  ? __pfx_stack_trace_save+0x10/0x10
[  475.599225][T15358]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  475.599253][T15358]  ? __do_fast_syscall_32+0x14d/0x8e0
[  475.599284][T15358]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  475.599316][T15358]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  475.599340][T15358]  __vmalloc_node_noprof+0xad/0xf0
[  475.599361][T15358]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  475.599387][T15358]  __vmalloc_noprof+0xa3/0x120
[  475.599408][T15358]  ? __pfx___vmalloc_noprof+0x10/0x10
[  475.599438][T15358]  bpf_prog_alloc_no_stats+0x58/0x690
[  475.599465][T15358]  bpf_prog_alloc+0x3b/0x200
[  475.599491][T15358]  bpf_prog_create_from_user+0xb4/0x2e0
[  475.599515][T15358]  ? __pfx_seccomp_check_filter+0x10/0x10
[  475.599542][T15358]  do_seccomp+0x7b4/0x2740
[  475.599569][T15358]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  475.599598][T15358]  ? __pfx_do_seccomp+0x10/0x10
[  475.599624][T15358]  ? lock_acquire+0x1d1/0x380
[  475.599642][T15358]  ? __might_fault+0xc5/0x140
[  475.599665][T15358]  ? find_held_lock+0x2b/0x80
[  475.599688][T15358]  ? __might_fault+0xc5/0x140
[  475.599717][T15358]  __do_fast_syscall_32+0x14d/0x8e0
[  475.599743][T15358]  ? lockdep_hardirqs_on+0x7d/0x110
[  475.599770][T15358]  do_fast_syscall_32+0x32/0x70
[  475.599799][T15358]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  475.599823][T15358] RIP: 0023:0xf708efbc
[  475.599839][T15358] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  475.599867][T15358] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000162
[  475.599908][T15358] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000000
[  475.599921][T15358] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000
[  475.599933][T15358] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  475.599945][T15358] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  475.599959][T15358] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  475.599986][T15358]  </TASK>
[  475.601329][T15358] syz.2.2767: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  475.601394][T15358] CPU: 0 UID: 0 PID: 15358 Comm: syz.2.2767 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  475.601422][T15358] Tainted: [L]=SOFTLOCKUP
[  475.601430][T15358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  475.601441][T15358] Call Trace:
[  475.601449][T15358]  <TASK>
[  475.601457][T15358]  dump_stack_lvl+0x100/0x190
[  475.601490][T15358]  warn_alloc.cold+0x9e/0xb2
[  475.601525][T15358]  ? __pfx_warn_alloc+0x10/0x10
[  475.601554][T15358]  ? dump_stack_lvl+0x17c/0x190
[  475.601583][T15358]  ? rcu_is_watching+0x13/0xc0
[  475.601607][T15358]  ? __kasan_kmalloc+0x8a/0xb0
[  475.601628][T15358]  ? __kmalloc_node_noprof+0x360/0x870
[  475.601647][T15358]  ? __get_vm_area_node+0x1ff/0x350
[  475.601666][T15358]  ? __get_vm_area_node+0x22b/0x350
[  475.601684][T15358]  ? __vmalloc_node_range_noprof+0x424/0x1440
[  475.601734][T15358]  __vmalloc_node_range_noprof+0x107c/0x1440
[  475.601763][T15358]  ? __pfx_stack_trace_save+0x10/0x10
[  475.601789][T15358]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  475.601815][T15358]  ? __do_fast_syscall_32+0x14d/0x8e0
[  475.601843][T15358]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  475.601885][T15358]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  475.601907][T15358]  __vmalloc_node_noprof+0xad/0xf0
[  475.601931][T15358]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  475.601957][T15358]  __vmalloc_noprof+0xa3/0x120
[  475.601978][T15358]  ? __pfx___vmalloc_noprof+0x10/0x10
[  475.602009][T15358]  bpf_prog_alloc_no_stats+0x58/0x690
[  475.602035][T15358]  bpf_prog_alloc+0x3b/0x200
[  475.602059][T15358]  bpf_prog_create_from_user+0xb4/0x2e0
[  475.602082][T15358]  ? __pfx_seccomp_check_filter+0x10/0x10
[  475.602114][T15358]  do_seccomp+0x7b4/0x2740
[  475.602159][T15358]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  475.602190][T15358]  ? __pfx_do_seccomp+0x10/0x10
[  475.602215][T15358]  ? lock_acquire+0x1d1/0x380
[  475.602233][T15358]  ? __might_fault+0xc5/0x140
[  475.602257][T15358]  ? find_held_lock+0x2b/0x80
[  475.602279][T15358]  ? __might_fault+0xc5/0x140
[  475.602309][T15358]  __do_fast_syscall_32+0x14d/0x8e0
[  475.602336][T15358]  ? lockdep_hardirqs_on+0x7d/0x110
[  475.602362][T15358]  do_fast_syscall_32+0x32/0x70
[  475.602389][T15358]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  475.602410][T15358] RIP: 0023:0xf708efbc
[  475.602426][T15358] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  475.602442][T15358] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000162
[  475.602460][T15358] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000000
[  475.602471][T15358] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000
[  475.602481][T15358] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  475.602491][T15358] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  475.602500][T15358] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  475.602521][T15358]  </TASK>
[  475.603549][T15358] Mem-Info:
[  475.603575][T15358] active_anon:7371 inactive_anon:2011 isolated_anon:64
[  475.603575][T15358]  active_file:3021 inactive_file:8951 isolated_file:0
[  475.603575][T15358]  unevictable:1000 dirty:46 writeback:0
[  475.603575][T15358]  slab_reclaimable:7099 slab_unreclaimable:70174
[  475.603575][T15358]  mapped:30410 shmem:8954 pagetables:1518
[  475.603575][T15358]  sec_pagetables:333 bounce:0
[  475.603575][T15358]  kernel_misc_reclaimable:0
[  475.603575][T15358]  free:22811 free_pcp:930 free_cma:0
[  475.603622][T15358] Node 0 active_anon:76kB inactive_anon:28kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8128kB pagetables:980kB sec_pagetables:1180kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  475.603668][T15358] Node 1 active_anon:29408kB inactive_anon:8016kB active_file:12080kB inactive_file:35804kB unevictable:4000kB isolated(anon):256kB isolated(file):0kB mapped:121616kB dirty:180kB writeback:0kB shmem:35816kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8152kB pagetables:5092kB sec_pagetables:152kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  475.603712][T15358] Node 0 DMA free:3716kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  475.603763][T15358] lowmem_reserve[]: 0 256 256 256 256
[  475.603794][T15358] Node 0 DMA32 free:31844kB boost:25968kB min:37512kB low:40396kB high:43280kB reserved_highatomic:2048kB free_highatomic:324kB active_anon:76kB inactive_anon:28kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:2504kB present:1032196kB managed:262296kB mlocked:0kB bounce:0kB free_pcp:408kB local_pcp:32kB free_cma:0kB
[  475.603844][T15358] lowmem_reserve[]: 0 0 0 0 0
[  475.603881][T15358] Node 1 DMA32 free:55684kB boost:0kB min:47136kB low:58920kB high:70704kB reserved_highatomic:0kB free_highatomic:0kB active_anon:29408kB inactive_anon:8016kB active_file:12080kB inactive_file:35804kB unevictable:4000kB writepending:132kB zspages:4480kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:3292kB local_pcp:772kB free_cma:0kB
[  475.603938][T15358] lowmem_reserve[]: 0 0 0 0 0
[  475.603968][T15358] Node 0 DMA: 121*4kB (UE) 38*8kB (UE) 13*16kB (U) 35*32kB (UE) 7*64kB (U) 1*128kB (U) 0*256kB 0*512kB 1*1024kB (E) 0*2048kB 0*4096kB = 3716kB
[  475.604084][T15358] Node 0 DMA32: 593*4kB (UMEH) 182*8kB (UMEH) 50*16kB (UMEH) 193*32kB (UMEH) 72*64kB (UMEH) 34*128kB (UM) 17*256kB (UM) 7*512kB (UM) 4*1024kB (M) 0*2048kB 0*4096kB = 31796kB
[  475.604271][T15358] Node 1 DMA32: 1229*4kB (UM) 466*8kB (UME) 215*16kB (UME) 289*32kB (UE) 127*64kB (UME) 53*128kB (UE) 21*256kB (UME) 12*512kB (U) 2*1024kB (U) 3*2048kB (U) 0*4096kB = 55956kB
[  475.604415][T15358] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  475.604430][T15358] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  475.604445][T15358] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  475.604459][T15358] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  475.604473][T15358] 21551 total pagecache pages
[  475.604480][T15358] 577 pages in swap cache
[  475.604488][T15358] Free swap  = 97368kB
[  475.604494][T15358] Total swap = 124996kB
[  475.604501][T15358] 524155 pages RAM
[  475.604508][T15358] 0 pages HighMem/MovableOnly
[  475.604514][T15358] 217689 pages reserved
[  475.604521][T15358] 0 pages cma reserved
[  475.675147][   T43] audit: type=1800 audit(1794519215.371:86744): pid=15358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2767" name="file0" dev="9p" ino=79691843 res=0 errno=-2
[  476.096776][T15375] FAULT_INJECTION: forcing a failure.
[  476.096776][T15375] name failslab, interval 1, probability 0, space 0, times 0
[  476.096802][T15375] CPU: 0 UID: 0 PID: 15375 Comm: syz.4.2775 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  476.096817][T15375] Tainted: [L]=SOFTLOCKUP
[  476.096821][T15375] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  476.096827][T15375] Call Trace:
[  476.096832][T15375]  <TASK>
[  476.096836][T15375]  dump_stack_lvl+0x100/0x190
[  476.096858][T15375]  should_fail_ex.cold+0x5/0xa
[  476.096874][T15375]  should_failslab+0xc2/0x120
[  476.096889][T15375]  __kmalloc_noprof+0xfc/0x840
[  476.096899][T15375]  ? rcu_is_watching+0x13/0xc0
[  476.096915][T15375]  ? tomoyo_realpath_from_path+0xb6/0x690
[  476.096929][T15375]  tomoyo_realpath_from_path+0xb6/0x690
[  476.096944][T15375]  tomoyo_path_number_perm+0x23c/0x580
[  476.096958][T15375]  ? tomoyo_path_number_perm+0x22e/0x580
[  476.096974][T15375]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  476.096990][T15375]  ? get_pid_task+0x106/0x250
[  476.097008][T15375]  ? __lock_acquire+0x5c0/0x1f40
[  476.097027][T15375]  ? __fget_files+0x34/0x3d0
[  476.097040][T15375]  ? find_held_lock+0x2b/0x80
[  476.097054][T15375]  ? __fget_files+0x215/0x3d0
[  476.097066][T15375]  ? hook_file_ioctl_common+0x140/0x440
[  476.097081][T15375]  ? __fget_files+0x215/0x3d0
[  476.097096][T15375]  ? __fget_files+0x21f/0x3d0
[  476.097111][T15375]  security_file_ioctl_compat+0xd3/0x230
[  476.097128][T15375]  __ia32_compat_sys_ioctl+0xc2/0x360
[  476.097154][T15375]  __do_fast_syscall_32+0x14d/0x8e0
[  476.097171][T15375]  ? lockdep_hardirqs_on+0x7d/0x110
[  476.097186][T15375]  do_fast_syscall_32+0x32/0x70
[  476.097202][T15375]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  476.097216][T15375] RIP: 0023:0xf7fa4fbc
[  476.097226][T15375] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  476.097236][T15375] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  476.097247][T15375] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040086f52
[  476.097253][T15375] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000
[  476.097260][T15375] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  476.097266][T15375] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  476.097272][T15375] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  476.097286][T15375]  </TASK>
[  476.097312][T15375] ERROR: Out of memory at tomoyo_realpath_from_path.
[  476.097487][T15375] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  479.098182][T12999] net_ratelimit: 8 callbacks suppressed
[  479.098200][T12999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.260626][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.317416][ T1724] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[  479.417906][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.467426][ T1724] usb 9-1: Using ep0 maxpacket: 8
[  479.467906][ T1724] usb 9-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  479.468689][ T1724] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  479.468707][ T1724] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  479.468724][ T1724] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  479.468737][ T1724] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  479.468749][ T1724] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  479.468760][ T1724] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  479.468773][ T1724] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  479.468785][ T1724] usb 9-1: config 168 interface 0 has no altsetting 0
[  479.469772][ T1724] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  479.469789][ T1724] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  479.469805][ T1724] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  479.469818][ T1724] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  479.469829][ T1724] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  479.469841][ T1724] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  479.469853][ T1724] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  479.469865][ T1724] usb 9-1: config 168 interface 0 has no altsetting 0
[  479.470608][ T1724] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  479.470624][ T1724] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  479.470644][ T1724] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  479.470656][ T1724] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  479.470667][ T1724] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  479.470679][ T1724] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  479.470691][ T1724] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  479.470702][ T1724] usb 9-1: config 168 interface 0 has no altsetting 0
[  479.474352][ T1724] usb 9-1: string descriptor 0 read error: -22
[  479.474409][ T1724] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.487529][ T1724] adutux 9-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  479.687446][T15394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  479.687651][T15394] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  479.693469][ T1724] usb 9-1: USB disconnect, device number 24
[  480.137743][T12999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.148728][ T1724] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[  480.220028][T15402] fuse: Invalid rootmode
[  480.307643][ T1724] usb 9-1: Using ep0 maxpacket: 8
[  480.308366][ T1724] usb 9-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  480.310733][ T1724] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  480.310752][ T1724] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  480.310770][ T1724] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  480.310784][ T1724] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  480.310795][ T1724] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  480.310807][ T1724] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  480.310819][ T1724] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  480.310832][ T1724] usb 9-1: config 168 interface 0 has no altsetting 0
[  480.311594][ T1724] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  480.311609][ T1724] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  480.311626][ T1724] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  480.311638][ T1724] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  480.311649][ T1724] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  480.311661][ T1724] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  480.311675][ T1724] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  480.311691][ T1724] usb 9-1: config 168 interface 0 has no altsetting 0
[  480.313636][ T1724] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  480.313660][ T1724] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  480.313705][ T1724] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  480.313725][ T1724] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  480.313743][ T1724] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  480.313761][ T1724] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  480.313779][ T1724] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  480.313798][ T1724] usb 9-1: config 168 interface 0 has no altsetting 0
[  480.332057][ T1724] usb 9-1: string descriptor 0 read error: -22
[  480.332149][ T1724] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.348102][ T1724] adutux 9-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  480.457588][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.538432][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.737995][   T30] usb 9-1: USB disconnect, device number 25
[  481.118751][T15409] fuse: Invalid rootmode
[  481.177600][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  481.179407][ T1972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  481.497893][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  481.957421][T12999] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[  482.110102][T12999] usb 9-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40
[  482.110985][T12999] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  482.110999][T12999] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  482.111008][T12999] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  482.111027][T12999] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  482.112347][T12999] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  482.112361][T12999] usb 9-1: Product: syz
[  482.112368][T12999] usb 9-1: Manufacturer: syz
[  482.132034][T12999] cdc_wdm 9-1:1.0: skipping garbage
[  482.132046][T12999] cdc_wdm 9-1:1.0: skipping garbage
[  482.146741][T12999] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  482.146755][T12999] cdc_wdm 9-1:1.0: Unknown control protocol
[  482.217774][T12999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.354784][T12999] usb 9-1: USB disconnect, device number 26
[  482.797419][   T30] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[  482.949288][   T30] usb 9-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40
[  482.950614][   T30] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  482.950636][   T30] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  482.950652][   T30] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  482.950691][   T30] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  482.952341][   T30] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  482.952360][   T30] usb 9-1: Product: syz
[  482.952372][   T30] usb 9-1: Manufacturer: syz
[  482.991118][   T30] cdc_wdm 9-1:1.0: skipping garbage
[  482.991136][   T30] cdc_wdm 9-1:1.0: skipping garbage
[  482.993151][   T30] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  482.993167][   T30] cdc_wdm 9-1:1.0: Unknown control protocol
[  483.732443][    C1] cdc_wdm 9-1:1.0: unknown notification 136 received: index 4105 len 10284
[  483.733421][    C1] cdc_wdm 9-1:1.0: unknown notification 36 received: index 11205 len 28861
[  483.733624][    C1] cdc_wdm 9-1:1.0: unknown notification 41 received: index 127 len 256
[  483.968905][ T1724] usb 9-1: USB disconnect, device number 27
[  484.023758][T15431] dlm: no locking on control device
[  484.217764][ T1972] net_ratelimit: 23 callbacks suppressed
[  484.217781][ T1972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  484.297701][T12999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  484.323163][T15435] tipc: Started in network mode
[  484.323180][T15435] tipc: Node identity ce2e869969cb, cluster identity 4711
[  484.323353][T15435] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  484.324064][T15435] syzkaller0: entered promiscuous mode
[  484.324075][T15435] syzkaller0: entered allmulticast mode
[  484.350081][T15435] tipc: Resetting bearer <eth:syzkaller0>
[  484.378766][T15435] syzkaller1: entered promiscuous mode
[  484.378782][T15435] syzkaller1: entered allmulticast mode
[  484.559193][T15434] tipc: Resetting bearer <eth:syzkaller0>
[  484.577150][T15434] tipc: Disabling bearer <eth:syzkaller0>
[  484.607452][   T43] audit: type=1326 audit(1794519224.291:86745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15436 comm="syz.4.2789" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa4fbc code=0x0
[  484.617570][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  484.767292][T15441] dlm: no locking on control device
[  485.148700][T15446] qnx6: unable to read the first superblock
[  485.148915][T15446] qnx6: unable to read the first superblock
[  485.148926][T15446] qnx6: unable to read the first superblock
[  485.312072][T15449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2791'.
[  485.339006][T13670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.339076][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.658228][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  486.245274][T15466] syzkaller1: entered promiscuous mode
[  486.245289][T15466] syzkaller1: entered allmulticast mode
[  486.380242][T12999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  486.526725][   T43] audit: type=1326 audit(1794519226.201:86746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15471 comm="syz.4.2797" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa4fbc code=0x0
[  486.697571][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.261700][ T1972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.337475][ T5786] Bluetooth: hci0: command 0x0c1a tx timeout
[  487.337574][T14949] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  487.417708][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.426116][T15479] fuse: Invalid rootmode
[  489.029418][   T43] audit: type=1326 audit(1794519228.731:86747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15490 comm="syz.2.2801" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708efbc code=0x0
[  489.505681][T12999] net_ratelimit: 4 callbacks suppressed
[  489.505697][T12999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  489.817475][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  490.147658][  T857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  490.298765][ T1972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  490.537534][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  490.859982][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  490.922225][T15506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  490.976306][T15506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  491.071450][T15506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  491.075123][T15506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  491.096971][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  491.101047][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  491.105130][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  491.111450][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  491.111964][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  491.405218][   T43] audit: type=1326 audit(1794519231.101:86748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.2.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efbc code=0x7ffc0000
[  491.405249][   T43] audit: type=1326 audit(1794519231.101:86749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.2.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efbc code=0x7ffc0000
[  491.423656][   T43] audit: type=1326 audit(1794519231.121:86750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.2.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efbc code=0x7ffc0000
[  491.423686][   T43] audit: type=1326 audit(1794519231.121:86751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.2.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efbc code=0x7ffc0000
[  491.424108][   T43] audit: type=1326 audit(1794519231.121:86752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.2.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf708efbc code=0x7ffc0000
[  491.424131][   T43] audit: type=1326 audit(1794519231.121:86753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.2.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efbc code=0x7ffc0000
[  491.424150][   T43] audit: type=1326 audit(1794519231.121:86754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.2.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efbc code=0x7ffc0000
[  491.425476][   T43] audit: type=1326 audit(1794519231.121:86755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.2.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efbc code=0x7ffc0000
[  491.427559][   T43] audit: type=1326 audit(1794519231.131:86756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.2.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efbc code=0x7ffc0000
[  491.428135][   T43] audit: type=1326 audit(1794519231.131:86757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.2.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf708efbc code=0x7ffc0000
[  493.177490][T14949] Bluetooth: hci2: command tx timeout
[  493.214131][T15496] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  493.483622][ T5199] ------------[ cut here ]------------
[  493.483633][ T5199] current->flags & PF_MEMALLOC
[  493.483647][ T5199] WARNING: mm/page_alloc.c:4824 at __alloc_frozen_pages_noprof+0x1e0b/0x31e0, CPU#0: udevd/5199
[  493.491133][ T5199] Modules linked in:
[  493.492966][ T5199] CPU: 0 UID: 0 PID: 5199 Comm: udevd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  493.497265][ T5199] Tainted: [L]=SOFTLOCKUP
[  493.499133][ T5199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  493.503115][ T5199] RIP: 0010:__alloc_frozen_pages_noprof+0x1e0b/0x31e0
[  493.505892][ T5199] Code: 38 d0 7c 08 84 d2 0f 85 56 13 00 00 65 48 8b 05 c3 7c 41 13 c7 84 24 a0 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 0d e7 ff ff 90 <0f> 0b 90 e9 04 e7 ff ff 90 0f 0b 90 e9 63 f8 ff ff 8b 84 24 a0 00
[  493.512536][ T5199] RSP: 0000:ffffc90027b4e668 EFLAGS: 00010202
[  493.514462][ T5199] RAX: ffff8880243ea580 RBX: 0000000000000000 RCX: 1ffff1100fffad69
[  493.517312][ T5199] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff8880243ea5ac
[  493.520399][ T5199] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000002dd7
[  493.522894][ T5199] R10: ffff88807ffd7217 R11: 0000000000000001 R12: 0000000000000000
[  493.525390][ T5199] R13: 0000000000000000 R14: ffffffff9cca2064 R15: 0000000000048c40
[  493.528541][ T5199] FS:  00007f76c87ff880(0000) GS:ffff888095279000(0000) knlGS:0000000000000000
[  493.532065][ T5199] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  493.534376][ T5199] CR2: 00007f6c775d353c CR3: 000000004e6eb000 CR4: 0000000000352ef0
[  493.536786][ T5199] Call Trace:
[  493.537940][ T5199]  <TASK>
[  493.538971][ T5199]  ? lock_acquire+0x1d1/0x380
[  493.540474][ T5199]  ? mtree_range_walk+0x72b/0xb70
[  493.542437][ T5199]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  493.544555][ T5199]  ? mas_next_slot+0xc05/0x13a0
[  493.546154][ T5199]  ? mas_find+0x2cb/0x790
[  493.548029][ T5199]  ? __lock_acquire+0x5c0/0x1f40
[  493.550168][ T5199]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  493.552902][ T5199]  ? policy_nodemask+0xed/0x5e0
[  493.555174][ T5199]  alloc_pages_mpol+0x201/0x560
[  493.557233][ T5199]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  493.559623][ T5199]  ? filemap_get_entry+0x22d/0x450
[  493.561764][ T5199]  ? filemap_get_entry+0x22d/0x450
[  493.564080][ T5199]  folio_alloc_noprof+0x22/0x250
[  493.566339][ T5199]  filemap_alloc_folio_noprof.part.0+0x3db/0x440
[  493.569057][ T5199]  ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10
[  493.571959][ T5199]  ? lock_acquire+0x1d1/0x380
[  493.574416][ T5199]  ? ext4_get_group_info+0x177/0x4b0
[  493.576893][ T5199]  ? find_held_lock+0x2b/0x80
[  493.579448][ T5199]  __filemap_get_folio_mpol+0x64e/0x11d0
[  493.581914][ T5199]  ext4_mb_load_buddy_gfp+0x708/0x1b20
[  493.584242][ T5199]  ext4_discard_preallocations+0x584/0x10c0
[  493.586530][ T5199]  ? __pfx_ext4_discard_preallocations+0x10/0x10
[  493.588642][ T5199]  ? __pfx_xa_destroy+0x10/0x10
[  493.590359][ T5199]  ? inode_wait_for_writeback+0x171/0x390
[  493.592262][ T5199]  ? inode_lru_isolate+0x30/0x11c0
[  493.594551][ T5199]  ext4_clear_inode+0x6e/0x280
[  493.596551][ T5199]  ext4_evict_inode+0x1de/0x1840
[  493.598663][ T5199]  ? evict+0x37e/0xb90
[  493.600352][ T5199]  ? __pfx_ext4_evict_inode+0x10/0x10
[  493.602097][ T5199]  evict+0x403/0xb90
[  493.603398][ T5199]  ? _raw_spin_unlock+0x28/0x50
[  493.604998][ T5199]  ? __list_lru_walk_one+0x26d/0x550
[  493.606996][ T5199]  ? __pfx_evict+0x10/0x10
[  493.608969][ T5199]  ? xa_load+0x149/0x2c0
[  493.610763][ T5199]  ? xa_load+0x149/0x2c0
[  493.612410][ T5199]  dispose_list+0x117/0x1e0
[  493.613820][ T5199]  prune_icache_sb+0xea/0x150
[  493.615296][ T5199]  ? list_lru_count_one+0x147/0x320
[  493.617273][ T5199]  ? __pfx_prune_icache_sb+0x10/0x10
[  493.619224][ T5199]  super_cache_scan+0x37c/0x560
[  493.621108][ T5199]  do_shrink_slab+0x411/0x1200
[  493.622716][ T5199]  shrink_slab+0xa78/0x12d0
[  493.624155][ T5199]  ? shrink_slab+0x68b/0x12d0
[  493.625686][ T5199]  ? __pfx_shrink_slab+0x10/0x10
[  493.627260][ T5199]  ? page_counter_calculate_protection+0x348/0x730
[  493.629358][ T5199]  ? rcu_read_unlock+0x17/0x60
[  493.630868][ T5199]  ? rcu_read_unlock+0x17/0x60
[  493.632899][ T5199]  shrink_one+0x3d3/0x870
[  493.634217][ T5199]  ? shrink_node+0x2a41/0x4410
[  493.635773][ T5199]  shrink_node+0x2a61/0x4410
[  493.637262][ T5199]  ? shrink_node+0x276d/0x4410
[  493.638923][ T5199]  ? __pfx_shrink_node+0x10/0x10
[  493.640456][ T5199]  ? queue_work_on+0x141/0x1e0
[  493.641974][ T5199]  ? do_try_to_free_pages+0x2da/0x1500
[  493.643711][ T5199]  do_try_to_free_pages+0x2da/0x1500
[  493.645371][ T5199]  try_to_free_pages+0x2a0/0x740
[  493.646964][ T5199]  ? __pfx_try_to_free_pages+0x10/0x10
[  493.648936][ T5199]  ? find_held_lock+0x2b/0x80
[  493.650444][ T5199]  ? fs_reclaim_acquire+0x70/0x100
[  493.652089][ T5199]  ? fs_reclaim_acquire+0x70/0x100
[  493.653760][ T5199]  __alloc_frozen_pages_noprof+0x1057/0x31e0
[  493.655690][ T5199]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  493.657787][ T5199]  ? __blk_flush_plug+0x2f3/0x4b0
[  493.659328][ T5199]  ? __pfx_ext4_mpage_readpages.isra.0+0x10/0x10
[  493.661296][ T5199]  ? __pfx___blk_flush_plug+0x10/0x10
[  493.662987][ T5199]  ? lock_acquire+0x1d1/0x380
[  493.664501][ T5199]  ? __lock_acquire+0x5c0/0x1f40
[  493.666060][ T5199]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  493.667956][ T5199]  ? policy_nodemask+0xed/0x5e0
[  493.669496][ T5199]  alloc_pages_mpol+0x201/0x560
[  493.670988][ T5199]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  493.672659][ T5199]  ? filemap_get_entry+0x22d/0x450
[  493.674321][ T5199]  ? filemap_get_entry+0x22d/0x450
[  493.676051][ T5199]  folio_alloc_noprof+0x22/0x250
[  493.677727][ T5199]  filemap_alloc_folio_noprof.part.0+0x3db/0x440
[  493.679740][ T5199]  ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10
[  493.682486][ T5199]  __filemap_get_folio_mpol+0x64e/0x11d0
[  493.684550][ T5199]  filemap_fault+0x6cf/0x3150
[  493.685993][ T5199]  ? __pfx_filemap_fault+0x10/0x10
[  493.687626][ T5199]  ? __pte_offset_map+0x9a/0x470
[  493.689130][ T5199]  ? find_held_lock+0x2b/0x80
[  493.690576][ T5199]  ? __pfx_filemap_map_pages+0x10/0x10
[  493.692286][ T5199]  __do_fault+0x10b/0x440
[  493.693588][ T5199]  do_fault+0xb3f/0x1890
[  493.694888][ T5199]  ? __pfx_do_fault+0x10/0x10
[  493.696375][ T5199]  ? rcu_read_unlock+0x2d/0xb0
[  493.698058][ T5199]  ? rcu_read_unlock+0x2d/0xb0
[  493.699522][ T5199]  __handle_mm_fault+0x1858/0x2f40
[  493.701091][ T5199]  ? lock_vma_under_rcu+0x11d/0x590
[  493.702849][ T5199]  ? __pfx___handle_mm_fault+0x10/0x10
[  493.704548][ T5199]  ? lock_vma_under_rcu+0x17c/0x590
[  493.706151][ T5199]  handle_mm_fault+0x363/0xa30
[  493.707662][ T5199]  do_user_addr_fault+0x59c/0x12f0
[  493.709374][ T5199]  exc_page_fault+0x6f/0xd0
[  493.710801][ T5199]  asm_exc_page_fault+0x26/0x30
[  493.712319][ T5199] RIP: 0033:0x557b3922305c
[  493.713705][ T5199] Code: Unable to access opcode bytes at 0x557b39223032.
[  493.715866][ T5199] RSP: 002b:00007ffdd68395b0 EFLAGS: 00010206
[  493.717832][ T5199] RAX: 000000001d67a7be RBX: 0000000000000000 RCX: 000000000005127e
[  493.720283][ T5199] RDX: 0000000000000000 RSI: 000000001d629540 RDI: 00007ffdd6839580
[  493.722770][ T5199] RBP: 0000000000000001 R08: 000000001d67a7be R09: 0000000000000001
[  493.725153][ T5199] R10: 0000000000017dca R11: 0000000000000004 R12: 0000000000000000
[  493.727568][ T5199] R13: 0000557b39269100 R14: 0000000000000001 R15: 0000000000000000
[  493.729783][ T5199]  </TASK>
[  493.730667][ T5199] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  493.732717][ T5199] CPU: 0 UID: 0 PID: 5199 Comm: udevd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  493.735743][ T5199] Tainted: [L]=SOFTLOCKUP
[  493.737039][ T5199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  493.740231][ T5199] Call Trace:
[  493.741279][ T5199]  <TASK>
[  493.742222][ T5199]  dump_stack_lvl+0x100/0x190
[  493.743697][ T5199]  vpanic+0x2dc/0x6f8
[  493.744972][ T5199]  panic+0xd1/0xe0
[  493.746152][ T5199]  ? __pfx_panic+0x10/0x10
[  493.747556][ T5199]  check_panic_on_warn.cold+0x19/0x34
[  493.749224][ T5199]  ? __alloc_frozen_pages_noprof+0x1e0b/0x31e0
[  493.751111][ T5199]  __warn.cold+0x191/0x321
[  493.752513][ T5199]  __report_bug+0x30f/0x440
[  493.753911][ T5199]  ? __alloc_frozen_pages_noprof+0x1e0b/0x31e0
[  493.755765][ T5199]  ? __pfx___report_bug+0x10/0x10
[  493.757328][ T5199]  ? __zone_watermark_ok+0x281/0x500
[  493.758972][ T5199]  ? get_page_from_freelist+0x511/0x2c80
[  493.760663][ T5199]  ? __alloc_frozen_pages_noprof+0x1e0b/0x31e0
[  493.762620][ T5199]  report_bug+0xb3/0x220
[  493.763931][ T5199]  ? __alloc_frozen_pages_noprof+0x1e0b/0x31e0
[  493.765766][ T5199]  handle_bug+0x16a/0x2a0
[  493.767110][ T5199]  exc_invalid_op+0x17/0x50
[  493.768485][ T5199]  asm_exc_invalid_op+0x1a/0x20
[  493.769971][ T5199] RIP: 0010:__alloc_frozen_pages_noprof+0x1e0b/0x31e0
[  493.772044][ T5199] Code: 38 d0 7c 08 84 d2 0f 85 56 13 00 00 65 48 8b 05 c3 7c 41 13 c7 84 24 a0 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 0d e7 ff ff 90 <0f> 0b 90 e9 04 e7 ff ff 90 0f 0b 90 e9 63 f8 ff ff 8b 84 24 a0 00
[  493.778003][ T5199] RSP: 0000:ffffc90027b4e668 EFLAGS: 00010202
[  493.780174][ T5199] RAX: ffff8880243ea580 RBX: 0000000000000000 RCX: 1ffff1100fffad69
[  493.782535][ T5199] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff8880243ea5ac
[  493.785031][ T5199] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000002dd7
[  493.787413][ T5199] R10: ffff88807ffd7217 R11: 0000000000000001 R12: 0000000000000000
[  493.789742][ T5199] R13: 0000000000000000 R14: ffffffff9cca2064 R15: 0000000000048c40
[  493.792138][ T5199]  ? __alloc_frozen_pages_noprof+0x2ad/0x31e0
[  493.793984][ T5199]  ? lock_acquire+0x1d1/0x380
[  493.795418][ T5199]  ? mtree_range_walk+0x72b/0xb70
[  493.796965][ T5199]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  493.798892][ T5199]  ? mas_next_slot+0xc05/0x13a0
[  493.800778][ T5199]  ? mas_find+0x2cb/0x790
[  493.802117][ T5199]  ? __lock_acquire+0x5c0/0x1f40
[  493.803610][ T5199]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  493.805422][ T5199]  ? policy_nodemask+0xed/0x5e0
[  493.806929][ T5199]  alloc_pages_mpol+0x201/0x560
[  493.808413][ T5199]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  493.810225][ T5199]  ? filemap_get_entry+0x22d/0x450
[  493.811797][ T5199]  ? filemap_get_entry+0x22d/0x450
[  493.813439][ T5199]  folio_alloc_noprof+0x22/0x250
[  493.814948][ T5199]  filemap_alloc_folio_noprof.part.0+0x3db/0x440
[  493.816848][ T5199]  ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10
[  493.818877][ T5199]  ? lock_acquire+0x1d1/0x380
[  493.820252][ T5199]  ? ext4_get_group_info+0x177/0x4b0
[  493.821808][ T5199]  ? find_held_lock+0x2b/0x80
[  493.823204][ T5199]  __filemap_get_folio_mpol+0x64e/0x11d0
[  493.824842][ T5199]  ext4_mb_load_buddy_gfp+0x708/0x1b20
[  493.826459][ T5199]  ext4_discard_preallocations+0x584/0x10c0
[  493.828223][ T5199]  ? __pfx_ext4_discard_preallocations+0x10/0x10
[  493.830102][ T5199]  ? __pfx_xa_destroy+0x10/0x10
[  493.831563][ T5199]  ? inode_wait_for_writeback+0x171/0x390
[  493.833245][ T5199]  ? inode_lru_isolate+0x30/0x11c0
[  493.834788][ T5199]  ext4_clear_inode+0x6e/0x280
[  493.836216][ T5199]  ext4_evict_inode+0x1de/0x1840
[  493.837717][ T5199]  ? evict+0x37e/0xb90
[  493.838957][ T5199]  ? __pfx_ext4_evict_inode+0x10/0x10
[  493.840584][ T5199]  evict+0x403/0xb90
[  493.841766][ T5199]  ? _raw_spin_unlock+0x28/0x50
[  493.843325][ T5199]  ? __list_lru_walk_one+0x26d/0x550
[  493.844899][ T5199]  ? __pfx_evict+0x10/0x10
[  493.846277][ T5199]  ? xa_load+0x149/0x2c0
[  493.847555][ T5199]  ? xa_load+0x149/0x2c0
[  493.848812][ T5199]  dispose_list+0x117/0x1e0
[  493.850198][ T5199]  prune_icache_sb+0xea/0x150
[  493.851597][ T5199]  ? list_lru_count_one+0x147/0x320
[  493.853176][ T5199]  ? __pfx_prune_icache_sb+0x10/0x10
[  493.854806][ T5199]  super_cache_scan+0x37c/0x560
[  493.856287][ T5199]  do_shrink_slab+0x411/0x1200
[  493.857813][ T5199]  shrink_slab+0xa78/0x12d0
[  493.859230][ T5199]  ? shrink_slab+0x68b/0x12d0
[  493.860645][ T5199]  ? __pfx_shrink_slab+0x10/0x10
[  493.862190][ T5199]  ? page_counter_calculate_protection+0x348/0x730
[  493.864127][ T5199]  ? rcu_read_unlock+0x17/0x60
[  493.865653][ T5199]  ? rcu_read_unlock+0x17/0x60
[  493.867196][ T5199]  shrink_one+0x3d3/0x870
[  493.868526][ T5199]  ? shrink_node+0x2a41/0x4410
[  493.870029][ T5199]  shrink_node+0x2a61/0x4410
[  493.871458][ T5199]  ? shrink_node+0x276d/0x4410
[  493.872936][ T5199]  ? __pfx_shrink_node+0x10/0x10
[  493.874557][ T5199]  ? queue_work_on+0x141/0x1e0
[  493.876131][ T5199]  ? do_try_to_free_pages+0x2da/0x1500
[  493.877830][ T5199]  do_try_to_free_pages+0x2da/0x1500
[  493.879431][ T5199]  try_to_free_pages+0x2a0/0x740
[  493.880935][ T5199]  ? __pfx_try_to_free_pages+0x10/0x10
[  493.882630][ T5199]  ? find_held_lock+0x2b/0x80
[  493.884060][ T5199]  ? fs_reclaim_acquire+0x70/0x100
[  493.885590][ T5199]  ? fs_reclaim_acquire+0x70/0x100
[  493.887173][ T5199]  __alloc_frozen_pages_noprof+0x1057/0x31e0
[  493.888988][ T5199]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  493.890890][ T5199]  ? __blk_flush_plug+0x2f3/0x4b0
[  493.892401][ T5199]  ? __pfx_ext4_mpage_readpages.isra.0+0x10/0x10
[  493.894255][ T5199]  ? __pfx___blk_flush_plug+0x10/0x10
[  493.895857][ T5199]  ? lock_acquire+0x1d1/0x380
[  493.897295][ T5199]  ? __lock_acquire+0x5c0/0x1f40
[  493.898838][ T5199]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  493.900598][ T5199]  ? policy_nodemask+0xed/0x5e0
[  493.902047][ T5199]  alloc_pages_mpol+0x201/0x560
[  493.903506][ T5199]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  493.905120][ T5199]  ? filemap_get_entry+0x22d/0x450
[  493.906676][ T5199]  ? filemap_get_entry+0x22d/0x450
[  493.908211][ T5199]  folio_alloc_noprof+0x22/0x250
[  493.909688][ T5199]  filemap_alloc_folio_noprof.part.0+0x3db/0x440
[  493.911553][ T5199]  ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10
[  493.913604][ T5199]  __filemap_get_folio_mpol+0x64e/0x11d0
[  493.915322][ T5199]  filemap_fault+0x6cf/0x3150
[  493.916815][ T5199]  ? __pfx_filemap_fault+0x10/0x10
[  493.918354][ T5199]  ? __pte_offset_map+0x9a/0x470
[  493.919853][ T5199]  ? find_held_lock+0x2b/0x80
[  493.921281][ T5199]  ? __pfx_filemap_map_pages+0x10/0x10
[  493.922945][ T5199]  __do_fault+0x10b/0x440
[  493.924277][ T5199]  do_fault+0xb3f/0x1890
[  493.925570][ T5199]  ? __pfx_do_fault+0x10/0x10
[  493.927040][ T5199]  ? rcu_read_unlock+0x2d/0xb0
[  493.928476][ T5199]  ? rcu_read_unlock+0x2d/0xb0
[  493.929963][ T5199]  __handle_mm_fault+0x1858/0x2f40
[  493.931536][ T5199]  ? lock_vma_under_rcu+0x11d/0x590
[  493.933082][ T5199]  ? __pfx___handle_mm_fault+0x10/0x10
[  493.934714][ T5199]  ? lock_vma_under_rcu+0x17c/0x590
[  493.936332][ T5199]  handle_mm_fault+0x363/0xa30
[  493.937764][ T5199]  do_user_addr_fault+0x59c/0x12f0
[  493.939250][ T5199]  exc_page_fault+0x6f/0xd0
[  493.940606][ T5199]  asm_exc_page_fault+0x26/0x30
[  493.942103][ T5199] RIP: 0033:0x557b3922305c
[  493.943417][ T5199] Code: Unable to access opcode bytes at 0x557b39223032.
[  493.945441][ T5199] RSP: 002b:00007ffdd68395b0 EFLAGS: 00010206
[  493.947271][ T5199] RAX: 000000001d67a7be RBX: 0000000000000000 RCX: 000000000005127e
[  493.949562][ T5199] RDX: 0000000000000000 RSI: 000000001d629540 RDI: 00007ffdd6839580
[  493.951848][ T5199] RBP: 0000000000000001 R08: 000000001d67a7be R09: 0000000000000001
[  493.954144][ T5199] R10: 0000000000017dca R11: 0000000000000004 R12: 0000000000000000
[  493.956425][ T5199] R13: 0000557b39269100 R14: 0000000000000001 R15: 0000000000000000
[  493.958824][ T5199]  </TASK>
[  493.960485][ T5199] Kernel Offset: disabled
[  493.961809][ T5199] Rebooting in 86400 seconds..