last executing test programs:

9m11.474556573s ago: executing program 0 (id=259):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0)
close(r1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2)
sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000840)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0x0, 0xb}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x54815}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000000a80)={'syzkaller0\x00', @random="2b0100004ec6"})

9m11.35449739s ago: executing program 0 (id=261):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0)

9m11.34243256s ago: executing program 0 (id=262):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x40)
write(r0, &(0x7f0000000180)='27', 0x2)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000200)='fd', 0x0, 0xffffffffffffffff)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x43, 0x0, 0x3, 0x3}, 0x10)

9m11.238046086s ago: executing program 0 (id=264):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-arm64-neon\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x9c}}, 0x8800)
r2 = accept4(r0, 0x0, 0x0, 0x800)
recvmmsg$unix(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0)
getpid()
connect$unix(0xffffffffffffffff, 0x0, 0x0)
openat$ext4_mnt(0xffffffffffffffff, &(0x7f0000000000), 0x800, 0x0)
r3 = openat$binderfs_proc_dir(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
mkdirat(r3, &(0x7f0000000040)='./my_debugfs\x00', 0xfe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe0000000001, 0xfa11, 0x40}, 0x0)
r4 = fsopen(&(0x7f0000000300)='jfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000340)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
syz_clone(0x20000, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'syzkaller0\x00'})
socket(0x10, 0x3, 0x0)
close(0x3)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)
syz_open_dev$vcsa(&(0x7f0000000540), 0x1, 0x102)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r8)

9m10.935501305s ago: executing program 0 (id=270):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0xfffffffc, @mcast2, 0x5}}, 0x1114fe37, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/hid_steam/parameters/lizard_mode\x00', 0x2, 0x0)
write(r2, &(0x7f0000000100)='0', 0x1)
mremap(&(0x7f00001c7000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil)
syz_clone3(&(0x7f0000000400)={0x42200280, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x90)

9m10.423393022s ago: executing program 0 (id=274):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x2000007, 0x30, 0xffffffffffffffff, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0)

8m55.422472798s ago: executing program 32 (id=274):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x2000007, 0x30, 0xffffffffffffffff, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0)

4m33.895998644s ago: executing program 1 (id=2290):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0)

4m33.792219458s ago: executing program 1 (id=2293):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, <r3=>r1})
ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

4m33.745920761s ago: executing program 1 (id=2287):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x6}, 0x4)
syz_emit_ethernet(0x1e, &(0x7f0000000280)={@multicast, @remote, @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x5, 0x1, 0x1}}, {@mpls_uc={0x8847, {[], @llc={@snap={0x155, 0xaa, '\x00', "705104", 0xc}}}}}}, 0x0)

4m32.803518744s ago: executing program 1 (id=2292):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff})
sendmmsg$inet(r0, &(0x7f0000000340)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
connect$tipc(r0, &(0x7f0000000400)=@id={0x1e, 0x3, 0x3, {0x4e22}}, 0x10)

4m32.724763451s ago: executing program 1 (id=2294):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = syz_io_uring_complete(0x0, r1)
ioprio_set$uid(0x3, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range(r2, r2, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2e, 0x0, 0x0, <r3=>0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000001c0)=<r4=>0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc_dir\x00', 0x0)
mount(0x0, &(0x7f0000000680)='./proc_dir\x00', &(0x7f00000006c0)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc_dir/acpi/wakeup\x00', 0x2, 0x103)
write$binfmt_script(r5, &(0x7f0000000740)={'#! ', './proc_dir/acpi/wakeup'}, 0x1a)
inotify_init()
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
r8 = syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
ptrace$cont(0x19, r8, 0x8d, 0x40000000000000)
syz_ublk_setup_queues(r7, r4, 0x0, &(0x7f0000000200)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x800, 0x1000000, 0x33d, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdfffffff, 0x20, 0x0, 0x9a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2075, 0x1000, 0x0, 0xfffffffd, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x8000, 0xfffffffe, 0x115, 0x0, r3}}], 0x1, 0x0, 0x0)

4m32.529741872s ago: executing program 1 (id=2298):
pipe(&(0x7f00000001c0))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000240)=r1)
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0)
write(r0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x90600, 0xa2)
r5 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb5c", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11, 0x0, 0x7}}], 0x38}, 0x24040000)
write(r4, &(0x7f0000000300)='1', 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)

4m29.703983044s ago: executing program 2 (id=2291):
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x400000000005)
r1 = fanotify_init(0x1a, 0x800)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0xa8)
fanotify_mark(r1, 0x1, 0x48000038, r2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r5, &(0x7f0000000280)=""/102400, 0x19000)
syz_open_dev$sg(0x0, 0x0, 0x8002)
creat(&(0x7f00000192c0)='./file0\x00', 0xecf86c37d53049cc)

4m28.204396939s ago: executing program 2 (id=2313):
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000080), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20000000)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, 0x0)

4m27.344613518s ago: executing program 2 (id=2315):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
epoll_create1(0x80000)

4m26.834329528s ago: executing program 2 (id=2316):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
chdir(0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount(&(0x7f0000000180)=@filename='mtd0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='jffs2\x00', 0x800000, 0x0)
chdir(&(0x7f00000002c0)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x101c42, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80400)
write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xfffffee2)
ioctl$TCSBRK(r0, 0x5409, 0x5)
ftruncate(r0, 0xb)
symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

4m26.206351939s ago: executing program 2 (id=2317):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = syz_io_uring_complete(0x0, r1)
ioprio_set$uid(0x3, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range(r2, r2, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2e, 0x0, 0x0, <r3=>0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000001c0)=<r4=>0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc_dir\x00', 0x0)
mount(0x0, &(0x7f0000000680)='./proc_dir\x00', &(0x7f00000006c0)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc_dir/acpi/wakeup\x00', 0x2, 0x103)
write$binfmt_script(r5, &(0x7f0000000740)={'#! ', './proc_dir/acpi/wakeup'}, 0x1a)
inotify_init()
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
r8 = syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
ptrace$cont(0x19, r8, 0x8d, 0x40000000000000)
syz_ublk_setup_queues(r7, r4, 0x0, &(0x7f0000000200)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x800, 0x1000000, 0x33d, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdfffffff, 0x20, 0x0, 0x9a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2075, 0x1000, 0x0, 0xfffffffd, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x8000, 0xfffffffe, 0x115, 0x0, r3}}], 0x1, 0x0, 0x0)

4m26.029394845s ago: executing program 2 (id=2318):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x15d)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x407f, 0xffffffffffffffff, 0x4}, 0x38)
chdir(0x0)
quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0)
write(r0, &(0x7f0000000960)='1', 0x1)

4m16.724342303s ago: executing program 33 (id=2298):
pipe(&(0x7f00000001c0))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000240)=r1)
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0)
write(r0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x90600, 0xa2)
r5 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb5c", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11, 0x0, 0x7}}], 0x38}, 0x24040000)
write(r4, &(0x7f0000000300)='1', 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)

4m11.002595243s ago: executing program 34 (id=2318):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x15d)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x407f, 0xffffffffffffffff, 0x4}, 0x38)
chdir(0x0)
quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0)
write(r0, &(0x7f0000000960)='1', 0x1)

5.786416941s ago: executing program 4 (id=3764):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000480)={0x10, 0xffffffffffffffda}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x740, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
setxattr$system_posix_acl(&(0x7f00000001c0)='./file0/file1\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x2}, {0x20, 0x4}}, 0x24, 0x1)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c)
listen(r1, 0x4)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x7}, 0x8)
r2 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xaf1}, 0x8)
sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f00000003c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000440)="89", 0x1}], 0x1}}], 0x1, 0x20000000)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000480)=ANY=[], 0x8397de475a1b5b02)

5.310236074s ago: executing program 4 (id=3767):
kexec_load(0x7, 0x7, &(0x7f0000000740)=[{&(0x7f0000000180)="591344bc52fecf32df622a5a1a44fb96a2c7c7cb0bf8b5c0f48502d506aa37fdbff71e3b53e4eb8d86ce3342354bdc31068421ca95004274e130f70676d01150d5c1dbbdf64185836cf11aecc29c2bd2a320158d30126c1aa0bc415be4c62b3810763ea3be54721a8fda9d528bb97947322c83fc914327a072db64f1252c4485b80dc57f0fb273346a2902899b3e6e0498d828438ffcc4546dccf5b35405bed00241893b4100fa6530ba46846ee8f3ee5f8b273f113b2f5f5bd93360e21f629331937a174693a7d965531f91cb22066984419087a034096d7f498e5b1872132e0c87dfeeb496e1e02080b4ba33769df5dd633b12ce74c73476b578", 0xfb, 0x6, 0x4}, {&(0x7f0000000280)="e5db73dc032db6e502ce0c438e9ec3e0f5e8d52c737d2b4ab61c0d7403d7e47c76d071a514d78e76a1df", 0x2a, 0x2, 0x9}, {&(0x7f0000000400)="eb769e27745e389bb79495edaaed2f9553a28c8c8860aceed218362c2ecee25b2bad17c04dc4b66ecaa7f75e75111be9bb6efeaa4317de4111b792ad791f32f775f938a02887c9b708eb138ae31443e45b02a6600710aca1fd0f0a949cba11570525879a9e32b298e8ffaed89bb7f7cea61893dc9a3b0340b97ec18483494a98f44399048bfe5b76ae7ab48450da7f03ab878dcec249bb8fe6042a762f6f59e93977ef9547", 0xa5, 0x1, 0x35f2}, {&(0x7f0000000500)="2183949bfb87e0d8efaae8d09e3e62d2d2e7959b7008ef20b021a979643578ae743294d94473706b8d155f4458c65c40c0dbdd0c0c16a9b8ee713a11ffdd7f5883cb6a42f83d7f818e2461add7466cc1fb568fabe07985c5c1c9fc00b33e70d9170a7c49c80ac94f54bea14d934ffc9fd044b3abbd04f7985688e82757c14fde8718cfae248a9c7d", 0x88, 0x4, 0x4}, {&(0x7f00000005c0)="c22c9f3e60e1bb557dd4a600bcc1f31ccafa7ccd4382ea8a14f6abd8673bc507ed27807bfbae887dad83d7c9a8b02b63c404039f6a1af79bbefade290a1b3ef957b2d30d9b22d6d403113c76c587888f9f9e4eec90e84200ac4831409b9442596d021a6e5478b90b9857", 0x6a, 0x9, 0x4}, {&(0x7f0000000640)="c2b6800c5b509c76125cc4949560b89a1f7319d1c38d9deef911f9d0cad063c8531003c9dcf7670c298c7927811dd8c48a1fe1824bc24a9dd0477b11157a96f246498aad252de90738727f0024d85e00354958d74acd24d0fd0d25047215f03b3e8a44c8ea80c9", 0x67, 0x9, 0xfffffffa}, {&(0x7f00000006c0)="82fc6652a2776cecfc1ca693a0016cee065fef54975a0d970f4b9214937facb9816141f373cd751bfa8fd45e906a7831b180ddb6833761c7e8b3d9055daca9c991e4a85b9a98166c669a2d6bfc61147c35e0572df9896c22f97f0b0f458186bb54ce4afd4adc9e4d513f988bb1d8", 0x6e, 0x4, 0x100}], 0x150000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
preadv(0xffffffffffffffff, 0x0, 0xffffffffffffff8a, 0x100001a, 0xfffffffe)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
pipe2(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
tee(r2, r4, 0xffff1812, 0x0)
write$binfmt_script(r3, &(0x7f0000000c00)={'#! ', './file0', [], 0xa, "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"}, 0x13d)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
ftruncate(r1, 0x8c) (fail_nth: 1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x44080)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x114f0c3a338dd13, 0x6, 0x33f6, @vifc_lcl_addr=@multicast1, @multicast2}, 0x10)
openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x100008b}, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000880), 0x2, 0x141102)
syz_ublk_setup_io_uring(0x41d, &(0x7f0000000940)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000300), 0x0, &(0x7f0000000a40))

5.083173928s ago: executing program 4 (id=3771):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_emit_ethernet(0x36, &(0x7f0000000280)={@broadcast, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x28, 0x68, 0x0, 0xff, 0x6, 0x0, @multicast1, @empty}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xa, 0x8, 0x0, 0x80}}}}}}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmmsg$sock(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@timestamping={{0x10, 0x1, 0x4f, 0x3ff}}], 0x10}}], 0x1, 0x40440d1)
sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000400), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000440)=0x2)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c80)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x20008001}, 0x0)
recvmmsg(r2, &(0x7f0000000480), 0x10106, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc01cf509, &(0x7f0000000500)={<r5=>r3, 0x6, 0xb4e8, 0x7})
write$P9_RLERROR(r5, &(0x7f0000000540)={0xa, 0x7, 0x2, {0x1, '%'}}, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
r6 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
r7 = syz_ublk_setup_io_uring(0x20, &(0x7f00000005c0)={0x0, 0x0, 0x100}, &(0x7f0000000640)=<r8=>0x0, &(0x7f0000000680)=<r9=>0x0, &(0x7f00000006c0)=<r10=>0x0)
r11 = syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000700)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, <r12=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000780)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000007c0)=<r13=>0x0)
r14 = syz_open_dev$ublk_chdev(&(0x7f0000000800), r11, 0x2)
ioctl$TIOCL_SELLOADLUT(r5, 0x541c, &(0x7f00000000c0)={0x5, 0x7, 0xed4, 0xffffffffffffffff, 0xd52})
syz_ublk_setup_queues(r14, r13, &(0x7f0000000840)={0x0, 0x3e0e, 0x0, 0x3, 0x28e, 0x0, r7}, &(0x7f00000008c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x1af, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766f, 0x20000, 0x1, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x80, 0x400, 0x1fe}}], 0x4, &(0x7f0000000b40)={0x2e, 0x0, 0x0, r14, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r12, '\x00', {0x3, 0xb45, 0x100104, 0x0}}, &(0x7f0000000bc0))
r15 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r15, &(0x7f000001a980)={0x0, 0x0, &(0x7f000001a9c0)={&(0x7f000001aa00)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)

4.196259574s ago: executing program 4 (id=3780):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=<r1=>0x0, @ANYBLOB='\a\x00'/18, @ANYRES32=0x0, @ANYRES64], 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x9, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00')
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000380)={0x0, 0xc1, 0x81, 0x20203843, 0x3, [0x2], [0x800, 0x9], [0x0, 0x0, 0x4]})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[], [], 0x2f})
ioprio_get$pid(0x3, 0x0)
r7 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d00)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065eeed8928d7be862bf0066beb0833bb727370616e000018000280060005001700"/63], 0x48}}, 0x0)
ioctl$DM_DEV_CREATE(r7, 0xc138fd03, &(0x7f0000000a00)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x21000, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}})
open_tree(0xffffffffffffffff, &(0x7f0000000cc0)='./file0\x00', 0x81100)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r4, r2, &(0x7f00000002c0)=0x4015, 0x0)
sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r9, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000600)=""/145, 0x91}, {&(0x7f00000006c0)=""/236, 0xec}, {&(0x7f0000000900)=""/64, 0x40}, {&(0x7f0000001840)=""/4098, 0x1002}], 0x4}, 0x8}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000004040)=""/4090, 0xffa}, {&(0x7f0000006240)=""/4099, 0x1003}, {&(0x7f0000006040)=""/101, 0x65}, {&(0x7f00000060c0)=""/195, 0xc3}, {0x0}], 0x5}, 0x900000}], 0x7, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000400000000000085a5b5471eaaee", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000014000000b7030000000000002b46b6012ddb89edbf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090800000000007baaf0ff00000000bd8900000000000007080000f8ffffffbf9400000000000007040000f0ffffffb70200000800000018270000", @ANYRES32=r0, @ANYRESOCT=r6], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.358099762s ago: executing program 3 (id=3785):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=<r1=>0x0, @ANYBLOB='\a\x00'/18, @ANYRES32=0x0, @ANYRES64], 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x9, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00')
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000380)={0x0, 0xc1, 0x81, 0x20203843, 0x3, [0x2], [0x800, 0x9], [0x0, 0x0, 0x4]})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[], [], 0x2f})
ioprio_get$pid(0x3, 0x0)
r7 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d00)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065eeed8928d7be862bf0066beb0833bb727370616e000018000280060005001700"/63], 0x48}}, 0x0)
ioctl$DM_DEV_CREATE(r7, 0xc138fd03, &(0x7f0000000a00)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x21000, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}})
open_tree(0xffffffffffffffff, &(0x7f0000000cc0)='./file0\x00', 0x81100)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r4, r2, &(0x7f00000002c0)=0x4015, 0x0)
sendmsg$nl_generic(r9, 0x0, 0x0)
recvmmsg(r9, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000600)=""/145, 0x91}, {&(0x7f00000006c0)=""/236, 0xec}, {&(0x7f0000000900)=""/64, 0x40}, {&(0x7f0000001840)=""/4098, 0x1002}], 0x4}, 0x8}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000004040)=""/4090, 0xffa}, {&(0x7f0000006240)=""/4099, 0x1003}, {&(0x7f0000006040)=""/101, 0x65}, {&(0x7f00000060c0)=""/195, 0xc3}, {0x0}], 0x5}, 0x900000}], 0x7, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000400000000000085a5b5471eaaee", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000014000000b7030000000000002b46b6012ddb89edbf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090800000000007baaf0ff00000000bd8900000000000007080000f8ffffffbf9400000000000007040000f0ffffffb70200000800000018270000", @ANYRES32=r0, @ANYRESOCT=r6], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.242994682s ago: executing program 5 (id=3787):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, 0x0, &(0x7f0000000200))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0)
read$alg(r2, &(0x7f0000000080)=""/195, 0xc3)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r2, &(0x7f0000000180)="358caaa0cf2314a4de826aeed71a25e1898ba30c8831e0e7ea4f4738e2e9cac4f55642e6e484a339c238d858b031f275d7434342f81fb8eefcf9"}, 0x1c)
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000b5506af3634fa8b65f9520b17bdf000000010000000900010073797a300000000028000000030a01020000000000000000010000080900010073797a3000000000080003006e61740050000000060a010400000000000000000100000008000b4000f4ffff27000480240001800b0001007470726f7879000014000280080001400000000a080003400000000a0900010073797a3000000000140000001100"], 0xc0}}, 0x40000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, 0x0, &(0x7f0000000200)) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) (async)
read$alg(r2, &(0x7f0000000080)=""/195, 0xc3) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r2, &(0x7f0000000180)="358caaa0cf2314a4de826aeed71a25e1898ba30c8831e0e7ea4f4738e2e9cac4f55642e6e484a339c238d858b031f275d7434342f81fb8eefcf9"}, 0x1c) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000b5506af3634fa8b65f9520b17bdf000000010000000900010073797a300000000028000000030a01020000000000000000010000080900010073797a3000000000080003006e61740050000000060a010400000000000000000100000008000b4000f4ffff27000480240001800b0001007470726f7879000014000280080001400000000a080003400000000a0900010073797a3000000000140000001100"], 0xc0}}, 0x40000) (async)

2.409094469s ago: executing program 3 (id=3788):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000480)={0x10, 0xffffffffffffffda}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x740, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
setxattr$system_posix_acl(&(0x7f00000001c0)='./file0/file1\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x2}, {0x20, 0x4}}, 0x24, 0x1)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c)
listen(r1, 0x4)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x7}, 0x8)
r2 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xaf1}, 0x8)
sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f00000003c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000440)="89", 0x1}], 0x1}}], 0x1, 0x20000000)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000480)=ANY=[], 0x8397de475a1b5b02)

2.403788828s ago: executing program 4 (id=3796):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa8240, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg$inet(r3, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="06", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0, 0x4000}], 0x2}}], 0x2, 0x14)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000280)={"bb0a3dbaac88b142e4073e5edc9c0a3dc67108305689788a15cc3049ebf527a4144607d2cf8e2de7b2adaa357ad0d99c9b9be41939b45fa5b2ef1100225d1a1496ea9c23666ee76c924f19994fbea63b8821d9597291df7323652c754c242688ab14f45113aa250f4e126fee3d9c32e46f39df519111633429964bfb16a86c30e0fe23464762a7fe13c475600b10b539e80fc7b0cdeb33e364225fee63aaa796b93098ead0faea16753dadca1ced1debcfa81a5ff26823925a02119ee2549c3bb7c6ff6aa50aa714b3c6dfba01310c5ca8ed082b79704c1ef69446c00b61e30915e0b48565bad21a30ea76862816fbd77aa5d072f8f096d5df1367dc87a38ee6c311827fae929d428da32af3a2e09a7f3e2c876e0b8b17d3624780562b17115f0ecb5d9f207c1c5c64d797175fed639efec1e021d511a7dfdf1dadb4ac05900123bd95360bcbac022a2d2d70024a6ec739d9950681d885e4dca41d1bbd29cf427939f9c2129b118473e4a36725dfce8a9a336cc1b6c3155d48fcbd2d136e15fc1a58850c0151d4280e7185f66059bdf90db088fc7799a06e3de510060aee9979dab486bffc86c621a50bf3b72555254b4619113a7ebe3cbca2e150089234ac11ccba8a893d54ce59ce0f19b70ade72f53c521152db7dbe5f51ce6b09c35c8868e43a65ea5acb905c0ac0ed4cf176cd0b902a6b5b393c6f6a322c927dab006efe7ce7a664a548ef4b388c7ba9b229c2073f60449aed7ba296bc793458632a35214aeafad9395c6aeb625a603df9811a1b9da4643200784b6d494c47150ed82180d0881d32bd9f191050076a2a308beede564fcfb41591558a13ea402a330d3829d17693418e321b6aeb1b03f9b7c76696b48269504b8b262650a32d8f5c4c84e2d1a2053b50e3aac80bf33138feec0ab098ff72bec160f787172071a7537a6e54e3aad3ee6b5e0632be577e5fc5b129229bb40df851dbf9ea87d18140dc4bddd05f3b6b25e5a3cd8acf12cf8ea4c5181b4bac0b1b9aa189f7ef1a0a305f760e53f45f9859b4827bd124c72f761979957077acea33d68daef47f69ae51f6990d863b28143b552453e5a8dff7ae6ac8ec3da7974799cdc9db4a4e492a5efd4e6579cd3ecaeaa49590555c9c3336897087dd0f53157349867a617fa91a6b9fdc8b30fb5129c9edd3937b58c0d26f2b09b09b25a1fa15225374f824b8e3f2cdbe72b2f0d9cf7d46b3d4e22d3edde30ace8d775658e59fcca5067db16b712e11c827756112218acc68e78afee7ba8c7dc0ea82a3b1c4db4cf7c389e6b8a7de3e8fee2e6d2d367e8a6e6321b5459074f2c141a72d78b054c7f042e3d7dc723c8995f3a35b94762094625f6cce2a39a620aad67803cbfd22e8fb0116868c3fe2fcb9c23274d0b90d6d6fca976974106a8a1d6f1c037d5b10f355f0b9b735ce3964b3f270"})

2.402446905s ago: executing program 5 (id=3789):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x0, 0x800, 0x0, 0x6, 0x14, 0xfffffe75}, 0x9c)
bind$inet6(r0, &(0x7f0000000400)={0xa, 0x4e20, 0xfffffffe, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000440)=0xffffff7d, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff)
listen(0xffffffffffffffff, 0x5)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000001900)=0x7, 0x4)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000001940)=0x207, 0x4)
sendto$packet(r2, 0x0, 0x0, 0x4, &(0x7f0000001980)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000006000000aa0b", @ANYRES8=r1], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)="8e19b5e12682e6bcd031e90e9cfcceb1fcb2", &(0x7f0000001a80), 0xa7c, r3}, 0x38)
mkdirat(0xffffffffffffff9c, &(0x7f0000001ac0)='./mnt\x00', 0x1ff)
mount(&(0x7f0000001b00)=@filename='mtd0\x00', &(0x7f0000001b40)='./mnt\x00', &(0x7f0000001b80)='jffs2\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000001bc0)='./mnt/fillfile\x00', 0x42, 0x9f)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000001c00)='./binderfs/binder0\x00', 0x800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000001c40)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001c80)=0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x80200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000001d00), 0x2, 0x141102)
writev(r5, &(0x7f0000001d40)=[{&(0x7f0000001d80)="94", 0xf000}, {0x0}], 0x2)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
write(r4, &(0x7f0000001dc0)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000)
mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/class/net\x00', 0x0, 0x0)
getdents64(r6, &(0x7f0000000640), 0x1000)
sendto$inet6(r0, &(0x7f0000000640)="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", 0x173, 0x40014, &(0x7f00000004c0)={0xa, 0x4e22, 0xee2, @remote}, 0x1c)

2.283781364s ago: executing program 3 (id=3791):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_emit_ethernet(0x36, &(0x7f0000000280)={@broadcast, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x28, 0x68, 0x0, 0xff, 0x6, 0x0, @multicast1, @empty}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xa, 0x8, 0x0, 0x80}}}}}}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmmsg$sock(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@timestamping={{0x10, 0x1, 0x4f, 0x3ff}}], 0x10}}], 0x1, 0x40440d1)
sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000400), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000440)=0x2)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c80)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x20008001}, 0x0)
recvmmsg(r2, &(0x7f0000000480), 0x10106, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc01cf509, &(0x7f0000000500)={<r5=>r3, 0x6, 0xb4e8, 0x7})
write$P9_RLERROR(r5, &(0x7f0000000540)={0xa, 0x7, 0x2, {0x1, '%'}}, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
r6 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
r7 = syz_ublk_setup_io_uring(0x20, &(0x7f00000005c0)={0x0, 0x0, 0x100}, &(0x7f0000000640)=<r8=>0x0, &(0x7f0000000680)=<r9=>0x0, &(0x7f00000006c0)=<r10=>0x0)
r11 = syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000700)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, <r12=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000780)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000007c0)=<r13=>0x0)
r14 = syz_open_dev$ublk_chdev(&(0x7f0000000800), r11, 0x2)
ioctl$TIOCL_SELLOADLUT(r5, 0x541c, &(0x7f00000000c0)={0x5, 0x7, 0xed4, 0xffffffffffffffff, 0xd52})
syz_ublk_setup_queues(r14, r13, &(0x7f0000000840)={0x0, 0x3e0e, 0x0, 0x3, 0x28e, 0x0, r7}, &(0x7f00000008c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x1af, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766f, 0x20000, 0x1, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x80, 0x400, 0x1fe}}], 0x4, &(0x7f0000000b40)={0x2e, 0x0, 0x0, r14, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r12, '\x00', {0x3, 0xb45, 0x100104, 0x0}}, &(0x7f0000000bc0))
r15 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r15, &(0x7f000001a980)={0x0, 0x0, &(0x7f000001a9c0)={&(0x7f000001aa00)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)

2.276515566s ago: executing program 4 (id=3800):
io_uring_setup(0x80068f3, &(0x7f00000003c0)={0x0, 0xe6f1, 0x8, 0x4, 0x3cb})
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
listen(r0, 0x5)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) (async)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) (async)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r2, &(0x7f0000000100)="0e00000002000204", 0x8) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) (async)
syz_usb_connect(0x6, 0x0, 0x0, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x121240, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000280))
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000002c0)=0xdfe5) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) (async)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) (async)
r4 = socket(0x2, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000340)='macvlan1\x00', 0x10) (async)
setsockopt$inet_int(r4, 0x0, 0x3, 0x0, 0x0) (async)
sendmmsg$inet(r4, &(0x7f0000000380)=[{{&(0x7f0000001480)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="bc98efb6fbd1d50e5325b094080bc2", 0xf}, {&(0x7f0000001540)="54d9b7a069fb02b4e96e12d872dd182e2becb6f1457b6e0aabe3427159015f4c4a57a21bc3f122b2f904000000cea665", 0x30}, {&(0x7f0000001580)="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", 0x593}], 0x3}}], 0x1, 0x4)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40010120, 0x0, 0x0)
mount(0x0, &(0x7f0000001b40)='./sys\x00', &(0x7f0000001b80)='sysfs\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000001bc0)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)

2.011135495s ago: executing program 6 (id=3792):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x18, 0x31, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
fcntl$setstatus(r1, 0x4, 0x800)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xf, 0x4, 0x4, 0x12, 0x18}, 0x48)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @remote}, 0x10)
getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f0000000240), &(0x7f00000002c0)=0x60)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r2)
openat$dm_control(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000005)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000000a00)={0x0, 0x28, 0x0, @tid=r3}, &(0x7f0000000a40))
r4 = socket$inet(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000a80)={'filter\x00', 0x0, [0x2, 0x5]}, &(0x7f0000000b00)=0x44)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x10, 0x13, &(0x7f0000000c00)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x7f, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xe)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000cc0)={'syzkaller0\x00', 0x1})
socket(0x400000000010, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000d00)={'syzkaller0\x00', 0xca58c30f81b6079f})
socket$unix(0x1, 0x0, 0x0)

1.270320862s ago: executing program 6 (id=3793):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={<r2=>0x0}, &(0x7f0000000340)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000380)={r2, 0x4}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="b40000000000000071119400000000008510000002000000850000008c00000095000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x29e, &(0x7f0000000240)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x70)

1.255986565s ago: executing program 5 (id=3794):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
writev(r0, &(0x7f0000000880)=[{&(0x7f00000008c0)='A', 0x1}], 0x1)

1.121293378s ago: executing program 3 (id=3795):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x18, 0x31, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
fcntl$setstatus(r1, 0x4, 0x800)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xf, 0x4, 0x4, 0x12, 0x18}, 0x48)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @remote}, 0x10)
getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f0000000240), &(0x7f00000002c0)=0x60)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r2)
openat$dm_control(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000005)
sched_setattr(0x0, 0x0, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000000a00)={0x0, 0x28, 0x0, @tid=r3}, &(0x7f0000000a40))
r4 = socket$inet(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000a80)={'filter\x00', 0x0, [0x2, 0x5]}, &(0x7f0000000b00)=0x44)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x10, 0x13, &(0x7f0000000c00)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x7f, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xe)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000cc0)={'syzkaller0\x00', 0x1})
socket(0x400000000010, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000d00)={'syzkaller0\x00', 0xca58c30f81b6079f})
socket$unix(0x1, 0x0, 0x0)

1.118988441s ago: executing program 5 (id=3797):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=<r1=>0x0, @ANYBLOB='\a\x00'/18, @ANYRES32=0x0, @ANYRES64], 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x9, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00')
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000380)={0x0, 0xc1, 0x81, 0x20203843, 0x3, [0x2], [0x800, 0x9], [0x0, 0x0, 0x4]})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[], [], 0x2f})
ioprio_get$pid(0x3, 0x0)
r7 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d00)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065eeed8928d7be862bf0066beb0833bb727370616e000018000280060005001700"/63], 0x48}}, 0x0)
ioctl$DM_DEV_CREATE(r7, 0xc138fd03, &(0x7f0000000a00)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x21000, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}})
open_tree(0xffffffffffffffff, &(0x7f0000000cc0)='./file0\x00', 0x81100)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r4, r2, &(0x7f00000002c0)=0x4015, 0x0)
sendmsg$nl_generic(r9, 0x0, 0x0)
recvmmsg(r9, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000600)=""/145, 0x91}, {&(0x7f00000006c0)=""/236, 0xec}, {&(0x7f0000000900)=""/64, 0x40}, {&(0x7f0000001840)=""/4098, 0x1002}], 0x4}, 0x8}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000004040)=""/4090, 0xffa}, {&(0x7f0000006240)=""/4099, 0x1003}, {&(0x7f0000006040)=""/101, 0x65}, {&(0x7f00000060c0)=""/195, 0xc3}, {0x0}], 0x5}, 0x900000}], 0x7, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000400000000000085a5b5471eaaee", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000014000000b7030000000000002b46b6012ddb89edbf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090800000000007baaf0ff00000000bd8900000000000007080000f8ffffffbf9400000000000007040000f0ffffffb70200000800000018270000", @ANYRES32=r0, @ANYRESOCT=r6], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.11415025s ago: executing program 6 (id=3798):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
futex_waitv(&(0x7f0000000cc0)=[{0x294, &(0x7f0000000000), 0x82}, {0x100, &(0x7f0000000040)=0x800, 0x82}, {0xffff, &(0x7f0000000080)=0x9, 0x82}, {0xc49, &(0x7f00000000c0)=0xffffffffffffffff, 0x2}, {0x8, &(0x7f0000000100)=0x9, 0x82}, {0x3b, &(0x7f0000000140)=0x5b, 0x82}, {0x0, &(0x7f0000000180)=0x9, 0x82}, {0x5, &(0x7f00000001c0)=0xffffffffffffff00, 0x82}, {0x61fd, &(0x7f0000000200)=0x6, 0x80}, {0x8, &(0x7f0000000240)=0x8000}, {0x8, &(0x7f0000000280)=0x7, 0x2}, {0xfff, &(0x7f00000002c0)=0x9, 0x2}, {0x0, &(0x7f0000000300)=0xdd06364, 0x2}, {0x6, &(0x7f0000000340)=0x8, 0x82}, {0x3, &(0x7f0000000380)=0xb, 0x82}, {0x0, &(0x7f00000003c0)=0xffffffffffff7da3, 0x2}, {0x4ae, &(0x7f0000000400)=0x1, 0x82}, {0x0, &(0x7f0000000440)=0x1, 0x2}, {0x0, &(0x7f0000000480)=0x200, 0x2}, {0x6, &(0x7f00000004c0)=0x2, 0x2}, {0x80000001, &(0x7f0000000500)=0xff, 0x5504d53b16e89ee}, {0x71e, &(0x7f0000000540)=0x5, 0x2}, {0x9, &(0x7f0000000580)=0x8, 0x2}, {0xffffffffffffffff, &(0x7f00000005c0)=0x8, 0x2}, {0xf, &(0x7f0000000600)=0xffff, 0x82}, {0x9, &(0x7f0000000640)=0x1, 0x82}, {0x8, &(0x7f0000000680)=0x5, 0x2}, {0x9, &(0x7f00000006c0)=0xc, 0x2}, {0x7f, &(0x7f0000000700)=0x3, 0x2}, {0x5, &(0x7f0000000740)=0x6, 0x2}, {0x4, &(0x7f0000000780)=0x8, 0x2}, {0x1, &(0x7f00000007c0)=0x4}, {0x8, &(0x7f0000000800)=0x9, 0x82}, {0x400, &(0x7f0000000840)=0x8000000000000001, 0x184}, {0x9, &(0x7f0000000900)=0x7, 0x82}, {0x7, &(0x7f0000000940), 0x82}, {0xff, &(0x7f0000000980)}, {0x8, &(0x7f00000009c0)=0x19c, 0x82}, {0xffffffffffff0000, &(0x7f0000000a00)=0x40, 0x82}, {0x7a, &(0x7f0000000a40)=0xffffffff, 0x82}, {0xc, &(0x7f0000000a80)=0x2, 0x82}, {0x10000, &(0x7f0000000ac0)=0x1, 0x2}, {0x4, &(0x7f0000000b00)=0xfffffffffffffffa, 0x2}, {0x1ff, &(0x7f0000000b40)=0xfffffffffffffffc, 0x2}, {0x1ce2, &(0x7f0000000b80)=0x3ff, 0x2}, {0x7, &(0x7f0000000bc0)=0x1ff, 0x2}, {0x100, &(0x7f0000000c00)=0x35, 0x2}, {0x8, &(0x7f0000000c40)=0x9, 0x82}, {0x0, &(0x7f0000000c80)=0x6, 0x80}], 0x31, 0x0, &(0x7f0000001180)={0x0, 0x3938700}, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
writev(r0, &(0x7f0000000880)=[{&(0x7f00000008c0)='A', 0x1}], 0x1)

1.053314382s ago: executing program 6 (id=3799):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000980)=0xa, 0x4)
r0 = syz_create_resource$binfmt(&(0x7f0000000900)='./file0\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
write$binfmt_script(r1, &(0x7f0000000940)={'#! ', './file1', [{}]}, 0x2)
write$binfmt_elf64(r1, &(0x7f0000000980)=ANY=[], 0x1cb)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)

1.04893152s ago: executing program 6 (id=3801):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
add_key(&(0x7f0000000340)='asymmetric\x00', 0x0, &(0x7f0000001740)="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", 0x1d8, 0xfffffffffffffffd)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001640)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r2, r2, 0x2f}, 0x20)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000016c0)={@fallback=<r3=>r2, 0x2f, 0x0, 0x0, &(0x7f0000001700)=[0x0], 0x1, 0x0, &(0x7f0000001740), 0x0, 0x0}, 0x40)
r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x200001fe0000})
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x4, 0x4, 0xa000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0xa600000000000000, r4})
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000240))
capset(&(0x7f0000000540)={0x20071026}, &(0x7f0000000580)={0x200000, 0x200000, 0x0, 0x0, 0x6, 0x4})
r5 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000001940)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0xe0, 0x8, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x809b}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6002}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x3c, 0x7, 0x1, 0x0, "7de9e58690b12a795396f7389ba3aad31d2b1d9e91ae69f8aac16efc5d4d23f5771e508076c63415726eb862133ba887e65f02ecf62b8cd0"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x32}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x124}, 0x1, 0x0, 0x0, 0x4000044}, 0x48000)
mount(&(0x7f0000000180)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x40808, 0x0)
write(r5, 0x0, 0x0)

982.237225ms ago: executing program 3 (id=3802):
kexec_load(0x7, 0x7, &(0x7f0000000740)=[{&(0x7f0000000ac0)="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", 0x100, 0x6, 0x4}, {&(0x7f0000000280)="e5db73dc032db6e502ce0c438e9ec3e0f5e8d52c737d2b4ab61c0d7403d7e47c76d071a514d78e76a1df", 0x2a, 0x2, 0x9}, {&(0x7f0000000400)="eb769e27745e389bb79495edaaed2f9553a28c8c8860aceed218362c2ecee25b2bad17c04dc4b66ecaa7f75e75111be9bb6efeaa4317de4111b792ad791f32f775f938a02887c9b708eb138ae31443e45b02a6600710aca1fd0f0a949cba11570525879a9e32b298e8ffaed89bb7f7cea61893dc9a3b0340b97ec18483494a98f44399048bfe5b76ae7ab48450da7f03ab878dcec249bb8fe6042a762f6f59e93977ef9547", 0xa5, 0x1, 0x35f2}, {&(0x7f0000000500)="2183949bfb87e0d8efaae8d09e3e62d2d2e7959b7008ef20b021a979643578ae743294d94473706b8d155f4458c65c40c0dbdd0c0c16a9b8ee713a11ffdd7f5883cb6a42f83d7f818e2461add7466cc1fb568fabe07985c5c1c9fc00b33e70d9170a7c49c80ac94f54bea14d934ffc9fd044b3abbd04f7985688e82757c14fde8718cfae248a9c7d", 0x88, 0x4, 0x4}, {&(0x7f00000005c0)="c22c9f3e60e1bb557dd4a600bcc1f31ccafa7ccd4382ea8a14f6abd8673bc507ed27807bfbae887dad83d7c9a8b02b63c404039f6a1af79bbefade290a1b3ef957b2d30d9b22d6d403113c76c587888f9f9e4eec90e84200ac4831409b9442596d021a6e5478b90b9857", 0x6a, 0x9, 0x4}, {&(0x7f0000000640)="c2b6800c5b509c76125cc4949560b89a1f7319d1c38d9deef911f9d0cad063c8531003c9dcf7670c298c7927811dd8c48a1fe1824bc24a9dd0477b11157a96f246498aad252de90738727f0024d85e00354958d74acd24d0fd0d25047215f03b3e8a44c8ea80c9", 0x67, 0x9, 0xfffffffa}, {&(0x7f00000006c0)="82fc6652a2776cecfc1ca693a0016cee065fef54975a0d970f4b9214937facb9816141f373cd751bfa8fd45e906a7831b180ddb6833761c7e8b3d9055daca9c991e4a85b9a98166c669a2d6bfc61147c35e0572df9896c22f97f0b0f458186bb54ce4afd4adc9e4d513f988bb1d8", 0x6e, 0x4, 0x100}], 0x150000)
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
preadv(0xffffffffffffffff, 0x0, 0xffffffffffffff8a, 0x100001a, 0xfffffffe)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp\x00')
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000008c0)={<r2=>0x1}, &(0x7f0000000900)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000009c0)={0x7ff, 0x6, 0x8, 0xffff, 0x6, 0x9, 0x5, 0x7, r2}, &(0x7f0000000a00)=0x20)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
pipe2(&(0x7f0000000140)={<r4=>0xffffffffffffffff}, 0x0)
pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
tee(r4, r5, 0xffff1812, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000d40)={'#! ', './file0', [], 0xa, "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"}, 0x13d)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200480a4}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000300)=0x9, 0x4)
connect$inet6(r6, &(0x7f0000000240)={0xa, 0xfffd, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000340), 0xffb2)
getsockopt$inet6_tcp_TLS(r6, 0x11a, 0x5, 0x0, &(0x7f0000000840))
ftruncate(r3, 0x8c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x44080)
bind$bt_hci(r1, &(0x7f0000000a80)={0x1f, 0x4, 0x1}, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a004000", @ANYRES32=0x0, @ANYRES16=r0], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x24044040)
socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x114f0c3a338dd13, 0x6, 0x33f6, @vifc_lcl_addr=@remote, @multicast2}, 0x10)
openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)

745.063109ms ago: executing program 6 (id=3803):
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000280))
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000300)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000340)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000380), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28)
write$evdev(0xffffffffffffffff, &(0x7f0000000600)=[{{0x77359400}, 0x16, 0x7, 0xdf5b}, {{0x0, 0x2710}, 0x0, 0x4, 0x1}, {{}, 0x1f, 0x2, 0x1}, {{}, 0x16, 0x8, 0x6}], 0x40)
recvfrom$inet6(r2, &(0x7f0000000400)=""/3, 0x3, 0x317, 0x0, 0x300)
splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000440)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
cachestat(r0, &(0x7f0000000180)={0x400000000007e18, 0x10000}, &(0x7f0000000200), 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, r5, 0xf03, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}}, 0x0)
write(r3, &(0x7f0000000880)='27', 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r3, 0x0)
fremovexattr(r4, &(0x7f00000001c0)=@random={'trusted.', '#! '})
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
futex(0x0, 0x18d, 0x0, 0x0, 0x0, 0x0)

198.39573ms ago: executing program 5 (id=3804):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x18, 0x31, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
fcntl$setstatus(r1, 0x4, 0x800)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xf, 0x4, 0x4, 0x12, 0x18}, 0x48)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @remote}, 0x10)
getsockopt$inet_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f0000000240), &(0x7f00000002c0)=0x60)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r2)
openat$dm_control(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000005)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000000a00)={0x0, 0x28, 0x0, @tid=r3}, &(0x7f0000000a40))
r4 = socket$inet(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000a80)={'filter\x00', 0x0, [0x2, 0x5]}, &(0x7f0000000b00)=0x44)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x10, 0x13, &(0x7f0000000c00)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x7f, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xe)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000cc0)={'syzkaller0\x00', 0x1})
socket(0x400000000010, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000d00)={'syzkaller0\x00', 0xca58c30f81b6079f})
socket$unix(0x1, 0x0, 0x0)

103.291347ms ago: executing program 3 (id=3805):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x0, 0x800, 0x0, 0x6, 0x14, 0xfffffe75}, 0x9c)
bind$inet6(r0, &(0x7f0000000400)={0xa, 0x4e20, 0xfffffffe, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000440)=0xffffff7d, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff)
listen(0xffffffffffffffff, 0x5)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000001900)=0x7, 0x4)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000001940)=0x207, 0x4)
sendto$packet(r2, 0x0, 0x0, 0x4, &(0x7f0000001980)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000006000000aa0b", @ANYRES8=r1], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)="8e19b5e12682e6bcd031e90e9cfcceb1fcb2", &(0x7f0000001a80), 0xa7c, r3}, 0x38)
mkdirat(0xffffffffffffff9c, &(0x7f0000001ac0)='./mnt\x00', 0x1ff)
mount(&(0x7f0000001b00)=@filename='mtd0\x00', &(0x7f0000001b40)='./mnt\x00', &(0x7f0000001b80)='jffs2\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000001bc0)='./mnt/fillfile\x00', 0x42, 0x9f)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000001c00)='./binderfs/binder0\x00', 0x800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000001c40)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001c80)=0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x80200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000001d00), 0x2, 0x141102)
writev(r5, &(0x7f0000001d40)=[{&(0x7f0000001d80)="94", 0xf000}, {0x0}], 0x2)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
write(r4, &(0x7f0000001dc0)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000)
mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/class/net\x00', 0x0, 0x0)
getdents64(r6, &(0x7f0000000640), 0x1000)
sendto$inet6(r0, &(0x7f0000000640)="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", 0x173, 0x40014, &(0x7f00000004c0)={0xa, 0x4e22, 0xee2, @remote}, 0x1c)

0s ago: executing program 5 (id=3806):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_emit_ethernet(0x36, &(0x7f0000000280)={@broadcast, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x28, 0x68, 0x0, 0xff, 0x6, 0x0, @multicast1, @empty}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xa, 0x8, 0x0, 0x80}}}}}}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmmsg$sock(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@timestamping={{0x10, 0x1, 0x4f, 0x3ff}}], 0x10}}], 0x1, 0x40440d1)
sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000400), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000440)=0x2)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c80)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x20008001}, 0x0)
recvmmsg(r2, &(0x7f0000000480), 0x10106, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc01cf509, &(0x7f0000000500)={<r5=>r3, 0x6, 0xb4e8, 0x7})
write$P9_RLERROR(r5, &(0x7f0000000540)={0xa, 0x7, 0x2, {0x1, '%'}}, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
r6 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
r7 = syz_ublk_setup_io_uring(0x20, &(0x7f00000005c0)={0x0, 0x0, 0x100}, &(0x7f0000000640)=<r8=>0x0, &(0x7f0000000680)=<r9=>0x0, &(0x7f00000006c0)=<r10=>0x0)
r11 = syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000700)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, <r12=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000780)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000007c0)=<r13=>0x0)
r14 = syz_open_dev$ublk_chdev(&(0x7f0000000800), r11, 0x2)
ioctl$TIOCL_SELLOADLUT(r5, 0x541c, &(0x7f00000000c0)={0x5, 0x7, 0xed4, 0xffffffffffffffff, 0xd52})
syz_ublk_setup_queues(r14, r13, &(0x7f0000000840)={0x0, 0x3e0e, 0x0, 0x3, 0x28e, 0x0, r7}, &(0x7f00000008c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x1af, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766f, 0x20000, 0x1, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x80, 0x400, 0x1fe}}], 0x4, &(0x7f0000000b40)={0x2e, 0x0, 0x0, r14, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r12, '\x00', {0x3, 0xb45, 0x100104, 0x0}}, &(0x7f0000000bc0))
r15 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r15, &(0x7f000001a980)={0x0, 0x0, &(0x7f000001a9c0)={&(0x7f000001aa00)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)

kernel console output (not intermixed with test programs):

ngth: 249 > 9
[  565.098814][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  565.099303][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  565.368078][ T5503] 8021q: adding VLAN 0 to HW filter on device eth14
[  565.381305][T20660] rxe_eth0 speed is unknown, defaulting to 1000
[  565.539051][T20681] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  565.543460][ T5802] Bluetooth: hci1: command tx timeout
[  565.592712][ T5503] 8021q: adding VLAN 0 to HW filter on device eth15
[  565.783010][T20660] bridge0: port 1(bridge_slave_0) entered blocking state
[  565.783055][T20660] bridge0: port 1(bridge_slave_0) entered disabled state
[  565.783113][T20660] bridge_slave_0: entered allmulticast mode
[  565.793668][T20660] bridge_slave_0: entered promiscuous mode
[  565.801527][T20660] bridge0: port 2(bridge_slave_1) entered blocking state
[  565.801598][T20660] bridge0: port 2(bridge_slave_1) entered disabled state
[  565.801657][T20660] bridge_slave_1: entered allmulticast mode
[  565.802355][T20660] bridge_slave_1: entered promiscuous mode
[  565.999207][ T7305] hsr_slave_0: left promiscuous mode
[  565.999864][ T7305] hsr_slave_1: left promiscuous mode
[  566.000477][ T7305] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  566.000489][ T7305] batman_adv: batadv0: Removing interface: batadv_slave_0
[  566.001251][ T7305] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  566.001262][ T7305] batman_adv: batadv0: Removing interface: batadv_slave_1
[  566.020464][ T7305] veth1_macvtap: left promiscuous mode
[  566.020499][ T7305] veth0_macvtap: left promiscuous mode
[  566.020576][ T7305] veth1_vlan: left promiscuous mode
[  566.020606][ T7305] veth0_vlan: left promiscuous mode
[  566.455645][ T7305] team0 (unregistering): Port device team_slave_1 removed
[  566.530120][ T7305] team0 (unregistering): Port device team_slave_0 removed
[  566.617329][T20660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  566.619414][ T5503] 8021q: adding VLAN 0 to HW filter on device eth16
[  566.622125][T20660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  566.639139][T20660] team0: Port device team_slave_0 added
[  566.643998][T20660] team0: Port device team_slave_1 added
[  566.671940][T20660] batman_adv: batadv0: Adding interface: batadv_slave_0
[  566.671952][T20660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  566.671965][T20660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  566.672860][T20660] batman_adv: batadv0: Adding interface: batadv_slave_1
[  566.672868][T20660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  566.672881][T20660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  566.742391][T20660] hsr_slave_0: entered promiscuous mode
[  566.743052][T20660] hsr_slave_1: entered promiscuous mode
[  566.744677][T20660] debugfs: 'hsr0' already exists in 'hsr'
[  566.744692][T20660] Cannot create hsr debugfs directory
[  566.921648][T20732] Invalid ELF header magic: != ELF
[  566.942170][T20732] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3481'.
[  566.983482][T15592] usb 9-1: new high-speed USB device number 57 using dummy_hcd
[  567.147452][ T5802] Bluetooth: hci0: command tx timeout
[  567.154013][T15592] usb 9-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  567.154069][T15592] usb 9-1: too many configurations: 9, using maximum allowed: 8
[  567.154983][T15592] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  567.154996][T15592] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  567.155895][T15592] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  567.155906][T15592] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  567.157603][T15592] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  567.157619][T15592] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  567.158472][T15592] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  567.158483][T15592] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  567.159335][T15592] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  567.159345][T15592] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  567.160194][T15592] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  567.160204][T15592] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  567.161073][T15592] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  567.161084][T15592] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  567.161991][T15592] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  567.162002][T15592] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  567.165278][T15592] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  567.165292][T15592] usb 9-1: Product: syz
[  567.165299][T15592] usb 9-1: Manufacturer: syz
[  567.165306][T15592] usb 9-1: SerialNumber: syz
[  567.167132][T15592] usb 9-1: config 0 descriptor??
[  567.360066][T20660] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  567.362825][T20660] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  567.363225][T20660] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  567.370370][T20660] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  567.370965][T20660] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  567.375852][T20660] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  567.376239][T20660] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  567.382313][T20660] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  567.388664][ T5892] usb 9-1: USB disconnect, device number 57
[  567.451509][T20660] 8021q: adding VLAN 0 to HW filter on device bond0
[  567.471316][T20660] 8021q: adding VLAN 0 to HW filter on device team0
[  567.477693][T18964] bridge0: port 1(bridge_slave_0) entered blocking state
[  567.477774][T18964] bridge0: port 1(bridge_slave_0) entered forwarding state
[  567.482012][T18964] bridge0: port 2(bridge_slave_1) entered blocking state
[  567.482089][T18964] bridge0: port 2(bridge_slave_1) entered forwarding state
[  567.623365][ T5802] Bluetooth: hci1: command tx timeout
[  567.710705][T20660] 8021q: adding VLAN 0 to HW filter on device batadv0
[  567.730834][T20660] veth0_vlan: entered promiscuous mode
[  567.735119][T20660] veth1_vlan: entered promiscuous mode
[  567.751452][T20660] veth0_macvtap: entered promiscuous mode
[  567.753630][T20660] veth1_macvtap: entered promiscuous mode
[  567.760592][T20660] batman_adv: batadv0: Interface activated: batadv_slave_0
[  567.763889][T20660] batman_adv: batadv0: Interface activated: batadv_slave_1
[  567.784955][T19334] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  567.784979][T19334] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  567.785018][T19334] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  567.785034][T19334] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  567.819111][T18982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  567.819124][T18982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  567.834981][T18982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  567.834995][T18982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  567.863399][ T5892] usb 10-1: new high-speed USB device number 44 using dummy_hcd
[  567.873447][ T1359] usb 11-1: new high-speed USB device number 37 using dummy_hcd
[  568.013507][ T5892] usb 10-1: Using ep0 maxpacket: 16
[  568.025750][ T1359] usb 11-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  568.025773][ T1359] usb 11-1: too many configurations: 9, using maximum allowed: 8
[  568.026613][ T1359] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  568.026626][ T1359] usb 11-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  568.027823][ T1359] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  568.027834][ T1359] usb 11-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  568.028757][ T1359] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  568.028801][ T1359] usb 11-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  568.029811][ T1359] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  568.029846][ T1359] usb 11-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  568.031459][ T1359] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  568.031471][ T1359] usb 11-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  568.032356][ T1359] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  568.032367][ T1359] usb 11-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  568.036282][ T1359] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  568.036294][ T1359] usb 11-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  568.050934][ T1359] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  568.050949][ T1359] usb 11-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  568.085864][ T1359] usb 11-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  568.085935][ T1359] usb 11-1: Product: syz
[  568.085944][ T1359] usb 11-1: Manufacturer: syz
[  568.085951][ T1359] usb 11-1: SerialNumber: syz
[  568.098507][ T1359] usb 11-1: config 0 descriptor??
[  568.229314][ T5892] usb 10-1: unable to get BOS descriptor or descriptor too short
[  568.229342][ T5892] usb 10-1: New USB device found: idVendor=0525, idProduct=00a1, bcdDevice=0.00
[  568.229360][ T5892] usb 10-1: no configurations
[  568.229367][ T5892] usb 10-1: can't read configurations, error -22
[  568.322687][ T1359] usb 11-1: USB disconnect, device number 37
[  568.880230][T20787] rxe_eth0 speed is unknown, defaulting to 1000
[  569.225638][ T5802] Bluetooth: hci0: command tx timeout
[  569.399018][ T7305] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  569.476965][ T7305] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  569.575930][ T5796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  569.589086][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  569.593045][ T7305] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  569.595708][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  569.602666][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  569.605770][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  569.736625][ T7305] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  569.902451][ T7305] bridge_slave_1: left allmulticast mode
[  569.902469][ T7305] bridge_slave_1: left promiscuous mode
[  569.902630][ T7305] bridge0: port 2(bridge_slave_1) entered disabled state
[  569.940408][ T7305] bridge_slave_0: left allmulticast mode
[  569.940433][ T7305] bridge_slave_0: left promiscuous mode
[  569.940599][ T7305] bridge0: port 1(bridge_slave_0) entered disabled state
[  569.954088][T20816] Invalid ELF header magic: != ELF
[  569.970180][T20816] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3491'.
[  570.342057][ T7305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  570.354214][ T7305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  570.355224][ T7305] bond0 (unregistering): Released all slaves
[  570.359611][ T5503] 8021q: adding VLAN 0 to HW filter on device eth14
[  570.376521][T20801] rxe_eth0 speed is unknown, defaulting to 1000
[  570.712861][ T5503] 8021q: adding VLAN 0 to HW filter on device eth15
[  570.793110][ T7305] hsr_slave_0: left promiscuous mode
[  570.805482][ T7305] hsr_slave_1: left promiscuous mode
[  570.805956][ T7305] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  570.805968][ T7305] batman_adv: batadv0: Removing interface: batadv_slave_0
[  570.809624][ T7305] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  570.809635][ T7305] batman_adv: batadv0: Removing interface: batadv_slave_1
[  570.812594][ T7305] veth1_macvtap: left promiscuous mode
[  570.812622][ T7305] veth0_macvtap: left promiscuous mode
[  570.812701][ T7305] veth1_vlan: left promiscuous mode
[  570.812746][ T7305] veth0_vlan: left promiscuous mode
[  570.957832][ T7305] team0 (unregistering): Port device team_slave_1 removed
[  570.962878][ T7305] team0 (unregistering): Port device team_slave_0 removed
[  571.039061][ T5503] 8021q: adding VLAN 0 to HW filter on device eth16
[  571.059337][T20801] bridge0: port 1(bridge_slave_0) entered blocking state
[  571.059432][T20801] bridge0: port 1(bridge_slave_0) entered disabled state
[  571.059488][T20801] bridge_slave_0: entered allmulticast mode
[  571.060155][T20801] bridge_slave_0: entered promiscuous mode
[  571.061585][T20801] bridge0: port 2(bridge_slave_1) entered blocking state
[  571.061626][T20801] bridge0: port 2(bridge_slave_1) entered disabled state
[  571.061676][T20801] bridge_slave_1: entered allmulticast mode
[  571.062296][T20801] bridge_slave_1: entered promiscuous mode
[  571.077847][T20801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  571.079290][T20801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  571.091317][T20801] team0: Port device team_slave_0 added
[  571.092529][T20801] team0: Port device team_slave_1 added
[  571.102847][T20801] batman_adv: batadv0: Adding interface: batadv_slave_0
[  571.102858][T20801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  571.102871][T20801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  571.103881][T20801] batman_adv: batadv0: Adding interface: batadv_slave_1
[  571.103889][T20801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  571.103901][T20801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  571.121408][T20801] hsr_slave_0: entered promiscuous mode
[  571.121842][T20801] hsr_slave_1: entered promiscuous mode
[  571.122146][T20801] debugfs: 'hsr0' already exists in 'hsr'
[  571.122155][T20801] Cannot create hsr debugfs directory
[  571.215260][T20858] bonding: bond0 is being deleted...
[  571.267933][T20858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  571.275091][T20858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  571.280838][T20858] bond0 (unregistering): Released all slaves
[  571.303414][ T5802] Bluetooth: hci0: command tx timeout
[  571.463550][T14004] usb 8-1: new high-speed USB device number 62 using dummy_hcd
[  571.634478][T14004] usb 8-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  571.634502][T14004] usb 8-1: too many configurations: 9, using maximum allowed: 8
[  571.635415][T14004] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  571.635427][T14004] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  571.636320][T14004] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  571.636331][T14004] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  571.637196][T14004] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  571.637207][T14004] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  571.638215][T14004] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  571.638230][T14004] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  571.639104][T14004] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  571.639114][T14004] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  571.639978][T14004] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  571.639989][T14004] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  571.640868][T14004] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  571.640878][T14004] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  571.641757][T14004] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  571.641768][T14004] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  571.644644][T14004] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  571.644681][T14004] usb 8-1: Product: syz
[  571.644690][T14004] usb 8-1: Manufacturer: syz
[  571.644697][T14004] usb 8-1: SerialNumber: syz
[  571.646280][T14004] usb 8-1: config 0 descriptor??
[  571.749474][T20801] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  571.753026][T20801] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  571.753894][T20801] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  571.756366][T20801] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  571.756780][T20801] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  571.761461][T20801] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  571.761899][T20801] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  571.765909][T20801] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  571.793542][ T5802] Bluetooth: hci1: command tx timeout
[  571.810313][T20801] 8021q: adding VLAN 0 to HW filter on device bond0
[  571.820949][T20801] 8021q: adding VLAN 0 to HW filter on device team0
[  571.824188][T18974] bridge0: port 1(bridge_slave_0) entered blocking state
[  571.824233][T18974] bridge0: port 1(bridge_slave_0) entered forwarding state
[  571.828805][T18974] bridge0: port 2(bridge_slave_1) entered blocking state
[  571.828849][T18974] bridge0: port 2(bridge_slave_1) entered forwarding state
[  571.863643][ T5580] usb 8-1: USB disconnect, device number 62
[  572.048535][T20801] 8021q: adding VLAN 0 to HW filter on device batadv0
[  572.181882][T20801] veth0_vlan: entered promiscuous mode
[  572.185877][T20801] veth1_vlan: entered promiscuous mode
[  572.201390][T20801] veth0_macvtap: entered promiscuous mode
[  572.205256][T20801] veth1_macvtap: entered promiscuous mode
[  572.213038][T20801] batman_adv: batadv0: Interface activated: batadv_slave_0
[  572.219068][T20801] batman_adv: batadv0: Interface activated: batadv_slave_1
[  572.222321][ T7305] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  572.253987][ T5837] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  572.254019][ T5837] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  572.254037][ T5837] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  572.260689][T18973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  572.260701][T18973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  572.284184][T18982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  572.284197][T18982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  572.935471][T20916] Invalid ELF header magic: != ELF
[  572.937669][T20916] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3508'.
[  572.939391][T20924] Invalid ELF header magic: != ELF
[  572.953872][T20924] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3499'.
[  572.990612][T20925] Invalid ELF header magic: != ELF
[  573.002329][T20925] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3500'.
[  573.009698][T20930] rxe_eth0 speed is unknown, defaulting to 1000
[  573.393558][ T5802] Bluetooth: hci0: command tx timeout
[  573.537969][T20946] Invalid ELF header magic: != ELF
[  573.539685][T20939] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  573.547387][T20946] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3515'.
[  573.749105][T20950] bonding: bond0 is being deleted...
[  573.855908][T20950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  573.872492][T20950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  573.873447][ T5802] Bluetooth: hci1: command tx timeout
[  573.897730][T20950] bond0 (unregistering): Released all slaves
[  575.943360][ T5802] Bluetooth: hci1: command tx timeout
[  578.010089][T20974] Invalid ELF header magic: != ELF
[  578.012418][T20974] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3518'.
[  578.014112][T20980] Invalid ELF header magic: != ELF
[  578.023381][ T5802] Bluetooth: hci1: command tx timeout
[  578.298597][T20988] Invalid ELF header magic: != ELF
[  578.319654][T20988] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3520'.
[  578.543442][T14004] usb 10-1: new high-speed USB device number 46 using dummy_hcd
[  578.703389][T14004] usb 10-1: Using ep0 maxpacket: 32
[  578.703851][T14004] usb 10-1: New USB device found: idVendor=0458, idProduct=5011, bcdDevice=0.00
[  578.704661][T14004] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  578.704676][T14004] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  578.704686][T14004] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  578.704704][T14004] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  578.706296][T14004] usb 10-1: config 0 descriptor??
[  579.120886][T14004] hid (null): report_id 0 is invalid
[  579.120901][T14004] hid (null): report_id 0 is invalid
[  579.128671][T14004] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:0458:5011.0009/input/input14
[  579.201197][T14004] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:0458:5011.0009/input/input15
[  579.204516][T20999] Invalid ELF header magic: != ELF
[  579.235954][T14004] kye 0003:0458:5011.0009: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0
[  579.305812][T20997] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3524'.
[  579.480451][T14004] usb 10-1: USB disconnect, device number 46
[  579.939670][T21019] Invalid ELF header magic: != ELF
[  579.949545][T21019] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3536'.
[  580.824525][T21025] Invalid ELF header magic: != ELF
[  581.530081][T21045] Invalid ELF header magic: != ELF
[  581.552788][T21045] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3538'.
[  582.728073][T21058] Invalid ELF header magic: != ELF
[  582.736316][T21058] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3540'.
[  583.570682][T21068] Invalid ELF header magic: != ELF
[  583.638806][T21069] Invalid ELF header magic: != ELF
[  583.668052][T21066] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3542'.
[  584.190794][T21089] Invalid ELF header magic: != ELF
[  584.211057][T21089] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3548'.
[  584.797765][T21095] Invalid ELF header magic: != ELF
[  585.089894][T21094] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3551'.
[  585.539830][T21107] Invalid ELF header magic: != ELF
[  585.826205][T21112] Invalid ELF header magic: != ELF
[  585.832696][T21103] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3553'.
[  585.832774][T21106] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3556'.
[  585.867751][T15777] libceph: mon0 (1)127.0.0.1:1 socket error on write
[  586.142133][T15777] libceph: mon0 (1)127.0.0.1:1 socket error on write
[  586.156295][T21128] ±ÿ): renamed from lo (while UP)
[  586.443095][T21134] Invalid ELF header magic: != ELF
[  586.592460][T21133] netlink: 'syz.6.3561': attribute type 4 has an invalid length.
[  586.665328][T14004] libceph: mon0 (1)127.0.0.1:1 socket error on write
[  586.724394][T21136] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3561'.
[  586.905315][T21120] ceph: No mds server is up or the cluster is laggy
[  587.968547][T21150] Invalid ELF header magic: != ELF
[  587.992010][T21150] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3564'.
[  588.713736][T21164] Invalid ELF header magic: != ELF
[  588.718302][T21164] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3571'.
[  588.977003][T21170] Invalid ELF header magic: != ELF
[  589.001328][T21170] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3572'.
[  589.044645][T21169] jffs2: notice: (21169) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  589.459651][T15777] libceph: mon0 (1)127.0.0.1:1 socket error on write
[  589.463140][T15777] libceph: mon0 (1)127.0.0.1:1 socket error on write
[  589.652436][T21182] Invalid ELF header magic: != ELF
[  589.714506][T15777] libceph: mon0 (1)127.0.0.1:1 socket error on write
[  590.227218][ T5892] libceph: mon0 (1)127.0.0.1:1 socket error on write
[  590.378151][T21191] Invalid ELF header magic: != ELF
[  590.503417][T21178] ceph: No mds server is up or the cluster is laggy
[  590.591805][T21190] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3576'.
[  591.253016][T21209] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  591.253033][T21209] overlayfs: failed to set xattr on upper
[  591.253037][T21209] overlayfs: ...falling back to redirect_dir=nofollow.
[  591.253042][T21209] overlayfs: ...falling back to index=off.
[  591.253046][T21209] overlayfs: ...falling back to uuid=null.
[  591.340766][T21215] Invalid ELF header magic: != ELF
[  591.350328][T21215] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3583'.
[  591.567537][T21221] Invalid ELF header magic: != ELF
[  591.792307][T21225] jffs2: notice: (21225) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  592.038007][T21228] ±ÿ): renamed from lo (while UP)
[  592.185848][T21225] jffs2: warning: (21225) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=36
[  592.636775][T21242] syz.5.3589 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  592.636813][T21242] CPU: 0 UID: 0 PID: 21242 Comm: syz.5.3589 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  592.636842][T21242] Tainted: [L]=SOFTLOCKUP
[  592.636850][T21242] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  592.636860][T21242] Call Trace:
[  592.636897][T21242]  <TASK>
[  592.636908][T21242]  dump_stack_lvl+0x100/0x190
[  592.636943][T21242]  dump_header+0xfb/0x606
[  592.636966][T21242]  oom_kill_process.cold+0xd/0x380
[  592.636990][T21242]  out_of_memory+0x343/0x14c0
[  592.637025][T21242]  ? __pfx_out_of_memory+0x10/0x10
[  592.637061][T21242]  mem_cgroup_out_of_memory+0xc6/0x130
[  592.637083][T21242]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  592.637102][T21242]  ? find_held_lock+0x2b/0x80
[  592.637133][T21242]  ? do_raw_spin_unlock+0x145/0x1e0
[  592.637158][T21242]  ? _raw_spin_unlock+0x28/0x50
[  592.637187][T21242]  try_charge_memcg+0x779/0xf30
[  592.637219][T21242]  ? __pfx_try_charge_memcg+0x10/0x10
[  592.637246][T21242]  ? find_held_lock+0x2b/0x80
[  592.637271][T21242]  ? rcu_read_unlock+0x17/0x60
[  592.637300][T21242]  ? rcu_read_unlock+0x17/0x60
[  592.637338][T21242]  obj_cgroup_charge_pages+0x2b/0x1f0
[  592.637369][T21242]  __memcg_slab_post_alloc_hook+0x476/0x10b0
[  592.637408][T21242]  ? kasan_save_track+0x14/0x30
[  592.637431][T21242]  kmem_cache_alloc_noprof+0x4f5/0x6a0
[  592.637451][T21242]  ? __pfx_look_up_user_keyrings+0x10/0x10
[  592.637478][T21242]  ? prepare_creds+0x2c/0x950
[  592.637512][T21242]  prepare_creds+0x2c/0x950
[  592.637542][T21242]  lookup_user_key+0x1150/0x14f0
[  592.637575][T21242]  ? __pfx_lookup_user_key+0x10/0x10
[  592.637602][T21242]  ? rcu_read_lock_any_held+0x6a/0x90
[  592.637632][T21242]  ? find_held_lock+0x2b/0x80
[  592.637656][T21242]  ? ksys_write+0x190/0x250
[  592.637677][T21242]  ? ksys_write+0x190/0x250
[  592.637704][T21242]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  592.637741][T21242]  ? lock_acquire+0x1d1/0x380
[  592.637764][T21242]  keyctl_session_to_parent+0x28/0xae0
[  592.637787][T21242]  ? __might_fault+0xc5/0x140
[  592.637814][T21242]  __ia32_compat_sys_keyctl+0x34c/0x550
[  592.637847][T21242]  __do_fast_syscall_32+0x14d/0x8e0
[  592.637864][T21242]  ? lockdep_hardirqs_on+0x7d/0x110
[  592.637917][T21242]  do_fast_syscall_32+0x32/0x70
[  592.637937][T21242]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  592.637962][T21242] RIP: 0023:0xf700efbc
[  592.637979][T21242] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  592.637998][T21242] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000120
[  592.638019][T21242] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000000000000
[  592.638032][T21242] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  592.638044][T21242] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  592.638054][T21242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  592.638065][T21242] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  592.638089][T21242]  </TASK>
[  592.639590][T21242] memory: usage 0kB, limit 0kB, failcnt 19
[  592.639607][T21242] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  592.639620][T21242] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  592.639632][T21242] Memory cgroup stats for /syz5/test:
[  592.639764][T21242] cache 0
[  592.639774][T21242] rss 0
[  592.639781][T21242] rss_huge 0
[  592.639788][T21242] shmem 0
[  592.639795][T21242] mapped_file 0
[  592.639801][T21242] dirty 0
[  592.639808][T21242] writeback 0
[  592.639815][T21242] workingset_refault_anon 0
[  592.639823][T21242] workingset_refault_file 0
[  592.639831][T21242] swap 0
[  592.639839][T21242] swapcached 0
[  592.639846][T21242] pgpgin 0
[  592.639852][T21242] pgpgout 0
[  592.639859][T21242] pgfault 0
[  592.639866][T21242] pgmajfault 0
[  592.639873][T21242] inactive_anon 0
[  592.639880][T21242] active_anon 0
[  592.639887][T21242] inactive_file 0
[  592.639894][T21242] active_file 0
[  592.639901][T21242] unevictable 0
[  592.639908][T21242] hierarchical_memory_limit 0
[  592.639915][T21242] hierarchical_memsw_limit 9223372036854771712
[  592.639924][T21242] total_cache 0
[  592.639931][T21242] total_rss 0
[  592.639937][T21242] total_rss_huge 0
[  592.639944][T21242] total_shmem 0
[  592.639951][T21242] total_mapped_file 0
[  592.639957][T21242] total_dirty 0
[  592.639964][T21242] total_writeback 0
[  592.639972][T21242] total_workingset_refault_anon 0
[  592.639979][T21242] total_workingset_refault_file 0
[  592.639987][T21242] total_swap 0
[  592.639993][T21242] total_swapcached 0
[  592.640001][T21242] total_pgpgin 0
[  592.640008][T21242] total_pgpgout 0
[  592.640015][T21242] total_pgfault 0
[  592.640022][T21242] total_pgmajfault 0
[  592.640029][T21242] total_inactive_anon 0
[  592.640036][T21242] total_active_anon 0
[  592.640043][T21242] total_inactive_file 0
[  592.640051][T21242] total_active_file 0
[  592.640058][T21242] total_unevictable 0
[  592.640065][T21242] anon_cost 0
[  592.640071][T21242] file_cost 0
[  592.640078][T21242] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.3589,pid=21239,uid=0
[  592.641590][T21242] Memory cgroup out of memory: Killed process 21239 (syz.5.3589) total-vm:102060kB, anon-rss:744kB, file-rss:23016kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000
[  592.814266][ T5580] usb 9-1: new high-speed USB device number 58 using dummy_hcd
[  592.887398][T21251] netlink: 'syz.3.3597': attribute type 1 has an invalid length.
[  592.903541][T21251] 8021q: adding VLAN 0 to HW filter on device bond1
[  592.979547][T21251] bond1: (slave veth3): Enslaving as an active interface with a down link
[  593.013449][ T5580] usb 9-1: Using ep0 maxpacket: 16
[  593.014260][ T5580] usb 9-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  593.015283][ T5580] usb 9-1: config 0 has an invalid interface number: 8 but max is 0
[  593.015296][ T5580] usb 9-1: config 0 has no interface number 0
[  593.015319][ T5580] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  593.016461][ T5580] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  593.016472][ T5580] usb 9-1: Product: syz
[  593.016479][ T5580] usb 9-1: SerialNumber: syz
[  593.017788][ T5580] usb 9-1: config 0 descriptor??
[  593.023138][ T5580] usbhid 9-1:0.8: couldn't find an input interrupt endpoint
[  593.038041][T21251] mac80211_hwsim hwsim117 wlan1: entered promiscuous mode
[  593.038755][T21251] bond1: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  593.096907][T21260] Invalid ELF header magic: != ELF
[  593.106020][T21260] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3598'.
[  593.248083][T14004] usb 9-1: USB disconnect, device number 58
[  593.395888][T21265] FAULT_INJECTION: forcing a failure.
[  593.395888][T21265] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  593.395909][T21265] CPU: 1 UID: 0 PID: 21265 Comm: syz.3.3599 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  593.395923][T21265] Tainted: [L]=SOFTLOCKUP
[  593.395927][T21265] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  593.395933][T21265] Call Trace:
[  593.395937][T21265]  <TASK>
[  593.395942][T21265]  dump_stack_lvl+0x100/0x190
[  593.395962][T21265]  should_fail_ex.cold+0x5/0xa
[  593.395977][T21265]  _copy_from_user+0x2e/0xd0
[  593.396007][T21265]  ep_eventpoll_ioctl+0x293/0x4b0
[  593.396025][T21265]  ? __pfx_ep_eventpoll_ioctl+0x10/0x10
[  593.396040][T21265]  ? __fget_files+0x21f/0x3d0
[  593.396054][T21265]  ? __pfx_ep_eventpoll_ioctl+0x10/0x10
[  593.396068][T21265]  compat_ptr_ioctl+0x6e/0xa0
[  593.396079][T21265]  ? __pfx_compat_ptr_ioctl+0x10/0x10
[  593.396089][T21265]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  593.396102][T21265]  __do_fast_syscall_32+0x14d/0x8e0
[  593.396113][T21265]  ? lockdep_hardirqs_on+0x7d/0x110
[  593.396129][T21265]  do_fast_syscall_32+0x32/0x70
[  593.396140][T21265]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  593.396153][T21265] RIP: 0023:0xf7f92fbc
[  593.396162][T21265] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  593.396173][T21265] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  593.396184][T21265] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040088a01
[  593.396191][T21265] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000
[  593.396197][T21265] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  593.396203][T21265] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  593.396209][T21265] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  593.396223][T21265]  </TASK>
[  593.668046][T21269] Invalid ELF header magic: != ELF
[  594.130286][T21282] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2
[  594.133471][T18974] Bluetooth: hci4: Frame reassembly failed (-84)
[  594.243422][T14587] usb 9-1: new high-speed USB device number 59 using dummy_hcd
[  594.393396][T14587] usb 9-1: Using ep0 maxpacket: 16
[  594.394031][T14587] usb 9-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  594.394813][T14587] usb 9-1: config 0 has an invalid interface number: 8 but max is 0
[  594.394825][T14587] usb 9-1: config 0 has no interface number 0
[  594.394843][T14587] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  594.394855][T14587] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  594.396001][T14587] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  594.396013][T14587] usb 9-1: Product: syz
[  594.396020][T14587] usb 9-1: SerialNumber: syz
[  594.397210][T14587] usb 9-1: config 0 descriptor??
[  594.399409][T14587] cm109 9-1:0.8: invalid payload size 0, expected 4
[  594.400356][T14587] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input16
[  594.442246][T21288] Invalid ELF header magic: != ELF
[  594.463685][T21288] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3608'.
[  594.619638][    C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[  594.619930][    C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[  594.619993][T14587] usb 9-1: USB disconnect, device number 59
[  594.620116][    C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[  594.620126][    C0] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  594.628769][T14587] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  595.162870][T21293] netlink: 'syz.4.3609': attribute type 1 has an invalid length.
[  595.181566][T21293] 8021q: adding VLAN 0 to HW filter on device bond1
[  595.224276][T21293] bond1: (slave veth3): Enslaving as an active interface with a down link
[  595.247820][T21293] mac80211_hwsim hwsim107 wlan1: entered promiscuous mode
[  595.248493][T21293] bond1: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  595.700413][T21317] Invalid ELF header magic: != ELF
[  595.723379][T21317] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3618'.
[  596.176706][T21323] Invalid ELF header magic: != ELF
[  596.222065][T21323] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3620'.
[  596.233760][ T5802] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  596.910039][T21339] Bluetooth: MGMT ver 1.23
[  596.925666][T21339] FAULT_INJECTION: forcing a failure.
[  596.925666][T21339] name failslab, interval 1, probability 0, space 0, times 0
[  596.925688][T21339] CPU: 0 UID: 0 PID: 21339 Comm: syz.5.3623 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  596.925702][T21339] Tainted: [L]=SOFTLOCKUP
[  596.925706][T21339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  596.925712][T21339] Call Trace:
[  596.925717][T21339]  <TASK>
[  596.925722][T21339]  dump_stack_lvl+0x100/0x190
[  596.925742][T21339]  should_fail_ex.cold+0x5/0xa
[  596.925758][T21339]  should_failslab+0xc2/0x120
[  596.925772][T21339]  __kmalloc_cache_noprof+0x91/0x6d0
[  596.925788][T21339]  ? syslog_print_all+0xed/0x3f0
[  596.925802][T21339]  syslog_print_all+0xed/0x3f0
[  596.925813][T21339]  ? futex_wait+0x11e/0x370
[  596.925825][T21339]  ? __pfx_futex_wait+0x10/0x10
[  596.925836][T21339]  ? __pfx_syslog_print_all+0x10/0x10
[  596.925849][T21339]  ? hook_capable+0x1bc/0x500
[  596.925865][T21339]  ? bpf_lsm_capable+0x9/0x10
[  596.925877][T21339]  ? security_capable+0x80/0x260
[  596.925891][T21339]  do_syslog+0x350/0x6d0
[  596.925904][T21339]  ? __pfx_do_syslog+0x10/0x10
[  596.925916][T21339]  ? __might_fault+0xc5/0x140
[  596.925934][T21339]  ? __might_fault+0x111/0x140
[  596.925949][T21339]  __ia32_sys_syslog+0x73/0xb0
[  596.925963][T21339]  __do_fast_syscall_32+0x14d/0x8e0
[  596.925976][T21339]  do_fast_syscall_32+0x32/0x70
[  596.925987][T21339]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  596.926000][T21339] RIP: 0023:0xf700efbc
[  596.926009][T21339] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  596.926019][T21339] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000067
[  596.926031][T21339] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800003c0
[  596.926037][T21339] RDX: 0000000000000063 RSI: 0000000000000000 RDI: 0000000000000000
[  596.926045][T21339] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  596.926052][T21339] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  596.926058][T21339] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  596.926072][T21339]  </TASK>
[  597.211850][T21355] Invalid ELF header magic: != ELF
[  597.233266][T21355] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3630'.
[  597.444798][T14004] usb 9-1: new high-speed USB device number 60 using dummy_hcd
[  597.604171][T14004] usb 9-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00
[  597.605162][T14004] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  597.605175][T14004] usb 9-1: config 0 has no interfaces?
[  597.606902][T14004] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.606915][T14004] usb 9-1: Product: syz
[  597.606922][T14004] usb 9-1: Manufacturer: syz
[  597.606929][T14004] usb 9-1: SerialNumber: syz
[  597.608337][T14004] usb 9-1: config 0 descriptor??
[  598.011765][T21368] Invalid ELF header magic: != ELF
[  598.035992][T21368] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3633'.
[  598.983434][ T5802] Bluetooth: hci0: command 0x0c24 tx timeout
[  598.983445][ T5796] Bluetooth: hci0: Opcode 0x0c24 failed: -110
[  599.772650][T14327] usb 9-1: USB disconnect, device number 60
[  600.021986][T21387] Invalid ELF header magic: != ELF
[  600.041616][T21387] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3639'.
[  601.039972][T21404] Invalid ELF header magic: != ELF
[  601.133954][T21406] Invalid ELF header magic: != ELF
[  601.139093][T21406] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3653'.
[  601.312467][T21402] FAULT_INJECTION: forcing a failure.
[  601.312467][T21402] name failslab, interval 1, probability 0, space 0, times 0
[  601.312487][T21402] CPU: 3 UID: 0 PID: 21402 Comm: syz.6.3647 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  601.312501][T21402] Tainted: [L]=SOFTLOCKUP
[  601.312505][T21402] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  601.312511][T21402] Call Trace:
[  601.312515][T21402]  <TASK>
[  601.312520][T21402]  dump_stack_lvl+0x100/0x190
[  601.312541][T21402]  should_fail_ex.cold+0x5/0xa
[  601.312558][T21402]  should_failslab+0xc2/0x120
[  601.312578][T21402]  __kmalloc_node_track_caller_noprof+0xfa/0x870
[  601.312591][T21402]  ? nd_namespace_store+0x6b/0xa20
[  601.312610][T21402]  kstrndup+0x64/0x120
[  601.312624][T21402]  nd_namespace_store+0x6b/0xa20
[  601.312641][T21402]  namespace_store+0x62/0x150
[  601.312658][T21402]  ? __pfx_namespace_store+0x10/0x10
[  601.312674][T21402]  dev_attr_store+0x58/0x80
[  601.312687][T21402]  ? __pfx_dev_attr_store+0x10/0x10
[  601.312698][T21402]  sysfs_kf_write+0xf2/0x150
[  601.312714][T21402]  kernfs_fop_write_iter+0x3e0/0x5f0
[  601.312726][T21402]  ? __pfx_sysfs_kf_write+0x10/0x10
[  601.312741][T21402]  vfs_write+0x6af/0x1040
[  601.312754][T21402]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  601.312768][T21402]  ? __pfx_vfs_write+0x10/0x10
[  601.312779][T21402]  ? find_held_lock+0x2b/0x80
[  601.312804][T21402]  ksys_write+0x12a/0x250
[  601.312815][T21402]  ? __pfx_ksys_write+0x10/0x10
[  601.312851][T21402]  __do_fast_syscall_32+0x14d/0x8e0
[  601.312865][T21402]  ? lockdep_hardirqs_on+0x7d/0x110
[  601.312882][T21402]  do_fast_syscall_32+0x32/0x70
[  601.312893][T21402]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  601.312907][T21402] RIP: 0023:0xf7ff8fbc
[  601.312916][T21402] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  601.312926][T21402] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  601.312937][T21402] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000a80
[  601.312944][T21402] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[  601.312950][T21402] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  601.312957][T21402] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  601.312963][T21402] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  601.312977][T21402]  </TASK>
[  601.353914][T21405] Invalid ELF header magic: != ELF
[  601.477338][T21399] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3646'.
[  601.477521][T21398] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3645'.
[  601.873929][T21414] overlay: Bad value for 'nfs_export'
[  602.003521][T15777] usb 11-1: new high-speed USB device number 38 using dummy_hcd
[  602.079602][T21433] Invalid ELF header magic: != ELF
[  602.101532][T21433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3655'.
[  602.153498][T15777] usb 11-1: Using ep0 maxpacket: 32
[  602.155466][T15777] usb 11-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  602.156319][T15777] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  602.158089][T15777] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  602.158108][T15777] usb 11-1: Product: syz
[  602.158122][T15777] usb 11-1: Manufacturer: syz
[  602.158134][T15777] usb 11-1: SerialNumber: syz
[  602.214886][T15777] usb 11-1: config 0 descriptor??
[  602.215815][T21417] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  602.217409][T15777] hub 11-1:0.0: bad descriptor, ignoring hub
[  602.217429][T15777] hub 11-1:0.0: probe with driver hub failed with error -5
[  602.233414][ T1359] usb 10-1: new high-speed USB device number 47 using dummy_hcd
[  602.290283][T21438] FAULT_INJECTION: forcing a failure.
[  602.290283][T21438] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  602.290304][T21438] CPU: 3 UID: 0 PID: 21438 Comm: syz.4.3658 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  602.290318][T21438] Tainted: [L]=SOFTLOCKUP
[  602.290322][T21438] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  602.290329][T21438] Call Trace:
[  602.290333][T21438]  <TASK>
[  602.290337][T21438]  dump_stack_lvl+0x100/0x190
[  602.290357][T21438]  should_fail_ex.cold+0x5/0xa
[  602.290373][T21438]  _copy_to_user+0x32/0xd0
[  602.290392][T21438]  simple_read_from_buffer+0xcb/0x170
[  602.290406][T21438]  proc_fail_nth_read+0x1af/0x230
[  602.290421][T21438]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  602.290437][T21438]  ? rw_verify_area+0xce/0x6d0
[  602.290447][T21438]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  602.290461][T21438]  vfs_read+0x1e4/0xb30
[  602.290472][T21438]  ? lock_acquire+0x1d1/0x380
[  602.290484][T21438]  ? __fget_files+0x34/0x3d0
[  602.290496][T21438]  ? __pfx_vfs_read+0x10/0x10
[  602.290506][T21438]  ? find_held_lock+0x2b/0x80
[  602.290521][T21438]  ? __fget_files+0x215/0x3d0
[  602.290536][T21438]  ? __fget_files+0x21f/0x3d0
[  602.290567][T21438]  ksys_read+0x12a/0x250
[  602.290579][T21438]  ? __pfx_ksys_read+0x10/0x10
[  602.290595][T21438]  do_int80_emulation+0x16a/0x670
[  602.290608][T21438]  asm_int80_emulation+0x1a/0x20
[  602.290619][T21438] RIP: 0023:0xf71c032b
[  602.290628][T21438] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  602.290638][T21438] RSP: 002b:00000000f54764bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  602.290649][T21438] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54765d0
[  602.290655][T21438] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  602.290661][T21438] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  602.290667][T21438] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  602.290672][T21438] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  602.290686][T21438]  </TASK>
[  602.383484][ T1359] usb 10-1: Using ep0 maxpacket: 16
[  602.389024][ T1359] usb 10-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  602.390198][ T1359] usb 10-1: config 0 has an invalid interface number: 8 but max is 0
[  602.390218][ T1359] usb 10-1: config 0 has no interface number 0
[  602.390246][ T1359] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  602.391850][ T1359] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  602.391869][ T1359] usb 10-1: Product: syz
[  602.391881][ T1359] usb 10-1: SerialNumber: syz
[  602.394688][ T1359] usb 10-1: config 0 descriptor??
[  602.397656][ T1359] usbhid 10-1:0.8: couldn't find an input interrupt endpoint
[  602.421303][T21417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  602.421671][T21417] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  602.593399][T14327] usb 9-1: new high-speed USB device number 61 using dummy_hcd
[  602.620482][ T1359] usb 10-1: USB disconnect, device number 47
[  602.783467][T14327] usb 9-1: Using ep0 maxpacket: 32
[  602.784219][T14327] usb 9-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  602.785159][T14327] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  602.786950][T14327] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  602.786964][T14327] usb 9-1: Product: syz
[  602.786971][T14327] usb 9-1: Manufacturer: syz
[  602.786977][T14327] usb 9-1: SerialNumber: syz
[  602.788956][T14327] usb 9-1: config 0 descriptor??
[  602.790276][T21440] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  602.791212][T14327] hub 9-1:0.0: bad descriptor, ignoring hub
[  602.791224][T14327] hub 9-1:0.0: probe with driver hub failed with error -5
[  602.792516][T14327] chaoskey 9-1:0.0: Unable to register with hwrng
[  602.801790][T21444] FAULT_INJECTION: forcing a failure.
[  602.801790][T21444] name failslab, interval 1, probability 0, space 0, times 0
[  602.801810][T21444] CPU: 0 UID: 0 PID: 21444 Comm: syz.3.3660 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  602.801825][T21444] Tainted: [L]=SOFTLOCKUP
[  602.801829][T21444] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  602.801835][T21444] Call Trace:
[  602.801839][T21444]  <TASK>
[  602.801844][T21444]  dump_stack_lvl+0x100/0x190
[  602.801864][T21444]  should_fail_ex.cold+0x5/0xa
[  602.801880][T21444]  should_failslab+0xc2/0x120
[  602.801894][T21444]  __kmalloc_cache_noprof+0x91/0x6d0
[  602.801911][T21444]  ? bpf_prog_alloc_no_stats+0x15f/0x690
[  602.801929][T21444]  bpf_prog_alloc_no_stats+0x15f/0x690
[  602.801944][T21444]  bpf_prog_alloc+0x3b/0x200
[  602.801956][T21444]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  602.801971][T21444]  bpf_prog_load+0x4a3/0x2b20
[  602.801985][T21444]  ? __pfx_bpf_prog_load+0x10/0x10
[  602.801995][T21444]  ? lock_acquire+0x1d1/0x380
[  602.802019][T21444]  __sys_bpf+0x146f/0x4b60
[  602.802033][T21444]  ? __pfx___sys_bpf+0x10/0x10
[  602.802043][T21444]  ? find_held_lock+0x2b/0x80
[  602.802058][T21444]  ? futex_wake+0x4ea/0x5e0
[  602.802078][T21444]  ? putname+0xb1/0x110
[  602.802091][T21444]  ? kmem_cache_free+0x127/0x6c0
[  602.802117][T21444]  ? lock_acquire+0x1d1/0x380
[  602.802127][T21444]  ? __might_fault+0xc5/0x140
[  602.802141][T21444]  ? find_held_lock+0x2b/0x80
[  602.802158][T21444]  ? __ia32_sys_bpf+0xcc/0x170
[  602.802169][T21444]  __ia32_sys_bpf+0xcc/0x170
[  602.802180][T21444]  ? __might_fault+0x111/0x140
[  602.802194][T21444]  __do_fast_syscall_32+0x14d/0x8e0
[  602.802208][T21444]  do_fast_syscall_32+0x32/0x70
[  602.802218][T21444]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  602.802231][T21444] RIP: 0023:0xf7f92fbc
[  602.802241][T21444] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  602.802251][T21444] RSP: 002b:00000000f542550c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  602.802262][T21444] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000280
[  602.802269][T21444] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000
[  602.802275][T21444] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  602.802281][T21444] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  602.802287][T21444] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  602.802300][T21444]  </TASK>
[  602.925302][ T6086] usb 11-1: USB disconnect, device number 38
[  603.644429][   T43] kauditd_printk_skb: 64 callbacks suppressed
[  603.644443][   T43] audit: type=1326 audit(2000000245.939:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21446 comm="syz.3.3662" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fbc code=0x7ffc0000
[  603.644567][   T43] audit: type=1326 audit(2000000245.939:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21446 comm="syz.3.3662" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fbc code=0x7ffc0000
[  603.645232][   T43] audit: type=1326 audit(2000000245.939:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21446 comm="syz.3.3662" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f92fbc code=0x7ffc0000
[  603.645261][   T43] audit: type=1326 audit(2000000245.939:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21446 comm="syz.3.3662" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fbc code=0x7ffc0000
[  603.645892][   T43] audit: type=1326 audit(2000000245.939:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21446 comm="syz.3.3662" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fbc code=0x7ffc0000
[  603.645918][   T43] audit: type=1326 audit(2000000245.939:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21446 comm="syz.3.3662" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f92fbc code=0x7ffc0000
[  603.646225][   T43] audit: type=1326 audit(2000000245.939:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21446 comm="syz.3.3662" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fbc code=0x7ffc0000
[  603.648350][   T43] audit: type=1326 audit(2000000245.939:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21446 comm="syz.3.3662" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fbc code=0x7ffc0000
[  603.699011][   T43] audit: type=1326 audit(2000000245.989:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21446 comm="syz.3.3662" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf719032b code=0x7ffc0000
[  603.699042][   T43] audit: type=1326 audit(2000000245.989:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21446 comm="syz.3.3662" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f92fbc code=0x7ffc0000
[  603.756258][T14327] usb 9-1: USB disconnect, device number 61
[  603.891772][T21455] Invalid ELF header magic: != ELF
[  603.914851][T21455] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3661'.
[  603.933399][T15592] usb 8-1: new high-speed USB device number 63 using dummy_hcd
[  604.084259][T15592] usb 8-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00
[  604.089061][T15592] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  604.089077][T15592] usb 8-1: Product: syz
[  604.089085][T15592] usb 8-1: Manufacturer: syz
[  604.089092][T15592] usb 8-1: SerialNumber: syz
[  604.096559][T15592] usb 8-1: USB2VGA dongle found at address 63
[  604.099339][T15592] usb 8-1: Allocated 8 output buffers
[  604.213389][ T6645] usb 10-1: new high-speed USB device number 48 using dummy_hcd
[  604.348309][T21448] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3662'.
[  604.363559][ T6645] usb 10-1: Using ep0 maxpacket: 32
[  604.364047][ T6645] usb 10-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  604.365022][ T6645] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  604.369026][ T6645] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  604.369042][ T6645] usb 10-1: Product: syz
[  604.369053][ T6645] usb 10-1: Manufacturer: syz
[  604.369064][ T6645] usb 10-1: SerialNumber: syz
[  604.370554][ T6645] usb 10-1: config 0 descriptor??
[  604.372543][T21453] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  604.379421][T15592] usb 8-1: Failed to early initialize device
[  604.395365][ T6645] hub 10-1:0.0: bad descriptor, ignoring hub
[  604.395387][ T6645] hub 10-1:0.0: probe with driver hub failed with error -5
[  604.399500][T15592] usb 8-1: USB disconnect, device number 63
[  604.781015][T21470] FAULT_INJECTION: forcing a failure.
[  604.781015][T21470] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  604.781046][T21470] CPU: 3 UID: 0 PID: 21470 Comm: syz.4.3669 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  604.781074][T21470] Tainted: [L]=SOFTLOCKUP
[  604.781082][T21470] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  604.781092][T21470] Call Trace:
[  604.781099][T21470]  <TASK>
[  604.781107][T21470]  dump_stack_lvl+0x100/0x190
[  604.781137][T21470]  should_fail_ex.cold+0x5/0xa
[  604.781164][T21470]  _copy_from_user+0x2e/0xd0
[  604.781193][T21470]  do_pagemap_scan+0x14b/0xdb0
[  604.781220][T21470]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  604.781243][T21470]  ? __pfx_do_pagemap_scan+0x10/0x10
[  604.781265][T21470]  ? do_vfs_ioctl+0x241/0x13f0
[  604.781285][T21470]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  604.781314][T21470]  ? __fget_files+0x21f/0x3d0
[  604.781341][T21470]  do_pagemap_cmd+0x58/0x80
[  604.781364][T21470]  ? __pfx_do_pagemap_cmd+0x10/0x10
[  604.781385][T21470]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  604.781407][T21470]  __do_fast_syscall_32+0x14d/0x8e0
[  604.781426][T21470]  ? lockdep_hardirqs_on+0x7d/0x110
[  604.781460][T21470]  do_fast_syscall_32+0x32/0x70
[  604.781478][T21470]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  604.781500][T21470] RIP: 0023:0xf7fc3fbc
[  604.781515][T21470] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  604.781531][T21470] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  604.781548][T21470] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0606610
[  604.781559][T21470] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000
[  604.781569][T21470] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  604.781579][T21470] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  604.781589][T21470] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  604.781613][T21470]  </TASK>
[  604.989285][T21480] Invalid ELF header magic: != ELF
[  605.013163][T21480] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3668'.
[  605.097325][T21485] netlink: 'syz.4.3675': attribute type 4 has an invalid length.
[  605.280138][T21453] FAULT_INJECTION: forcing a failure.
[  605.280138][T21453] name failslab, interval 1, probability 0, space 0, times 0
[  605.280157][T21453] CPU: 2 UID: 0 PID: 21453 Comm: syz.5.3663 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  605.280172][T21453] Tainted: [L]=SOFTLOCKUP
[  605.280176][T21453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  605.280182][T21453] Call Trace:
[  605.280186][T21453]  <TASK>
[  605.280191][T21453]  dump_stack_lvl+0x100/0x190
[  605.280212][T21453]  should_fail_ex.cold+0x5/0xa
[  605.280227][T21453]  should_failslab+0xc2/0x120
[  605.280241][T21453]  __kmalloc_noprof+0xfc/0x840
[  605.280253][T21453]  ? kobject_get_path+0xcf/0x2c0
[  605.280269][T21453]  kobject_get_path+0xcf/0x2c0
[  605.280282][T21453]  ? __pfx_gadget_unbind_driver+0x10/0x10
[  605.280300][T21453]  kobject_uevent_env+0x287/0x18b0
[  605.280316][T21453]  ? gadget_unbind_driver+0x371/0x4f0
[  605.280331][T21453]  ? __pfx_dummy_udc_async_callbacks+0x10/0x10
[  605.280344][T21453]  ? __pfx_gadget_unbind_driver+0x10/0x10
[  605.280360][T21453]  device_remove+0xcb/0x180
[  605.280377][T21453]  device_release_driver_internal+0x441/0x610
[  605.280391][T21453]  driver_detach+0xd8/0x1b0
[  605.280403][T21453]  bus_remove_driver+0x13b/0x2e0
[  605.280420][T21453]  driver_unregister+0x76/0xb0
[  605.280431][T21453]  usb_gadget_unregister_driver+0x49/0x70
[  605.280446][T21453]  raw_release+0x19b/0x260
[  605.280459][T21453]  ? __pfx_raw_release+0x10/0x10
[  605.280472][T21453]  __fput+0x3fb/0xb50
[  605.280489][T21453]  fput_close_sync+0x118/0x250
[  605.280507][T21453]  ? __pfx_fput_close_sync+0x10/0x10
[  605.280526][T21453]  filp_close_sync+0x75/0xa0
[  605.280542][T21453]  __ia32_sys_close+0x81/0x110
[  605.280559][T21453]  do_int80_emulation+0x16a/0x670
[  605.280571][T21453]  asm_int80_emulation+0x1a/0x20
[  605.280582][T21453] RIP: 0023:0xf715032b
[  605.280591][T21453] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  605.280602][T21453] RSP: 002b:00000000f53fd44c EFLAGS: 00000246 ORIG_RAX: 0000000000000006
[  605.280612][T21453] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[  605.280619][T21453] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  605.280625][T21453] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  605.280630][T21453] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  605.280637][T21453] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  605.280650][T21453]  </TASK>
[  605.358661][T21492] Invalid ELF header magic: != ELF
[  605.383549][ T1359] usb 10-1: USB disconnect, device number 48
[  605.384160][T21492] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3676'.
[  605.758857][T21497] FAULT_INJECTION: forcing a failure.
[  605.758857][T21497] name fail_futex, interval 1, probability 0, space 0, times 0
[  605.758879][T21497] CPU: 1 UID: 60929 PID: 21497 Comm: syz.6.3678 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  605.758893][T21497] Tainted: [L]=SOFTLOCKUP
[  605.758897][T21497] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  605.758904][T21497] Call Trace:
[  605.758908][T21497]  <TASK>
[  605.758913][T21497]  dump_stack_lvl+0x100/0x190
[  605.758933][T21497]  should_fail_ex.cold+0x5/0xa
[  605.758950][T21497]  get_futex_key+0x1c9/0x13e0
[  605.758968][T21497]  ? __pfx_get_futex_key+0x10/0x10
[  605.758986][T21497]  futex_wake+0xf4/0x5e0
[  605.759001][T21497]  ? __pfx_futex_wake+0x10/0x10
[  605.759016][T21497]  ? proc_id_connector+0x2ed/0x650
[  605.759031][T21497]  do_futex+0x2b2/0x440
[  605.759047][T21497]  ? __pfx_do_futex+0x10/0x10
[  605.759063][T21497]  ? find_held_lock+0x2b/0x80
[  605.759077][T21497]  ? setid_policy_lookup+0x10c/0x350
[  605.759092][T21497]  __ia32_sys_futex_time32+0x2f4/0x470
[  605.759106][T21497]  ? __pfx___ia32_sys_futex_time32+0x10/0x10
[  605.759124][T21497]  ? __might_fault+0xc5/0x140
[  605.759141][T21497]  __do_fast_syscall_32+0x14d/0x8e0
[  605.759154][T21497]  do_fast_syscall_32+0x32/0x70
[  605.759164][T21497]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  605.759177][T21497] RIP: 0023:0xf7ff8fbc
[  605.759186][T21497] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  605.759196][T21497] RSP: 002b:00000000f54a65cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0
[  605.759207][T21497] RAX: ffffffffffffffda RBX: 00000000f74b4f8c RCX: 0000000000000081
[  605.759214][T21497] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473
[  605.759220][T21497] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000
[  605.759227][T21497] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  605.759233][T21497] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  605.759247][T21497]  </TASK>
[  605.968785][T21505] jffs2: notice: (21505) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  606.023497][T21508] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3683'.
[  606.028169][T21508] syzkaller1: entered promiscuous mode
[  606.028184][T21508] syzkaller1: entered allmulticast mode
[  606.029475][T21508] FAULT_INJECTION: forcing a failure.
[  606.029475][T21508] name failslab, interval 1, probability 0, space 0, times 0
[  606.029492][T21508] CPU: 0 UID: 0 PID: 21508 Comm: syz.3.3683 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  606.029506][T21508] Tainted: [L]=SOFTLOCKUP
[  606.029510][T21508] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  606.029516][T21508] Call Trace:
[  606.029520][T21508]  <TASK>
[  606.029525][T21508]  dump_stack_lvl+0x100/0x190
[  606.029545][T21508]  should_fail_ex.cold+0x5/0xa
[  606.029560][T21508]  should_failslab+0xc2/0x120
[  606.029574][T21508]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  606.029586][T21508]  ? __alloc_skb+0x5b7/0x710
[  606.029602][T21508]  ? __alloc_skb+0x140/0x710
[  606.029619][T21508]  __alloc_skb+0x140/0x710
[  606.029634][T21508]  ? __alloc_skb+0x5b7/0x710
[  606.029649][T21508]  ? __pfx___alloc_skb+0x10/0x10
[  606.029669][T21508]  alloc_skb_with_frags+0xdb/0x750
[  606.029680][T21508]  ? __might_fault+0xc5/0x140
[  606.029693][T21508]  ? __might_fault+0xc5/0x140
[  606.029709][T21508]  sock_alloc_send_pskb+0x86a/0x9e0
[  606.029728][T21508]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  606.029745][T21508]  ? lock_acquire+0x1d1/0x380
[  606.029771][T21508]  ? aa_file_perm+0x197/0x14d0
[  606.029783][T21508]  ? iov_iter_advance+0xac/0x6c0
[  606.029801][T21508]  tun_get_user+0x7ce/0x3f30
[  606.029819][T21508]  ? __lock_acquire+0x5c0/0x1f40
[  606.029830][T21508]  ? __pfx_tun_get_user+0x10/0x10
[  606.029843][T21508]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  606.029862][T21508]  ? find_held_lock+0x2b/0x80
[  606.029877][T21508]  ? tun_get+0x191/0x370
[  606.029887][T21508]  ? tun_get+0x191/0x370
[  606.029902][T21508]  tun_chr_write_iter+0xdc/0x200
[  606.029915][T21508]  vfs_write+0x6af/0x1040
[  606.029927][T21508]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  606.029941][T21508]  ? __pfx_vfs_write+0x10/0x10
[  606.029952][T21508]  ? find_held_lock+0x2b/0x80
[  606.029975][T21508]  ksys_write+0x12a/0x250
[  606.029987][T21508]  ? __pfx_ksys_write+0x10/0x10
[  606.030002][T21508]  __do_fast_syscall_32+0x14d/0x8e0
[  606.030013][T21508]  ? lockdep_hardirqs_on+0x7d/0x110
[  606.030030][T21508]  do_fast_syscall_32+0x32/0x70
[  606.030040][T21508]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  606.030053][T21508] RIP: 0023:0xf7f92fbc
[  606.030062][T21508] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  606.030073][T21508] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  606.030084][T21508] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000
[  606.030091][T21508] RDX: 000000000000003f RSI: 0000000000000000 RDI: 0000000000000000
[  606.030097][T21508] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  606.030103][T21508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  606.030110][T21508] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  606.030123][T21508]  </TASK>
[  606.361009][T21524] Invalid ELF header magic: != ELF
[  606.383453][T21524] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3687'.
[  606.731009][T21541] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3695'.
[  606.731031][T21541] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  606.776119][T21543] FAULT_INJECTION: forcing a failure.
[  606.776119][T21543] name failslab, interval 1, probability 0, space 0, times 0
[  606.776140][T21543] CPU: 2 UID: 0 PID: 21543 Comm: syz.6.3696 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  606.776155][T21543] Tainted: [L]=SOFTLOCKUP
[  606.776159][T21543] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  606.776165][T21543] Call Trace:
[  606.776169][T21543]  <TASK>
[  606.776174][T21543]  dump_stack_lvl+0x100/0x190
[  606.776194][T21543]  should_fail_ex.cold+0x5/0xa
[  606.776210][T21543]  should_failslab+0xc2/0x120
[  606.776224][T21543]  kmem_cache_alloc_noprof+0x92/0x6a0
[  606.776236][T21543]  ? __lock_acquire+0x5c0/0x1f40
[  606.776247][T21543]  ? ptlock_alloc+0x1f/0x70
[  606.776263][T21543]  ptlock_alloc+0x1f/0x70
[  606.776276][T21543]  pte_alloc_one+0x82/0x3d0
[  606.776293][T21543]  do_fault+0x960/0x1890
[  606.776304][T21543]  ? __pfx___thp_vma_allowable_orders+0x10/0x10
[  606.776321][T21543]  ? __pfx_do_fault+0x10/0x10
[  606.776331][T21543]  ? pgd_none+0x9f/0xe0
[  606.776344][T21543]  ? __pfx_pgd_none+0x10/0x10
[  606.776357][T21543]  ? find_held_lock+0x2b/0x80
[  606.776373][T21543]  __handle_mm_fault+0x1858/0x2f40
[  606.776390][T21543]  ? __pfx___handle_mm_fault+0x10/0x10
[  606.776403][T21543]  ? __pfx_mt_find+0x10/0x10
[  606.776423][T21543]  ? find_vma+0xbf/0x140
[  606.776432][T21543]  ? __pfx_find_vma+0x10/0x10
[  606.776443][T21543]  handle_mm_fault+0x363/0xa30
[  606.776460][T21543]  do_user_addr_fault+0x745/0x12f0
[  606.776479][T21543]  exc_page_fault+0x6f/0xd0
[  606.776495][T21543]  asm_exc_page_fault+0x26/0x30
[  606.776506][T21543] RIP: 0010:_copy_from_user+0x93/0xd0
[  606.776524][T21543] Code: 68 d4 fc 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 99 ce 4d fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 <f3> a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 b5 62
[  606.776534][T21543] RSP: 0018:ffffc90006abfc30 EFLAGS: 00050246
[  606.776544][T21543] RAX: 0000000000000001 RBX: 00000000800000c0 RCX: 0000000000000008
[  606.776550][T21543] RDX: 0000000000000001 RSI: 00000000800000c0 RDI: ffffc90006abfc90
[  606.776557][T21543] RBP: 0000000000000008 R08: 0000000000000001 R09: fffff52000d57f92
[  606.776563][T21543] R10: ffffc90006abfc97 R11: 0000000000000001 R12: 0000000000000000
[  606.776569][T21543] R13: ffffc90006abfc90 R14: ffffc90006abfda0 R15: 00000000ffffffea
[  606.776584][T21543]  sock_copy_user_timeval+0x3ba/0x400
[  606.776603][T21543]  ? __pfx_sock_copy_user_timeval+0x10/0x10
[  606.776622][T21543]  ? __local_bh_enable_ip+0xa5/0x120
[  606.776636][T21543]  vsock_connectible_setsockopt+0x6c3/0xa50
[  606.776653][T21543]  ? __pfx_vsock_connectible_setsockopt+0x10/0x10
[  606.776670][T21543]  ? find_held_lock+0x2b/0x80
[  606.776688][T21543]  ? __pfx_vsock_connectible_setsockopt+0x10/0x10
[  606.776706][T21543]  do_sock_setsockopt+0xf3/0x1d0
[  606.776719][T21543]  __sys_setsockopt+0x119/0x190
[  606.776738][T21543]  __ia32_sys_setsockopt+0xbc/0x160
[  606.776754][T21543]  ? __might_fault+0x111/0x140
[  606.776767][T21543]  __do_fast_syscall_32+0x14d/0x8e0
[  606.776777][T21543]  ? lockdep_hardirqs_on+0x7d/0x110
[  606.776794][T21543]  do_fast_syscall_32+0x32/0x70
[  606.776834][T21543]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  606.776855][T21543] RIP: 0023:0xf7ff8fbc
[  606.776866][T21543] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  606.776876][T21543] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e
[  606.776885][T21543] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000028
[  606.776892][T21543] RDX: 0000000000000006 RSI: 00000000800000c0 RDI: 0000000000000010
[  606.776898][T21543] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  606.776904][T21543] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  606.776910][T21543] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  606.776924][T21543]  </TASK>
[  606.904656][T21555] netlink: 'syz.6.3698': attribute type 2 has an invalid length.
[  606.904669][T21555] netlink: 228 bytes leftover after parsing attributes in process `syz.6.3698'.
[  607.426869][T21568] FAULT_INJECTION: forcing a failure.
[  607.426869][T21568] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  607.426890][T21568] CPU: 3 UID: 0 PID: 21568 Comm: syz.3.3703 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  607.426905][T21568] Tainted: [L]=SOFTLOCKUP
[  607.426909][T21568] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  607.426915][T21568] Call Trace:
[  607.426919][T21568]  <TASK>
[  607.426923][T21568]  dump_stack_lvl+0x100/0x190
[  607.426944][T21568]  should_fail_ex.cold+0x5/0xa
[  607.426960][T21568]  _copy_from_iter+0x1f4/0x16c0
[  607.426978][T21568]  ? __asan_memset+0x23/0x50
[  607.426990][T21568]  ? __pfx__copy_from_iter+0x10/0x10
[  607.427006][T21568]  ? __pfx___alloc_skb+0x10/0x10
[  607.427028][T21568]  netlink_sendmsg+0x8f5/0x10c0
[  607.427041][T21568]  ? __pfx_netlink_sendmsg+0x10/0x10
[  607.427055][T21568]  ? apparmor_socket_sendmsg+0x165/0x280
[  607.427072][T21568]  ? ____sys_sendmsg+0xa13/0xb90
[  607.427084][T21568]  ____sys_sendmsg+0xa13/0xb90
[  607.427095][T21568]  ? __pfx_netlink_sendmsg+0x10/0x10
[  607.427107][T21568]  ? __pfx_____sys_sendmsg+0x10/0x10
[  607.427126][T21568]  ___sys_sendmsg+0x208/0x270
[  607.427140][T21568]  ? __pfx____sys_sendmsg+0x10/0x10
[  607.427160][T21568]  ? find_held_lock+0x2b/0x80
[  607.427183][T21568]  __sys_sendmsg+0x160/0x210
[  607.427200][T21568]  ? __pfx___sys_sendmsg+0x10/0x10
[  607.427224][T21568]  __do_fast_syscall_32+0x14d/0x8e0
[  607.427235][T21568]  ? lockdep_hardirqs_on+0x7d/0x110
[  607.427252][T21568]  do_fast_syscall_32+0x32/0x70
[  607.427262][T21568]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  607.427275][T21568] RIP: 0023:0xf7f92fbc
[  607.427284][T21568] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  607.427307][T21568] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  607.427318][T21568] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000640
[  607.427325][T21568] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  607.427331][T21568] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  607.427337][T21568] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  607.427343][T21568] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  607.427356][T21568]  </TASK>
[  607.443767][T14587] usb 10-1: new high-speed USB device number 49 using dummy_hcd
[  607.603810][T14587] usb 10-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00
[  607.604697][T14587] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  607.604722][T14587] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  607.770865][ T6645] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  607.865265][T14587] qmi_wwan 10-1:1.0: probe with driver qmi_wwan failed with error -71
[  607.871888][T14587] usb 10-1: USB disconnect, device number 49
[  608.013843][ T6645] usb 9-1: new high-speed USB device number 62 using dummy_hcd
[  608.023705][T14004] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  608.143415][ T6645] usb 9-1: device descriptor read/64, error -71
[  608.303500][ T5580] usb 8-1: new high-speed USB device number 64 using dummy_hcd
[  608.383380][ T6645] usb 9-1: new high-speed USB device number 63 using dummy_hcd
[  608.453362][ T5580] usb 8-1: Using ep0 maxpacket: 8
[  608.454745][T21589] futex_wake_op: syz.5.3710 tries to shift op by 144; fix this program
[  608.455730][ T5580] usb 8-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  608.456536][ T5580] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  608.456550][ T5580] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  608.456567][ T5580] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  608.456587][ T5580] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  608.460474][ T5580] usbtmc 8-1:16.0: bulk endpoints not found
[  608.486814][T18979] IPVS: starting estimator thread 0...
[  608.513677][ T6645] usb 9-1: device descriptor read/64, error -71
[  608.533820][T14587] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  608.573406][T21591] IPVS: using max 45 ests per chain, 108000 per kthread
[  608.623869][ T6645] usb usb9-port1: attempt power cycle
[  608.823578][T21577] ceph: No mds server is up or the cluster is laggy
[  608.963457][ T6645] usb 9-1: new high-speed USB device number 64 using dummy_hcd
[  608.984234][ T6645] usb 9-1: device descriptor read/8, error -71
[  609.114362][T14004] usb 10-1: new high-speed USB device number 50 using dummy_hcd
[  609.226407][ T6645] usb 9-1: new high-speed USB device number 65 using dummy_hcd
[  609.244140][ T6645] usb 9-1: device descriptor read/8, error -71
[  609.263500][T14004] usb 10-1: Using ep0 maxpacket: 32
[  609.263965][T14004] usb 10-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  609.264809][T14004] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  609.266409][T14004] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  609.266422][T14004] usb 10-1: Product: syz
[  609.266429][T14004] usb 10-1: Manufacturer: syz
[  609.266436][T14004] usb 10-1: SerialNumber: syz
[  609.267602][T14004] usb 10-1: config 0 descriptor??
[  609.268066][T21597] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  609.269349][T14004] hub 10-1:0.0: bad descriptor, ignoring hub
[  609.269362][T14004] hub 10-1:0.0: probe with driver hub failed with error -5
[  609.353983][ T6645] usb usb9-port1: unable to enumerate USB device
[  609.475945][T21597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  609.476273][T21597] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  609.946188][ T6086] usb 10-1: USB disconnect, device number 50
[  610.768290][T21613] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x50000
[  610.768322][T21613] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  610.768337][T21613] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff)
[  610.768356][T21613] page_type: f5(slab)
[  610.768372][T21613] raw: 04fff00000000040 ffff88801d443040 dead000000000122 0000000000000000
[  610.768388][T21613] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  610.768405][T21613] head: 04fff00000000040 ffff88801d443040 dead000000000122 0000000000000000
[  610.768421][T21613] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  610.768438][T21613] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  610.768514][T21613] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  610.768527][T21613] page dumped because: unmovable page
[  610.768536][T21613] page_owner tracks the page as allocated
[  610.768543][T21613] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 18979, tgid 18979 (kworker/u33:31), ts 610553643116
[  610.768575][T21613]  post_alloc_hook+0xfd/0x120
[  610.768604][T21613]  get_page_from_freelist+0xdae/0x2c80
[  610.768630][T21613]  __alloc_frozen_pages_noprof+0x2ad/0x31e0
[  610.768657][T21613]  new_slab+0xb1/0x6d0
[  610.768679][T21613]  refill_objects+0xe3/0x410
[  610.768704][T21613]  __pcs_replace_empty_main+0x35e/0x650
[  610.768730][T21613]  __kmalloc_node_track_caller_noprof+0x6a3/0x870
[  610.768749][T21613]  kmalloc_reserve+0xe8/0x350
[  610.768770][T21613]  __alloc_skb+0x185/0x710
[  610.768815][T21613]  nsim_dev_trap_report_work+0x2af/0xd20
[  610.768836][T21613]  process_one_work+0xac7/0x1b10
[  610.768852][T21613]  worker_thread+0x5ef/0xe50
[  610.768867][T21613]  kthread+0x373/0x450
[  610.768882][T21613]  ret_from_fork+0x730/0xd60
[  610.768894][T21613]  ret_from_fork_asm+0x1a/0x30
[  610.768907][T21613] page last free pid 20157 tgid 20157 ts 574574143669 stack trace:
[  610.768915][T21613]  __free_frozen_pages+0x7b1/0x10f0
[  610.768928][T21613]  qlist_free_all+0x47/0xf0
[  610.768938][T21613]  kasan_quarantine_reduce+0x1a0/0x1f0
[  610.768948][T21613]  __kasan_slab_alloc+0x69/0x90
[  610.768964][T21613]  __kvmalloc_node_noprof+0x2f6/0x9b0
[  610.768974][T21613]  do_replace_table+0x1c5/0x750
[  610.768989][T21613]  xt_replace_table+0x2e/0x130
[  610.769003][T21613]  __do_replace+0x1cf/0x980
[  610.769014][T21613]  compat_do_replace+0x31e/0x500
[  610.769023][T21613]  do_ipt_set_ctl+0x2cb/0xbc0
[  610.769033][T21613]  nf_setsockopt+0x8d/0xf0
[  610.769045][T21613]  ip_setsockopt+0xcb/0xf0
[  610.769054][T21613]  tcp_setsockopt+0xa7/0x100
[  610.769064][T21613]  do_sock_setsockopt+0xf3/0x1d0
[  610.769075][T21613]  __sys_setsockopt+0x119/0x190
[  610.769088][T21613]  __ia32_compat_sys_socketcall+0x556/0x770
[  610.842285][T21622] i2c i2c-1: new_device: Can't parse I2C address
[  610.940409][T21634] FAULT_INJECTION: forcing a failure.
[  610.940409][T21634] name failslab, interval 1, probability 0, space 0, times 0
[  610.940430][T21634] CPU: 3 UID: 0 PID: 21634 Comm: syz.5.3728 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  610.940444][T21634] Tainted: [L]=SOFTLOCKUP
[  610.940448][T21634] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  610.940454][T21634] Call Trace:
[  610.940459][T21634]  <TASK>
[  610.940463][T21634]  dump_stack_lvl+0x100/0x190
[  610.940483][T21634]  should_fail_ex.cold+0x5/0xa
[  610.940499][T21634]  should_failslab+0xc2/0x120
[  610.940513][T21634]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  610.940526][T21634]  ? __alloc_skb+0x140/0x710
[  610.940544][T21634]  __alloc_skb+0x140/0x710
[  610.940559][T21634]  ? __alloc_skb+0x5b7/0x710
[  610.940575][T21634]  ? __pfx___alloc_skb+0x10/0x10
[  610.940590][T21634]  ? lock_acquire+0x1d1/0x380
[  610.940602][T21634]  ? is_bpf_text_address+0x25/0x1a0
[  610.940619][T21634]  _sctp_make_chunk+0x51/0x270
[  610.940633][T21634]  sctp_make_heartbeat+0xad/0x2f0
[  610.940647][T21634]  ? __pfx_sctp_make_heartbeat+0x10/0x10
[  610.940660][T21634]  ? kernel_text_address+0x8d/0x100
[  610.940679][T21634]  ? sctp_sm_lookup_event+0x10e/0x520
[  610.940692][T21634]  ? __pfx_sctp_sm_lookup_event+0x10/0x10
[  610.940705][T21634]  ? __pfx_sctp_pname+0x10/0x10
[  610.940717][T21634]  sctp_sf_do_prm_requestheartbeat+0x27/0x220
[  610.940735][T21634]  ? __pfx_sctp_pname+0x10/0x10
[  610.940747][T21634]  sctp_do_sm+0x17a/0x5c30
[  610.940763][T21634]  ? __pfx_sctp_do_sm+0x10/0x10
[  610.940773][T21634]  ? kasan_save_track+0x14/0x30
[  610.940806][T21634]  ? __kmalloc_node_track_caller_noprof+0x33d/0x870
[  610.940823][T21634]  ? sctp_setsockopt+0x511/0xb370
[  610.940837][T21634]  ? do_sock_setsockopt+0xf3/0x1d0
[  610.940849][T21634]  ? __sys_setsockopt+0x119/0x190
[  610.940869][T21634]  ? __ia32_sys_setsockopt+0xbc/0x160
[  610.940897][T21634]  ? find_held_lock+0x2b/0x80
[  610.940924][T21634]  ? sctp_endpoint_lookup_assoc+0x15c/0x2a0
[  610.940941][T21634]  ? sctp_endpoint_lookup_assoc+0x15c/0x2a0
[  610.940959][T21634]  sctp_primitive_REQUESTHEARTBEAT+0x9f/0xd0
[  610.940974][T21634]  sctp_apply_peer_addr_params+0x110/0x3690
[  610.940992][T21634]  sctp_setsockopt+0x7477/0xb370
[  610.941006][T21634]  ? __pfx_sctp_setsockopt+0x10/0x10
[  610.941018][T21634]  ? aa_sock_opt_perm+0x114/0x1e0
[  610.941031][T21634]  ? sock_common_setsockopt+0x2e/0xf0
[  610.941043][T21634]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  610.941056][T21634]  do_sock_setsockopt+0xf3/0x1d0
[  610.941070][T21634]  __sys_setsockopt+0x119/0x190
[  610.941088][T21634]  __ia32_sys_setsockopt+0xbc/0x160
[  610.941104][T21634]  ? __might_fault+0x111/0x140
[  610.941120][T21634]  __do_fast_syscall_32+0x14d/0x8e0
[  610.941130][T21634]  ? lockdep_hardirqs_on+0x7d/0x110
[  610.941147][T21634]  do_fast_syscall_32+0x32/0x70
[  610.941158][T21634]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  610.941171][T21634] RIP: 0023:0xf700efbc
[  610.941180][T21634] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  610.941190][T21634] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e
[  610.941201][T21634] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084
[  610.941208][T21634] RDX: 0000000000000009 RSI: 0000000080000500 RDI: 000000000000009c
[  610.941214][T21634] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  610.941220][T21634] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  610.941226][T21634] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  610.941240][T21634]  </TASK>
[  610.973492][ T6086] usb 11-1: new high-speed USB device number 39 using dummy_hcd
[  611.064943][T21638] FAULT_INJECTION: forcing a failure.
[  611.064943][T21638] name failslab, interval 1, probability 0, space 0, times 0
[  611.064962][T21638] CPU: 1 UID: 0 PID: 21638 Comm: syz.5.3730 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  611.064976][T21638] Tainted: [L]=SOFTLOCKUP
[  611.064979][T21638] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  611.064985][T21638] Call Trace:
[  611.064990][T21638]  <TASK>
[  611.064994][T21638]  dump_stack_lvl+0x100/0x190
[  611.065014][T21638]  should_fail_ex.cold+0x5/0xa
[  611.065030][T21638]  should_failslab+0xc2/0x120
[  611.065044][T21638]  __kmalloc_node_track_caller_noprof+0xfa/0x870
[  611.065059][T21638]  ? kasprintf+0xc7/0x100
[  611.065072][T21638]  kvasprintf+0xbc/0x150
[  611.065082][T21638]  ? __pfx_kvasprintf+0x10/0x10
[  611.065094][T21638]  ? futex_unqueue+0x133/0x2c0
[  611.065110][T21638]  ? look_up_lock_class+0x55/0x120
[  611.065128][T21638]  kasprintf+0xc7/0x100
[  611.065138][T21638]  ? __pfx_kasprintf+0x10/0x10
[  611.065150][T21638]  ? __lock_acquire+0x5c0/0x1f40
[  611.065166][T21638]  logfc+0x11c/0x4e0
[  611.065181][T21638]  ? __pfx_logfc+0x10/0x10
[  611.065195][T21638]  ? __do_sys_fsconfig+0x4e1/0xcb0
[  611.065207][T21638]  ? rcu_is_watching+0x13/0xc0
[  611.065223][T21638]  ? trace_contention_end+0x126/0x160
[  611.065236][T21638]  ? __mutex_lock+0x267/0x1c10
[  611.065254][T21638]  orangefs_get_tree+0xe25/0x1090
[  611.065267][T21638]  ? hook_capable+0x1bc/0x500
[  611.065279][T21638]  ? __pfx___mutex_lock+0x10/0x10
[  611.065295][T21638]  ? __pfx_orangefs_get_tree+0x10/0x10
[  611.065306][T21638]  ? rcu_is_watching+0x13/0xc0
[  611.065321][T21638]  ? apparmor_capable+0x1d7/0x4d0
[  611.065336][T21638]  ? bpf_lsm_capable+0x9/0x10
[  611.065351][T21638]  vfs_get_tree+0x92/0x320
[  611.065374][T21638]  vfs_cmd_create+0xd7/0x2a0
[  611.065385][T21638]  __do_sys_fsconfig+0x55a/0xcb0
[  611.065397][T21638]  ? __pfx___do_sys_fsconfig+0x10/0x10
[  611.065415][T21638]  __do_fast_syscall_32+0x14d/0x8e0
[  611.065426][T21638]  ? lockdep_hardirqs_on+0x7d/0x110
[  611.065443][T21638]  do_fast_syscall_32+0x32/0x70
[  611.065454][T21638]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  611.065469][T21638] RIP: 0023:0xf700efbc
[  611.065478][T21638] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  611.065488][T21638] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 00000000000001af
[  611.065499][T21638] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000006
[  611.065505][T21638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  611.065511][T21638] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  611.065517][T21638] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  611.065523][T21638] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  611.065537][T21638]  </TASK>
[  611.069441][T15777] usb 8-1: USB disconnect, device number 64
[  611.139578][ T6086] usb 11-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00
[  611.140038][ T6086] usb 11-1: config 0 has no interfaces?
[  611.140054][ T6086] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  611.142276][ T6086] usb 11-1: config 0 descriptor??
[  611.154372][ T1359] usb 9-1: new high-speed USB device number 66 using dummy_hcd
[  611.313346][ T1359] usb 9-1: Using ep0 maxpacket: 32
[  611.313806][ T1359] usb 9-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  611.314615][ T1359] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  611.316136][ T1359] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  611.316148][ T1359] usb 9-1: Product: syz
[  611.316155][ T1359] usb 9-1: Manufacturer: syz
[  611.316162][ T1359] usb 9-1: SerialNumber: syz
[  611.317622][ T1359] usb 9-1: config 0 descriptor??
[  611.318088][T21630] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  611.319784][ T1359] hub 9-1:0.0: bad descriptor, ignoring hub
[  611.319796][ T1359] hub 9-1:0.0: probe with driver hub failed with error -5
[  611.360729][T21649] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3734'.
[  611.360775][T21649] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3734'.
[  611.376037][T21615] XFS (nullb0): Invalid superblock magic number
[  611.401332][T21615] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3719'.
[  611.402095][T21615] input: syz1 as /devices/virtual/input/input17
[  611.433256][ T6645] usb 11-1: USB disconnect, device number 39
[  611.528616][T21630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  611.528893][T21630] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  611.721496][T21663] Invalid ELF header magic: != ELF
[  611.730446][T21663] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3736'.
[  612.110810][T21671] jffs2: notice: (21671) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  612.200592][T21674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3739'.
[  612.660970][T21686] Invalid ELF header magic: != ELF
[  612.671376][T21686] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3749'.
[  612.841925][T21685] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x50000
[  612.841945][T21685] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  612.841954][T21685] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff)
[  612.841966][T21685] page_type: f5(slab)
[  612.841976][T21685] raw: 04fff00000000040 ffff88801d443040 dead000000000122 0000000000000000
[  612.841987][T21685] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  612.841996][T21685] head: 04fff00000000040 ffff88801d443040 dead000000000122 0000000000000000
[  612.842006][T21685] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  612.842016][T21685] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  612.842026][T21685] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  612.842032][T21685] page dumped because: unmovable page
[  612.842038][T21685] page_owner tracks the page as allocated
[  612.842042][T21685] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 18976, tgid 18976 (kworker/u33:28), ts 612014556394
[  612.842062][T21685]  post_alloc_hook+0xfd/0x120
[  612.842079][T21685]  get_page_from_freelist+0xdae/0x2c80
[  612.842094][T21685]  __alloc_frozen_pages_noprof+0x2ad/0x31e0
[  612.842110][T21685]  new_slab+0xb1/0x6d0
[  612.842125][T21685]  refill_objects+0xe3/0x410
[  612.842140][T21685]  __pcs_replace_empty_main+0x35e/0x650
[  612.842155][T21685]  __kmalloc_node_track_caller_noprof+0x6a3/0x870
[  612.842166][T21685]  kmalloc_reserve+0xe8/0x350
[  612.842179][T21685]  __alloc_skb+0x185/0x710
[  612.842192][T21685]  nsim_dev_trap_report_work+0x2af/0xd20
[  612.842207][T21685]  process_one_work+0xac7/0x1b10
[  612.842222][T21685]  worker_thread+0x5ef/0xe50
[  612.842235][T21685]  kthread+0x373/0x450
[  612.842248][T21685]  ret_from_fork+0x730/0xd60
[  612.842259][T21685]  ret_from_fork_asm+0x1a/0x30
[  612.842270][T21685] page last free pid 21667 tgid 21667 ts 611970387713 stack trace:
[  612.842278][T21685]  __free_frozen_pages+0x7b1/0x10f0
[  612.842290][T21685]  qlist_free_all+0x47/0xf0
[  612.842300][T21685]  kasan_quarantine_reduce+0x1a0/0x1f0
[  612.842310][T21685]  __kasan_slab_alloc+0x69/0x90
[  612.842323][T21685]  __kmalloc_noprof+0x2cc/0x840
[  612.842332][T21685]  tomoyo_encode2+0xfb/0x3c0
[  612.842342][T21685]  tomoyo_encode+0x29/0x50
[  612.842350][T21685]  tomoyo_path_perm+0x3a7/0x460
[  612.842364][T21685]  tomoyo_path_symlink+0x97/0xe0
[  612.842374][T21685]  security_path_symlink+0x152/0x2d0
[  612.842388][T21685]  filename_symlinkat+0x122/0x5a0
[  612.842403][T21685]  __ia32_sys_symlinkat+0x9b/0xe0
[  612.842416][T21685]  __do_fast_syscall_32+0x14d/0x8e0
[  612.842426][T21685]  do_fast_syscall_32+0x32/0x70
[  612.842435][T21685]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  613.368712][T21697] FAULT_INJECTION: forcing a failure.
[  613.368712][T21697] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  613.368732][T21697] CPU: 3 UID: 0 PID: 21697 Comm: syz.6.3744 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  613.368747][T21697] Tainted: [L]=SOFTLOCKUP
[  613.368751][T21697] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  613.368757][T21697] Call Trace:
[  613.368761][T21697]  <TASK>
[  613.368766][T21697]  dump_stack_lvl+0x100/0x190
[  613.368806][T21697]  should_fail_ex.cold+0x5/0xa
[  613.368822][T21697]  _copy_from_iter+0x1f4/0x16c0
[  613.368841][T21697]  ? __asan_memset+0x23/0x50
[  613.368852][T21697]  ? __pfx__copy_from_iter+0x10/0x10
[  613.368868][T21697]  ? __pfx___alloc_skb+0x10/0x10
[  613.368890][T21697]  netlink_sendmsg+0x8f5/0x10c0
[  613.368903][T21697]  ? __pfx_netlink_sendmsg+0x10/0x10
[  613.368917][T21697]  ? apparmor_socket_sendmsg+0x165/0x280
[  613.368933][T21697]  ? ____sys_sendmsg+0xa13/0xb90
[  613.368945][T21697]  ____sys_sendmsg+0xa13/0xb90
[  613.368957][T21697]  ? __pfx_netlink_sendmsg+0x10/0x10
[  613.368968][T21697]  ? __pfx_____sys_sendmsg+0x10/0x10
[  613.368987][T21697]  ___sys_sendmsg+0x208/0x270
[  613.369007][T21697]  ? __pfx____sys_sendmsg+0x10/0x10
[  613.369027][T21697]  ? find_held_lock+0x2b/0x80
[  613.369051][T21697]  __sys_sendmsg+0x160/0x210
[  613.369068][T21697]  ? __pfx___sys_sendmsg+0x10/0x10
[  613.369091][T21697]  __do_fast_syscall_32+0x14d/0x8e0
[  613.369102][T21697]  ? lockdep_hardirqs_on+0x7d/0x110
[  613.369119][T21697]  do_fast_syscall_32+0x32/0x70
[  613.369129][T21697]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  613.369143][T21697] RIP: 0023:0xf7ff8fbc
[  613.369152][T21697] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  613.369163][T21697] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  613.369174][T21697] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000200
[  613.369180][T21697] RDX: 00000000040c0080 RSI: 0000000000000000 RDI: 0000000000000000
[  613.369187][T21697] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  613.369193][T21697] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  613.369200][T21697] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  613.369213][T21697]  </TASK>
[  613.391580][T21698] netlink: 'syz.5.3745': attribute type 1 has an invalid length.
[  613.411539][T21698] bond0: option mode: invalid value (8)
[  613.453810][T21698] bond0 (unregistering): Released all slaves
[  613.501586][T21704] netlink: 'syz.5.3745': attribute type 10 has an invalid length.
[  613.501600][T21704] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3745'.
[  613.518680][T21693] bridge0: port 2(bridge_slave_1) entered disabled state
[  613.519022][T21693] bridge0: port 1(bridge_slave_0) entered disabled state
[  613.557857][T21693] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  613.564320][T21693] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  613.621376][T21693] mac80211_hwsim hwsim117 wlan1: left promiscuous mode
[  613.630428][T21704] dummy0: entered promiscuous mode
[  613.643622][ T5837] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  613.643646][ T5837] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  613.643663][ T5837] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  613.643679][ T5837] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  613.674681][T21712] FAULT_INJECTION: forcing a failure.
[  613.674681][T21712] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  613.674700][T21712] CPU: 2 UID: 0 PID: 21712 Comm: syz.5.3750 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  613.674714][T21712] Tainted: [L]=SOFTLOCKUP
[  613.674718][T21712] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  613.674724][T21712] Call Trace:
[  613.674728][T21712]  <TASK>
[  613.674733][T21712]  dump_stack_lvl+0x100/0x190
[  613.674753][T21712]  should_fail_ex.cold+0x5/0xa
[  613.674769][T21712]  _copy_from_user+0x2e/0xd0
[  613.674787][T21712]  bpf_test_init.isra.0+0xaf/0x100
[  613.674804][T21712]  bpf_prog_test_run_skb+0x48e/0x3560
[  613.674823][T21712]  ? lock_acquire+0x1d1/0x380
[  613.674834][T21712]  ? __fget_files+0x34/0x3d0
[  613.674847][T21712]  ? find_held_lock+0x2b/0x80
[  613.674862][T21712]  ? __fget_files+0x1f1/0x3d0
[  613.674878][T21712]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  613.674896][T21712]  ? fput+0x7c/0x100
[  613.674911][T21712]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  613.674928][T21712]  __sys_bpf+0x1d13/0x4b60
[  613.674948][T21712]  ? __pfx___sys_bpf+0x10/0x10
[  613.674958][T21712]  ? lock_acquire+0x1d1/0x380
[  613.674969][T21712]  ? get_pid_task+0x2a/0x250
[  613.674982][T21712]  ? find_held_lock+0x2b/0x80
[  613.674997][T21712]  ? get_pid_task+0xfc/0x250
[  613.675010][T21712]  ? get_pid_task+0xfc/0x250
[  613.675027][T21712]  ? proc_fail_nth_write+0x9f/0x220
[  613.675041][T21712]  ? find_held_lock+0x2b/0x80
[  613.675059][T21712]  ? rcu_read_lock_any_held+0x6a/0x90
[  613.675075][T21712]  ? find_held_lock+0x2b/0x80
[  613.675089][T21712]  ? ksys_write+0x190/0x250
[  613.675100][T21712]  ? ksys_write+0x190/0x250
[  613.675119][T21712]  ? lock_acquire+0x1d1/0x380
[  613.675130][T21712]  ? __might_fault+0xc5/0x140
[  613.675144][T21712]  ? find_held_lock+0x2b/0x80
[  613.675174][T21712]  ? __ia32_sys_bpf+0xcc/0x170
[  613.675185][T21712]  __ia32_sys_bpf+0xcc/0x170
[  613.675198][T21712]  ? __might_fault+0x111/0x140
[  613.675212][T21712]  __do_fast_syscall_32+0x14d/0x8e0
[  613.675223][T21712]  ? lockdep_hardirqs_on+0x7d/0x110
[  613.675239][T21712]  do_fast_syscall_32+0x32/0x70
[  613.675250][T21712]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  613.675263][T21712] RIP: 0023:0xf700efbc
[  613.675272][T21712] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  613.675282][T21712] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  613.675293][T21712] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000840
[  613.675299][T21712] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000
[  613.675306][T21712] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  613.675312][T21712] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  613.675318][T21712] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  613.675331][T21712]  </TASK>
[  613.732756][T21718] IPv6: NLM_F_CREATE should be specified when creating new route
[  613.963439][T14327] usb 10-1: new high-speed USB device number 51 using dummy_hcd
[  614.023637][T21723] Invalid ELF header magic: != ELF
[  614.057043][T21723] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3754'.
[  614.152320][T14327] usb 10-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=1.00
[  614.154926][T14327] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  614.155103][T14327] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  614.158583][T14327] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  614.158633][T14327] usb 10-1: Product: syz
[  614.158678][T14327] usb 10-1: Manufacturer: syz
[  614.158725][T14327] usb 10-1: SerialNumber: syz
[  614.233671][T14327] chaoskey 10-1:1.0: Unable to register with hwrng
[  614.636458][T21728] MINIX-fs: blocksize too small for device
[  614.765903][T21732] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x50012
[  614.765922][T21732] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff)
[  614.765932][T21732] page_type: f5(slab)
[  614.765942][T21732] raw: 04fff00000000000 ffff88801eeffb80 dead000000000122 0000000000000000
[  614.765953][T21732] raw: 0000000000000000 0000000200110011 00000000f5000000 0000000000000000
[  614.765959][T21732] page dumped because: unmovable page
[  614.765964][T21732] page_owner tracks the page as allocated
[  614.765970][T21732] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 20213, tgid 20213 (syz-executor), ts 548583315711
[  614.765988][T21732]  post_alloc_hook+0xfd/0x120
[  614.766006][T21732]  get_page_from_freelist+0xdae/0x2c80
[  614.766020][T21732]  __alloc_frozen_pages_noprof+0x2ad/0x31e0
[  614.766035][T21732]  new_slab+0xb1/0x6d0
[  614.766049][T21732]  refill_objects+0xe3/0x410
[  614.766064][T21732]  __pcs_replace_empty_main+0x35e/0x650
[  614.766079][T21732]  kmem_cache_alloc_noprof+0x4bf/0x6a0
[  614.766089][T21732]  __kernfs_new_node+0xd2/0xa10
[  614.766105][T21732]  kernfs_new_node+0x194/0x200
[  614.766113][T21732]  __kernfs_create_file+0x53/0x350
[  614.766125][T21732]  sysfs_add_file_mode_ns+0x207/0x3c0
[  614.766138][T21732]  internal_create_group+0x593/0xfb0
[  614.766152][T21732]  internal_create_groups+0x9d/0x150
[  614.766166][T21732]  ib_setup_port_attrs+0x41f/0x600
[  614.766177][T21732]  add_one_compat_dev+0x5ae/0x820
[  614.766190][T21732]  rdma_dev_init_net+0x305/0x580
[  614.766202][T21732] page last free pid 20157 tgid 20157 ts 548257845156 stack trace:
[  614.766209][T21732]  __free_frozen_pages+0x7b1/0x10f0
[  614.766222][T21732]  qlist_free_all+0x47/0xf0
[  614.766232][T21732]  kasan_quarantine_reduce+0x1a0/0x1f0
[  614.766242][T21732]  __kasan_slab_alloc+0x69/0x90
[  614.766254][T21732]  kmem_cache_alloc_node_noprof+0x282/0x6e0
[  614.766264][T21732]  kmalloc_reserve+0x148/0x350
[  614.766277][T21732]  __alloc_skb+0x185/0x710
[  614.766290][T21732]  mpls_netconf_notify_devconf+0x4a/0x100
[  614.766306][T21732]  mpls_dev_notify+0x6ce/0x920
[  614.766321][T21732]  notifier_call_chain+0x99/0x3f0
[  614.766334][T21732]  call_netdevice_notifiers_info+0xbe/0x110
[  614.766346][T21732]  unregister_netdevice_many_notify+0xe9a/0x1e40
[  614.766357][T21732]  unregister_netdevice_queue+0x30b/0x3c0
[  614.766368][T21732]  nsim_destroy+0x23e/0x970
[  614.766381][T21732]  __nsim_dev_port_del+0x194/0x2b0
[  614.766394][T21732]  nsim_dev_reload_destroy+0x10a/0x490
[  614.912505][T21739] bridge0: port 3(netdevsim0) entered blocking state
[  614.915016][T21739] bridge0: port 3(netdevsim0) entered disabled state
[  614.920647][T21739] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  614.963977][T21739] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  615.420712][T15777] usb 9-1: USB disconnect, device number 66
[  615.422722][ T5892] usb 10-1: USB disconnect, device number 51
[  615.696508][T21755] Invalid ELF header magic: != ELF
[  615.707023][T21755] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3763'.
[  616.131124][T21776] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3768'.
[  616.153438][T21766] FAULT_INJECTION: forcing a failure.
[  616.153438][T21766] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  616.153469][T21766] CPU: 0 UID: 0 PID: 21766 Comm: syz.4.3767 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  616.153485][T21766] Tainted: [L]=SOFTLOCKUP
[  616.153489][T21766] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  616.153495][T21766] Call Trace:
[  616.153500][T21766]  <TASK>
[  616.153504][T21766]  dump_stack_lvl+0x100/0x190
[  616.153525][T21766]  should_fail_ex.cold+0x5/0xa
[  616.153541][T21766]  save_fsave_header+0x14c/0x310
[  616.153557][T21766]  ? clockevents_program_event+0x1ef/0x820
[  616.153574][T21766]  ? __pfx_save_fsave_header+0x10/0x10
[  616.153596][T21766]  ? copy_fpstate_to_sigframe+0x2b8/0xb60
[  616.153608][T21766]  ? __local_bh_enable_ip+0xa5/0x120
[  616.153621][T21766]  copy_fpstate_to_sigframe+0x799/0xb60
[  616.153634][T21766]  ? __pfx_copy_fpstate_to_sigframe+0x10/0x10
[  616.153647][T21766]  ? posixtimer_deliver_signal+0x1a0/0x6e0
[  616.153664][T21766]  ? x86_task_fpu+0x5f/0x90
[  616.153680][T21766]  get_sigframe+0x3fb/0x940
[  616.153699][T21766]  ? __pfx_get_sigframe+0x10/0x10
[  616.153714][T21766]  ? rcu_is_watching+0x13/0xc0
[  616.153729][T21766]  ? _raw_spin_unlock_irq+0x23/0x50
[  616.153745][T21766]  ? get_signal+0x173/0x22e0
[  616.153758][T21766]  ia32_setup_rt_frame+0xe7/0xaf0
[  616.153774][T21766]  ? __pfx_ia32_setup_rt_frame+0x10/0x10
[  616.153790][T21766]  arch_do_signal_or_restart+0x459/0x7a0
[  616.153808][T21766]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  616.153828][T21766]  ? fput+0x7c/0x100
[  616.153846][T21766]  exit_to_user_mode_loop+0x139/0x700
[  616.153860][T21766]  ? rcu_is_watching+0x13/0xc0
[  616.153876][T21766]  do_int80_emulation+0x494/0x670
[  616.153888][T21766]  asm_int80_emulation+0x1a/0x20
[  616.153899][T21766] RIP: 0023:0xf71c032b
[  616.153908][T21766] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  616.153918][T21766] RSP: 002b:00000000f54764bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[  616.153929][T21766] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 00000000f54765c0
[  616.153936][T21766] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  616.153941][T21766] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  616.153947][T21766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  616.153954][T21766] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  616.153967][T21766]  </TASK>
[  616.390401][T21780] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3771'.
[  616.410311][T21780] ublk4: read batch cmd buffer failed
[  616.410364][T21780] ublk4: read batch cmd buffer failed
[  616.419507][T21783] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3772'.
[  616.422090][T21780] ublk4: read batch cmd buffer failed
[  616.422141][T21780] ublk4: read batch cmd buffer failed
[  616.423874][ T6086] usb 8-1: new high-speed USB device number 65 using dummy_hcd
[  616.433956][T21783] fscrypt (sda1, inode 1262): Unsupported encryption flags (0x08)
[  616.574397][ T6086] usb 8-1: New USB device found: idVendor=0582, idProduct=0582, bcdDevice=0.40
[  616.575783][ T6086] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  616.575818][ T6086] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  616.575831][ T6086] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  616.578524][ T6086] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  616.578537][ T6086] usb 8-1: Product: syz
[  616.578544][ T6086] usb 8-1: Manufacturer: syz
[  616.578551][ T6086] usb 8-1: SerialNumber: syz
[  616.589306][ T6086] usb 8-1: 1:1 : unsupported format bits 0x20000
[  616.826057][ T6086] usb 8-1: USB disconnect, device number 65
[  616.847600][T10825] udevd[10825]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  617.143793][T21801] Invalid ELF header magic: != ELF
[  617.164048][T21801] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3778'.
[  617.475373][T21806] Invalid ELF header magic: != ELF
[  617.489803][T21806] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3780'.
[  617.680027][T21811] FAULT_INJECTION: forcing a failure.
[  617.680027][T21811] name failslab, interval 1, probability 0, space 0, times 0
[  617.680053][T21811] CPU: 2 UID: 0 PID: 21811 Comm: syz.5.3781 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  617.680068][T21811] Tainted: [L]=SOFTLOCKUP
[  617.680072][T21811] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  617.680078][T21811] Call Trace:
[  617.680082][T21811]  <TASK>
[  617.680087][T21811]  dump_stack_lvl+0x100/0x190
[  617.680107][T21811]  should_fail_ex.cold+0x5/0xa
[  617.680123][T21811]  should_failslab+0xc2/0x120
[  617.680137][T21811]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  617.680150][T21811]  ? alloc_vmap_area+0x643/0x2bc0
[  617.680163][T21811]  alloc_vmap_area+0x643/0x2bc0
[  617.680179][T21811]  ? kasan_save_track+0x14/0x30
[  617.680191][T21811]  ? __kasan_kmalloc+0xaa/0xb0
[  617.680203][T21811]  ? __pfx_alloc_vmap_area+0x10/0x10
[  617.680215][T21811]  ? __get_vm_area_node+0x124/0x350
[  617.680228][T21811]  __get_vm_area_node+0x1ed/0x350
[  617.680243][T21811]  __vmalloc_node_range_noprof+0x2ad/0x1440
[  617.680257][T21811]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  617.680270][T21811]  ? process_measurement+0x4c8/0x2360
[  617.680285][T21811]  ? process_measurement+0x4c8/0x2360
[  617.680300][T21811]  ? down_write+0x141/0x1f0
[  617.680312][T21811]  ? up_write+0x2dc/0x5b0
[  617.680324][T21811]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  617.680338][T21811]  ? process_measurement+0x1f4/0x2360
[  617.680355][T21811]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  617.680369][T21811]  ? __lock_acquire+0x5c0/0x1f40
[  617.680384][T21811]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  617.680399][T21811]  __vmalloc_node_noprof+0xad/0xf0
[  617.680412][T21811]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  617.680427][T21811]  __vmalloc_noprof+0xa3/0x120
[  617.680440][T21811]  ? __pfx___vmalloc_noprof+0x10/0x10
[  617.680452][T21811]  ? lock_acquire+0x1d1/0x380
[  617.680464][T21811]  ? rcu_is_watching+0x13/0xc0
[  617.680479][T21811]  ? apparmor_capable+0x1d7/0x4d0
[  617.680495][T21811]  bpf_prog_alloc_no_stats+0x58/0x690
[  617.680508][T21811]  ? security_capable+0x80/0x260
[  617.680522][T21811]  bpf_prog_alloc+0x3b/0x200
[  617.680534][T21811]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  617.680548][T21811]  bpf_prog_load+0x4a3/0x2b20
[  617.680562][T21811]  ? __pfx_bpf_prog_load+0x10/0x10
[  617.680584][T21811]  __sys_bpf+0x146f/0x4b60
[  617.680599][T21811]  ? __pfx___sys_bpf+0x10/0x10
[  617.680609][T21811]  ? lock_acquire+0x1d1/0x380
[  617.680619][T21811]  ? get_pid_task+0x2a/0x250
[  617.680634][T21811]  ? find_held_lock+0x2b/0x80
[  617.680648][T21811]  ? get_pid_task+0xfc/0x250
[  617.680661][T21811]  ? get_pid_task+0xfc/0x250
[  617.680677][T21811]  ? proc_fail_nth_write+0x9f/0x220
[  617.680692][T21811]  ? find_held_lock+0x2b/0x80
[  617.680710][T21811]  ? rcu_read_lock_any_held+0x6a/0x90
[  617.680726][T21811]  ? find_held_lock+0x2b/0x80
[  617.680740][T21811]  ? ksys_write+0x190/0x250
[  617.680772][T21811]  ? ksys_write+0x190/0x250
[  617.680793][T21811]  ? lock_acquire+0x1d1/0x380
[  617.680804][T21811]  ? __might_fault+0xc5/0x140
[  617.680818][T21811]  ? find_held_lock+0x2b/0x80
[  617.680834][T21811]  ? __ia32_sys_bpf+0xcc/0x170
[  617.680845][T21811]  __ia32_sys_bpf+0xcc/0x170
[  617.680857][T21811]  ? __might_fault+0x111/0x140
[  617.680871][T21811]  __do_fast_syscall_32+0x14d/0x8e0
[  617.680881][T21811]  ? lockdep_hardirqs_on+0x7d/0x110
[  617.680901][T21811]  do_fast_syscall_32+0x32/0x70
[  617.680912][T21811]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  617.680925][T21811] RIP: 0023:0xf700efbc
[  617.680935][T21811] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  617.680945][T21811] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  617.680956][T21811] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0
[  617.680963][T21811] RDX: 0000000000000070 RSI: 0000000000000000 RDI: 0000000000000000
[  617.680969][T21811] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  617.680975][T21811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  617.680981][T21811] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  617.680994][T21811]  </TASK>
[  617.681006][T21811] syz.5.3781: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  617.681039][T21811] CPU: 2 UID: 0 PID: 21811 Comm: syz.5.3781 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  617.681052][T21811] Tainted: [L]=SOFTLOCKUP
[  617.681056][T21811] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  617.681062][T21811] Call Trace:
[  617.681065][T21811]  <TASK>
[  617.681069][T21811]  dump_stack_lvl+0x100/0x190
[  617.681086][T21811]  warn_alloc.cold+0x9e/0xb2
[  617.681098][T21811]  ? __pfx_warn_alloc+0x10/0x10
[  617.681114][T21811]  ? lockdep_hardirqs_on+0x7d/0x110
[  617.681130][T21811]  ? __get_vm_area_node+0x2f0/0x350
[  617.681145][T21811]  ? __get_vm_area_node+0x22b/0x350
[  617.681160][T21811]  __vmalloc_node_range_noprof+0xdc6/0x1440
[  617.681174][T21811]  ? process_measurement+0x4c8/0x2360
[  617.681189][T21811]  ? process_measurement+0x4c8/0x2360
[  617.681203][T21811]  ? down_write+0x141/0x1f0
[  617.681215][T21811]  ? up_write+0x2dc/0x5b0
[  617.681227][T21811]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  617.681241][T21811]  ? process_measurement+0x1f4/0x2360
[  617.681258][T21811]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  617.681272][T21811]  ? __lock_acquire+0x5c0/0x1f40
[  617.681286][T21811]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  617.681300][T21811]  __vmalloc_node_noprof+0xad/0xf0
[  617.681312][T21811]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  617.681327][T21811]  __vmalloc_noprof+0xa3/0x120
[  617.681340][T21811]  ? __pfx___vmalloc_noprof+0x10/0x10
[  617.681353][T21811]  ? lock_acquire+0x1d1/0x380
[  617.681364][T21811]  ? rcu_is_watching+0x13/0xc0
[  617.681379][T21811]  ? apparmor_capable+0x1d7/0x4d0
[  617.681394][T21811]  bpf_prog_alloc_no_stats+0x58/0x690
[  617.681407][T21811]  ? security_capable+0x80/0x260
[  617.681420][T21811]  bpf_prog_alloc+0x3b/0x200
[  617.681433][T21811]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  617.681446][T21811]  bpf_prog_load+0x4a3/0x2b20
[  617.681460][T21811]  ? __pfx_bpf_prog_load+0x10/0x10
[  617.681494][T21811]  __sys_bpf+0x146f/0x4b60
[  617.681511][T21811]  ? __pfx___sys_bpf+0x10/0x10
[  617.681520][T21811]  ? lock_acquire+0x1d1/0x380
[  617.681531][T21811]  ? get_pid_task+0x2a/0x250
[  617.681545][T21811]  ? find_held_lock+0x2b/0x80
[  617.681559][T21811]  ? get_pid_task+0xfc/0x250
[  617.681571][T21811]  ? get_pid_task+0xfc/0x250
[  617.681588][T21811]  ? proc_fail_nth_write+0x9f/0x220
[  617.681602][T21811]  ? find_held_lock+0x2b/0x80
[  617.681620][T21811]  ? rcu_read_lock_any_held+0x6a/0x90
[  617.681635][T21811]  ? find_held_lock+0x2b/0x80
[  617.681649][T21811]  ? ksys_write+0x190/0x250
[  617.681660][T21811]  ? ksys_write+0x190/0x250
[  617.681679][T21811]  ? lock_acquire+0x1d1/0x380
[  617.681690][T21811]  ? __might_fault+0xc5/0x140
[  617.681703][T21811]  ? find_held_lock+0x2b/0x80
[  617.681720][T21811]  ? __ia32_sys_bpf+0xcc/0x170
[  617.681731][T21811]  __ia32_sys_bpf+0xcc/0x170
[  617.681742][T21811]  ? __might_fault+0x111/0x140
[  617.681756][T21811]  __do_fast_syscall_32+0x14d/0x8e0
[  617.681766][T21811]  ? lockdep_hardirqs_on+0x7d/0x110
[  617.681783][T21811]  do_fast_syscall_32+0x32/0x70
[  617.681793][T21811]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  617.681806][T21811] RIP: 0023:0xf700efbc
[  617.681814][T21811] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  617.681823][T21811] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  617.681833][T21811] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0
[  617.681839][T21811] RDX: 0000000000000070 RSI: 0000000000000000 RDI: 0000000000000000
[  617.681845][T21811] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  617.681851][T21811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  617.681857][T21811] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  617.681870][T21811]  </TASK>
[  617.681887][T21811] Mem-Info:
[  617.681897][T21811] active_anon:6332 inactive_anon:1025 isolated_anon:0
[  617.681897][T21811]  active_file:917 inactive_file:9813 isolated_file:0
[  617.681897][T21811]  unevictable:1000 dirty:92 writeback:0
[  617.681897][T21811]  slab_reclaimable:7283 slab_unreclaimable:79697
[  617.681897][T21811]  mapped:30400 shmem:6741 pagetables:1581
[  617.681897][T21811]  sec_pagetables:371 bounce:0
[  617.681897][T21811]  kernel_misc_reclaimable:0
[  617.681897][T21811]  free:26820 free_pcp:7781 free_cma:0
[  617.681921][T21811] Node 0 active_anon:1836kB inactive_anon:44kB active_file:128kB inactive_file:6016kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:2664kB dirty:0kB writeback:0kB shmem:3832kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8160kB pagetables:1160kB sec_pagetables:1152kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  617.681947][T21811] Node 1 active_anon:23492kB inactive_anon:4056kB active_file:3540kB inactive_file:33236kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:118936kB dirty:368kB writeback:0kB shmem:23132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8928kB pagetables:5164kB sec_pagetables:332kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  617.681972][T21811] Node 0 DMA free:2452kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:36kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:448kB local_pcp:32kB free_cma:0kB
[  617.681998][T21811] lowmem_reserve[]: 0 256 256 256 256
[  617.682015][T21811] Node 0 DMA32 free:16552kB boost:25960kB min:37500kB low:40384kB high:43268kB reserved_highatomic:0kB free_highatomic:0kB active_anon:1836kB inactive_anon:44kB active_file:128kB inactive_file:6016kB unevictable:2000kB writepending:0kB zspages:3028kB present:1032196kB managed:262244kB mlocked:0kB bounce:0kB free_pcp:2144kB local_pcp:40kB free_cma:0kB
[  617.682051][T21811] lowmem_reserve[]: 0 0 0 0 0
[  617.682067][T21811] Node 1 DMA32 free:88276kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23392kB inactive_anon:4056kB active_file:3540kB inactive_file:33236kB unevictable:2000kB writepending:368kB zspages:5260kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:28568kB local_pcp:8932kB free_cma:0kB
[  617.682094][T21811] lowmem_reserve[]: 0 0 0 0 0
[  617.682110][T21811] Node 0 DMA: 179*4kB (UE) 25*8kB (UE) 6*16kB (UE) 5*32kB (UE) 14*64kB (UE) 3*128kB (E) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2452kB
[  617.682173][T21811] Node 0 DMA32: 334*4kB (UM) 238*8kB (UE) 54*16kB (UE) 91*32kB (UME) 63*64kB (UME) 13*128kB (UME) 13*256kB (UME) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 16552kB
[  617.682240][T21811] Node 1 DMA32: 1355*4kB (UM) 653*8kB (UME) 787*16kB (UME) 263*32kB (UME) 152*64kB (UME) 98*128kB (UME) 66*256kB (UM) 34*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 88228kB
[  617.682308][T21811] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  617.682316][T21811] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  617.682323][T21811] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  617.682331][T21811] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  617.682339][T21811] 18732 total pagecache pages
[  617.682342][T21811] 1260 pages in swap cache
[  617.682346][T21811] Free swap  = 92464kB
[  617.682350][T21811] Total swap = 124996kB
[  617.682354][T21811] 524155 pages RAM
[  617.682357][T21811] 0 pages HighMem/MovableOnly
[  617.682361][T21811] 217702 pages reserved
[  617.682364][T21811] 0 pages cma reserved
[  618.056471][T21827] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3787'.
[  618.059882][T21827] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3787'.
[  618.186119][ T5802] Bluetooth: hci0: command 0x0c24 tx timeout
[  618.202129][T21831] Invalid ELF header magic: != ELF
[  618.221407][T21831] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3785'.
[  618.934292][T21840] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3687100835 (7374201670 ns) > initial count (4634846402 ns). Using initial count to start timer.
[  618.969038][T21843] jffs2: notice: (21843) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  619.521057][T21856] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3791'.
[  619.944591][T21856] ublk5: read batch cmd buffer failed
[  619.944645][T21856] ublk5: read batch cmd buffer failed
[  619.951513][T21856] ublk5: read batch cmd buffer failed
[  619.951565][T21856] ublk5: read batch cmd buffer failed
[  620.265248][ T5796] Bluetooth: hci0: command 0x0c24 tx timeout
[  620.389464][T21877] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3802'.
[  620.410613][T21878] Invalid ELF header magic: != ELF
[  620.438049][T21878] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3797'.
[  620.686912][T21885] FAULT_INJECTION: forcing a failure.
[  620.686912][T21885] name fail_futex, interval 1, probability 0, space 0, times 0
[  620.686934][T21885] CPU: 2 UID: 0 PID: 21885 Comm: syz.6.3803 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  620.686950][T21885] Tainted: [L]=SOFTLOCKUP
[  620.686954][T21885] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  620.686960][T21885] Call Trace:
[  620.686965][T21885]  <TASK>
[  620.686969][T21885]  dump_stack_lvl+0x100/0x190
[  620.686990][T21885]  should_fail_ex.cold+0x5/0xa
[  620.687012][T21885]  get_futex_key+0x1c9/0x13e0
[  620.687028][T21885]  ? __pfx_get_futex_key+0x10/0x10
[  620.687046][T21885]  futex_lock_pi+0x1eb/0x7e0
[  620.687059][T21885]  ? __pfx_futex_lock_pi+0x10/0x10
[  620.687071][T21885]  ? __pfx___futex_wait+0x10/0x10
[  620.687093][T21885]  ? __pfx_futex_wake_mark+0x10/0x10
[  620.687108][T21885]  ? up_write+0x2dc/0x5b0
[  620.687124][T21885]  do_futex+0x371/0x440
[  620.687139][T21885]  ? __pfx_do_futex+0x10/0x10
[  620.687158][T21885]  __ia32_sys_futex_time32+0x2f4/0x470
[  620.687170][T21885]  ? __pfx___ia32_sys_futex_time32+0x10/0x10
[  620.687187][T21885]  ? __might_fault+0xc5/0x140
[  620.687204][T21885]  __do_fast_syscall_32+0x14d/0x8e0
[  620.687217][T21885]  do_fast_syscall_32+0x32/0x70
[  620.687227][T21885]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  620.687240][T21885] RIP: 0023:0xf7ff8fbc
[  620.687249][T21885] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  620.687259][T21885] RSP: 002b:00000000f546450c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0
[  620.687270][T21885] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000000018d
[  620.687276][T21885] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  620.687282][T21885] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  620.687288][T21885] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  620.687293][T21885] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  620.687307][T21885]  </TASK>
[  621.277514][T21892] jffs2: notice: (21892) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  621.812597][T21891] ------------[ cut here ]------------
[  621.812608][T21891] current->flags & PF_MEMALLOC
[  621.812613][T21891] WARNING: mm/page_alloc.c:4824 at __alloc_frozen_pages_noprof+0x1e0b/0x31e0, CPU#0: syz.3.3805/21891
[  621.819552][T21891] Modules linked in:
[  621.820894][T21891] CPU: 0 UID: 0 PID: 21891 Comm: syz.3.3805 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  621.824330][T21891] Tainted: [L]=SOFTLOCKUP
[  621.825806][T21891] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  621.828939][T21891] RIP: 0010:__alloc_frozen_pages_noprof+0x1e0b/0x31e0
[  621.830978][T21891] Code: 38 d0 7c 08 84 d2 0f 85 56 13 00 00 65 48 8b 05 c3 bc 41 13 c7 84 24 a0 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 0d e7 ff ff 90 <0f> 0b 90 e9 04 e7 ff ff 90 0f 0b 90 e9 63 f8 ff ff 8b 84 24 a0 00
[  621.837008][T21891] RSP: 0000:ffffc900074fe428 EFLAGS: 00010202
[  621.838938][T21891] RAX: ffff888025a44b00 RBX: 0000000000000000 RCX: 1ffff1100fffad69
[  621.841423][T21891] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff888025a44b2c
[  621.844045][T21891] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000002dfa
[  621.846553][T21891] R10: ffff88807ffd7217 R11: 0000000000000001 R12: 0000000000000000
[  621.849008][T21891] R13: 0000000000000000 R14: ffffffff9cca6064 R15: 0000000000048c40
[  621.851450][T21891] FS:  0000000000000000(0000) GS:ffff888095275000(0063) knlGS:00000000f5446b40
[  621.854290][T21891] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  621.856343][T21891] CR2: 000000000c38dd79 CR3: 0000000050d05000 CR4: 0000000000352ef0
[  621.858799][T21891] Call Trace:
[  621.859852][T21891]  <TASK>
[  621.860796][T21891]  ? lru_gen_look_around+0x370/0x1240
[  621.862493][T21891]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  621.864645][T21891]  ? __lock_acquire+0x5c0/0x1f40
[  621.866208][T21891]  ? find_held_lock+0x2b/0x80
[  621.867683][T21891]  ? folio_referenced_one+0x121c/0x17d0
[  621.869406][T21891]  ? folio_referenced_one+0x121c/0x17d0
[  621.871124][T21891]  ? __lock_acquire+0x5c0/0x1f40
[  621.872703][T21891]  ? __lock_acquire+0x5c0/0x1f40
[  621.874312][T21891]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  621.876156][T21891]  ? policy_nodemask+0xed/0x5e0
[  621.877746][T21891]  alloc_pages_mpol+0x201/0x560
[  621.879283][T21891]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  621.880957][T21891]  ? filemap_get_entry+0x22d/0x450
[  621.882580][T21891]  ? filemap_get_entry+0x22d/0x450
[  621.884236][T21891]  folio_alloc_noprof+0x22/0x250
[  621.885812][T21891]  filemap_alloc_folio_noprof.part.0+0x3db/0x440
[  621.887779][T21891]  ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10
[  621.889955][T21891]  ? lock_acquire+0x1d1/0x380
[  621.891432][T21891]  ? ext4_get_group_info+0x177/0x4b0
[  621.893112][T21891]  ? find_held_lock+0x2b/0x80
[  621.894926][T21891]  __filemap_get_folio_mpol+0x64e/0x11d0
[  621.896688][T21891]  ext4_mb_load_buddy_gfp+0x708/0x1b20
[  621.898489][T21891]  ext4_discard_preallocations+0x584/0x10c0
[  621.900336][T21891]  ? __pfx_ext4_discard_preallocations+0x10/0x10
[  621.902481][T21891]  ? __pfx_xa_destroy+0x10/0x10
[  621.904069][T21891]  ? inode_wait_for_writeback+0x171/0x390
[  621.905872][T21891]  ? inode_lru_isolate+0x30/0x11c0
[  621.907486][T21891]  ext4_clear_inode+0x6e/0x280
[  621.908990][T21891]  ext4_evict_inode+0x1de/0x1840
[  621.910573][T21891]  ? evict+0x37e/0xb90
[  621.911875][T21891]  ? __pfx_ext4_evict_inode+0x10/0x10
[  621.913637][T21891]  evict+0x403/0xb90
[  621.914878][T21891]  ? _raw_spin_unlock+0x28/0x50
[  621.916409][T21891]  ? __list_lru_walk_one+0x26d/0x550
[  621.918067][T21891]  ? __pfx_evict+0x10/0x10
[  621.919478][T21891]  ? _raw_spin_unlock+0x28/0x50
[  621.921017][T21891]  ? dentry_kill+0x5d7/0xca0
[  621.922494][T21891]  dispose_list+0x117/0x1e0
[  621.924090][T21891]  prune_icache_sb+0xea/0x150
[  621.925698][T21891]  ? list_lru_count_one+0x147/0x320
[  621.927355][T21891]  ? __pfx_prune_icache_sb+0x10/0x10
[  621.929027][T21891]  super_cache_scan+0x37c/0x560
[  621.930565][T21891]  do_shrink_slab+0x411/0x1200
[  621.932079][T21891]  shrink_slab+0xa78/0x12d0
[  621.933569][T21891]  ? shrink_slab+0x68b/0x12d0
[  621.935041][T21891]  ? __pfx_shrink_slab+0x10/0x10
[  621.936711][T21891]  ? page_counter_calculate_protection+0x348/0x730
[  621.938733][T21891]  ? rcu_read_unlock+0x17/0x60
[  621.940184][T21891]  ? rcu_read_unlock+0x17/0x60
[  621.941712][T21891]  shrink_one+0x3d3/0x870
[  621.943072][T21891]  ? shrink_node+0x2a41/0x4410
[  621.944774][T21891]  shrink_node+0x2a61/0x4410
[  621.946243][T21891]  ? shrink_node+0x276d/0x4410
[  621.947748][T21891]  ? __pfx_shrink_node+0x10/0x10
[  621.949373][T21891]  ? queue_work_on+0x141/0x1e0
[  621.950884][T21891]  ? do_try_to_free_pages+0x2da/0x1500
[  621.952602][T21891]  do_try_to_free_pages+0x2da/0x1500
[  621.954369][T21891]  try_to_free_pages+0x2a0/0x740
[  621.955908][T21891]  ? __pfx_try_to_free_pages+0x10/0x10
[  621.957607][T21891]  ? find_held_lock+0x2b/0x80
[  621.959094][T21891]  ? fs_reclaim_acquire+0x70/0x100
[  621.960698][T21891]  ? fs_reclaim_acquire+0x70/0x100
[  621.962346][T21891]  __alloc_frozen_pages_noprof+0x1057/0x31e0
[  621.964307][T21891]  ? rcu_is_watching+0x13/0xc0
[  621.965828][T21891]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  621.967807][T21891]  ? __lock_acquire+0x5c0/0x1f40
[  621.969367][T21891]  ? __css_rstat_updated+0x1ce/0x590
[  621.971016][T21891]  ? irqentry_exit+0x202/0xab0
[  621.972548][T21891]  ? __pfx___css_rstat_updated+0x10/0x10
[  621.974403][T21891]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  621.976247][T21891]  ? policy_nodemask+0xed/0x5e0
[  621.977786][T21891]  alloc_pages_mpol+0x201/0x560
[  621.979304][T21891]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  621.981012][T21891]  ? find_held_lock+0x2b/0x80
[  621.982517][T21891]  ? rcu_read_unlock+0x17/0x60
[  621.984183][T21891]  ? rcu_read_unlock+0x17/0x60
[  621.985728][T21891]  alloc_pages_noprof+0x1a/0x160
[  621.987267][T21891]  __vmalloc_node_range_noprof+0xc61/0x1440
[  621.989104][T21891]  ? array_map_alloc+0x27e/0x750
[  621.990668][T21891]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  621.992717][T21891]  ? rcu_is_watching+0x13/0xc0
[  621.994290][T21891]  ? apparmor_capable+0x1d7/0x4d0
[  621.995884][T21891]  ? array_map_alloc+0x27e/0x750
[  621.997438][T21891]  __bpf_map_area_alloc+0x12e/0x200
[  621.999055][T21891]  ? array_map_alloc+0x27e/0x750
[  622.000606][T21891]  array_map_alloc+0x27e/0x750
[  622.002138][T21891]  map_create+0x874/0x3150
[  622.003600][T21891]  ? __lock_acquire+0x5c0/0x1f40
[  622.005113][T21891]  ? __pfx_map_create+0x10/0x10
[  622.006645][T21891]  ? lock_acquire+0x1d1/0x380
[  622.008117][T21891]  ? __might_fault+0xc5/0x140
[  622.009613][T21891]  ? __might_fault+0xc5/0x140
[  622.011096][T21891]  __sys_bpf+0x14cb/0x4b60
[  622.012529][T21891]  ? __pfx___sys_bpf+0x10/0x10
[  622.014101][T21891]  ? find_held_lock+0x2b/0x80
[  622.015576][T21891]  ? futex_wake+0x4ea/0x5e0
[  622.017018][T21891]  ? fput+0x7c/0x100
[  622.018258][T21891]  ? __sys_sendto+0x2a8/0x4e0
[  622.019738][T21891]  ? __pfx_packet_sendmsg+0x10/0x10
[  622.021445][T21891]  ? lock_acquire+0x1d1/0x380
[  622.022868][T21891]  ? __might_fault+0xc5/0x140
[  622.024418][T21891]  ? find_held_lock+0x2b/0x80
[  622.025917][T21891]  ? __ia32_sys_bpf+0xcc/0x170
[  622.027430][T21891]  __ia32_sys_bpf+0xcc/0x170
[  622.028878][T21891]  ? __might_fault+0x111/0x140
[  622.030324][T21891]  __do_fast_syscall_32+0x14d/0x8e0
[  622.032240][T21891]  do_fast_syscall_32+0x32/0x70
[  622.033858][T21891]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  622.036076][T21891] RIP: 0023:0xf7f92fbc
[  622.037401][T21891] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  622.043675][T21891] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  622.046279][T21891] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000000
[  622.048780][T21891] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000
[  622.051424][T21891] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  622.054074][T21891] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  622.056576][T21891] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  622.059163][T21891]  </TASK>
[  622.060203][T21891] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  622.062598][T21891] CPU: 0 UID: 0 PID: 21891 Comm: syz.3.3805 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  622.066186][T21891] Tainted: [L]=SOFTLOCKUP
[  622.067538][T21891] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  622.070760][T21891] Call Trace:
[  622.071828][T21891]  <TASK>
[  622.072778][T21891]  dump_stack_lvl+0x100/0x190
[  622.074357][T21891]  vpanic+0x2dc/0x6f8
[  622.075616][T21891]  panic+0xd1/0xe0
[  622.076808][T21891]  ? __pfx_panic+0x10/0x10
[  622.078204][T21891]  check_panic_on_warn.cold+0x19/0x34
[  622.079875][T21891]  ? __alloc_frozen_pages_noprof+0x1e0b/0x31e0
[  622.081811][T21891]  __warn.cold+0x191/0x321
[  622.083201][T21891]  __report_bug+0x30f/0x440
[  622.084641][T21891]  ? __alloc_frozen_pages_noprof+0x1e0b/0x31e0
[  622.086558][T21891]  ? __pfx___report_bug+0x10/0x10
[  622.088133][T21891]  ? __zone_watermark_ok+0x281/0x500
[  622.089726][T21891]  ? get_page_from_freelist+0x511/0x2c80
[  622.091458][T21891]  ? __pte_offset_map+0x9a/0x470
[  622.093035][T21891]  ? __alloc_frozen_pages_noprof+0x1e0b/0x31e0
[  622.094952][T21891]  report_bug+0xb3/0x220
[  622.096285][T21891]  ? __alloc_frozen_pages_noprof+0x1e0b/0x31e0
[  622.098205][T21891]  handle_bug+0x16a/0x2a0
[  622.099557][T21891]  exc_invalid_op+0x17/0x50
[  622.100988][T21891]  asm_exc_invalid_op+0x1a/0x20
[  622.102535][T21891] RIP: 0010:__alloc_frozen_pages_noprof+0x1e0b/0x31e0
[  622.104622][T21891] Code: 38 d0 7c 08 84 d2 0f 85 56 13 00 00 65 48 8b 05 c3 bc 41 13 c7 84 24 a0 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 0d e7 ff ff 90 <0f> 0b 90 e9 04 e7 ff ff 90 0f 0b 90 e9 63 f8 ff ff 8b 84 24 a0 00
[  622.110493][T21891] RSP: 0000:ffffc900074fe428 EFLAGS: 00010202
[  622.112405][T21891] RAX: ffff888025a44b00 RBX: 0000000000000000 RCX: 1ffff1100fffad69
[  622.114781][T21891] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff888025a44b2c
[  622.117271][T21891] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000002dfa
[  622.119697][T21891] R10: ffff88807ffd7217 R11: 0000000000000001 R12: 0000000000000000
[  622.122148][T21891] R13: 0000000000000000 R14: ffffffff9cca6064 R15: 0000000000048c40
[  622.124599][T21891]  ? __alloc_frozen_pages_noprof+0x2ad/0x31e0
[  622.126502][T21891]  ? lru_gen_look_around+0x370/0x1240
[  622.128167][T21891]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  622.130132][T21891]  ? __lock_acquire+0x5c0/0x1f40
[  622.131702][T21891]  ? find_held_lock+0x2b/0x80
[  622.133177][T21891]  ? folio_referenced_one+0x121c/0x17d0
[  622.134893][T21891]  ? folio_referenced_one+0x121c/0x17d0
[  622.136607][T21891]  ? __lock_acquire+0x5c0/0x1f40
[  622.138167][T21891]  ? __lock_acquire+0x5c0/0x1f40
[  622.139708][T21891]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  622.141558][T21891]  ? policy_nodemask+0xed/0x5e0
[  622.143089][T21891]  alloc_pages_mpol+0x201/0x560
[  622.144614][T21891]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  622.146279][T21891]  ? filemap_get_entry+0x22d/0x450
[  622.147863][T21891]  ? filemap_get_entry+0x22d/0x450
[  622.149455][T21891]  folio_alloc_noprof+0x22/0x250
[  622.150992][T21891]  filemap_alloc_folio_noprof.part.0+0x3db/0x440
[  622.152970][T21891]  ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10
[  622.155063][T21891]  ? lock_acquire+0x1d1/0x380
[  622.156528][T21891]  ? ext4_get_group_info+0x177/0x4b0
[  622.158169][T21891]  ? find_held_lock+0x2b/0x80
[  622.159637][T21891]  __filemap_get_folio_mpol+0x64e/0x11d0
[  622.161384][T21891]  ext4_mb_load_buddy_gfp+0x708/0x1b20
[  622.163148][T21891]  ext4_discard_preallocations+0x584/0x10c0
[  622.165065][T21891]  ? __pfx_ext4_discard_preallocations+0x10/0x10
[  622.167015][T21891]  ? __pfx_xa_destroy+0x10/0x10
[  622.168530][T21891]  ? inode_wait_for_writeback+0x171/0x390
[  622.170293][T21891]  ? inode_lru_isolate+0x30/0x11c0
[  622.171933][T21891]  ext4_clear_inode+0x6e/0x280
[  622.173521][T21891]  ext4_evict_inode+0x1de/0x1840
[  622.175055][T21891]  ? evict+0x37e/0xb90
[  622.176333][T21891]  ? __pfx_ext4_evict_inode+0x10/0x10
[  622.178016][T21891]  evict+0x403/0xb90
[  622.179248][T21891]  ? _raw_spin_unlock+0x28/0x50
[  622.180787][T21891]  ? __list_lru_walk_one+0x26d/0x550
[  622.182448][T21891]  ? __pfx_evict+0x10/0x10
[  622.183847][T21891]  ? _raw_spin_unlock+0x28/0x50
[  622.185385][T21891]  ? dentry_kill+0x5d7/0xca0
[  622.186833][T21891]  dispose_list+0x117/0x1e0
[  622.188261][T21891]  prune_icache_sb+0xea/0x150
[  622.189736][T21891]  ? list_lru_count_one+0x147/0x320
[  622.191346][T21891]  ? __pfx_prune_icache_sb+0x10/0x10
[  622.193014][T21891]  super_cache_scan+0x37c/0x560
[  622.194530][T21891]  do_shrink_slab+0x411/0x1200
[  622.196024][T21891]  shrink_slab+0xa78/0x12d0
[  622.197457][T21891]  ? shrink_slab+0x68b/0x12d0
[  622.198897][T21891]  ? __pfx_shrink_slab+0x10/0x10
[  622.200392][T21891]  ? page_counter_calculate_protection+0x348/0x730
[  622.202423][T21891]  ? rcu_read_unlock+0x17/0x60
[  622.203919][T21891]  ? rcu_read_unlock+0x17/0x60
[  622.205449][T21891]  shrink_one+0x3d3/0x870
[  622.206805][T21891]  ? shrink_node+0x2a41/0x4410
[  622.208301][T21891]  shrink_node+0x2a61/0x4410
[  622.209756][T21891]  ? shrink_node+0x276d/0x4410
[  622.211256][T21891]  ? __pfx_shrink_node+0x10/0x10
[  622.212824][T21891]  ? queue_work_on+0x141/0x1e0
[  622.214329][T21891]  ? do_try_to_free_pages+0x2da/0x1500
[  622.216020][T21891]  do_try_to_free_pages+0x2da/0x1500
[  622.217674][T21891]  try_to_free_pages+0x2a0/0x740
[  622.219216][T21891]  ? __pfx_try_to_free_pages+0x10/0x10
[  622.220935][T21891]  ? find_held_lock+0x2b/0x80
[  622.222471][T21891]  ? fs_reclaim_acquire+0x70/0x100
[  622.224097][T21891]  ? fs_reclaim_acquire+0x70/0x100
[  622.225711][T21891]  __alloc_frozen_pages_noprof+0x1057/0x31e0
[  622.227606][T21891]  ? rcu_is_watching+0x13/0xc0
[  622.229122][T21891]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  622.231091][T21891]  ? __lock_acquire+0x5c0/0x1f40
[  622.232654][T21891]  ? __css_rstat_updated+0x1ce/0x590
[  622.234301][T21891]  ? irqentry_exit+0x202/0xab0
[  622.235800][T21891]  ? __pfx___css_rstat_updated+0x10/0x10
[  622.237546][T21891]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  622.239379][T21891]  ? policy_nodemask+0xed/0x5e0
[  622.240920][T21891]  alloc_pages_mpol+0x201/0x560
[  622.242481][T21891]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  622.244145][T21891]  ? find_held_lock+0x2b/0x80
[  622.245638][T21891]  ? rcu_read_unlock+0x17/0x60
[  622.247136][T21891]  ? rcu_read_unlock+0x17/0x60
[  622.248644][T21891]  alloc_pages_noprof+0x1a/0x160
[  622.250206][T21891]  __vmalloc_node_range_noprof+0xc61/0x1440
[  622.252066][T21891]  ? array_map_alloc+0x27e/0x750
[  622.253633][T21891]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  622.255597][T21891]  ? rcu_is_watching+0x13/0xc0
[  622.257104][T21891]  ? apparmor_capable+0x1d7/0x4d0
[  622.258682][T21891]  ? array_map_alloc+0x27e/0x750
[  622.260226][T21891]  __bpf_map_area_alloc+0x12e/0x200
[  622.261871][T21891]  ? array_map_alloc+0x27e/0x750
[  622.263426][T21891]  array_map_alloc+0x27e/0x750
[  622.264990][T21891]  map_create+0x874/0x3150
[  622.266398][T21891]  ? __lock_acquire+0x5c0/0x1f40
[  622.267994][T21891]  ? __pfx_map_create+0x10/0x10
[  622.269536][T21891]  ? lock_acquire+0x1d1/0x380
[  622.270930][T21891]  ? __might_fault+0xc5/0x140
[  622.272323][T21891]  ? __might_fault+0xc5/0x140
[  622.273748][T21891]  __sys_bpf+0x14cb/0x4b60
[  622.275063][T21891]  ? __pfx___sys_bpf+0x10/0x10
[  622.276552][T21891]  ? find_held_lock+0x2b/0x80
[  622.278041][T21891]  ? futex_wake+0x4ea/0x5e0
[  622.279476][T21891]  ? fput+0x7c/0x100
[  622.280711][T21891]  ? __sys_sendto+0x2a8/0x4e0
[  622.282213][T21891]  ? __pfx_packet_sendmsg+0x10/0x10
[  622.283849][T21891]  ? lock_acquire+0x1d1/0x380
[  622.285340][T21891]  ? __might_fault+0xc5/0x140
[  622.286816][T21891]  ? find_held_lock+0x2b/0x80
[  622.288295][T21891]  ? __ia32_sys_bpf+0xcc/0x170
[  622.289797][T21891]  __ia32_sys_bpf+0xcc/0x170
[  622.291242][T21891]  ? __might_fault+0x111/0x140
[  622.292746][T21891]  __do_fast_syscall_32+0x14d/0x8e0
[  622.294369][T21891]  do_fast_syscall_32+0x32/0x70
[  622.295887][T21891]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  622.297852][T21891] RIP: 0023:0xf7f92fbc
[  622.299131][T21891] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  622.305083][T21891] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  622.307654][T21891] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000000
[  622.310089][T21891] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000
[  622.312532][T21891] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  622.314968][T21891] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  622.317415][T21891] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  622.319859][T21891]  </TASK>
[  622.321619][T21891] Kernel Offset: disabled
[  622.322974][T21891] Rebooting in 86400 seconds..