last executing test programs:

2m48.166652865s ago: executing program 3 (id=58):
epoll_create1(0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)
close(r0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r1 = syz_open_dev$vim2m(0x0, 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x2})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
connect$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
close(0xffffffffffffffff)
r2 = syz_io_uring_setup(0x2eff, &(0x7f0000000600)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_SENDMSG={0x9, 0x0, 0x21, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2}, 0x7, 0x44004, 0x1})
io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet(0x2b, 0x801, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r7, 0xffffffffffffffff, 0x100000000000000)

2m47.124971542s ago: executing program 3 (id=59):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x8001)
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000000)=0xe2)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r2=>0x0})
syz_socket_connect_nvme_tcp()
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r3=>0x0})
syz_open_dev$media(0x0, 0x4, 0x10000)
syz_open_dev$vbi(0x0, 0x2, 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r4 = socket(0x1e, 0x1, 0x0)
sendmmsg$sock(r4, &(0x7f0000000100)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4048040)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0386000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="8961cadce616ee957a2ae178ebf13b1158a9737d637e4f1686ad517e932a6dff987fb83f9fc5b303d602328a1a39babcd884d5428c7e5cace503b07f8c97b8f4275411c165443437ca42a79b973bef6f2d7108be01572758df0bd30bac43294ff5de0da0cf941f75c137cc32712282aeb45a8f757e29"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004)

2m45.902730351s ago: executing program 3 (id=63):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r2=>0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)='7\n', 0x2)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400000013000100000000000000000007000000", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)

2m45.545499602s ago: executing program 3 (id=64):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x64, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r1, 0x51b0b}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)

2m45.347329204s ago: executing program 3 (id=66):
mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0)
mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

2m45.084106188s ago: executing program 3 (id=68):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x1234, @local}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x3c, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0)
socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0)
ioctl$BLKZEROOUT(r3, 0x127f, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0xa0040, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r4, 0x80044dfe, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x221000, 0x1800}, 0x1c)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x29, 0xe0, 0x6, 0x8, 0x10, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7, 0x80, 0x7f}})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x201)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
connect$unix(0xffffffffffffffff, 0x0, 0x0)

2m29.551347975s ago: executing program 32 (id=68):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x1234, @local}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x3c, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0)
socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0)
ioctl$BLKZEROOUT(r3, 0x127f, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0xa0040, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r4, 0x80044dfe, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x221000, 0x1800}, 0x1c)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x29, 0xe0, 0x6, 0x8, 0x10, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7, 0x80, 0x7f}})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x201)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
connect$unix(0xffffffffffffffff, 0x0, 0x0)

10.21936735s ago: executing program 2 (id=607):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10001, 0x2)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00')
r2 = epoll_create1(0x0)
r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3)
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000000), 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002340)=@deltclass={0x8c4, 0x29, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x7, 0x7}, {0xe, 0x9}, {0xf, 0xffe0}}, [@tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_htb={{0x8}, {0x418, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0xe}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_CTAB={0x404, 0x3, [0x10, 0x4, 0x7, 0xee7, 0xb, 0xf93, 0x2, 0xefcf, 0x200, 0x0, 0x0, 0x7f, 0x2, 0x1, 0x0, 0x7, 0x6, 0x7f, 0x7, 0x1, 0x7, 0xfff, 0x5, 0x3, 0xfd, 0x9, 0x3, 0xfffffae4, 0x3, 0xfffffffc, 0x98, 0x1, 0x3, 0x220d, 0x4, 0xffffffff, 0x5, 0xcb, 0x7, 0x7ff, 0x2, 0x2, 0x14000, 0x5, 0x4, 0xe, 0x7f, 0x7, 0xb, 0x7fffffff, 0xea7, 0xfcee, 0x1, 0x264c, 0x9, 0x3, 0xd, 0xc, 0x5, 0x0, 0x8, 0x3, 0x1, 0x742, 0x2, 0x40, 0x3800000, 0x0, 0x96, 0x1, 0x6, 0x80000001, 0x7, 0x1, 0x6, 0x10001, 0x7, 0xff, 0xfffffff8, 0x6, 0x3, 0xfffff85f, 0x7, 0x5, 0x9, 0xb9, 0x6, 0x0, 0xffffff00, 0x0, 0x2, 0x2, 0x8, 0xffffff46, 0x3, 0x9, 0x1, 0x8000, 0x9, 0x7, 0x9, 0x4, 0x7f, 0x77, 0x1, 0x8, 0x1, 0x5, 0x1, 0xa5f, 0x7, 0x5, 0x7, 0x0, 0xff, 0x1, 0x7, 0x40, 0xfffff801, 0x101, 0x4, 0x1, 0x2, 0x40, 0x7, 0x6, 0x1, 0x0, 0x400, 0x4, 0x8, 0x0, 0x80000000, 0x1, 0x661, 0xc, 0x8, 0xa, 0x1, 0x9, 0x0, 0x3ff, 0x3, 0x0, 0xffffffff, 0x3, 0x4, 0x0, 0x4, 0x0, 0x0, 0x6, 0x552, 0x545, 0x400, 0x4, 0x8000, 0x80000001, 0x2, 0xa4ed, 0x10000, 0xff, 0x400, 0xfffffffa, 0xffff, 0x20000, 0x3, 0x1, 0x800, 0x7, 0x3, 0x4, 0x8001, 0x9, 0x4, 0x1, 0x7, 0x6, 0x2, 0xa, 0x2, 0x7fff, 0x1, 0x2af1, 0x7, 0x39091b8c, 0x6, 0x3, 0x401, 0x5, 0x7, 0x7, 0xffff, 0x8, 0x5, 0x2, 0x31, 0x10, 0x3, 0x3, 0x364, 0x937d, 0x3, 0x80000000, 0x0, 0x6, 0x5, 0x1, 0x6, 0x1, 0xa, 0x3b1, 0x7b, 0xd, 0x1, 0xa, 0x2, 0x1ff, 0x3, 0x4, 0x2, 0x5, 0x3ff, 0x5, 0x6, 0x0, 0x8e66, 0x35a2, 0x7, 0x5, 0x7, 0x8, 0x8001, 0xfffffffe, 0x400, 0x3, 0x6fd6, 0x801, 0x40000000, 0x7f, 0x9, 0x4, 0x6, 0xb1, 0x0, 0x4364, 0x2, 0x3, 0xbe81, 0xfffffffa, 0x81b, 0x2, 0x8, 0x2, 0x6, 0x8]}]}}, @tclass_kind_options=@c_htb={{0x8}, {0x448, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0xfffffffffffffff7}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RATE64={0xc, 0x6, 0x3ff}, @TCA_HTB_CEIL64={0xc}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RTAB={0x404, 0x4, [0xfffffff7, 0x86, 0x3, 0x45, 0x2, 0x0, 0x7, 0x6, 0x4, 0xd, 0x8, 0x4, 0x7, 0x4, 0x20000000, 0x4, 0x2, 0xb80, 0x3, 0x2, 0x7, 0xa6e, 0x6, 0x5, 0x3, 0x6, 0x6, 0x7b, 0x1, 0xc, 0x2, 0x3ff, 0x8, 0x8ad, 0x8, 0x5, 0x3, 0x4, 0x6, 0x80, 0x48, 0x1000, 0x2, 0x2, 0xff, 0x4, 0x401, 0x7f, 0x1ff, 0x8, 0x8, 0x6, 0x9ae8, 0x7ff, 0x7fffffff, 0x0, 0x80000001, 0x0, 0xf5b, 0x9, 0x8, 0x7ff, 0x100, 0x9, 0xe344, 0x3, 0xe5e85d8, 0x7, 0x7, 0x7ff, 0x2, 0x7, 0x3a5, 0x55c, 0x1, 0x5b4, 0x8, 0x200, 0xc000, 0x8001, 0x92c, 0x7, 0x7, 0x9, 0x4f25, 0x2, 0x7, 0x7, 0xff, 0x3, 0x8, 0x4, 0x2, 0xfa9d, 0x776, 0xa6e, 0x3, 0x4, 0x909, 0xab2, 0xd11, 0x1ff, 0x4, 0x7a6a0fcd, 0x3, 0x8, 0x8001, 0xff, 0x36, 0xa, 0x3, 0x7, 0x8, 0x8, 0xfd4, 0x4, 0x6, 0x400, 0x5, 0xffffffff, 0x1000, 0x9, 0x9, 0x8, 0x80000001, 0x3ff, 0x80, 0x101, 0xc, 0x6, 0x7, 0xffff8001, 0x0, 0x81, 0xf3, 0xfffffffb, 0xfffffff9, 0x9, 0x100, 0x10001, 0xfffffffa, 0x6, 0x1, 0x8, 0x5, 0x0, 0x10, 0x8, 0x7f, 0x296d, 0x2, 0x69d, 0x0, 0x80000000, 0x7c33acc2, 0xc, 0x6, 0x1000, 0x9, 0x6, 0xcba, 0xca, 0x9, 0xbd, 0x5, 0x6, 0x200, 0x78c, 0x8, 0xf65, 0x8, 0x2, 0x3, 0x4, 0x8, 0x3, 0x525, 0x9, 0xfffffffb, 0x8000, 0xc355, 0x2, 0x9, 0x8, 0x4, 0x3, 0x5, 0x7802c1f2, 0xfffffff5, 0x7, 0x3e6, 0x3, 0x5ed0, 0x8001, 0x5, 0x91, 0x8000000, 0x0, 0x200, 0x2, 0xb, 0x1, 0x4, 0x5, 0x6, 0x1000, 0x7fff, 0xcf7, 0x6, 0x1200000, 0xd1e5, 0x6, 0x1, 0x1000, 0x1, 0x1, 0x10, 0x20, 0x80000001, 0x9d42, 0x3, 0x2000, 0x3, 0x7b, 0xf, 0x1, 0x4, 0x9, 0x7, 0x8, 0x6, 0x7fffffff, 0x0, 0xbbc8, 0x6, 0xf, 0x4650, 0x5, 0x2, 0x9, 0x1, 0x1000, 0x1, 0x6, 0x5b, 0x401, 0xd55c, 0x5, 0x4, 0x0, 0x39c728e1, 0x6, 0x45e3, 0x8, 0xf, 0x3]}, @TCA_HTB_CEIL64={0xc, 0x7, 0xa}]}}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @tclass_kind_options=@c_clsact={0xb}]}, 0x8c4}}, 0x4000)
write$binfmt_script(r3, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040))
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100000})

9.920415892s ago: executing program 2 (id=608):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x34d403)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
r2 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001})
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x2c00c014)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
unshare(0x22020400)
r7 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r8 = dup(r6)
write$UHID_INPUT(r8, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000340)=@x86={0x1, 0x3, 0x6, 0x0, 0x8, 0x7, 0x6, 0x0, 0x4, 0x9, 0x8, 0x9, 0x0, 0x7, 0x401, 0xa, 0x1, 0x40, 0x10, '\x00', 0x4d, 0x55})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003a00)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x0, @loopback, 0xa}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="200000002900000032008000fe80643213f30000000000000e0000000000000000"], 0x20}}], 0x1, 0x1000)
epoll_pwait(r2, &(0x7f00000000c0)=[{}, {}], 0x2, 0xfe, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="440000001000010404000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="38410000440b00002400128009000100626f6e640000000014000280050001000100000008000200", @ANYBLOB="f7"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x109842, 0x0)
r10 = epoll_create1(0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r9, 0x40045010, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000000)={0x10000001})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x64)

8.991121898s ago: executing program 1 (id=610):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a40)={0x0, 0x40000, 0x80, 0x1, 0x5e2}, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x9644b47b80ffb045, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket(0x1, 0x803, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7, 0x96603)
r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0xf1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r2, @ANYRES8=r2], 0x7c}}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f00000000c0)={0x2, 0x0, [{0x491, 0x0, 0x8}, {0x9ff, 0x0, 0x7}]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x22600, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e643000000000000000000000004411ca6d6f059934008bdd4836a638b55e9ca22cdf2dd94aea1559a1685d846e0bfc93438f5b8c7903ab6c61f1d8442d653b966736a68413ff958e4812253c217b00103565638c6e691bd7784341ece0e2804d342fe726a005673ff11a812bf7bfee3108582f408f10df8bed499c60afc45ef5fc9998f59b8dc6ec369b8646ae5782db320b02693b493d5de88367e71502f79d22c84a49657255d84f6b967e74acf70637700ff4eba99e13c92c65d7e4012698030d"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
syz_io_uring_setup(0x795f, &(0x7f0000000300)={0x0, 0x800069ea, 0x3000, 0x0, 0x8000d}, &(0x7f0000000140), 0x0, &(0x7f00000003c0))

7.897293576s ago: executing program 1 (id=613):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a40)={0x0, 0x40000, 0x80, 0x1, 0x5e2}, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x9644b47b80ffb045, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket(0x1, 0x803, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7, 0x96603)
r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0xf1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r2, @ANYRES8=r2], 0x7c}}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f00000000c0)={0x2, 0x0, [{0x491, 0x0, 0x8}, {0x9ff, 0x0, 0x7}]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x22600, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e643000000000000000000000004411ca6d6f059934008bdd4836a638b55e9ca22cdf2dd94aea1559a1685d846e0bfc93438f5b8c7903ab6c61f1d8442d653b966736a68413ff958e4812253c217b00103565638c6e691bd7784341ece0e2804d342fe726a005673ff11a812bf7bfee3108582f408f10df8bed499c60afc45ef5fc9998f59b8dc6ec369b8646ae5782db320b02693b493d5de88367e71502f79d22c84a49657255d84f6b967e74acf70637700ff4eba99e13c92c65d7e4012698030d"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
syz_io_uring_setup(0x795f, &(0x7f0000000300)={0x0, 0x800069ea, 0x3000, 0x0, 0x8000d}, &(0x7f0000000140), &(0x7f0000000100), &(0x7f00000003c0))

7.405451632s ago: executing program 0 (id=614):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000001040)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6d]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x32]}}], [{@obj_user={'obj_user', 0x3d, '/'}}, {@seclabel}, {@subj_user={'subj_user', 0x3d, 'tmpfs\x00'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048010000180080001006c6f6700040002802800018008000100666962001c00028008000140000000110800034000000005080002"], 0xec}}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
mount(0x0, 0x0, 0x0, 0x44021, 0x0)
madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x48)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000200"], 0x44)
getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000500)={'nat\x00', 0x0, 0x4, 0x97, [0x0, 0x7, 0x2, 0x0, 0x6, 0x5], 0x0, &(0x7f00000002c0), &(0x7f0000000400)=""/151}, &(0x7f0000000580)=0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRESHEX, @ANYRES16], 0x48)
ptrace(0x4206, 0x0)
ptrace(0x4208, 0x0)
tkill(0x0, 0x12)
unshare(0x6a040200)
write$UHID_INPUT(r0, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006)

6.601099971s ago: executing program 4 (id=615):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x1a8043, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x24008880)
r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
r5 = openat$random(0xffffff9c, &(0x7f0000001180), 0x0, 0x0)
poll(&(0x7f00000011c0)=[{r5}], 0x1, 0x2000000)
r6 = socket$kcm(0x10, 0xc, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10)
sendmmsg$sock(r7, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x1, 0x20000000)
ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000080)=0x2)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000001ff69000000000001000000c000000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a90400000000000000c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x9, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000040)
ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f0000000380)={0x1, 0x2, @raw_data=[0x7ff, 0x0, 0x5, 0xf5088d3e, 0x3, 0x100, 0x4, 0x0, 0xffff, 0x4, 0x549, 0x8, 0x5, 0x9, 0x0, 0x6]})
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f00000002c0)=0x8000)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff}, 0x111, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0xa, 0xfffb, 0xfffffffd, @loopback}, r10}}, 0x48)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0xffff1000, 0x10000, 0x8})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000140)={0xffff0000, 0x106000})
mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x90, 0x0)

6.537355665s ago: executing program 2 (id=616):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10001, 0x2)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00')
r2 = epoll_create1(0x0)
r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3)
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000000), 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002340)=@deltclass={0x8bc, 0x29, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x7, 0x7}, {0xe, 0x9}, {0xf, 0xffe0}}, [@tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_htb={{0x8}, {0x418, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0xe}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_CTAB={0x404, 0x3, [0x10, 0x4, 0x7, 0xee7, 0xb, 0xf93, 0x2, 0xefcf, 0x200, 0x0, 0x0, 0x7f, 0x2, 0x1, 0x0, 0x7, 0x6, 0x7f, 0x7, 0x1, 0x7, 0xfff, 0x5, 0x3, 0xfd, 0x9, 0x3, 0xfffffae4, 0x3, 0xfffffffc, 0x98, 0x1, 0x3, 0x220d, 0x4, 0xffffffff, 0x5, 0xcb, 0x7, 0x7ff, 0x2, 0x2, 0x14000, 0x5, 0x4, 0xe, 0x7f, 0x7, 0xb, 0x7fffffff, 0xea7, 0xfcee, 0x1, 0x264c, 0x9, 0x3, 0xd, 0xc, 0x5, 0x0, 0x8, 0x3, 0x1, 0x742, 0x2, 0x40, 0x3800000, 0x0, 0x96, 0x1, 0x6, 0x80000001, 0x7, 0x1, 0x6, 0x10001, 0x7, 0xff, 0xfffffff8, 0x6, 0x3, 0xfffff85f, 0x7, 0x5, 0x9, 0xb9, 0x6, 0x0, 0xffffff00, 0x0, 0x2, 0x2, 0x8, 0xffffff46, 0x3, 0x9, 0x1, 0x8000, 0x9, 0x7, 0x9, 0x4, 0x7f, 0x77, 0x1, 0x8, 0x1, 0x5, 0x1, 0xa5f, 0x7, 0x5, 0x7, 0x0, 0xff, 0x1, 0x7, 0x40, 0xfffff801, 0x101, 0x4, 0x1, 0x2, 0x40, 0x7, 0x6, 0x1, 0x0, 0x400, 0x4, 0x8, 0x0, 0x80000000, 0x1, 0x661, 0xc, 0x8, 0xa, 0x1, 0x9, 0x0, 0x3ff, 0x3, 0x0, 0xffffffff, 0x3, 0x4, 0x0, 0x4, 0x0, 0x0, 0x6, 0x552, 0x545, 0x400, 0x4, 0x8000, 0x80000001, 0x2, 0xa4ed, 0x10000, 0xff, 0x400, 0xfffffffa, 0xffff, 0x20000, 0x3, 0x1, 0x800, 0x7, 0x3, 0x4, 0x8001, 0x9, 0x4, 0x1, 0x7, 0x6, 0x2, 0xa, 0x2, 0x7fff, 0x1, 0x2af1, 0x7, 0x39091b8c, 0x6, 0x3, 0x401, 0x5, 0x7, 0x7, 0xffff, 0x8, 0x5, 0x2, 0x31, 0x10, 0x3, 0x3, 0x364, 0x937d, 0x3, 0x80000000, 0x0, 0x6, 0x5, 0x1, 0x6, 0x1, 0xa, 0x3b1, 0x7b, 0xd, 0x1, 0xa, 0x2, 0x1ff, 0x3, 0x4, 0x2, 0x5, 0x3ff, 0x5, 0x6, 0x0, 0x8e66, 0x35a2, 0x7, 0x5, 0x7, 0x8, 0x8001, 0xfffffffe, 0x400, 0x3, 0x6fd6, 0x801, 0x40000000, 0x7f, 0x9, 0x4, 0x6, 0xb1, 0x0, 0x4364, 0x2, 0x3, 0xbe81, 0xfffffffa, 0x81b, 0x2, 0x8, 0x2, 0x6, 0x8]}]}}, @tclass_kind_options=@c_htb={{0x8}, {0x440, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0xfffffffffffffff7}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_CEIL64={0xc}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RTAB={0x404, 0x4, [0xfffffff7, 0x86, 0x3, 0x45, 0x2, 0x0, 0x7, 0x6, 0x4, 0xd, 0x8, 0x4, 0x7, 0x4, 0x20000000, 0x4, 0x2, 0xb80, 0x3, 0x2, 0x7, 0xa6e, 0x6, 0x5, 0x3, 0x6, 0x6, 0x7b, 0x1, 0xc, 0x2, 0x3ff, 0x8, 0x8ad, 0x8, 0x5, 0x3, 0x4, 0x6, 0x80, 0x48, 0x1000, 0x2, 0x2, 0xff, 0x4, 0x401, 0x7f, 0x1ff, 0x8, 0x8, 0x6, 0x9ae8, 0x7ff, 0x7fffffff, 0x0, 0x80000001, 0x0, 0xf5b, 0x9, 0x8, 0x7ff, 0x100, 0x9, 0xe344, 0x3, 0xe5e85d8, 0x7, 0x7, 0x7ff, 0x2, 0x7, 0x3a5, 0x55c, 0x1, 0x5b4, 0x8, 0x200, 0xc000, 0x8001, 0x92c, 0x7, 0x7, 0x9, 0x4f25, 0x2, 0x7, 0x7, 0xff, 0x3, 0x8, 0x4, 0x2, 0xfa9d, 0x776, 0xa6e, 0x3, 0x4, 0x909, 0xab2, 0xd11, 0x1ff, 0x4, 0x7a6a0fcd, 0x3, 0x8, 0x8001, 0xff, 0x36, 0xa, 0x3, 0x7, 0x8, 0x8, 0xfd4, 0x4, 0x6, 0x400, 0x5, 0xffffffff, 0x1000, 0x9, 0x9, 0x8, 0x80000001, 0x3ff, 0x80, 0x101, 0xc, 0x6, 0x7, 0xffff8001, 0x0, 0x81, 0xf3, 0xfffffffb, 0xfffffff9, 0x9, 0x100, 0x10001, 0xfffffffa, 0x6, 0x1, 0x8, 0x5, 0x0, 0x10, 0x8, 0x7f, 0x296d, 0x2, 0x69d, 0x0, 0x80000000, 0x7c33acc2, 0xc, 0x6, 0x1000, 0x9, 0x6, 0xcba, 0xca, 0x9, 0xbd, 0x5, 0x6, 0x200, 0x78c, 0x8, 0xf65, 0x8, 0x2, 0x3, 0x4, 0x8, 0x3, 0x525, 0x9, 0xfffffffb, 0x8000, 0xc355, 0x2, 0x9, 0x8, 0x4, 0x3, 0x5, 0x7802c1f2, 0xfffffff5, 0x7, 0x3e6, 0x3, 0x5ed0, 0x8001, 0x5, 0x91, 0x8000000, 0x0, 0x200, 0x2, 0xb, 0x1, 0x4, 0x5, 0x6, 0x1000, 0x7fff, 0xcf7, 0x6, 0x1200000, 0xd1e5, 0x6, 0x1, 0x1000, 0x1, 0x1, 0x10, 0x20, 0x80000001, 0x9d42, 0x3, 0x2000, 0x3, 0x7b, 0xf, 0x1, 0x4, 0x9, 0x7, 0x8, 0x6, 0x7fffffff, 0x0, 0xbbc8, 0x6, 0xf, 0x4650, 0x5, 0x2, 0x9, 0x1, 0x1000, 0x1, 0x6, 0x5b, 0x401, 0xd55c, 0x5, 0x4, 0x0, 0x39c728e1, 0x6, 0x45e3, 0x8, 0xf, 0x3]}, @TCA_HTB_CEIL64={0xc, 0x7, 0xa}]}}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @tclass_kind_options=@c_clsact={0xb}]}, 0x8bc}}, 0x4000)
write$binfmt_script(r3, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040))
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100000})

6.453968226s ago: executing program 1 (id=617):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracefs/instances/foo/events/mygroup/myevent/enable\x00', 0x2, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200)
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000001f00)="de4dc043102f0e202515a02eac23", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3)
setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff)
ioctl$TIOCSLCKTRMIOS(r2, 0x80047456, &(0x7f00000010c0))
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0)

5.954184496s ago: executing program 2 (id=618):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4)
write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0)
syz_io_uring_setup(0x110, 0x0, 0x0, &(0x7f0000000280), &(0x7f0000000000))
openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = creat(0x0, 0xf)
r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0)
write(r4, &(0x7f0000001340)="89d87df03855", 0x6)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000007c0)=[0x5], 0x0, 0x0, 0x4c}}, 0xa3)

5.728386075s ago: executing program 0 (id=619):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000440)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x50, 0x0, "206b66f88530cc5441ff6ef50aeaa79d2e63f6d8e141f93620d7b00d2b278242b43d25da00bbaba201fafc2c73302bd951093171c60292f15fe51527be7f921bbba8c2543d0542991ae4bc12812051bd"}, 0xd8)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0xdddd1000, 0x10, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0xd}, {0xffff1000, 0xd000, 0xc, 0x9, 0x33, 0x0, 0x0, 0xfd, 0x8, 0x7, 0x0, 0xfb}, {0x3000, 0x0, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0xfe, 0x0, 0xfe}, {0x3000, 0xeeee0000, 0x4, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4, 0x10}, {0xdddd0000, 0x2000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x7f}, {0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfe, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x5, 0x3, 0xfe, 0x0, 0x0, 0xfd}, {0x0, 0x100000, 0x8, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0x9, 0xd801, 0x0, [0x0, 0xfffffffffffffffd, 0x1, 0x2000000]})
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x209000, 0x8000, 0x0, 0x1, 0x0, [{0x1, 0x3, 0x6, '\x00', 0x91}, {0x6c, 0xbc, 0x15, '\x00', 0xf}, {0x5, 0x83, 0x6, '\x00', 0x95}, {0x0, 0x9, 0x8, '\x00', 0xd7}, {0x2, 0x81, 0x6, '\x00', 0x2}, {0x3, 0x3, 0x7f, '\x00', 0x89}, {0xb, 0x42, 0xb4, '\x00', 0x9}, {0x6, 0x1, 0x80, '\x00', 0x3}, {0xb, 0x4, 0x4, '\x00', 0xd}, {0x7, 0x7, 0x1, '\x00', 0x3a}, {0x5, 0x0, 0xc, '\x00', 0x5}, {0x3, 0xf2, 0x9, '\x00', 0x1e}, {0x8, 0x9, 0x8, '\x00', 0x3}, {0x7, 0x7, 0xa8}, {0x1, 0x40, 0x6, '\x00', 0x20}, {0xe, 0x2, 0xb, '\x00', 0x10}, {0x4d, 0xe, 0x6d}, {0xe, 0x8, 0x8, '\x00', 0xd4}, {0x2, 0x9, 0x2, '\x00', 0x2}, {0x7f, 0x0, 0x72, '\x00', 0x5}, {0x9, 0x4, 0x5, '\x00', 0x7}, {0x1, 0xe, 0x1, '\x00', 0x2}, {0x72, 0xe, 0x5}, {0x0, 0xf}]}})
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x40000000000000, 0x4, 0x9, 0x8001], 0x1, 0x3c4210})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@mcast2, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x1000000000000, 0x6fd}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in=@multicast1, 0x0, 0x4}]}]}, 0xf8}}, 0x0)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0)
sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)
lseek(r3, 0x1, 0x0)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000180)=0x200)

5.190355257s ago: executing program 4 (id=620):
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="07000200000000000000050000003c00038004000380340003802000018004000300060002005c00000008000100e800008000000000000000001000018004000300080001000400000004000180"], 0x54}, 0x1, 0x0, 0x0, 0x4060850}, 0x400d4)
sendto$inet6(r0, &(0x7f0000000600)="1ba0000016001d0dc5ef4e8cf2cf10a940d8b957cbddb657980000d35da03e4a33b0523d8a0d079418bdb72d82dd84ddfcec7b9c23967f3b751ebed5a4eff53073371af9cda9e4c6365b543a6f6d07fad10f9fc8110a802cf6269c1e25306bda92f31382b764fda85e88c7544bf558db2ed6220f1ba4fd6a1cb8163956d07047799586128122690e925d39778fde2c4e62430310793a160b2ce02b", 0x9b, 0x4000000, 0x0, 0x0)
personality(0xbe4e602dc9e6c1d3)
uname(&(0x7f0000000040)=""/138)
recvfrom$inet6(r0, &(0x7f0000000000)=""/31, 0x1f, 0x2002, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="480500001500", 0x6}], 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
poll(&(0x7f0000000a40)=[{r1, 0x2}], 0x1, 0x7f)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000200), 0x4)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00')
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x601, 0x80)
poll(0x0, 0x0, 0x1f4)
r2 = syz_open_dev$sndctrl(&(0x7f00000005c0), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc0485510, &(0x7f0000002140)=ANY=[@ANYBLOB="00000000f871a5dcce7b67b3"])
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/usb/devices/usb5/bConfigurationValue\x00', 0x1, 0x0)
write(r3, &(0x7f0000000500)='0\n\x00', 0x2)
socket$inet6(0x10, 0x3, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000400)='./config/usb_gadget/g1\x00', &(0x7f00000004c0), 0x22, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
setxattr$system_posix_acl(&(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/ecm.usb0/file0\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f0000000840)={{}, {0x1, 0x1}, [{0x2, 0x7, 0xee01}, {0x2, 0x1}, {0x2, 0x4}], {0x4, 0x4}, [{0x8, 0x3}, {0x8, 0x4}, {0x8, 0xe}], {0x10, 0x3}, {0x20, 0x1}}, 0x54, 0x1)
chdir(0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))

4.121290568s ago: executing program 1 (id=621):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a40)={0x0, 0x40000, 0x80, 0x1, 0x5e2}, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x9644b47b80ffb045, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket(0x1, 0x803, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7, 0x96603)
r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0xf1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r2, @ANYRES8=r2], 0x7c}}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f00000000c0)={0x2, 0x0, [{0x491, 0x0, 0x8}, {0x9ff, 0x0, 0x7}]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x22600, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e643000000000000000000000004411ca6d6f059934008bdd4836a638b55e9ca22cdf2dd94aea1559a1685d846e0bfc93438f5b8c7903ab6c61f1d8442d653b966736a68413ff958e4812253c217b00103565638c6e691bd7784341ece0e2804d342fe726a005673ff11a812bf7bfee3108582f408f10df8bed499c60afc45ef5fc9998f59b8dc6ec369b8646ae5782db320b02693b493d5de88367e71502f79d22c84a49657255d84f6b967e74acf70637700ff4eba99e13c92c65d7e4012698030d"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
syz_io_uring_setup(0x795f, &(0x7f0000000300)={0x0, 0x800069ea, 0x3000, 0x0, 0x8000d}, &(0x7f0000000140), &(0x7f0000000100), 0x0)

4.120427009s ago: executing program 4 (id=622):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f0000000000000002000a0000", 0x1c)
bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x2, &(0x7f0000000080)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0300ffff0000", 0x6}])
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000100c5de131a0000000000000000000001050000001000000000000000000000030000000001000000"], 0x0, 0x53, 0x0, 0x0, 0xffffffff}, 0x28)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nullb/my_zoned_dev/zoned\x00', 0x2, 0xb96e0453b2f36300)
prctl$PR_MCE_KILL(0x21, 0x1, 0x0)
write(r4, &(0x7f0000000240)='1\x00', 0x1)
ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, &(0x7f0000000080))

4.119284941s ago: executing program 0 (id=623):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x8001)
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000000)=0xe2)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
syz_socket_connect_nvme_tcp()
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140))
syz_open_dev$media(0x0, 0x4, 0x10000)
syz_open_dev$vbi(0x0, 0x2, 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r2 = socket(0x1e, 0x1, 0x0)
sendmmsg$sock(r2, &(0x7f0000000100)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000180)=@pppol2tpv3={0x1e, 0x4, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0}}], 0x2, 0x4048040)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004)

3.417781765s ago: executing program 2 (id=624):
mount(0x0, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x0, 0x2008, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
r1 = socket(0x2000000000000021, 0x2, 0x2)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, 0x0, &(0x7f0000000600))
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
recvfrom$inet(r0, &(0x7f0000000780)=""/123, 0x7b, 0x10000, &(0x7f0000000800)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x79da, 0x8000, 0x2, 0x2fb}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc249, 0x8, 0x2, 0x3a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a66, 0x24bd6fc8c4f4eb73, 0x0, 0x2d9}, 0xffffffffffffffff, 0x0, 0x0, <r3=>0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3e87, 0x10000, 0x2, 0x22c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf526, 0x2000, 0x3, 0x2b0}}], 0x4, &(0x7f0000001b00)={0x2e, 0x33, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xffff}, 0x0, 0x0, '\x00', {0x4, 0xfab, 0x0, &(0x7f0000000b00)=@buf_512="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"}}, 0x0)
r4 = openat$btrfs_control(0xffffff9c, &(0x7f0000000040), 0x4000, 0x0)
sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000ea00000000000000001a79f765ad6613ef2a17306c3800decb3e6b9f077f0100020073797a32000000e90400010007000000"], 0x28}, 0x1, 0x0, 0x0, 0x24000810}, 0x8aec38bcd76dffaa)
r5 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0, &(0x7f0000000180)=<r8=>0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x4d2c11947fe9151f, {0x0, r9}})
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r3, &(0x7f0000001c00)={0x2e, 0x29, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, r9, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001bc0)=@new_dev={0x1, 0x4df, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x21}}}, &(0x7f0000001c80))
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r10 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r10, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sched_setattr(0x0, 0x0, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
unshare(0x24020400)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81802)

3.416661403s ago: executing program 4 (id=625):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x34d403)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
r2 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001})
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x2c00c014)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
unshare(0x22020400)
r7 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r8 = dup(r6)
write$UHID_INPUT(r8, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000340)=@x86={0x1, 0x3, 0x6, 0x0, 0x8, 0x7, 0x6, 0x0, 0x4, 0x9, 0x8, 0x9, 0x0, 0x7, 0x401, 0xa, 0x1, 0x40, 0x10, '\x00', 0x4d, 0x55})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003a00)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x0, @loopback, 0xa}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="200000002900000032008000fe80643213f30000000000000e0000000000000000"], 0x20}}], 0x1, 0x1000)
epoll_pwait(r2, &(0x7f00000000c0)=[{}, {}], 0x2, 0xfe, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="440000001000010404000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="38410000440b00002400128009000100626f6e640000000014000280050001000100000008000200", @ANYBLOB="f7"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x109842, 0x0)
r10 = epoll_create1(0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r9, 0x40045010, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000000)={0x10000001})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x64)

3.05214656s ago: executing program 0 (id=626):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10001, 0x2)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00')
r2 = epoll_create1(0x0)
r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3)
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000000), 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002340)=@deltclass={0x8bc, 0x29, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x7, 0x7}, {0xe, 0x9}, {0xf, 0xffe0}}, [@tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_htb={{0x8}, {0x418, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0xe}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_CTAB={0x404, 0x3, [0x10, 0x4, 0x7, 0xee7, 0xb, 0xf93, 0x2, 0xefcf, 0x200, 0x0, 0x0, 0x7f, 0x2, 0x1, 0x0, 0x7, 0x6, 0x7f, 0x7, 0x1, 0x7, 0xfff, 0x5, 0x3, 0xfd, 0x9, 0x3, 0xfffffae4, 0x3, 0xfffffffc, 0x98, 0x1, 0x3, 0x220d, 0x4, 0xffffffff, 0x5, 0xcb, 0x7, 0x7ff, 0x2, 0x2, 0x14000, 0x5, 0x4, 0xe, 0x7f, 0x7, 0xb, 0x7fffffff, 0xea7, 0xfcee, 0x1, 0x264c, 0x9, 0x3, 0xd, 0xc, 0x5, 0x0, 0x8, 0x3, 0x1, 0x742, 0x2, 0x40, 0x3800000, 0x0, 0x96, 0x1, 0x6, 0x80000001, 0x7, 0x1, 0x6, 0x10001, 0x7, 0xff, 0xfffffff8, 0x6, 0x3, 0xfffff85f, 0x7, 0x5, 0x9, 0xb9, 0x6, 0x0, 0xffffff00, 0x0, 0x2, 0x2, 0x8, 0xffffff46, 0x3, 0x9, 0x1, 0x8000, 0x9, 0x7, 0x9, 0x4, 0x7f, 0x77, 0x1, 0x8, 0x1, 0x5, 0x1, 0xa5f, 0x7, 0x5, 0x7, 0x0, 0xff, 0x1, 0x7, 0x40, 0xfffff801, 0x101, 0x4, 0x1, 0x2, 0x40, 0x7, 0x6, 0x1, 0x0, 0x400, 0x4, 0x8, 0x0, 0x80000000, 0x1, 0x661, 0xc, 0x8, 0xa, 0x1, 0x9, 0x0, 0x3ff, 0x3, 0x0, 0xffffffff, 0x3, 0x4, 0x0, 0x4, 0x0, 0x0, 0x6, 0x552, 0x545, 0x400, 0x4, 0x8000, 0x80000001, 0x2, 0xa4ed, 0x10000, 0xff, 0x400, 0xfffffffa, 0xffff, 0x20000, 0x3, 0x1, 0x800, 0x7, 0x3, 0x4, 0x8001, 0x9, 0x4, 0x1, 0x7, 0x6, 0x2, 0xa, 0x2, 0x7fff, 0x1, 0x2af1, 0x7, 0x39091b8c, 0x6, 0x3, 0x401, 0x5, 0x7, 0x7, 0xffff, 0x8, 0x5, 0x2, 0x31, 0x10, 0x3, 0x3, 0x364, 0x937d, 0x3, 0x80000000, 0x0, 0x6, 0x5, 0x1, 0x6, 0x1, 0xa, 0x3b1, 0x7b, 0xd, 0x1, 0xa, 0x2, 0x1ff, 0x3, 0x4, 0x2, 0x5, 0x3ff, 0x5, 0x6, 0x0, 0x8e66, 0x35a2, 0x7, 0x5, 0x7, 0x8, 0x8001, 0xfffffffe, 0x400, 0x3, 0x6fd6, 0x801, 0x40000000, 0x7f, 0x9, 0x4, 0x6, 0xb1, 0x0, 0x4364, 0x2, 0x3, 0xbe81, 0xfffffffa, 0x81b, 0x2, 0x8, 0x2, 0x6, 0x8]}]}}, @tclass_kind_options=@c_htb={{0x8}, {0x440, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0xfffffffffffffff7}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_CEIL64={0xc}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RTAB={0x404, 0x4, [0xfffffff7, 0x86, 0x3, 0x45, 0x2, 0x0, 0x7, 0x6, 0x4, 0xd, 0x8, 0x4, 0x7, 0x4, 0x20000000, 0x4, 0x2, 0xb80, 0x3, 0x2, 0x7, 0xa6e, 0x6, 0x5, 0x3, 0x6, 0x6, 0x7b, 0x1, 0xc, 0x2, 0x3ff, 0x8, 0x8ad, 0x8, 0x5, 0x3, 0x4, 0x6, 0x80, 0x48, 0x1000, 0x2, 0x2, 0xff, 0x4, 0x401, 0x7f, 0x1ff, 0x8, 0x8, 0x6, 0x9ae8, 0x7ff, 0x7fffffff, 0x0, 0x80000001, 0x0, 0xf5b, 0x9, 0x8, 0x7ff, 0x100, 0x9, 0xe344, 0x3, 0xe5e85d8, 0x7, 0x7, 0x7ff, 0x2, 0x7, 0x3a5, 0x55c, 0x1, 0x5b4, 0x8, 0x200, 0xc000, 0x8001, 0x92c, 0x7, 0x7, 0x9, 0x4f25, 0x2, 0x7, 0x7, 0xff, 0x3, 0x8, 0x4, 0x2, 0xfa9d, 0x776, 0xa6e, 0x3, 0x4, 0x909, 0xab2, 0xd11, 0x1ff, 0x4, 0x7a6a0fcd, 0x3, 0x8, 0x8001, 0xff, 0x36, 0xa, 0x3, 0x7, 0x8, 0x8, 0xfd4, 0x4, 0x6, 0x400, 0x5, 0xffffffff, 0x1000, 0x9, 0x9, 0x8, 0x80000001, 0x3ff, 0x80, 0x101, 0xc, 0x6, 0x7, 0xffff8001, 0x0, 0x81, 0xf3, 0xfffffffb, 0xfffffff9, 0x9, 0x100, 0x10001, 0xfffffffa, 0x6, 0x1, 0x8, 0x5, 0x0, 0x10, 0x8, 0x7f, 0x296d, 0x2, 0x69d, 0x0, 0x80000000, 0x7c33acc2, 0xc, 0x6, 0x1000, 0x9, 0x6, 0xcba, 0xca, 0x9, 0xbd, 0x5, 0x6, 0x200, 0x78c, 0x8, 0xf65, 0x8, 0x2, 0x3, 0x4, 0x8, 0x3, 0x525, 0x9, 0xfffffffb, 0x8000, 0xc355, 0x2, 0x9, 0x8, 0x4, 0x3, 0x5, 0x7802c1f2, 0xfffffff5, 0x7, 0x3e6, 0x3, 0x5ed0, 0x8001, 0x5, 0x91, 0x8000000, 0x0, 0x200, 0x2, 0xb, 0x1, 0x4, 0x5, 0x6, 0x1000, 0x7fff, 0xcf7, 0x6, 0x1200000, 0xd1e5, 0x6, 0x1, 0x1000, 0x1, 0x1, 0x10, 0x20, 0x80000001, 0x9d42, 0x3, 0x2000, 0x3, 0x7b, 0xf, 0x1, 0x4, 0x9, 0x7, 0x8, 0x6, 0x7fffffff, 0x0, 0xbbc8, 0x6, 0xf, 0x4650, 0x5, 0x2, 0x9, 0x1, 0x1000, 0x1, 0x6, 0x5b, 0x401, 0xd55c, 0x5, 0x4, 0x0, 0x39c728e1, 0x6, 0x45e3, 0x8, 0xf, 0x3]}, @TCA_HTB_CEIL64={0xc, 0x7, 0xa}]}}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @tclass_kind_options=@c_clsact={0xb}]}, 0x8bc}}, 0x4000)
write$binfmt_script(r3, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040))
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100000})

2.309321075s ago: executing program 0 (id=627):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a40)={0x0, 0x40000, 0x80, 0x1, 0x5e2}, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x9644b47b80ffb045, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket(0x1, 0x803, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
syz_open_dev$sndpcmc(0x0, 0x7, 0x96603)
r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0xf1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r2, @ANYRES8=r2], 0x7c}}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f00000000c0)={0x2, 0x0, [{0x491, 0x0, 0x8}, {0x9ff, 0x0, 0x7}]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x22600, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e643000000000000000000000004411ca6d6f059934008bdd4836a638b55e9ca22cdf2dd94aea1559a1685d846e0bfc93438f5b8c7903ab6c61f1d8442d653b966736a68413ff958e4812253c217b00103565638c6e691bd7784341ece0e2804d342fe726a005673ff11a812bf7bfee3108582f408f10df8bed499c60afc45ef5fc9998f59b8dc6ec369b8646ae5782db320b02693b493d5de88367e71502f79d22c84a49657255d84f6b967e74acf70637700ff4eba99e13c92c65d7e4012698030d"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
syz_io_uring_setup(0x795f, &(0x7f0000000300)={0x0, 0x800069ea, 0x3000, 0x0, 0x8000d}, &(0x7f0000000140), &(0x7f0000000100), &(0x7f00000003c0))

2.069937297s ago: executing program 1 (id=628):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x1a8043, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x24008880)
r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
r5 = openat$random(0xffffff9c, &(0x7f0000001180), 0x0, 0x0)
poll(&(0x7f00000011c0)=[{r5}], 0x1, 0x2000000)
r6 = socket$kcm(0x10, 0xc, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10)
sendmmsg$sock(r7, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x1, 0x20000000)
ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000080)=0x2)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000001ff69000000000001000000c000000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a90400000000000000c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x9, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000040)
ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f0000000380)={0x1, 0x2, @raw_data=[0x7ff, 0x0, 0x5, 0xf5088d3e, 0x3, 0x100, 0x4, 0x0, 0xffff, 0x4, 0x549, 0x8, 0x5, 0x9, 0x0, 0x6]})
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f00000002c0)=0x8000)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff}, 0x111, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0xa, 0xfffb, 0xfffffffd, @loopback}, r10}}, 0x48)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0xffff1000, 0x10000, 0x8})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000140)={0xffff0000, 0x106000})
mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x90, 0x0)

1.43053304s ago: executing program 2 (id=629):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000001040)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6d]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x32]}}], [{@obj_user={'obj_user', 0x3d, '/'}}, {@seclabel}, {@subj_user={'subj_user', 0x3d, 'tmpfs\x00'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048010000180080001006c6f6700040002802800018008000100666962001c00028008000140000000110800034000000005080002"], 0xec}}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
mount(0x0, 0x0, 0x0, 0x44021, 0x0)
madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x48)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000200"], 0x44)
getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000500)={'nat\x00', 0x0, 0x4, 0x97, [0x0, 0x7, 0x2, 0x0, 0x6, 0x5], 0x0, &(0x7f00000002c0), &(0x7f0000000400)=""/151}, &(0x7f0000000580)=0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRESHEX, @ANYRES16], 0x48)
ptrace(0x4206, 0x0)
ptrace(0x4208, 0x0)
tkill(0x0, 0x12)
unshare(0x6a040200)
write$UHID_INPUT(r0, &(0x7f0000000000)={0xfc, {"a2e3ad09ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d670a8b089b3f393563030890e0879b0af8c6e70a9b334a959b669a9b2f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d073b5d0acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669114e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20da911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78020000000000000095104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813491ad8deff4b05f60cea0da7710ac0014000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21cc4e3fe9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8000f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebd8d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414440f8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eb4581f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab9640071550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c513a9177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f411254c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486229e5b2e30bfc43c10ec23ea6283994a7dde4da12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df7227dfdb0d2b9e935c5af3cf474bed79dfc24ab0f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78c8fa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609daf1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000026347ee8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000650c00", 0x1000}}, 0x1006)

927.787105ms ago: executing program 0 (id=630):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracefs/instances/foo/events/mygroup/myevent/enable\x00', 0x2, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200)
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000001f00)="de4dc043102f0e202515a02eac23", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3)
setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff)
ioctl$TIOCSLCKTRMIOS(r2, 0x80047456, &(0x7f00000010c0))
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0)

278.513316ms ago: executing program 4 (id=631):
openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x80040, 0x0)
setns(0xc9, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
getpid()
process_madvise(0xffffffffffffffff, &(0x7f00000015c0)=[{0x0}], 0x1, 0x9, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendto$inet(r1, &(0x7f0000000140)="6e89555a6479f2bdfe09ad2dafd99a73f1268a7be4339c6dafa87675ef80fe51f22940bb4635e72a73b20c9163a3abeb0bd0073e2cd81aaed1711a36e7b3c1cf1a2e64fcaf771f", 0x47, 0x10008080, &(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c)
write(r2, &(0x7f0000000200)="89", 0xffe3)

65.629326ms ago: executing program 1 (id=632):
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="07000200000000000000050000003c00038004000380340003802000018004000300060002005c00000008000100e800008000000000000000001000018004000300080001000400000004000180"], 0x54}, 0x1, 0x0, 0x0, 0x4060850}, 0x400d4)
sendto$inet6(r0, &(0x7f0000000600)="1ba0000016001d0dc5ef4e8cf2cf10a940d8b957cbddb657980000d35da03e4a33b0523d8a0d079418bdb72d82dd84ddfcec7b9c23967f3b751ebed5a4eff53073371af9cda9e4c6365b543a6f6d07fad10f9fc8110a802cf6269c1e25306bda92f31382b764fda85e88c7544bf558db2ed6220f1ba4fd6a1cb8163956d07047799586128122690e925d39778fde2c4e62430310793a160b2ce02b", 0x9b, 0x4000000, 0x0, 0x0)
personality(0xbe4e602dc9e6c1d3)
uname(&(0x7f0000000040)=""/138)
recvfrom$inet6(r0, &(0x7f0000000000)=""/31, 0x1f, 0x2002, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
poll(&(0x7f0000000a40)=[{r1, 0x2}], 0x1, 0x7f)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000200), 0x4)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00')
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x601, 0x80)
poll(0x0, 0x0, 0x1f4)
r2 = syz_open_dev$sndctrl(&(0x7f00000005c0), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc0485510, &(0x7f0000002140)=ANY=[@ANYBLOB="00000000f871a5dcce7b67b3"])
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/usb/devices/usb5/bConfigurationValue\x00', 0x1, 0x0)
write(r3, &(0x7f0000000500)='0\n\x00', 0x2)
socket$inet6(0x10, 0x3, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000400)='./config/usb_gadget/g1\x00', &(0x7f00000004c0), 0x22, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
setxattr$system_posix_acl(&(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/ecm.usb0/file0\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f0000000840)={{}, {0x1, 0x1}, [{0x2, 0x7, 0xee01}, {0x2, 0x1}, {0x2, 0x4}], {0x4, 0x4}, [{0x8, 0x3}, {0x8, 0x4}, {0x8, 0xe}], {0x10, 0x3}, {0x20, 0x1}}, 0x54, 0x1)
chdir(0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))

0s ago: executing program 4 (id=633):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4)
write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0)
syz_io_uring_setup(0x110, 0x0, 0x0, &(0x7f0000000280), &(0x7f0000000000))
openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = creat(&(0x7f00000002c0)='./file0\x00', 0xf)
r5 = open$dir(0x0, 0x40000, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0)
write(r4, &(0x7f0000001340)="89d87df03855", 0x6)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000007c0)=[0x5], 0x0, 0x0, 0x4c}}, 0xa3)

kernel console output (not intermixed with test programs):

ommand tx timeout
[  131.097529][   T64] Bluetooth: hci0: command tx timeout
[  131.107461][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0
[  131.120837][ T5771] veth0_vlan: entered promiscuous mode
[  131.130138][ T5771] veth1_vlan: entered promiscuous mode
[  131.153302][ T5779] veth1_vlan: entered promiscuous mode
[  131.196218][   T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.204856][   T64] Bluetooth: hci2: command tx timeout
[  131.262771][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.271836][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.287729][   T64] Bluetooth: hci1: command tx timeout
[  131.295300][ T5779] veth0_macvtap: entered promiscuous mode
[  131.307654][   T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.332717][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.341474][ T5779] veth1_macvtap: entered promiscuous mode
[  131.433170][ T5770] veth0_vlan: entered promiscuous mode
[  131.488357][ T5771] veth0_macvtap: entered promiscuous mode
[  131.522676][ T5767] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  131.526390][ T5770] veth1_vlan: entered promiscuous mode
[  131.568656][ T5771] veth1_macvtap: entered promiscuous mode
[  131.574152][ T5767] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[  131.592063][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.651888][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.706183][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1
[  131.724213][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1
[  131.793015][ T5767] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[  131.829279][ T5767] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[  131.862260][ T5770] veth0_macvtap: entered promiscuous mode
[  131.880740][ T5770] veth1_macvtap: entered promiscuous mode
[  131.930852][ T5767] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[  131.970578][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0
[  132.182986][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.229657][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.258444][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1
[  132.408490][  T573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.415664][  T573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.598974][  T573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.599886][ T5564] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.603474][  T573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.690257][ T5564] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.694195][ T5564] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.727133][ T5919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[  132.750646][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.763344][ T5564] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.777962][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.844374][ T5919] bridge_slave_1: left allmulticast mode
[  132.846826][ T5919] bridge_slave_1: left promiscuous mode
[  132.862362][ T5919] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.883280][ T5919] bridge_slave_0: left allmulticast mode
[  132.893130][ T5919] bridge_slave_0: left promiscuous mode
[  132.896847][ T5919] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.995427][   T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.000955][   T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.010449][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  133.070479][   T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.095548][   T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.122284][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  133.127539][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  133.246669][   T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.257869][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  133.287796][   T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.385270][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  133.605091][ T5843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.304250][ T5929] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[  135.307906][ T5929] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  135.313224][ T5929] vhci_hcd vhci_hcd.0: Device attached
[  135.760668][ T5887] usb 39-1: new high-speed USB device number 2 using vhci_hcd
[  135.984204][ T5958] process 'syz.0.11' launched '/dev/fd/5' with NULL argv: empty string added
[  136.662983][ T5952] vhci_hcd: connection reset by peer
[  136.669206][ T5843] vhci_hcd vhci_hcd.1: stop threads
[  136.671926][ T5843] vhci_hcd vhci_hcd.1: release socket
[  136.675417][ T5843] vhci_hcd vhci_hcd.1: disconnect device
[  138.246113][ T5987] input: syz1 as /devices/virtual/input/input5
[  138.269776][ T5987] input: failed to attach handler leds to device input5, error: -6
[  138.715848][ T5980] bond1 (unregistering): Released all slaves
[  139.567578][   T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  139.589252][    C2] raw-gadget.0 gadget.3: ignoring, device is not running
[  139.595913][ T5999] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size.
[  139.777499][   T24] usb 8-1: device descriptor read/64, error -32
[  139.921280][ T6014] gretap1: entered allmulticast mode
[  139.925730][ T6013] netlink: 'syz.1.24': attribute type 1 has an invalid length.
[  140.090751][   T24] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  140.411601][   T24] usb 8-1: Using ep0 maxpacket: 32
[  140.421025][   T24] usb 8-1: config index 0 descriptor too short (expected 156, got 27)
[  140.432359][   T24] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  140.448346][   T24] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  140.460082][   T24] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  140.475552][   T24] usb 8-1: config 0 interface 0 has no altsetting 0
[  140.590660][   T24] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  140.597949][   T24] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  140.606111][   T24] usb 8-1: Product: syz
[  140.612963][   T24] usb 8-1: Manufacturer: syz
[  140.618029][   T24] usb 8-1: SerialNumber: syz
[  140.647464][   T24] usb 8-1: config 0 descriptor??
[  140.716805][   T10] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  140.722260][   T24] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  140.768626][   T24] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  140.783785][ T5538] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  140.868522][ T5887] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  140.889516][   T10] usb 6-1: device descriptor read/64, error -71
[  141.002761][ T5538] usb 7-1: device descriptor read/64, error -71
[  141.062474][ T1356] usb 8-1: USB disconnect, device number 3
[  141.146665][ T1356] ldusb 8-1:0.0: LD USB Device #0 now disconnected
[  141.167387][   T10] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  141.264610][ T5538] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  141.353212][   T10] usb 6-1: device descriptor read/64, error -71
[  141.457356][ T5538] usb 7-1: device descriptor read/64, error -71
[  141.484145][   T10] usb usb6-port1: attempt power cycle
[  141.585077][ T5538] usb usb7-port1: attempt power cycle
[  141.887320][   T10] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  141.917982][   T10] usb 6-1: device descriptor read/8, error -71
[  141.941217][ T5538] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  141.980680][ T5538] usb 7-1: device descriptor read/8, error -71
[  142.177547][   T10] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  142.221863][   T10] usb 6-1: device descriptor read/8, error -71
[  142.279950][ T5538] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  142.337859][   T10] usb usb6-port1: unable to enumerate USB device
[  142.344272][ T5538] usb 7-1: device descriptor read/8, error -71
[  142.457733][ T5538] usb usb7-port1: unable to enumerate USB device
[  143.662395][ T6057] netlink: 'syz.3.33': attribute type 1 has an invalid length.
[  143.857582][ T6063] FAULT_INJECTION: forcing a failure.
[  143.857582][ T6063] name failslab, interval 1, probability 0, space 0, times 1
[  143.882708][ T6063] CPU: 3 UID: 0 PID: 6063 Comm: syz.2.35 Not tainted syzkaller #0 PREEMPT(full) 
[  143.882736][ T6063] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  143.882747][ T6063] Call Trace:
[  143.882780][ T6063]  <TASK>
[  143.882788][ T6063]  dump_stack_lvl+0x100/0x190
[  143.882814][ T6063]  should_fail_ex.cold+0x5/0xa
[  143.882834][ T6063]  should_failslab+0xc2/0x120
[  143.882859][ T6063]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  143.882882][ T6063]  ? __alloc_skb+0x5b7/0x710
[  143.882906][ T6063]  ? __alloc_skb+0x140/0x710
[  143.882929][ T6063]  __alloc_skb+0x140/0x710
[  143.882950][ T6063]  ? __alloc_skb+0x5b7/0x710
[  143.882968][ T6063]  ? __pfx___alloc_skb+0x10/0x10
[  143.882992][ T6063]  netlink_alloc_large_skb+0x69/0x150
[  143.883011][ T6063]  netlink_sendmsg+0x680/0xda0
[  143.883030][ T6063]  ? __pfx_netlink_sendmsg+0x10/0x10
[  143.883049][ T6063]  ? apparmor_socket_sendmsg+0x15b/0x270
[  143.883068][ T6063]  ____sys_sendmsg+0xa4d/0xbe0
[  143.883082][ T6063]  ? __pfx_netlink_sendmsg+0x10/0x10
[  143.883100][ T6063]  ? __pfx_____sys_sendmsg+0x10/0x10
[  143.883125][ T6063]  ___sys_sendmsg+0x190/0x1e0
[  143.883146][ T6063]  ? __pfx____sys_sendmsg+0x10/0x10
[  143.883176][ T6063]  ? find_held_lock+0x2b/0x80
[  143.883206][ T6063]  __sys_sendmsg+0x160/0x210
[  143.883226][ T6063]  ? __pfx___sys_sendmsg+0x10/0x10
[  143.883251][ T6063]  ? __pfx_ksys_write+0x10/0x10
[  143.883275][ T6063]  __do_fast_syscall_32+0xe7/0x970
[  143.883296][ T6063]  ? lockdep_hardirqs_on+0x78/0x100
[  143.883316][ T6063]  do_fast_syscall_32+0x32/0x70
[  143.883336][ T6063]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  143.883354][ T6063] RIP: 0023:0xf708efec
[  143.883373][ T6063] Code: Unable to access opcode bytes at 0xf708efc2.
[  143.883388][ T6063] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  143.883402][ T6063] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200
[  143.883411][ T6063] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  143.883419][ T6063] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  143.883427][ T6063] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  143.883435][ T6063] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  143.883453][ T6063]  </TASK>
[  144.293274][ T6071] [U] 
[  145.318723][ T6081] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  145.345790][ T6081] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  145.355470][ T6081] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  145.405391][ T1442] ieee802154 phy0 wpan0: encryption failed: -22
[  145.409491][ T1442] ieee802154 phy1 wpan1: encryption failed: -22
[  145.494038][ T6081] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  145.627729][ T6084] ip6gre1: entered promiscuous mode
[  145.666062][ T6084] ip6gre1: entered allmulticast mode
[  145.668273][ T6066] =======================================================
[  145.668273][ T6066] WARNING: The mand mount option has been deprecated and
[  145.668273][ T6066]          and is ignored by this kernel. Remove the mand
[  145.668273][ T6066]          option from the mount to silence this warning.
[  145.668273][ T6066] =======================================================
[  145.832270][ T6081] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  146.316773][ T6088] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  146.321000][ T6088] FAULT_INJECTION: forcing a failure.
[  146.321000][ T6088] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  146.329485][ T6088] CPU: 3 UID: 0 PID: 6088 Comm: syz.1.41 Not tainted syzkaller #0 PREEMPT(full) 
[  146.329508][ T6088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  146.329518][ T6088] Call Trace:
[  146.329525][ T6088]  <TASK>
[  146.329534][ T6088]  dump_stack_lvl+0x100/0x190
[  146.329559][ T6088]  should_fail_ex.cold+0x5/0xa
[  146.329577][ T6088]  _copy_to_user+0x32/0xd0
[  146.329605][ T6088]  simple_read_from_buffer+0xcb/0x170
[  146.329633][ T6088]  proc_fail_nth_read+0x1af/0x230
[  146.329657][ T6088]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  146.329680][ T6088]  ? rw_verify_area+0xce/0x6d0
[  146.329702][ T6088]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  146.329721][ T6088]  vfs_read+0x1e4/0xb40
[  146.329738][ T6088]  ? __pfx_vfs_read+0x10/0x10
[  146.329751][ T6088]  ? find_held_lock+0x2b/0x80
[  146.329773][ T6088]  ? __fget_files+0x215/0x3d0
[  146.329793][ T6088]  ? __fget_files+0x21f/0x3d0
[  146.329815][ T6088]  ksys_read+0x12a/0x250
[  146.329829][ T6088]  ? __pfx_ksys_read+0x10/0x10
[  146.329851][ T6088]  do_int80_emulation+0x14b/0x720
[  146.329880][ T6088]  asm_int80_emulation+0x1a/0x20
[  146.329897][ T6088] RIP: 0023:0xf71d74eb
[  146.329912][ T6088] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  146.329927][ T6088] RSP: 002b:00000000f548d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  146.329943][ T6088] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f548d5d0
[  146.329953][ T6088] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  146.329962][ T6088] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  146.329974][ T6088] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  146.329983][ T6088] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  146.330004][ T6088]  </TASK>
[  147.400040][ T6102] batadv_slave_1: entered promiscuous mode
[  147.413805][ T6102] macvlan2: entered allmulticast mode
[  147.416004][ T6102] batadv_slave_1: entered allmulticast mode
[  147.435012][ T6102] batman_adv: batadv0: Adding interface: macvlan2
[  147.439475][ T6102] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  147.481157][ T6102] batman_adv: batadv0: Interface activated: macvlan2
[  149.778242][ T6143] [U] 
[  149.867347][   T57] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  150.790300][   T57] usb 6-1: Using ep0 maxpacket: 16
[  150.816562][   T57] usb 6-1: unable to get BOS descriptor or descriptor too short
[  150.821503][   T57] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  150.825984][   T57] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  150.845502][   T57] usb 6-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40
[  150.853882][   T57] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.859577][   T57] usb 6-1: Product: syz
[  150.865951][   T57] usb 6-1: Manufacturer: syz
[  150.869516][   T57] usb 6-1: SerialNumber: syz
[  150.965426][ T6151] batadv_slave_1: entered promiscuous mode
[  150.972401][ T6151] macvlan2: entered allmulticast mode
[  150.977065][ T6151] batadv_slave_1: entered allmulticast mode
[  151.001090][ T6151] batman_adv: batadv0: Adding interface: macvlan2
[  151.003703][ T6151] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  151.015695][ T6151] batman_adv: batadv0: Interface activated: macvlan2
[  151.716263][ T6162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  151.731543][ T6162] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  151.746938][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'.
[  151.751196][ T6164] bridge_slave_1: left allmulticast mode
[  151.754840][ T6164] bridge_slave_1: left promiscuous mode
[  151.758557][ T6164] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.933364][ T6164] bridge_slave_0: left allmulticast mode
[  151.940174][ T6164] bridge_slave_0: left promiscuous mode
[  151.950066][ T6164] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.139089][ T6157] tipc: Can't bind to reserved service type 2
[  152.392096][   T57] usb 6-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  152.429018][   T57] usb 6-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[  152.574400][   T57] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  152.604146][   T57] usb 6-1: USB disconnect, device number 6
[  152.777163][ T5955] udevd[5955]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  153.566301][ T6186] FAULT_INJECTION: forcing a failure.
[  153.566301][ T6186] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  153.658129][ T6186] CPU: 3 UID: 0 PID: 6186 Comm: syz.1.70 Not tainted syzkaller #0 PREEMPT(full) 
[  153.658154][ T6186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  153.658165][ T6186] Call Trace:
[  153.658172][ T6186]  <TASK>
[  153.658178][ T6186]  dump_stack_lvl+0x100/0x190
[  153.658224][ T6186]  should_fail_ex.cold+0x5/0xa
[  153.658247][ T6186]  _copy_to_user+0x32/0xd0
[  153.658275][ T6186]  simple_read_from_buffer+0xcb/0x170
[  153.658303][ T6186]  proc_fail_nth_read+0x1af/0x230
[  153.658326][ T6186]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  153.658349][ T6186]  ? rw_verify_area+0xce/0x6d0
[  153.658373][ T6186]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  153.658393][ T6186]  vfs_read+0x1e4/0xb40
[  153.658409][ T6186]  ? __pfx_vfs_read+0x10/0x10
[  153.658422][ T6186]  ? find_held_lock+0x2b/0x80
[  153.658442][ T6186]  ? __fget_files+0x215/0x3d0
[  153.658461][ T6186]  ? __fget_files+0x21f/0x3d0
[  153.658483][ T6186]  ksys_read+0x12a/0x250
[  153.658497][ T6186]  ? __pfx_ksys_read+0x10/0x10
[  153.658519][ T6186]  do_int80_emulation+0x14b/0x720
[  153.658547][ T6186]  asm_int80_emulation+0x1a/0x20
[  153.658563][ T6186] RIP: 0023:0xf71d74eb
[  153.658578][ T6186] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  153.658593][ T6186] RSP: 002b:00000000f546c4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  153.658609][ T6186] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f546c5d0
[  153.658619][ T6186] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  153.658629][ T6186] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  153.658637][ T6186] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  153.658647][ T6186] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  153.658668][ T6186]  </TASK>
[  154.999761][ T6196] tmpfs: Bad value for 'nr_inodes'
[  155.307832][ T6200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.74'.
[  156.945452][ T6219] bond1 (unregistering): Released all slaves
[  157.942572][ T6230] FAULT_INJECTION: forcing a failure.
[  157.942572][ T6230] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  157.972576][ T6230] CPU: 2 UID: 0 PID: 6230 Comm: syz.2.81 Not tainted syzkaller #0 PREEMPT(full) 
[  157.972602][ T6230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  157.972612][ T6230] Call Trace:
[  157.972620][ T6230]  <TASK>
[  157.972628][ T6230]  dump_stack_lvl+0x100/0x190
[  157.972654][ T6230]  should_fail_ex.cold+0x5/0xa
[  157.972675][ T6230]  _copy_from_user+0x2e/0xd0
[  157.972701][ T6230]  kstrtouint_from_user+0xd6/0x1d0
[  157.972722][ T6230]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  157.972742][ T6230]  ? __lock_acquire+0x49f/0x1a40
[  157.972781][ T6230]  proc_fail_nth_write+0x83/0x220
[  157.972805][ T6230]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  157.972836][ T6230]  vfs_write+0x2aa/0x1050
[  157.972853][ T6230]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  157.972879][ T6230]  ? __pfx_vfs_write+0x10/0x10
[  157.972894][ T6230]  ? find_held_lock+0x2b/0x80
[  157.972916][ T6230]  ? __fget_files+0x215/0x3d0
[  157.972937][ T6230]  ? __fget_files+0x21f/0x3d0
[  157.972961][ T6230]  ksys_write+0x12a/0x250
[  157.972977][ T6230]  ? __pfx_ksys_write+0x10/0x10
[  157.973001][ T6230]  do_int80_emulation+0x14b/0x720
[  157.973033][ T6230]  asm_int80_emulation+0x1a/0x20
[  157.973050][ T6230] RIP: 0023:0xf71c74eb
[  157.973065][ T6230] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  157.973081][ T6230] RSP: 002b:00000000f543b4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[  157.973097][ T6230] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f543b5d0
[  157.973108][ T6230] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  157.973118][ T6230] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  157.973127][ T6230] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  157.973137][ T6230] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  157.973158][ T6230]  </TASK>
[  158.274811][ T6232] FAULT_INJECTION: forcing a failure.
[  158.274811][ T6232] name failslab, interval 1, probability 0, space 0, times 0
[  158.282497][ T6232] CPU: 0 UID: 0 PID: 6232 Comm: syz.2.82 Not tainted syzkaller #0 PREEMPT(full) 
[  158.282523][ T6232] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  158.282534][ T6232] Call Trace:
[  158.282541][ T6232]  <TASK>
[  158.282549][ T6232]  dump_stack_lvl+0x100/0x190
[  158.282578][ T6232]  should_fail_ex.cold+0x5/0xa
[  158.282597][ T6232]  should_failslab+0xc2/0x120
[  158.282622][ T6232]  __kmalloc_noprof+0xfc/0x820
[  158.282644][ T6232]  ? tomoyo_encode2+0xfb/0x3c0
[  158.282671][ T6232]  tomoyo_encode2+0xfb/0x3c0
[  158.282699][ T6232]  tomoyo_encode+0x29/0x50
[  158.282725][ T6232]  tomoyo_realpath_from_path+0x18c/0x690
[  158.282754][ T6232]  tomoyo_path_number_perm+0x23c/0x580
[  158.282778][ T6232]  ? tomoyo_path_number_perm+0x22e/0x580
[  158.282803][ T6232]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  158.282828][ T6232]  ? get_pid_task+0x106/0x250
[  158.282873][ T6232]  ? find_held_lock+0x2b/0x80
[  158.282898][ T6232]  ? __fget_files+0x215/0x3d0
[  158.282916][ T6232]  ? hook_file_ioctl_common+0x140/0x440
[  158.282940][ T6232]  ? __fget_files+0x215/0x3d0
[  158.282960][ T6232]  ? __fget_files+0x21f/0x3d0
[  158.282983][ T6232]  security_file_ioctl_compat+0xd3/0x230
[  158.283009][ T6232]  __ia32_compat_sys_ioctl+0xc2/0x360
[  158.283036][ T6232]  __do_fast_syscall_32+0xe7/0x970
[  158.283064][ T6232]  ? lockdep_hardirqs_on+0x78/0x100
[  158.283092][ T6232]  do_fast_syscall_32+0x32/0x70
[  158.283118][ T6232]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  158.283139][ T6232] RIP: 0023:0xf708efec
[  158.283161][ T6232] Code: Unable to access opcode bytes at 0xf708efc2.
[  158.283168][ T6232] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  158.283186][ T6232] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040084504
[  158.283197][ T6232] RDX: 0000000080ffcffc RSI: 0000000000000000 RDI: 0000000000000000
[  158.283205][ T6232] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  158.283221][ T6232] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  158.283232][ T6232] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  158.283256][ T6232]  </TASK>
[  158.283278][ T6232] ERROR: Out of memory at tomoyo_realpath_from_path.
[  158.574940][ T6237] FAULT_INJECTION: forcing a failure.
[  158.574940][ T6237] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  158.590328][ T6237] CPU: 3 UID: 0 PID: 6237 Comm: syz.2.84 Not tainted syzkaller #0 PREEMPT(full) 
[  158.590350][ T6237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  158.590360][ T6237] Call Trace:
[  158.590368][ T6237]  <TASK>
[  158.590375][ T6237]  dump_stack_lvl+0x100/0x190
[  158.590403][ T6237]  should_fail_ex.cold+0x5/0xa
[  158.590443][ T6237]  _copy_to_user+0x32/0xd0
[  158.590471][ T6237]  simple_read_from_buffer+0xcb/0x170
[  158.590500][ T6237]  proc_fail_nth_read+0x1af/0x230
[  158.590523][ T6237]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  158.590546][ T6237]  ? rw_verify_area+0xce/0x6d0
[  158.590576][ T6237]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  158.590597][ T6237]  vfs_read+0x1e4/0xb40
[  158.590614][ T6237]  ? __pfx_vfs_read+0x10/0x10
[  158.590628][ T6237]  ? find_held_lock+0x2b/0x80
[  158.590649][ T6237]  ? __fget_files+0x215/0x3d0
[  158.590668][ T6237]  ? __fget_files+0x21f/0x3d0
[  158.590690][ T6237]  ksys_read+0x12a/0x250
[  158.590704][ T6237]  ? __pfx_ksys_read+0x10/0x10
[  158.590726][ T6237]  do_int80_emulation+0x14b/0x720
[  158.590754][ T6237]  asm_int80_emulation+0x1a/0x20
[  158.590772][ T6237] RIP: 0023:0xf71c74eb
[  158.590787][ T6237] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  158.590802][ T6237] RSP: 002b:00000000f547d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  158.590818][ T6237] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f547d5d0
[  158.590829][ T6237] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  158.590838][ T6237] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  158.590848][ T6237] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  158.590857][ T6237] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  158.590879][ T6237]  </TASK>
[  159.418489][ T6250] FAULT_INJECTION: forcing a failure.
[  159.418489][ T6250] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  159.488491][ T6250] CPU: 0 UID: 0 PID: 6250 Comm: syz.2.88 Not tainted syzkaller #0 PREEMPT(full) 
[  159.488514][ T6250] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  159.488522][ T6250] Call Trace:
[  159.488528][ T6250]  <TASK>
[  159.488534][ T6250]  dump_stack_lvl+0x100/0x190
[  159.488557][ T6250]  should_fail_ex.cold+0x5/0xa
[  159.488574][ T6250]  _copy_from_iter+0x1f4/0x1690
[  159.488601][ T6250]  ? __pfx__copy_from_iter+0x10/0x10
[  159.488624][ T6250]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  159.488651][ T6250]  copy_page_from_iter+0x238/0x300
[  159.488681][ T6250]  tun_build_skb.constprop.0+0x2ea/0x18f0
[  159.488707][ T6250]  ? __pfx_tun_build_skb.constprop.0+0x10/0x10
[  159.488723][ T6250]  ? unwind_get_return_address+0x59/0xa0
[  159.488744][ T6250]  ? arch_stack_walk+0xa6/0xf0
[  159.488766][ T6250]  ? __lock_acquire+0x49f/0x1a40
[  159.488800][ T6250]  tun_get_user+0x16d6/0x3c20
[  159.488824][ T6250]  ? __pfx_tun_get_user+0x10/0x10
[  159.488841][ T6250]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  159.488862][ T6250]  ? find_held_lock+0x2b/0x80
[  159.488879][ T6250]  ? tun_get+0x191/0x370
[  159.488892][ T6250]  ? tun_get+0x191/0x370
[  159.488911][ T6250]  tun_chr_write_iter+0xdc/0x200
[  159.488930][ T6250]  vfs_write+0x6ac/0x1050
[  159.488944][ T6250]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  159.488962][ T6250]  ? __pfx_vfs_write+0x10/0x10
[  159.488974][ T6250]  ? find_held_lock+0x2b/0x80
[  159.489002][ T6250]  ksys_write+0x12a/0x250
[  159.489015][ T6250]  ? __pfx_ksys_write+0x10/0x10
[  159.489033][ T6250]  do_int80_emulation+0x14b/0x720
[  159.489057][ T6250]  asm_int80_emulation+0x1a/0x20
[  159.489072][ T6250] RIP: 0023:0xf71c74eb
[  159.489084][ T6250] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  159.489097][ T6250] RSP: 002b:00000000f545c44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[  159.489111][ T6250] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080002680
[  159.489121][ T6250] RDX: 0000000000000046 RSI: 0000000000000000 RDI: 0000000000000000
[  159.489128][ T6250] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  159.489136][ T6250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  159.489144][ T6250] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  159.489162][ T6250]  </TASK>
[  160.598920][ T6263] bond1 (unregistering): Released all slaves
[  163.249926][ T6284] [U] 
[  165.194621][ T6313] FAULT_INJECTION: forcing a failure.
[  165.194621][ T6313] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  165.204292][ T6313] CPU: 3 UID: 0 PID: 6313 Comm: syz.0.104 Not tainted syzkaller #0 PREEMPT(full) 
[  165.204318][ T6313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  165.204328][ T6313] Call Trace:
[  165.204336][ T6313]  <TASK>
[  165.204344][ T6313]  dump_stack_lvl+0x100/0x190
[  165.204389][ T6313]  should_fail_ex.cold+0x5/0xa
[  165.204410][ T6313]  _copy_to_user+0x32/0xd0
[  165.204435][ T6313]  simple_read_from_buffer+0xcb/0x170
[  165.204460][ T6313]  proc_fail_nth_read+0x1af/0x230
[  165.204481][ T6313]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  165.204502][ T6313]  ? rw_verify_area+0xce/0x6d0
[  165.204523][ T6313]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  165.204543][ T6313]  vfs_read+0x1e4/0xb40
[  165.204557][ T6313]  ? preempt_schedule_common+0x42/0xc0
[  165.204577][ T6313]  ? __pfx_vfs_read+0x10/0x10
[  165.204593][ T6313]  ? _raw_spin_unlock_irqrestore+0x61/0x80
[  165.204610][ T6313]  ? __wake_up+0x3f/0x60
[  165.204632][ T6313]  ? xfd_validate_state+0x129/0x190
[  165.204651][ T6313]  ksys_read+0x12a/0x250
[  165.204663][ T6313]  ? __pfx_ksys_read+0x10/0x10
[  165.204682][ T6313]  do_int80_emulation+0x14b/0x720
[  165.204713][ T6313]  asm_int80_emulation+0x1a/0x20
[  165.204728][ T6313] RIP: 0023:0xf71b74eb
[  165.204740][ T6313] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  165.204754][ T6313] RSP: 002b:00000000f544c4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  165.204770][ T6313] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f544c5d0
[  165.204779][ T6313] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  165.204788][ T6313] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  165.204796][ T6313] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  165.204805][ T6313] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  165.204824][ T6313]  </TASK>
[  165.697421][ T6317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.106'.
[  165.701812][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.106'.
[  166.411372][ T6326] bond1 (unregistering): Released all slaves
[  167.214862][ T6332] batadv_slave_1: entered promiscuous mode
[  167.219129][ T6332] macvlan2: entered allmulticast mode
[  167.223179][ T6332] batadv_slave_1: entered allmulticast mode
[  167.233990][ T6332] batman_adv: batadv0: Adding interface: macvlan2
[  167.268483][ T6332] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  167.293484][ T6332] batman_adv: batadv0: Interface activated: macvlan2
[  169.448328][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  169.464463][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  169.529895][ T5107] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  169.703334][ T5107] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  169.794159][ T5107] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  170.340162][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.149800][ T6349] [U] 
[  171.488487][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.943324][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.140333][ T6374] FAULT_INJECTION: forcing a failure.
[  172.140333][ T6374] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  172.163128][ T6374] CPU: 1 UID: 0 PID: 6374 Comm: syz.1.119 Not tainted syzkaller #0 PREEMPT(full) 
[  172.163157][ T6374] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  172.163167][ T6374] Call Trace:
[  172.163174][ T6374]  <TASK>
[  172.163183][ T6374]  dump_stack_lvl+0x100/0x190
[  172.163211][ T6374]  should_fail_ex.cold+0x5/0xa
[  172.163233][ T6374]  _copy_from_user+0x2e/0xd0
[  172.163263][ T6374]  sctp_setsockopt+0x8cc/0xb370
[  172.163288][ T6374]  ? __pfx_aa_sk_perm+0x10/0x10
[  172.163316][ T6374]  ? __pfx_sctp_setsockopt+0x10/0x10
[  172.163339][ T6374]  ? aa_sock_opt_perm+0xfe/0x1b0
[  172.163357][ T6374]  ? sock_common_setsockopt+0x2e/0xf0
[  172.163377][ T6374]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  172.163398][ T6374]  do_sock_setsockopt+0xf3/0x1d0
[  172.163419][ T6374]  __sys_setsockopt+0x119/0x190
[  172.163450][ T6374]  __ia32_sys_setsockopt+0xbc/0x160
[  172.163474][ T6374]  ? __do_fast_syscall_32+0x98/0x970
[  172.163500][ T6374]  ? lockdep_hardirqs_on+0x78/0x100
[  172.163523][ T6374]  __do_fast_syscall_32+0xe7/0x970
[  172.163548][ T6374]  ? lockdep_hardirqs_on+0x78/0x100
[  172.163573][ T6374]  do_fast_syscall_32+0x32/0x70
[  172.163599][ T6374]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  172.163638][ T6374] RIP: 0023:0xf709efec
[  172.163662][ T6374] Code: Unable to access opcode bytes at 0xf709efc2.
[  172.163669][ T6374] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e
[  172.163687][ T6374] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084
[  172.163698][ T6374] RDX: 0000000000000023 RSI: 0000000080000040 RDI: 0000000000000008
[  172.163709][ T6374] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  172.163719][ T6374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  172.163729][ T6374] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  172.163752][ T6374]  </TASK>
[  172.333569][   T64] Bluetooth: hci1: command tx timeout
[  172.352379][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.405894][ T6376] batadv_slave_1: entered promiscuous mode
[  172.413056][ T6376] macvlan2: entered allmulticast mode
[  172.421087][ T6376] batadv_slave_1: entered allmulticast mode
[  172.429357][ T6376] batman_adv: batadv0: Adding interface: macvlan2
[  172.440294][ T6376] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  172.467461][ T6376] batman_adv: batadv0: Interface activated: macvlan2
[  173.208167][ T6388] tmpfs: Bad value for 'nr_inodes'
[  173.292513][ T6391] netlink: 'syz.2.124': attribute type 11 has an invalid length.
[  173.991263][ T6391] can: request_module (can-proto-3) failed.
[  174.419112][   T64] Bluetooth: hci1: command tx timeout
[  174.586969][ T6345] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.591408][ T6345] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.596329][ T6345] bridge_slave_0: entered allmulticast mode
[  174.601230][ T6345] bridge_slave_0: entered promiscuous mode
[  174.613940][ T6345] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.618315][ T6345] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.622868][ T6345] bridge_slave_1: entered allmulticast mode
[  174.628401][ T6345] bridge_slave_1: entered promiscuous mode
[  174.998621][   T12] bridge_slave_1: left allmulticast mode
[  175.001130][   T12] bridge_slave_1: left promiscuous mode
[  175.006309][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.088025][   T12] bridge_slave_0: left allmulticast mode
[  175.092593][   T12] bridge_slave_0: left promiscuous mode
[  175.111267][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.056881][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.076668][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.105242][   T12] bond0 (unregistering): Released all slaves
[  176.279712][ T6345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  176.446255][ T5461] 8021q: adding VLAN 0 to HW filter on device eth2
[  176.449773][   T64] Bluetooth: hci1: command tx timeout
[  176.461186][ T6345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  176.786177][ T6345] team0: Port device team_slave_0 added
[  176.802786][ T6345] team0: Port device team_slave_1 added
[  177.120682][ T6345] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.123714][ T6345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  177.134904][ T6345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.218201][ T6345] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.221495][ T6345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  177.273316][ T6345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.590852][ T6345] hsr_slave_0: entered promiscuous mode
[  177.632551][ T6345] hsr_slave_1: entered promiscuous mode
[  177.637994][ T6345] debugfs: 'hsr0' already exists in 'hsr'
[  177.651129][ T6345] Cannot create hsr debugfs directory
[  177.683843][ T5461] 8021q: adding VLAN 0 to HW filter on device eth4
[  177.848515][   T12] hsr_slave_0: left promiscuous mode
[  177.855948][   T12] hsr_slave_1: left promiscuous mode
[  177.861318][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  177.939442][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  178.017409][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  178.021908][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  178.071336][   T12] batman_adv: batadv0: Interface deactivated: macvlan2
[  178.074725][   T12] batman_adv: batadv0: Removing interface: macvlan2
[  178.149035][   T12] batadv_slave_1: left allmulticast mode
[  178.152853][   T12] batadv_slave_1: left promiscuous mode
[  178.161367][   T12] veth1_macvtap: left promiscuous mode
[  178.180969][   T12] veth0_macvtap: left promiscuous mode
[  178.184404][   T12] veth1_vlan: left promiscuous mode
[  178.202933][   T12] veth0_vlan: left promiscuous mode
[  178.541530][   T64] Bluetooth: hci1: command tx timeout
[  178.608823][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'.
[  179.578219][   T12] team0 (unregistering): Port device team_slave_1 removed
[  179.601187][   T12] team0 (unregistering): Port device team_slave_0 removed
[  180.490642][ T6345] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  180.552777][ T6345] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  180.572483][ T6345] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  180.631274][ T6345] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  180.661093][ T6345] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  180.770496][ T6345] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  180.786350][ T5461] 8021q: adding VLAN 0 to HW filter on device eth3
[  180.793107][ T6345] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  180.941794][ T6345] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  182.442833][ T5461] 8021q: adding VLAN 0 to HW filter on device eth5
[  182.530503][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.144'.
[  182.536477][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.144'.
[  182.817701][ T6345] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.964406][ T6345] 8021q: adding VLAN 0 to HW filter on device team0
[  183.026996][ T6515] netlink: 'syz.1.145': attribute type 2 has an invalid length.
[  183.084889][ T6515] netlink: 40 bytes leftover after parsing attributes in process `syz.1.145'.
[  183.177958][ T1269] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.182814][ T1269] bridge0: port 1(bridge_slave_0) entered forwarding state
[  183.254146][ T1269] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.267412][ T1269] bridge0: port 2(bridge_slave_1) entered forwarding state
[  183.938991][ T6528] bond1 (unregistering): Released all slaves
[  184.026400][ T6515] : entered promiscuous mode
[  184.442171][    C0] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000001) at rIP: 0xffffffff81b177ba (__mcheck_cpu_init_prepare_banks+0x18a/0x380)
[  184.469992][    C0] Call Trace:
[  184.471599][    C0]  <IRQ>
[  184.472964][    C0]  ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10
[  184.475799][    C0]  ? sched_clock_cpu+0x6c/0x570
[  184.478598][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[  184.483559][    C0]  ? __pfx_mce_cpu_restart+0x10/0x10
[  184.488321][    C0]  mce_cpu_restart+0xd5/0x1f0
[  184.493141][    C0]  __flush_smp_call_function_queue+0x281/0x960
[  184.498808][    C0]  __sysvec_call_function+0x81/0x420
[  184.508202][    C0]  sysvec_call_function+0x9e/0xc0
[  184.511015][    C0]  </IRQ>
[  184.512620][    C0]  <TASK>
[  184.518451][    C0]  asm_sysvec_call_function+0x1a/0x20
[  184.521969][    C0] RIP: 0010:smp_call_function_many_cond+0x58e/0x1870
[  184.531128][    C0] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 44 92 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 a8 10 00 00 8b 45 08 31
[  184.552467][    C0] RSP: 0018:ffffc90000bbf858 EFLAGS: 00000293
[  184.558533][    C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff81fd1ee2
[  184.569238][    C0] RDX: ffff888020778000 RSI: ffffffff81fd1ebc RDI: ffff888020778000
[  184.578199][    C0] RBP: ffff88802b541380 R08: 0000000000000005 R09: 0000000000000000
[  184.587997][    C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003
[  184.593219][    C0] R13: ffffed10056a8271 R14: 0000000000000001 R15: ffff88802b23c9c0
[  184.607498][    C0]  ? smp_call_function_many_cond+0x5b2/0x1870
[  184.611130][    C0]  ? smp_call_function_many_cond+0x58c/0x1870
[  184.615276][    C0]  ? smp_call_function_many_cond+0x58c/0x1870
[  184.619767][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  184.622813][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  184.626742][    C0]  ? __pfx_text_poke_memcpy+0x10/0x10
[  184.630188][    C0]  ? __pfx___text_poke+0x10/0x10
[  184.633391][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  184.636627][    C0]  on_each_cpu_cond_mask+0x40/0x90
[  184.639898][    C0]  smp_text_poke_batch_finish+0x919/0xc60
[  184.643808][    C0]  ? __kmalloc_cache_node_noprof+0xab/0x6c0
[  184.647830][    C0]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  184.651776][    C0]  ? arch_jump_label_transform_queue+0xc0/0x120
[  184.655146][    C0]  arch_jump_label_transform_apply+0x1c/0x30
[  184.658899][    C0]  jump_label_update+0x37a/0x550
[  184.662351][    C0]  static_key_enable_cpuslocked+0x1bc/0x270
[  184.665991][    C0]  static_key_enable+0x1a/0x20
[  184.669105][    C0]  toggle_allocation_gate+0xfe/0x2d0
[  184.672508][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  184.676467][    C0]  ? rcu_is_watching+0x12/0xc0
[  184.679705][    C0]  process_one_work+0xa23/0x1940
[  184.682815][    C0]  ? __pfx_process_one_work+0x10/0x10
[  184.686141][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  184.690196][    C0]  worker_thread+0x5ef/0xe50
[  184.693941][    C0]  ? __pfx_worker_thread+0x10/0x10
[  184.697855][    C0]  ? kthread+0x13a/0x450
[  184.700551][    C0]  ? __pfx_worker_thread+0x10/0x10
[  184.703794][    C0]  kthread+0x370/0x450
[  184.706369][    C0]  ? __pfx_kthread+0x10/0x10
[  184.709281][    C0]  ret_from_fork+0x72b/0xd50
[  184.712190][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  184.715202][    C0]  ? __switch_to+0x800/0x10f0
[  184.718287][    C0]  ? __pfx_kthread+0x10/0x10
[  184.721356][    C0]  ret_from_fork_asm+0x1a/0x30
[  184.724523][    C0]  </TASK>
[  184.984846][ T6345] 8021q: adding VLAN 0 to HW filter on device batadv0
[  185.229866][ T6555] syzkaller0: entered promiscuous mode
[  185.234680][ T6555] syzkaller0: entered allmulticast mode
[  185.275468][ T6555] tipc: Started in network mode
[  185.305205][ T6555] tipc: Node identity d6cdc9e33788, cluster identity 4711
[  185.328248][ T6555] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.448891][ T6559] evm: overlay not supported
[  185.621315][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.152'.
[  185.778781][ T6345] veth0_vlan: entered promiscuous mode
[  185.810050][ T6345] veth1_vlan: entered promiscuous mode
[  185.979456][ T6345] veth0_macvtap: entered promiscuous mode
[  185.986969][ T6345] veth1_macvtap: entered promiscuous mode
[  186.020495][ T6554] tipc: Resetting bearer <eth:syzkaller0>
[  186.089699][ T6554] tipc: Disabling bearer <eth:syzkaller0>
[  186.136573][ T6345] batman_adv: batadv0: Interface activated: batadv_slave_0
[  186.208133][ T6345] batman_adv: batadv0: Interface activated: batadv_slave_1
[  186.248456][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.269811][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.293220][   T42] audit: type=1800 audit(1785997247.565:2): pid=6561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.150" name="/" dev="fuse" ino=7 res=0 errno=0
[  186.437570][   T14] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.546361][   T14] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.848685][  T573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.866636][ T6580] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  186.888898][ T6580] overlayfs: failed to set xattr on upper
[  186.908482][ T6580] overlayfs: ...falling back to redirect_dir=nofollow.
[  186.911075][ T6580] overlayfs: ...falling back to index=off.
[  186.928110][  T573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.930604][ T6580] overlayfs: ...falling back to uuid=null.
[  186.991253][   T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.046475][   T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.507268][    C2] hpet: Lost 1 RTC interrupts
[  188.540338][    C2] hpet: Lost 1 RTC interrupts
[  188.639306][   T42] audit: type=1800 audit(1785997249.955:3): pid=6595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.161" name="bus" dev="9p" ino=77617143 res=0 errno=0
[  188.764432][    C2] hpet: Lost 1 RTC interrupts
[  188.802107][ T6610] mmap: syz.0.165 (6610) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  189.205071][ T6622] FAULT_INJECTION: forcing a failure.
[  189.205071][ T6622] name failslab, interval 1, probability 0, space 0, times 0
[  189.225427][ T6622] CPU: 1 UID: 0 PID: 6622 Comm: syz.4.171 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  189.225456][ T6622] Tainted: [L]=SOFTLOCKUP
[  189.225462][ T6622] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  189.225471][ T6622] Call Trace:
[  189.225478][ T6622]  <TASK>
[  189.225486][ T6622]  dump_stack_lvl+0x100/0x190
[  189.225518][ T6622]  should_fail_ex.cold+0x5/0xa
[  189.225537][ T6622]  should_failslab+0xc2/0x120
[  189.225558][ T6622]  __kvmalloc_node_noprof+0x116/0x970
[  189.225581][ T6622]  ? ksys_write+0x190/0x250
[  189.225596][ T6622]  ? traverse.part.0.constprop.0+0x397/0x650
[  189.225625][ T6622]  traverse.part.0.constprop.0+0x397/0x650
[  189.225656][ T6622]  seq_lseek+0x2fb/0x430
[  189.225682][ T6622]  full_proxy_llseek+0x123/0x190
[  189.225706][ T6622]  ksys_lseek+0xf3/0x1b0
[  189.225730][ T6622]  __do_fast_syscall_32+0xe7/0x970
[  189.225754][ T6622]  ? lockdep_hardirqs_on+0x78/0x100
[  189.225776][ T6622]  do_fast_syscall_32+0x32/0x70
[  189.225799][ T6622]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  189.225820][ T6622] RIP: 0023:0xf7f42fec
[  189.225841][ T6622] Code: Unable to access opcode bytes at 0xf7f42fc2.
[  189.225848][ T6622] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000013
[  189.225864][ T6622] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000851
[  189.225874][ T6622] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  189.225882][ T6622] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  189.225891][ T6622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  189.225900][ T6622] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  189.225922][ T6622]  </TASK>
[  189.624241][ T6631] FAULT_INJECTION: forcing a failure.
[  189.624241][ T6631] name failslab, interval 1, probability 0, space 0, times 0
[  189.633901][ T6631] CPU: 3 UID: 0 PID: 6631 Comm: syz.1.168 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  189.633927][ T6631] Tainted: [L]=SOFTLOCKUP
[  189.633934][ T6631] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  189.633944][ T6631] Call Trace:
[  189.633951][ T6631]  <TASK>
[  189.633959][ T6631]  dump_stack_lvl+0x100/0x190
[  189.633983][ T6631]  should_fail_ex.cold+0x5/0xa
[  189.634001][ T6631]  should_failslab+0xc2/0x120
[  189.634024][ T6631]  __kmalloc_noprof+0xfc/0x820
[  189.634044][ T6631]  ? tomoyo_encode2+0xfb/0x3c0
[  189.634071][ T6631]  tomoyo_encode2+0xfb/0x3c0
[  189.634097][ T6631]  tomoyo_encode+0x29/0x50
[  189.634121][ T6631]  tomoyo_realpath_from_path+0x18c/0x690
[  189.634149][ T6631]  tomoyo_path_number_perm+0x23c/0x580
[  189.634170][ T6631]  ? tomoyo_path_number_perm+0x22e/0x580
[  189.634194][ T6631]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  189.634218][ T6631]  ? get_pid_task+0x106/0x250
[  189.634259][ T6631]  ? find_held_lock+0x2b/0x80
[  189.634280][ T6631]  ? __fget_files+0x215/0x3d0
[  189.634296][ T6631]  ? hook_file_ioctl_common+0x140/0x440
[  189.634316][ T6631]  ? __fget_files+0x215/0x3d0
[  189.634336][ T6631]  ? __fget_files+0x21f/0x3d0
[  189.634355][ T6631]  security_file_ioctl_compat+0xd3/0x230
[  189.634379][ T6631]  __ia32_compat_sys_ioctl+0xc2/0x360
[  189.634406][ T6631]  __do_fast_syscall_32+0xe7/0x970
[  189.634431][ T6631]  ? lockdep_hardirqs_on+0x78/0x100
[  189.634456][ T6631]  do_fast_syscall_32+0x32/0x70
[  189.634481][ T6631]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  189.634502][ T6631] RIP: 0023:0xf709efec
[  189.634522][ T6631] Code: Unable to access opcode bytes at 0xf709efc2.
[  189.634530][ T6631] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  189.634555][ T6631] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005321
[  189.634565][ T6631] RDX: 0000000000000019 RSI: 0000000000000000 RDI: 0000000000000000
[  189.634574][ T6631] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  189.634584][ T6631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  189.634594][ T6631] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  189.634615][ T6631]  </TASK>
[  189.634638][ T6631] ERROR: Out of memory at tomoyo_realpath_from_path.
[  190.825354][ T6659] siw: device registration error -23
[  192.021528][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.179'.
[  192.941086][ T6680] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  192.945605][ T6680] overlayfs: failed to set xattr on upper
[  192.949540][ T6680] overlayfs: ...falling back to redirect_dir=nofollow.
[  192.954299][ T6680] overlayfs: ...falling back to index=off.
[  192.967326][ T6680] overlayfs: ...falling back to uuid=null.
[  193.501518][ T6678] fuse: Bad value for 'group_id'
[  193.503478][ T6678] fuse: Bad value for 'group_id'
[  193.969035][ T6692] netlink: 'syz.1.186': attribute type 1 has an invalid length.
[  193.981602][ T6692] netlink: 232 bytes leftover after parsing attributes in process `syz.1.186'.
[  194.009871][ T6692] netlink: 'syz.1.186': attribute type 1 has an invalid length.
[  195.092729][ T6701] siw: device registration error -23
[  196.896280][ T6722] macvlan3: entered allmulticast mode
[  197.120201][ T6722] batman_adv: batadv0: Adding interface: macvlan3
[  197.122722][ T6722] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  197.154692][ T6722] batman_adv: batadv0: Interface activated: macvlan3
[  197.369584][ T6733] EXT4-fs (sr0): VFS: Can't find ext4 filesystem
[  197.979197][ T6737] bond1 (unregistering): Released all slaves
[  198.157735][ T1480] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  198.397142][ T1480] usb 7-1: Using ep0 maxpacket: 16
[  198.430387][ T1480] usb 7-1: unable to get BOS descriptor or descriptor too short
[  198.435081][ T1480] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  198.444003][ T1480] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  198.489161][ T1480] usb 7-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40
[  198.493003][ T1480] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.496108][ T1480] usb 7-1: Product: syz
[  198.498434][ T1480] usb 7-1: Manufacturer: syz
[  198.567474][ T1480] usb 7-1: SerialNumber: syz
[  198.698384][ T6758] siw: device registration error -23
[  198.953939][ T6764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'.
[  199.190906][ T6765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  199.213276][ T6765] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  200.302039][ T6781] batadv_slave_1: entered promiscuous mode
[  200.328280][ T6781] macvlan2: entered allmulticast mode
[  200.330399][ T6781] batadv_slave_1: entered allmulticast mode
[  200.466996][ T6781] batman_adv: batadv0: Adding interface: macvlan2
[  200.470813][ T6781] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  200.484773][ T6781] batman_adv: batadv0: Interface activated: macvlan2
[  200.705534][ T6785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.203'.
[  200.716032][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.203'.
[  201.216396][ T1480] usb 7-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  201.310952][ T1480] usb 7-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[  201.468072][ T1480] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[  201.476821][ T1480] usb 7-1: USB disconnect, device number 6
[  201.548837][ T5955] udevd[5955]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  202.305922][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'.
[  203.159164][ T6810] bond1 (unregistering): Released all slaves
[  205.116708][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.216'.
[  205.146749][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.216'.
[  205.364014][ T6839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.217'.
[  205.387033][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.217'.
[  206.621010][ T1442] ieee802154 phy0 wpan0: encryption failed: -22
[  206.624952][ T1442] ieee802154 phy1 wpan1: encryption failed: -22
[  208.236421][   T42] audit: type=1804 audit(1785997269.555:4): pid=6873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.226" name="/newroot/19/file0/bus" dev="9p" ino=77617143 res=1 errno=0
[  208.921067][ T6879] bond1 (unregistering): Released all slaves
[  209.180326][ T6884] bond1 (unregistering): Released all slaves
[  209.305623][ T6890] random: crng reseeded on system resumption
[  210.428254][ T6890] syz.4.228 (6890) used greatest stack depth: 18792 bytes left
[  211.196058][   T42] audit: type=1804 audit(1785997272.505:5): pid=6900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.230" name="/newroot/61/file0/bus" dev="9p" ino=77617143 res=1 errno=0
[  211.488131][ T1480] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  211.663323][ T1480] usb 7-1: Using ep0 maxpacket: 16
[  211.673702][ T1480] usb 7-1: unable to get BOS descriptor or descriptor too short
[  212.197892][ T1480] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  212.203024][ T1480] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  212.225666][ T1480] usb 7-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40
[  212.229762][ T1480] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.234406][ T1480] usb 7-1: Product: syz
[  212.236255][ T1480] usb 7-1: Manufacturer: syz
[  212.238300][ T1480] usb 7-1: SerialNumber: syz
[  212.541165][ T6923] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[  212.544103][ T6923] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  212.583968][ T6923] vhci_hcd vhci_hcd.0: Device attached
[  212.710281][ T6909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  212.733152][ T6909] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  212.880029][ T5887] usb 40-1: SetAddress Request (2) to port 0
[  212.880113][ T5887] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd
[  213.151823][ T6940] bond1 (unregistering): Released all slaves
[  213.285263][ T6927] vhci_hcd: connection reset by peer
[  213.341655][   T12] vhci_hcd vhci_hcd.1: stop threads
[  213.343957][   T12] vhci_hcd vhci_hcd.1: release socket
[  213.347984][   T12] vhci_hcd vhci_hcd.1: disconnect device
[  214.301448][ T1480] usb 7-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  214.304588][ T6947] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  214.312288][ T1480] usb 7-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[  214.329948][ T6947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.242'.
[  214.455234][ T6949] netlink: 32 bytes leftover after parsing attributes in process `syz.0.242'.
[  214.681211][ T1480] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[  214.686444][ T1480] usb 7-1: USB disconnect, device number 7
[  214.905786][ T5955] udevd[5955]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  215.090287][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'.
[  215.108783][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.249'.
[  215.167412][ T6966] FAT-fs (mtdblock0): bogus logical sector size 65535
[  215.173118][ T6966] FAT-fs (mtdblock0): Can't find a valid FAT filesystem
[  216.116070][ T6982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.252'.
[  216.385116][    T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!!
[  216.421971][    T0] NOHZ tick-stop error: local softirq work is pending, handler #2ca!!!
[  216.510231][ T6989] FAULT_INJECTION: forcing a failure.
[  216.510231][ T6989] name failslab, interval 1, probability 0, space 0, times 0
[  216.535439][   T42] audit: type=1804 audit(1785997277.815:6): pid=6990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.257" name="/newroot/72/file0/bus" dev="9p" ino=77617143 res=1 errno=0
[  216.554237][ T6989] CPU: 1 UID: 0 PID: 6989 Comm: syz.4.258 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  216.554274][ T6989] Tainted: [L]=SOFTLOCKUP
[  216.554280][ T6989] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  216.554291][ T6989] Call Trace:
[  216.554298][ T6989]  <TASK>
[  216.554306][ T6989]  dump_stack_lvl+0x100/0x190
[  216.554340][ T6989]  should_fail_ex.cold+0x5/0xa
[  216.554358][ T6989]  should_failslab+0xc2/0x120
[  216.554383][ T6989]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  216.554406][ T6989]  ? __alloc_skb+0x5b7/0x710
[  216.554433][ T6989]  ? __alloc_skb+0x140/0x710
[  216.554475][ T6989]  __alloc_skb+0x140/0x710
[  216.554496][ T6989]  ? __alloc_skb+0x5b7/0x710
[  216.554519][ T6989]  ? __pfx___alloc_skb+0x10/0x10
[  216.554549][ T6989]  netlink_alloc_large_skb+0x69/0x150
[  216.554573][ T6989]  netlink_sendmsg+0x680/0xda0
[  216.554597][ T6989]  ? __pfx_netlink_sendmsg+0x10/0x10
[  216.554619][ T6989]  ? apparmor_socket_sendmsg+0x15b/0x270
[  216.554644][ T6989]  ____sys_sendmsg+0xa4d/0xbe0
[  216.554663][ T6989]  ? __pfx_netlink_sendmsg+0x10/0x10
[  216.554685][ T6989]  ? __pfx_____sys_sendmsg+0x10/0x10
[  216.554714][ T6989]  ___sys_sendmsg+0x190/0x1e0
[  216.554732][ T6989]  ? __pfx____sys_sendmsg+0x10/0x10
[  216.554763][ T6989]  ? find_held_lock+0x2b/0x80
[  216.554799][ T6989]  __sys_sendmsg+0x160/0x210
[  216.554824][ T6989]  ? __pfx___sys_sendmsg+0x10/0x10
[  216.554854][ T6989]  ? __pfx_ksys_write+0x10/0x10
[  216.554875][ T6989]  __do_fast_syscall_32+0xe7/0x970
[  216.554901][ T6989]  ? lockdep_hardirqs_on+0x78/0x100
[  216.554925][ T6989]  do_fast_syscall_32+0x32/0x70
[  216.554949][ T6989]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  216.554971][ T6989] RIP: 0023:0xf7f42fec
[  216.554992][ T6989] Code: Unable to access opcode bytes at 0xf7f42fc2.
[  216.554999][ T6989] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  216.555015][ T6989] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800003c0
[  216.555026][ T6989] RDX: 0000000000004890 RSI: 0000000000000000 RDI: 0000000000000000
[  216.555037][ T6989] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  216.555047][ T6989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  216.555057][ T6989] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  216.555080][ T6989]  </TASK>
[  216.820089][    C2] hpet: Lost 2 RTC interrupts
[  217.568927][ T7009] tmpfs: Bad value for 'nr_inodes'
[  217.987950][ T5887] usb 40-1: device descriptor read/8, error -110
[  218.431943][ T5887] usb usb40-port1: attempt power cycle
[  218.803651][ T7032] FAULT_INJECTION: forcing a failure.
[  218.803651][ T7032] name failslab, interval 1, probability 0, space 0, times 0
[  218.811738][ T7032] CPU: 1 UID: 0 PID: 7032 Comm: syz.0.271 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  218.811768][ T7032] Tainted: [L]=SOFTLOCKUP
[  218.811773][ T7032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  218.811782][ T7032] Call Trace:
[  218.811790][ T7032]  <TASK>
[  218.811799][ T7032]  dump_stack_lvl+0x100/0x190
[  218.811824][ T7032]  should_fail_ex.cold+0x5/0xa
[  218.811844][ T7032]  should_failslab+0xc2/0x120
[  218.811868][ T7032]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  218.811890][ T7032]  ? __alloc_skb+0x5b7/0x710
[  218.811912][ T7032]  ? __alloc_skb+0x140/0x710
[  218.811936][ T7032]  __alloc_skb+0x140/0x710
[  218.811956][ T7032]  ? __alloc_skb+0x5b7/0x710
[  218.811977][ T7032]  ? __pfx___alloc_skb+0x10/0x10
[  218.812005][ T7032]  netlink_alloc_large_skb+0x69/0x150
[  218.812027][ T7032]  netlink_sendmsg+0x680/0xda0
[  218.812049][ T7032]  ? __pfx_netlink_sendmsg+0x10/0x10
[  218.812070][ T7032]  ? apparmor_socket_sendmsg+0x15b/0x270
[  218.812092][ T7032]  ____sys_sendmsg+0xa4d/0xbe0
[  218.812143][ T7032]  ? __pfx_netlink_sendmsg+0x10/0x10
[  218.812164][ T7032]  ? __pfx_____sys_sendmsg+0x10/0x10
[  218.812191][ T7032]  ___sys_sendmsg+0x190/0x1e0
[  218.812211][ T7032]  ? __pfx____sys_sendmsg+0x10/0x10
[  218.812240][ T7032]  ? find_held_lock+0x2b/0x80
[  218.812275][ T7032]  __sys_sendmsg+0x160/0x210
[  218.812300][ T7032]  ? __pfx___sys_sendmsg+0x10/0x10
[  218.812330][ T7032]  ? __pfx_ksys_write+0x10/0x10
[  218.812426][ T7032]  __do_fast_syscall_32+0xe7/0x970
[  218.812453][ T7032]  ? lockdep_hardirqs_on+0x78/0x100
[  218.812477][ T7032]  do_fast_syscall_32+0x32/0x70
[  218.812501][ T7032]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  218.812522][ T7032] RIP: 0023:0xf707efec
[  218.812544][ T7032] Code: Unable to access opcode bytes at 0xf707efc2.
[  218.812551][ T7032] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  218.812567][ T7032] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000580
[  218.812579][ T7032] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000
[  218.812588][ T7032] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  218.812598][ T7032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  218.812608][ T7032] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  218.812630][ T7032]  </TASK>
[  219.251235][ T5887] usb usb40-port1: unable to enumerate USB device
[  219.769989][ T7043] macvlan3: entered allmulticast mode
[  219.798510][ T7043] batman_adv: batadv0: Adding interface: macvlan3
[  219.800982][ T7043] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  219.838638][ T7043] batman_adv: batadv0: Interface activated: macvlan3
[  220.275842][ T7053] 9pnet_virtio: no channels available for device syz
[  220.294244][ T7045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.274'.
[  221.493033][ T7081] siw: device registration error -23
[  222.307487][   T42] audit: type=1804 audit(1785997283.615:7): pid=7086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.284" name="/newroot/40/file0/bus" dev="9p" ino=77617143 res=1 errno=0
[  223.064609][ T7101] netlink: 'syz.2.285': attribute type 10 has an invalid length.
[  223.153161][ T7101] team0: Port device dummy0 added
[  223.342708][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.289'.
[  224.353838][ T7124] siw: device registration error -23
[  225.214606][ T7136] macvlan3: entered allmulticast mode
[  225.219169][ T7136] batman_adv: batadv0: Adding interface: macvlan3
[  225.222359][ T7136] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  225.272474][ T7136] batman_adv: batadv0: Interface activated: macvlan3
[  225.798455][ T7151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.300'.
[  226.127064][ T7159] random: crng reseeded on system resumption
[  226.849953][ T7166] random: crng reseeded on system resumption
[  226.872580][ T7166] FAULT_INJECTION: forcing a failure.
[  226.872580][ T7166] name failslab, interval 1, probability 0, space 0, times 0
[  226.908684][ T7166] CPU: 3 UID: 0 PID: 7166 Comm: syz.0.307 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  226.908711][ T7166] Tainted: [L]=SOFTLOCKUP
[  226.908718][ T7166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  226.908729][ T7166] Call Trace:
[  226.908737][ T7166]  <TASK>
[  226.908744][ T7166]  dump_stack_lvl+0x100/0x190
[  226.908772][ T7166]  should_fail_ex.cold+0x5/0xa
[  226.908791][ T7166]  should_failslab+0xc2/0x120
[  226.908817][ T7166]  __kmalloc_noprof+0xfc/0x820
[  226.908835][ T7166]  ? rcu_is_watching+0x12/0xc0
[  226.908860][ T7166]  ? tomoyo_realpath_from_path+0xb6/0x690
[  226.908887][ T7166]  tomoyo_realpath_from_path+0xb6/0x690
[  226.908913][ T7166]  tomoyo_path_number_perm+0x23c/0x580
[  226.908932][ T7166]  ? tomoyo_path_number_perm+0x22e/0x580
[  226.908951][ T7166]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  226.908976][ T7166]  ? get_pid_task+0x106/0x250
[  226.909014][ T7166]  ? find_held_lock+0x2b/0x80
[  226.909032][ T7166]  ? __fget_files+0x215/0x3d0
[  226.909044][ T7166]  ? hook_file_ioctl_common+0x140/0x440
[  226.909063][ T7166]  ? __fget_files+0x215/0x3d0
[  226.909079][ T7166]  ? __fget_files+0x21f/0x3d0
[  226.909095][ T7166]  security_file_ioctl_compat+0xd3/0x230
[  226.909115][ T7166]  __ia32_compat_sys_ioctl+0xc2/0x360
[  226.909139][ T7166]  __do_fast_syscall_32+0xe7/0x970
[  226.909160][ T7166]  ? lockdep_hardirqs_on+0x78/0x100
[  226.909180][ T7166]  do_fast_syscall_32+0x32/0x70
[  226.909262][ T7166]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  226.909282][ T7166] RIP: 0023:0xf707efec
[  226.909303][ T7166] Code: Unable to access opcode bytes at 0xf707efc2.
[  226.909309][ T7166] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  226.909324][ T7166] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000003312
[  226.909333][ T7166] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  226.909341][ T7166] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  226.909349][ T7166] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  226.909357][ T7166] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  226.909376][ T7166]  </TASK>
[  226.909384][ T7166] ERROR: Out of memory at tomoyo_realpath_from_path.
[  227.153170][ T7169] siw: device registration error -23
[  227.383385][ T7173] random: crng reseeded on system resumption
[  227.862693][ T7177] macvlan4: entered allmulticast mode
[  227.893269][ T7177] batman_adv: batadv0: Adding interface: macvlan4
[  227.896547][ T7177] batman_adv: batadv0: The MTU of interface macvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  227.923017][ T7177] batman_adv: batadv0: Interface activated: macvlan4
[  228.181104][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.312'.
[  230.569923][ T7209] bond1 (unregistering): Released all slaves
[  232.406506][ T7215] macvlan4: entered allmulticast mode
[  232.411355][ T7215] batman_adv: batadv0: Adding interface: macvlan4
[  232.418767][ T7215] batman_adv: batadv0: The MTU of interface macvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  232.444137][ T7215] batman_adv: batadv0: Interface activated: macvlan4
[  232.541668][ T7220] Zero length message leads to an empty skb
[  232.668699][ T7222] overlay: Bad value for 'redirect_dir'
[  233.883102][ T5914] IPVS: starting estimator thread 0...
[  233.984491][ T7245] IPVS: using max 31 ests per chain, 74400 per kthread
[  234.798162][ T7253] bond2 (unregistering): Released all slaves
[  234.902117][ T7261] xt_connbytes: Forcing CT accounting to be enabled
[  234.905273][ T7261] xt_SECMARK: invalid mode: 0
[  235.017981][ T1480] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  235.152887][ T7266] macvlan5: entered allmulticast mode
[  235.170056][ T7266] batman_adv: batadv0: Adding interface: macvlan5
[  235.176671][ T7266] batman_adv: batadv0: The MTU of interface macvlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  235.191047][ T7266] batman_adv: batadv0: Interface activated: macvlan5
[  235.252748][ T1480] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  235.257719][ T1480] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[  235.261084][ T1480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.425602][   T42] audit: type=1804 audit(1785997296.735:8): pid=7267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.338" name="/newroot/54/file0/bus" dev="9p" ino=77617143 res=1 errno=0
[  235.467696][   T42] audit: type=1804 audit(1785997296.735:9): pid=7268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.338" name="/newroot/54/file0/bus" dev="9p" ino=77617143 res=1 errno=0
[  235.736978][ T1480] qmi_wwan 6-1:1.0: cdc-wdm0: USB WDM device
[  235.877352][ T1480] wwan wwan0: port wwan0qmi0 attached
[  235.984273][ T1480] qmi_wwan 6-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, 8e:38:29:1e:41:4c
[  236.036825][ T1480] usb 6-1: USB disconnect, device number 7
[  236.043279][ T1480] qmi_wwan 6-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device
[  236.890877][ T1480] wwan wwan0: port wwan0qmi0 disconnected
[  237.025232][ T7280] syz.1.344: page allocation failure: order:2, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1
[  237.036286][ T7280] CPU: 1 UID: 0 PID: 7280 Comm: syz.1.344 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  237.036317][ T7280] Tainted: [L]=SOFTLOCKUP
[  237.036323][ T7280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  237.036333][ T7280] Call Trace:
[  237.036363][ T7280]  <TASK>
[  237.036370][ T7280]  dump_stack_lvl+0x100/0x190
[  237.036515][ T7280]  warn_alloc.cold+0x94/0xa8
[  237.036534][ T7280]  ? __pfx_warn_alloc+0x10/0x10
[  237.036569][ T7280]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  237.036677][ T7280]  ? __pfx_get_page_from_freelist+0x10/0x10
[  237.036705][ T7280]  __alloc_frozen_pages_noprof+0x159f/0x2dc0
[  237.036743][ T7280]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  237.036765][ T7280]  ? mark_held_locks+0x40/0x70
[  237.036808][ T7280]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  237.036831][ T7280]  ? lockdep_hardirqs_on+0x78/0x100
[  237.036855][ T7280]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  237.036881][ T7280]  ? kasan_save_track+0x14/0x30
[  237.036903][ T7280]  ? __kasan_kmalloc+0xaa/0xb0
[  237.036923][ T7280]  ? __kmalloc_noprof+0x322/0x820
[  237.036942][ T7280]  ? comedi_isadma_alloc+0xc6/0x620
[  237.037012][ T7280]  ? pcl818_attach+0xffa/0x17d0
[  237.037048][ T7280]  __alloc_pages_noprof+0xb/0x110
[  237.037069][ T7280]  __dma_direct_alloc_pages.isra.0+0x47c/0x8f0
[  237.037099][ T7280]  ? __pfx___dma_direct_alloc_pages.isra.0+0x10/0x10
[  237.037124][ T7280]  ? dma_alloc_from_dev_coherent+0x2e0/0x570
[  237.037152][ T7280]  dma_direct_alloc+0x8f/0x590
[  237.037206][ T7280]  dma_alloc_attrs+0x182/0x3a0
[  237.037227][ T7280]  ? __pfx_dma_alloc_attrs+0x10/0x10
[  237.037247][ T7280]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  237.037266][ T7280]  ? dma_direct_supported+0xca/0x220
[  237.037293][ T7280]  comedi_isadma_alloc+0x331/0x620
[  237.037321][ T7280]  ? __pfx_comedi_isadma_alloc+0x10/0x10
[  237.037345][ T7280]  ? request_threaded_irq+0x27b/0x3e0
[  237.037373][ T7280]  pcl818_attach+0xffa/0x17d0
[  237.037401][ T7280]  comedi_device_attach+0x40e/0x6b0
[  237.037428][ T7280]  do_devconfig_ioctl+0x1b3/0x6d0
[  237.037452][ T7280]  ? comedi_unlocked_ioctl+0x180/0x3310
[  237.037470][ T7280]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[  237.037505][ T7280]  ? tomoyo_path_number_perm+0x46d/0x580
[  237.037582][ T7280]  ? kasan_save_stack+0x3f/0x50
[  237.037602][ T7280]  ? kasan_save_stack+0x30/0x50
[  237.037623][ T7280]  ? kasan_save_track+0x14/0x30
[  237.037644][ T7280]  ? kasan_save_free_info+0x3b/0x70
[  237.037666][ T7280]  comedi_unlocked_ioctl+0x860/0x3310
[  237.037691][ T7280]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  237.037726][ T7280]  ? kasan_quarantine_put+0x104/0x240
[  237.037745][ T7280]  ? lockdep_hardirqs_on+0x78/0x100
[  237.037769][ T7280]  ? find_held_lock+0x2b/0x80
[  237.037797][ T7280]  ? tomoyo_path_number_perm+0x28f/0x580
[  237.037819][ T7280]  ? tomoyo_path_number_perm+0x28f/0x580
[  237.037846][ T7280]  ? tomoyo_path_number_perm+0x188/0x580
[  237.037874][ T7280]  comedi_compat_ioctl+0x438/0xe20
[  237.037894][ T7280]  ? __pfx_comedi_compat_ioctl+0x10/0x10
[  237.037913][ T7280]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  237.037940][ T7280]  ? do_vfs_ioctl+0x226/0x13e0
[  237.037966][ T7280]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  237.037997][ T7280]  ? find_held_lock+0x2b/0x80
[  237.038016][ T7280]  ? __fget_files+0x215/0x3d0
[  237.038032][ T7280]  ? hook_file_ioctl_common+0x140/0x440
[  237.038062][ T7280]  ? __fget_files+0x21f/0x3d0
[  237.038083][ T7280]  ? __pfx_comedi_compat_ioctl+0x10/0x10
[  237.038101][ T7280]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  237.038130][ T7280]  __do_fast_syscall_32+0xe7/0x970
[  237.038157][ T7280]  do_fast_syscall_32+0x32/0x70
[  237.038181][ T7280]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  237.038202][ T7280] RIP: 0023:0xf709efec
[  237.038225][ T7280] Code: Unable to access opcode bytes at 0xf709efc2.
[  237.038251][ T7280] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  237.038268][ T7280] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400
[  237.038278][ T7280] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000
[  237.038288][ T7280] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  237.038297][ T7280] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  237.038307][ T7280] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  237.038331][ T7280]  </TASK>
[  237.354217][ T7280] Mem-Info:
[  237.389893][ T7280] active_anon:7080 inactive_anon:117 isolated_anon:0
[  237.389893][ T7280]  active_file:1080 inactive_file:56357 isolated_file:0
[  237.389893][ T7280]  unevictable:768 dirty:657 writeback:0
[  237.389893][ T7280]  slab_reclaimable:7264 slab_unreclaimable:53482
[  237.389893][ T7280]  mapped:26332 shmem:1282 pagetables:1278
[  237.389893][ T7280]  sec_pagetables:296 bounce:0
[  237.389893][ T7280]  kernel_misc_reclaimable:0
[  237.389893][ T7280]  free:34241 free_pcp:9 free_cma:0
[  237.443191][ T7280] Node 0 active_anon:0kB inactive_anon:352kB active_file:4kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8256kB pagetables:1244kB sec_pagetables:1104kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  237.465147][ T7280] Node 0 DMA free:2112kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:36kB free_cma:0kB
[  237.490449][ T7280] lowmem_reserve[]: 0 280 280 280 280
[  237.502135][ T7280] Node 0 DMA: 20*4kB (U) 2*8kB (U) 4*16kB (U) 5*32kB (U) 6*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 2112kB
[  237.533387][ T7280] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  237.539576][ T7280] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  237.550018][ T7280] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  237.563265][ T7280] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  237.568531][ T7280] 58908 total pagecache pages
[  237.571983][ T7280] 193 pages in swap cache
[  237.574800][ T7280] Free swap  = 122540kB
[  237.577840][ T7280] Total swap = 124996kB
[  237.581343][ T7280] 524155 pages RAM
[  237.583430][ T7280] 0 pages HighMem/MovableOnly
[  237.587667][ T7280] 211533 pages reserved
[  237.590040][ T7280] 0 pages cma reserved
[  237.779935][ T5922] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  237.943580][ T5922] usb 9-1: device descriptor read/64, error -71
[  238.254352][ T5922] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  238.407883][ T5922] usb 9-1: device descriptor read/64, error -71
[  238.536152][ T5922] usb usb9-port1: attempt power cycle
[  238.614095][ T7300] bond1 (unregistering): Released all slaves
[  238.955828][ T5922] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  238.990001][ T5922] usb 9-1: device descriptor read/8, error -71
[  239.248014][ T5922] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  239.271016][ T5922] usb 9-1: device descriptor read/8, error -71
[  239.378609][ T5922] usb usb9-port1: unable to enumerate USB device
[  239.853033][ T7329] siw: device registration error -23
[  240.482858][ T7336] FAULT_INJECTION: forcing a failure.
[  240.482858][ T7336] name failslab, interval 1, probability 0, space 0, times 9
[  240.497285][ T7336] CPU: 3 UID: 0 PID: 7336 Comm: syz.1.357 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  240.497315][ T7336] Tainted: [L]=SOFTLOCKUP
[  240.497335][ T7336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  240.497346][ T7336] Call Trace:
[  240.497353][ T7336]  <TASK>
[  240.497360][ T7336]  dump_stack_lvl+0x100/0x190
[  240.497386][ T7336]  should_fail_ex.cold+0x5/0xa
[  240.497407][ T7336]  should_failslab+0xc2/0x120
[  240.497431][ T7336]  __kmalloc_noprof+0xfc/0x820
[  240.497450][ T7336]  ? is_bpf_text_address+0x8a/0x1a0
[  240.497474][ T7336]  ? bpf_test_init.isra.0+0x88/0x100
[  240.497534][ T7336]  bpf_test_init.isra.0+0x88/0x100
[  240.497562][ T7336]  bpf_prog_test_run_skb+0x497/0x3540
[  240.497587][ T7336]  ? find_held_lock+0x2b/0x80
[  240.497609][ T7336]  ? __fget_files+0x181/0x3d0
[  240.497631][ T7336]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  240.497653][ T7336]  ? fput+0x79/0x100
[  240.497674][ T7336]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  240.497692][ T7336]  __sys_bpf+0x2a12/0x4e80
[  240.497716][ T7336]  ? __pfx___sys_bpf+0x10/0x10
[  240.497736][ T7336]  ? find_held_lock+0x2b/0x80
[  240.497755][ T7336]  ? get_pid_task+0xfc/0x250
[  240.497775][ T7336]  ? get_pid_task+0xfc/0x250
[  240.497801][ T7336]  ? proc_fail_nth_write+0x9f/0x220
[  240.497838][ T7336]  ? find_held_lock+0x2b/0x80
[  240.497863][ T7336]  ? rcu_read_lock_any_held+0x6a/0xa0
[  240.497884][ T7336]  ? find_held_lock+0x2b/0x80
[  240.497903][ T7336]  ? ksys_write+0x190/0x250
[  240.497918][ T7336]  ? ksys_write+0x190/0x250
[  240.497948][ T7336]  ? fput+0x79/0x100
[  240.497970][ T7336]  ? __ia32_sys_bpf+0xcc/0x170
[  240.497987][ T7336]  __ia32_sys_bpf+0xcc/0x170
[  240.498006][ T7336]  ? __do_fast_syscall_32+0x98/0x970
[  240.498033][ T7336]  __do_fast_syscall_32+0xe7/0x970
[  240.498055][ T7336]  ? lockdep_hardirqs_on+0x78/0x100
[  240.498077][ T7336]  do_fast_syscall_32+0x32/0x70
[  240.498100][ T7336]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  240.498121][ T7336] RIP: 0023:0xf709efec
[  240.498142][ T7336] Code: Unable to access opcode bytes at 0xf709efc2.
[  240.498150][ T7336] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  240.498167][ T7336] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080001a00
[  240.498178][ T7336] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000
[  240.498187][ T7336] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  240.498195][ T7336] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  240.498204][ T7336] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  240.498226][ T7336]  </TASK>
[  240.859686][ T7338] [U] 
[  241.495070][ T7344] syz.1.361 uses obsolete (PF_INET,SOCK_PACKET)
[  242.332051][ T7357] syzkaller1: entered promiscuous mode
[  242.376942][ T7357] syzkaller1: entered allmulticast mode
[  242.476448][ T7363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.366'.
[  242.481129][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.366'.
[  242.706807][ T7369] FAULT_INJECTION: forcing a failure.
[  242.706807][ T7369] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  242.722859][ T7369] CPU: 3 UID: 0 PID: 7369 Comm: syz.2.368 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  242.722889][ T7369] Tainted: [L]=SOFTLOCKUP
[  242.722895][ T7369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  242.722905][ T7369] Call Trace:
[  242.722911][ T7369]  <TASK>
[  242.722919][ T7369]  dump_stack_lvl+0x100/0x190
[  242.722944][ T7369]  should_fail_ex.cold+0x5/0xa
[  242.722963][ T7369]  _copy_from_user+0x2e/0xd0
[  242.723003][ T7369]  move_addr_to_kernel+0x65/0x170
[  242.723036][ T7369]  get_compat_msghdr+0x3c7/0x480
[  242.723053][ T7369]  ? __pfx_get_compat_msghdr+0x10/0x10
[  242.723076][ T7369]  ___sys_sendmsg+0x1b6/0x1e0
[  242.723096][ T7369]  ? __pfx____sys_sendmsg+0x10/0x10
[  242.723125][ T7369]  ? find_held_lock+0x2b/0x80
[  242.723159][ T7369]  __sys_sendmsg+0x160/0x210
[  242.723183][ T7369]  ? __pfx___sys_sendmsg+0x10/0x10
[  242.723212][ T7369]  ? __pfx_ksys_write+0x10/0x10
[  242.723232][ T7369]  __do_fast_syscall_32+0xe7/0x970
[  242.723256][ T7369]  ? lockdep_hardirqs_on+0x78/0x100
[  242.723280][ T7369]  do_fast_syscall_32+0x32/0x70
[  242.723302][ T7369]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  242.723323][ T7369] RIP: 0023:0xf708efec
[  242.723345][ T7369] Code: Unable to access opcode bytes at 0xf708efc2.
[  242.723352][ T7369] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  242.723368][ T7369] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000500
[  242.723377][ T7369] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000
[  242.723386][ T7369] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  242.723395][ T7369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  242.723404][ T7369] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  242.723424][ T7369]  </TASK>
[  242.901970][ T7376] macvlan6: entered allmulticast mode
[  242.967084][ T7376] batman_adv: batadv0: Adding interface: macvlan6
[  242.975325][ T7376] batman_adv: batadv0: The MTU of interface macvlan6 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  242.996233][ T7376] batman_adv: batadv0: Interface activated: macvlan6
[  243.321826][ T7382] FAULT_INJECTION: forcing a failure.
[  243.321826][ T7382] name failslab, interval 1, probability 0, space 0, times 7
[  243.328194][ T7382] CPU: 2 UID: 0 PID: 7382 Comm: syz.0.372 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  243.328224][ T7382] Tainted: [L]=SOFTLOCKUP
[  243.328229][ T7382] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  243.328241][ T7382] Call Trace:
[  243.328249][ T7382]  <TASK>
[  243.328257][ T7382]  dump_stack_lvl+0x100/0x190
[  243.328284][ T7382]  should_fail_ex.cold+0x5/0xa
[  243.328305][ T7382]  should_failslab+0xc2/0x120
[  243.328342][ T7382]  __kmalloc_noprof+0xfc/0x820
[  243.328368][ T7382]  ? tomoyo_encode2+0xfb/0x3c0
[  243.328402][ T7382]  tomoyo_encode2+0xfb/0x3c0
[  243.328434][ T7382]  tomoyo_encode+0x29/0x50
[  243.328460][ T7382]  tomoyo_realpath_from_path+0x18c/0x690
[  243.328495][ T7382]  tomoyo_path_number_perm+0x23c/0x580
[  243.328519][ T7382]  ? tomoyo_path_number_perm+0x22e/0x580
[  243.328545][ T7382]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  243.328570][ T7382]  ? get_pid_task+0x106/0x250
[  243.328619][ T7382]  ? find_held_lock+0x2b/0x80
[  243.328643][ T7382]  ? __fget_files+0x215/0x3d0
[  243.328658][ T7382]  ? hook_file_ioctl_common+0x140/0x440
[  243.328681][ T7382]  ? __fget_files+0x215/0x3d0
[  243.328703][ T7382]  ? __fget_files+0x21f/0x3d0
[  243.328722][ T7382]  security_file_ioctl_compat+0xd3/0x230
[  243.328748][ T7382]  __ia32_compat_sys_ioctl+0xc2/0x360
[  243.328778][ T7382]  __do_fast_syscall_32+0xe7/0x970
[  243.328803][ T7382]  ? lockdep_hardirqs_on+0x78/0x100
[  243.328829][ T7382]  do_fast_syscall_32+0x32/0x70
[  243.328853][ T7382]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  243.328876][ T7382] RIP: 0023:0xf707efec
[  243.328899][ T7382] Code: Unable to access opcode bytes at 0xf707efc2.
[  243.328907][ T7382] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  243.328924][ T7382] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000006411
[  243.328935][ T7382] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  243.328945][ T7382] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  243.328955][ T7382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  243.328966][ T7382] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  243.328991][ T7382]  </TASK>
[  243.329015][ T7382] ERROR: Out of memory at tomoyo_realpath_from_path.
[  243.981572][ T7393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.378'.
[  243.992920][ T7393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.378'.
[  244.262499][ T7406] overlay: ./cgroup.cpu/cgroup.procs is not a directory
[  244.532642][ T7412] netlink: 48 bytes leftover after parsing attributes in process `syz.4.383'.
[  244.763578][ T7415] Bluetooth: MGMT ver 1.23
[  244.990448][   T64] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  245.466406][ T7430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.390'.
[  245.497567][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.390'.
[  246.203949][   T44] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  246.254667][ T7455] bond2 (unregistering): Released all slaves
[  246.371036][   T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  246.371069][   T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  246.371086][   T44] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  246.371123][   T44] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  246.371165][   T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.418777][ T7457] tmpfs: Bad value for 'nr_inodes'
[  246.419822][   T44] usb 6-1: config 0 descriptor??
[  246.576430][ T7459] bond1 (unregistering): Released all slaves
[  247.130372][   T44] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  247.446361][   T41] usb 6-1: USB disconnect, device number 8
[  248.127053][ T7471] netlink: 72 bytes leftover after parsing attributes in process `syz.2.401'.
[  248.284050][ T7474] netlink: 72 bytes leftover after parsing attributes in process `syz.2.401'.
[  248.804508][ T7484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.404'.
[  248.819939][ T7484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.404'.
[  249.168557][   T41] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  249.398330][   T41] usb 6-1: Using ep0 maxpacket: 16
[  249.437640][   T41] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  249.450180][   T41] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  249.456100][   T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.462511][   T41] usb 6-1: Product: syz
[  249.464267][   T41] usb 6-1: Manufacturer: syz
[  249.466882][   T41] usb 6-1: SerialNumber: syz
[  249.499239][   T41] usb 6-1: config 0 descriptor??
[  249.592715][   T41] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  249.596491][   T41] em28xx 6-1:0.0: DVB interface 0 found: bulk
[  249.684482][   T64] Bluetooth: hci2: command 0x0406 tx timeout
[  249.696827][   T64] Bluetooth: hci3: command 0x0406 tx timeout
[  249.700451][ T5781] Bluetooth: hci0: command 0x0406 tx timeout
[  249.910452][ T7502] bond2 (unregistering): Released all slaves
[  250.215034][   T41] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  251.161395][ T7512] FAULT_INJECTION: forcing a failure.
[  251.161395][ T7512] name failslab, interval 1, probability 0, space 0, times 6
[  251.167352][ T7512] CPU: 2 UID: 0 PID: 7512 Comm: syz.2.410 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  251.167378][ T7512] Tainted: [L]=SOFTLOCKUP
[  251.167384][ T7512] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  251.167393][ T7512] Call Trace:
[  251.167402][ T7512]  <TASK>
[  251.167411][ T7512]  dump_stack_lvl+0x100/0x190
[  251.167460][ T7512]  should_fail_ex.cold+0x5/0xa
[  251.167478][ T7512]  should_failslab+0xc2/0x120
[  251.167498][ T7512]  __kmalloc_noprof+0xfc/0x820
[  251.167517][ T7512]  ? tomoyo_encode2+0xfb/0x3c0
[  251.167543][ T7512]  tomoyo_encode2+0xfb/0x3c0
[  251.167567][ T7512]  tomoyo_encode+0x29/0x50
[  251.167703][ T7512]  tomoyo_realpath_from_path+0x18c/0x690
[  251.167733][ T7512]  tomoyo_path_number_perm+0x23c/0x580
[  251.167754][ T7512]  ? tomoyo_path_number_perm+0x22e/0x580
[  251.167776][ T7512]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  251.167798][ T7512]  ? get_pid_task+0x106/0x250
[  251.167841][ T7512]  ? find_held_lock+0x2b/0x80
[  251.167861][ T7512]  ? __fget_files+0x215/0x3d0
[  251.167876][ T7512]  ? hook_file_ioctl_common+0x140/0x440
[  251.167897][ T7512]  ? __fget_files+0x215/0x3d0
[  251.167916][ T7512]  ? __fget_files+0x21f/0x3d0
[  251.167935][ T7512]  security_file_ioctl_compat+0xd3/0x230
[  251.167957][ T7512]  __ia32_compat_sys_ioctl+0xc2/0x360
[  251.167985][ T7512]  __do_fast_syscall_32+0xe7/0x970
[  251.168009][ T7512]  ? lockdep_hardirqs_on+0x78/0x100
[  251.168031][ T7512]  do_fast_syscall_32+0x32/0x70
[  251.168054][ T7512]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  251.168075][ T7512] RIP: 0023:0xf708efec
[  251.168098][ T7512] Code: Unable to access opcode bytes at 0xf708efc2.
[  251.168106][ T7512] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  251.168122][ T7512] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000005423
[  251.168133][ T7512] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000
[  251.168143][ T7512] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  251.168152][ T7512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  251.168162][ T7512] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  251.168184][ T7512]  </TASK>
[  251.168417][ T7512] ERROR: Out of memory at tomoyo_realpath_from_path.
[  251.504638][   T41] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  251.525145][   T41] em28xx 6-1:0.0: board has no eeprom
[  251.606709][   T41] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  251.617535][   T41] em28xx 6-1:0.0: dvb set to bulk mode.
[  251.632731][ T5914] em28xx 6-1:0.0: Binding DVB extension
[  251.924969][ T5914] em28xx 6-1:0.0: Registering input extension
[  252.029821][   T57] usb 6-1: USB disconnect, device number 9
[  252.085807][   T57] em28xx 6-1:0.0: Disconnecting em28xx
[  252.099107][   T57] em28xx 6-1:0.0: Closing input extension
[  252.207137][   T57] em28xx 6-1:0.0: Freeing device
[  252.393604][ T7523] FAULT_INJECTION: forcing a failure.
[  252.393604][ T7523] name failslab, interval 1, probability 0, space 0, times 5
[  252.405331][ T7523] CPU: 3 UID: 0 PID: 7523 Comm: syz.1.413 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  252.405359][ T7523] Tainted: [L]=SOFTLOCKUP
[  252.405365][ T7523] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  252.405375][ T7523] Call Trace:
[  252.405381][ T7523]  <TASK>
[  252.405388][ T7523]  dump_stack_lvl+0x100/0x190
[  252.405416][ T7523]  should_fail_ex.cold+0x5/0xa
[  252.405437][ T7523]  should_failslab+0xc2/0x120
[  252.405464][ T7523]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  252.405488][ T7523]  ? __alloc_skb+0x5b7/0x710
[  252.405514][ T7523]  ? __alloc_skb+0x140/0x710
[  252.405543][ T7523]  __alloc_skb+0x140/0x710
[  252.405565][ T7523]  ? __alloc_skb+0x5b7/0x710
[  252.405608][ T7523]  ? __pfx___alloc_skb+0x10/0x10
[  252.405640][ T7523]  netlink_alloc_large_skb+0x69/0x150
[  252.405663][ T7523]  netlink_sendmsg+0x680/0xda0
[  252.405689][ T7523]  ? __pfx_netlink_sendmsg+0x10/0x10
[  252.405714][ T7523]  ? apparmor_socket_sendmsg+0x15b/0x270
[  252.405740][ T7523]  ____sys_sendmsg+0xa4d/0xbe0
[  252.405758][ T7523]  ? __pfx_netlink_sendmsg+0x10/0x10
[  252.405781][ T7523]  ? __pfx_____sys_sendmsg+0x10/0x10
[  252.405813][ T7523]  ___sys_sendmsg+0x190/0x1e0
[  252.405835][ T7523]  ? __pfx____sys_sendmsg+0x10/0x10
[  252.405868][ T7523]  ? find_held_lock+0x2b/0x80
[  252.405907][ T7523]  __sys_sendmsg+0x160/0x210
[  252.405934][ T7523]  ? __pfx___sys_sendmsg+0x10/0x10
[  252.405968][ T7523]  ? __pfx_ksys_write+0x10/0x10
[  252.405991][ T7523]  __do_fast_syscall_32+0xe7/0x970
[  252.406018][ T7523]  ? lockdep_hardirqs_on+0x78/0x100
[  252.406044][ T7523]  do_fast_syscall_32+0x32/0x70
[  252.406069][ T7523]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  252.406093][ T7523] RIP: 0023:0xf709efec
[  252.406115][ T7523] Code: Unable to access opcode bytes at 0xf709efc2.
[  252.406124][ T7523] RSP: 002b:00000000f546c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  252.406140][ T7523] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800002c0
[  252.406150][ T7523] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000
[  252.406160][ T7523] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  252.406169][ T7523] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  252.406179][ T7523] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  252.406208][ T7523]  </TASK>
[  252.810705][ T7531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.415'.
[  252.821998][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'.
[  253.273668][ T7532] SQUASHFS error: Failed to read block 0x0: -5
[  253.278886][ T7532] unable to read squashfs_super_block
[  254.007376][ T5538] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  254.072299][ T7544] tc action pedit 'at' offset 1235 out of bounds
[  254.187727][ T5538] usb 7-1: Using ep0 maxpacket: 16
[  254.209333][ T5538] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  254.217011][ T5538] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  254.236412][ T5538] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.300011][ T5538] usb 7-1: Product: syz
[  254.301870][ T5538] usb 7-1: Manufacturer: syz
[  254.307350][ T5538] usb 7-1: SerialNumber: syz
[  254.342409][ T5538] usb 7-1: config 0 descriptor??
[  254.358507][ T5538] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  254.358541][ T5538] em28xx 7-1:0.0: DVB interface 0 found: bulk
[  254.402042][ T7551] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  254.471197][ T7559] tmpfs: Unknown parameter 'indû*Z}ØúF“o64'
[  254.641544][   T42] audit: type=1800 audit(1785997315.915:10): pid=7559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.426" name="/newroot/114/file0" dev="tmpfs" ino=634 res=0 errno=0
[  254.861721][ T7551] md: pers->run() failed ...
[  255.023775][ T5538] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  255.131239][ T7574] FAULT_INJECTION: forcing a failure.
[  255.131239][ T7574] name failslab, interval 1, probability 0, space 0, times 4
[  255.146900][ T7574] CPU: 0 UID: 0 PID: 7574 Comm: syz.0.429 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  255.146929][ T7574] Tainted: [L]=SOFTLOCKUP
[  255.146935][ T7574] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  255.146945][ T7574] Call Trace:
[  255.146960][ T7574]  <TASK>
[  255.146968][ T7574]  dump_stack_lvl+0x100/0x190
[  255.146993][ T7574]  should_fail_ex.cold+0x5/0xa
[  255.147014][ T7574]  should_failslab+0xc2/0x120
[  255.147039][ T7574]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  255.147060][ T7574]  ? __alloc_skb+0x5b7/0x710
[  255.147082][ T7574]  ? __alloc_skb+0x140/0x710
[  255.147106][ T7574]  __alloc_skb+0x140/0x710
[  255.147125][ T7574]  ? __alloc_skb+0x5b7/0x710
[  255.147144][ T7574]  ? __pfx___alloc_skb+0x10/0x10
[  255.147193][ T7574]  netlink_alloc_large_skb+0x69/0x150
[  255.147218][ T7574]  netlink_sendmsg+0x680/0xda0
[  255.147241][ T7574]  ? __pfx_netlink_sendmsg+0x10/0x10
[  255.147263][ T7574]  ? apparmor_socket_sendmsg+0x15b/0x270
[  255.147288][ T7574]  ____sys_sendmsg+0xa4d/0xbe0
[  255.147306][ T7574]  ? __pfx_netlink_sendmsg+0x10/0x10
[  255.147326][ T7574]  ? __pfx_____sys_sendmsg+0x10/0x10
[  255.147352][ T7574]  ___sys_sendmsg+0x190/0x1e0
[  255.147372][ T7574]  ? __pfx____sys_sendmsg+0x10/0x10
[  255.147402][ T7574]  ? find_held_lock+0x2b/0x80
[  255.147464][ T7574]  __sys_sendmsg+0x160/0x210
[  255.147490][ T7574]  ? __pfx___sys_sendmsg+0x10/0x10
[  255.147519][ T7574]  ? __pfx_ksys_write+0x10/0x10
[  255.147540][ T7574]  __do_fast_syscall_32+0xe7/0x970
[  255.147564][ T7574]  ? lockdep_hardirqs_on+0x78/0x100
[  255.147588][ T7574]  do_fast_syscall_32+0x32/0x70
[  255.147613][ T7574]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  255.147636][ T7574] RIP: 0023:0xf707efec
[  255.147660][ T7574] Code: Unable to access opcode bytes at 0xf707efc2.
[  255.147667][ T7574] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  255.147686][ T7574] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280
[  255.147698][ T7574] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  255.147708][ T7574] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  255.147718][ T7574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  255.147728][ T7574] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  255.147749][ T7574]  </TASK>
[  255.437551][ T7567] uprobe: syz.1.427:7567 failed to unregister, leaking uprobe
[  255.480106][ T5538] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  255.481439][ T7567] uprobe: syz.1.427:7567 failed to unregister, leaking uprobe
[  255.485993][ T5538] em28xx 7-1:0.0: board has no eeprom
[  255.557532][ T5538] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  255.561663][ T5538] em28xx 7-1:0.0: dvb set to bulk mode.
[  255.567146][   T57] em28xx 7-1:0.0: Binding DVB extension
[  255.653333][   T57] em28xx 7-1:0.0: Registering input extension
[  255.693573][ T5538] usb 7-1: USB disconnect, device number 8
[  255.697107][ T5538] em28xx 7-1:0.0: Disconnecting em28xx
[  255.700394][ T5538] em28xx 7-1:0.0: Closing input extension
[  255.774876][ T5538] em28xx 7-1:0.0: Freeing device
[  256.871045][ T7595] FAULT_INJECTION: forcing a failure.
[  256.871045][ T7595] name failslab, interval 1, probability 0, space 0, times 3
[  256.878217][ T7595] CPU: 3 UID: 0 PID: 7595 Comm: syz.1.435 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  256.878247][ T7595] Tainted: [L]=SOFTLOCKUP
[  256.878253][ T7595] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  256.878263][ T7595] Call Trace:
[  256.878270][ T7595]  <TASK>
[  256.878278][ T7595]  dump_stack_lvl+0x100/0x190
[  256.878306][ T7595]  should_fail_ex.cold+0x5/0xa
[  256.878327][ T7595]  should_failslab+0xc2/0x120
[  256.878352][ T7595]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  256.878374][ T7595]  ? __alloc_skb+0x5b7/0x710
[  256.878397][ T7595]  ? __alloc_skb+0x140/0x710
[  256.878423][ T7595]  __alloc_skb+0x140/0x710
[  256.878443][ T7595]  ? __alloc_skb+0x5b7/0x710
[  256.878465][ T7595]  ? __pfx___alloc_skb+0x10/0x10
[  256.878493][ T7595]  netlink_alloc_large_skb+0x69/0x150
[  256.878515][ T7595]  netlink_sendmsg+0x680/0xda0
[  256.878539][ T7595]  ? __pfx_netlink_sendmsg+0x10/0x10
[  256.878562][ T7595]  ? apparmor_socket_sendmsg+0x15b/0x270
[  256.878584][ T7595]  ____sys_sendmsg+0xa4d/0xbe0
[  256.878602][ T7595]  ? __pfx_netlink_sendmsg+0x10/0x10
[  256.878622][ T7595]  ? __pfx_____sys_sendmsg+0x10/0x10
[  256.878649][ T7595]  ___sys_sendmsg+0x190/0x1e0
[  256.878670][ T7595]  ? __pfx____sys_sendmsg+0x10/0x10
[  256.878698][ T7595]  ? find_held_lock+0x2b/0x80
[  256.878729][ T7595]  __sys_sendmsg+0x160/0x210
[  256.878751][ T7595]  ? __pfx___sys_sendmsg+0x10/0x10
[  256.878789][ T7595]  ? __pfx_ksys_write+0x10/0x10
[  256.878810][ T7595]  __do_fast_syscall_32+0xe7/0x970
[  256.878835][ T7595]  ? lockdep_hardirqs_on+0x78/0x100
[  256.878859][ T7595]  do_fast_syscall_32+0x32/0x70
[  256.878882][ T7595]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  256.878905][ T7595] RIP: 0023:0xf709efec
[  256.878929][ T7595] Code: Unable to access opcode bytes at 0xf709efc2.
[  256.878936][ T7595] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  256.878952][ T7595] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000600
[  256.878963][ T7595] RDX: 0000000000004052 RSI: 0000000000000000 RDI: 0000000000000000
[  256.878973][ T7595] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  256.878982][ T7595] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  256.878991][ T7595] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  256.879013][ T7595]  </TASK>
[  256.976444][ T7590] bridge0: entered promiscuous mode
[  257.083335][ T7590] bridge0: entered allmulticast mode
[  257.111953][ T7590] bridge1: entered promiscuous mode
[  257.114361][ T7590] bridge1: entered allmulticast mode
[  257.329383][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.437'.
[  257.355048][ T7603] siw: device registration error -23
[  259.506296][ T7609] syz.0.441 (7609): drop_caches: 2
[  259.870914][ T7635] netlink: 16 bytes leftover after parsing attributes in process `syz.1.446'.
[  260.195000][ T7646] siw: device registration error -23
[  261.200706][ T7654] FAULT_INJECTION: forcing a failure.
[  261.200706][ T7654] name failslab, interval 1, probability 0, space 0, times 2
[  261.207463][ T7654] CPU: 3 UID: 0 PID: 7654 Comm: syz.4.451 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  261.207492][ T7654] Tainted: [L]=SOFTLOCKUP
[  261.207498][ T7654] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  261.207509][ T7654] Call Trace:
[  261.207516][ T7654]  <TASK>
[  261.207523][ T7654]  dump_stack_lvl+0x100/0x190
[  261.207549][ T7654]  should_fail_ex.cold+0x5/0xa
[  261.207570][ T7654]  should_failslab+0xc2/0x120
[  261.207594][ T7654]  kmem_cache_alloc_noprof+0x91/0x6a0
[  261.207616][ T7654]  ? do_getname+0x35/0x390
[  261.207642][ T7654]  do_getname+0x35/0x390
[  261.207671][ T7654]  __ia32_sys_rmdir+0x35/0x60
[  261.207691][ T7654]  __do_fast_syscall_32+0xe7/0x970
[  261.207717][ T7654]  ? lockdep_hardirqs_on+0x78/0x100
[  261.207741][ T7654]  do_fast_syscall_32+0x32/0x70
[  261.207765][ T7654]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  261.207788][ T7654] RIP: 0023:0xf7f42fec
[  261.207810][ T7654] Code: Unable to access opcode bytes at 0xf7f42fc2.
[  261.207818][ T7654] RSP: 002b:00000000f53e550c EFLAGS: 00000292 ORIG_RAX: 0000000000000028
[  261.207837][ T7654] RAX: ffffffffffffffda RBX: 0000000080000440 RCX: 0000000000000000
[  261.207847][ T7654] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  261.207857][ T7654] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  261.207867][ T7654] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  261.207877][ T7654] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  261.207896][ T7654]  </TASK>
[  261.375333][ T7648] UDC core: g1: couldn't find an available UDC or it's busy
[  261.427918][ T7656] syzkaller0: entered promiscuous mode
[  261.437770][ T7656] syzkaller0: entered allmulticast mode
[  262.097953][ T7662] program syz.4.454 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  262.187523][ T7662] warning: `syz.4.454' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  262.580078][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.457'.
[  262.941383][ T7680] siw: device registration error -23
[  263.928888][ T7693] FAULT_INJECTION: forcing a failure.
[  263.928888][ T7693] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  263.952339][ T7695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.466'.
[  263.954312][ T7693] CPU: 0 UID: 0 PID: 7693 Comm: syz.2.463 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  263.954339][ T7693] Tainted: [L]=SOFTLOCKUP
[  263.954345][ T7693] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  263.954355][ T7693] Call Trace:
[  263.954363][ T7693]  <TASK>
[  263.954370][ T7693]  dump_stack_lvl+0x100/0x190
[  263.954393][ T7693]  should_fail_ex.cold+0x5/0xa
[  263.954409][ T7693]  _copy_from_user+0x2e/0xd0
[  263.954591][ T7693]  memdup_user+0x6b/0xe0
[  263.954620][ T7693]  strndup_user+0x78/0xe0
[  263.954637][ T7693]  __ia32_sys_mount+0x136/0x310
[  263.954656][ T7693]  ? __pfx___ia32_sys_mount+0x10/0x10
[  263.954671][ T7693]  ? ksys_write+0x1ac/0x250
[  263.954685][ T7693]  ? __pfx_ksys_write+0x10/0x10
[  263.954700][ T7693]  __do_fast_syscall_32+0xe7/0x970
[  263.954721][ T7693]  ? lockdep_hardirqs_on+0x78/0x100
[  263.954739][ T7693]  do_fast_syscall_32+0x32/0x70
[  263.954758][ T7693]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  263.954777][ T7693] RIP: 0023:0xf708efec
[  263.954796][ T7693] Code: Unable to access opcode bytes at 0xf708efc2.
[  263.954803][ T7693] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015
[  263.954817][ T7693] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 0000000080000300
[  263.954826][ T7693] RDX: 0000000080000340 RSI: 0000000000010400 RDI: 00000000800004c0
[  263.954834][ T7693] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  263.954842][ T7693] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  263.954850][ T7693] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  263.954867][ T7693]  </TASK>
[  264.464232][ T7710] tmpfs: Bad value for 'nr_inodes'
[  264.476455][ T7712] netlink: 'syz.4.471': attribute type 4 has an invalid length.
[  264.535490][ T7713] netlink: 'syz.4.471': attribute type 4 has an invalid length.
[  264.698011][ T7718] siw: device registration error -23
[  265.943243][ T7731] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  266.861150][   T42] audit: type=1800 audit(1785997328.175:11): pid=7758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.482" name="zoned" dev="configfs" ino=19961 res=0 errno=0
[  266.929337][   T42] audit: type=1800 audit(1785997328.225:12): pid=7757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.482" name="memory_backed" dev="configfs" ino=22656 res=0 errno=0
[  266.929385][   T42] audit: type=1800 audit(1785997328.225:13): pid=7757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.482" name="zone_nr_conv" dev="configfs" ino=22657 res=0 errno=0
[  266.929415][   T42] audit: type=1800 audit(1785997328.225:14): pid=7757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.482" name="power" dev="configfs" ino=22658 res=0 errno=0
[  267.045350][ T7757] null_blk: nullb1: using native zone append
[  267.343687][ T7762] bond1 (unregistering): Released all slaves
[  267.381044][ T7757] null_blk: disk nullb1 created
[  267.434288][ T7769] siw: device registration error -23
[  268.051391][ T1442] ieee802154 phy0 wpan0: encryption failed: -22
[  268.051549][ T1442] ieee802154 phy1 wpan1: encryption failed: -22
[  268.209633][ T7775] macvlan5: entered allmulticast mode
[  268.211457][ T7775] batman_adv: batadv0: Adding interface: macvlan5
[  268.211474][ T7775] batman_adv: batadv0: The MTU of interface macvlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  268.211504][ T7775] batman_adv: batadv0: Interface activated: macvlan5
[  270.322070][ T7808] siw: device registration error -23
[  270.504381][ T7811] macvlan3: entered allmulticast mode
[  270.509572][ T7811] batman_adv: batadv0: Adding interface: macvlan3
[  270.512794][ T7811] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  270.524773][ T7811] batman_adv: batadv0: Interface activated: macvlan3
[  272.665539][ T7837] bond2 (unregistering): Released all slaves
[  273.359949][ T7852] siw: device registration error -23
[  275.181886][ T7874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.514'.
[  275.286714][ T7874] uhci_hcd 0000:00:1d.0: remove, state 4
[  275.316094][ T7874] usb usb1: USB disconnect, device number 1
[  275.754740][ T7874] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered
[  276.269090][ T7876] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  276.295711][ T7876] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref]
[  276.314771][ T7876] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff]
[  276.364477][ T7876] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  276.381840][ T7876] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  276.469542][ T7876] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 85783 usecs
[  276.659688][ T7876] pci 0000:00:01.0: Adding to iommu group 1
[  276.805465][ T7876] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  276.827587][ T7876] pci 0000:00:01.0: vgaarb: bridge control possible
[  276.830189][ T7876] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io,locks=none
[  277.010420][ T7876] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint
[  277.065193][ T7876] pci 0000:00:1d.0: BAR 4 [io  0xc0e0-0xc0ff]
[  277.155161][ T7876] pci 0000:00:1d.0: Adding to iommu group 7
[  277.225796][ T7893] siw: device registration error -23
[  277.471273][ T7876] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  277.491938][ T7876] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  277.497840][ T7876] pci 0000:00:1d.0: BAR 4 [io  0x2000-0x201f]: assigned
[  277.538809][ T7876] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  277.601954][ T7876] bochs-drm 0000:00:01.0: enabling device (0001 -> 0003)
[  278.304182][ T7876] [drm] Found bochs VGA, ID 0xb0c5.
[  278.304237][ T7876] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  278.681124][ T7876] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  279.250022][ T7876] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  279.318840][ T7915] bond1 (unregistering): Released all slaves
[  279.651635][ T7876] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 269399 usecs
[  279.896309][ T7876] uhci_hcd 0000:00:1d.0: UHCI Host Controller
[  279.959939][ T7876] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1
[  279.963819][ T7876] uhci_hcd 0000:00:1d.0: detected 2 ports
[  280.020750][ T7876] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000
[  280.262577][ T7876] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02
[  280.284670][ T7876] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[  280.323630][ T7876] usb usb1: Product: UHCI Host Controller
[  280.333463][ T7876] usb usb1: Manufacturer: Linux syzkaller uhci_hcd
[  280.355689][ T7876] usb usb1: SerialNumber: 0000:00:1d.0
[  280.440476][ T7876] hub 1-0:1.0: USB hub found
[  280.446652][ T7876] hub 1-0:1.0: 2 ports detected
[  281.464394][ T7939] syzkaller0: entered promiscuous mode
[  281.489289][   T44] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  281.507540][ T7939] syzkaller0: entered allmulticast mode
[  281.941527][ T7949] siw: device registration error -23
[  281.949040][   T44] usb 6-1: Using ep0 maxpacket: 8
[  281.953915][   T44] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  281.961392][   T44] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  281.966230][   T44] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  281.971474][   T44] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  281.981101][   T44] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  281.997292][   T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.220601][   T44] usb 6-1: GET_CAPABILITIES returned 0
[  282.222632][   T42] audit: type=1800 audit(1785997343.535:15): pid=7948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.530" name="file1" dev="fuse" ino=68719476738 res=0 errno=0
[  282.224559][   T44] usbtmc 6-1:16.0: can't read capabilities
[  282.685966][ T5922] usb 6-1: USB disconnect, device number 10
[  284.897089][ T7963] bond1 (unregistering): Released all slaves
[  285.446168][ T7976] syzkaller0: entered promiscuous mode
[  285.452310][ T7976] syzkaller0: entered allmulticast mode
[  285.961398][ T7988] tmpfs: Bad value for 'nr_inodes'
[  287.039833][ T8002] FAULT_INJECTION: forcing a failure.
[  287.039833][ T8002] name failslab, interval 1, probability 0, space 0, times 0
[  287.061914][ T8002] CPU: 1 UID: 0 PID: 8002 Comm: syz.4.544 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  287.061945][ T8002] Tainted: [L]=SOFTLOCKUP
[  287.061951][ T8002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  287.061960][ T8002] Call Trace:
[  287.061967][ T8002]  <TASK>
[  287.061974][ T8002]  dump_stack_lvl+0x100/0x190
[  287.062002][ T8002]  should_fail_ex.cold+0x5/0xa
[  287.062025][ T8002]  should_failslab+0xc2/0x120
[  287.062053][ T8002]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  287.062077][ T8002]  ? __alloc_skb+0x5b7/0x710
[  287.062102][ T8002]  ? __alloc_skb+0x140/0x710
[  287.062127][ T8002]  __alloc_skb+0x140/0x710
[  287.062150][ T8002]  ? __alloc_skb+0x5b7/0x710
[  287.062173][ T8002]  ? __pfx___alloc_skb+0x10/0x10
[  287.062202][ T8002]  netlink_alloc_large_skb+0x69/0x150
[  287.062226][ T8002]  netlink_sendmsg+0x680/0xda0
[  287.062249][ T8002]  ? __pfx_netlink_sendmsg+0x10/0x10
[  287.062272][ T8002]  ? apparmor_socket_sendmsg+0x15b/0x270
[  287.062297][ T8002]  ____sys_sendmsg+0xa4d/0xbe0
[  287.062317][ T8002]  ? __pfx_netlink_sendmsg+0x10/0x10
[  287.062340][ T8002]  ? __pfx_____sys_sendmsg+0x10/0x10
[  287.062369][ T8002]  ___sys_sendmsg+0x190/0x1e0
[  287.062391][ T8002]  ? __pfx____sys_sendmsg+0x10/0x10
[  287.062420][ T8002]  ? find_held_lock+0x2b/0x80
[  287.062459][ T8002]  __sys_sendmsg+0x160/0x210
[  287.062489][ T8002]  ? __pfx___sys_sendmsg+0x10/0x10
[  287.062522][ T8002]  ? __pfx_ksys_write+0x10/0x10
[  287.062546][ T8002]  __do_fast_syscall_32+0xe7/0x970
[  287.062572][ T8002]  ? lockdep_hardirqs_on+0x78/0x100
[  287.062605][ T8002]  do_fast_syscall_32+0x32/0x70
[  287.062630][ T8002]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  287.062654][ T8002] RIP: 0023:0xf7f42fec
[  287.062679][ T8002] Code: Unable to access opcode bytes at 0xf7f42fc2.
[  287.062688][ T8002] RSP: 002b:00000000f53c450c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  287.062707][ T8002] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0
[  287.062720][ T8002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  287.062731][ T8002] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  287.062743][ T8002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  287.062754][ T8002] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  287.062778][ T8002]  </TASK>
[  290.012437][ T8033] bond1 (unregistering): Released all slaves
[  290.634216][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.556'.
[  290.648154][ T8050] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  290.695790][ T8050] batman_adv: batadv0: Interface deactivated: macvlan2
[  290.702327][ T8050] batman_adv: batadv0: Interface deactivated: macvlan3
[  290.705982][ T8050] batadv_slave_1 (unregistering): left allmulticast mode
[  290.784428][ T8050] batman_adv: batadv0: Removing interface: macvlan2
[  290.910521][ T8050] batman_adv: batadv0: Removing interface: macvlan3
[  291.064175][ T8050] batman_adv: batadv0: Removing interface: batadv_slave_1
[  291.301493][ T8060] siw: device registration error -23
[  292.525803][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.561'.
[  292.873257][ T8075] netlink: 64 bytes leftover after parsing attributes in process `syz.1.564'.
[  292.963665][   T42] audit: type=1800 audit(1785997354.225:16): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.559" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  293.014428][ T8080] FAULT_INJECTION: forcing a failure.
[  293.014428][ T8080] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  293.035703][ T8080] CPU: 1 UID: 0 PID: 8080 Comm: syz.2.566 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  293.035769][ T8080] Tainted: [L]=SOFTLOCKUP
[  293.035776][ T8080] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  293.035786][ T8080] Call Trace:
[  293.035862][ T8080]  <TASK>
[  293.035871][ T8080]  dump_stack_lvl+0x100/0x190
[  293.035898][ T8080]  should_fail_ex.cold+0x5/0xa
[  293.035980][ T8080]  _copy_to_user+0x32/0xd0
[  293.036014][ T8080]  simple_read_from_buffer+0xcb/0x170
[  293.036115][ T8080]  proc_fail_nth_read+0x1af/0x230
[  293.036142][ T8080]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  293.036237][ T8080]  ? rw_verify_area+0xce/0x6d0
[  293.036264][ T8080]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  293.036356][ T8080]  vfs_read+0x1e4/0xb40
[  293.036379][ T8080]  ? __pfx_vfs_read+0x10/0x10
[  293.036395][ T8080]  ? find_held_lock+0x2b/0x80
[  293.036488][ T8080]  ? __fget_files+0x215/0x3d0
[  293.036511][ T8080]  ? __fget_files+0x21f/0x3d0
[  293.036534][ T8080]  ksys_read+0x12a/0x250
[  293.036627][ T8080]  ? __pfx_ksys_read+0x10/0x10
[  293.036701][ T8080]  do_int80_emulation+0x14b/0x720
[  293.036768][ T8080]  asm_int80_emulation+0x1a/0x20
[  293.036787][ T8080] RIP: 0023:0xf71c74eb
[  293.036842][ T8080] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  293.036859][ T8080] RSP: 002b:00000000f547d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  293.036877][ T8080] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f547d5d0
[  293.036925][ T8080] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  293.036936][ T8080] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  293.036946][ T8080] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  293.036991][ T8080] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  293.037015][ T8080]  </TASK>
[  293.587365][ T1480] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  293.717843][ T1480] usb 6-1: device descriptor read/64, error -71
[  293.998321][ T1480] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  294.197342][ T1480] usb 6-1: device descriptor read/64, error -71
[  294.307698][ T1480] usb usb6-port1: attempt power cycle
[  294.677486][ T1480] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  294.698216][ T1480] usb 6-1: device descriptor read/8, error -71
[  294.981669][ T1480] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  294.998239][ T1480] usb 6-1: device descriptor read/8, error -71
[  295.136071][ T1480] usb usb6-port1: unable to enumerate USB device
[  295.461246][ T8110] siw: device registration error -23
[  297.261499][ T8121] bond2 (unregistering): Released all slaves
[  297.818910][ T8140] siw: device registration error -23
[  298.729464][ T8143] tmpfs: Bad value for 'nr_inodes'
[  300.125706][ T8167] siw: device registration error -23
[  301.627854][ T8183] siw: device registration error -23
[  302.367923][ T8192] tmpfs: Bad value for 'nr_inodes'
[  302.999458][ T8198] bond2 (unregistering): Released all slaves
[  309.076562][ T8271] siw: device registration error -23
[  309.273159][ T8260] bond2 (unregistering): Released all slaves
[  310.723563][ T8279] siw: device registration error -23
[  311.390800][ T8285] tmpfs: Bad value for 'nr_inodes'
[  315.005368][ T8326] siw: device registration error -23
[  316.389823][ T8324] bond1 (unregistering): Released all slaves
[  316.652962][ T8342] tmpfs: Bad value for 'nr_inodes'
[  317.825303][ T8347] ------------[ cut here ]------------
[  317.829906][ T8347] failed to allocate ring buffer on CPU 2
[  317.845280][ T8347] WARNING: kernel/trace/ring_buffer.c:7976 at trace_rb_cpu_prepare+0x458/0x500, CPU#1: syz.0.630/8347
[  317.853816][ T8347] Modules linked in:
[  317.859296][ T8347] CPU: 1 UID: 0 PID: 8347 Comm: syz.0.630 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  317.890026][ T8347] Tainted: [L]=SOFTLOCKUP
[  317.892036][ T8347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  317.900321][ T8347] RIP: 0010:trace_rb_cpu_prepare+0x45a/0x500
[  317.903291][ T8347] Code: 48 c1 ea 03 80 3c 02 00 0f 84 c7 fc ff ff 48 8b 3c 24 e8 f9 14 6b 00 e9 b9 fc ff ff e8 af 84 fb ff 48 8d 3d f8 a9 18 0f 89 ee <67> 48 0f b9 3a bb f4 ff ff ff e9 df fd ff ff 4c 89 ef e8 cf 14 6b
[  317.922859][ T8347] RSP: 0018:ffffc900071578b0 EFLAGS: 00010287
[  317.925127][ T8347] RAX: 0000000000078666 RBX: ffff888072d1c8b8 RCX: ffffc9000c952000
[  317.934018][ T8347] RDX: 0000000000080000 RSI: 0000000000000002 RDI: ffffffff9126d650
[  317.951348][ T8347] RBP: 0000000000000002 R08: ffff888050c7b990 R09: 0000000000000000
[  317.954158][ T8347] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002
[  317.957340][ T8347] R13: ffff888072d1c810 R14: 0000000000000010 R15: 0000000000000162
[  317.960704][ T8347] FS:  0000000000000000(0000) GS:ffff888096cdf000(0063) knlGS:00000000f546db40
[  317.969624][ T8347] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  317.974604][ T8347] CR2: 00000000f7f3a190 CR3: 0000000041ae5000 CR4: 0000000000352ef0
[  317.982883][ T8347] Call Trace:
[  317.985593][ T8347]  <TASK>
[  317.987792][ T8347]  ? __pfx_trace_rb_cpu_prepare+0x10/0x10
[  317.991328][ T8347]  cpuhp_invoke_callback+0x205/0x9a0
[  317.994185][ T8347]  ? __pfx_trace_rb_cpu_prepare+0x10/0x10
[  317.997136][ T8347]  cpuhp_issue_call+0x1b8/0x970
[  317.999503][ T8347]  __cpuhp_state_add_instance_cpuslocked+0x2d7/0x400
[  318.004525][ T8347]  __cpuhp_state_add_instance+0xd7/0x2d0
[  318.008193][ T8347]  alloc_buffer+0x76c/0x1800
[  318.010140][ T8347]  __ring_buffer_alloc+0x2d/0x40
[  318.012578][ T8347]  allocate_trace_buffer+0x150/0xa30
[  318.015082][ T8347]  ? __pfx___kasan_kmalloc+0x10/0x10
[  318.017829][ T8347]  ? __pfx_allocate_trace_buffer+0x10/0x10
[  318.020276][ T8347]  ? lockdep_init_map_type+0x5c/0x250
[  318.022562][ T8347]  trace_array_create_systems+0x582/0xc30
[  318.024983][ T8347]  instance_mkdir+0xca/0x140
[  318.027101][ T8347]  tracefs_syscall_mkdir+0x10e/0x180
[  318.029990][ T8347]  ? __pfx_tracefs_syscall_mkdir+0x10/0x10
[  318.032585][ T8347]  vfs_mkdir+0x361/0x850
[  318.035247][ T8347]  filename_mkdirat+0x48b/0x5e0
[  318.038378][ T8347]  ? __pfx_filename_mkdirat+0x10/0x10
[  318.041861][ T8347]  ? strncpy_from_user+0x19d/0x2d0
[  318.048649][ T8347]  ? do_getname+0x191/0x390
[  318.055732][ T8347]  __ia32_sys_mkdirat+0x88/0xc0
[  318.058645][ T8347]  __do_fast_syscall_32+0xe7/0x970
[  318.066451][ T8347]  do_fast_syscall_32+0x32/0x70
[  318.068486][ T8347]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  318.070884][ T8347] RIP: 0023:0xf707efec
[  318.077641][ T8347] Code: Unable to access opcode bytes at 0xf707efc2.
[  318.086697][ T8347] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000128
[  318.097015][ T8347] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140
[  318.101835][ T8347] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000
[  318.113603][ T8347] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  318.128393][ T8347] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  318.133317][ T8347] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  318.137626][ T8347]  </TASK>
[  318.139636][ T8347] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  318.142865][ T8347] CPU: 1 UID: 0 PID: 8347 Comm: syz.0.630 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  318.161543][ T8347] Tainted: [L]=SOFTLOCKUP
[  318.163172][ T8347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  318.167402][ T8347] Call Trace:
[  318.169838][ T8347]  <TASK>
[  318.171879][ T8347]  dump_stack_lvl+0x100/0x190
[  318.184843][ T8347]  vpanic+0x552/0x970
[  318.186447][ T8347]  ? __pfx_vpanic+0x10/0x10
[  318.188161][ T8347]  panic+0xd1/0xe0
[  318.189553][ T8347]  ? __pfx_panic+0x10/0x10
[  318.191457][ T8347]  check_panic_on_warn.cold+0x19/0x34
[  318.193658][ T8347]  ? trace_rb_cpu_prepare+0x458/0x500
[  318.195860][ T8347]  __warn.cold+0x191/0x318
[  318.212561][ T8347]  __report_bug+0x30f/0x440
[  318.214876][ T8347]  ? trace_rb_cpu_prepare+0x458/0x500
[  318.216910][ T8347]  ? __pfx___report_bug+0x10/0x10
[  318.218915][ T8347]  ? rb_allocate_cpu_buffer+0x856/0x28d0
[  318.221317][ T8347]  ? rb_allocate_cpu_buffer+0x85d/0x28d0
[  318.239420][ T8347]  report_bug_entry+0xe1/0x290
[  318.241706][ T8347]  ? trace_rb_cpu_prepare+0x45a/0x500
[  318.244372][ T8347]  handle_bug+0x1cd/0x2a0
[  318.246646][ T8347]  exc_invalid_op+0x17/0x50
[  318.248872][ T8347]  asm_exc_invalid_op+0x1a/0x20
[  318.250807][ T8347] RIP: 0010:trace_rb_cpu_prepare+0x45a/0x500
[  318.253102][ T8347] Code: 48 c1 ea 03 80 3c 02 00 0f 84 c7 fc ff ff 48 8b 3c 24 e8 f9 14 6b 00 e9 b9 fc ff ff e8 af 84 fb ff 48 8d 3d f8 a9 18 0f 89 ee <67> 48 0f b9 3a bb f4 ff ff ff e9 df fd ff ff 4c 89 ef e8 cf 14 6b
[  318.276221][ T8347] RSP: 0018:ffffc900071578b0 EFLAGS: 00010287
[  318.278344][ T8347] RAX: 0000000000078666 RBX: ffff888072d1c8b8 RCX: ffffc9000c952000
[  318.281885][ T8347] RDX: 0000000000080000 RSI: 0000000000000002 RDI: ffffffff9126d650
[  318.287940][ T8347] RBP: 0000000000000002 R08: ffff888050c7b990 R09: 0000000000000000
[  318.301765][ T8347] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002
[  318.321292][ T8347] R13: ffff888072d1c810 R14: 0000000000000010 R15: 0000000000000162
[  318.324859][ T8347]  ? __pfx_trace_rb_cpu_prepare+0x10/0x10
[  318.326836][ T8347]  cpuhp_invoke_callback+0x205/0x9a0
[  318.328712][ T8347]  ? __pfx_trace_rb_cpu_prepare+0x10/0x10
[  318.331188][ T8347]  cpuhp_issue_call+0x1b8/0x970
[  318.333269][ T8347]  __cpuhp_state_add_instance_cpuslocked+0x2d7/0x400
[  318.336195][ T8347]  __cpuhp_state_add_instance+0xd7/0x2d0
[  318.353432][ T8347]  alloc_buffer+0x76c/0x1800
[  318.355553][ T8347]  __ring_buffer_alloc+0x2d/0x40
[  318.357660][ T8347]  allocate_trace_buffer+0x150/0xa30
[  318.359996][ T8347]  ? __pfx___kasan_kmalloc+0x10/0x10
[  318.362501][ T8347]  ? __pfx_allocate_trace_buffer+0x10/0x10
[  318.368144][ T8347]  ? lockdep_init_map_type+0x5c/0x250
[  318.385194][ T8347]  trace_array_create_systems+0x582/0xc30
[  318.387933][ T8347]  instance_mkdir+0xca/0x140
[  318.389643][ T8347]  tracefs_syscall_mkdir+0x10e/0x180
[  318.391629][ T8347]  ? __pfx_tracefs_syscall_mkdir+0x10/0x10
[  318.393812][ T8347]  vfs_mkdir+0x361/0x850
[  318.395904][ T8347]  filename_mkdirat+0x48b/0x5e0
[  318.398349][ T8347]  ? __pfx_filename_mkdirat+0x10/0x10
[  318.416451][ T8347]  ? strncpy_from_user+0x19d/0x2d0
[  318.418561][ T8347]  ? do_getname+0x191/0x390
[  318.420944][ T8347]  __ia32_sys_mkdirat+0x88/0xc0
[  318.423055][ T8347]  __do_fast_syscall_32+0xe7/0x970
[  318.426861][ T8347]  do_fast_syscall_32+0x32/0x70
[  318.429627][ T8347]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  318.433071][ T8347] RIP: 0023:0xf707efec
[  318.435309][ T8347] Code: Unable to access opcode bytes at 0xf707efc2.
[  318.439620][ T8347] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000128
[  318.457604][ T8347] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140
[  318.460773][ T8347] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000
[  318.464140][ T8347] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  318.467754][ T8347] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  318.486447][ T8347] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  318.489828][ T8347]  </TASK>
[  318.492146][ T8347] Kernel Offset: disabled
[  318.493693][ T8347] Rebooting in 86400 seconds..