last executing test programs:

3m45.293630707s ago: executing program 32 (id=389):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d7061746830")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='27', 0x2)
write(0xffffffffffffffff, &(0x7f0000001138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00multipath\x00\x00\x00\x00\x00\x00\x002 queue_mode bio 0 0 0', 0x3e)
ioctl(r0, 0xc138fd09, &(0x7f0000001000)="0400000800000000000000007801000038010000010000000000000000000000000000000000000000000000000000006d7061746830")

3m20.581377157s ago: executing program 33 (id=483):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000054, &(0x7f00000002c0)={0xa, 0x4f26, 0x8001, @dev={0xfe, 0x80, '\x00', 0x2c}, 0xfffffefd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f00000006c0), &(0x7f0000000700), 0x8}, 0x20)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3m17.813328598s ago: executing program 34 (id=612):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r2, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendto$packet(r0, &(0x7f00000002c0)="01122217eeede0788d7f8f195f7424ab8d1972458e078305e505c78135c836f38251915e6cf39794", 0x28, 0x400c8c1, &(0x7f0000000300)={0x11, 0x86dd, r2, 0x1, 0xa, 0x6, @random="842c4c45bc33"}, 0x14)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003600)={&(0x7f0000003640)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x81c}]}]}, 0x5c}}, 0x0)
process_vm_readv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000380)=""/160, 0xa0}], 0x1, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4080008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x2, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x16}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x24}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x9604cc1ba46ec7b8}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x5}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x20}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x31}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x0)

3m15.016320705s ago: executing program 35 (id=545):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./gadget\x00', 0x1ef)
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000300), 0xed00, 0x0)
ioctl$DVD_AUTH(r0, 0x5392, &(0x7f0000000340)=@type=0x3)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000140)='gadgetfs\x00', 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000580)="000000000902190001010080d80800070059da95bdc10200e546320904000001ff000000070581024000000902198001010080320904000005000000000705810900000000000000728043782afd0000403412d09be67fa02b76de6216798506c1426fce8ecfcbd98c143e30bc3cc82309600ed8a9f448207c1cb82726e4a949b77aa57d1b0f654eadc1dcb6bf7af6db2cfab47fe5ba870d0f95a1caa097d4eb18f9fade09c9d5a46e03e690279b13a89f0604d117f7aabc8fa3f140993400"/201, 0xc9)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x76, 0x103901)
ioctl$USBDEVFS_BULK(r1, 0x4004550d, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f000076e000/0x11000)=nil, 0x11000, 0x15)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$mtd(0x0, 0x0, 0x2)
r4 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r4], 0x0, 0x2a, 0x0, 0x0, 0x5}, 0x28)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x18)
bind$bt_hci(r5, &(0x7f0000000380)={0x1f, 0xffffffffffffffff, 0x1}, 0x6)
symlinkat(&(0x7f0000000040)='.\x00', r5, &(0x7f0000000240)='./file0\x00')
openat2(r5, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x102, 0x8}, 0x18)
write(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000044000/0x4000)=nil)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r6, 0x0)

3m8.8876597s ago: executing program 36 (id=585):
openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000200000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r4, &(0x7f0000001b00)={&(0x7f0000001b40)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040) (async)
sendmmsg$inet(r4, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001c40)='\a', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000) (async)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001540)='./config/usb_gadget/g1/functions/uac2.0/c_chmask\x00', 0x2, 0x0)
syz_emit_vhci(&(0x7f00000015c0)=ANY=[@ANYBLOB="040ed7e54e20"], 0x7) (async)
write(r5, &(0x7f0000001580)="aa", 0x1) (async)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001500)={r1, r5, 0x10, 0x0, @void}, 0x10)
r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x204, 0x82)
mmap(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0x1000002, 0x11012, r6, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f00000019c0), 0x141400, 0x0)
ioctl$FBIOPAN_DISPLAY(r7, 0x4606, &(0x7f0000001a00)={0xbd6, 0x40, 0x30, 0x10, 0x1000, 0x7, 0xf, 0x0, {0x41f569e, 0x4}, {0x1ff, 0xfffffffe}, {0x298, 0x7}, {0x1, 0x4}, 0x3, 0x1, 0x9, 0x195e, 0x0, 0x1, 0xd, 0x3, 0x5, 0xf, 0x401, 0x8, 0x4, 0x1, 0x3, 0x1}) (async)
rt_sigprocmask(0x2, &(0x7f0000001ac0)={[0xfffffffffffffffd]}, 0x0, 0x8) (async)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x3, 0x10, &(0x7f0000001740)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f00000017c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
getsockopt$inet_sctp6_SCTP_ASCONF_SUPPORTED(r3, 0x84, 0x80, &(0x7f0000001840)={<r9=>0x0, 0x7a4e4b20}, &(0x7f0000001880)=0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000018c0)={r9, @in6={{0xa, 0x4e24, 0xd, @local, 0xfff}}, 0x10001, 0xef3d, 0x5, 0x9, 0x9a, 0x9, 0x3}, 0x9c) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001800)={r8, &(0x7f0000001840)}, 0x20)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
setrlimit(0x2, &(0x7f0000001980)={0x6, 0x2400000})
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) (async)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r10, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r11, 0x1, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x800)

2m58.442647585s ago: executing program 37 (id=813):
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0)
ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000d80)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0xa0800, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@crypt={0x0, 0x90, 0x0, 0x78, 'crypt\x00', {'aes:2-cbc-plain64', 0x20, @none, 0x20, '1024', 0x20, {@ram_num={'1:', 0x1}, 0x20, '8191'}, ' 1 integrity:32:aead'}}]})
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfffffffc}}, './file0\x00'})

2m43.068077466s ago: executing program 38 (id=817):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000080)={0x4, 0x4})
r1 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x9c, '\x00', @p_u8=&(0x7f0000000100)=0x6}})

2m24.200043542s ago: executing program 9 (id=1112):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x42, 0x0)
r1 = fanotify_init(0xef0, 0x2)
readv(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/141, 0x8d}], 0x1)
fanotify_mark(r1, 0x105, 0x40009965, r0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="d9b98000b800008ee00f01c5ba2100ed66b92c0a00000f3240baf80c66b84cddc88166efbafc0c66b82ea6000066ef66b9ea0a00000f320f79dabad004ed", 0x3e}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_clone(0x40000, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x400000, 0x100)
socket$tipc(0x1e, 0x2, 0x0)

2m23.618044775s ago: executing program 9 (id=1113):
mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f0000000900)='./bus\x00', &(0x7f0000000940), 0x40, &(0x7f0000000980)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000009c0)='./bus\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffea)

2m23.499144313s ago: executing program 9 (id=1114):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0xbc0b, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./sys\x00', 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/nd/devices/dax0.0/namespace\x00', 0x1, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0xf0ffff)

2m22.729249958s ago: executing program 9 (id=1117):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
socket$packet(0x11, 0x2, 0x300)
setreuid(0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'wlan1\x00', 0x7b11})
r1 = socket(0x400000000010, 0x2, 0x4)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000740)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="300000001c000100040000000000000700000000", @ANYRES32=r5, @ANYBLOB="8000f2040a000200aaaaaaaaaa1b00000600050001000000"], 0x30}, 0x1, 0x1000000}, 0x0)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x54, r7, 0x1, 0x0, 0x0, {0x2d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xff12}, {0x2}, {0xc}}]}, 0xa0}}, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x9, 0x200000c, 0x100010, r8, 0x0)
write(r8, &(0x7f0000000200)="9d0f923f6b7acb9466da9e9eeebf2a05abc851fab989d27d48d5ca7d279e0cf4c26ca64bebd08450e7278952a6d474ddfb8fc26c601085099777f7e8", 0x3c)
ioctl$TUNSETIFF(r8, 0x400454ca, 0x0)
write(r8, &(0x7f00000001c0)='100', 0x3)
syz_open_dev$usbmon(&(0x7f0000000700), 0x400, 0x800) (fail_nth: 28)

2m22.348529773s ago: executing program 9 (id=1119):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='sysfs\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x4a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000580)='./bus\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000640)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)

2m22.188287025s ago: executing program 9 (id=1121):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r3, r2, 0x25, 0x2, @void}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@bridge_getvlan={0x40, 0x72, 0x400, 0x70bd25, 0x25dfdbff, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x40}}, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'ipvlan1\x00', &(0x7f0000000200)=@ethtool_eeprom={0xb, 0x0, 0x200, 0xe8, "71422b1e832e3d688026a5ba7877d6a425df9c77ea08ffb00df20bd4ce63544dd57c986070c7847a627e72a048249bae6bc7bfced1819eec1f09f5f1fd8695eeb64099599dd4ea68e73bca912970b94b938a59a08a8c7504d0ec3dd52cd25d22dddc54da82975e694fa105f0668a3d135199bf6ae990db79cd76322758509073d198ca117d855b8b1adbae06ccc11fe0adf3d69e105b27e3f26b45ac938b2fe3af09b5ac94ce59229f83a701e4283a554e5aa50c90595324020ab71f926516da5a1c8cd799e4fce559990e3c3f22b508ca67758571b201539d41d38013f4e0148c7a00dc1fc692ca"}})

2m20.678642065s ago: executing program 0 (id=1125):
sched_setscheduler(0x0, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, 0x0, 0x8000005}, 0x94)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c)
mount$bind(0x0, 0x0, 0x0, 0x1144a0, 0xfffffffffffff000)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x908422, 0x0)
sched_setscheduler(0x0, 0x2, 0x0) (async)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, 0x0, 0x8000005}, 0x94) (async)
socket$inet(0x2, 0x2, 0x0) (async)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) (async)
mount$bind(0x0, 0x0, 0x0, 0x1144a0, 0xfffffffffffff000) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) (async)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async)
mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x908422, 0x0) (async)

2m20.563848662s ago: executing program 0 (id=1126):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001bc0), 0xa0201, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001400090527bd7000fedbdf25020100c8", @ANYRES32=r2, @ANYBLOB="14e602006772653000000000000000000000ad24929a49e143d8000008800200ac1414aa"], 0x34}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001c00))
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
capget(&(0x7f0000000000)={0x19980330}, 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x410401, 0x1)
r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000001c80), 0x105000, 0x0)
ppoll(&(0x7f0000001cc0)=[{r3, 0x8430}], 0x1, 0x0, 0x0, 0x0)
write$dsp(r0, &(0x7f0000001d00)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)

2m19.682073385s ago: executing program 39 (id=1048):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x3f, 0x0, 0x0, 0x40040}, 0x0)

2m19.640342967s ago: executing program 0 (id=1128):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff)
r2 = fanotify_init(0x200, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo/3\x00')
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040880}, 0x1)
r5 = open_tree(r3, &(0x7f00000003c0)='\x00', 0x89901)
move_mount(r5, 0x0, r5, 0x0, 0x276)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="21002abd7000ffdbdf250c00000008000300", @ANYRES32=0x0, @ANYBLOB="0c300e000100000001001eb7"], 0x28}, 0x1, 0x0, 0x0, 0x4840}, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[@ANYRESDEC=r2, @ANYBLOB="818483d8767e1b4c06c38148716521b6335ef0a12ab3605c4087150e1edda4090b0625489e4a7f3548c5df71302981e35ee0ef663b0e898bc26af4c6a97d83e24f2323ad5576d128f74bff2f42b4ad4dba94c26247353b53521de7389a34478fc96f9fb9e936099363721b5a2156c61d44ac35a6520df898c10ddf6e6d82a39097404d8013af482d01823286c607de7595dc6ec1bd7517a85f99cb5082dbc667e06e1ae9827cc32efa925511219e9405c57eed5692e1d644897b47bd0d37ad0180bfb918b1d3831f6443e075c1fa3383342a57e82ddd59133944c84226ac4f1b5c77cd86fc980a3643532c790e39ce51962d75778e92", @ANYRES8=r3], 0x28}, 0x1, 0x0, 0x0, 0x40804}, 0x4044851)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x189802, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000080)=0x41)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000580)=0x101, 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'syz_tun\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000680)={'netdevsim0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendto$packet(r8, &(0x7f0000000600)="5a181e9f51242cb3d81414ef4a74", 0xe, 0x90, &(0x7f0000000640)={0x11, 0x8, r9, 0x1, 0x6}, 0x14)
pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)="80fd02000040", 0x6}], 0x1, 0x1, 0x0)
r13 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r13, 0xaf01, 0x0)
r14 = eventfd2(0x43, 0x1)
ioctl$VHOST_SET_VRING_KICK(r13, 0x4008af20, &(0x7f0000000540)={0x1, r14})
set_tid_address(0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0)

2m19.168769769s ago: executing program 0 (id=1129):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./sys/bus/platform/drivers/serial8250\x00', 0x0, 0x0)
r2 = openat(r1, &(0x7f0000000080)='unbind\x00', 0x1, 0x0)
write(r2, &(0x7f00000000c0)='serial8250', 0xa)
r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
landlock_restrict_self(r2, 0x2)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="97eb01001800000000000000500000005000000002000000090000000000000e03000000010000000a0000000000000203000000000000000500000d0000fa8c99dc00000100000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0xffffffffffffffff, 0x4}, 0x38)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r6)
socket$kcm(0x10, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8b34, &(0x7f0000000840)={'wlan1\x00', @random="000500000020"})
pipe2(&(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4000)
fchmod(0xffffffffffffffff, 0xc0)
r9 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000180)={0x0, &(0x7f0000000280)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x67, 0x1}}, @nested_vmlaunch={0x12f, 0x18}], 0x80})
r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000640), 0x8002, 0x0)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r10, 0x84, 0x12, &(0x7f0000000680)=0x1, 0x4)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
r11 = syz_io_uring_setup(0x495, &(0x7f0000001380)={0x0, 0x104c55, 0x100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000000)=<r12=>0x0, &(0x7f0000000108)=<r13=>0x0, &(0x7f0000001340)=<r14=>0x0)
syz_io_uring_submit(r12, r13, r14, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x11, r0, 0x0, 0x0, 0x0, 0x2001, 0x1, {0x1}})
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r8)
r16 = socket$nl_generic(0x10, 0x3, 0x10)
r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r16, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r18=>0x0})
sendmsg$NL80211_CMD_FRAME(r16, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r18, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r15, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r18}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010)
syz_io_uring_submit(r12, r13, r14, &(0x7f0000000300)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x2, 0x0, 0x1})
io_uring_enter(r11, 0x6, 0x0, 0x0, 0x0, 0x0)

2m18.828268474s ago: executing program 0 (id=1130):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0xfffffffe, {0x7}}, [@NFT_MSG_DELSETELEM={0x48, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040)

2m18.72495785s ago: executing program 0 (id=1131):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x42101, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="b3", 0x1}], 0x1) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000011c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000001280)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@initr0]}, &(0x7f00000012c0)='GPL\x00'}, 0x80)
r2 = syz_btf_id_by_name$bpf_lsm(&(0x7f00000001c0)='bpf_lsm_task_setpgid\x00')
ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) (async)
r3 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000dc0)='bpf_lsm_msg_queue_alloc_security\x00')
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00aa19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e468eea3fcfcf498278a315f5b87e1c26433a8acd715f5888b2007f00000000000000000100000000000000010015d60605000053350000000034a70c2ab40c7cf5691db43a5c00000000000000f030007ce2c6f800000000000000e75a89faff01218087560cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bef5d7d617da7a6520655a805608df4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf050000008600a62e96b7cb8e52cbdc2ba9d580609e31c30879d6fce424c2208af6c3784a1975fa657de38a3a32e4fd67ce446adb431d07db79241aca1dd9ba02453bbb5ee8babe1745e645f091231b986e952afdac972f342c6f184777d05d988d6edc71df0100000013a38300cabf2b554380ad215c789bef4cc574109b8df8d9a9db669557b3809d8c396d2c0361629d1822f722ec23812770d72cd00100000078a75dea785be550dbb420287e0789b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b8a0ae6fb5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fc7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff25184d4e3c6f7f623559435b2c505fb711300000000040000000000000000000000000000e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7a49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd029406000000433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671a5767014b09ddbf69b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7b49991be06b950ccd48f4e49833f3c4a02bbd06c84680549f9eb16682ecb722e8ffaca907a3eaaebfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c52108d9c0d51dc30209872ec602af42eb29d54a37be0fdfdcd74c2d859a566ee5c30677173a2592a4617ae08bec07422d52d2ba7271550a5c20e3a8d1c8c8fd3025ff00607b2249ae9a18391e01b21b36169790b8e96f7955754b6b01a75165d3573d1dec5cf1b08b6115b43203a5654cce2277eb4c02ef4817b4cb989ac178895810eff7b697f2dc9b308aa2460e3cb85cdc4833571a62bf310700000000000000cc7f923284230ada8c756096a66119d4b6b2f159585c3cf8e7bfdd619e294b1d21cd491b8cfd4a253856e485fe29c6ad177a9fb078ca905782b9ed3c30675b89a784bb8031cac0de95178a5acff029a0f0fe972df22b20afe95fba722056f94ab15f1cf605c33df627311f1b614684d77549"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94)
madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000001300)=""/188)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x20008800) (async)
r5 = fcntl$dupfd(r0, 0x406, r4)
mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x20010, r5, 0x43ccbbb1) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r3, @ANYRES64=r2, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB='\x00'/13], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000f00)={r6, &(0x7f0000000f40)="cc", &(0x7f0000000f80)=""/3, 0x2}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000fc0)={r6, &(0x7f0000001000), &(0x7f0000001040)=""/6, 0x2}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001080)={r6, &(0x7f00000010c0), &(0x7f0000001100)=""/166}, 0x20) (async)
syz_btf_id_by_name$bpf_lsm(&(0x7f0000000e80)='bpf_lsm_ib_free_security\x00')
socket$kcm(0x11, 0x200000000000002, 0x300) (async)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000cc0)=r5, 0x4) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="180000002c00", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x4004051}, 0x4) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=ANY=[@ANYBLOB="60040000", @ANYRES64=r3, @ANYBLOB="010000000000000000000f3a00000800030056b8f2878686dffe6456377ec1535ff9a807d8d9ba9e15c9ca6a33d2dbe84f1fdfaa4ff4ae0300cc2b70bf0249762c46c7d36b8d24f2cb3e5635800247be52ec4f2e12c74975b25dde6c23bc5c8d870b", @ANYRES32=r8, @ANYBLOB="08000c006400000008000d0002000000080026006c09000028000e0080000000ffffffffffff020000000000020000000000000000000000000064003104000004043381", @ANYBLOB="0421ea1ebdc153bdb3a189a68fb7fbffffffffffffffef9cea5e2e0400b412247cd57d39369dfd23b45d2d98ede6f2f771c3eafaecba7a6990addcc444ec309b10d1774f227dc902ba4cbea33dc2fb29e1a601fa4f7de4929cef5065ff44f652fbde4c385128d0f6ed3f6d5d03d83b79eaf09d94be498adf98236c15762e27b196d1b67a7b7ec951b36a47db629168d14307bdba027ce2430b177c5a1ab1a8c4858610d42df44864c198adef8cb69f70bc49151c1d02381637e9efd01a00009eb6da5615f320cb2283b33e2b689afdd9c161b1bd075f75ef2c2ee0fb"], 0x460}}, 0x0)
syz_emit_ethernet(0x3b6, &(0x7f0000000200)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf730041e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0xe, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)

2m9.152430254s ago: executing program 40 (id=1111):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800f90000000000240000002400000008000000020000000000001600000000030000000000000f0100000000000000000000150200000000002e2e"], 0x0, 0x44}, 0x28)

2m6.733575911s ago: executing program 41 (id=1121):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r3, r2, 0x25, 0x2, @void}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@bridge_getvlan={0x40, 0x72, 0x400, 0x70bd25, 0x25dfdbff, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x40}}, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'ipvlan1\x00', &(0x7f0000000200)=@ethtool_eeprom={0xb, 0x0, 0x200, 0xe8, "71422b1e832e3d688026a5ba7877d6a425df9c77ea08ffb00df20bd4ce63544dd57c986070c7847a627e72a048249bae6bc7bfced1819eec1f09f5f1fd8695eeb64099599dd4ea68e73bca912970b94b938a59a08a8c7504d0ec3dd52cd25d22dddc54da82975e694fa105f0668a3d135199bf6ae990db79cd76322758509073d198ca117d855b8b1adbae06ccc11fe0adf3d69e105b27e3f26b45ac938b2fe3af09b5ac94ce59229f83a701e4283a554e5aa50c90595324020ab71f926516da5a1c8cd799e4fce559990e3c3f22b508ca67758571b201539d41d38013f4e0148c7a00dc1fc692ca"}})

2m2.974697365s ago: executing program 42 (id=1131):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x42101, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="b3", 0x1}], 0x1) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000011c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000001280)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@initr0]}, &(0x7f00000012c0)='GPL\x00'}, 0x80)
r2 = syz_btf_id_by_name$bpf_lsm(&(0x7f00000001c0)='bpf_lsm_task_setpgid\x00')
ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) (async)
r3 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000dc0)='bpf_lsm_msg_queue_alloc_security\x00')
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00aa19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e468eea3fcfcf498278a315f5b87e1c26433a8acd715f5888b2007f00000000000000000100000000000000010015d60605000053350000000034a70c2ab40c7cf5691db43a5c00000000000000f030007ce2c6f800000000000000e75a89faff01218087560cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bef5d7d617da7a6520655a805608df4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf050000008600a62e96b7cb8e52cbdc2ba9d580609e31c30879d6fce424c2208af6c3784a1975fa657de38a3a32e4fd67ce446adb431d07db79241aca1dd9ba02453bbb5ee8babe1745e645f091231b986e952afdac972f342c6f184777d05d988d6edc71df0100000013a38300cabf2b554380ad215c789bef4cc574109b8df8d9a9db669557b3809d8c396d2c0361629d1822f722ec23812770d72cd00100000078a75dea785be550dbb420287e0789b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b8a0ae6fb5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fc7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff25184d4e3c6f7f623559435b2c505fb711300000000040000000000000000000000000000e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7a49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd029406000000433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671a5767014b09ddbf69b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7b49991be06b950ccd48f4e49833f3c4a02bbd06c84680549f9eb16682ecb722e8ffaca907a3eaaebfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c52108d9c0d51dc30209872ec602af42eb29d54a37be0fdfdcd74c2d859a566ee5c30677173a2592a4617ae08bec07422d52d2ba7271550a5c20e3a8d1c8c8fd3025ff00607b2249ae9a18391e01b21b36169790b8e96f7955754b6b01a75165d3573d1dec5cf1b08b6115b43203a5654cce2277eb4c02ef4817b4cb989ac178895810eff7b697f2dc9b308aa2460e3cb85cdc4833571a62bf310700000000000000cc7f923284230ada8c756096a66119d4b6b2f159585c3cf8e7bfdd619e294b1d21cd491b8cfd4a253856e485fe29c6ad177a9fb078ca905782b9ed3c30675b89a784bb8031cac0de95178a5acff029a0f0fe972df22b20afe95fba722056f94ab15f1cf605c33df627311f1b614684d77549"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94)
madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000001300)=""/188)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x20008800) (async)
r5 = fcntl$dupfd(r0, 0x406, r4)
mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x20010, r5, 0x43ccbbb1) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r3, @ANYRES64=r2, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB='\x00'/13], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000f00)={r6, &(0x7f0000000f40)="cc", &(0x7f0000000f80)=""/3, 0x2}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000fc0)={r6, &(0x7f0000001000), &(0x7f0000001040)=""/6, 0x2}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001080)={r6, &(0x7f00000010c0), &(0x7f0000001100)=""/166}, 0x20) (async)
syz_btf_id_by_name$bpf_lsm(&(0x7f0000000e80)='bpf_lsm_ib_free_security\x00')
socket$kcm(0x11, 0x200000000000002, 0x300) (async)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000cc0)=r5, 0x4) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="180000002c00", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x4004051}, 0x4) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=ANY=[@ANYBLOB="60040000", @ANYRES64=r3, @ANYBLOB="010000000000000000000f3a00000800030056b8f2878686dffe6456377ec1535ff9a807d8d9ba9e15c9ca6a33d2dbe84f1fdfaa4ff4ae0300cc2b70bf0249762c46c7d36b8d24f2cb3e5635800247be52ec4f2e12c74975b25dde6c23bc5c8d870b", @ANYRES32=r8, @ANYBLOB="08000c006400000008000d0002000000080026006c09000028000e0080000000ffffffffffff020000000000020000000000000000000000000064003104000004043381", @ANYBLOB="0421ea1ebdc153bdb3a189a68fb7fbffffffffffffffef9cea5e2e0400b412247cd57d39369dfd23b45d2d98ede6f2f771c3eafaecba7a6990addcc444ec309b10d1774f227dc902ba4cbea33dc2fb29e1a601fa4f7de4929cef5065ff44f652fbde4c385128d0f6ed3f6d5d03d83b79eaf09d94be498adf98236c15762e27b196d1b67a7b7ec951b36a47db629168d14307bdba027ce2430b177c5a1ab1a8c4858610d42df44864c198adef8cb69f70bc49151c1d02381637e9efd01a00009eb6da5615f320cb2283b33e2b689afdd9c161b1bd075f75ef2c2ee0fb"], 0x460}}, 0x0)
syz_emit_ethernet(0x3b6, &(0x7f0000000200)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf730041e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0xe, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)

1m30.856831411s ago: executing program 3 (id=1562):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800002000000000240000002400000008000000020000000000001600000000030000000000000f0100000000000000000000150200000000002e2e"], 0x0, 0x44}, 0x28)

1m30.856630718s ago: executing program 3 (id=1563):
syz_emit_ethernet(0x7a, &(0x7f0000000f00)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "d2dad5", 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x880b, 0xf5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}}}}}}}, 0x0)

1m30.798824953s ago: executing program 3 (id=1564):
ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x0, <r0=>0xffffffffffffffff})
ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x2, 0x5002)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000001c00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001c40), 0x304, 0x10, &(0x7f0000001c80), 0xfffffea2}, 0x48)

1m30.798483464s ago: executing program 3 (id=1565):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/mdstat\x00', 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4, 0x4, 0xfffffffd, 0x1}, 0x10)
write(r1, &(0x7f0000000040)="1c0000001a005f0214f9f407000904001f000000fe00000000020000", 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="dffe450bb70e000000040008ab88947168b93d010018000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
pread64(r0, &(0x7f0000000880)=""/208, 0xd0, 0x8d31)

1m30.717269425s ago: executing program 3 (id=1566):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x6, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8}, @exit]}, &(0x7f0000000540)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x1fe)
mount(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='devpts\x00', 0x200000, 0x0)
chroot(&(0x7f0000000640)='./file0\x00')
mount(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='sysfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000780)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r1 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x40000, 0x120)
getdents64(r1, 0x0, 0x0)
select(0x2a, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080))
ioctl(r0, 0x800452d3, &(0x7f0000000080))
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xc03, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000000101010100000000000000000500febd4200040c00108008000240000064381c0010800800024000000004080003400000ffff08004140fffffff80600124000000000080003400000040008000740000000c9d497ed2e5f7cca67d633c021d35b3e36730274abaf4ab84363d5faf872ab40e3f7d522545fefa21a93e8078c864f072b2b2fb4da4da60da2015713b207e52f23079db55461af7b324839893eaa01351cea8f3189e79661fdd1fd"], 0x54}, 0x1, 0x0, 0x0, 0x20000884}, 0x8000)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x5)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, &(0x7f0000000380)="66baf80cb82d980680ef66bafc0cec0f07400f09b9800000c00f3235001000000f300f783496c403d96cd7392e0f07b805000000b95e0000000f01d966ba4300ed0f06", 0x43}], 0x1, 0x70, &(0x7f0000000400), 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000940)=0x100000001, 0x4)
connect$inet6(r7, &(0x7f0000000980)={0xa, 0x0, 0x9, @loopback}, 0x1c)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000009c0), 0x3)
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000a00)=@gcm_128={{0x304}, "b79e5e602970a4f9", "7ae45252c9de55b4bc6a682567b902a1", "5dcf9f49", "c5cab4a5baa61761"}, 0x28)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x11a, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd28, 0x25dffbfc, {{0x12}, {@void, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c4840}, 0x20040840)

1m30.651617135s ago: executing program 3 (id=1567):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0)
r1 = fsopen(&(0x7f0000000700)='adfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000740)='gid', &(0x7f0000000780)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000340)='blkio.bfq.io_queued\x00', 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0)
readv(r2, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/244, 0xf4}], 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'ip6gretap0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x40}}, 0x0)
r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card3/oss_mixer\x00', 0x200000, 0x0)
read$proc_mixer(r6, &(0x7f00000001c0)=""/45, 0x2d)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='ext3\x00', 0x4000, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x40082, 0x17)
write(r7, &(0x7f0000000140)='3', 0x4e)
r8 = accept$unix(r7, 0x0, &(0x7f0000000200))
pread64(r8, &(0x7f0000000240)=""/96, 0x60, 0x0)
setns(0xc9, 0x0)
r9 = syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x0)
pread64(r9, 0x0, 0x0, 0x1)

1m15.688762462s ago: executing program 43 (id=1567):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0)
r1 = fsopen(&(0x7f0000000700)='adfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000740)='gid', &(0x7f0000000780)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000340)='blkio.bfq.io_queued\x00', 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0)
readv(r2, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/244, 0xf4}], 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'ip6gretap0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x40}}, 0x0)
r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card3/oss_mixer\x00', 0x200000, 0x0)
read$proc_mixer(r6, &(0x7f00000001c0)=""/45, 0x2d)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='ext3\x00', 0x4000, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x40082, 0x17)
write(r7, &(0x7f0000000140)='3', 0x4e)
r8 = accept$unix(r7, 0x0, &(0x7f0000000200))
pread64(r8, &(0x7f0000000240)=""/96, 0x60, 0x0)
setns(0xc9, 0x0)
r9 = syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x0)
pread64(r9, 0x0, 0x0, 0x1)

54.959937702s ago: executing program 5 (id=2081):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd07, &(0x7f0000001000)="0400000000000000000000007801000038010000010000000000000000000000000000000000000000000000000000006d7061746830")

54.959626652s ago: executing program 5 (id=2083):
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x42, 0x1b6)
pwrite64(r0, &(0x7f0000000300)="0000010042", 0x5, 0x1be)
pwrite64(r0, &(0x7f0000000340)="55aa", 0x2, 0x1fe)
pwrite64(r0, &(0x7f0000000380)='PRIVHEAD', 0x8, 0xc00)
pwrite64(r0, &(0x7f00000003c0)="0002000b", 0x4, 0xc0c)
pwrite64(r0, &(0x7f0000000500)='\x00', 0x1, 0x1e800c)
r1 = syz_open_dev$loop(&(0x7f00000006c0), 0x0, 0x2)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000800)={0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})

54.88826742s ago: executing program 5 (id=2085):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, &(0x7f00000002c0))
setsockopt(r2, 0x84, 0x80, &(0x7f0000000040)="0000000001000000", 0x8)
setsockopt(r2, 0x84, 0x81, &(0x7f0000000080)="0000000001000000", 0x8)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0)

54.719385643s ago: executing program 5 (id=2087):
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='sysfs\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x4a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000580)='./bus\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000640)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) (fail_nth: 2)

54.644696565s ago: executing program 5 (id=2089):
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='sysfs\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x4a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000580)='./bus\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000640)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)

54.548938759s ago: executing program 4 (id=2090):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_time_recursive\x00', 0x26e1, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xc0000, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000400)="a10100001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f00000000c0)={0x3, 0x2})
syz_emit_ethernet(0x2e, &(0x7f0000000380)={@random="93fc85ff30d2", @random="2ecafcc67af2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0xb200, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000180)={0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000200)=[0x0, 0x0, <r4=>0x0], &(0x7f0000000240), 0x3, r3})
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f3c", 0x44, 0x2f, 0x1, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x2}, {}, {}, {0xa888}, {}, {0x8, 0x6558, 0xfffffffc}}}}}}}, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000280)={0x600, 0x1, &(0x7f00000002c0)=[r3], &(0x7f0000000300)=[0x3], &(0x7f0000000340)=[r4], &(0x7f0000000380), 0x0, 0x2})

54.522315744s ago: executing program 5 (id=2092):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x6}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

54.429457452s ago: executing program 4 (id=2093):
openat$dm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x3, 0x9, 0xf8, 0x81}, {0x1, 0x5, 0x2, 0xa30}]})
mkdir(&(0x7f0000000340)='./config\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000002800)='./config/cluster/ocfs2/node/node0/local\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000002bc0)={0x2020}, 0x2020)

54.428544634s ago: executing program 4 (id=2096):
syz_emit_ethernet(0x82, &(0x7f0000012480)={@random="195df410dc24", @random="77b6d4f11b32", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "aac4e0", 0x4c, 0x2c, 0x0, @dev, @local, {[@routing={0x3b, 0x0, 0x0, 0x1}], {{}, {0x0, 0x0, 0x0, 0x0, 0x13}}}}}}}, 0x0)

54.347532437s ago: executing program 4 (id=2097):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000800)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0)
sendmmsg$sock(r3, &(0x7f0000000880)=[{{0x0, 0x1c, 0x0}}], 0xffffff80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00007fb000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000280)="366536440f017c23b166baa000ed43c2004066400f3882747aa066b864000f00d00fc76bfac4e1fee65c1a0fc401b1f51ef20f7cfe8f09900117", 0x3a}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000340)=ANY=[@ANYBLOB="c6aaaaaaaaaa0180c200000281000000867f7469c01bd391e0fffe8000000000080000000000000000aafe8010000000000000000000000000aa00004001", @ANYRES32=r1, @ANYRES32=0x41424344, @ANYBLOB="600200009078200004020000"], 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000054, &(0x7f00000002c0)={0xa, 0x4f26, 0x8001, @dev={0xfe, 0x80, '\x00', 0x2c}, 0xfffffefd}, 0x1c)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x3000, 0x41042}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c5}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x280000a, 0x200000005c832, 0xffffffffffffffff, 0x0)
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000006c0)={0xaa, 0x700})
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000700)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
r7 = userfaultfd(0x801)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000740))
ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f0000000780)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f00000007c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x0, 0x4100})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)

54.11834698s ago: executing program 4 (id=2100):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$inet(r1, 0x0, 0x4081)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='sysfs\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x4a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000580)='./bus\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000640)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)

54.019778532s ago: executing program 4 (id=2103):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x2)
mknodat$md(0xffffffffffffff9c, &(0x7f0000000280)='./md0\x00', 0x6180, 0x0)
r1 = openat$md_node(0xffffffffffffff9c, &(0x7f00000002c0)='./md0\x00', 0x2, 0x0)
ioctl$RUN_ARRAY(r1, 0x4004092b, 0x0)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f00000001c0)={r3, r3, 0x7, 0x0, 0x0, 0xe, 0x4, 0xc, 0x9, 0x3, 0x2, 0x2, 'syz1\x00'})
ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x13, '\x00', @data=0x10000, 0x4942}, {0x1e, '\x00', @buffer={"4832d7e4b96c7e1ce0dee5b0b390d026905628745883ebd7d17800", 0x20}, 0x16}, {0x34, '\x00', @buffer={"81355be467134c0a83ba1ebcb889487c1e3944124e775f2cd21fbd3d596d7453", 0x20}, 0x4}]})

39.406773244s ago: executing program 44 (id=2092):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x6}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

39.003391157s ago: executing program 45 (id=2103):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x2)
mknodat$md(0xffffffffffffff9c, &(0x7f0000000280)='./md0\x00', 0x6180, 0x0)
r1 = openat$md_node(0xffffffffffffff9c, &(0x7f00000002c0)='./md0\x00', 0x2, 0x0)
ioctl$RUN_ARRAY(r1, 0x4004092b, 0x0)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f00000001c0)={r3, r3, 0x7, 0x0, 0x0, 0xe, 0x4, 0xc, 0x9, 0x3, 0x2, 0x2, 'syz1\x00'})
ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x13, '\x00', @data=0x10000, 0x4942}, {0x1e, '\x00', @buffer={"4832d7e4b96c7e1ce0dee5b0b390d026905628745883ebd7d17800", 0x20}, 0x16}, {0x34, '\x00', @buffer={"81355be467134c0a83ba1ebcb889487c1e3944124e775f2cd21fbd3d596d7453", 0x20}, 0x4}]})

26.890426916s ago: executing program 8 (id=2269):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0)

26.878317516s ago: executing program 8 (id=2273):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000024c0)=ANY=[@ANYBLOB="000086ddffff03000000000000004959002c006500000401"], 0xff04)

26.725910554s ago: executing program 8 (id=2276):
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$DM_DEV_ARM_POLL(r0, 0xc138fd10, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x24011, 0x0, 0x0, @by_uuid={0x0, '\x00', {'CRP-syz', 0x0, '0\x00'}}})
ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000ac0)={0x4, 0x0, 0x0, 0x158, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x0, @stats_create={'@stats_create ', '-', 0x20, '/1'}}})

26.674891797s ago: executing program 8 (id=2278):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000b00))
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4401000010000100feffffbf000100000000000000000000000000000700000000000000000000002000ffffac1414bb000103944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe8000000000000000000000000000aafc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000080000000000000000000000000000000900000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000a0001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$int_in(r2, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000003c0)={0x1, 0x1, 0x0, &(0x7f0000000400)=""/63, 0x0, 0x7000})
r3 = socket$packet(0x11, 0x3, 0x300)
syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="040e050d3b200900435b4b967e693de41199557e21405fc67a54c6eb8ea369c234f33e61fb0de76658d75e863689a99244afdcda77d7575223558c47ea"], 0x8)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440))
r4 = dup(r3)
socket$inet6(0xa, 0x1, 0x0)
inotify_init()
r5 = inotify_init()
fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000000000000000000104000000200000000000000000000001"], 0x0, 0x3c}, 0x28)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0100000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x3, 0x8, &(0x7f0000000d00)=ANY=[@ANYBLOB="bf160000000000007962a80000000000150204000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000850000006c000000b70000000000000095"], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000480)={0x1, r4})
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000500)={'bridge0\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), 0xffffffffffffffff)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_GET_LINKS(r12, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x24, r11, 0x401, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004044}, 0x4800)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, r11, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x4}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x10010}, 0x4040810)
sendmsg$nl_route_sched(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@getchain={0x24, 0x11, 0x839, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f00000008c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000d80)=ANY=[@ANYBLOB="700200001900df192bbd7000fedbdf2500000000000000000000ffffac06934d966d48facf543030265133dc90dd0adaaaff0200000022000000000000000000014e2000074e23000202b5fb658e9434d22cd6989943229970e24193298f6f95e890e981ae9a9f7fea2454da80c4857d40e30f788fec54b76667a0e558ed2076c77e6d66015e9b0d9dd4ec56ef25dd4d2bbb3bf755ad017781d675c0d6a481e643c71f4f976cab501f358452eb5569198479d159a190e3faf7f53a7cb70c51520df8db365b465fc6afba7084dfd5b087b1931e514d96ed7fe662a5b9d63bc8fc836769833fd33788708d1b44c635d2e76ab66c", @ANYRES32=r10, @ANYRES32=0xee01, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x40}, 0x24040095)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x4, 0x43033, 0xffffffffffffffff, 0x0)

25.914832882s ago: executing program 8 (id=2295):
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='sysfs\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x4a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000580)='./bus\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000640)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)

25.824036046s ago: executing program 8 (id=2296):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080))
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000040)=0xc00000)
r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @local}, 0x10, 0x800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, <r3=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000300)={<r4=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000500)={r3, r4, "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", "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"})

10.54129065s ago: executing program 46 (id=2296):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080))
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000040)=0xc00000)
r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @local}, 0x10, 0x800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, <r3=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000300)={<r4=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000500)={r3, r4, "aa50413dabcc53bb319d4a06cbf6f25d17aef3cb0f7bffab05c8e155a3effdd1d6be44fa112675a560a1dca2d3eba62879324f60a214f80d14cd1822ec2b24fec53108adaefc162b98ded82d8a7dd57821fbf028f10ff8ac5bdf3a7862ef69e2ec859acdf145f2d26ca5403d90989d04b986dbe349b6bc9e117d3941f746004299094627c3d37cc8fdffa2aa947283ed347cd85696c919623137187a078ce09d2eeb7c6798aebab83790f7cc243ae29cdaddf75f9d48078a412dc824cb44551c52b92028a2d1f867c315aae15879ad4a9b0afce04cc4b46b6268d36e48e3e0bb8c759c8131d4ff06a8ddb50eccccd2493f5b5f482d55c7aa47d43733dd833549", "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"})

4.159968658s ago: executing program 6 (id=2520):
r0 = syz_open_dev$video(&(0x7f0000000180), 0x8, 0x0)
r1 = openat$md_sysfs(0xffffff9c, &(0x7f00000002c0)={'/sys/block/md', @num=0x0, '/md/', @array='array_size\x00'}, 0x1, 0x0)
write$md_sysfs(r1, &(0x7f0000000300)=@str='active', 0x6)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000200)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x98f911, 0x9c, '\x00', @p_u8=&(0x7f0000000280)=0x6}})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80d1}, 0x4084)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@none}}}, 0x9)
bind$bt_hci(r3, &(0x7f00000001c0)={0x1f, 0xffff, 0x2}, 0x6)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r4, 0x80045006, &(0x7f0000000080))
syz_emit_vhci(&(0x7f00000023c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0xd2, 0x4}, {0x53, 0xfffc}}}}, 0x11)

3.675483979s ago: executing program 1 (id=2536):
mkdir(&(0x7f0000000340)='./config\x00', 0x1ff)
r0 = semget$private(0x0, 0x7, 0x195)
semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xffbf, 0x2000}], 0x1, 0x0)
semctl$GETNCNT(r0, 0x0, 0xe, 0x0)
mount(0x0, &(0x7f0000000380)='./config\x00', &(0x7f00000003c0)='configfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000002800)='./config/cluster/ocfs2/node/node0/local\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000002840)={0x2020}, 0x2020)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x2}, 0x8, 0x10, &(0x7f0000000980), 0x10}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r2, 0x702, 0x36, 0x0, &(0x7f0000000a40)="e460334470b8d480eb20010086ddf80c39e7d34ed50ffb4def8474246fae5bd7fd7fc979c18b04cc038cf6825bc8379d1232f0bf7a53", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="000000c76d000000000000008100000081"], 0x48)
openat(0xffffffffffffff9c, &(0x7f0000000140)='sys/class/net/bridge_slave_0/brport/multicast_to_unicast\x00', 0x1, 0x4d)
openat(0xffffffffffffffff, &(0x7f0000000000)='./config/cluster/ocfs2/node/node0/local\x00', 0x40, 0x92)

3.597464772s ago: executing program 6 (id=2539):
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0)
mkdirat(r0, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
mount$afs(&(0x7f0000000440), &(0x7f0000000480)='.\x00', &(0x7f00000004c0), 0x14800, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000240), 0x1, 0x2)
ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000280)={0x1, 0x1, 0x2})
ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000002c0)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000000340)}, 0x400000})
ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000380)=0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000400)={<r4=>0xffffffffffffffff})
close_range(r4, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r5, &(0x7f0000000200)='27', 0x2)
write(0xffffffffffffffff, &(0x7f0000001138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00multipath\x00\x00\x00\x00\x00\x00\x002 queue_mode bio 0 0 0', 0x3e)
ioctl(r1, 0xc138fd09, &(0x7f0000001000)="0400000000000000000000007801000038010000010000000000000000000000000000000000000000000000000000006d7061746830")

3.446545664s ago: executing program 6 (id=2541):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29"], 0x6c}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0)

3.363000758s ago: executing program 6 (id=2543):
r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r1 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0)
setns(0xc9, 0x0)
r2 = socket(0x8, 0x5, 0x7fff)
syz_usb_ep_read(r1, 0x1, 0x0, 0x0)
syz_usb_ep_write(r1, 0x81, 0x40, &(0x7f0000000040)="900100"/64)
ioctl$sock_SIOCOUTQNSD(r2, 0x40106183, 0x0)

2.632379844s ago: executing program 1 (id=2556):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0300000004000000040000000a00000000"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYBLOB="d3e26c396dba271a8c03f467b673148cf8ba651344d96b20ae0bb2d4c4d8c5f9eb433e80420d2c85948ef1832c686128ec701880698c15d22b1dc45bfcbf89c3faa4c3aaf5b1da19c984cad5fb6f46429bbac52692ee002acfc6d4a143fc43f9ab980c5cbf1b81b8c5ac409d09f06e6500560f77bff73b7d84e661c095697db27baa92e6f2359a70bf699f2af924a19e32bf622dec59e7566a53f0abb4008e04d36350bd6c04f13ea7fb2dba03e5c3b2936e827de9af411fba1793e0d5c1fef87e34933f9e59d310827869c5ea4848ce310414d5fca096e50f3e998ebe4d02c93b13eab24f", @ANYBLOB="0000000000000000b703000000000000850000002f000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000c40)=r4, 0x4)
sendmsg$inet(r3, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f00000001c0), 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syz_tun\x00', <r6=>0x0})
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000300)={0x0, 0x0, 0x1, r6}, 0xc)
syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="33330000000100112233445586dd6000000000003b4020010db8000000000000000000000001ff0e"], 0x0)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000380)=0xb, 0x4)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000980)="c86d4d5c5d9110236720b6edf196259de78e707e30b283b8b3fe2fb5c9b257c3f9f73b148b29a0356095acf47853adcea2ed0aadfef920b62a13c60c623828a14517ce908111d5507cd397760e1afc9f87c78add52f98908a13d1bb1081c6e821e5ad7595d8e323234e7ac8dd3065ac4067bd89dcb2c996415a89feedde348e957892efd0441b37f6cbb0c64f22129251d8c7e1b6a3b044644646ebaf4d89244db0d5c099a61f2d2251eb77febf7", 0xae)
mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil)
r7 = userfaultfd(0x801)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000880))
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000008c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000900)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x20004055)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
r8 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r8, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433", 0x3b}], 0x2}], 0x1, 0x40800)
openat$dm_control(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r9 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r9, 0xc138fd03, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x4800, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}}})

2.478310882s ago: executing program 1 (id=2558):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)=@newtfilter={0x34, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000300)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f010000000b0000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0x8}], 0x2}, 0x20000910)

2.238795317s ago: executing program 1 (id=2564):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001840), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001880)={'syzkaller0\x00', 0x2})
mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='romfs\x00', 0x204001, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000018c0)={'syzkaller0\x00', @link_local})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001900)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000002c0)=@newqdisc={0x43c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x410, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0xfffffffe, 0x70db, 0x60000, 0x7, 0x70388, 0x4, 0x8, 0xff, 0x3, 0x0, 0xb67, 0x3, 0x9, 0x8, 0x3, 0x595b, 0x1, 0x6, 0xf313, 0x8, 0xfffffffa, 0x0, 0x64, 0x1, 0x9, 0x1, 0xa14, 0x400, 0x9, 0x3, 0xceb, 0x10000, 0x400, 0xc, 0x4, 0x1, 0x3, 0x85, 0x40, 0x8b, 0x7ff, 0xb5d, 0x0, 0x5, 0x47704105, 0x3, 0x4, 0x2, 0x3, 0xb, 0x6, 0x8, 0x4, 0x5, 0x5fb0, 0x1, 0x400, 0xc, 0x3, 0x401, 0xf, 0x0, 0x7, 0x9, 0x3, 0x8b, 0x7, 0xb, 0x6, 0x2, 0x0, 0xb1f, 0x3, 0x5, 0x6, 0xfff, 0x435, 0x7, 0x3, 0x1000, 0x6, 0x4, 0x3, 0x4, 0x3, 0x905, 0x7, 0x9, 0xf, 0x2, 0x7fffffff, 0x8, 0x1, 0x3, 0x3, 0xfffffffc, 0x0, 0x0, 0x80000000, 0xb, 0x1ff, 0x5, 0x1000, 0x0, 0x4, 0xe, 0x9, 0x1, 0x5, 0xa, 0x4, 0x1, 0x2, 0x6, 0x4, 0x0, 0xfff, 0x6, 0x9, 0x8000, 0x0, 0x0, 0x1000, 0x9, 0x101, 0x6e43, 0x800, 0x5, 0x3, 0x2, 0x200, 0xffffffff, 0xff, 0x7503, 0xc, 0x0, 0x9, 0x3ff, 0xa5f8, 0xa47, 0x7fffffff, 0x4, 0x7d3, 0x25c70900, 0xfff, 0x9, 0x1000, 0x80000, 0x3, 0x1000, 0x5, 0x57a, 0x2, 0x3, 0xfffffffb, 0x60a6, 0x5, 0xfffffffb, 0x10, 0x5, 0x8c, 0x9, 0x68000, 0x4, 0x5, 0x4, 0xffffffff, 0x2, 0x3, 0x488, 0x4, 0x2, 0x100, 0xa, 0x9, 0x2, 0xc2, 0x5, 0xa, 0x1, 0x7, 0x3, 0x1, 0x9, 0x625, 0x2, 0x400, 0x3, 0x7fffffff, 0xd583, 0x3, 0x101, 0x4, 0x7, 0x9, 0x6, 0x7, 0x9e9, 0x6, 0x5, 0x4, 0xfffff800, 0xc, 0x2, 0x9, 0xf33e, 0x3, 0xfffffff9, 0x9, 0x4, 0x9, 0x5, 0x5, 0x3, 0x8, 0x800007ff, 0x4, 0xfb, 0xfffffff9, 0x3, 0x7ff, 0x7, 0x0, 0x7, 0x5, 0x5, 0x10000, 0xa, 0x9, 0x2c000000, 0x200, 0x60, 0xd, 0x9, 0x6, 0x1, 0x3, 0x15d5, 0x4eef, 0x8, 0x8, 0x4, 0x80000000, 0x3, 0xfffffffe, 0x1, 0xa, 0x6, 0x2, 0x5, 0xf3, 0x455, 0x9, 0x4, 0x400, 0x40000]}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001b40)={'syzkaller0\x00', <r6=>0x0})
r7 = syz_io_uring_setup(0x17af, &(0x7f00000000c0)={0x0, 0x0, 0x13290}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0))
r8 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000200)=0x7b, 0x4)
recvmmsg(r8, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x0, 0x0)
r9 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000280)={0x4})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000001b80), 0x56)
sendmsg$kcm(r4, &(0x7f0000001bc0)={&(0x7f0000001c00)=@xdp={0x2c, 0x20, r6, 0x3e}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001cc0)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

1.045805949s ago: executing program 1 (id=2575):
mkdirat(0xffffffffffffff9c, &(0x7f0000006840)='./proc\x00', 0x1ff)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
mount(0x0, &(0x7f0000006880)='./proc\x00', &(0x7f00000068c0)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000006900)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000006940)='10', 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)

781.648881ms ago: executing program 7 (id=2578):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x176ae, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
signalfd4(r0, &(0x7f00000000c0)={[0x9]}, 0x8, 0x80000)

731.631287ms ago: executing program 7 (id=2580):
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x1, 0x41)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffe, 0x6, 0xb0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000140)="9591d685c2d3", 0x0, 0x80000000, 0x10024, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5})

673.788441ms ago: executing program 7 (id=2582):
bpf$MAP_CREATE(0x0, 0x0, 0x50) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbb9bbbbb0600000000000000060001080006040002aaaaaaaaaa32ac1414bbaaaaaaaaaaaaac1414bb"], 0x0) (async)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x30000, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r3=>0x0}) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x42082, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2})
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7f, 0x401, 0x1, 0x7ff}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004890)
r8 = socket$kcm(0x11, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000640)="27030200e61114120600002fb96d", 0xe}], 0x1}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000700039022bbd7000fbdbdf2507000000", @ANYRES32=r3, @ANYBLOB="0c00018008000100510003000c000180080001000b0001000c0001"], 0x3c}}, 0x2404c0d0)

543.462206ms ago: executing program 2 (id=2584):
socket$netlink(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x4)
socket(0x10, 0x803, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c00ffff", @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000600fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)

492.884702ms ago: executing program 2 (id=2585):
r0 = socket$netlink(0x10, 0x3, 0x14)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000))
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
write$P9_RWRITE(r1, &(0x7f0000000080)={0xb, 0x77, 0x2, 0x2}, 0xb)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x24)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r2, 0x1, 0x97eb}, 0xc)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180)="84e5d73a81407c098f65e3223c2692a450deedf29825f191f0c6e76c106ab85ba03faab9d2ae5e345759c69c11d679f4f79450d1fc24b5c0e62f6104a5db21839fa79d7277b2447e323f8edc4edd1bcb7115962314546c12d7435f2a1ed41c7044fba0dae7c515b00ae65d03d091e883a8ef5a76d983ff012fc8b679b1e190f21401be2355981691392b3b029a44481dd3c326f964f1", 0x96, r1}, 0x68)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000002c0)=<r3=>0x0)
prlimit64(r3, 0x7, &(0x7f0000000300)={0x9, 0x6}, &(0x7f0000000340))
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xd)
renameat2(r1, &(0x7f0000000380)='./file0\x00', r1, &(0x7f00000003c0)='./file0\x00', 0x1)
ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f0000000400)={0x9, <r4=>r0, 'id0\x00'})
read$FUSE(r4, &(0x7f0000000500)={0x2020, 0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
stat(&(0x7f0000002540)='./file0\x00', &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002600)={0x0, <r8=>0x0}, &(0x7f0000002640)=0xc)
mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x4000, &(0x7f0000002680)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}, {@allow_other}], [{@fowner_eq={'fowner', 0x3d, r8}}, {@hash}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x33, 0x34, 0x30, 0x65, 0x34, 0x30, 0x37], 0x2d, [0x32, 0x36, 0x34], 0x2d, [0x31, 0x33, 0x37, 0x66], 0x2d, [0x32, 0x36, 0x66, 0x64], 0x2d, [0x31, 0x32, 0x61, 0x64, 0x34, 0x65, 0x39, 0x33]}}}, {@hash}]}})
map_shadow_stack(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0)
mmap$qrtrtun(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x100010, r1, 0x0)
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004)
ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, 0xfffffffffffffffc)
getrlimit(0x9, &(0x7f00000027c0))
r9 = syz_open_dev$usbfs(&(0x7f0000002800), 0x7, 0x418200)
write(r9, &(0x7f0000002840)="7f5aa80f040b7db5df96491ec62fc3ac5825d9efd23a183b5422d0d8674e8a486d12b5d5952b6c305cde387e8c7acfb204b8e13de98f753430d32a16cf80a6a252c16cd93434607a89aab2942737fffd29cc41141289fd193cd8c9faf66603961f885a87ee67f97c6f3f0723b300d822b5977797dea613ed94a2fa2de7fd1a2b0349c07ecf88e2b0a222c5e6324b853d362788b3c0490ab4b017940837142c4790d45b7085e8b8fe54c567dabb27006d9883e6b763", 0xb5)
r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002900), 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002940)={0x0, 0x0, <r11=>0x0}, &(0x7f0000002980)=0xc)
write$FUSE_STATX(r10, &(0x7f00000029c0)={0x130, 0x0, r5, {0x7, 0x9, 0x0, '\x00', {0x4, 0x8, 0x401d, 0x3, r6, r11, 0x2000, '\x00', 0x4, 0x6, 0xc, 0x17452aa1, {0x1000, 0x1}, {0xfffffffffffffff8, 0x66a9}, {0xffffffffffffffff, 0x5}, {0x100000001, 0x358}, 0xb0b0, 0x8000000, 0x7, 0x3}}}, 0x130)
getsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000002b00)={@loopback, @empty, @broadcast}, &(0x7f0000002b40)=0xc)
ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000002b80)={'custom1\x00'})
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1)
mmap$KVM_VCPU(&(0x7f0000fef000/0x11000)=nil, 0x0, 0x6, 0x8010, 0xffffffffffffffff, 0x0)

492.675966ms ago: executing program 7 (id=2586):
socket$netlink(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x4)
socket(0x10, 0x803, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c00000024271d961c9290ac0b3f0fb46894c100d490c2fc8598789c1cbdba16111dd2d25525f464e7aa47635f8c0f6a7a671ece58936890b59a6b4326fbfa39552f23dc4119ee15aeac86f1c24cf8377585ced18c83153710dcb00ef3206cee35cde8e825b69416f4c6b3f02d971cfbd18ae4282339e0db", @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000600fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)

432.614426ms ago: executing program 2 (id=2587):
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @loopback}], 0x10)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000080)=0x5, 0x4)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x4000010)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="315516f7c954cb72289b74712106df90e85f8f116ef3005e0e09bd56dda3b945d0ae2a0a7743a75dbebe66ec1682da0c42c9016eacf6f5a77d71fa3130fd7778fdcee01365b2a270932f64fe112d29267f777b4d58d5339068f09c", 0x5b}, {&(0x7f0000000240)="1ee6e517c02c7ad57bcac9ccc7074c36f6f5d7b7d696f9a5713a0754dab841fa82f1b1ebbd89d653c0c8683421af342e2772a7152f3ce8f44fe4d5e42b73db2ed09811e505defaf8a8", 0x49}, {&(0x7f00000002c0)="2e96b78d169a6104e1581ca5ae95b010743e6d4ad858f17adae4857210bae1e42ad338f953d0450bf75cfd2e57e7446c735a024e8ad8fbbbb749e8ae810346ad1a7b476306580682f2392d686cfc9513c9ad7d9a0f569c9a79e01ba7064cb770e6e343", 0x63}], 0x3}, 0x4090)
mkdirat(0xffffffffffffff9c, &(0x7f0000006840)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000006880)='./proc\x00', &(0x7f00000068c0)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000006900)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000006940)='10', 0x2)
syz_open_dev$video(&(0x7f0000000040), 0x1, 0x2)

432.043939ms ago: executing program 2 (id=2588):
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
io_setup(0x8, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000200)={0x0, 0xfefd, 0x0, 0x1, 0x0, r0, 0x0}])

427.647869ms ago: executing program 7 (id=2589):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b00001400"], 0x6c}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0)

308.673446ms ago: executing program 7 (id=2590):
r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000740)='cpu.stat\x00', 0x275a, 0x0)
read$FUSE(r1, &(0x7f0000001000)={0x2020}, 0x2020)
mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='sysfs\x00', &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r1, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000e3feffff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa101000000010007010000f8ffffffb702000005000000b70300000000000085000000b000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_open_dev$sg(&(0x7f00000007c0), 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
writev(r4, &(0x7f0000000840)=[{&(0x7f0000000880)="aefdda9d240300005a90f57f07703aeff0f657bbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f00000008c0)="a51d484e242000000000f7c8aff96b2fc08bfcd111602232e4611d7d6d9c5e86504a6d5e02029b003632db", 0x2b}], 0x2)
pwrite64(r2, &(0x7f0000000500)="f0000000", 0x4, 0x10)
pwrite64(r2, &(0x7f0000000600)="0200", 0x2, 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$FBIOGET_VSCREENINFO(r6, 0x4600, &(0x7f0000000140))
write(r5, &(0x7f0000000800)='1', 0x1)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r7, &(0x7f0000000a00)='1', 0x1)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003040)=ANY=[@ANYBLOB="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"], 0x6c}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="6800000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000040006"], 0x68}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_sys/bus/pci/devices/0000:00:01.0/resource\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000940)={0x1, &(0x7f0000000980)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000009c0)={0x1, &(0x7f0000000a40)=[{0x6, 0x9, 0x0, 0x7fffffff}]})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
socket(0xa, 0x5, 0x0)

229.519558ms ago: executing program 6 (id=2591):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000054, &(0x7f00000002c0)={0xa, 0x4f26, 0x8001, @dev={0xfe, 0x80, '\x00', 0x2c}, 0xfffffefd}, 0x1c)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r3, 0xae80, 0x400000000000000)

229.29703ms ago: executing program 2 (id=2592):
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x400008001fb, 0x101101)
r1 = syz_ublk_setup_io_uring(0x4889, &(0x7f0000000080)={0x0, 0x3586, 0x44822, 0x0, 0x2da}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001440)={0x1d, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000300)=""/192, 0xc0}, {&(0x7f00000003c0)=""/4096, 0x1000}], &(0x7f0000001400)=[0xffff, 0x80], 0x2}, 0x20)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xfffffff6, 0x0, &(0x7f00000002c0)={0x2, 0xc, 0x10, 0x6}, 0x8, 0x66b, 0x8, 0x0, 0x10000, 0x6, 0x0})
open(&(0x7f0000000040)='./file0\x00', 0x200041, 0x149)

141.248368ms ago: executing program 1 (id=2593):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/fs/ksmbd/server\x00', 0x0, 0x0)
read(r0, &(0x7f0000000540)=""/4096, 0x1000)
mkdir(&(0x7f0000000440)='./file0\x00', 0x88)
pipe2$9p(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x800)
r3 = dup(r2)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380), 0x4, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_client}]}})

302.656µs ago: executing program 2 (id=2594):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0xffff000000000000)

0s ago: executing program 6 (id=2595):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001})
r1 = socket(0x2c, 0x2, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r7 = add_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000740)={'syz', 0x2}, &(0x7f0000000900)="a22aed9399d0ef1d4541f51de0030d42e23abbec5cacc071996ce95944db1a4b50f642409f1fa5c5cc8eac3c3d306cbbd75f1af72ddfc07a02072fa7becb032b5bf7cfb8ed68b23285035f635042d8846a12673753ce64c8fffaa9c7027a4720aa804a12b3faf3c94aa5983dfb2866bf496bd670a2fbdf36f03c1b58ec155287a1972110429fcdbbb5a7c53e1b027fba218ad232f65a6f71b8a809fceda9f90567575580d93987e31ab5ee5d092e113fff46561f0c9c01282bd5353c6a771cd259be5f50c09271baba14", 0xca, 0xfffffffffffffff9)
r8 = add_key$keyring(&(0x7f0000000700), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, r7)
keyctl$unlink(0x9, r8, r8)
close(r6)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', <r9=>0x0})
r10 = socket$unix(0x1, 0x1, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)={0x14, 0x3d, 0x301, 0x70bd2c, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x44950}, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xe, 0x9}, {0x2, 0xc}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x3018}, {0x8, 0xb, 0x56}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
lseek(r5, 0x1, 0x0)
r13 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="07000000000000f0ff00000000000000000000009cfff41ebd40d48d989ebd84d850c92243661d4cfa09251fd69fd402b1e1b99250f4bfce640553f954903ad487a35094c85d4a240b000000b6145cd67856e1b6cdd554632cdcd86cfc540ac83f18f59a8f755ae043604d5b6fc8b7f8c7732bcc8ac58afa55045c3ebebd61c9e3a4cc0559ec6a9c1e1c3707a9f29ae02486425ee3086b13af524a4ce9646cbad660eff5ed1c737f37422c3f549ad687e5d2ee7dcdbd6487048114e079d7c057cc6777d1fe379ea0bade66596335069f9cf1e58dac6e7056d146cd", @ANYRES32=r9, @ANYRES32=r13, @ANYBLOB="01000000000000000500"/28], 0x50)
ioctl$KVM_IOEVENTFD(r13, 0x4040ae79, &(0x7f00000006c0)={0xfffffffffffffffd, 0x0, 0x3, r13, 0x3})
fcntl$dupfd(r14, 0x0, r0)
sendto$inet(r13, &(0x7f00000004c0)="f7fd51e64e7f08eb67ebc4e0e66aaa49e0ce67a308fa06fe0a521a05b2c121221c8fe0c8353170a0393cab01a37c1e9e0eacceb6dd3f4454227423bb2c117f597c2880a865e09dc72d70068e0024499cf9fc40259df171d0a46549fd28c81f10819688b86a427ff04be55e59bcd0c47755474aa9324c7480548d482ea9b537837c583f66e7006d01b437a306b5cc49fa193073e5c76817fbd331ad88b6fad188b26c4b6aa5e292d716954d5846cfd6160ee7779776c0285d98ae7b799062c40bc6058a9076fc02fc502efb712861c069ba501d150b135e02e4bcf8", 0xdb, 0x800, &(0x7f00000005c0)={0x2, 0x4e22, @loopback}, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'bond0\x00'})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)

kernel console output (not intermixed with test programs):

66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  313.235721][T13892] RSP: 002b:00007f6bda729028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[  313.235732][T13892] RAX: ffffffffffffffda RBX: 00007f6bd9a25fa0 RCX: 00007f6bd979f559
[  313.235739][T13892] RDX: ffffffffffffff9c RSI: 0000200000000a00 RDI: ffffffffffffff9c
[  313.235746][T13892] RBP: 00007f6bda729090 R08: 0000000000000000 R09: 0000000000000000
[  313.235753][T13892] R10: 0000200000000a40 R11: 0000000000000246 R12: 0000000000000002
[  313.235759][T13892] R13: 00007f6bd9a26038 R14: 00007f6bd9a25fa0 R15: 00007ffefddce418
[  313.235774][T13892]  </TASK>
[  313.235812][T13892] ERROR: Out of memory at tomoyo_realpath_from_path.
[  313.516972][T13908] netlink: 'syz.7.2361': attribute type 10 has an invalid length.
[  313.516987][T13908] netlink: 55 bytes leftover after parsing attributes in process `syz.7.2361'.
[  313.594767][T13913] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2362'.
[  313.707116][T13920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2364'.
[  313.819945][T13930] netlink: 'syz.1.2367': attribute type 11 has an invalid length.
[  313.819965][T13930] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2367'.
[  314.195180][T13939] netlink: 'syz.7.2371': attribute type 10 has an invalid length.
[  314.195195][T13939] netlink: 55 bytes leftover after parsing attributes in process `syz.7.2371'.
[  314.396007][T13950] FAULT_INJECTION: forcing a failure.
[  314.396007][T13950] name failslab, interval 1, probability 0, space 0, times 0
[  314.396029][T13950] CPU: 3 UID: 0 PID: 13950 Comm: syz.7.2376 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  314.396047][T13950] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  314.396057][T13950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  314.396063][T13950] Call Trace:
[  314.396068][T13950]  <TASK>
[  314.396073][T13950]  dump_stack_lvl+0x100/0x190
[  314.396094][T13950]  should_fail_ex.cold+0x5/0xa
[  314.396111][T13950]  should_failslab+0xc2/0x120
[  314.396128][T13950]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[  314.396143][T13950]  ? selinux_socket_create+0xe7/0x590
[  314.396156][T13950]  ? sock_alloc_inode+0x26/0x2c0
[  314.396172][T13950]  ? __pfx_sock_alloc_inode+0x10/0x10
[  314.396186][T13950]  sock_alloc_inode+0x26/0x2c0
[  314.396199][T13950]  ? __pfx_sock_alloc_inode+0x10/0x10
[  314.396212][T13950]  alloc_inode+0x68/0x250
[  314.396225][T13950]  sock_alloc+0x42/0x240
[  314.396239][T13950]  __sock_create+0xc2/0x860
[  314.396257][T13950]  __sys_socket+0x14d/0x260
[  314.396273][T13950]  ? __pfx___sys_socket+0x10/0x10
[  314.396293][T13950]  __x64_sys_socket+0x72/0xb0
[  314.396307][T13950]  ? lockdep_hardirqs_on+0x7d/0x110
[  314.396325][T13950]  do_syscall_64+0x123/0x790
[  314.396337][T13950]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.396349][T13950] RIP: 0033:0x7f6bd979f559
[  314.396358][T13950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  314.396369][T13950] RSP: 002b:00007f6bda729028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  314.396380][T13950] RAX: ffffffffffffffda RBX: 00007f6bd9a25fa0 RCX: 00007f6bd979f559
[  314.396387][T13950] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010
[  314.396394][T13950] RBP: 00007f6bd9836b20 R08: 0000000000000000 R09: 0000000000000000
[  314.396401][T13950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  314.396409][T13950] R13: 00007f6bd9a26038 R14: 00007f6bd9a25fa0 R15: 00007ffefddce418
[  314.396424][T13950]  </TASK>
[  314.396430][T13950] socket: no more sockets
[  314.645571][   T42] audit: type=1400 audit(3586355749.206:23392): avc:  denied  { connect } for  pid=13957 comm="syz.1.2375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  314.744297][T13962] FAULT_INJECTION: forcing a failure.
[  314.744297][T13962] name failslab, interval 1, probability 0, space 0, times 0
[  314.744319][T13962] CPU: 0 UID: 0 PID: 13962 Comm: syz.1.2380 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  314.744336][T13962] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  314.744340][T13962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  314.744347][T13962] Call Trace:
[  314.744352][T13962]  <TASK>
[  314.744356][T13962]  dump_stack_lvl+0x100/0x190
[  314.744376][T13962]  should_fail_ex.cold+0x5/0xa
[  314.744393][T13962]  should_failslab+0xc2/0x120
[  314.744409][T13962]  __kmalloc_noprof+0xfc/0x840
[  314.744422][T13962]  ? snd_pcm_plugin_build+0x91/0x680
[  314.744441][T13962]  snd_pcm_plugin_build+0x91/0x680
[  314.744458][T13962]  snd_pcm_plugin_build_mulaw+0x280/0x760
[  314.744474][T13962]  ? __pfx_mulaw_decode+0x10/0x10
[  314.744490][T13962]  ? __pfx_snd_pcm_plugin_build_mulaw+0x10/0x10
[  314.744508][T13962]  ? snd_pcm_hw_params+0x241/0x1cd0
[  314.744527][T13962]  snd_pcm_plug_format_plugins+0xbdd/0x1430
[  314.744544][T13962]  ? __pfx_snd_pcm_plug_format_plugins+0x10/0x10
[  314.744562][T13962]  ? lockdep_hardirqs_on+0x7d/0x110
[  314.744584][T13962]  snd_pcm_oss_change_params_locked+0x2e3c/0x39f0
[  314.744605][T13962]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  314.744624][T13962]  ? __pfx___mutex_lock+0x10/0x10
[  314.744640][T13962]  ? get_pid_task+0xfc/0x250
[  314.744656][T13962]  ? get_pid_task+0xfc/0x250
[  314.744673][T13962]  snd_pcm_oss_make_ready_locked+0xb7/0x130
[  314.744688][T13962]  snd_pcm_oss_write+0x4bb/0xa90
[  314.744703][T13962]  ? bpf_lsm_file_permission+0x9/0x10
[  314.744717][T13962]  ? security_file_permission+0x76/0x210
[  314.744738][T13962]  vfs_write+0x2aa/0x1050
[  314.744767][T13962]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[  314.744782][T13962]  ? lock_acquire+0x1d1/0x380
[  314.744795][T13962]  ? __fget_files+0x34/0x3d0
[  314.744810][T13962]  ? __pfx_vfs_write+0x10/0x10
[  314.744822][T13962]  ? find_held_lock+0x2b/0x80
[  314.744832][T13962]  ? __fget_files+0x215/0x3d0
[  314.744847][T13962]  ? __fget_files+0x215/0x3d0
[  314.744865][T13962]  ? __fget_files+0x21f/0x3d0
[  314.744885][T13962]  ksys_write+0x12a/0x250
[  314.744898][T13962]  ? __pfx_ksys_write+0x10/0x10
[  314.744916][T13962]  do_syscall_64+0x123/0x790
[  314.744928][T13962]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.744940][T13962] RIP: 0033:0x7feaf9b9f559
[  314.744949][T13962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  314.744960][T13962] RSP: 002b:00007feafa97e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  314.744971][T13962] RAX: ffffffffffffffda RBX: 00007feaf9e26090 RCX: 00007feaf9b9f559
[  314.744978][T13962] RDX: 0000000000004000 RSI: 0000200000001d00 RDI: 0000000000000003
[  314.744984][T13962] RBP: 00007feafa97e090 R08: 0000000000000000 R09: 0000000000000000
[  314.744991][T13962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  314.744997][T13962] R13: 00007feaf9e26128 R14: 00007feaf9e26090 R15: 00007fff3cf9b0a8
[  314.745011][T13962]  </TASK>
[  315.513379][T13964] macvtap0: entered allmulticast mode
[  315.513403][T13964] bond0: entered allmulticast mode
[  315.513416][T13964] bond_slave_0: entered allmulticast mode
[  315.513432][T13964] bond_slave_1: entered allmulticast mode
[  315.513448][T13964] batadv0: entered allmulticast mode
[  315.513719][T13964] bond_slave_0: entered promiscuous mode
[  315.513752][T13964] bond_slave_1: entered promiscuous mode
[  315.513789][T13964] batadv0: entered promiscuous mode
[  315.515139][T13964] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  315.529747][T13964] bond0: left allmulticast mode
[  315.529769][T13964] bond_slave_0: left allmulticast mode
[  315.529785][T13964] bond_slave_1: left allmulticast mode
[  315.529798][T13964] batadv0: left allmulticast mode
[  315.617706][T13966] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  315.634493][T10216] bond_slave_0: left promiscuous mode
[  315.634519][T10216] bond_slave_1: left promiscuous mode
[  315.634543][T10216] batadv0: left promiscuous mode
[  315.743557][T13971] netlink: 'syz.1.2383': attribute type 10 has an invalid length.
[  315.743572][T13971] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2383'.
[  316.800332][T13923] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  317.164973][   T42] audit: type=1400 audit(3586355751.695:23393): avc:  denied  { read write } for  pid=13997 comm="syz.7.2392" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  317.168855][   T42] audit: type=1400 audit(3586355751.704:23394): avc:  denied  { open } for  pid=13997 comm="syz.7.2392" path="/69/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  317.297502][T14003] netlink: 'syz.7.2394': attribute type 10 has an invalid length.
[  317.297517][T14003] netlink: 55 bytes leftover after parsing attributes in process `syz.7.2394'.
[  317.462157][ T1445] ieee802154 phy0 wpan0: encryption failed: -22
[  317.462187][ T1445] ieee802154 phy1 wpan1: encryption failed: -22
[  317.559366][T14016] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9)
[  317.633789][T14015] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.753599][T14015] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.869540][T14015] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.876230][T14019] FAULT_INJECTION: forcing a failure.
[  317.876230][T14019] name failslab, interval 1, probability 0, space 0, times 0
[  317.876251][T14019] CPU: 1 UID: 0 PID: 14019 Comm: syz.2.2401 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  317.876267][T14019] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  317.876273][T14019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  317.876279][T14019] Call Trace:
[  317.876284][T14019]  <TASK>
[  317.876288][T14019]  dump_stack_lvl+0x100/0x190
[  317.876308][T14019]  should_fail_ex.cold+0x5/0xa
[  317.876326][T14019]  should_failslab+0xc2/0x120
[  317.876341][T14019]  __kmalloc_noprof+0xfc/0x840
[  317.876353][T14019]  ? rcu_is_watching+0x13/0xc0
[  317.876364][T14019]  ? tomoyo_realpath_from_path+0xb6/0x690
[  317.876380][T14019]  tomoyo_realpath_from_path+0xb6/0x690
[  317.876394][T14019]  tomoyo_path_number_perm+0x23c/0x580
[  317.876409][T14019]  ? tomoyo_path_number_perm+0x22e/0x580
[  317.876426][T14019]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  317.876447][T14019]  ? __lock_acquire+0x5c0/0x1f40
[  317.876468][T14019]  ? __fget_files+0x34/0x3d0
[  317.876484][T14019]  ? find_held_lock+0x2b/0x80
[  317.876494][T14019]  ? hook_file_ioctl_common+0x140/0x440
[  317.876510][T14019]  ? __fget_files+0x21f/0x3d0
[  317.876528][T14019]  security_file_ioctl+0xd3/0x230
[  317.876545][T14019]  __x64_sys_ioctl+0xb7/0x210
[  317.876560][T14019]  do_syscall_64+0x123/0x790
[  317.876572][T14019]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.876584][T14019] RIP: 0033:0x7fc89a19f559
[  317.876593][T14019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  317.876604][T14019] RSP: 002b:00007fc89b066028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  317.876614][T14019] RAX: ffffffffffffffda RBX: 00007fc89a425fa0 RCX: 00007fc89a19f559
[  317.876621][T14019] RDX: 0000200000000340 RSI: 0000000000002285 RDI: 0000000000000003
[  317.876628][T14019] RBP: 00007fc89b066090 R08: 0000000000000000 R09: 0000000000000000
[  317.876634][T14019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  317.876640][T14019] R13: 00007fc89a426038 R14: 00007fc89a425fa0 R15: 00007ffccdd0e1f8
[  317.876655][T14019]  </TASK>
[  317.876660][T14019] ERROR: Out of memory at tomoyo_realpath_from_path.
[  317.977748][T14022] netlink: 'syz.2.2403': attribute type 10 has an invalid length.
[  317.977761][T14022] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2403'.
[  318.060837][T14026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2402'.
[  318.090811][T14015] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.523326][   T42] audit: type=1400 audit(3586355753.049:23395): avc:  denied  { append } for  pid=14044 comm="syz.1.2411" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  318.560107][T14051] jffs2: notice: (14051) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  318.562278][T14051] jffs2 filesystem being mounted at /79/file0 supports timestamps until 2106-02-07 (0xffffffff)
[  318.563481][ T5797] Bluetooth: hci2: unexpected subevent 0x10 length: 5 > 2
[  318.607853][T14053] netlink: 'syz.1.2412': attribute type 10 has an invalid length.
[  318.607867][T14053] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2412'.
[  319.359734][   T42] audit: type=1326 audit(3586355753.871:23396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14061 comm="syz.7.2416" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6bd979f559 code=0x0
[  319.389552][T14064] netlink: 'syz.2.2417': attribute type 19 has an invalid length.
[  319.467054][   T42] audit: type=1400 audit(3586355753.980:23397): avc:  denied  { getopt } for  pid=14061 comm="syz.7.2416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  319.519186][T14074] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  319.545589][   T42] audit: type=1400 audit(3586355754.059:23398): avc:  denied  { write } for  pid=14070 comm="syz.1.2420" name="functions" dev="configfs" ino=63017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  319.552968][   T42] audit: type=1400 audit(3586355754.059:23399): avc:  denied  { write } for  pid=14070 comm="syz.1.2420" name="c.1" dev="configfs" ino=63022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  319.552998][   T42] audit: type=1400 audit(3586355754.059:23400): avc:  denied  { write } for  pid=14070 comm="syz.1.2420" name="c.1" dev="configfs" ino=63022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  319.558384][T14075] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error!
[  319.558608][T14075] udc dummy_udc.0: failed to start g1: -19
[  319.560306][T14075] UDC core: g1: couldn't find an available UDC or it's busy
[  319.610537][T14079] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9)
[  319.649650][T14081] FAULT_INJECTION: forcing a failure.
[  319.649650][T14081] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  319.649686][T14081] CPU: 0 UID: 0 PID: 14081 Comm: syz.2.2424 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  319.649702][T14081] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  319.649708][T14081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  319.649715][T14081] Call Trace:
[  319.649729][T14081]  <TASK>
[  319.649735][T14081]  dump_stack_lvl+0x100/0x190
[  319.649770][T14081]  should_fail_ex.cold+0x5/0xa
[  319.649810][T14081]  strncpy_from_user+0x3b/0x2d0
[  319.649832][T14081]  do_getname+0x78/0x390
[  319.649847][T14081]  do_sys_openat2+0xc3/0x1d0
[  319.649859][T14081]  ? __pfx_do_sys_openat2+0x10/0x10
[  319.649877][T14081]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  319.649896][T14081]  __x64_sys_openat+0x12d/0x210
[  319.649909][T14081]  ? __pfx___x64_sys_openat+0x10/0x10
[  319.649925][T14081]  do_syscall_64+0x123/0x790
[  319.649943][T14081]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.649955][T14081] RIP: 0033:0x7fc89a15fd8e
[  319.649964][T14081] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  319.649975][T14081] RSP: 002b:00007fc89b065b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  319.649996][T14081] RAX: ffffffffffffffda RBX: 00007fc89b0666c0 RCX: 00007fc89a15fd8e
[  319.650003][T14081] RDX: 0000000000000002 RSI: 00007fc89b065c00 RDI: ffffffffffffff9c
[  319.650010][T14081] RBP: 00007fc89b065c00 R08: 0000000000000000 R09: 0000000000000000
[  319.650016][T14081] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  319.650023][T14081] R13: 00007fc89a426038 R14: 00007fc89a425fa0 R15: 00007ffccdd0e1f8
[  319.650038][T14081]  </TASK>
[  319.769927][   T24] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  319.810689][T14091] netlink: 'syz.1.2427': attribute type 10 has an invalid length.
[  319.810704][T14091] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2427'.
[  320.029312][   T24] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  320.544008][   T24] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  320.671806][T14109] IPv6: addrconf: prefix option has invalid lifetime
[  320.855030][T14085] ceph: No mds server is up or the cluster is laggy
[  321.020140][T14121] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  321.035044][T14121] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  321.882185][T14131] netlink: 'syz.1.2443': attribute type 10 has an invalid length.
[  321.882200][T14131] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2443'.
[  322.064799][   T42] audit: type=1400 audit(3586355756.546:23401): avc:  denied  { view } for  pid=14136 comm="syz.7.2446" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  322.080632][ T5797] Bluetooth: hci2: hcon ffff8880393e0000 sent 1 < count 6
[  322.669850][T14139] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  322.669862][T14139] overlayfs: missing 'lowerdir'
[  322.823385][T14146] input: syz0 as /devices/virtual/input/input37
[  323.127547][   T67] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  323.144931][   T67] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  323.145976][   T67] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  323.157867][   T67] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  323.165575][   T67] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  323.290700][T14166] netlink: 'syz.7.2455': attribute type 10 has an invalid length.
[  323.290715][T14166] netlink: 55 bytes leftover after parsing attributes in process `syz.7.2455'.
[  323.294308][T14166] FAULT_INJECTION: forcing a failure.
[  323.294308][T14166] name failslab, interval 1, probability 0, space 0, times 0
[  323.294329][T14166] CPU: 2 UID: 0 PID: 14166 Comm: syz.7.2455 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  323.294346][T14166] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  323.294351][T14166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  323.294358][T14166] Call Trace:
[  323.294363][T14166]  <TASK>
[  323.294368][T14166]  dump_stack_lvl+0x100/0x190
[  323.294387][T14166]  should_fail_ex.cold+0x5/0xa
[  323.294405][T14166]  should_failslab+0xc2/0x120
[  323.294422][T14166]  __kvmalloc_node_noprof+0x113/0x9b0
[  323.294436][T14166]  ? lockdep_init_map_type+0x5c/0x250
[  323.294451][T14166]  ? v4l2_ctrl_handler_init_class+0x201/0x350
[  323.294487][T14166]  v4l2_ctrl_handler_init_class+0x201/0x350
[  323.294506][T14166]  ? mutex_init_lockdep+0xf1/0x120
[  323.294522][T14166]  vicodec_open+0x18b/0xf70
[  323.294536][T14166]  ? kobject_get_unless_zero+0x156/0x200
[  323.294554][T14166]  v4l2_open+0x1d2/0x490
[  323.294565][T14166]  ? __pfx_v4l2_open+0x10/0x10
[  323.294576][T14166]  chrdev_open+0x234/0x6a0
[  323.294592][T14166]  ? __pfx_chrdev_open+0x10/0x10
[  323.294608][T14166]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  323.294624][T14166]  do_dentry_open+0x674/0x1470
[  323.294637][T14166]  ? __pfx_chrdev_open+0x10/0x10
[  323.294655][T14166]  vfs_open_consume+0xcc/0x460
[  323.294675][T14166]  path_openat+0x1547/0x23f0
[  323.294695][T14166]  ? __pfx_path_openat+0x10/0x10
[  323.294715][T14166]  do_file_open+0x20e/0x430
[  323.294732][T14166]  ? __pfx_do_file_open+0x10/0x10
[  323.294757][T14166]  ? _raw_spin_unlock+0x28/0x50
[  323.294772][T14166]  ? alloc_fd+0x471/0x7a0
[  323.294792][T14166]  do_sys_openat2+0x163/0x1d0
[  323.294802][T14166]  ? __pfx_do_sys_openat2+0x10/0x10
[  323.294818][T14166]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  323.294836][T14166]  __x64_sys_openat+0x12d/0x210
[  323.294847][T14166]  ? __pfx___x64_sys_openat+0x10/0x10
[  323.294863][T14166]  do_syscall_64+0x123/0x790
[  323.294875][T14166]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.294888][T14166] RIP: 0033:0x7f6bd975fd8e
[  323.294897][T14166] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  323.294908][T14166] RSP: 002b:00007f6bda728b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  323.294920][T14166] RAX: ffffffffffffffda RBX: 00007f6bda7296c0 RCX: 00007f6bd975fd8e
[  323.294927][T14166] RDX: 0000000000000002 RSI: 00007f6bda728c00 RDI: ffffffffffffff9c
[  323.294934][T14166] RBP: 00007f6bda728c00 R08: 0000000000000000 R09: 0000000000000000
[  323.294941][T14166] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  323.294948][T14166] R13: 00007f6bd9a26038 R14: 00007f6bd9a25fa0 R15: 00007ffefddce418
[  323.294963][T14166]  </TASK>
[  323.369901][T14161] rxe_eth0 speed is unknown, defaulting to 1000
[  323.532991][ T9382] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.747966][ T9382] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.791724][T14182] FAULT_INJECTION: forcing a failure.
[  323.791724][T14182] name failslab, interval 1, probability 0, space 0, times 0
[  323.791758][T14182] CPU: 2 UID: 0 PID: 14182 Comm: syz.1.2458 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  323.791785][T14182] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  323.791792][T14182] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  323.791804][T14182] Call Trace:
[  323.791811][T14182]  <TASK>
[  323.791819][T14182]  dump_stack_lvl+0x100/0x190
[  323.791849][T14182]  should_fail_ex.cold+0x5/0xa
[  323.791875][T14182]  should_failslab+0xc2/0x120
[  323.791898][T14182]  __kvmalloc_node_noprof+0x113/0x9b0
[  323.791948][T14182]  ? stack_trace_save+0x8e/0xc0
[  323.791972][T14182]  ? v4l2_ctrl_new+0x4a6/0x23a0
[  323.791995][T14182]  v4l2_ctrl_new+0x4a6/0x23a0
[  323.792017][T14182]  ? entry_SYSCALL_64_after_hwframe+0x47/0x7f
[  323.792037][T14182]  ? __pfx_v4l2_ctrl_new+0x10/0x10
[  323.792067][T14182]  v4l2_ctrl_new_std+0x1bb/0x290
[  323.792093][T14182]  ? __pfx_v4l2_ctrl_new_std+0x10/0x10
[  323.792110][T14182]  ? rcu_is_watching+0x13/0xc0
[  323.792131][T14182]  ? __kvmalloc_node_noprof+0x377/0x9b0
[  323.792158][T14182]  ? media_request_object_init+0x105/0x180
[  323.792187][T14182]  vicodec_open+0x1b2/0xf70
[  323.792206][T14182]  ? kobject_get_unless_zero+0x156/0x200
[  323.792233][T14182]  v4l2_open+0x1d2/0x490
[  323.792251][T14182]  ? __pfx_v4l2_open+0x10/0x10
[  323.792268][T14182]  chrdev_open+0x234/0x6a0
[  323.792293][T14182]  ? __pfx_chrdev_open+0x10/0x10
[  323.792317][T14182]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  323.792342][T14182]  do_dentry_open+0x674/0x1470
[  323.792363][T14182]  ? __pfx_chrdev_open+0x10/0x10
[  323.792390][T14182]  vfs_open_consume+0xcc/0x460
[  323.792418][T14182]  path_openat+0x1547/0x23f0
[  323.792447][T14182]  ? __pfx_path_openat+0x10/0x10
[  323.792477][T14182]  do_file_open+0x20e/0x430
[  323.792503][T14182]  ? __pfx_do_file_open+0x10/0x10
[  323.792551][T14182]  ? _raw_spin_unlock+0x28/0x50
[  323.792576][T14182]  ? alloc_fd+0x471/0x7a0
[  323.792607][T14182]  do_sys_openat2+0x163/0x1d0
[  323.792625][T14182]  ? __pfx_do_sys_openat2+0x10/0x10
[  323.792648][T14182]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  323.792676][T14182]  __x64_sys_openat+0x12d/0x210
[  323.792694][T14182]  ? __pfx___x64_sys_openat+0x10/0x10
[  323.792720][T14182]  do_syscall_64+0x123/0x790
[  323.792738][T14182]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.792756][T14182] RIP: 0033:0x7feaf9b5fd8e
[  323.792771][T14182] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  323.792787][T14182] RSP: 002b:00007feafa99eb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  323.792805][T14182] RAX: ffffffffffffffda RBX: 00007feafa99f6c0 RCX: 00007feaf9b5fd8e
[  323.792818][T14182] RDX: 0000000000000002 RSI: 00007feafa99ec00 RDI: ffffffffffffff9c
[  323.792829][T14182] RBP: 00007feafa99ec00 R08: 0000000000000000 R09: 0000000000000000
[  323.792840][T14182] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  323.792850][T14182] R13: 00007feaf9e26038 R14: 00007feaf9e25fa0 R15: 00007fff3cf9b0a8
[  323.792874][T14182]  </TASK>
[  324.044056][ T9382] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.067482][T14161] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.067566][T14161] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.067657][T14161] bridge_slave_0: entered allmulticast mode
[  324.069542][T14161] bridge_slave_0: entered promiscuous mode
[  324.075116][T14161] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.075307][T14161] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.075367][T14161] bridge_slave_1: entered allmulticast mode
[  324.078149][T14161] bridge_slave_1: entered promiscuous mode
[  324.123184][   T42] audit: type=1400 audit(3586355758.600:23402): avc:  denied  { shutdown } for  pid=14188 comm="syz.1.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  324.129908][T14161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  324.139389][T14161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  324.197144][ T9382] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.214110][T14161] team0: Port device team_slave_0 added
[  324.215582][T14161] team0: Port device team_slave_1 added
[  324.228550][T14161] batman_adv: batadv0: Adding interface: batadv_slave_0
[  324.228645][T14161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  324.228665][T14161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  324.229587][T14161] batman_adv: batadv0: Adding interface: batadv_slave_1
[  324.229597][T14161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  324.229615][T14161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  324.329941][T14212] netlink: 'syz.1.2463': attribute type 10 has an invalid length.
[  324.329962][T14212] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2463'.
[  324.389179][T14161] hsr_slave_0: entered promiscuous mode
[  324.394339][T14161] hsr_slave_1: entered promiscuous mode
[  324.394662][T14161] debugfs: 'hsr0' already exists in 'hsr'
[  324.394674][T14161] Cannot create hsr debugfs directory
[  324.408827][T14212] FAULT_INJECTION: forcing a failure.
[  324.408827][T14212] name failslab, interval 1, probability 0, space 0, times 0
[  324.408848][T14212] CPU: 0 UID: 0 PID: 14212 Comm: syz.1.2463 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  324.408866][T14212] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  324.408871][T14212] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  324.408877][T14212] Call Trace:
[  324.408882][T14212]  <TASK>
[  324.408888][T14212]  dump_stack_lvl+0x100/0x190
[  324.408910][T14212]  should_fail_ex.cold+0x5/0xa
[  324.408928][T14212]  should_failslab+0xc2/0x120
[  324.408944][T14212]  __kvmalloc_node_noprof+0x113/0x9b0
[  324.408957][T14212]  ? lockdep_init_map_type+0x5c/0x250
[  324.408972][T14212]  ? v4l2_ctrl_handler_init_class+0x201/0x350
[  324.408993][T14212]  v4l2_ctrl_handler_init_class+0x201/0x350
[  324.409010][T14212]  ? mutex_init_lockdep+0xf1/0x120
[  324.409025][T14212]  vicodec_open+0x18b/0xf70
[  324.409038][T14212]  ? kobject_get_unless_zero+0x156/0x200
[  324.409056][T14212]  v4l2_open+0x1d2/0x490
[  324.409068][T14212]  ? __pfx_v4l2_open+0x10/0x10
[  324.409078][T14212]  chrdev_open+0x234/0x6a0
[  324.409094][T14212]  ? __pfx_chrdev_open+0x10/0x10
[  324.409110][T14212]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  324.409129][T14212]  do_dentry_open+0x674/0x1470
[  324.409143][T14212]  ? __pfx_chrdev_open+0x10/0x10
[  324.409160][T14212]  vfs_open_consume+0xcc/0x460
[  324.409179][T14212]  path_openat+0x1547/0x23f0
[  324.409197][T14212]  ? __pfx_path_openat+0x10/0x10
[  324.409217][T14212]  do_file_open+0x20e/0x430
[  324.409235][T14212]  ? __pfx_do_file_open+0x10/0x10
[  324.409260][T14212]  ? _raw_spin_unlock+0x28/0x50
[  324.409275][T14212]  ? alloc_fd+0x471/0x7a0
[  324.409296][T14212]  do_sys_openat2+0x163/0x1d0
[  324.409306][T14212]  ? __pfx_do_sys_openat2+0x10/0x10
[  324.409322][T14212]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  324.409341][T14212]  __x64_sys_openat+0x12d/0x210
[  324.409352][T14212]  ? __pfx___x64_sys_openat+0x10/0x10
[  324.409368][T14212]  do_syscall_64+0x123/0x790
[  324.409380][T14212]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.409392][T14212] RIP: 0033:0x7feaf9b5fd8e
[  324.409401][T14212] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  324.409412][T14212] RSP: 002b:00007feafa97db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  324.409424][T14212] RAX: ffffffffffffffda RBX: 00007feafa97e6c0 RCX: 00007feaf9b5fd8e
[  324.409431][T14212] RDX: 0000000000000002 RSI: 00007feafa97dc00 RDI: ffffffffffffff9c
[  324.409438][T14212] RBP: 00007feafa97dc00 R08: 0000000000000000 R09: 0000000000000000
[  324.409445][T14212] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  324.409452][T14212] R13: 00007feaf9e26128 R14: 00007feaf9e26090 R15: 00007fff3cf9b0a8
[  324.409467][T14212]  </TASK>
[  324.735602][T14217] md: could not open device unknown-block(0,0).
[  324.735660][T14217] md: error, md_import_device() returned -6
[  324.855622][ T9382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  324.879900][ T9382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  324.896999][ T9382] bond0 (unregistering): Released all slaves
[  324.926446][T14228] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2470'.
[  324.926485][T14228] nbd: must specify at least one socket
[  325.013304][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.014106][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.053339][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.067505][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.068061][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.068600][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.069040][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.069468][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.070663][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.071176][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.071598][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.073091][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.074297][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.083968][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.094300][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.094797][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.095299][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.095742][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.096434][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.096896][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.097321][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.097887][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.100552][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.101018][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.101675][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.102221][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.102771][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.103201][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.103704][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.104168][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.104603][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.105145][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.105583][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.106107][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.106540][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.106964][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.107475][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.107905][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.108412][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.111067][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.112152][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.112635][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.113344][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.113788][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.114310][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.114741][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.115280][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.115753][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.117701][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.118231][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.127416][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.127901][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.128372][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.130213][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.131838][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.132360][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.132831][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.134452][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.135479][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.138085][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.138745][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.139488][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.140014][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.140577][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.141119][T14232] qnx6: wrong signature (magic) in superblock #1.
[  325.173889][   T42] audit: type=1400 audit(3586355759.633:23403): avc:  denied  { read } for  pid=14239 comm="syz.1.2472" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  325.174097][   T42] audit: type=1400 audit(3586355759.633:23404): avc:  denied  { open } for  pid=14239 comm="syz.1.2472" path="/dev/loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  325.174598][   T42] audit: type=1400 audit(3586355759.633:23405): avc:  denied  { ioctl } for  pid=14239 comm="syz.1.2472" path="/dev/loop-control" dev="devtmpfs" ino=655 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  325.212523][ T5797] Bluetooth: hci1: command tx timeout
[  325.219596][ T5858] usb 12-1: new high-speed USB device number 5 using dummy_hcd
[  325.380965][ T5858] usb 12-1: New USB device found: idVendor=05e0, idProduct=0600, bcdDevice=1.00
[  325.381752][ T5858] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  325.381768][ T5858] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  325.390017][ T5858] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.390032][ T5858] usb 12-1: Product: syz
[  325.390039][ T5858] usb 12-1: Manufacturer: syz
[  325.390047][ T5858] usb 12-1: SerialNumber: syz
[  325.429927][ T5858] symbolserial 12-1:1.0: symbol converter detected
[  325.433296][ T5858] usb 12-1: symbol converter now attached to ttyUSB0
[  325.469518][T14254] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[  325.491997][T14252] bridge1: entered promiscuous mode
[  325.492012][T14252] bridge1: entered allmulticast mode
[  325.576479][ T9382] hsr_slave_0: left promiscuous mode
[  325.584537][ T9382] hsr_slave_1: left promiscuous mode
[  325.584979][ T9382] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  325.584991][ T9382] batman_adv: batadv0: Removing interface: batadv_slave_0
[  325.585550][ T9382] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  325.585560][ T9382] batman_adv: batadv0: Removing interface: batadv_slave_1
[  325.603748][ T9382] veth1_macvtap: left promiscuous mode
[  325.603770][ T9382] veth0_macvtap: left promiscuous mode
[  325.617765][T14258] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2478'.
[  325.617780][T14258] nbd: must specify at least one socket
[  325.636697][T14259] netlink: 'syz.2.2479': attribute type 10 has an invalid length.
[  325.636710][T14259] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2479'.
[  325.691843][T14262] FAULT_INJECTION: forcing a failure.
[  325.691843][T14262] name failslab, interval 1, probability 0, space 0, times 0
[  325.691877][T14262] CPU: 2 UID: 0 PID: 14262 Comm: syz.2.2479 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  325.691907][T14262] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  325.691941][T14262] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  325.691955][T14262] Call Trace:
[  325.691976][T14262]  <TASK>
[  325.691985][T14262]  dump_stack_lvl+0x100/0x190
[  325.692019][T14262]  should_fail_ex.cold+0x5/0xa
[  325.692050][T14262]  should_failslab+0xc2/0x120
[  325.692083][T14262]  __kvmalloc_node_noprof+0x113/0x9b0
[  325.692108][T14262]  ? stack_trace_save+0x8e/0xc0
[  325.692133][T14262]  ? v4l2_ctrl_new+0x4a6/0x23a0
[  325.692160][T14262]  v4l2_ctrl_new+0x4a6/0x23a0
[  325.692186][T14262]  ? entry_SYSCALL_64_after_hwframe+0x47/0x7f
[  325.692209][T14262]  ? __pfx_v4l2_ctrl_new+0x10/0x10
[  325.692242][T14262]  v4l2_ctrl_new_std+0x1bb/0x290
[  325.692270][T14262]  ? __pfx_v4l2_ctrl_new_std+0x10/0x10
[  325.692290][T14262]  ? rcu_is_watching+0x13/0xc0
[  325.692313][T14262]  ? __kvmalloc_node_noprof+0x377/0x9b0
[  325.692344][T14262]  ? media_request_object_init+0x105/0x180
[  325.692379][T14262]  vicodec_open+0x1b2/0xf70
[  325.692401][T14262]  ? kobject_get_unless_zero+0x156/0x200
[  325.692432][T14262]  v4l2_open+0x1d2/0x490
[  325.692452][T14262]  ? __pfx_v4l2_open+0x10/0x10
[  325.692470][T14262]  chrdev_open+0x234/0x6a0
[  325.692498][T14262]  ? __pfx_chrdev_open+0x10/0x10
[  325.692527][T14262]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  325.692555][T14262]  do_dentry_open+0x674/0x1470
[  325.692578][T14262]  ? __pfx_chrdev_open+0x10/0x10
[  325.692610][T14262]  vfs_open_consume+0xcc/0x460
[  325.692643][T14262]  path_openat+0x1547/0x23f0
[  325.692676][T14262]  ? __pfx_path_openat+0x10/0x10
[  325.692712][T14262]  do_file_open+0x20e/0x430
[  325.692742][T14262]  ? __pfx_do_file_open+0x10/0x10
[  325.692789][T14262]  ? _raw_spin_unlock+0x28/0x50
[  325.692815][T14262]  ? alloc_fd+0x471/0x7a0
[  325.692851][T14262]  do_sys_openat2+0x163/0x1d0
[  325.692870][T14262]  ? __pfx_do_sys_openat2+0x10/0x10
[  325.692897][T14262]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  325.692930][T14262]  __x64_sys_openat+0x12d/0x210
[  325.692949][T14262]  ? __pfx___x64_sys_openat+0x10/0x10
[  325.692979][T14262]  do_syscall_64+0x123/0x790
[  325.693000][T14262]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.693019][T14262] RIP: 0033:0x7fc89a15fd8e
[  325.693035][T14262] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  325.693054][T14262] RSP: 002b:00007fc89b044b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  325.693080][T14262] RAX: ffffffffffffffda RBX: 00007fc89b0456c0 RCX: 00007fc89a15fd8e
[  325.693095][T14262] RDX: 0000000000000002 RSI: 00007fc89b044c00 RDI: ffffffffffffff9c
[  325.693107][T14262] RBP: 00007fc89b044c00 R08: 0000000000000000 R09: 0000000000000000
[  325.693120][T14262] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  325.693132][T14262] R13: 00007fc89a426128 R14: 00007fc89a426090 R15: 00007ffccdd0e1f8
[  325.693160][T14262]  </TASK>
[  325.783414][ T9382] team0 (unregistering): Port device team_slave_1 removed
[  325.791077][ T9382] team0 (unregistering): Port device team_slave_0 removed
[  325.926106][T14161] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  325.939831][T14161] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  325.940934][T14161] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  325.961348][T14161] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  325.962247][T14161] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  325.971315][T14265] comedi comedi0: Minor 2208 is invalid!
[  325.979663][T14161] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  325.980763][T14161] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  325.992214][T14161] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  326.085922][T14161] 8021q: adding VLAN 0 to HW filter on device bond0
[  326.094212][T14161] 8021q: adding VLAN 0 to HW filter on device team0
[  326.103854][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.103944][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  326.104794][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  326.104835][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  326.230484][T14278] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2482'.
[  326.381107][T14161] 8021q: adding VLAN 0 to HW filter on device batadv0
[  326.535201][T14293] FAULT_INJECTION: forcing a failure.
[  326.535201][T14293] name failslab, interval 1, probability 0, space 0, times 0
[  326.535222][T14293] CPU: 2 UID: 0 PID: 14293 Comm: syz.1.2483 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  326.535238][T14293] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  326.535243][T14293] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  326.535249][T14293] Call Trace:
[  326.535254][T14293]  <TASK>
[  326.535258][T14293]  dump_stack_lvl+0x100/0x190
[  326.535278][T14293]  should_fail_ex.cold+0x5/0xa
[  326.535295][T14293]  should_failslab+0xc2/0x120
[  326.535311][T14293]  __kmalloc_noprof+0xfc/0x840
[  326.535323][T14293]  ? rcu_is_watching+0x13/0xc0
[  326.535334][T14293]  ? tomoyo_realpath_from_path+0xb6/0x690
[  326.535349][T14293]  tomoyo_realpath_from_path+0xb6/0x690
[  326.535363][T14293]  tomoyo_path_number_perm+0x23c/0x580
[  326.535378][T14293]  ? tomoyo_path_number_perm+0x22e/0x580
[  326.535395][T14293]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  326.535416][T14293]  ? __lock_acquire+0x5c0/0x1f40
[  326.535454][T14293]  ? __fget_files+0x34/0x3d0
[  326.535471][T14293]  ? find_held_lock+0x2b/0x80
[  326.535480][T14293]  ? hook_file_ioctl_common+0x140/0x440
[  326.535497][T14293]  ? __fget_files+0x21f/0x3d0
[  326.535544][T14293]  security_file_ioctl+0xd3/0x230
[  326.535565][T14293]  __x64_sys_ioctl+0xb7/0x210
[  326.535584][T14293]  do_syscall_64+0x123/0x790
[  326.535596][T14293]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.535608][T14293] RIP: 0033:0x7feaf9b9f559
[  326.535618][T14293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  326.535630][T14293] RSP: 002b:00007feafa99f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  326.535641][T14293] RAX: ffffffffffffffda RBX: 00007feaf9e25fa0 RCX: 00007feaf9b9f559
[  326.535649][T14293] RDX: 0000200000000600 RSI: 0000000040946400 RDI: 0000000000000003
[  326.535655][T14293] RBP: 00007feafa99f090 R08: 0000000000000000 R09: 0000000000000000
[  326.535662][T14293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  326.535669][T14293] R13: 00007feaf9e26038 R14: 00007feaf9e25fa0 R15: 00007fff3cf9b0a8
[  326.535684][T14293]  </TASK>
[  326.535759][T14293] ERROR: Out of memory at tomoyo_realpath_from_path.
[  326.543856][T14293] comedi comedi0: Minor 2208 is invalid!
[  326.572478][T14161] veth0_vlan: entered promiscuous mode
[  326.583141][T14161] veth1_vlan: entered promiscuous mode
[  326.599654][T14295] comedi comedi0: Minor 2208 is invalid!
[  326.600943][T14161] veth0_macvtap: entered promiscuous mode
[  326.603331][T14161] veth1_macvtap: entered promiscuous mode
[  326.610483][T14161] batman_adv: batadv0: Interface activated: batadv_slave_0
[  326.613928][T14161] batman_adv: batadv0: Interface activated: batadv_slave_1
[  326.696246][T14297] trusted_key: encrypted_key: insufficient parameters specified
[  326.701997][T14297] sg_read: process 960 (syz.1.2485) changed security contexts after opening file descriptor, this is not allowed.
[  326.719025][  T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.719040][  T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.741595][  T177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.741609][  T177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.743957][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  326.743980][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  326.743998][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  326.759479][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  326.917476][T14306] UBIFS error (pid: 14306): cannot open "ubi:0", error -19
[  326.953278][T14308] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2488'.
[  326.953295][T14308] nbd: must specify at least one socket
[  327.052133][T14311] FAULT_INJECTION: forcing a failure.
[  327.052133][T14311] name failslab, interval 1, probability 0, space 0, times 0
[  327.052196][T14311] CPU: 2 UID: 0 PID: 14311 Comm: syz.1.2489 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  327.052216][T14311] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  327.052221][T14311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  327.052228][T14311] Call Trace:
[  327.052233][T14311]  <TASK>
[  327.052239][T14311]  dump_stack_lvl+0x100/0x190
[  327.052259][T14311]  should_fail_ex.cold+0x5/0xa
[  327.052278][T14311]  should_failslab+0xc2/0x120
[  327.052294][T14311]  __kvmalloc_node_noprof+0x113/0x9b0
[  327.052307][T14311]  ? lockdep_init_map_type+0x5c/0x250
[  327.052323][T14311]  ? v4l2_ctrl_handler_init_class+0x201/0x350
[  327.052345][T14311]  v4l2_ctrl_handler_init_class+0x201/0x350
[  327.052362][T14311]  ? mutex_init_lockdep+0xf1/0x120
[  327.052377][T14311]  vicodec_open+0x18b/0xf70
[  327.052389][T14311]  ? kobject_get_unless_zero+0x156/0x200
[  327.052407][T14311]  v4l2_open+0x1d2/0x490
[  327.052419][T14311]  ? __pfx_v4l2_open+0x10/0x10
[  327.052429][T14311]  chrdev_open+0x234/0x6a0
[  327.052445][T14311]  ? __pfx_chrdev_open+0x10/0x10
[  327.052462][T14311]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  327.052478][T14311]  do_dentry_open+0x674/0x1470
[  327.052492][T14311]  ? __pfx_chrdev_open+0x10/0x10
[  327.052509][T14311]  vfs_open_consume+0xcc/0x460
[  327.052535][T14311]  path_openat+0x1547/0x23f0
[  327.052555][T14311]  ? __pfx_path_openat+0x10/0x10
[  327.052576][T14311]  do_file_open+0x20e/0x430
[  327.052594][T14311]  ? __pfx_do_file_open+0x10/0x10
[  327.052621][T14311]  ? _raw_spin_unlock+0x28/0x50
[  327.052638][T14311]  ? alloc_fd+0x471/0x7a0
[  327.052660][T14311]  do_sys_openat2+0x163/0x1d0
[  327.052671][T14311]  ? __pfx_do_sys_openat2+0x10/0x10
[  327.052687][T14311]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  327.052705][T14311]  __x64_sys_openat+0x12d/0x210
[  327.052716][T14311]  ? __pfx___x64_sys_openat+0x10/0x10
[  327.052732][T14311]  do_syscall_64+0x123/0x790
[  327.052744][T14311]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.052755][T14311] RIP: 0033:0x7feaf9b5fd8e
[  327.052765][T14311] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  327.052775][T14311] RSP: 002b:00007feafa97db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  327.052786][T14311] RAX: ffffffffffffffda RBX: 00007feafa97e6c0 RCX: 00007feaf9b5fd8e
[  327.052793][T14311] RDX: 0000000000000002 RSI: 00007feafa97dc00 RDI: ffffffffffffff9c
[  327.052800][T14311] RBP: 00007feafa97dc00 R08: 0000000000000000 R09: 0000000000000000
[  327.052807][T14311] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  327.052814][T14311] R13: 00007feaf9e26128 R14: 00007feaf9e26090 R15: 00007fff3cf9b0a8
[  327.052829][T14311]  </TASK>
[  327.121654][ T1481] usb 11-1: new high-speed USB device number 5 using dummy_hcd
[  327.273068][ T1481] usb 11-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  327.273954][ T1481] usb 11-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  327.273970][ T1481] usb 11-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  327.273983][ T1481] usb 11-1: config 0 interface 0 has no altsetting 0
[  327.275703][ T1481] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  327.275715][ T1481] usb 11-1: Product: syz
[  327.275722][ T1481] usb 11-1: Manufacturer: syz
[  327.275730][ T1481] usb 11-1: SerialNumber: syz
[  327.277108][ T1481] usb 11-1: config 0 descriptor??
[  327.279746][ T1481] usb 11-1: selecting invalid altsetting 0
[  327.302784][ T5797] Bluetooth: hci1: command tx timeout
[  327.475403][T14313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14313 comm=syz.2.2490
[  327.481214][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.481537][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.481713][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.481865][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.482012][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.482186][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.482448][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.482603][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.482758][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.482913][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.483137][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.483379][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.484161][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.484338][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.484487][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.485186][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.485357][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.485546][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.485783][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.485946][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.486106][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.486255][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.486410][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.486642][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.486902][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.487841][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.488090][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.488251][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.488433][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.488584][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.488742][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.488964][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.489339][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.489499][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.489650][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.489804][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.489953][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.490108][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.490352][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.490504][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.490655][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.490809][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.490960][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.491114][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.491381][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.491551][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.491709][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.491858][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.492035][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.492192][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.492419][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.492574][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.492731][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.492881][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.493079][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.493236][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.493385][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.493608][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.493770][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.494119][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.494277][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.494437][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.495937][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.496102][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.496253][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.496402][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.496558][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.496707][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.497553][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.497708][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.497932][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.498095][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.498244][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.498393][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.498549][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.498699][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.498849][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.499137][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.499289][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.499446][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.499596][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.499745][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.499899][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.500141][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.500291][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.500481][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.500636][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.500784][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.500941][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.501094][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.501323][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.501498][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.501651][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.501807][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.501957][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.502109][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.502339][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.502491][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.502642][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.502797][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.502960][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.503163][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.503331][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.503573][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.503730][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.505458][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.505951][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.506117][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.506280][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.506542][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.506770][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.506920][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.507079][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.507229][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.507378][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.507532][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.507680][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.507970][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.508247][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.508532][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.508813][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.509320][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.509610][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.509870][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.510130][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.510282][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.510438][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.510591][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.510741][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.510896][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.511049][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.511269][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.511450][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.511604][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.511753][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.511927][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.512083][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.512312][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.512462][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.512613][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.512768][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.512918][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.513136][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.513295][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.513512][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.513665][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.513855][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.514054][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.514212][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.514362][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.515479][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.516138][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.516291][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.516443][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.516606][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.517323][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.517478][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.517635][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.517838][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.518048][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.518200][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.518350][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.518508][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.518661][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.518811][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.519027][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.519232][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.519455][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.519613][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.519765][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.519985][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.520154][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.520347][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.520503][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.520655][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.520806][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.520962][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.521161][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.521366][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.521541][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.521691][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.521846][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.521995][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.522200][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.522411][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.522566][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.522715][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.522872][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.523073][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.523305][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.523519][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.523672][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.523828][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.524169][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.524747][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.524907][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.525073][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.525222][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.525377][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.526825][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.526977][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.527175][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.527732][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.527892][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.528066][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.528215][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.528424][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.528576][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.528773][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.528929][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.529082][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.529231][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.529385][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.529617][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.529774][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.529974][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.530128][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.530283][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.530433][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.530632][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.530789][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.530985][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.531139][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.531295][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.531470][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.531630][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.531845][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.532064][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.532221][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.532370][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.532521][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.532675][T14304] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled
[  327.540058][ T1481] usb 11-1: USB disconnect, device number 5
[  328.048430][ T1481] usb 12-1: USB disconnect, device number 5
[  328.050997][ T1481] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0
[  328.051253][ T1481] symbolserial 12-1:1.0: device disconnected
[  328.112723][T14325] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.131072.0), cmd(9)
[  328.184571][T14330] netlink: 'syz.7.2497': attribute type 4 has an invalid length.
[  328.253888][T14332] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2498'.
[  328.253905][T14332] nbd: must specify at least one socket
[  328.254267][T14336] FAULT_INJECTION: forcing a failure.
[  328.254267][T14336] name failslab, interval 1, probability 0, space 0, times 0
[  328.254385][T14336] CPU: 2 UID: 0 PID: 14336 Comm: syz.7.2500 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  328.254411][T14336] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  328.254419][T14336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  328.254428][T14336] Call Trace:
[  328.254435][T14336]  <TASK>
[  328.254442][T14336]  dump_stack_lvl+0x100/0x190
[  328.254472][T14336]  should_fail_ex.cold+0x5/0xa
[  328.254497][T14336]  should_failslab+0xc2/0x120
[  328.254520][T14336]  __kvmalloc_node_noprof+0x113/0x9b0
[  328.254542][T14336]  ? lockdep_init_map_type+0x5c/0x250
[  328.254565][T14336]  ? v4l2_ctrl_handler_init_class+0x201/0x350
[  328.254597][T14336]  v4l2_ctrl_handler_init_class+0x201/0x350
[  328.254624][T14336]  ? mutex_init_lockdep+0xf1/0x120
[  328.254646][T14336]  vicodec_open+0x18b/0xf70
[  328.254665][T14336]  ? kobject_get_unless_zero+0x156/0x200
[  328.254691][T14336]  v4l2_open+0x1d2/0x490
[  328.254709][T14336]  ? __pfx_v4l2_open+0x10/0x10
[  328.254726][T14336]  chrdev_open+0x234/0x6a0
[  328.254749][T14336]  ? __pfx_chrdev_open+0x10/0x10
[  328.254773][T14336]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  328.254798][T14336]  do_dentry_open+0x674/0x1470
[  328.254820][T14336]  ? __pfx_chrdev_open+0x10/0x10
[  328.254847][T14336]  vfs_open_consume+0xcc/0x460
[  328.254876][T14336]  path_openat+0x1547/0x23f0
[  328.254905][T14336]  ? __pfx_path_openat+0x10/0x10
[  328.254935][T14336]  do_file_open+0x20e/0x430
[  328.254961][T14336]  ? __pfx_do_file_open+0x10/0x10
[  328.255010][T14336]  ? _raw_spin_unlock+0x28/0x50
[  328.255033][T14336]  ? alloc_fd+0x471/0x7a0
[  328.255065][T14336]  do_sys_openat2+0x163/0x1d0
[  328.255082][T14336]  ? __pfx_do_sys_openat2+0x10/0x10
[  328.255106][T14336]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  328.255135][T14336]  __x64_sys_openat+0x12d/0x210
[  328.255153][T14336]  ? __pfx___x64_sys_openat+0x10/0x10
[  328.255179][T14336]  do_syscall_64+0x123/0x790
[  328.255198][T14336]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.255216][T14336] RIP: 0033:0x7f6bd975fd8e
[  328.255231][T14336] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  328.255247][T14336] RSP: 002b:00007f6bda728b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  328.255265][T14336] RAX: ffffffffffffffda RBX: 00007f6bda7296c0 RCX: 00007f6bd975fd8e
[  328.255277][T14336] RDX: 0000000000000002 RSI: 00007f6bda728c00 RDI: ffffffffffffff9c
[  328.255288][T14336] RBP: 00007f6bda728c00 R08: 0000000000000000 R09: 0000000000000000
[  328.255298][T14336] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  328.255308][T14336] R13: 00007f6bd9a26038 R14: 00007f6bd9a25fa0 R15: 00007ffefddce418
[  328.255333][T14336]  </TASK>
[  328.535058][  T177] IPVS: stopping estimator thread 0...
[  328.602910][T14349] futex_wake_op: syz.2.2504 tries to shift op by 144; fix this program
[  328.603189][T14349] futex_wake_op: syz.2.2504 tries to shift op by 144; fix this program
[  328.674248][T14356] netlink: 260 bytes leftover after parsing attributes in process `syz.6.2506'.
[  328.708524][T14358] netlink: 'syz.2.2507': attribute type 1 has an invalid length.
[  328.708538][T14358] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2507'.
[  328.991391][T14370] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2511'.
[  328.991429][T14370] nbd: must specify at least one socket
[  329.023679][T14372] FAULT_INJECTION: forcing a failure.
[  329.023679][T14372] name failslab, interval 1, probability 0, space 0, times 0
[  329.023722][T14372] CPU: 0 UID: 0 PID: 14372 Comm: syz.6.2512 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  329.023740][T14372] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  329.023745][T14372] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  329.023755][T14372] Call Trace:
[  329.023779][T14372]  <TASK>
[  329.023788][T14372]  dump_stack_lvl+0x100/0x190
[  329.023836][T14372]  should_fail_ex.cold+0x5/0xa
[  329.023878][T14372]  should_failslab+0xc2/0x120
[  329.023933][T14372]  __kvmalloc_node_noprof+0x113/0x9b0
[  329.023957][T14372]  ? lockdep_init_map_type+0x5c/0x250
[  329.023986][T14372]  ? v4l2_ctrl_handler_init_class+0x201/0x350
[  329.024045][T14372]  v4l2_ctrl_handler_init_class+0x201/0x350
[  329.024076][T14372]  ? mutex_init_lockdep+0xf1/0x120
[  329.024101][T14372]  vicodec_open+0x18b/0xf70
[  329.024122][T14372]  ? kobject_get_unless_zero+0x156/0x200
[  329.024151][T14372]  v4l2_open+0x1d2/0x490
[  329.024170][T14372]  ? __pfx_v4l2_open+0x10/0x10
[  329.024188][T14372]  chrdev_open+0x234/0x6a0
[  329.024218][T14372]  ? __pfx_chrdev_open+0x10/0x10
[  329.024247][T14372]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  329.024274][T14372]  do_dentry_open+0x674/0x1470
[  329.024299][T14372]  ? __pfx_chrdev_open+0x10/0x10
[  329.024329][T14372]  vfs_open_consume+0xcc/0x460
[  329.024361][T14372]  path_openat+0x1547/0x23f0
[  329.024393][T14372]  ? __pfx_path_openat+0x10/0x10
[  329.024429][T14372]  do_file_open+0x20e/0x430
[  329.024459][T14372]  ? __pfx_do_file_open+0x10/0x10
[  329.024506][T14372]  ? _raw_spin_unlock+0x28/0x50
[  329.024531][T14372]  ? alloc_fd+0x471/0x7a0
[  329.024574][T14372]  do_sys_openat2+0x163/0x1d0
[  329.024594][T14372]  ? __pfx_do_sys_openat2+0x10/0x10
[  329.024623][T14372]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  329.024657][T14372]  __x64_sys_openat+0x12d/0x210
[  329.024676][T14372]  ? __pfx___x64_sys_openat+0x10/0x10
[  329.024705][T14372]  do_syscall_64+0x123/0x790
[  329.024725][T14372]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.024745][T14372] RIP: 0033:0x7fa2ac35fd8e
[  329.024760][T14372] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  329.024778][T14372] RSP: 002b:00007fa2ad2f3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  329.024807][T14372] RAX: ffffffffffffffda RBX: 00007fa2ad2f46c0 RCX: 00007fa2ac35fd8e
[  329.024821][T14372] RDX: 0000000000000002 RSI: 00007fa2ad2f3c00 RDI: ffffffffffffff9c
[  329.024834][T14372] RBP: 00007fa2ad2f3c00 R08: 0000000000000000 R09: 0000000000000000
[  329.024846][T14372] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  329.024858][T14372] R13: 00007fa2ac626038 R14: 00007fa2ac625fa0 R15: 00007fff91baf5d8
[  329.024888][T14372]  </TASK>
[  329.149895][T14374] 8021q: adding VLAN 0 to HW filter on device bond1
[  329.251946][T14379] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0]
[  329.251961][T14379] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4]
[  329.252002][T14379] Could not find valid key in user session keyring for sig specified in mount option: [syz]
[  329.252010][T14379] One or more global auth toks could not properly register; rc = [-22]
[  329.252027][T14379] Error validating options; rc = [-22]
[  329.281452][T14382] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[  329.331071][T14393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65040 sclass=netlink_route_socket pid=14393 comm=syz.7.2519
[  329.360237][ T5797] Bluetooth: Wrong link type (-57)
[  329.394575][ T5797] Bluetooth: hci1: command tx timeout
[  329.402907][T14397] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2521'.
[  329.402931][T14397] nbd: must specify at least one socket
[  329.417189][T14399] netlink: 'syz.2.2522': attribute type 10 has an invalid length.
[  329.417203][T14399] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2522'.
[  329.418591][T14399] FAULT_INJECTION: forcing a failure.
[  329.418591][T14399] name failslab, interval 1, probability 0, space 0, times 0
[  329.418612][T14399] CPU: 3 UID: 0 PID: 14399 Comm: syz.2.2522 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  329.418630][T14399] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  329.418635][T14399] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  329.418642][T14399] Call Trace:
[  329.418646][T14399]  <TASK>
[  329.418652][T14399]  dump_stack_lvl+0x100/0x190
[  329.418672][T14399]  should_fail_ex.cold+0x5/0xa
[  329.418689][T14399]  should_failslab+0xc2/0x120
[  329.418705][T14399]  __kvmalloc_node_noprof+0x113/0x9b0
[  329.418719][T14399]  ? lockdep_init_map_type+0x5c/0x250
[  329.418735][T14399]  ? v4l2_ctrl_handler_init_class+0x201/0x350
[  329.418756][T14399]  v4l2_ctrl_handler_init_class+0x201/0x350
[  329.418773][T14399]  ? mutex_init_lockdep+0xf1/0x120
[  329.418788][T14399]  vicodec_open+0x18b/0xf70
[  329.418800][T14399]  ? kobject_get_unless_zero+0x156/0x200
[  329.418819][T14399]  v4l2_open+0x1d2/0x490
[  329.418830][T14399]  ? __pfx_v4l2_open+0x10/0x10
[  329.418841][T14399]  chrdev_open+0x234/0x6a0
[  329.418857][T14399]  ? __pfx_chrdev_open+0x10/0x10
[  329.418873][T14399]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  329.418889][T14399]  do_dentry_open+0x674/0x1470
[  329.418904][T14399]  ? __pfx_chrdev_open+0x10/0x10
[  329.418921][T14399]  vfs_open_consume+0xcc/0x460
[  329.418940][T14399]  path_openat+0x1547/0x23f0
[  329.418958][T14399]  ? __pfx_path_openat+0x10/0x10
[  329.418977][T14399]  do_file_open+0x20e/0x430
[  329.418994][T14399]  ? __pfx_do_file_open+0x10/0x10
[  329.419027][T14399]  ? _raw_spin_unlock+0x28/0x50
[  329.419044][T14399]  ? alloc_fd+0x471/0x7a0
[  329.419066][T14399]  do_sys_openat2+0x163/0x1d0
[  329.419078][T14399]  ? __pfx_do_sys_openat2+0x10/0x10
[  329.419095][T14399]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  329.419118][T14399]  __x64_sys_openat+0x12d/0x210
[  329.419129][T14399]  ? __pfx___x64_sys_openat+0x10/0x10
[  329.419145][T14399]  do_syscall_64+0x123/0x790
[  329.419157][T14399]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.419169][T14399] RIP: 0033:0x7fc89a15fd8e
[  329.419180][T14399] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  329.419191][T14399] RSP: 002b:00007fc89b065b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  329.419203][T14399] RAX: ffffffffffffffda RBX: 00007fc89b0666c0 RCX: 00007fc89a15fd8e
[  329.419210][T14399] RDX: 0000000000000002 RSI: 00007fc89b065c00 RDI: ffffffffffffff9c
[  329.419217][T14399] RBP: 00007fc89b065c00 R08: 0000000000000000 R09: 0000000000000000
[  329.419223][T14399] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  329.419230][T14399] R13: 00007fc89a426038 R14: 00007fc89a425fa0 R15: 00007ffccdd0e1f8
[  329.419244][T14399]  </TASK>
[  329.527968][T14407] MTRR 1 not used
[  329.550996][T14411] comedi comedi3: comedi_config --init_data is deprecated
[  329.735477][T14425] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2532'.
[  329.735495][T14425] nbd: must specify at least one socket
[  329.804953][T14427] netlink: 'syz.7.2533': attribute type 10 has an invalid length.
[  329.804971][T14427] netlink: 55 bytes leftover after parsing attributes in process `syz.7.2533'.
[  329.822889][T14427] FAULT_INJECTION: forcing a failure.
[  329.822889][T14427] name failslab, interval 1, probability 0, space 0, times 0
[  329.822912][T14427] CPU: 1 UID: 0 PID: 14427 Comm: syz.7.2533 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  329.822930][T14427] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  329.822935][T14427] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  329.822942][T14427] Call Trace:
[  329.822947][T14427]  <TASK>
[  329.822952][T14427]  dump_stack_lvl+0x100/0x190
[  329.822973][T14427]  should_fail_ex.cold+0x5/0xa
[  329.822990][T14427]  should_failslab+0xc2/0x120
[  329.823007][T14427]  __kvmalloc_node_noprof+0x113/0x9b0
[  329.823021][T14427]  ? lockdep_init_map_type+0x5c/0x250
[  329.823036][T14427]  ? v4l2_ctrl_handler_init_class+0x201/0x350
[  329.823058][T14427]  v4l2_ctrl_handler_init_class+0x201/0x350
[  329.823075][T14427]  ? mutex_init_lockdep+0xf1/0x120
[  329.823090][T14427]  vicodec_open+0x18b/0xf70
[  329.823102][T14427]  ? kobject_get_unless_zero+0x156/0x200
[  329.823121][T14427]  v4l2_open+0x1d2/0x490
[  329.823133][T14427]  ? __pfx_v4l2_open+0x10/0x10
[  329.823145][T14427]  chrdev_open+0x234/0x6a0
[  329.823162][T14427]  ? __pfx_chrdev_open+0x10/0x10
[  329.823178][T14427]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  329.823194][T14427]  do_dentry_open+0x674/0x1470
[  329.823208][T14427]  ? __pfx_chrdev_open+0x10/0x10
[  329.823226][T14427]  vfs_open_consume+0xcc/0x460
[  329.823245][T14427]  path_openat+0x1547/0x23f0
[  329.823263][T14427]  ? __pfx_path_openat+0x10/0x10
[  329.823283][T14427]  do_file_open+0x20e/0x430
[  329.823300][T14427]  ? __pfx_do_file_open+0x10/0x10
[  329.823325][T14427]  ? _raw_spin_unlock+0x28/0x50
[  329.823340][T14427]  ? alloc_fd+0x471/0x7a0
[  329.823360][T14427]  do_sys_openat2+0x163/0x1d0
[  329.823370][T14427]  ? __pfx_do_sys_openat2+0x10/0x10
[  329.823386][T14427]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  329.823405][T14427]  __x64_sys_openat+0x12d/0x210
[  329.823416][T14427]  ? __pfx___x64_sys_openat+0x10/0x10
[  329.823432][T14427]  do_syscall_64+0x123/0x790
[  329.823444][T14427]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.823456][T14427] RIP: 0033:0x7f6bd975fd8e
[  329.823473][T14427] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  329.823485][T14427] RSP: 002b:00007f6bda728b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  329.823498][T14427] RAX: ffffffffffffffda RBX: 00007f6bda7296c0 RCX: 00007f6bd975fd8e
[  329.823507][T14427] RDX: 0000000000000002 RSI: 00007f6bda728c00 RDI: ffffffffffffff9c
[  329.823515][T14427] RBP: 00007f6bda728c00 R08: 0000000000000000 R09: 0000000000000000
[  329.823521][T14427] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  329.823530][T14427] R13: 00007f6bd9a26038 R14: 00007f6bd9a25fa0 R15: 00007ffefddce418
[  329.823545][T14427]  </TASK>
[  329.826065][T14433] FAULT_INJECTION: forcing a failure.
[  329.826065][T14433] name failslab, interval 1, probability 0, space 0, times 0
[  329.826094][T14433] CPU: 0 UID: 0 PID: 14433 Comm: syz.2.2535 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  329.826120][T14433] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  329.826128][T14433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  329.826138][T14433] Call Trace:
[  329.826145][T14433]  <TASK>
[  329.826152][T14433]  dump_stack_lvl+0x100/0x190
[  329.826182][T14433]  should_fail_ex.cold+0x5/0xa
[  329.826209][T14433]  should_failslab+0xc2/0x120
[  329.826234][T14433]  __kmalloc_cache_noprof+0x91/0x6d0
[  329.826250][T14433]  ? avc_policy_seqno+0x9/0x20
[  329.826270][T14433]  ? selinux_file_permission+0x30/0x6a0
[  329.826297][T14433]  ? configfs_read_iter+0x53c/0x6f0
[  329.826323][T14433]  configfs_read_iter+0x53c/0x6f0
[  329.826346][T14433]  ? __pfx_configfs_read_iter+0x10/0x10
[  329.826369][T14433]  vfs_read+0x82e/0xb40
[  329.826394][T14433]  ? __pfx_vfs_read+0x10/0x10
[  329.826413][T14433]  ? find_held_lock+0x2b/0x80
[  329.826447][T14433]  ksys_read+0x12a/0x250
[  329.826468][T14433]  ? __pfx_ksys_read+0x10/0x10
[  329.826513][T14433]  do_syscall_64+0x123/0x790
[  329.826535][T14433]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.826558][T14433] RIP: 0033:0x7fc89a19f559
[  329.826573][T14433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  329.826590][T14433] RSP: 002b:00007fc89b066028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  329.826606][T14433] RAX: ffffffffffffffda RBX: 00007fc89a425fa0 RCX: 00007fc89a19f559
[  329.826618][T14433] RDX: 0000000000002020 RSI: 0000200000002bc0 RDI: 0000000000000003
[  329.826629][T14433] RBP: 00007fc89b066090 R08: 0000000000000000 R09: 0000000000000000
[  329.826640][T14433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  329.826651][T14433] R13: 00007fc89a426038 R14: 00007fc89a425fa0 R15: 00007ffccdd0e1f8
[  329.826678][T14433]  </TASK>
[  329.948356][T14440] kAFS: Can only specify source 'none' with -o dyn
[  329.989611][   T42] audit: type=1400 audit(3586355764.424:23406): avc:  denied  { map } for  pid=14434 comm="syz.2.2537" path="socket:[72861]" dev="sockfs" ino=72861 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  330.077260][   T42] audit: type=1400 audit(3586355764.504:23407): avc:  denied  { ioctl } for  pid=14450 comm="syz.7.2540" path="/dev/cpu/3/msr" dev="devtmpfs" ino=93 ioctlcmd=0xc02063a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  330.102792][T14454] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2541'.
[  330.102822][T14454] nbd: must specify at least one socket
[  330.286063][T14465] FAULT_INJECTION: forcing a failure.
[  330.286063][T14465] name failslab, interval 1, probability 0, space 0, times 0
[  330.286103][T14465] CPU: 0 UID: 0 PID: 14465 Comm: syz.2.2544 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  330.286120][T14465] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  330.286126][T14465] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  330.286134][T14465] Call Trace:
[  330.286156][T14465]  <TASK>
[  330.286161][T14465]  dump_stack_lvl+0x100/0x190
[  330.286196][T14465]  should_fail_ex.cold+0x5/0xa
[  330.286236][T14465]  should_failslab+0xc2/0x120
[  330.286257][T14465]  __kmalloc_cache_noprof+0x91/0x6d0
[  330.286273][T14465]  ? assoc_array_insert+0x262/0x32c0
[  330.286292][T14465]  assoc_array_insert+0x262/0x32c0
[  330.286310][T14465]  ? __key_link_lock+0x4a/0xb0
[  330.286325][T14465]  ? __pfx_assoc_array_insert+0x10/0x10
[  330.286342][T14465]  ? down_write+0x141/0x1f0
[  330.286360][T14465]  ? __pfx_down_write+0x10/0x10
[  330.286375][T14465]  __key_link_begin+0xf5/0x260
[  330.286389][T14465]  __key_create_or_update+0x483/0xe10
[  330.286409][T14465]  ? __pfx___key_create_or_update+0x10/0x10
[  330.286426][T14465]  ? lookup_user_key+0x477/0x13e0
[  330.286443][T14465]  ? __pfx_lookup_user_key+0x10/0x10
[  330.286487][T14465]  key_create_or_update+0x42/0x60
[  330.286510][T14465]  __do_sys_add_key+0x2e8/0x460
[  330.286526][T14465]  ? __pfx___do_sys_add_key+0x10/0x10
[  330.286549][T14465]  do_syscall_64+0x123/0x790
[  330.286562][T14465]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.286575][T14465] RIP: 0033:0x7fc89a19f559
[  330.286585][T14465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  330.286597][T14465] RSP: 002b:00007fc89b066028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  330.286617][T14465] RAX: ffffffffffffffda RBX: 00007fc89a425fa0 RCX: 00007fc89a19f559
[  330.286625][T14465] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[  330.286633][T14465] RBP: 00007fc89a236b20 R08: ffffffffffffffff R09: 0000000000000000
[  330.286641][T14465] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000
[  330.286649][T14465] R13: 00007fc89a426038 R14: 00007fc89a425fa0 R15: 00007ffccdd0e1f8
[  330.286665][T14465]  </TASK>
[  330.415494][T14469] netlink: 'syz.2.2546': attribute type 10 has an invalid length.
[  330.415516][T14469] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2546'.
[  330.417940][T14469] FAULT_INJECTION: forcing a failure.
[  330.417940][T14469] name failslab, interval 1, probability 0, space 0, times 0
[  330.417971][T14469] CPU: 0 UID: 0 PID: 14469 Comm: syz.2.2546 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  330.417999][T14469] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  330.418008][T14469] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  330.418018][T14469] Call Trace:
[  330.418026][T14469]  <TASK>
[  330.418034][T14469]  dump_stack_lvl+0x100/0x190
[  330.418067][T14469]  should_fail_ex.cold+0x5/0xa
[  330.418097][T14469]  should_failslab+0xc2/0x120
[  330.418143][T14469]  __kvmalloc_node_noprof+0x113/0x9b0
[  330.418167][T14469]  ? lockdep_init_map_type+0x5c/0x250
[  330.418193][T14469]  ? v4l2_ctrl_handler_init_class+0x201/0x350
[  330.418236][T14469]  v4l2_ctrl_handler_init_class+0x201/0x350
[  330.418266][T14469]  ? mutex_init_lockdep+0xf1/0x120
[  330.418293][T14469]  vicodec_open+0x18b/0xf70
[  330.418316][T14469]  ? kobject_get_unless_zero+0x156/0x200
[  330.418347][T14469]  v4l2_open+0x1d2/0x490
[  330.418366][T14469]  ? __pfx_v4l2_open+0x10/0x10
[  330.418385][T14469]  chrdev_open+0x234/0x6a0
[  330.418414][T14469]  ? __pfx_chrdev_open+0x10/0x10
[  330.418443][T14469]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  330.418472][T14469]  do_dentry_open+0x674/0x1470
[  330.418497][T14469]  ? __pfx_chrdev_open+0x10/0x10
[  330.418531][T14469]  vfs_open_consume+0xcc/0x460
[  330.418570][T14469]  path_openat+0x1547/0x23f0
[  330.418604][T14469]  ? __pfx_path_openat+0x10/0x10
[  330.418642][T14469]  do_file_open+0x20e/0x430
[  330.418674][T14469]  ? __pfx_do_file_open+0x10/0x10
[  330.418723][T14469]  ? _raw_spin_unlock+0x28/0x50
[  330.418751][T14469]  ? alloc_fd+0x471/0x7a0
[  330.418787][T14469]  do_sys_openat2+0x163/0x1d0
[  330.418806][T14469]  ? __pfx_do_sys_openat2+0x10/0x10
[  330.418835][T14469]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  330.418869][T14469]  __x64_sys_openat+0x12d/0x210
[  330.418888][T14469]  ? __pfx___x64_sys_openat+0x10/0x10
[  330.418917][T14469]  do_syscall_64+0x123/0x790
[  330.418938][T14469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.418959][T14469] RIP: 0033:0x7fc89a15fd8e
[  330.418974][T14469] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  330.418992][T14469] RSP: 002b:00007fc89b065b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  330.419010][T14469] RAX: ffffffffffffffda RBX: 00007fc89b0666c0 RCX: 00007fc89a15fd8e
[  330.419023][T14469] RDX: 0000000000000002 RSI: 00007fc89b065c00 RDI: ffffffffffffff9c
[  330.419035][T14469] RBP: 00007fc89b065c00 R08: 0000000000000000 R09: 0000000000000000
[  330.419046][T14469] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  330.419058][T14469] R13: 00007fc89a426038 R14: 00007fc89a425fa0 R15: 00007ffccdd0e1f8
[  330.419085][T14469]  </TASK>
[  330.459794][    T9] usb 11-1: new high-speed USB device number 6 using dummy_hcd
[  330.511908][T14471] FAULT_INJECTION: forcing a failure.
[  330.511908][T14471] name failslab, interval 1, probability 0, space 0, times 0
[  330.511933][T14471] CPU: 1 UID: 0 PID: 14471 Comm: syz.7.2547 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  330.511952][T14471] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  330.511956][T14471] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  330.511964][T14471] Call Trace:
[  330.511969][T14471]  <TASK>
[  330.511974][T14471]  dump_stack_lvl+0x100/0x190
[  330.511995][T14471]  should_fail_ex.cold+0x5/0xa
[  330.512012][T14471]  should_failslab+0xc2/0x120
[  330.512028][T14471]  __kmalloc_cache_noprof+0x91/0x6d0
[  330.512039][T14471]  ? bpf_split_cur_state+0xc4/0xed0
[  330.512060][T14471]  bpf_split_cur_state+0xc4/0xed0
[  330.512076][T14471]  ? __asan_memset+0x23/0x50
[  330.512090][T14471]  bpf_is_state_visited+0x22dc/0x3070
[  330.512114][T14471]  do_check_common+0x3714/0xd5d0
[  330.512128][T14471]  ? bpf_base_func_proto+0x85/0xe60
[  330.512149][T14471]  ? __pfx_do_check_common+0x10/0x10
[  330.512177][T14471]  ? __kvmalloc_node_noprof+0x377/0x9b0
[  330.512197][T14471]  bpf_check+0x87ee/0xa150
[  330.512222][T14471]  ? __pfx_bpf_check+0x10/0x10
[  330.512237][T14471]  ? find_held_lock+0x2b/0x80
[  330.512248][T14471]  ? bpf_prog_load+0x1b60/0x2ba0
[  330.512264][T14471]  ? __asan_memset+0x23/0x50
[  330.512278][T14471]  ? bpf_prog_load+0x1c1f/0x2ba0
[  330.512291][T14471]  bpf_prog_load+0x1c1f/0x2ba0
[  330.512304][T14471]  ? avc_has_perm_noaudit+0x11e/0x470
[  330.512321][T14471]  ? __pfx_bpf_prog_load+0x10/0x10
[  330.512347][T14471]  __sys_bpf+0x146f/0x4b60
[  330.512365][T14471]  ? __pfx___sys_bpf+0x10/0x10
[  330.512378][T14471]  ? find_held_lock+0x2b/0x80
[  330.512388][T14471]  ? futex_wake+0x4ea/0x5e0
[  330.512411][T14471]  ? find_held_lock+0x2b/0x80
[  330.512431][T14471]  ? __x64_sys_futex+0x34f/0x4d0
[  330.512442][T14471]  ? __x64_sys_futex+0x358/0x4d0
[  330.512454][T14471]  ? __pfx___x64_sys_futex+0x10/0x10
[  330.512468][T14471]  ? __x64_sys_bpf+0xce/0x140
[  330.512484][T14471]  __x64_sys_bpf+0xce/0x140
[  330.512500][T14471]  ? do_syscall_64+0xae/0x790
[  330.512511][T14471]  do_syscall_64+0x123/0x790
[  330.512523][T14471]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.512535][T14471] RIP: 0033:0x7f6bd979f559
[  330.512544][T14471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  330.512555][T14471] RSP: 002b:00007f6bda729028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  330.512574][T14471] RAX: ffffffffffffffda RBX: 00007f6bd9a25fa0 RCX: 00007f6bd979f559
[  330.512582][T14471] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005
[  330.512589][T14471] RBP: 00007f6bd9836b20 R08: 0000000000000000 R09: 0000000000000000
[  330.512596][T14471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  330.512604][T14471] R13: 00007f6bd9a26038 R14: 00007f6bd9a25fa0 R15: 00007ffefddce418
[  330.512620][T14471]  </TASK>
[  330.590580][    T9] usb 11-1: device descriptor read/64, error -71
[  330.664430][T14479] tipc: Failed to remove unknown binding: 66,0,0/0:737582484/737582486
[  330.664457][T14479] tipc: Failed to remove unknown binding: 66,0,0/0:737582484/737582485
[  330.664863][T14479] tipc: Failed to remove unknown binding: 66,0,0/0:737582484/737582486
[  330.664882][T14479] tipc: Failed to remove unknown binding: 66,0,0/0:737582484/737582485
[  330.677579][T14480] FAULT_INJECTION: forcing a failure.
[  330.677579][T14480] name failslab, interval 1, probability 0, space 0, times 0
[  330.677606][T14480] CPU: 3 UID: 0 PID: 14480 Comm: syz.7.2550 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  330.677626][T14480] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  330.677632][T14480] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  330.677639][T14480] Call Trace:
[  330.677644][T14480]  <TASK>
[  330.677649][T14480]  dump_stack_lvl+0x100/0x190
[  330.677670][T14480]  should_fail_ex.cold+0x5/0xa
[  330.677689][T14480]  should_failslab+0xc2/0x120
[  330.677707][T14480]  __kmalloc_cache_noprof+0x91/0x6d0
[  330.677719][T14480]  ? ptmx_open+0x11a/0x360
[  330.677754][T14480]  ? alloc_tty_struct+0x96/0x8e0
[  330.677770][T14480]  alloc_tty_struct+0x96/0x8e0
[  330.677784][T14480]  ? __pfx_alloc_tty_struct+0x10/0x10
[  330.677802][T14480]  tty_init_dev.part.0+0x20/0x470
[  330.677816][T14480]  tty_init_dev+0x60/0x80
[  330.677828][T14480]  ? __pfx_ptmx_open+0x10/0x10
[  330.677842][T14480]  ptmx_open+0x128/0x360
[  330.677857][T14480]  ? __pfx_ptmx_open+0x10/0x10
[  330.677871][T14480]  chrdev_open+0x234/0x6a0
[  330.677890][T14480]  ? __pfx_chrdev_open+0x10/0x10
[  330.677908][T14480]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  330.677926][T14480]  do_dentry_open+0x674/0x1470
[  330.677941][T14480]  ? __pfx_chrdev_open+0x10/0x10
[  330.677960][T14480]  vfs_open_consume+0xcc/0x460
[  330.677982][T14480]  path_openat+0x1547/0x23f0
[  330.678002][T14480]  ? __pfx_path_openat+0x10/0x10
[  330.678025][T14480]  do_file_open+0x20e/0x430
[  330.678044][T14480]  ? __pfx_do_file_open+0x10/0x10
[  330.678072][T14480]  ? _raw_spin_unlock+0x28/0x50
[  330.678090][T14480]  ? alloc_fd+0x471/0x7a0
[  330.678112][T14480]  do_sys_openat2+0x163/0x1d0
[  330.678124][T14480]  ? __pfx_do_sys_openat2+0x10/0x10
[  330.678146][T14480]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  330.678164][T14480]  __x64_sys_openat+0x12d/0x210
[  330.678176][T14480]  ? __pfx___x64_sys_openat+0x10/0x10
[  330.678194][T14480]  do_syscall_64+0x123/0x790
[  330.678207][T14480]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.678220][T14480] RIP: 0033:0x7f6bd979f559
[  330.678232][T14480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  330.678244][T14480] RSP: 002b:00007f6bda729028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  330.678258][T14480] RAX: ffffffffffffffda RBX: 00007f6bd9a25fa0 RCX: 00007f6bd979f559
[  330.678266][T14480] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffff9c
[  330.678274][T14480] RBP: 00007f6bd9836b20 R08: 0000000000000000 R09: 0000000000000000
[  330.678281][T14480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  330.678289][T14480] R13: 00007f6bd9a26038 R14: 00007f6bd9a25fa0 R15: 00007ffefddce418
[  330.678306][T14480]  </TASK>
[  330.727990][T14482] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2552'.
[  330.728004][T14482] nbd: must specify at least one socket
[  330.881923][    T9] usb 11-1: new high-speed USB device number 7 using dummy_hcd
[  331.013115][    T9] usb 11-1: device descriptor read/64, error -71
[  331.030150][T14496] netlink: 'syz.2.2557': attribute type 10 has an invalid length.
[  331.033892][T14496] FAULT_INJECTION: forcing a failure.
[  331.033892][T14496] name failslab, interval 1, probability 0, space 0, times 0
[  331.033914][T14496] CPU: 3 UID: 0 PID: 14496 Comm: syz.2.2557 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  331.033931][T14496] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  331.033937][T14496] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  331.033944][T14496] Call Trace:
[  331.033949][T14496]  <TASK>
[  331.033954][T14496]  dump_stack_lvl+0x100/0x190
[  331.033994][T14496]  should_fail_ex.cold+0x5/0xa
[  331.034013][T14496]  should_failslab+0xc2/0x120
[  331.034030][T14496]  __kvmalloc_node_noprof+0x113/0x9b0
[  331.034044][T14496]  ? stack_trace_save+0x8e/0xc0
[  331.034058][T14496]  ? v4l2_ctrl_new+0x4a6/0x23a0
[  331.034073][T14496]  v4l2_ctrl_new+0x4a6/0x23a0
[  331.034087][T14496]  ? entry_SYSCALL_64_after_hwframe+0x47/0x7f
[  331.034101][T14496]  ? __pfx_v4l2_ctrl_new+0x10/0x10
[  331.034120][T14496]  v4l2_ctrl_new_std+0x1bb/0x290
[  331.034137][T14496]  ? __pfx_v4l2_ctrl_new_std+0x10/0x10
[  331.034148][T14496]  ? rcu_is_watching+0x13/0xc0
[  331.034160][T14496]  ? __kvmalloc_node_noprof+0x377/0x9b0
[  331.034178][T14496]  ? media_request_object_init+0x105/0x180
[  331.034199][T14496]  vicodec_open+0x1b2/0xf70
[  331.034213][T14496]  ? kobject_get_unless_zero+0x156/0x200
[  331.034231][T14496]  v4l2_open+0x1d2/0x490
[  331.034242][T14496]  ? __pfx_v4l2_open+0x10/0x10
[  331.034252][T14496]  chrdev_open+0x234/0x6a0
[  331.034268][T14496]  ? __pfx_chrdev_open+0x10/0x10
[  331.034284][T14496]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  331.034300][T14496]  do_dentry_open+0x674/0x1470
[  331.034314][T14496]  ? __pfx_chrdev_open+0x10/0x10
[  331.034333][T14496]  vfs_open_consume+0xcc/0x460
[  331.034354][T14496]  path_openat+0x1547/0x23f0
[  331.034372][T14496]  ? __pfx_path_openat+0x10/0x10
[  331.034393][T14496]  do_file_open+0x20e/0x430
[  331.034409][T14496]  ? __pfx_do_file_open+0x10/0x10
[  331.034435][T14496]  ? _raw_spin_unlock+0x28/0x50
[  331.034450][T14496]  ? alloc_fd+0x471/0x7a0
[  331.034478][T14496]  do_sys_openat2+0x163/0x1d0
[  331.034489][T14496]  ? __pfx_do_sys_openat2+0x10/0x10
[  331.034506][T14496]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  331.034527][T14496]  __x64_sys_openat+0x12d/0x210
[  331.034538][T14496]  ? __pfx___x64_sys_openat+0x10/0x10
[  331.034556][T14496]  do_syscall_64+0x123/0x790
[  331.034569][T14496]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.034582][T14496] RIP: 0033:0x7fc89a15fd8e
[  331.034592][T14496] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  331.034603][T14496] RSP: 002b:00007fc89b065b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  331.034614][T14496] RAX: ffffffffffffffda RBX: 00007fc89b0666c0 RCX: 00007fc89a15fd8e
[  331.034621][T14496] RDX: 0000000000000002 RSI: 00007fc89b065c00 RDI: ffffffffffffff9c
[  331.034628][T14496] RBP: 00007fc89b065c00 R08: 0000000000000000 R09: 0000000000000000
[  331.034635][T14496] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  331.034642][T14496] R13: 00007fc89a426038 R14: 00007fc89a425fa0 R15: 00007ffccdd0e1f8
[  331.034657][T14496]  </TASK>
[  331.052865][ T1481] usb 12-1: new high-speed USB device number 6 using dummy_hcd
[  331.061854][T14498] syzkaller0: entered promiscuous mode
[  331.061866][T14498] syzkaller0: entered allmulticast mode
[  331.140320][    T9] usb usb11-port1: attempt power cycle
[  331.173106][T14502] kAFS: bad VL server IP address
[  331.221283][T14504] nbd: must specify at least one socket
[  331.247148][ T1481] usb 12-1: Using ep0 maxpacket: 32
[  331.247738][ T1481] usb 12-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  331.248799][ T1481] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  331.251596][ T1481] usb 12-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  331.251623][ T1481] usb 12-1: Product: syz
[  331.251637][ T1481] usb 12-1: Manufacturer: syz
[  331.251650][ T1481] usb 12-1: SerialNumber: syz
[  331.282264][ T1481] usb 12-1: config 0 descriptor??
[  331.283053][T14489] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  331.289838][ T1481] hub 12-1:0.0: bad descriptor, ignoring hub
[  331.289859][ T1481] hub 12-1:0.0: probe with driver hub failed with error -5
[  331.376336][T14510] MTD: Attempt to mount non-MTD device "/dev/sr0"
[  331.388087][T14510] romfs: unable to set blocksize
[  331.388087][T14510] 
[  331.486816][ T5797] Bluetooth: hci1: command tx timeout
[  331.544918][    T9] usb 11-1: new high-speed USB device number 8 using dummy_hcd
[  331.568138][    T9] usb 11-1: device descriptor read/8, error -71
[  331.595290][   T34] usb 12-1: USB disconnect, device number 6
[  331.717074][T14518] netlink: 'syz.2.2567': attribute type 10 has an invalid length.
[  331.718770][T14518] FAULT_INJECTION: forcing a failure.
[  331.718770][T14518] name failslab, interval 1, probability 0, space 0, times 0
[  331.718790][T14518] CPU: 3 UID: 0 PID: 14518 Comm: syz.2.2567 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  331.718808][T14518] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  331.718813][T14518] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  331.718820][T14518] Call Trace:
[  331.718825][T14518]  <TASK>
[  331.718830][T14518]  dump_stack_lvl+0x100/0x190
[  331.718850][T14518]  should_fail_ex.cold+0x5/0xa
[  331.718869][T14518]  should_failslab+0xc2/0x120
[  331.718885][T14518]  __kvmalloc_node_noprof+0x113/0x9b0
[  331.718899][T14518]  ? lockdep_init_map_type+0x5c/0x250
[  331.718914][T14518]  ? v4l2_ctrl_handler_init_class+0x201/0x350
[  331.718936][T14518]  v4l2_ctrl_handler_init_class+0x201/0x350
[  331.718960][T14518]  ? mutex_init_lockdep+0xf1/0x120
[  331.718976][T14518]  vicodec_open+0x18b/0xf70
[  331.718988][T14518]  ? kobject_get_unless_zero+0x156/0x200
[  331.719008][T14518]  v4l2_open+0x1d2/0x490
[  331.719020][T14518]  ? __pfx_v4l2_open+0x10/0x10
[  331.719031][T14518]  chrdev_open+0x234/0x6a0
[  331.719047][T14518]  ? __pfx_chrdev_open+0x10/0x10
[  331.719063][T14518]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  331.719079][T14518]  do_dentry_open+0x674/0x1470
[  331.719093][T14518]  ? __pfx_chrdev_open+0x10/0x10
[  331.719111][T14518]  vfs_open_consume+0xcc/0x460
[  331.719129][T14518]  path_openat+0x1547/0x23f0
[  331.719148][T14518]  ? __pfx_path_openat+0x10/0x10
[  331.719168][T14518]  do_file_open+0x20e/0x430
[  331.719185][T14518]  ? __pfx_do_file_open+0x10/0x10
[  331.719210][T14518]  ? _raw_spin_unlock+0x28/0x50
[  331.719225][T14518]  ? alloc_fd+0x471/0x7a0
[  331.719245][T14518]  do_sys_openat2+0x163/0x1d0
[  331.719256][T14518]  ? __pfx_do_sys_openat2+0x10/0x10
[  331.719272][T14518]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  331.719290][T14518]  __x64_sys_openat+0x12d/0x210
[  331.719301][T14518]  ? __pfx___x64_sys_openat+0x10/0x10
[  331.719317][T14518]  do_syscall_64+0x123/0x790
[  331.719328][T14518]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.719340][T14518] RIP: 0033:0x7fc89a15fd8e
[  331.719350][T14518] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  331.719360][T14518] RSP: 002b:00007fc89b065b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  331.719372][T14518] RAX: ffffffffffffffda RBX: 00007fc89b0666c0 RCX: 00007fc89a15fd8e
[  331.719379][T14518] RDX: 0000000000000002 RSI: 00007fc89b065c00 RDI: ffffffffffffff9c
[  331.719385][T14518] RBP: 00007fc89b065c00 R08: 0000000000000000 R09: 0000000000000000
[  331.719391][T14518] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  331.719398][T14518] R13: 00007fc89a426038 R14: 00007fc89a425fa0 R15: 00007ffccdd0e1f8
[  331.719413][T14518]  </TASK>
[  331.850267][T14524] nbd: must specify at least one socket
[  331.856382][    T9] usb 11-1: new high-speed USB device number 9 using dummy_hcd
[  331.878915][    T9] usb 11-1: device descriptor read/8, error -71
[  331.987095][    T9] usb usb11-port1: unable to enumerate USB device
[  332.040112][T14529] FAULT_INJECTION: forcing a failure.
[  332.040112][T14529] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  332.040213][T14529] CPU: 3 UID: 0 PID: 14529 Comm: syz.7.2572 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  332.040233][T14529] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  332.040239][T14529] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  332.040247][T14529] Call Trace:
[  332.040252][T14529]  <TASK>
[  332.040257][T14529]  dump_stack_lvl+0x100/0x190
[  332.040278][T14529]  should_fail_ex.cold+0x5/0xa
[  332.040294][T14529]  ? prepare_alloc_pages+0x16d/0x5b0
[  332.040312][T14529]  should_fail_alloc_page+0xeb/0x140
[  332.040329][T14529]  prepare_alloc_pages+0x1f0/0x5b0
[  332.040345][T14529]  ? __pfx_native_flush_tlb_one_user+0x10/0x10
[  332.040375][T14529]  __alloc_frozen_pages_noprof+0x1ee/0x3190
[  332.040392][T14529]  ? mark_held_locks+0x40/0x70
[  332.040408][T14529]  ? smp_call_function_many_cond+0x1458/0x18c0
[  332.040426][T14529]  ? lockdep_hardirqs_on+0x7d/0x110
[  332.040443][T14529]  ? __pfx_flush_tlb_func+0x10/0x10
[  332.040456][T14529]  ? smp_call_function_many_cond+0x944/0x18c0
[  332.040474][T14529]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  332.040489][T14529]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  332.040505][T14529]  ? __lock_acquire+0x5c0/0x1f40
[  332.040528][T14529]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  332.040546][T14529]  ? policy_nodemask+0xed/0x4f0
[  332.040563][T14529]  alloc_pages_mpol+0x201/0x560
[  332.040581][T14529]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  332.040595][T14529]  ? rcu_is_watching+0x13/0xc0
[  332.040609][T14529]  folio_alloc_mpol_noprof+0x36/0x260
[  332.040627][T14529]  vma_alloc_folio_noprof+0xed/0x1d0
[  332.040645][T14529]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  332.040662][T14529]  ? rcu_read_unlock+0x2d/0xb0
[  332.040677][T14529]  ? rcu_read_unlock+0x2d/0xb0
[  332.040693][T14529]  ? lock_acquire+0x1d1/0x380
[  332.040709][T14529]  do_wp_page+0xe11/0x45b0
[  332.040725][T14529]  ? __pfx___pte_offset_map+0x10/0x10
[  332.040738][T14529]  ? __pfx_do_wp_page+0x10/0x10
[  332.040753][T14529]  ? do_raw_spin_lock+0x128/0x260
[  332.040769][T14529]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  332.040784][T14529]  ? __pfx_pgd_none+0x10/0x10
[  332.040802][T14529]  __handle_mm_fault+0x1cd2/0x2f60
[  332.040822][T14529]  ? __pfx___handle_mm_fault+0x10/0x10
[  332.040837][T14529]  ? vm_normal_page+0x1d1/0x380
[  332.040849][T14529]  ? __pfx_vm_normal_page+0x10/0x10
[  332.040861][T14529]  ? find_held_lock+0x2b/0x80
[  332.040871][T14529]  ? find_held_lock+0x2b/0x80
[  332.040880][T14529]  ? follow_page_pte+0x479/0x1050
[  332.040901][T14529]  handle_mm_fault+0x363/0xa20
[  332.040931][T14529]  __get_user_pages+0x8a9/0x2c20
[  332.040949][T14529]  ? __pfx___get_user_pages+0x10/0x10
[  332.040964][T14529]  ? __pfx_down_read_killable+0x10/0x10
[  332.040978][T14529]  ? lock_acquire+0x1d1/0x380
[  332.040995][T14529]  __gup_longterm_locked+0x279/0x16f0
[  332.041014][T14529]  ? __pfx___gup_longterm_locked+0x10/0x10
[  332.041029][T14529]  ? __get_pfnblock_flags_mask+0x140/0x250
[  332.041046][T14529]  ? sanity_check_pinned_pages+0x4f2/0x8b0
[  332.041060][T14529]  gup_fast_fallback+0x1726/0x29d0
[  332.041086][T14529]  ? __pfx_gup_fast_fallback+0x10/0x10
[  332.041101][T14529]  ? rcu_is_watching+0x13/0xc0
[  332.041115][T14529]  pin_user_pages_fast+0xa7/0xf0
[  332.041128][T14529]  ? __pfx_pin_user_pages_fast+0x10/0x10
[  332.041142][T14529]  ? kasan_save_track+0x14/0x30
[  332.041155][T14529]  ? frame_vector_create+0x61/0x110
[  332.041171][T14529]  get_vaddr_frames+0x89/0x190
[  332.041187][T14529]  vb2_create_framevec+0x64/0xd0
[  332.041199][T14529]  vb2_vmalloc_get_userptr+0x137/0x510
[  332.041216][T14529]  ? __pfx_vb2_vmalloc_get_userptr+0x10/0x10
[  332.041231][T14529]  __prepare_userptr.constprop.0+0x3a7/0x1560
[  332.041267][T14529]  ? __pfx___prepare_userptr.constprop.0+0x10/0x10
[  332.041282][T14529]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  332.041317][T14529]  ? __kasan_slab_free+0x5f/0x80
[  332.041334][T14529]  ? lock_acquire+0x1d1/0x380
[  332.041347][T14529]  ? __video_do_ioctl+0x50f/0xdf0
[  332.041367][T14529]  __buf_prepare+0x352/0x790
[  332.041380][T14529]  ? vb2_queue_or_prepare_buf+0x593/0x21c0
[  332.041397][T14529]  vb2_core_qbuf+0xc4b/0x1340
[  332.041412][T14529]  ? __video_do_ioctl+0x50f/0xdf0
[  332.041432][T14529]  vb2_qbuf+0x246/0x340
[  332.041450][T14529]  ? __pfx_vb2_qbuf+0x10/0x10
[  332.041474][T14529]  v4l2_m2m_qbuf+0x150/0x890
[  332.041492][T14529]  ? check_fmt+0x230/0x900
[  332.041514][T14529]  v4l_qbuf+0x93/0xc0
[  332.041532][T14529]  __video_do_ioctl+0xb2a/0xdf0
[  332.041552][T14529]  ? __might_fault+0xc5/0x140
[  332.041568][T14529]  ? __pfx___video_do_ioctl+0x10/0x10
[  332.041590][T14529]  video_usercopy+0x47a/0x1730
[  332.041608][T14529]  ? __pfx___video_do_ioctl+0x10/0x10
[  332.041627][T14529]  ? __pfx_video_usercopy+0x10/0x10
[  332.041654][T14529]  v4l2_ioctl+0x1bd/0x250
[  332.041664][T14529]  ? __pfx_v4l2_ioctl+0x10/0x10
[  332.041676][T14529]  __x64_sys_ioctl+0x18e/0x210
[  332.041691][T14529]  do_syscall_64+0x123/0x790
[  332.041705][T14529]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.041716][T14529] RIP: 0033:0x7f6bd979f559
[  332.041727][T14529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  332.041737][T14529] RSP: 002b:00007f6bda729028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  332.041749][T14529] RAX: ffffffffffffffda RBX: 00007f6bd9a25fa0 RCX: 00007f6bd979f559
[  332.041756][T14529] RDX: 00002000000000c0 RSI: 00000000c058560f RDI: 0000000000000004
[  332.041764][T14529] RBP: 00007f6bd9836b20 R08: 0000000000000000 R09: 0000000000000000
[  332.041771][T14529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  332.041778][T14529] R13: 00007f6bd9a26038 R14: 00007f6bd9a25fa0 R15: 00007ffefddce418
[  332.041794][T14529]  </TASK>
[  332.404837][T14533] IPVS: rr: TCP 172.20.20.170:20000 - no destination available
[  332.516803][T14537] FAULT_INJECTION: forcing a failure.
[  332.516803][T14537] name failslab, interval 1, probability 0, space 0, times 0
[  332.516826][T14537] CPU: 0 UID: 0 PID: 14537 Comm: syz.1.2575 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  332.516843][T14537] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  332.516848][T14537] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  332.516855][T14537] Call Trace:
[  332.516861][T14537]  <TASK>
[  332.516866][T14537]  dump_stack_lvl+0x100/0x190
[  332.516886][T14537]  should_fail_ex.cold+0x5/0xa
[  332.516906][T14537]  should_failslab+0xc2/0x120
[  332.516923][T14537]  __kmalloc_cache_noprof+0x91/0x6d0
[  332.516934][T14537]  ? ptmx_open+0x11a/0x360
[  332.516948][T14537]  ? alloc_tty_struct+0x96/0x8e0
[  332.516960][T14537]  alloc_tty_struct+0x96/0x8e0
[  332.516971][T14537]  ? __pfx_alloc_tty_struct+0x10/0x10
[  332.516986][T14537]  tty_init_dev.part.0+0x20/0x470
[  332.516998][T14537]  tty_init_dev+0x60/0x80
[  332.517009][T14537]  ? __pfx_ptmx_open+0x10/0x10
[  332.517021][T14537]  ptmx_open+0x128/0x360
[  332.517036][T14537]  ? __pfx_ptmx_open+0x10/0x10
[  332.517051][T14537]  chrdev_open+0x234/0x6a0
[  332.517069][T14537]  ? __pfx_chrdev_open+0x10/0x10
[  332.517086][T14537]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  332.517102][T14537]  do_dentry_open+0x674/0x1470
[  332.517116][T14537]  ? __pfx_chrdev_open+0x10/0x10
[  332.517134][T14537]  vfs_open_consume+0xcc/0x460
[  332.517152][T14537]  path_openat+0x1547/0x23f0
[  332.517188][T14537]  ? __pfx_path_openat+0x10/0x10
[  332.517210][T14537]  do_file_open+0x20e/0x430
[  332.517228][T14537]  ? __pfx_do_file_open+0x10/0x10
[  332.517257][T14537]  ? _raw_spin_unlock+0x28/0x50
[  332.517273][T14537]  ? alloc_fd+0x471/0x7a0
[  332.517293][T14537]  do_sys_openat2+0x163/0x1d0
[  332.517304][T14537]  ? __pfx_do_sys_openat2+0x10/0x10
[  332.517321][T14537]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  332.517337][T14537]  __x64_sys_openat+0x12d/0x210
[  332.517348][T14537]  ? __pfx___x64_sys_openat+0x10/0x10
[  332.517357][T14537]  ? ksys_write+0x1ac/0x250
[  332.517376][T14537]  do_syscall_64+0x123/0x790
[  332.517389][T14537]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.517401][T14537] RIP: 0033:0x7feaf9b9f559
[  332.517410][T14537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  332.517421][T14537] RSP: 002b:00007feafa97e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  332.517432][T14537] RAX: ffffffffffffffda RBX: 00007feaf9e26090 RCX: 00007feaf9b9f559
[  332.517439][T14537] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffff9c
[  332.517446][T14537] RBP: 00007feaf9c36b20 R08: 0000000000000000 R09: 0000000000000000
[  332.517453][T14537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  332.517459][T14537] R13: 00007feaf9e26128 R14: 00007feaf9e26090 R15: 00007fff3cf9b0a8
[  332.517474][T14537]  </TASK>
[  332.702207][T14542] netlink: 'syz.7.2577': attribute type 10 has an invalid length.
[  332.703726][T14542] FAULT_INJECTION: forcing a failure.
[  332.703726][T14542] name failslab, interval 1, probability 0, space 0, times 0
[  332.703748][T14542] CPU: 2 UID: 0 PID: 14542 Comm: syz.7.2577 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  332.703766][T14542] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  332.703771][T14542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  332.703779][T14542] Call Trace:
[  332.703783][T14542]  <TASK>
[  332.703788][T14542]  dump_stack_lvl+0x100/0x190
[  332.703809][T14542]  should_fail_ex.cold+0x5/0xa
[  332.703826][T14542]  should_failslab+0xc2/0x120
[  332.703842][T14542]  __kvmalloc_node_noprof+0x113/0x9b0
[  332.703856][T14542]  ? lockdep_init_map_type+0x5c/0x250
[  332.703871][T14542]  ? v4l2_ctrl_handler_init_class+0x201/0x350
[  332.703931][T14542]  v4l2_ctrl_handler_init_class+0x201/0x350
[  332.703950][T14542]  ? mutex_init_lockdep+0xf1/0x120
[  332.703967][T14542]  vicodec_open+0x18b/0xf70
[  332.703980][T14542]  ? kobject_get_unless_zero+0x156/0x200
[  332.703997][T14542]  v4l2_open+0x1d2/0x490
[  332.704009][T14542]  ? __pfx_v4l2_open+0x10/0x10
[  332.704020][T14542]  chrdev_open+0x234/0x6a0
[  332.704036][T14542]  ? __pfx_chrdev_open+0x10/0x10
[  332.704052][T14542]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  332.704068][T14542]  do_dentry_open+0x674/0x1470
[  332.704082][T14542]  ? __pfx_chrdev_open+0x10/0x10
[  332.704101][T14542]  vfs_open_consume+0xcc/0x460
[  332.704120][T14542]  path_openat+0x1547/0x23f0
[  332.704138][T14542]  ? __pfx_path_openat+0x10/0x10
[  332.704158][T14542]  do_file_open+0x20e/0x430
[  332.704174][T14542]  ? __pfx_do_file_open+0x10/0x10
[  332.704200][T14542]  ? _raw_spin_unlock+0x28/0x50
[  332.704215][T14542]  ? alloc_fd+0x471/0x7a0
[  332.704234][T14542]  do_sys_openat2+0x163/0x1d0
[  332.704245][T14542]  ? __pfx_do_sys_openat2+0x10/0x10
[  332.704261][T14542]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  332.704279][T14542]  __x64_sys_openat+0x12d/0x210
[  332.704289][T14542]  ? __pfx___x64_sys_openat+0x10/0x10
[  332.704306][T14542]  do_syscall_64+0x123/0x790
[  332.704317][T14542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.704329][T14542] RIP: 0033:0x7f6bd975fd8e
[  332.704339][T14542] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  332.704350][T14542] RSP: 002b:00007f6bda728b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  332.704361][T14542] RAX: ffffffffffffffda RBX: 00007f6bda7296c0 RCX: 00007f6bd975fd8e
[  332.704368][T14542] RDX: 0000000000000002 RSI: 00007f6bda728c00 RDI: ffffffffffffff9c
[  332.704375][T14542] RBP: 00007f6bda728c00 R08: 0000000000000000 R09: 0000000000000000
[  332.704382][T14542] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  332.704388][T14542] R13: 00007f6bd9a26038 R14: 00007f6bd9a25fa0 R15: 00007ffefddce418
[  332.704403][T14542]  </TASK>
[  332.779502][T14546] nbd: must specify at least one socket
[  332.807520][    C2] sr 2:0:0:0: [sr0] tag#31 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  332.807549][    C2] sr 2:0:0:0: [sr0] tag#31 CDB: opcode=0x95 95 91 d6 85 c2 d3
[  333.021848][   T42] audit: type=1400 audit(3586355767.451:23408): avc:  denied  { getopt } for  pid=14559 comm="syz.2.2585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  333.064468][T14564] netlink: 'syz.2.2587': attribute type 10 has an invalid length.
[  333.067207][T14564] FAULT_INJECTION: forcing a failure.
[  333.067207][T14564] name failslab, interval 1, probability 0, space 0, times 0
[  333.067229][T14564] CPU: 2 UID: 0 PID: 14564 Comm: syz.2.2587 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  333.067246][T14564] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  333.067251][T14564] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  333.067258][T14564] Call Trace:
[  333.067263][T14564]  <TASK>
[  333.067268][T14564]  dump_stack_lvl+0x100/0x190
[  333.067288][T14564]  should_fail_ex.cold+0x5/0xa
[  333.067307][T14564]  should_failslab+0xc2/0x120
[  333.067323][T14564]  __kvmalloc_node_noprof+0x113/0x9b0
[  333.067337][T14564]  ? lockdep_init_map_type+0x5c/0x250
[  333.067352][T14564]  ? v4l2_ctrl_handler_init_class+0x201/0x350
[  333.067374][T14564]  v4l2_ctrl_handler_init_class+0x201/0x350
[  333.067391][T14564]  ? mutex_init_lockdep+0xf1/0x120
[  333.067406][T14564]  vicodec_open+0x18b/0xf70
[  333.067419][T14564]  ? kobject_get_unless_zero+0x156/0x200
[  333.067437][T14564]  v4l2_open+0x1d2/0x490
[  333.067449][T14564]  ? __pfx_v4l2_open+0x10/0x10
[  333.067460][T14564]  chrdev_open+0x234/0x6a0
[  333.067476][T14564]  ? __pfx_chrdev_open+0x10/0x10
[  333.067492][T14564]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  333.067508][T14564]  do_dentry_open+0x674/0x1470
[  333.067522][T14564]  ? __pfx_chrdev_open+0x10/0x10
[  333.067540][T14564]  vfs_open_consume+0xcc/0x460
[  333.067565][T14564]  path_openat+0x1547/0x23f0
[  333.067585][T14564]  ? __pfx_path_openat+0x10/0x10
[  333.067606][T14564]  do_file_open+0x20e/0x430
[  333.067639][T14564]  ? __pfx_do_file_open+0x10/0x10
[  333.067669][T14564]  ? _raw_spin_unlock+0x28/0x50
[  333.067685][T14564]  ? alloc_fd+0x471/0x7a0
[  333.067708][T14564]  do_sys_openat2+0x163/0x1d0
[  333.067721][T14564]  ? __pfx_do_sys_openat2+0x10/0x10
[  333.067737][T14564]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  333.067756][T14564]  __x64_sys_openat+0x12d/0x210
[  333.067767][T14564]  ? __pfx___x64_sys_openat+0x10/0x10
[  333.067784][T14564]  do_syscall_64+0x123/0x790
[  333.067796][T14564]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.067808][T14564] RIP: 0033:0x7fc89a15fd8e
[  333.067818][T14564] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  333.067828][T14564] RSP: 002b:00007fc89b065b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  333.067840][T14564] RAX: ffffffffffffffda RBX: 00007fc89b0666c0 RCX: 00007fc89a15fd8e
[  333.067847][T14564] RDX: 0000000000000002 RSI: 00007fc89b065c00 RDI: ffffffffffffff9c
[  333.067854][T14564] RBP: 00007fc89b065c00 R08: 0000000000000000 R09: 0000000000000000
[  333.067861][T14564] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  333.067867][T14564] R13: 00007fc89a426038 R14: 00007fc89a425fa0 R15: 00007ffccdd0e1f8
[  333.067902][T14564]  </TASK>
[  333.119993][T14566] nbd: must specify at least one socket
[  333.180935][T14570] sg_write: data in/out 8192/1 bytes for SCSI command 0x2-- guessing data in;
[  333.180935][T14570]    program syz.7.2590 not setting count and/or reply_len properly
[  333.285684][T14570] Console: switching to colour dummy device 80x25
[  333.415330][T14573] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint
[  333.421824][T14573] pci 0000:00:01.0: BAR 0 [mem 0x00000000-0x007fffff pref]
[  333.421965][T14573] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]
[  333.422021][T14573] pci 0000:00:01.0: BAR 4 [mem 0xfeaf6000-0xfeaf6fff]
[  333.422115][T14573] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  333.423852][T14573] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  333.443794][T14573] pci 0000:00:01.0: Adding to iommu group 1
[  333.448987][T14573] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  333.449002][T14573] pci 0000:00:01.0: vgaarb: bridge control possible
[  333.449010][T14573] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=mem,locks=none
[  333.457856][T14573] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned
[  333.458435][T14573] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned
[  333.470164][T14573] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned
[  333.555370][T14585] syzkaller0: entered promiscuous mode
[  333.555384][T14585] syzkaller0: entered allmulticast mode
[  333.585466][T14573] [drm] pci: virtio-vga detected at 0000:00:01.0
[  333.585605][T14573] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console
[  333.586654][T14573] [drm] features: -virgl +edid -resource_blob -host_visible
[  333.586663][T14573] [drm] features: -context_init -blob_alignment
[  333.602931][T14573] ------------[ cut here ]------------
[  333.602941][T14573] kmem_cache of name 'virtio-gpu-vbufs' already exists
[  333.602948][T14573] WARNING: mm/slab_common.c:111 at __kmem_cache_create_args+0xab/0x440, CPU#3: syz.7.2590/14573
[  333.610304][T14573] Modules linked in:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  333.611674][T14573] CPU: 3 UID: 0 PID: 14573 Comm: syz.7.2590 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  333.614082][   T42] audit: type=1400 audit(3586355768.028:23409): avc:  denied  { write } for  pid=5699 comm="syz-executor" path="pipe:[2678]" dev="pipefs" ino=2678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  333.622577][T14573] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  333.624503][T14573] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  333.627636][T14573] RIP: 0010:__kmem_cache_create_args+0xae/0x440
[  333.629610][T14573] Code: 48 8b 43 60 48 8d 58 a0 48 3d d0 4a 1a 90 74 1f 48 8b 7b 58 48 89 ee e8 e0 8e 7d 09 85 c0 75 e0 48 8d 3d 25 23 09 10 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 60 90 7d 09 48 85 c0 0f
[  333.635631][T14573] RSP: 0018:ffffc900053fef18 EFLAGS: 00010246
[  333.637546][T14573] RAX: 0000000000000000 RBX: ffff888100074640 RCX: fffff52000a7fdbe
[  333.640005][T14573] RDX: 0000000000000000 RSI: ffffffff8cb2a9c0 RDI: ffffffff926d8310
[  333.642565][T14573] RBP: ffffffff8cb2a9c0 R08: 0000000000000000 R09: fffffbfff24d1e0b
[  333.645339][T14573] R10: ffffc900053fef18 R11: 0000000000000001 R12: 0000000000000000
[  333.647798][T14573] R13: ffffc900053fef88 R14: 00000000000000d8 R15: ffff888042fd5cce
[  333.650255][T14573] FS:  00007f6bda7086c0(0000) GS:ffff8880d47b4000(0000) knlGS:0000000000000000
[  333.653051][T14573] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  333.655294][T14573] CR2: 00007feaf9becc40 CR3: 0000000036eda000 CR4: 0000000000352ef0
[  333.657805][T14573] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 8000000000000001
[  333.660325][T14573] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  333.663467][T14573] Call Trace:
[  333.664808][T14573]  <TASK>
[  333.665757][T14573]  virtio_gpu_alloc_vbufs+0xc2/0x150
[  333.667441][T14573]  ? __pfx__printk+0x10/0x10
[  333.668946][T14573]  ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10
[  333.670794][T14573]  ? lockdep_init_map_type+0x5c/0x250
[  333.671670][   T42] audit: type=1400 audit(3586355768.088:23410): avc:  denied  { append } for  pid=14586 comm="syz.2.2596" name="loop6" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  333.680534][T14573]  virtio_gpu_init.cold+0x40d/0x127f
[  333.682270][T14573]  ? vga_remove_vgacon.cold+0x1d/0x99
[  333.684187][T14573]  ? __pfx_virtio_gpu_init+0x10/0x10
[  333.684927][T14588] loop6: detected capacity change from 0 to 1
[  333.687757][T14573]  ? is_console_locked+0x9/0x20
[  333.689289][T14573]  ? con_is_bound+0x141/0x190
[  333.690788][T14573]  ? vga_remove_vgacon+0x21/0x30
[  333.692440][T14573]  ? aperture_remove_conflicting_pci_devices+0x138/0x1e0
[  333.694670][T14573]  virtio_gpu_probe+0x21c/0x360
[  333.696232][T14573]  virtio_dev_probe+0x72a/0xd30
[  333.697777][T14573]  ? __pfx_virtio_dev_probe+0x10/0x10
[  333.699467][T14573]  ? kernfs_put+0x3f/0x60
[  333.700848][T14573]  ? sysfs_do_create_link_sd+0xbb/0x140
[  333.702731][T14573]  ? sysfs_create_link+0x68/0xc0
[  333.704433][T14573]  ? __pfx_virtio_dev_probe+0x10/0x10
[  333.706159][T14573]  really_probe+0x241/0xa60
[  333.707591][T14573]  __driver_probe_device+0x210/0x460
[  333.709267][T14573]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  333.711118][T14573]  driver_probe_device+0x4a/0x140
[  333.712905][T14573]  __device_attach_driver+0x1df/0x320
[  333.715200][T14573]  ? __pfx___device_attach_driver+0x10/0x10
[  333.717711][T14573]  bus_for_each_drv+0x159/0x1e0
[  333.719790][T14573]  ? __pfx_bus_for_each_drv+0x10/0x10
[  333.722077][T14573]  ? lockdep_hardirqs_on+0x7d/0x110
[  333.724370][T14573]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  333.726873][T14573]  __device_attach+0x1e4/0x4d0
[  333.728926][T14573]  ? __pfx___device_attach+0x10/0x10
[  333.731169][T14573]  ? do_raw_spin_unlock+0x145/0x1e0
[  333.733389][T14573]  device_initial_probe+0xaf/0xd0
[  333.735722][T14573]  bus_probe_device+0x64/0x160
[  333.737944][T14573]  device_add+0x121d/0x1970
[  333.739917][T14573]  ? __pfx_device_add+0x10/0x10
[  333.741997][T14573]  ? __pfx___might_resched+0x10/0x10
[  333.744329][T14573]  ? lockdep_init_map_type+0x5c/0x250
[  333.746612][T14573]  ? vp_synchronize_vectors+0x121/0x1f0
[  333.748968][T14573]  ? __pfx_vp_set_status+0x10/0x10
[  333.751145][T14573]  register_virtio_device+0x661/0x7c0
[  333.753417][T14573]  ? __pfx_register_virtio_device+0x10/0x10
[  333.756068][T14573]  ? __pfx_pcibios_set_master+0x10/0x10
[  333.758465][T14573]  ? __raw_spin_lock_init+0x3a/0x110
[  333.760729][T14573]  ? __pfx_virtio_pci_probe+0x10/0x10
[  333.762995][T14573]  virtio_pci_probe+0x255/0x410
[  333.766306][T14573]  local_pci_probe+0xdd/0x1b0
[  333.768355][T14573]  pci_call_probe+0x176/0x800
[  333.770374][T14573]  ? pci_match_device+0x147/0x7d0
[  333.802930][T14573]  ? __pfx_pci_call_probe+0x10/0x10
[  333.804713][T14573]  ? __pfx_pci_match_device+0x10/0x10
[  333.806423][T14573]  ? pci_find_host_bridge+0x3c/0x80
[  333.806619][T14588] Dev loop6: unable to read RDB block 1
[  333.806642][T14588]  loop6: unable to read partition table
[  333.806746][T14588] loop6: partition table beyond EOD, truncated
[  333.806756][T14588] loop_reread_partitions: partition scan of loop6 (��������6�tPΪŔ���A���8�*V^��3c) failed (rc=-5)
[  333.817569][T14573]  pci_device_probe+0x25b/0x400
[  333.819127][T14573]  ? __pfx_pci_device_probe+0x10/0x10
[  333.820819][T14573]  ? sysfs_create_link+0x68/0xc0
[  333.822457][T14573]  ? __pfx_pci_device_probe+0x10/0x10
[  333.824165][T14573]  really_probe+0x241/0xa60
[  333.825735][T14573]  __driver_probe_device+0x210/0x460
[  333.827391][T14573]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  333.829243][T14573]  driver_probe_device+0x4a/0x140
[  333.830838][T14573]  __device_attach_driver+0x1df/0x320
[  333.832581][T14573]  ? __pfx___device_attach_driver+0x10/0x10
[  333.834489][T14573]  bus_for_each_drv+0x159/0x1e0
[  333.836157][T14573]  ? __pfx_bus_for_each_drv+0x10/0x10
[  333.837847][T14573]  ? lockdep_hardirqs_on+0x7d/0x110
[  333.839484][T14573]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  333.841323][T14573]  __device_attach+0x1e4/0x4d0
[  333.843067][T14573]  ? __pfx___device_attach+0x10/0x10
[  333.845427][T14573]  ? do_raw_spin_unlock+0x145/0x1e0
[  333.847078][T14573]  device_initial_probe+0xaf/0xd0
[  333.848722][T14573]  pci_bus_add_device+0xc5/0x100
[  333.850284][T14573]  pci_bus_add_devices+0x9a/0x1f0
[  333.851892][T14573]  pci_rescan_bus+0x2a/0x40
[  333.853368][T14573]  rescan_store+0xfb/0x130
[  333.854853][T14573]  ? __pfx_rescan_store+0x10/0x10
[  333.856450][T14573]  ? sysfs_file_kobj+0xe4/0x290
[  333.857943][T14573]  ? __pfx_rescan_store+0x10/0x10
[  333.859600][T14573]  bus_attr_store+0x74/0xb0
[  333.861061][T14573]  ? __pfx_bus_attr_store+0x10/0x10
[  333.862736][T14573]  sysfs_kf_write+0xf2/0x150
[  333.864261][T14573]  kernfs_fop_write_iter+0x3e0/0x5f0
[  333.866101][T14573]  ? __pfx_sysfs_kf_write+0x10/0x10
[  333.868068][T14573]  vfs_write+0x6af/0x1050
[  333.869436][T14573]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  333.871265][T14573]  ? __pfx_vfs_write+0x10/0x10
[  333.872848][T14573]  ? find_held_lock+0x2b/0x80
[  333.874343][T14573]  ksys_write+0x12a/0x250
[  333.876041][T14573]  ? __pfx_ksys_write+0x10/0x10
[  333.877585][T14573]  do_syscall_64+0x123/0x790
[  333.879040][T14573]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.880907][T14573] RIP: 0033:0x7f6bd979f559
[  333.882342][T14573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  333.888434][T14573] RSP: 002b:00007f6bda708028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  333.891033][T14573] RAX: ffffffffffffffda RBX: 00007f6bd9a26090 RCX: 00007f6bd979f559
[  333.893533][T14573] RDX: 0000000000000001 RSI: 0000200000000a00 RDI: 0000000000000009
[  333.896084][T14573] RBP: 00007f6bd9836b20 R08: 0000000000000000 R09: 0000000000000000
[  333.898742][T14573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  333.901224][T14573] R13: 00007f6bd9a26128 R14: 00007f6bd9a26090 R15: 00007ffefddce418
[  333.903736][T14573]  </TASK>
[  333.904842][T14573] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  333.907100][T14573] CPU: 3 UID: 0 PID: 14573 Comm: syz.7.2590 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  333.910473][T14573] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  333.912342][T14573] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  333.915499][T14573] Call Trace:
[  333.916564][T14573]  <TASK>
[  333.917501][T14573]  dump_stack_lvl+0x100/0x190
[  333.918999][T14573]  vpanic+0x553/0x970
[  333.920272][T14573]  ? __pfx_vpanic+0x10/0x10
[  333.921725][T14573]  panic+0xd1/0xe0
[  333.923184][T14573]  ? __pfx_panic+0x10/0x10
[  333.924898][T14573]  check_panic_on_warn.cold+0x19/0x34
[  333.926555][T14573]  ? __kmem_cache_create_args+0xab/0x440
[  333.928400][T14573]  __warn.cold+0x191/0x318
[  333.929813][T14573]  __report_bug+0x30f/0x440
[  333.931244][T14573]  ? __kmem_cache_create_args+0xab/0x440
[  333.933036][T14573]  ? __pfx___report_bug+0x10/0x10
[  333.934615][T14573]  ? __mutex_lock+0x267/0x1c10
[  333.936165][T14573]  ? __kmem_cache_create_args+0x44/0x440
[  333.937930][T14573]  report_bug_entry+0xe2/0x290
[  333.939435][T14573]  ? __kmem_cache_create_args+0xae/0x440
[  333.941249][T14573]  handle_bug+0x1cd/0x2a0
[  333.942639][T14573]  exc_invalid_op+0x17/0x50
[  333.944080][T14573]  asm_exc_invalid_op+0x1a/0x20
[  333.945627][T14573] RIP: 0010:__kmem_cache_create_args+0xae/0x440
[  333.947567][T14573] Code: 48 8b 43 60 48 8d 58 a0 48 3d d0 4a 1a 90 74 1f 48 8b 7b 58 48 89 ee e8 e0 8e 7d 09 85 c0 75 e0 48 8d 3d 25 23 09 10 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 60 90 7d 09 48 85 c0 0f
[  333.953525][T14573] RSP: 0018:ffffc900053fef18 EFLAGS: 00010246
[  333.955429][T14573] RAX: 0000000000000000 RBX: ffff888100074640 RCX: fffff52000a7fdbe
[  333.957888][T14573] RDX: 0000000000000000 RSI: ffffffff8cb2a9c0 RDI: ffffffff926d8310
[  333.960342][T14573] RBP: ffffffff8cb2a9c0 R08: 0000000000000000 R09: fffffbfff24d1e0b
[  333.962844][T14573] R10: ffffc900053fef18 R11: 0000000000000001 R12: 0000000000000000
[  333.965307][T14573] R13: ffffc900053fef88 R14: 00000000000000d8 R15: ffff888042fd5cce
[  333.967764][T14573]  ? __kmem_cache_create_args+0xa0/0x440
[  333.969522][T14573]  virtio_gpu_alloc_vbufs+0xc2/0x150
[  333.971172][T14573]  ? __pfx__printk+0x10/0x10
[  333.972632][T14573]  ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10
[  333.974535][T14573]  ? lockdep_init_map_type+0x5c/0x250
[  333.976304][T14573]  virtio_gpu_init.cold+0x40d/0x127f
[  333.977972][T14573]  ? vga_remove_vgacon.cold+0x1d/0x99
[  333.979660][T14573]  ? __pfx_virtio_gpu_init+0x10/0x10
[  333.981326][T14573]  ? is_console_locked+0x9/0x20
[  333.982891][T14573]  ? con_is_bound+0x141/0x190
[  333.984397][T14573]  ? vga_remove_vgacon+0x21/0x30
[  333.985976][T14573]  ? aperture_remove_conflicting_pci_devices+0x138/0x1e0
[  333.988155][T14573]  virtio_gpu_probe+0x21c/0x360
[  333.989685][T14573]  virtio_dev_probe+0x72a/0xd30
[  333.991223][T14573]  ? __pfx_virtio_dev_probe+0x10/0x10
[  333.992911][T14573]  ? kernfs_put+0x3f/0x60
[  333.994271][T14573]  ? sysfs_do_create_link_sd+0xbb/0x140
[  333.996022][T14573]  ? sysfs_create_link+0x68/0xc0
[  333.997581][T14573]  ? __pfx_virtio_dev_probe+0x10/0x10
[  333.999481][T14573]  really_probe+0x241/0xa60
[  334.000937][T14573]  __driver_probe_device+0x210/0x460
[  334.002618][T14573]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  334.004452][T14573]  driver_probe_device+0x4a/0x140
[  334.006052][T14573]  __device_attach_driver+0x1df/0x320
[  334.007737][T14573]  ? __pfx___device_attach_driver+0x10/0x10
[  334.009605][T14573]  bus_for_each_drv+0x159/0x1e0
[  334.011144][T14573]  ? __pfx_bus_for_each_drv+0x10/0x10
[  334.013040][T14573]  ? lockdep_hardirqs_on+0x7d/0x110
[  334.014742][T14573]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  334.016590][T14573]  __device_attach+0x1e4/0x4d0
[  334.018089][T14573]  ? __pfx___device_attach+0x10/0x10
[  334.019755][T14573]  ? do_raw_spin_unlock+0x145/0x1e0
[  334.021390][T14573]  device_initial_probe+0xaf/0xd0
[  334.023001][T14573]  bus_probe_device+0x64/0x160
[  334.024513][T14573]  device_add+0x121d/0x1970
[  334.025948][T14573]  ? __pfx_device_add+0x10/0x10
[  334.027476][T14573]  ? __pfx___might_resched+0x10/0x10
[  334.029142][T14573]  ? lockdep_init_map_type+0x5c/0x250
[  334.030821][T14573]  ? vp_synchronize_vectors+0x121/0x1f0
[  334.032559][T14573]  ? __pfx_vp_set_status+0x10/0x10
[  334.034169][T14573]  register_virtio_device+0x661/0x7c0
[  334.035891][T14573]  ? __pfx_register_virtio_device+0x10/0x10
[  334.037733][T14573]  ? __pfx_pcibios_set_master+0x10/0x10
[  334.039463][T14573]  ? __raw_spin_lock_init+0x3a/0x110
[  334.041138][T14573]  ? __pfx_virtio_pci_probe+0x10/0x10
[  334.042825][T14573]  virtio_pci_probe+0x255/0x410
[  334.044362][T14573]  local_pci_probe+0xdd/0x1b0
[  334.045854][T14573]  pci_call_probe+0x176/0x800
[  334.047376][T14573]  ? pci_match_device+0x147/0x7d0
[  334.048980][T14573]  ? __pfx_pci_call_probe+0x10/0x10
[  334.050621][T14573]  ? __pfx_pci_match_device+0x10/0x10
[  334.052311][T14573]  ? pci_find_host_bridge+0x3c/0x80
[  334.053955][T14573]  pci_device_probe+0x25b/0x400
[  334.055513][T14573]  ? __pfx_pci_device_probe+0x10/0x10
[  334.057208][T14573]  ? sysfs_create_link+0x68/0xc0
[  334.058766][T14573]  ? __pfx_pci_device_probe+0x10/0x10
[  334.060448][T14573]  really_probe+0x241/0xa60
[  334.061891][T14573]  __driver_probe_device+0x210/0x460
[  334.063545][T14573]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  334.065387][T14573]  driver_probe_device+0x4a/0x140
[  334.066965][T14573]  __device_attach_driver+0x1df/0x320
[  334.068652][T14573]  ? __pfx___device_attach_driver+0x10/0x10
[  334.070497][T14573]  bus_for_each_drv+0x159/0x1e0
[  334.072049][T14573]  ? __pfx_bus_for_each_drv+0x10/0x10
[  334.073731][T14573]  ? lockdep_hardirqs_on+0x7d/0x110
[  334.075375][T14573]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  334.077214][T14573]  __device_attach+0x1e4/0x4d0
[  334.078714][T14573]  ? __pfx___device_attach+0x10/0x10
[  334.080368][T14573]  ? do_raw_spin_unlock+0x145/0x1e0
[  334.082003][T14573]  device_initial_probe+0xaf/0xd0
[  334.083678][T14573]  pci_bus_add_device+0xc5/0x100
[  334.085267][T14573]  pci_bus_add_devices+0x9a/0x1f0
[  334.086846][T14573]  pci_rescan_bus+0x2a/0x40
[  334.088276][T14573]  rescan_store+0xfb/0x130
[  334.089679][T14573]  ? __pfx_rescan_store+0x10/0x10
[  334.091252][T14573]  ? sysfs_file_kobj+0xe4/0x290
[  334.092819][T14573]  ? __pfx_rescan_store+0x10/0x10
[  334.094391][T14573]  bus_attr_store+0x74/0xb0
[  334.095843][T14573]  ? __pfx_bus_attr_store+0x10/0x10
[  334.097473][T14573]  sysfs_kf_write+0xf2/0x150
[  334.098934][T14573]  kernfs_fop_write_iter+0x3e0/0x5f0
[  334.100600][T14573]  ? __pfx_sysfs_kf_write+0x10/0x10
[  334.102454][T14573]  vfs_write+0x6af/0x1050
[  334.103818][T14573]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  334.105675][T14573]  ? __pfx_vfs_write+0x10/0x10
[  334.107177][T14573]  ? find_held_lock+0x2b/0x80
[  334.108667][T14573]  ksys_write+0x12a/0x250
[  334.110021][T14573]  ? __pfx_ksys_write+0x10/0x10
[  334.111551][T14573]  do_syscall_64+0x123/0x790
[  334.113068][T14573]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.114926][T14573] RIP: 0033:0x7f6bd979f559
[  334.116351][T14573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  334.122298][T14573] RSP: 002b:00007f6bda708028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  334.125098][T14573] RAX: ffffffffffffffda RBX: 00007f6bd9a26090 RCX: 00007f6bd979f559
[  334.127536][T14573] RDX: 0000000000000001 RSI: 0000200000000a00 RDI: 0000000000000009
[  334.129991][T14573] RBP: 00007f6bd9836b20 R08: 0000000000000000 R09: 0000000000000000
[  334.132524][T14573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  334.134990][T14573] R13: 00007f6bd9a26128 R14: 00007f6bd9a26090 R15: 00007ffefddce418
[  334.137468][T14573]  </TASK>
[  334.138993][T14573] Kernel Offset: disabled
[  334.140402][T14573] Rebooting in 86400 seconds..