last executing test programs:

8.116558113s ago: executing program 1 (id=485):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x3}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0xd4, 0x2, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x7c, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xfd25cf1957367a5f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0x44)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r2, 0x10c, 0xf, &(0x7f0000001580)=0x9ad, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b160000000000000000020000082400048020000180080001006f73660014000280080001400000000408000340000000010900010073797a300000000009008d86c8d34ac91ea50000140000001100010000000000000000000000000a"], 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)

7.862866951s ago: executing program 1 (id=487):
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0x2, 0xfa11, 0x65aa}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
syz_io_uring_setup(0x3af2, &(0x7f00000000c0)={0x0, 0xa5f5, 0x80, 0x2, 0x131}, &(0x7f0000000140), 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
socket(0x10, 0x3, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0})
syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800)
socket$kcm(0x10, 0x2, 0x4)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000100)=0x2000004)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140))
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaa"], 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r5, 0xae9a)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2005c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2000000002, 0xffffffffffffffff], 0x0, 0x10280})

6.769711097s ago: executing program 1 (id=489):
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000006000000080000000800000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="338400"/28], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0xb, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000680), 0xffffffffffffff9e)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xa00, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)={0x114, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x102, 0x4e, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@empty}, @generic="2a725624d55e18f54ca5798d3fe7955ef9868c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce978006451bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4dc38a9d937e23023ab86a8ce5f7a6d9772d2c9b91825cd6f77be8203cbe17d83dbb0590b1ef553211edef00ead1ebbe1b58e5b323435a913a2e5ce557c4ec021c723d2022c694102308a8fb6114ab4d007089b6a2816f689a565d4e70637725b2ff732144f7ad7c1b9d", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0)

5.974929465s ago: executing program 2 (id=491):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$inet_int(r2, 0x0, 0x22, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

5.795039104s ago: executing program 1 (id=492):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRES64=0x0], 0x6c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4008070)
socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4})
r2 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000040), 0x2103, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000140))
r3 = epoll_create1(0x80000)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000140)={0xe000200c})
socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x29, 0x2, 0x0)
timer_create(0x6, &(0x7f00000000c0)={0x0, 0x21, 0x1}, &(0x7f00000001c0))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0xc1, 0x5, 0xffffffffffffffff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5})
preadv(r5, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000240)={0x2, 0x0, 0x3, 0x2, 0x4})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c001fbce2297390e322f97e5eb486e1ac6a702df680198e00000000000000199b802b7d591d3a105eb3e70c55240dc600491d03dd4c5fccd988eb2095e19a4689d3a21d25a5867639f3030015f13353eac7bc"])
socket$inet_udp(0x2, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

5.725181452s ago: executing program 2 (id=493):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], 0x0}, 0x94)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
close(0xffffffffffffffff)
socket(0x400000000010, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x34}}, 0x400c010)
write$binfmt_misc(r4, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}})
ioctl$XFS_IOC_SCRUBV_METADATA(r1, 0xc0285840, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0)
r7 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r7, 0xc0305602, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1})
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r8, 0xffffffffffffffff, 0x0)

4.729927232s ago: executing program 0 (id=498):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x1)
r1 = syz_io_uring_setup(0x3ec3, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
listen(0xffffffffffffffff, 0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
socket$key(0xf, 0x3, 0x2)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, 0x0, 0x0)
ioctl$TCSETSF2(r0, 0x8910, 0x0)

3.864999756s ago: executing program 1 (id=499):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0)
io_pgetevents(0x0, 0xe9, 0x0, 0x0, 0x0, 0xffffffffffffffff)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
syz_emit_ethernet(0x26a, &(0x7f0000000a00)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x234, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @mlv2_report={0x8f, 0x0, 0x0, 0x0, 0x6, [{0x40, 0x4, 0x5, @empty, [@private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x25}, @local, @rand_addr=' \x01\x00'], [0x5, 0xd2, 0x4, 0x4]}, {0x1, 0x2, 0x3, @private1, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xf}], [0x8ff, 0xd]}, {0x6, 0x5, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'], [0x9, 0x7f, 0x4, 0xfffffffd, 0xc]}, {0xc, 0x3, 0x3, @mcast1, [@loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @private2], [0x7, 0xffffffc0, 0x0]}, {0x77, 0x8, 0x8, @private0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x24}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}], [0x80, 0x4, 0x6d, 0x7, 0x2, 0x9, 0x4, 0x47e653ef]}, {0x5, 0x3, 0x1, @empty, [@private2={0xfc, 0x2, '\x00', 0x1}], [0x4, 0x3, 0x6eac]}]}}}}}}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000640), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000006c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000680)}}, 0x18)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3ff}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000026c0)={0x0, &(0x7f0000002600)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r7, 0x0, 0x42, &(0x7f0000000580)={'NETMAP\x00'}, &(0x7f00000005c0)=0x1e)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000600)={0x80000000, 0x0, 0x100a, 0x1000, 0x4, 0xa6, 0xf})
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4ec, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x548)
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000200)={0x0, 0x0, r6, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x5, 0x0, 0x3, 0x4, 0x0, 0x10000, 0x406, 0x0, "427f4d0561864078b7f952fc7ebbfea1deee063e520cc38c6a002000"}})
close(r3)
openat$fb1(0xffffff9c, &(0x7f0000000200), 0x200, 0x0)

3.790006425s ago: executing program 2 (id=500):
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000006000000080000000800000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="338400"/28], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0xb, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000680), 0xffffffffffffff9e)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xa00, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)={0x114, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x102, 0x4e, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@empty}, @generic="2a725624d55e18f54ca5798d3fe7955ef9868c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce978006451bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4dc38a9d937e23023ab86a8ce5f7a6d9772d2c9b91825cd6f77be8203cbe17d83dbb0590b1ef553211edef00ead1ebbe1b58e5b323435a913a2e5ce557c4ec021c723d2022c694102308a8fb6114ab4d007089b6a2816f689a565d4e70637725b2ff732144f7ad7c1b9d", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0)

3.726484482s ago: executing program 3 (id=501):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000010000104000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b03000000000a0014003500626f6e64308ae8ff033243d9ff0000001800128009000100626f6e64000000000800028004000880"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x74c920689c38ea7e)

3.627112929s ago: executing program 0 (id=502):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135a56412a20d4363f5df408fc6441639e75c7470bb11", 0x30, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10)
listen(r0, 0x0)
r6 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4)
close(r6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
accept4(r0, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0x80, 0x80800)
epoll_create(0x4)
r8 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r8, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)

2.884394956s ago: executing program 3 (id=503):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x40)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100))
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r7 = dup3(r6, r5, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newtfilter={0x34, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff3}, {0x4}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x448c0}, 0x8080)
r9 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff3, 0xfff2}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800)
r10 = socket$netlink(0x10, 0x3, 0x13)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r11, @ANYBLOB="003000000000000014001a80100004800c00088008"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)

2.81960017s ago: executing program 1 (id=504):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000100)=0x7)
listen(0xffffffffffffffff, 0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
connect$tipc(0xffffffffffffffff, &(0x7f0000000200)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x1}}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
syz_open_dev$vcsn(0x0, 0x1fd, 0x78dc81)
sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0xa9525000)
utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
close(0xffffffffffffffff)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in6=@private2, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc000905850200"], 0x0)
socket(0x2, 0xa, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000c0000000500000007000000c1000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000e2000000000000"], 0x50)

2.555378939s ago: executing program 0 (id=505):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)="d7")
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01)
r2 = openat$dir(0xffffff9c, &(0x7f0000000100)='./file0\x00', 0x76df8721b39c6dea, 0x72)
r3 = openat(r2, &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x20)
r4 = landlock_create_ruleset(&(0x7f0000000040)={0x200}, 0x10, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000000080)={0x0, 0x6}, 0x0)
pidfd_send_signal(0xffffffffffffffff, 0x14, &(0x7f0000000040)={0x1, 0x6, 0x9}, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x80000)
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7])
fanotify_mark(r3, 0x4, 0x40000000, r7, &(0x7f0000000280)='./file0/file0\x00')
ioctl$EVIOCGPHYS(r5, 0x80404507, &(0x7f0000000140)=""/221)
ioctl$EVIOCGKEY(r1, 0x80404518, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)

2.517495215s ago: executing program 2 (id=506):
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000}, 0x14)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00')
read$FUSE(r1, &(0x7f00000045c0)={0x2020}, 0x2020)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x1000, 0x0, 0x5, 0x7bcd91f4679e0b9b, r0, 0x4, '\x00', 0x0, r1, 0x4, 0x0, 0x4, 0xb}, 0x50)
r3 = openat$dsp(0xffffff9c, &(0x7f0000000040), 0x40001, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, &(0x7f0000000000))
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xcc, 0x3, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x79ab}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffb}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFACCT_QUOTA={0xc}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x14, 0x19, 0xa, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x8004)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil)

2.422950367s ago: executing program 0 (id=507):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f00000014c0)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa08000600010000"], 0x38}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r4)
sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r5, 0x305, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x30004800}, 0x18)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r6=>0x0})
syz_open_dev$sndpcmc(&(0x7f0000000240), 0x4a640dcb, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6, @ANYBLOB="0a0001"], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x4000080)
listen(r0, 0xc)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
fgetxattr(r3, &(0x7f0000000140)=@random={'btrfs.', 'mptcp_pm\x00'}, &(0x7f0000000440)=""/218, 0xda)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01090000000000000000010000001c000180060001000200000008000300ac1414aa080006000300"], 0x30}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
openat$null(0xffffff9c, &(0x7f0000000100), 0x102, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0)
fcntl$setpipe(r3, 0x407, 0xfffffff1)
r11 = socket(0x10, 0x3, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00'})
r13 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r11)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x48, r13, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc081}, 0x4)

2.356254255s ago: executing program 2 (id=508):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0)
io_pgetevents(0x0, 0xe9, 0x0, 0x0, 0x0, 0xffffffffffffffff)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
syz_emit_ethernet(0x26a, &(0x7f0000000a00)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x234, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @mlv2_report={0x8f, 0x0, 0x0, 0x0, 0x6, [{0x40, 0x4, 0x5, @empty, [@private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x25}, @local, @rand_addr=' \x01\x00'], [0x5, 0xd2, 0x4, 0x4]}, {0x1, 0x2, 0x3, @private1, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xf}], [0x8ff, 0xd]}, {0x6, 0x5, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'], [0x9, 0x7f, 0x4, 0xfffffffd, 0xc]}, {0xc, 0x3, 0x3, @mcast1, [@loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @private2], [0x7, 0xffffffc0, 0x0]}, {0x77, 0x8, 0x8, @private0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x24}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}], [0x80, 0x4, 0x6d, 0x7, 0x2, 0x9, 0x4, 0x47e653ef]}, {0x5, 0x3, 0x1, @empty, [@private2={0xfc, 0x2, '\x00', 0x1}], [0x4, 0x3, 0x6eac]}]}}}}}}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000640), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000006c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000680)}}, 0x18)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3ff}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000026c0)={0x0, &(0x7f0000002600)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r7, 0x0, 0x42, &(0x7f0000000580)={'NETMAP\x00'}, &(0x7f00000005c0)=0x1e)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000600)={0x80000000, 0x0, 0x100a, 0x1000, 0x4, 0xa6, 0xf})
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4ec, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x548)
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000200)={0x0, 0x0, r6, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x5, 0x0, 0x3, 0x4, 0x0, 0x10000, 0x406, 0x0, "427f4d0561864078b7f952fc7ebbfea1deee063e520cc38c6a002000"}})
close(r3)
openat$fb1(0xffffff9c, &(0x7f0000000200), 0x200, 0x0)

2.355344253s ago: executing program 3 (id=509):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0])
read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020, 0x0, <r2=>0x0}, 0x1c84)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
fanotify_init(0x20, 0x8000)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r7, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008"], 0x58}}, 0x0)
listns(&(0x7f0000000000)={0x20, 0x0, 0x4, 0x10000080}, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
listns(&(0x7f0000000000)={0x20, 0x0, 0x4ffffffff, 0x3ffffff5, 0x0, 0x3}, 0x0, 0xe, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x0)
syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1)
write$FUSE_NOTIFY_RETRIEVE(r1, 0x0, 0x0)

1.502165234s ago: executing program 3 (id=510):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135a56412a20d4363f5df408fc6441639e75c7470bb11", 0x30, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10)
listen(r0, 0x0)
r6 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4)
close(r6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
accept4(r0, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0x80, 0x80800)
epoll_create(0x4)
r8 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r8, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)

1.339813614s ago: executing program 0 (id=511):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x9, 0x81fd, 0x2001, 0x1}, 0x1c)
r3 = socket(0x1e, 0x4, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg1\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000340)={'batadv0\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)={0x74, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xfe}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x81}, @ETHTOOL_A_LINKINFO_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x24000810)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x400000, 0x180000, 0x1}, 0x1c)
recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000024010095)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
socket(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket(0x10, 0x80002, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket(0x10, 0x3, 0x0)
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000540)=0x10a, 0x4)
recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f00000000c0))
syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ecb403236035", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0)

194.808612ms ago: executing program 2 (id=512):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000040)={0x8, 0x8})
syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
socket$inet6(0xa, 0x805, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
timerfd_settime(0xffffffffffffffff, 0x6, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x400000, 0x8}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x4, &(0x7f0000000200)=0x4, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FS_IOC_GETFSUUID(r3, 0x80111500, &(0x7f0000000100))
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="6400000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c0002800100010000000000240002800f00028005000100000000001400018008000100e000000108000200e00000020800074000000005f681a1d14a0609177921609a0ea987ec72345e957af00d7f04b4c07c38812ebc9a64c08b198dc15227e01d01c8cef76fbc252016c4768dd82b589e5ba807"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="34000000020105000000000000e7ff0002000008"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000895}, 0xc000)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_TSC_KHZ_vm(r6, 0xaea2, 0x4000080)

175.373497ms ago: executing program 0 (id=513):
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
setpriority(0x1, 0xffffffffffffffff, 0x3)
r3 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000))
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)="8a", 0x1}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$kcm(0xa, 0xf, 0x106)
sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r6, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r5, 0x7}, 0x80, 0x0}, 0x4000011)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x8000)
ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000040))
sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r8 = socket$packet(0x11, 0x2, 0x300)
io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, &(0x7f0000008580)=[{0x3, 0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002a00)=""/146, 0x92}, {&(0x7f0000002ac0)=""/35, 0x23}, {&(0x7f0000002b00)=""/199, 0xc7}], &(0x7f0000002c40)=[0x9, 0x8000000000000001, 0x8, 0x5, 0x8]}, {0x0, 0x0, 0x0, &(0x7f0000003fc0), &(0x7f0000004000)=[0x1, 0x3baf, 0x5, 0x3]}, {0x4, 0x1, 0x0, &(0x7f0000005300)=[{0x0}, {&(0x7f0000004140)=""/110, 0x6e}, {&(0x7f00000042c0)=""/56, 0x38}, {&(0x7f0000004300)=""/4096, 0x1000}], &(0x7f0000005380)=[0x1ff, 0x6, 0x2, 0x400, 0x6]}, {0x2, 0x0, 0x0, &(0x7f00000064c0)=[{0x0}, {&(0x7f00000063c0)=""/246, 0xf6}], &(0x7f0000006500)=[0x1, 0x8000]}, {0x4, 0x0, 0x0, &(0x7f0000006740)=[{&(0x7f0000006540)=""/23, 0x17}, {&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f00000065c0)=""/80, 0x50}, {0x0}], &(0x7f0000006780)=[0x7ff, 0x7ff]}, {0x8, 0x0, 0x0, &(0x7f0000006e40)=[{&(0x7f00000068c0)=""/197, 0xc5}, {&(0x7f00000069c0)=""/23, 0x17}, {&(0x7f0000006a00)=""/251, 0xfb}, {&(0x7f0000006b00)=""/174, 0xae}, {&(0x7f0000006bc0)=""/173, 0xad}, {&(0x7f0000006c80)=""/47, 0x2f}, {&(0x7f0000006cc0)=""/241, 0xf1}, {&(0x7f0000000400)=""/96, 0x60}], &(0x7f0000006f00)=[0x0, 0x3, 0x5, 0xbbdc, 0x7]}, {0x9, 0x1, 0x0, &(0x7f0000008480)=[{&(0x7f0000006f40)=""/250, 0xfa}, {&(0x7f0000007040)=""/195, 0xc3}, {&(0x7f0000007140)=""/169, 0xa9}, {&(0x7f0000007200)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/237, 0xed}, {&(0x7f0000008300)=""/21, 0x15}, {&(0x7f0000008380)=""/92, 0x5c}, {&(0x7f0000008400)=""/54, 0x36}, {&(0x7f0000008440)=""/47, 0x2f}], &(0x7f0000008540)=[0x2193, 0x401, 0x41f9]}], 0x7)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000), 0x8)
r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000880)={<r10=>0x0, 0xffffffffffffff80, 0x1, 0x1})
ioctl$BTRFS_IOC_DEV_INFO(r9, 0xd000941e, &(0x7f0000001640)={r10, "4afc882ddab9a2a952f5f7b600684308"})

144.935184ms ago: executing program 3 (id=514):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x42)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r2 = getpid()
prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0)
setreuid(0xee01, 0x0)
setreuid(0x0, 0x0)
write$cgroup_pid(r1, &(0x7f0000000500)=r2, 0x12)

0s ago: executing program 3 (id=515):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000b80))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000740)=0x11)
syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x800c2, 0x59caa93f7db8951d)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r3, 0x0)
epoll_wait(r2, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @remote}, 0xa)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000006f1bfa9ffdca40323ca5545d0067f2156c9d8aa1e3d5fd074822ab90fa9dec8b2b272b0bcfb1e55fa866fcfc9deb6610b9193270097921b3cdc03fec90bd423c3b6814ae4f5ffd2dc36a200f2eca2843b21e5f40b690f4c62630eb6d1728288086d5f76cc2b17bbabce861264123b", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b000000000008000d0003000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
socket(0x21, 0x3, 0x3)
ptrace(0x8, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r8 = ioctl$TIOCGPTPEER(r7, 0x5441, 0x6)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r9, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f)
dup2(r8, r7)

kernel console output (not intermixed with test programs):

5] ieee802154 phy1 wpan1: encryption failed: -22
[   80.142980][   T40] kauditd_printk_skb: 122 callbacks suppressed
[   80.157778][   T40] audit: type=1326 audit(1780580357.910:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.0.51" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef7c code=0x7ffc0000
[   80.173479][   T40] audit: type=1326 audit(1780580357.910:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.0.51" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef7c code=0x7ffc0000
[   80.189902][ T6193] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.192851][ T6193] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.343309][   T40] audit: type=1326 audit(1780580357.910:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.0.51" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef7c code=0x7ffc0000
[   80.367739][   T40] audit: type=1326 audit(1780580357.910:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.0.51" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef7c code=0x7ffc0000
[   80.387707][   T40] audit: type=1326 audit(1780580357.910:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.0.51" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf709ef7c code=0x7ffc0000
[   80.414274][   T40] audit: type=1326 audit(1780580357.920:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.0.51" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef7c code=0x7ffc0000
[   80.422348][   T40] audit: type=1326 audit(1780580357.920:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.0.51" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef7c code=0x7ffc0000
[   80.437912][   T40] audit: type=1326 audit(1780580357.920:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.0.51" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef7c code=0x7ffc0000
[   81.088929][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[   81.177177][   T40] audit: type=1326 audit(1780580358.880:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.0.51" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef7c code=0x7ffc0000
[   81.191773][   T40] audit: type=1326 audit(1780580358.880:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.0.51" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf709ef7c code=0x7ffc0000
[   81.334753][ T6210] sg_write: data in/out 46336/12 bytes for SCSI command 0xc3-- guessing data in;
[   81.334753][ T6210]    program syz.1.47 not setting count and/or reply_len properly
[   81.399265][ T6193] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.414746][ T6193] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.430126][ T6211] fuse: Unknown parameter '/dev/sg#'
[   81.901222][ T1214] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.905469][ T1214] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.909710][ T1214] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.925967][ T1214] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.036874][ T6220] binder: 6219:6220 ioctl c0306201 80000040 returned -22
[   82.041350][ T6222] evm: overlay not supported
[   82.324314][ T6231] netlink: 60 bytes leftover after parsing attributes in process `syz.3.58'.
[   82.395258][ T6231] ªªªªª: renamed from virt_wifi0
[   82.560183][ T6240] warning: `syz.0.59' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   82.569888][ T6240] netlink: 'syz.0.59': attribute type 11 has an invalid length.
[   82.577107][ T6240] netlink: 'syz.0.59': attribute type 11 has an invalid length.
[   82.586381][ T6240] debugfs: 'netdev:' already exists in 'phy6'
[   83.405484][ T6253] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[   83.453237][ T6253] netlink: 20 bytes leftover after parsing attributes in process `syz.2.64'.
[   83.492286][ T6257] netlink: 'syz.2.65': attribute type 10 has an invalid length.
[   83.496231][ T6257] veth1_macvtap: left promiscuous mode
[   83.898663][ T6269] libceph: resolve '
[   83.898663][ T6269] -&õÌ×fÍY¹Ç�²a×ïÅ2iˆ
[   83.898663][ T6269] .ÖúÕ?Çý&�*»§&' (ret=-3): failed
[   83.974975][ T6272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.69'.
[   84.018648][   T50] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   84.180252][   T50] usb 5-1: too many configurations: 9, using maximum allowed: 8
[   84.185401][   T50] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[   84.188324][   T50] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   84.191819][   T50] usb 5-1: config 0 interface 0 has no altsetting 0
[   84.194926][   T50] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[   84.197783][   T50] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   84.201370][   T50] usb 5-1: config 0 interface 0 has no altsetting 0
[   84.204380][   T50] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[   84.207253][   T50] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   84.211026][   T50] usb 5-1: config 0 interface 0 has no altsetting 0
[   84.214617][   T50] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[   84.217415][   T50] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   84.220914][   T50] usb 5-1: config 0 interface 0 has no altsetting 0
[   84.225222][   T50] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[   84.228491][   T50] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   84.232764][   T50] usb 5-1: config 0 interface 0 has no altsetting 0
[   84.236587][   T50] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[   84.239717][   T50] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   84.243062][   T50] usb 5-1: config 0 interface 0 has no altsetting 0
[   84.246455][   T50] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[   84.249775][   T50] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   84.253978][   T50] usb 5-1: config 0 interface 0 has no altsetting 0
[   84.258311][   T50] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[   84.262189][   T50] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   84.266836][   T50] usb 5-1: config 0 interface 0 has no altsetting 0
[   84.272532][   T50] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[   84.279221][   T50] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[   84.284027][   T50] usb 5-1: Product: syz
[   84.285838][   T50] usb 5-1: Manufacturer: syz
[   84.289569][   T50] usb 5-1: SerialNumber: syz
[   84.297558][   T50] usb 5-1: config 0 descriptor??
[   84.317959][   T50] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[   84.454478][ T6287] pimreg: entered allmulticast mode
[   84.463042][ T6287] syz_tun: entered allmulticast mode
[   84.468830][ T6287] syz_tun: left allmulticast mode
[   84.472035][ T6287] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request
[   84.507802][ T6298] netlink: 'syz.2.74': attribute type 10 has an invalid length.
[   84.549749][ T6286] pimreg: left allmulticast mode
[   85.676531][    C3] usb 5-1: yurex_control_callback - control failed: -2
[   85.726774][    T9] usb 5-1: USB disconnect, device number 2
[   85.782430][    T9] yurex 5-1:0.0: USB YUREX #0 now disconnected
[   86.720103][   T34] cfg80211: failed to load regulatory.db
[   86.764806][ T6333] netlink: 'syz.3.83': attribute type 10 has an invalid length.
[   87.195998][ T6344] netlink: 'syz.0.85': attribute type 2 has an invalid length.
[   87.198949][ T6344] netlink: 224 bytes leftover after parsing attributes in process `syz.0.85'.
[   88.028291][ T6360] netlink: 'syz.2.89': attribute type 11 has an invalid length.
[   88.049298][ T6360] netlink: 'syz.2.89': attribute type 11 has an invalid length.
[   88.063256][ T6360] debugfs: 'netdev:' already exists in 'phy7'
[   88.083091][ T5751] Bluetooth: unknown link type 128
[   88.181415][ T6362] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   88.185073][ T6362] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   88.199462][ T6362] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   88.255089][ T6362] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   88.257829][ T6362] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   88.330466][ T6362] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   88.356989][ T6362] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   88.360875][ T6362] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   88.381448][ T6362] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   88.391534][ T6362] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   88.394107][ T6362] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   88.408952][ T6362] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   88.708242][   T59] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   88.888967][   T59] usb 5-1: Using ep0 maxpacket: 32
[   88.902429][   T59] usb 5-1: unable to get BOS descriptor or descriptor too short
[   88.909263][   T59] usb 5-1: config 8 has an invalid interface number: 188 but max is 0
[   88.912967][   T59] usb 5-1: config 8 has no interface number 0
[   88.916175][   T59] usb 5-1: config 8 interface 188 has no altsetting 0
[   88.934644][   T59] usb 5-1: string descriptor 0 read error: -22
[   88.938308][   T59] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e
[   88.945532][   T59] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.032566][   T59] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state.
[   89.035904][   T59] dw2102: su3000_power_ctrl: 1, initialized 0
[   89.041630][   T59] dvb-usb: bulk message failed: -22 (2/0)
[   89.121111][   T59] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   89.157462][   T59] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3)
[   89.172394][   T59] usb 5-1: media controller created
[   89.177905][   T59] dvb-usb: bulk message failed: -22 (6/0)
[   89.181322][   T59] dw2102: i2c transfer failed.
[   89.187106][   T59] dvb-usb: bulk message failed: -22 (6/0)
[   89.189741][   T59] dw2102: i2c transfer failed.
[   89.191800][   T59] dvb-usb: bulk message failed: -22 (6/0)
[   89.194219][   T59] dw2102: i2c transfer failed.
[   89.197197][   T59] dvb-usb: bulk message failed: -22 (6/0)
[   89.199967][   T59] dw2102: i2c transfer failed.
[   89.202045][   T59] dvb-usb: bulk message failed: -22 (6/0)
[   89.210737][   T59] dw2102: i2c transfer failed.
[   89.224394][   T59] dvb-usb: bulk message failed: -22 (6/0)
[   89.231955][   T59] dw2102: i2c transfer failed.
[   89.238751][   T59] dvb-usb: MAC address: 02:02:02:02:02:02
[   89.445565][   T59] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   89.529409][   T59] dvb-usb: bulk message failed: -22 (3/0)
[   89.531693][   T59] dw2102: command 0x0e transfer failed.
[   89.533592][   T59] dvb-usb: bulk message failed: -22 (3/0)
[   89.535712][   T59] dw2102: command 0x0e transfer failed.
[   89.728063][ T6380] netlink: 16 bytes leftover after parsing attributes in process `syz.3.97'.
[   89.732659][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.97'.
[   89.736394][ T6380] netlink: 'syz.3.97': attribute type 10 has an invalid length.
[   89.745120][ T6380] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   89.816918][ T6384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.98'.
[   89.840305][   T59] dvb-usb: bulk message failed: -22 (3/0)
[   89.848174][   T59] dw2102: command 0x0e transfer failed.
[   89.851757][   T59] dvb-usb: bulk message failed: -22 (3/0)
[   89.853746][   T59] dw2102: command 0x0e transfer failed.
[   89.862197][   T59] dvb-usb: bulk message failed: -22 (1/0)
[   89.864249][   T59] dw2102: command 0x51 transfer failed.
[   89.947223][   T59] DVB: Unable to find symbol ds3000_attach()
[   89.949359][   T59] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3'
[   89.998758][   T59] rc_core: IR keymap rc-su3000 not found
[   89.999282][ T6390] netlink: 'syz.3.99': attribute type 2 has an invalid length.
[   90.003634][   T59] Registered IR keymap rc-empty
[   90.016564][ T6390] netlink: 224 bytes leftover after parsing attributes in process `syz.3.99'.
[   90.016714][   T59] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0
[   90.036215][   T59] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input8
[   90.116244][   T59] dvb-usb: schedule remote query interval to 150 msecs.
[   90.124268][   T59] dw2102: su3000_power_ctrl: 0, initialized 1
[   90.128309][   T59] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected.
[   90.186209][ T6396] capability: warning: `syz.3.101' uses deprecated v2 capabilities in a way that may be insecure
[   90.228964][ T5758] Bluetooth: hci1: command 0x0c1a tx timeout
[   90.238166][ T6396] could not allocate digest TFM handle md5
[   90.319699][ T5758] Bluetooth: hci0: command 0x0c1a tx timeout
[   90.378683][ T5758] Bluetooth: hci2: command 0x0c1a tx timeout
[   90.385861][   T59] dvb-usb: bulk message failed: -22 (1/0)
[   90.390213][   T59] dw2102: i2c transfer failed.
[   90.468673][ T5758] Bluetooth: hci3: command 0x0c1a tx timeout
[   90.559147][  T842] dvb-usb: bulk message failed: -22 (1/0)
[   90.562813][  T842] dw2102: i2c transfer failed.
[   90.728625][   T59] dvb-usb: bulk message failed: -22 (1/0)
[   90.731227][   T59] dw2102: i2c transfer failed.
[   90.899796][   T59] dvb-usb: bulk message failed: -22 (1/0)
[   90.919393][   T59] dw2102: i2c transfer failed.
[   91.056784][ T6404] netlink: 'syz.1.102': attribute type 11 has an invalid length.
[   91.117661][ T6407] netlink: 'syz.1.102': attribute type 11 has an invalid length.
[   91.138616][   T59] dvb-usb: bulk message failed: -22 (1/0)
[   91.140854][   T59] dw2102: i2c transfer failed.
[   91.161139][ T6407] debugfs: 'netdev:' already exists in 'phy3'
[   91.310778][  T842] dvb-usb: bulk message failed: -22 (1/0)
[   91.313514][  T842] dw2102: i2c transfer failed.
[   91.360825][ T6413] netlink: 32 bytes leftover after parsing attributes in process `syz.2.106'.
[   91.478635][  T842] dvb-usb: bulk message failed: -22 (1/0)
[   91.481096][  T842] dw2102: i2c transfer failed.
[   91.682774][  T842] dvb-usb: bulk message failed: -22 (1/0)
[   91.685094][  T842] dw2102: i2c transfer failed.
[   91.698677][ T5852] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   91.848704][ T5852] usb 7-1: Using ep0 maxpacket: 32
[   91.853004][ T5852] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[   91.856638][ T5852] usb 7-1: config 0 has no interface number 0
[   91.864478][ T5852] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[   91.868882][ T5852] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.872313][ T5852] usb 7-1: Product: syz
[   91.874084][ T5852] usb 7-1: Manufacturer: syz
[   91.876077][ T5852] usb 7-1: SerialNumber: syz
[   91.898680][  T842] dvb-usb: bulk message failed: -22 (1/0)
[   91.900711][  T842] dw2102: i2c transfer failed.
[   91.946737][ T5852] usb 7-1: config 0 descriptor??
[   91.961249][ T5852] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[   91.975697][ T5852] usb 7-1: selecting invalid altsetting 1
[   91.983446][ T5852] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[   91.994693][ T5852] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   92.008958][ T5852] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[   92.012835][ T5852] usb 7-1: media controller created
[   92.025892][ T5852] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   92.070626][   T59] dvb-usb: bulk message failed: -22 (1/0)
[   92.072517][   T59] dw2102: i2c transfer failed.
[   92.080639][   T59] usb 5-1: USB disconnect, device number 3
[   92.243984][   T59] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected.
[   92.298792][ T5751] Bluetooth: hci1: command 0x0c1a tx timeout
[   92.379451][ T5758] Bluetooth: hci0: command 0x0c1a tx timeout
[   92.490184][ T5758] Bluetooth: hci2: command 0x0c1a tx timeout
[   92.539317][ T5758] Bluetooth: hci3: command 0x0c1a tx timeout
[   93.098829][ T5852] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[   93.102425][ T5852] zl10353_read_register: readreg error (reg=127, ret==-110)
[   93.940351][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.111'.
[   94.281584][ T6208] usb 7-1: USB disconnect, device number 2
[   94.388841][ T5758] Bluetooth: hci1: command 0x0c1a tx timeout
[   94.458856][ T5758] Bluetooth: hci0: command 0x0c1a tx timeout
[   94.541995][ T5758] Bluetooth: hci2: command 0x0c1a tx timeout
[   94.628627][ T5758] Bluetooth: hci3: command 0x0c1a tx timeout
[   94.963956][ T6456] netlink: 'syz.2.115': attribute type 11 has an invalid length.
[   94.972035][ T6456] netlink: 'syz.2.115': attribute type 11 has an invalid length.
[   94.975260][ T6456] debugfs: 'netdev:' already exists in 'phy7'
[   95.078299][ T6458] binder: 6457:6458 ioctl 4018620d 0 returned -22
[   95.289858][ T6469] netlink: 'syz.2.118': attribute type 2 has an invalid length.
[   95.293628][ T6469] netlink: 224 bytes leftover after parsing attributes in process `syz.2.118'.
[   96.362868][ T6482] process 'syz.2.121' launched '/dev/fd/3' with NULL argv: empty string added
[   96.494450][ T6490] netlink: 'syz.0.125': attribute type 11 has an invalid length.
[   96.502435][ T6490] netlink: 'syz.0.125': attribute type 11 has an invalid length.
[   96.504975][ T6490] debugfs: 'netdev:' already exists in 'phy6'
[   96.643474][ T6494] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[   96.646048][ T6494] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   96.652393][ T6494] vhci_hcd vhci_hcd.0: Device attached
[   96.701181][ T5758] Bluetooth: hci3: command 0x0c1a tx timeout
[   96.818664][ T5852] usb 5-1: new low-speed USB device number 4 using dummy_hcd
[   96.938766][   T29] usb 42-1: SetAddress Request (2) to port 0
[   96.941622][   T29] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd
[   96.958821][ T5852] usb 5-1: device descriptor read/64, error -71
[   97.253726][ T6495] vhci_hcd: connection reset by peer
[   97.260247][ T1162] vhci_hcd vhci_hcd.2: stop threads
[   97.263038][ T1162] vhci_hcd vhci_hcd.2: release socket
[   97.265420][ T1162] vhci_hcd vhci_hcd.2: disconnect device
[   97.588675][ T5852] usb 5-1: new low-speed USB device number 5 using dummy_hcd
[   98.038749][ T5852] usb 5-1: device descriptor read/64, error -71
[   98.149123][ T5852] usb usb5-port1: attempt power cycle
[   98.498586][ T5852] usb 5-1: new low-speed USB device number 6 using dummy_hcd
[   98.519509][ T5852] usb 5-1: device descriptor read/8, error -71
[   98.758805][ T5852] usb 5-1: new low-speed USB device number 7 using dummy_hcd
[   98.777657][ T6525] netlink: 'syz.2.134': attribute type 11 has an invalid length.
[   98.781511][ T5852] usb 5-1: device descriptor read/8, error -71
[   98.785020][ T6525] netlink: 'syz.2.134': attribute type 11 has an invalid length.
[   98.787487][ T6525] debugfs: 'netdev:' already exists in 'phy7'
[   98.899212][ T5852] usb usb5-port1: unable to enumerate USB device
[   98.917656][ T6526] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[   98.919706][ T6526] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   98.922799][ T6526] vhci_hcd vhci_hcd.0: Device attached
[   99.029812][ T6535] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[   99.030923][ T6529] vhci_hcd: connection closed
[   99.035817][ T1214] vhci_hcd vhci_hcd.3: stop threads
[   99.041090][ T1214] vhci_hcd vhci_hcd.3: release socket
[   99.043201][ T1214] vhci_hcd vhci_hcd.3: disconnect device
[   99.706125][ T6552] lapbether: lapb_data_request error - 4
[  100.030761][ T6557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.141'.
[  100.464914][ T6562] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request
[  100.825243][ T6543] kexec: Could not allocate control_code_buffer
[  101.958251][ T6572] binder: 6571:6572 ioctl 40786e88 0 returned -22
[  101.989343][   T29] usb 42-1: device descriptor read/8, error -110
[  102.010655][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.147'.
[  102.424657][   T29] usb usb42-port1: attempt power cycle
[  103.038042][ T6591] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request
[  103.073804][ T6595] netlink: 'syz.1.153': attribute type 10 has an invalid length.
[  103.086862][ T6595] veth1_macvtap: left promiscuous mode
[  103.094989][   T40] kauditd_printk_skb: 127 callbacks suppressed
[  103.095001][   T40] audit: type=1326 audit(1780580380.860:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.2.151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef7c code=0x7ffc0000
[  103.106731][   T40] audit: type=1326 audit(1780580380.860:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.2.151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef7c code=0x7ffc0000
[  103.114343][   T40] audit: type=1326 audit(1780580380.860:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.2.151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef7c code=0x7ffc0000
[  103.121084][   T40] audit: type=1326 audit(1780580380.860:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.2.151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef7c code=0x7ffc0000
[  103.128033][   T40] audit: type=1326 audit(1780580380.860:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.2.151" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf704ef7c code=0x7ffc0000
[  103.134989][   T40] audit: type=1326 audit(1780580380.860:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.2.151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef7c code=0x7ffc0000
[  103.141748][   T40] audit: type=1326 audit(1780580380.860:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.2.151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef7c code=0x7ffc0000
[  103.218244][ T6597] bridge_slave_1: Caught tx_queue_len zero misconfig
[  103.232076][   T29] usb usb42-port1: unable to enumerate USB device
[  103.266782][   T86] Bluetooth: hci4: Frame reassembly failed (-84)
[  103.770590][ T6625] netlink: 'syz.1.161': attribute type 2 has an invalid length.
[  103.774082][ T6625] netlink: 224 bytes leftover after parsing attributes in process `syz.1.161'.
[  103.917696][ T6596] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  104.747591][ T5895] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  104.752148][ T5895] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  104.757368][ T5895] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  104.762407][ T5895] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  104.765974][ T5895] rtc rtc0: __rtc_set_alarm: err=-22
[  105.259093][ T5751] Bluetooth: hci4: command 0x1003 tx timeout
[  105.278803][ T5758] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  105.348269][ T6655] netlink: 104 bytes leftover after parsing attributes in process `syz.3.168'.
[  105.853430][   T40] audit: type=1326 audit(1780580383.620:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.3.170" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8f7c code=0x7ffc0000
[  105.862768][   T40] audit: type=1326 audit(1780580383.620:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.3.170" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8f7c code=0x7ffc0000
[  105.872114][   T40] audit: type=1326 audit(1780580383.630:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.3.170" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7ff8f7c code=0x7ffc0000
[  106.063582][ T6670] netlink: 'syz.2.172': attribute type 2 has an invalid length.
[  106.067749][ T6670] netlink: 224 bytes leftover after parsing attributes in process `syz.2.172'.
[  106.848092][ T6695] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  106.851976][ T6695] /dev/nullb0: Can't open blockdev
[  107.304281][ T6708] bond0: (slave bridge0): Releasing backup interface
[  107.313605][ T6708] bridge_slave_0: left allmulticast mode
[  107.316194][ T6708] bridge_slave_0: left promiscuous mode
[  107.319310][ T6708] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.325177][ T6708] bridge_slave_1: left allmulticast mode
[  107.327700][ T6708] bridge_slave_1: left promiscuous mode
[  107.331044][ T6708] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.340028][ T6708] bond0: (slave bond_slave_0): Releasing backup interface
[  107.345366][ T6708] bond0: (slave bond_slave_1): Releasing backup interface
[  107.350938][ T6708] team0: Port device team_slave_0 removed
[  107.356514][ T6708] team0: Port device team_slave_1 removed
[  107.360612][ T6708] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.364490][ T6708] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.368435][ T6708] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  107.383949][ T6709] ip6gre1: entered allmulticast mode
[  107.391499][ T6709] team0: Port device ip6gre1 added
[  107.431606][ T6712] vivid-002: disconnect
[  107.585213][ T6711] vivid-002: reconnect
[  107.874702][ T6718] netlink: 'syz.1.186': attribute type 11 has an invalid length.
[  107.888194][ T6718] netlink: 'syz.1.186': attribute type 11 has an invalid length.
[  107.891230][ T6718] debugfs: 'netdev:' already exists in 'phy3'
[  109.190671][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'.
[  109.193993][ T6733] openvswitch: netlink: Missing key (keys=40, expected=80)
[  109.288104][   T40] kauditd_printk_skb: 70 callbacks suppressed
[  109.288117][   T40] audit: type=1326 audit(1780580387.050:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.0.192" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef7c code=0x7ffc0000
[  109.297765][   T40] audit: type=1326 audit(1780580387.050:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.0.192" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef7c code=0x7ffc0000
[  109.306951][   T40] audit: type=1326 audit(1780580387.070:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.0.192" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef7c code=0x7ffc0000
[  109.316274][   T40] audit: type=1326 audit(1780580387.070:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.0.192" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef7c code=0x7ffc0000
[  109.323831][   T40] audit: type=1326 audit(1780580387.070:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.0.192" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709ef7c code=0x7ffc0000
[  109.331399][   T40] audit: type=1326 audit(1780580387.070:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.0.192" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef7c code=0x7ffc0000
[  109.341319][   T40] audit: type=1326 audit(1780580387.070:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.0.192" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef7c code=0x7ffc0000
[  109.348285][   T40] audit: type=1326 audit(1780580387.070:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.0.192" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef7c code=0x7ffc0000
[  109.357582][   T40] audit: type=1326 audit(1780580387.070:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.0.192" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709ef7c code=0x7ffc0000
[  109.366232][   T40] audit: type=1326 audit(1780580387.080:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.0.192" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef7c code=0x7ffc0000
[  109.842878][ T6753] bond0: entered promiscuous mode
[  109.844794][ T6753] bond_slave_0: entered promiscuous mode
[  109.846822][ T6753] bond_slave_1: entered promiscuous mode
[  110.026047][ T6764] FAULT_INJECTION: forcing a failure.
[  110.026047][ T6764] name failslab, interval 1, probability 0, space 0, times 1
[  110.032986][ T6750] bond0: left promiscuous mode
[  110.035459][ T6764] CPU: 2 UID: 0 PID: 6764 Comm: syz.1.197 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  110.035482][ T6764] Tainted: [L]=SOFTLOCKUP
[  110.035487][ T6764] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  110.035495][ T6764] Call Trace:
[  110.035501][ T6764]  <TASK>
[  110.035506][ T6764]  dump_stack_lvl+0x100/0x190
[  110.035571][ T6764]  should_fail_ex.cold+0x5/0xa
[  110.035590][ T6764]  should_failslab+0xc2/0x120
[  110.035607][ T6764]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[  110.035630][ T6764]  ? alloc_vmap_area+0x183e/0x2b70
[  110.035650][ T6764]  alloc_vmap_area+0x183e/0x2b70
[  110.035674][ T6764]  ? __pfx_alloc_vmap_area+0x10/0x10
[  110.035695][ T6764]  __get_vm_area_node+0x1ca/0x330
[  110.035716][ T6764]  __vmalloc_node_range_noprof+0x228/0x1630
[  110.035736][ T6764]  ? create_io_thread+0xc2/0x110
[  110.035756][ T6764]  ? rcu_is_watching+0x12/0xc0
[  110.035777][ T6764]  ? create_io_thread+0xc2/0x110
[  110.035801][ T6764]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  110.035825][ T6764]  ? rcu_is_watching+0x12/0xc0
[  110.035840][ T6764]  ? trace_kmem_cache_alloc+0xd5/0x100
[  110.035858][ T6764]  ? create_io_thread+0xc2/0x110
[  110.035876][ T6764]  __vmalloc_node_noprof+0xad/0xf0
[  110.035894][ T6764]  ? create_io_thread+0xc2/0x110
[  110.035915][ T6764]  copy_process+0x7fb/0x7ed0
[  110.035932][ T6764]  ? stack_trace_save+0x8e/0xc0
[  110.035951][ T6764]  ? __pfx_stack_trace_save+0x10/0x10
[  110.035968][ T6764]  ? unwind_get_return_address+0x59/0xa0
[  110.035986][ T6764]  ? stack_depot_save_flags+0x27/0x9d0
[  110.036044][ T6764]  ? __pfx_copy_process+0x10/0x10
[  110.036061][ T6764]  ? __do_sys_io_uring_enter+0xa88/0x1b50
[  110.036083][ T6764]  ? do_fast_syscall_32+0x32/0x70
[  110.036148][ T6764]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  110.036172][ T6764]  ? __pfx_io_wq_worker+0x10/0x10
[  110.036194][ T6764]  create_io_thread+0xc2/0x110
[  110.036212][ T6764]  ? __pfx_create_io_thread+0x10/0x10
[  110.036236][ T6764]  ? __pfx_io_wq_worker+0x10/0x10
[  110.036257][ T6764]  ? lockdep_init_map_type+0x5c/0x250
[  110.036281][ T6764]  ? lockdep_init_map_type+0x5c/0x250
[  110.036303][ T6764]  ? __init_swait_queue_head+0xca/0x150
[  110.036321][ T6764]  create_io_worker+0x1cd/0x5b0
[  110.036348][ T6764]  io_wq_enqueue+0x4d8/0x970
[  110.036370][ T6764]  ? __pfx_io_wq_enqueue+0x10/0x10
[  110.036406][ T6764]  ? __pfx_io_wq_work_match_item+0x10/0x10
[  110.036426][ T6764]  ? io_prep_async_work+0x3ab/0x720
[  110.036443][ T6764]  ? __kasan_kmalloc+0xaa/0xb0
[  110.036461][ T6764]  io_queue_iowq+0x232/0x5c0
[  110.036481][ T6764]  io_queue_sqe_fallback+0x16b/0x210
[  110.036500][ T6764]  ? io_uring_cmd_prep+0x47c/0x610
[  110.036517][ T6764]  io_submit_sqes+0x1e4d/0x24b0
[  110.036549][ T6764]  __do_sys_io_uring_enter+0xa88/0x1b50
[  110.036572][ T6764]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  110.036596][ T6764]  ? __pfx___do_sys_io_uring_enter+0x10/0x10
[  110.036616][ T6764]  ? __fget_files+0x21f/0x3d0
[  110.036637][ T6764]  ? fput+0x79/0x100
[  110.036656][ T6764]  ? ksys_write+0x1ac/0x250
[  110.036673][ T6764]  ? rcu_is_watching+0x12/0xc0
[  110.036692][ T6764]  __do_fast_syscall_32+0xe7/0x970
[  110.036712][ T6764]  ? lockdep_hardirqs_on+0x78/0x100
[  110.036734][ T6764]  do_fast_syscall_32+0x32/0x70
[  110.036755][ T6764]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  110.036773][ T6764] RIP: 0023:0xf709ef7c
[  110.036786][ T6764] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  110.036799][ T6764] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 00000000000001aa
[  110.036813][ T6764] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000788b
[  110.036822][ T6764] RDX: 000000000000084b RSI: 0000000000000068 RDI: 0000000000000000
[  110.036831][ T6764] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  110.036838][ T6764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  110.036846][ T6764] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  110.036864][ T6764]  </TASK>
[  110.037631][ T6764] netlink: 'syz.1.197': attribute type 10 has an invalid length.
[  110.044606][ T6750] bond_slave_0: left promiscuous mode
[  110.186125][ T6750] bond_slave_1: left promiscuous mode
[  110.360534][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'.
[  110.367533][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'.
[  110.472818][ T6795] input: syz1 as /devices/virtual/input/input9
[  110.606227][   T24] hsr0: entered promiscuous mode
[  110.703104][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.203'.
[  110.730698][ T6806] FAULT_INJECTION: forcing a failure.
[  110.730698][ T6806] name failslab, interval 1, probability 0, space 0, times 0
[  110.736072][ T6806] CPU: 3 UID: 0 PID: 6806 Comm: syz.1.203 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  110.736112][ T6806] Tainted: [L]=SOFTLOCKUP
[  110.736118][ T6806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  110.736128][ T6806] Call Trace:
[  110.736134][ T6806]  <TASK>
[  110.736141][ T6806]  dump_stack_lvl+0x100/0x190
[  110.736163][ T6806]  should_fail_ex.cold+0x5/0xa
[  110.736186][ T6806]  should_failslab+0xc2/0x120
[  110.736206][ T6806]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  110.736230][ T6806]  ? dst_alloc+0x99/0x1a0
[  110.736259][ T6806]  dst_alloc+0x99/0x1a0
[  110.736285][ T6806]  ipv4_blackhole_route+0x35/0x860
[  110.736309][ T6806]  xfrm_lookup_route+0x10e/0x200
[  110.736328][ T6806]  ip_route_output_flow+0x11e/0x150
[  110.736347][ T6806]  udp_sendmsg+0x198a/0x2720
[  110.736375][ T6806]  ? __pfx_udp_sendmsg+0x10/0x10
[  110.736415][ T6806]  ? aa_sk_perm+0x309/0xaa0
[  110.736448][ T6806]  ? __pfx_udp_sendmsg+0x10/0x10
[  110.736470][ T6806]  inet_sendmsg+0x105/0x140
[  110.736495][ T6806]  ____sys_sendmsg+0x98d/0xb70
[  110.736516][ T6806]  ? __pfx_inet_sendmsg+0x10/0x10
[  110.736541][ T6806]  ? __pfx_____sys_sendmsg+0x10/0x10
[  110.736566][ T6806]  ? rcu_is_watching+0x12/0xc0
[  110.736586][ T6806]  ? ___sys_sendmsg+0x19d/0x1e0
[  110.736611][ T6806]  ? kfree+0x1dd/0x6c0
[  110.736633][ T6806]  ? __pfx__kstrtoull+0x10/0x10
[  110.736652][ T6806]  ___sys_sendmsg+0x190/0x1e0
[  110.736676][ T6806]  ? __pfx____sys_sendmsg+0x10/0x10
[  110.736699][ T6806]  ? rcu_is_watching+0x12/0xc0
[  110.736737][ T6806]  ? __pfx___might_resched+0x10/0x10
[  110.736760][ T6806]  __sys_sendmmsg+0x2ff/0x430
[  110.736780][ T6806]  ? __pfx___sys_sendmmsg+0x10/0x10
[  110.736796][ T6806]  ? trace_sched_exit_tp+0x11c/0x160
[  110.736841][ T6806]  ? exit_to_user_mode_loop+0xf3/0x670
[  110.736867][ T6806]  ? rcu_is_watching+0x12/0xc0
[  110.736887][ T6806]  __ia32_compat_sys_sendmmsg+0x9d/0x100
[  110.736907][ T6806]  ? lockdep_hardirqs_on+0x78/0x100
[  110.736929][ T6806]  __do_fast_syscall_32+0xe7/0x970
[  110.736953][ T6806]  ? lockdep_hardirqs_on+0x78/0x100
[  110.736977][ T6806]  do_fast_syscall_32+0x32/0x70
[  110.737001][ T6806]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  110.737022][ T6806] RIP: 0023:0xf709ef7c
[  110.737036][ T6806] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  110.737050][ T6806] RSP: 002b:00000000f546c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159
[  110.737066][ T6806] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080004d00
[  110.737092][ T6806] RDX: 0000000000000300 RSI: 0000000000000f1c RDI: 0000000000000000
[  110.737102][ T6806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  110.737110][ T6806] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  110.737120][ T6806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  110.737142][ T6806]  </TASK>
[  110.888633][   T59] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  111.059303][   T59] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  111.065624][   T59] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  111.072523][   T59] usb 5-1: config 0 has no interfaces?
[  111.076534][   T59] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  111.083229][   T59] usb 5-1: config 0 has no interfaces?
[  111.089800][   T59] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  111.093964][   T59] usb 5-1: config 0 has no interfaces?
[  111.099780][   T59] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  111.104100][   T59] usb 5-1: config 0 has no interfaces?
[  111.109416][   T59] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  111.113367][   T59] usb 5-1: config 0 has no interfaces?
[  111.118869][   T59] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  111.122936][   T59] usb 5-1: config 0 has no interfaces?
[  111.126265][   T59] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  111.131091][   T59] usb 5-1: config 0 has no interfaces?
[  111.134596][   T59] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  111.138694][   T59] usb 5-1: config 0 has no interfaces?
[  111.142941][   T59] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  111.146165][   T59] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  111.156371][   T59] usb 5-1: Product: syz
[  111.157875][   T59] usb 5-1: Manufacturer: syz
[  111.160159][   T59] usb 5-1: SerialNumber: syz
[  111.166078][   T59] usb 5-1: config 0 descriptor??
[  111.386048][   T24] usb 5-1: USB disconnect, device number 8
[  111.910537][ T6822] FAULT_INJECTION: forcing a failure.
[  111.910537][ T6822] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  111.917799][ T6822] CPU: 1 UID: 0 PID: 6822 Comm: syz.3.209 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  111.917829][ T6822] Tainted: [L]=SOFTLOCKUP
[  111.917835][ T6822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  111.917845][ T6822] Call Trace:
[  111.917851][ T6822]  <TASK>
[  111.917859][ T6822]  dump_stack_lvl+0x100/0x190
[  111.917883][ T6822]  should_fail_ex.cold+0x5/0xa
[  111.917907][ T6822]  _copy_from_user+0x2e/0xd0
[  111.917933][ T6822]  kstrtouint_from_user+0xd6/0x1d0
[  111.917952][ T6822]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  111.917969][ T6822]  ? __lock_acquire+0x4a5/0x2630
[  111.918009][ T6822]  proc_fail_nth_write+0x83/0x220
[  111.918039][ T6822]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  111.918073][ T6822]  vfs_write+0x2aa/0x1070
[  111.918095][ T6822]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  111.918126][ T6822]  ? __pfx_vfs_write+0x10/0x10
[  111.918144][ T6822]  ? find_held_lock+0x2b/0x80
[  111.918164][ T6822]  ? __fget_files+0x215/0x3d0
[  111.918191][ T6822]  ? __fget_files+0x21f/0x3d0
[  111.918220][ T6822]  ksys_write+0x12a/0x250
[  111.918240][ T6822]  ? __pfx_ksys_write+0x10/0x10
[  111.918263][ T6822]  ? rcu_is_watching+0x12/0xc0
[  111.918287][ T6822]  do_int80_emulation+0x14b/0x720
[  111.918316][ T6822]  asm_int80_emulation+0x1a/0x20
[  111.918333][ T6822] RIP: 0023:0xf71f61ab
[  111.918348][ T6822] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  111.918363][ T6822] RSP: 002b:00000000f54b64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[  111.918381][ T6822] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54b65d0
[  111.918391][ T6822] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  111.918400][ T6822] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  111.918409][ T6822] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  111.918419][ T6822] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  111.918442][ T6822]  </TASK>
[  111.984806][ T6824] netlink: 'syz.3.209': attribute type 10 has an invalid length.
[  112.174235][ T6830] input: syz0 as /devices/virtual/input/input10
[  112.274462][ T6831] netlink: 36 bytes leftover after parsing attributes in process `syz.0.210'.
[  112.294337][ T6833] input: syz1 as /devices/virtual/input/input11
[  112.411016][ T6839] netlink: 'syz.2.214': attribute type 10 has an invalid length.
[  112.447939][ T6844] fuse: Bad value for 'max_read'
[  112.740598][ T6850] netlink: 6 bytes leftover after parsing attributes in process `syz.2.217'.
[  112.744420][ T6850] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.747700][ T6850] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.752569][ T6850] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.755688][ T6850] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.178684][   T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  113.350379][   T24] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  113.355991][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  113.361529][   T24] usb 6-1: config 0 has no interfaces?
[  113.366552][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  113.371939][   T24] usb 6-1: config 0 has no interfaces?
[  113.376002][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  113.379540][   T24] usb 6-1: config 0 has no interfaces?
[  113.382268][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  113.385442][   T24] usb 6-1: config 0 has no interfaces?
[  113.388131][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  113.391911][   T24] usb 6-1: config 0 has no interfaces?
[  113.394562][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  113.397783][   T24] usb 6-1: config 0 has no interfaces?
[  113.400876][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  113.404422][   T24] usb 6-1: config 0 has no interfaces?
[  113.406903][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  113.410389][   T24] usb 6-1: config 0 has no interfaces?
[  113.413734][   T24] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  113.416670][   T24] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  113.420162][   T24] usb 6-1: Product: syz
[  113.423782][   T24] usb 6-1: Manufacturer: syz
[  113.426816][   T24] usb 6-1: SerialNumber: syz
[  113.431020][   T24] usb 6-1: config 0 descriptor??
[  113.812544][   T24] usb 6-1: USB disconnect, device number 3
[  113.944741][ T6880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.224'.
[  113.995385][ T6880] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  114.526563][ T6891] netlink: 'syz.1.227': attribute type 3 has an invalid length.
[  114.532539][ T6891] netlink: 'syz.1.227': attribute type 1 has an invalid length.
[  114.537470][ T6891] netlink: 224 bytes leftover after parsing attributes in process `syz.1.227'.
[  114.545399][ T6891] NCSI netlink: No device for ifindex 0
[  114.614068][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'.
[  114.617150][ T5758] Bluetooth: hci1: SCO packet for unknown connection handle 201
[  114.618877][ T6891] netlink: 'syz.1.227': attribute type 30 has an invalid length.
[  114.708076][ T6896] binder: 6895:6896 ioctl 6f2a 0 returned -22
[  114.714198][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  114.718126][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  114.722735][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  114.726450][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  115.279566][   T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  115.449613][   T24] usb 8-1: too many configurations: 9, using maximum allowed: 8
[  115.454037][   T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  115.458463][   T24] usb 8-1: config 0 has no interfaces?
[  115.462206][   T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  115.466507][   T24] usb 8-1: config 0 has no interfaces?
[  115.470285][   T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  115.474587][   T24] usb 8-1: config 0 has no interfaces?
[  115.477802][   T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  115.482567][   T24] usb 8-1: config 0 has no interfaces?
[  115.487222][   T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  115.490735][   T24] usb 8-1: config 0 has no interfaces?
[  115.493171][   T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  115.496334][   T24] usb 8-1: config 0 has no interfaces?
[  115.498920][   T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  115.502653][   T24] usb 8-1: config 0 has no interfaces?
[  115.505234][   T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  115.508360][   T24] usb 8-1: config 0 has no interfaces?
[  115.511748][   T24] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  115.514623][   T24] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  115.517258][   T24] usb 8-1: Product: syz
[  115.518604][   T24] usb 8-1: Manufacturer: syz
[  115.520715][   T24] usb 8-1: SerialNumber: syz
[  115.525064][   T24] usb 8-1: config 0 descriptor??
[  115.604340][ T6905] syz.1.230 (6905) used greatest stack depth: 18936 bytes left
[  115.674160][ T6922] fuse: Unknown parameter '0x00000000000000000x0000000000000003'
[  115.721205][ T6925] overlayfs: failed to resolve './file0': -2
[  115.738069][   T24] usb 8-1: USB disconnect, device number 2
[  116.314855][ T6933] FAT-fs (loop3): unable to read boot sector
[  116.321185][   T40] kauditd_printk_skb: 23 callbacks suppressed
[  116.321199][   T40] audit: type=1326 audit(1780580650.083:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.3.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8f7c code=0x7ffc0000
[  116.339103][   T40] audit: type=1326 audit(1780580650.093:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.3.241" exe="/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf7ff8f7c code=0x7ffc0000
[  116.349936][   T40] audit: type=1326 audit(1780580650.113:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.3.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8f7c code=0x7ffc0000
[  116.368983][   T40] audit: type=1326 audit(1780580650.113:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.3.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8f7c code=0x7ffc0000
[  116.382083][   T40] audit: type=1326 audit(1780580650.113:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.3.241" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7ff8f7c code=0x7ffc0000
[  116.403891][   T40] audit: type=1326 audit(1780580650.123:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.3.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8f7c code=0x7ffc0000
[  116.412770][   T40] audit: type=1326 audit(1780580650.123:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.3.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8f7c code=0x7ffc0000
[  116.419329][   T40] audit: type=1326 audit(1780580650.123:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.3.241" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff8f7c code=0x7ffc0000
[  116.425756][   T40] audit: type=1326 audit(1780580650.123:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.3.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8f7c code=0x7ffc0000
[  116.434068][   T40] audit: type=1326 audit(1780580650.123:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.3.241" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7ff8f7c code=0x7ffc0000
[  116.632052][ T6935] netlink: 'syz.0.243': attribute type 11 has an invalid length.
[  116.637192][ T6935] netlink: 'syz.0.243': attribute type 11 has an invalid length.
[  116.820016][ T6943] lo: Caught tx_queue_len zero misconfig
[  116.822644][ T6943] netem: change failed
[  116.868703][ T6944] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[  116.871122][ T6944] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  116.875927][ T6944] vhci_hcd vhci_hcd.0: Device attached
[  116.961034][ T6951] netlink: 'syz.3.246': attribute type 1 has an invalid length.
[  116.964472][ T6951] netlink: 24 bytes leftover after parsing attributes in process `syz.3.246'.
[  117.057750][ T6948] vhci_hcd: connection closed
[  117.058373][ T6067] vhci_hcd vhci_hcd.0: stop threads
[  117.061931][ T6067] vhci_hcd vhci_hcd.0: release socket
[  117.063685][ T6067] vhci_hcd vhci_hcd.0: disconnect device
[  117.214722][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.247'.
[  117.752710][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.249'.
[  117.841365][ T6965] FAULT_INJECTION: forcing a failure.
[  117.841365][ T6965] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  117.857229][ T6965] CPU: 0 UID: 0 PID: 6965 Comm: syz.0.249 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  117.857272][ T6965] Tainted: [L]=SOFTLOCKUP
[  117.857276][ T6965] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  117.857283][ T6965] Call Trace:
[  117.857289][ T6965]  <TASK>
[  117.857296][ T6965]  dump_stack_lvl+0x100/0x190
[  117.857333][ T6965]  should_fail_ex.cold+0x5/0xa
[  117.857354][ T6965]  _copy_from_user+0x2e/0xd0
[  117.857377][ T6965]  get_compat_msghdr+0xb3/0x4b0
[  117.857397][ T6965]  ? __pfx_get_compat_msghdr+0x10/0x10
[  117.857417][ T6965]  ? rcu_is_watching+0x12/0xc0
[  117.857434][ T6965]  ? ___sys_sendmsg+0x19d/0x1e0
[  117.857451][ T6965]  ? kfree+0x1dd/0x6c0
[  117.857466][ T6965]  ? __pfx__kstrtoull+0x10/0x10
[  117.857478][ T6965]  ___sys_sendmsg+0x1b6/0x1e0
[  117.857494][ T6965]  ? __pfx____sys_sendmsg+0x10/0x10
[  117.857510][ T6965]  ? __lock_acquire+0x4a5/0x2630
[  117.857538][ T6965]  ? __pfx___might_resched+0x10/0x10
[  117.857552][ T6965]  __sys_sendmmsg+0x2ff/0x430
[  117.857565][ T6965]  ? __pfx___sys_sendmmsg+0x10/0x10
[  117.857581][ T6965]  ? __fget_files+0x215/0x3d0
[  117.857600][ T6965]  ? fput+0x79/0x100
[  117.857615][ T6965]  ? ksys_write+0x1ac/0x250
[  117.857629][ T6965]  __ia32_compat_sys_sendmmsg+0x9d/0x100
[  117.857642][ T6965]  ? lockdep_hardirqs_on+0x78/0x100
[  117.857662][ T6965]  __do_fast_syscall_32+0xe7/0x970
[  117.857678][ T6965]  ? lockdep_hardirqs_on+0x78/0x100
[  117.857695][ T6965]  do_fast_syscall_32+0x32/0x70
[  117.857712][ T6965]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  117.857730][ T6965] RIP: 0023:0xf709ef7c
[  117.857742][ T6965] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  117.857755][ T6965] RSP: 002b:00000000f546c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159
[  117.857770][ T6965] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080004d00
[  117.857780][ T6965] RDX: 0000000000000300 RSI: 0000000000000f1c RDI: 0000000000000000
[  117.857788][ T6965] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  117.857797][ T6965] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  117.857805][ T6965] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  117.857826][ T6965]  </TASK>
[  118.236920][ T6969] syz.3.250 uses obsolete (PF_INET,SOCK_PACKET)
[  118.719197][   T29] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  118.869260][   T29] usb 7-1: Using ep0 maxpacket: 8
[  118.874972][   T29] usb 7-1: config 147 has an invalid interface number: 152 but max is 3
[  118.879363][   T29] usb 7-1: config 147 contains an unexpected descriptor of type 0x1, skipping
[  118.885508][   T29] usb 7-1: config 147 contains an unexpected descriptor of type 0x1, skipping
[  118.889320][   T29] usb 7-1: config 147 has an invalid interface number: 116 but max is 3
[  118.892222][   T29] usb 7-1: config 147 has an invalid interface number: 11 but max is 3
[  118.894928][   T29] usb 7-1: config 147 contains an unexpected descriptor of type 0x2, skipping
[  118.897961][   T29] usb 7-1: config 147 contains an unexpected descriptor of type 0x2, skipping
[  118.901004][   T29] usb 7-1: config 147 has no interface number 1
[  118.903377][   T29] usb 7-1: config 147 has no interface number 2
[  118.905757][   T29] usb 7-1: config 147 has no interface number 3
[  118.908013][   T29] usb 7-1: config 147 interface 152 altsetting 3 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  118.912242][   T29] usb 7-1: config 147 interface 152 altsetting 3 has a duplicate endpoint with address 0xF, skipping
[  118.916315][   T29] usb 7-1: config 147 interface 152 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[  118.919928][   T29] usb 7-1: config 147 interface 152 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[  118.923667][   T29] usb 7-1: config 147 interface 152 altsetting 3 endpoint 0xA has invalid maxpacket 1023, setting to 64
[  118.927864][   T29] usb 7-1: config 147 interface 152 altsetting 3 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  118.931775][   T29] usb 7-1: config 147 interface 152 altsetting 3 endpoint 0xD has an invalid bInterval 127, changing to 10
[  118.935463][   T29] usb 7-1: config 147 interface 152 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[  118.939596][   T29] usb 7-1: config 147 interface 152 altsetting 3 endpoint 0xC has invalid maxpacket 44423, setting to 64
[  118.943513][   T29] usb 7-1: config 147 interface 152 altsetting 3 has a duplicate endpoint with address 0x1, skipping
[  118.947299][   T29] usb 7-1: config 147 interface 152 altsetting 3 has a duplicate endpoint with address 0xD, skipping
[  118.951822][   T29] usb 7-1: config 147 interface 0 altsetting 3 has a duplicate endpoint with address 0x4, skipping
[  118.956026][   T29] usb 7-1: config 147 interface 0 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[  118.960574][   T29] usb 7-1: config 147 interface 0 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[  118.964670][   T29] usb 7-1: config 147 interface 0 altsetting 3 has a duplicate endpoint with address 0x6, skipping
[  118.968317][   T29] usb 7-1: config 147 interface 0 altsetting 3 has a duplicate endpoint with address 0x6, skipping
[  118.973107][   T29] usb 7-1: config 147 interface 0 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[  118.977488][   T29] usb 7-1: config 147 interface 0 altsetting 3 has a duplicate endpoint with address 0x6, skipping
[  118.981882][   T29] usb 7-1: config 147 interface 0 altsetting 3 has a duplicate endpoint with address 0x6, skipping
[  118.986195][   T29] usb 7-1: config 147 interface 0 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[  118.990173][   T29] usb 7-1: config 147 interface 0 altsetting 3 has a duplicate endpoint with address 0xA, skipping
[  118.994625][   T29] usb 7-1: config 147 interface 0 altsetting 3 has a duplicate endpoint with address 0x4, skipping
[  118.998806][   T29] usb 7-1: config 147 interface 116 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  119.002807][   T29] usb 7-1: config 147 interface 116 altsetting 5 has a duplicate endpoint with address 0xC, skipping
[  119.006820][   T29] usb 7-1: config 147 interface 116 altsetting 5 has a duplicate endpoint with address 0x1, skipping
[  119.011490][   T29] usb 7-1: config 147 interface 116 altsetting 5 has an endpoint descriptor with address 0x41, changing to 0x1
[  119.016248][   T29] usb 7-1: config 147 interface 116 altsetting 5 has a duplicate endpoint with address 0x1, skipping
[  119.020552][   T29] usb 7-1: config 147 interface 116 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  119.024736][   T29] usb 7-1: config 147 interface 116 altsetting 5 has a duplicate endpoint with address 0x1, skipping
[  119.028886][   T29] usb 7-1: config 147 interface 116 altsetting 5 has a duplicate endpoint with address 0x1, skipping
[  119.033439][   T29] usb 7-1: config 147 interface 116 altsetting 5 has a duplicate endpoint with address 0x4, skipping
[  119.037208][   T29] usb 7-1: config 147 interface 116 altsetting 5 has a duplicate endpoint with address 0x6, skipping
[  119.041227][   T29] usb 7-1: config 147 interface 116 altsetting 5 has a duplicate endpoint with address 0xA, skipping
[  119.044847][   T29] usb 7-1: config 147 interface 116 altsetting 5 has a duplicate endpoint with address 0xD, skipping
[  119.048388][   T29] usb 7-1: config 147 interface 116 altsetting 5 has a duplicate endpoint with address 0xA, skipping
[  119.052317][   T29] usb 7-1: config 147 interface 11 altsetting 5 has a duplicate endpoint with address 0x6, skipping
[  119.055762][   T29] usb 7-1: config 147 interface 11 altsetting 5 has a duplicate endpoint with address 0xD, skipping
[  119.059648][   T29] usb 7-1: config 147 interface 11 altsetting 5 has a duplicate endpoint with address 0x2, skipping
[  119.063152][   T29] usb 7-1: config 147 interface 11 altsetting 5 has a duplicate endpoint with address 0xD, skipping
[  119.066445][   T29] usb 7-1: config 147 interface 11 altsetting 5 has a duplicate endpoint with address 0xF, skipping
[  119.070567][   T29] usb 7-1: config 147 interface 11 altsetting 5 has a duplicate endpoint with address 0x4, skipping
[  119.074103][   T29] usb 7-1: config 147 interface 152 has no altsetting 0
[  119.076310][   T29] usb 7-1: config 147 interface 0 has no altsetting 0
[  119.078447][   T29] usb 7-1: config 147 interface 116 has no altsetting 0
[  119.081268][   T29] usb 7-1: config 147 interface 11 has no altsetting 0
[  119.085501][   T29] usb 7-1: Dual-Role OTG device on HNP port
[  119.087677][   T29] usb 7-1: New USB device found, idVendor=0df7, idProduct=0620, bcdDevice=58.e3
[  119.091201][   T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.093797][   T29] usb 7-1: Product: �稞䵙⥤┫⦆镭໯�㩶위귗�蔈ꗨ�䦺磜�늙ု✢ĭ�㙀薎�ⵈ텤鎬໳噣ⱡరゅ송₢䰉ப⭦콤婒Ე椱�拂悠��ዒ愕迈嬉殦힔ᯪ�戩梗ఎ㞹ꂈ嫲䜸⧧鰎頼〺얢婪༼翞஋狾㧬筚ﶚ瓶볟ㄱ�良�쾱���
[  119.104948][   T29] usb 7-1: Manufacturer: 苨�ﺒ⿑﮳襇�╽℆鿊辰顸鑄꒮槨嚮㸛焆�㱌��ᨃ㵆�緄鄮韛�ﰯퟫΜ꧹Ɫ밄헬⮆俹羋쑦�柸穥Ⱚ䯩ড়ꕒ�䵞ٗ⥕푃㓸瑌漻퉅��㸢ᷨ励ۿಖₓﶋꓗ욽ꋭ戻﫺�䖦ꜷ兣뵵鈶�ω셠��氈鶋蜳
[  119.113849][   T29] usb 7-1: SerialNumber: 풙뇱ᒌ蛎쇲審ꀊ蛒້눭㓯략鴩ꃿ�瀇ᤕ㓪훲蜱풓〱뼜✊홌䑃�陓雛煜ﶷ⧟頷≑⪿箖魺瘕御䡩鰞㌉�⤒♺딼蕳慼칯泑딫訲昀㩠怨㹄ሪ웼瞀輸㔂衚뉕ゟ밺駰�甦⬲훢魔猸⾱ʜ쭼᳉칎�䗠셄魧඄ђᴡ秕輗
[  119.131548][ T6976] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  119.360092][ T6976] netlink: 'syz.2.253': attribute type 10 has an invalid length.
[  119.475903][ T7011] netlink: 'syz.3.255': attribute type 2 has an invalid length.
[  119.478420][ T7011] netlink: 224 bytes leftover after parsing attributes in process `syz.3.255'.
[  119.597811][   T29] pl2303 7-1:147.152: required endpoints missing
[  119.628688][   T29] pl2303 7-1:147.0: required endpoints missing
[  119.676713][   T29] pl2303 7-1:147.116: required endpoints missing
[  119.687502][   T29] pl2303 7-1:147.11: required endpoints missing
[  119.697004][   T29] usb 7-1: USB disconnect, device number 3
[  119.745481][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.257'.
[  119.846279][ T7019] netlink: 'syz.1.258': attribute type 2 has an invalid length.
[  119.850718][ T7019] netlink: 224 bytes leftover after parsing attributes in process `syz.1.258'.
[  120.599483][ T5838] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  120.750312][ T5838] usb 8-1: too many configurations: 9, using maximum allowed: 8
[  120.754811][ T5838] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  120.759114][ T5838] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  120.767307][ T5838] usb 8-1: config 0 interface 0 has no altsetting 0
[  120.772238][ T5838] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  120.776472][ T5838] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  120.784529][ T5838] usb 8-1: config 0 interface 0 has no altsetting 0
[  120.791935][ T5838] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  120.795753][ T5838] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  120.799604][ T5838] usb 8-1: config 0 interface 0 has no altsetting 0
[  120.802698][ T5838] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  120.807721][ T5838] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  120.811165][ T5838] usb 8-1: config 0 interface 0 has no altsetting 0
[  120.815309][ T5838] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  120.819804][ T5838] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  120.823463][ T5838] usb 8-1: config 0 interface 0 has no altsetting 0
[  120.829853][ T5838] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  120.834079][ T5838] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  120.839138][ T5838] usb 8-1: config 0 interface 0 has no altsetting 0
[  120.842205][ T5838] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  120.845946][ T5838] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  120.848867][ T5838] usb 8-1: config 0 interface 0 has no altsetting 0
[  120.852532][ T5838] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  120.856095][ T5838] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  120.860410][ T5838] usb 8-1: config 0 interface 0 has no altsetting 0
[  120.864215][ T5838] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  120.869061][ T5838] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  120.874414][ T5838] usb 8-1: Product: syz
[  120.876210][ T5838] usb 8-1: Manufacturer: syz
[  120.880633][ T5838] usb 8-1: SerialNumber: syz
[  120.883373][ T5838] usb 8-1: config 0 descriptor??
[  120.893228][ T5838] yurex 8-1:0.0: Could not find endpoints
[  120.941536][ T7030] ieee802154 phy0 wpan0: encryption failed: -22
[  121.006000][ T7039] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  121.012135][ T7039] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  121.018145][ T7039] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  121.022340][ T7039] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  121.026868][ T7039] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  121.031212][ T7039] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  121.035762][ T7039] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  121.040241][ T7039] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  121.046936][ T7039] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1)
[  121.058946][ T7042] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  121.063269][ T7042] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  121.068022][ T7042] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  121.072049][ T7042] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  121.076597][ T7042] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  121.080867][ T7042] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  121.085297][ T7042] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  121.093533][ T7042] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  121.098035][ T7042] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1)
[  121.098455][   T50] usb 8-1: USB disconnect, device number 3
[  121.712510][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.267'.
[  121.992115][ T7061] netlink: 'syz.0.269': attribute type 2 has an invalid length.
[  121.994861][ T7061] netlink: 224 bytes leftover after parsing attributes in process `syz.0.269'.
[  123.229758][   T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  123.383551][    T9] kernel write not supported for file /input/event2 (pid: 9 comm: kworker/0:0)
[  123.411862][   T24] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  123.973629][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  124.284719][   T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  124.312674][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  124.317991][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  124.321360][   T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  124.324160][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  124.327459][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  124.330838][   T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  124.333791][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  124.337974][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  124.341397][   T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  124.344380][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  124.347649][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  124.353477][   T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  124.357794][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  124.361717][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  124.365719][   T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  124.368652][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  124.371877][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  124.375410][   T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  124.378385][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  124.381651][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  124.384979][   T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  124.390228][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  124.394008][   T24] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  124.397202][   T24] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  124.399995][   T24] usb 5-1: Product: syz
[  124.401339][   T24] usb 5-1: Manufacturer: syz
[  124.403315][   T24] usb 5-1: SerialNumber: syz
[  124.406833][   T24] usb 5-1: config 0 descriptor??
[  124.410522][   T24] yurex 5-1:0.0: Could not find endpoints
[  124.455384][ T7093] could not allocate digest TFM handle sha224-neon
[  124.617268][   T24] usb 5-1: USB disconnect, device number 9
[  125.488808][ T7123] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.718702][ T7111] netlink: 'syz.3.283': attribute type 1 has an invalid length.
[  126.069250][ T7111] bond1: option mode: invalid value (9)
[  126.100458][ T7111] bond1 (unregistering): Released all slaves
[  126.620674][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.294'.
[  126.712111][ T7178] policy can only be matched on NF_INET_PRE_ROUTING
[  126.712123][ T7178] unable to load match
[  126.750208][ T5894] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  126.910780][ T5894] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  126.915854][ T5894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  126.924326][ T5894] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  126.927964][ T5894] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  126.940200][ T5894] usb 5-1: config 0 interface 0 has no altsetting 0
[  126.945984][ T5894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  126.950467][ T5894] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  126.953988][ T5894] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  126.959051][ T5894] usb 5-1: config 0 interface 0 has no altsetting 0
[  126.962752][ T5894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  126.966903][ T5894] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  126.970426][ T5894] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  126.975263][ T5894] usb 5-1: config 0 interface 0 has no altsetting 0
[  126.978639][ T5894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  126.983181][ T5894] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  126.986749][ T5894] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  126.991075][ T5894] usb 5-1: config 0 interface 0 has no altsetting 0
[  126.995272][ T5894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  126.998530][ T5894] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  127.001685][ T5894] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  127.005734][ T5894] usb 5-1: config 0 interface 0 has no altsetting 0
[  127.010288][ T5894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  127.013510][ T5894] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  127.016337][ T5894] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  127.020453][ T5894] usb 5-1: config 0 interface 0 has no altsetting 0
[  127.026022][ T5894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  127.029358][ T5894] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  127.032323][ T5894] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  127.037179][ T5894] usb 5-1: config 0 interface 0 has no altsetting 0
[  127.040802][ T5894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  127.044081][ T5894] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  127.046997][ T5894] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  127.051808][ T5894] usb 5-1: config 0 interface 0 has no altsetting 0
[  127.056555][ T5894] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  127.059481][ T5894] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  127.062231][ T5894] usb 5-1: Product: syz
[  127.063709][ T5894] usb 5-1: Manufacturer: syz
[  127.065276][ T5894] usb 5-1: SerialNumber: syz
[  127.073947][ T5894] usb 5-1: config 0 descriptor??
[  127.084055][ T5894] yurex 5-1:0.0: Could not find endpoints
[  127.286683][ T6208] usb 5-1: USB disconnect, device number 10
[  127.630190][ T7190] can0: slcan on ptm0.
[  127.641009][ T7190] netlink: 16 bytes leftover after parsing attributes in process `syz.1.298'.
[  127.744913][ T7189] can0 (unregistered): slcan off ptm0.
[  127.833724][ T7206] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0
[  128.113154][ T7218] netlink: 14 bytes leftover after parsing attributes in process `syz.1.304'.
[  128.905081][ T7210] ALSA: mixer_oss: invalid OSS volume ''
[  128.940584][ T5751] Bluetooth: hci3: command 0x0c1a tx timeout
[  129.920664][    T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  130.073638][    T9] usb 8-1: too many configurations: 9, using maximum allowed: 8
[  130.079264][    T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.083883][    T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  130.087599][    T9] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  130.093227][    T9] usb 8-1: config 0 interface 0 has no altsetting 0
[  130.097286][    T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.101933][    T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  130.105777][    T9] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  130.111787][    T9] usb 8-1: config 0 interface 0 has no altsetting 0
[  130.115752][    T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.119896][    T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  130.123466][    T9] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  130.128634][    T9] usb 8-1: config 0 interface 0 has no altsetting 0
[  130.131905][    T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.136243][    T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  130.139887][    T9] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  130.145456][    T9] usb 8-1: config 0 interface 0 has no altsetting 0
[  130.150022][    T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.154608][    T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  130.158686][    T9] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  130.164341][    T9] usb 8-1: config 0 interface 0 has no altsetting 0
[  130.168201][    T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.172722][    T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  130.176452][    T9] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  130.182565][    T9] usb 8-1: config 0 interface 0 has no altsetting 0
[  130.186414][    T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.190780][    T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  130.194475][    T9] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  130.199852][    T9] usb 8-1: config 0 interface 0 has no altsetting 0
[  130.204135][    T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.208452][    T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  130.212267][    T9] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  130.217332][    T9] usb 8-1: config 0 interface 0 has no altsetting 0
[  130.222552][    T9] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  130.227009][    T9] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  130.230844][    T9] usb 8-1: Product: syz
[  130.232608][    T9] usb 8-1: Manufacturer: syz
[  130.234534][    T9] usb 8-1: SerialNumber: syz
[  130.239331][    T9] usb 8-1: config 0 descriptor??
[  130.244640][    T9] yurex 8-1:0.0: Could not find endpoints
[  130.319801][ T7258] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  130.445580][    T9] usb 8-1: USB disconnect, device number 4
[  130.945145][ T7275] =======================================================
[  130.945145][ T7275] WARNING: The mand mount option has been deprecated and
[  130.945145][ T7275]          and is ignored by this kernel. Remove the mand
[  130.945145][ T7275]          option from the mount to silence this warning.
[  130.945145][ T7275] =======================================================
[  131.008242][   T40] kauditd_printk_skb: 56 callbacks suppressed
[  131.008255][   T40] audit: type=1326 audit(1781104952.769:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.2.319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef7c code=0x7ffc0000
[  131.019200][   T40] audit: type=1326 audit(1781104952.779:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.2.319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef7c code=0x7ffc0000
[  131.026891][   T40] audit: type=1326 audit(1781104952.779:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.2.319" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704ef7c code=0x7ffc0000
[  131.033841][   T40] audit: type=1326 audit(1781104952.779:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.2.319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef7c code=0x7ffc0000
[  131.042074][   T40] audit: type=1326 audit(1781104952.779:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.2.319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef7c code=0x7ffc0000
[  131.049586][   T40] audit: type=1326 audit(1781104952.779:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.2.319" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf704ef7c code=0x7ffc0000
[  131.056703][   T40] audit: type=1326 audit(1781104952.779:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.2.319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef7c code=0x7ffc0000
[  131.063501][   T40] audit: type=1326 audit(1781104952.779:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.2.319" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf704ef7c code=0x7ffc0000
[  131.070343][   T40] audit: type=1326 audit(1781104952.779:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.2.319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef7c code=0x7ffc0000
[  131.077038][   T40] audit: type=1326 audit(1781104952.779:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.2.319" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf704ef7c code=0x7ffc0000
[  131.339419][ T7289] netlink: 'syz.1.322': attribute type 2 has an invalid length.
[  131.343652][ T7289] netlink: 224 bytes leftover after parsing attributes in process `syz.1.322'.
[  131.821193][ T7299] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[  131.823267][ T7299] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  131.828353][ T7299] vhci_hcd vhci_hcd.0: Device attached
[  132.030917][ T6208] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  132.074006][ T7309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.326'.
[  132.089696][ T6208] usb 43-1: new full-speed USB device number 2 using vhci_hcd
[  132.132536][ T7314] input: syz0 as /devices/virtual/input/input14
[  132.358649][ T7322] fuse: root generation should be zero
[  132.419557][    T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  132.443924][ T7326] Invalid argument reading file caps for ./file0
[  132.579719][    T9] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  132.582903][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  132.719134][ T7301] vhci_hcd: connection reset by peer
[  132.722236][ T6069] vhci_hcd vhci_hcd.3: stop threads
[  132.724396][ T6069] vhci_hcd vhci_hcd.3: release socket
[  132.727956][ T6069] vhci_hcd vhci_hcd.3: disconnect device
[  132.770267][    T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  133.055367][    T9] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  133.059438][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  133.066941][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  133.070153][    T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  133.072930][    T9] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  133.076883][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  133.080107][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  133.083301][    T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  133.085971][    T9] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  133.090069][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  133.093064][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  133.096270][    T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  133.099170][    T9] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  133.103106][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  133.114236][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  133.117959][    T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  133.122259][    T9] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  133.128379][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  133.133048][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  133.137077][    T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  133.140407][    T9] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  133.146415][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  133.152963][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  133.158737][    T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  133.162168][    T9] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  133.166203][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  133.172399][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  133.181199][    T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  133.185290][ T7336] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  133.187904][ T7336] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  133.191734][    T9] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  133.195936][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  133.208264][    T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  133.211353][    T9] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  133.213936][    T9] usb 6-1: Product: syz
[  133.215222][    T9] usb 6-1: Manufacturer: syz
[  133.216676][    T9] usb 6-1: SerialNumber: syz
[  133.224635][    T9] usb 6-1: config 0 descriptor??
[  133.229663][    T9] yurex 6-1:0.0: Could not find endpoints
[  133.242318][ T7336] vhci_hcd vhci_hcd.0: Device attached
[  133.323316][ T7336] EXT4-fs (sr0): VFS: Can't find ext4 filesystem
[  133.429950][ T7343] netlink: 'syz.0.337': attribute type 2 has an invalid length.
[  133.432387][ T7343] netlink: 224 bytes leftover after parsing attributes in process `syz.0.337'.
[  133.450237][    T9] usb 6-1: USB disconnect, device number 4
[  133.483854][ T7345] FAT-fs (nbd3): unable to read boot sector
[  133.538859][   T29] usb 42-1: SetAddress Request (6) to port 0
[  133.540946][   T29] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd
[  133.571540][ T7338] vhci_hcd: connection reset by peer
[  133.576363][   T86] vhci_hcd vhci_hcd.2: stop threads
[  133.578065][   T86] vhci_hcd vhci_hcd.2: release socket
[  133.579943][   T86] vhci_hcd vhci_hcd.2: disconnect device
[  133.701898][ T7349] netlink: 'syz.3.338': attribute type 1 has an invalid length.
[  133.720429][ T7349] 8021q: adding VLAN 0 to HW filter on device bond1
[  134.084201][ T7354] netlink: 16 bytes leftover after parsing attributes in process `syz.1.339'.
[  134.124879][ T7353] can0: slcan on ptm0.
[  134.347472][ T7352] can0 (unregistered): slcan off ptm0.
[  134.493104][ T7375] netlink: 5 bytes leftover after parsing attributes in process `syz.1.342'.
[  134.496504][ T7375] 0ªî{X¹¦: renamed from gretap0 (while UP)
[  134.510723][ T7358] netlink: 'syz.2.340': attribute type 1 has an invalid length.
[  134.511042][ T7375] 0ªî{X¹¦: entered allmulticast mode
[  134.513619][ T7358] netlink: 2108 bytes leftover after parsing attributes in process `syz.2.340'.
[  134.517132][ T7375] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  134.720683][ T7385] Illegal XDP return value 4294967262 on prog  (id 52) dev syz_tun, expect packet loss!
[  134.757803][    T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  134.908039][    T9] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  134.911623][    T9] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  134.914712][    T9] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  134.918005][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.924630][ T7395] xt_hashlimit: Unknown mode mask 3246ABA4, kernel too old?
[  134.925086][ T7377] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  134.939759][    T9] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  135.037346][ T7401] netlink: 'syz.2.349': attribute type 2 has an invalid length.
[  135.040183][ T7401] netlink: 224 bytes leftover after parsing attributes in process `syz.2.349'.
[  135.316457][ T7391] netlink: 'syz.0.346': attribute type 61 has an invalid length.
[  136.040309][ T7404] can0: slcan on ptm0.
[  136.044633][ T7404] netlink: 16 bytes leftover after parsing attributes in process `syz.0.351'.
[  136.106965][ T7403] can0 (unregistered): slcan off ptm0.
[  136.217056][ T7406] binder: 7405:7406 ioctl c0306201 0 returned -14
[  136.609438][ T5751] Bluetooth: unknown link type 128
[  136.705077][ T7414] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  136.708537][ T7414] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  136.711285][ T7414] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  136.713823][ T7414] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  136.837351][    T9] usb 8-1: USB disconnect, device number 5
[  137.174185][ T6208] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  137.247620][ T7421] input: syz0 as /devices/virtual/input/input15
[  137.356901][ T7429] netlink: 'syz.1.358': attribute type 2 has an invalid length.
[  137.360356][ T7429] netlink: 224 bytes leftover after parsing attributes in process `syz.1.358'.
[  137.457384][ T7432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.359'.
[  137.499551][ T1435] ieee802154 phy0 wpan0: encryption failed: -22
[  137.511839][ T1435] ieee802154 phy1 wpan1: encryption failed: -22
[  137.573151][ T7433] netlink: 16 bytes leftover after parsing attributes in process `syz.3.360'.
[  137.650276][   T40] kauditd_printk_skb: 75 callbacks suppressed
[  137.650293][   T40] audit: type=1326 audit(1781104959.416:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7430 comm="syz.0.359" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709ef7c code=0x0
[  137.692528][ T5758] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23
[  138.123136][ T5895] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  138.273004][ T5895] usb 8-1: Using ep0 maxpacket: 8
[  138.276429][ T5895] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  138.280276][ T5895] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  138.283454][ T5895] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.287335][ T5895] usb 8-1: config 0 descriptor??
[  138.496722][ T5895] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  138.569710][ T7456] netlink: 36 bytes leftover after parsing attributes in process `syz.2.365'.
[  138.623704][   T29] usb 42-1: device descriptor read/8, error -110
[  138.702708][ T5758] Bluetooth: hci1: command 0x0c1a tx timeout
[  138.730613][ T7460] 0ªî{X¹¦: left allmulticast mode
[  138.782418][ T5758] Bluetooth: hci3: command 0x0c1a tx timeout
[  138.782467][ T5751] Bluetooth: hci2: command 0x0c1a tx timeout
[  138.782538][ T5763] Bluetooth: hci0: command 0x0c1a tx timeout
[  138.909731][   T86] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  138.913605][   T86] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.917678][   T86] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  138.921768][   T86] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.925705][   T86] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  138.929452][   T86] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.933461][   T86] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  138.937153][   T86] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.024419][   T29] usb usb42-port1: attempt power cycle
[  139.432103][ T7481] can0: slcan on ptm0.
[  139.442824][ T7481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.369'.
[  139.544178][ T7480] can0 (unregistered): slcan off ptm0.
[  139.614509][   T29] usb usb42-port1: unable to enumerate USB device
[  139.650986][   T40] audit: type=1326 audit(1781104961.419:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.2.370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef7c code=0x7fc00000
[  139.877416][ T7516] netlink: 'syz.2.371': attribute type 2 has an invalid length.
[  139.880714][ T7516] netlink: 224 bytes leftover after parsing attributes in process `syz.2.371'.
[  140.831970][ T7528] IPv6: NLM_F_CREATE should be specified when creating new route
[  140.969608][   T29] usb 8-1: USB disconnect, device number 6
[  142.598090][   T40] audit: type=1326 audit(1781104964.362:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.3.381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8f7c code=0x7ffc0000
[  142.609122][   T40] audit: type=1326 audit(1781104964.382:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.3.381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8f7c code=0x7ffc0000
[  142.626531][   T40] audit: type=1326 audit(1781104964.382:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.3.381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8f7c code=0x7ffc0000
[  142.639762][   T40] audit: type=1326 audit(1781104964.382:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.3.381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8f7c code=0x7ffc0000
[  142.652328][   T40] audit: type=1326 audit(1781104964.382:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.3.381" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7ff8f7c code=0x7ffc0000
[  142.664171][   T40] audit: type=1326 audit(1781104964.382:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.3.381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8f7c code=0x7ffc0000
[  142.675308][   T40] audit: type=1326 audit(1781104964.392:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.3.381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8f7c code=0x7ffc0000
[  142.686912][   T40] audit: type=1326 audit(1781104964.392:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.3.381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8f7c code=0x7ffc0000
[  142.696286][   T40] audit: type=1326 audit(1781104964.392:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.3.381" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7ff8f7c code=0x7ffc0000
[  142.705573][   T40] audit: type=1326 audit(1781104964.392:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.3.381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8f7c code=0x7ffc0000
[  142.716471][   T40] audit: type=1326 audit(1781104964.392:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.3.381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8f7c code=0x7ffc0000
[  142.727311][   T40] audit: type=1326 audit(1781104964.392:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.3.381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8f7c code=0x7ffc0000
[  142.738095][   T40] audit: type=1326 audit(1781104964.402:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.3.381" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff8f7c code=0x7ffc0000
[  142.749152][   T40] audit: type=1326 audit(1781104964.402:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.3.381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8f7c code=0x7ffc0000
[  143.362198][ T7587] can0: slcan on ptm0.
[  143.391764][ T7587] netlink: 16 bytes leftover after parsing attributes in process `syz.2.384'.
[  143.547313][ T7586] can0 (unregistered): slcan off ptm0.
[  143.593872][ T7598] netlink: 32 bytes leftover after parsing attributes in process `syz.2.385'.
[  143.634377][ T7599] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  143.636689][ T7599] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  143.648786][ T7599] vhci_hcd vhci_hcd.0: Device attached
[  143.744426][ T7604] netlink: 52 bytes leftover after parsing attributes in process `syz.2.385'.
[  143.900596][ T7600] vhci_hcd: connection closed
[  143.901768][ T1162] vhci_hcd vhci_hcd.0: stop threads
[  143.906916][    T9] usb 38-1: SetAddress Request (3) to port 0
[  143.907370][ T1162] vhci_hcd vhci_hcd.0: release socket
[  143.909874][    T9] usb 38-1: new SuperSpeed USB device number 3 using vhci_hcd
[  143.921242][ T1162] vhci_hcd vhci_hcd.0: disconnect device
[  143.938105][    T9] usb 38-1: enqueue for inactive port 0
[  143.997176][ T7623] netlink: 'syz.1.389': attribute type 2 has an invalid length.
[  144.000810][ T7623] netlink: 224 bytes leftover after parsing attributes in process `syz.1.389'.
[  144.155599][ T7625] netlink: 'syz.3.388': attribute type 10 has an invalid length.
[  144.327422][    T9] usb usb38-port1: attempt power cycle
[  144.327540][ T7624] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  144.367703][ T7621] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  144.414846][ T7624] block device autoloading is deprecated and will be removed.
[  144.424782][ T7621] block device autoloading is deprecated and will be removed.
[  145.007455][    T9] usb usb38-port1: unable to enumerate USB device
[  145.973747][ T7642] can0: slcan on ptm0.
[  145.987108][ T7642] netlink: 16 bytes leftover after parsing attributes in process `syz.1.393'.
[  146.125824][ T7641] can0 (unregistered): slcan off ptm0.
[  146.295655][ T7663] netlink: 28 bytes leftover after parsing attributes in process `syz.1.396'.
[  146.297817][ T7664] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request
[  146.944577][ T7676] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  146.947350][ T7676] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  146.951127][ T7676] vhci_hcd vhci_hcd.0: Device attached
[  147.025996][ T7676] wg2 speed is unknown, defaulting to 1000
[  147.047242][ T7676] wg2 speed is unknown, defaulting to 1000
[  147.104436][ T7676] wg2 speed is unknown, defaulting to 1000
[  147.217373][ T7681] syzkaller0: entered promiscuous mode
[  147.219277][ T7681] syzkaller0: entered allmulticast mode
[  147.243327][ T5894] usb 38-1: SetAddress Request (7) to port 0
[  147.249624][ T5894] usb 38-1: new SuperSpeed USB device number 7 using vhci_hcd
[  147.430056][   T59] wg2 speed is unknown, defaulting to 1000
[  147.436167][ T7676] infiniband syz2: set active
[  147.442246][ T7676] infiniband syz2: added wg2
[  147.468560][ T7676] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  147.474752][ T7676] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  147.482721][ T7676] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  147.541924][ T7677] vhci_hcd: connection reset by peer
[  147.546661][   T13] vhci_hcd vhci_hcd.0: stop threads
[  147.548402][   T13] vhci_hcd vhci_hcd.0: release socket
[  147.553678][   T13] vhci_hcd vhci_hcd.0: disconnect device
[  147.567663][ T7676] RDS/IB: syz2: added
[  147.569999][ T7676] smc: adding ib device syz2 with port count 1
[  147.572100][ T7676] smc:    ib device syz2 port 1 has no pnetid
[  147.576116][   T59] wg2 speed is unknown, defaulting to 1000
[  147.583672][ T7676] wg2 speed is unknown, defaulting to 1000
[  147.737791][ T7676] wg2 speed is unknown, defaulting to 1000
[  147.864763][ T7676] wg2 speed is unknown, defaulting to 1000
[  147.893125][   T50] page_pool_release_retry() stalled pool shutdown: id 26, 41 inflight 60 sec
[  147.992720][ T7676] wg2 speed is unknown, defaulting to 1000
[  148.393723][ T7693] netlink: 'syz.0.401': attribute type 2 has an invalid length.
[  148.393866][ T7693] netlink: 224 bytes leftover after parsing attributes in process `syz.0.401'.
[  149.559837][ T7712] netlink: 'syz.0.407': attribute type 1 has an invalid length.
[  149.563898][ T7712] netlink: 'syz.0.407': attribute type 2 has an invalid length.
[  149.571620][ T7712] netlink: 'syz.0.407': attribute type 1 has an invalid length.
[  149.574355][ T7712] netlink: 'syz.0.407': attribute type 1 has an invalid length.
[  149.576839][ T7712] netlink: 'syz.0.407': attribute type 2 has an invalid length.
[  149.579357][ T7712] netlink: 'syz.0.407': attribute type 2 has an invalid length.
[  150.374910][ T7727] netlink: 'syz.2.410': attribute type 2 has an invalid length.
[  150.377452][ T7727] netlink: 224 bytes leftover after parsing attributes in process `syz.2.410'.
[  150.909482][ T7736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.416'.
[  151.098439][ T7739] netlink: 60 bytes leftover after parsing attributes in process `syz.1.417'.
[  151.110195][ T7739] netlink: 60 bytes leftover after parsing attributes in process `syz.1.417'.
[  152.038709][ T7757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  152.278065][ T5894] usb 38-1: device descriptor read/8, error -110
[  152.382437][ T7769] netlink: 'syz.1.426': attribute type 2 has an invalid length.
[  152.385233][ T7769] netlink: 224 bytes leftover after parsing attributes in process `syz.1.426'.
[  153.195254][ T7781] overlayfs: failed to resolve './file2': -2
[  153.197789][ T5894] usb usb38-port1: attempt power cycle
[  153.232037][ T7784] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  153.236406][ T7784] overlayfs: failed to set xattr on upper
[  153.242708][ T7784] overlayfs: ...falling back to redirect_dir=nofollow.
[  153.245703][ T7784] overlayfs: ...falling back to index=off.
[  153.251761][ T7784] overlayfs: ...falling back to uuid=null.
[  153.264588][ T7781] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9)
[  153.266988][ T7781] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  153.272163][ T7781] vhci_hcd vhci_hcd.0: Device attached
[  153.407550][ T7790] comedi comedi2: multiq3: I/O base address not correctly aligned
[  153.433945][ T7792] netlink: 32 bytes leftover after parsing attributes in process `syz.2.433'.
[  153.441978][ T7792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.433'.
[  153.448656][ T7792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.433'.
[  153.557535][   T29] usb 44-1: SetAddress Request (2) to port 0
[  153.562719][   T29] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd
[  153.714420][ T7787] vhci_hcd: connection reset by peer
[  153.716861][   T13] vhci_hcd vhci_hcd.3: stop threads
[  153.719277][   T13] vhci_hcd vhci_hcd.3: release socket
[  153.721833][   T13] vhci_hcd vhci_hcd.3: disconnect device
[  153.775820][ T5894] usb usb38-port1: unable to enumerate USB device
[  154.541686][ T7814] vlan0: entered promiscuous mode
[  154.544338][ T7814] vlan0: entered allmulticast mode
[  154.546483][ T7814] hsr0: entered allmulticast mode
[  154.548518][ T7814] hsr_slave_0: entered allmulticast mode
[  154.550759][ T7814] hsr_slave_1: entered allmulticast mode
[  154.600731][ T7814] tipc: Started in network mode
[  154.603179][ T7814] tipc: Node identity ac14140f, cluster identity 4711
[  154.607310][ T7814] tipc: New replicast peer: 172.30.0.3
[  154.609913][ T7814] tipc: Enabled bearer <udp:syz2>, priority 10
[  154.613804][ T7814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.439'.
[  154.617704][ T7814] tipc: Disabling bearer <udp:syz2>
[  154.642865][ T7814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.439'.
[  154.652959][ T7814] hsr_slave_0: left promiscuous mode
[  154.657361][ T7814] hsr_slave_1: left promiscuous mode
[  154.855280][ T7822] FAULT_INJECTION: forcing a failure.
[  154.855280][ T7822] name failslab, interval 1, probability 0, space 0, times 0
[  154.861962][ T7822] CPU: 1 UID: 0 PID: 7822 Comm: syz.2.442 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  154.861992][ T7822] Tainted: [L]=SOFTLOCKUP
[  154.861999][ T7822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  154.862010][ T7822] Call Trace:
[  154.862016][ T7822]  <TASK>
[  154.862023][ T7822]  dump_stack_lvl+0x100/0x190
[  154.862081][ T7822]  should_fail_ex.cold+0x5/0xa
[  154.862101][ T7822]  ? kernfs_fop_write_iter+0x26a/0x5f0
[  154.862125][ T7822]  should_failslab+0xc2/0x120
[  154.862154][ T7822]  __kmalloc_noprof+0xe0/0x850
[  154.862177][ T7822]  kernfs_fop_write_iter+0x26a/0x5f0
[  154.862206][ T7822]  vfs_write+0x6ac/0x1070
[  154.862229][ T7822]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  154.862256][ T7822]  ? __pfx_vfs_write+0x10/0x10
[  154.862271][ T7822]  ? find_held_lock+0x2b/0x80
[  154.862310][ T7822]  ksys_write+0x12a/0x250
[  154.862331][ T7822]  ? __pfx_ksys_write+0x10/0x10
[  154.862347][ T7822]  ? ksys_write+0x1ac/0x250
[  154.862365][ T7822]  ? rcu_is_watching+0x12/0xc0
[  154.862386][ T7822]  __do_fast_syscall_32+0xe7/0x970
[  154.862457][ T7822]  ? lockdep_hardirqs_on+0x78/0x100
[  154.862485][ T7822]  do_fast_syscall_32+0x32/0x70
[  154.862509][ T7822]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  154.862528][ T7822] RIP: 0023:0xf704ef7c
[  154.862542][ T7822] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  154.862557][ T7822] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  154.862592][ T7822] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000500
[  154.862603][ T7822] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000
[  154.862614][ T7822] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  154.862624][ T7822] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  154.862635][ T7822] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  154.862659][ T7822]  </TASK>
[  155.069819][ T7832] tc_dump_action: action bad kind
[  155.115244][ T7835] can0: slcan on ptm0.
[  155.120735][ T7835] netlink: 16 bytes leftover after parsing attributes in process `syz.2.446'.
[  155.196806][ T7840] misc userio: No port type given on /dev/userio
[  155.246938][ T7834] can0 (unregistered): slcan off ptm0.
[  155.487574][ T7855] FAULT_INJECTION: forcing a failure.
[  155.487574][ T7855] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  155.494788][   T50] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  155.495120][ T7855] CPU: 0 UID: 0 PID: 7855 Comm: syz.0.451 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  155.495146][ T7855] Tainted: [L]=SOFTLOCKUP
[  155.495151][ T7855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  155.495160][ T7855] Call Trace:
[  155.495165][ T7855]  <TASK>
[  155.495171][ T7855]  dump_stack_lvl+0x100/0x190
[  155.495193][ T7855]  should_fail_ex.cold+0x5/0xa
[  155.495214][ T7855]  _copy_from_iter+0x1f4/0x1690
[  155.495292][ T7855]  ? __pfx__copy_from_iter+0x10/0x10
[  155.495313][ T7855]  ? rcu_is_watching+0x12/0xc0
[  155.495331][ T7855]  ? trace_kmalloc+0xe3/0x110
[  155.495350][ T7855]  ? __kasan_kmalloc+0xaa/0xb0
[  155.495368][ T7855]  ? __kmalloc_noprof+0x320/0x850
[  155.495386][ T7855]  kernfs_fop_write_iter+0x186/0x5f0
[  155.495413][ T7855]  vfs_write+0x6ac/0x1070
[  155.495432][ T7855]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  155.495457][ T7855]  ? __pfx_vfs_write+0x10/0x10
[  155.495473][ T7855]  ? find_held_lock+0x2b/0x80
[  155.495507][ T7855]  ksys_write+0x12a/0x250
[  155.495525][ T7855]  ? __pfx_ksys_write+0x10/0x10
[  155.495542][ T7855]  ? ksys_write+0x1ac/0x250
[  155.495561][ T7855]  ? rcu_is_watching+0x12/0xc0
[  155.495583][ T7855]  __do_fast_syscall_32+0xe7/0x970
[  155.495606][ T7855]  ? lockdep_hardirqs_on+0x78/0x100
[  155.495629][ T7855]  do_fast_syscall_32+0x32/0x70
[  155.495653][ T7855]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  155.495673][ T7855] RIP: 0023:0xf709ef7c
[  155.495686][ T7855] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  155.495702][ T7855] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  155.495717][ T7855] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000500
[  155.495728][ T7855] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000
[  155.495737][ T7855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  155.495746][ T7855] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  155.495755][ T7855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  155.495777][ T7855]  </TASK>
[  155.520436][ T7852] netlink: 'syz.2.449': attribute type 2 has an invalid length.
[  155.662537][ T7852] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  155.665148][ T7852] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  155.675779][ T7852] vhci_hcd vhci_hcd.0: Device attached
[  155.724717][   T50] usb 8-1: too many configurations: 9, using maximum allowed: 8
[  155.728030][   T50] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  155.731586][   T50] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  155.731604][   T50] usb 8-1: config 0 interface 0 has no altsetting 0
[  155.733386][   T50] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  155.733409][   T50] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  155.733423][   T50] usb 8-1: config 0 interface 0 has no altsetting 0
[  155.737163][   T50] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  155.737200][   T50] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  155.737218][   T50] usb 8-1: config 0 interface 0 has no altsetting 0
[  155.737981][   T50] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  155.738003][   T50] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  155.738016][   T50] usb 8-1: config 0 interface 0 has no altsetting 0
[  155.738799][   T50] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  155.738821][   T50] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  155.738834][   T50] usb 8-1: config 0 interface 0 has no altsetting 0
[  155.739584][   T50] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  155.739606][   T50] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  155.739619][   T50] usb 8-1: config 0 interface 0 has no altsetting 0
[  155.740351][   T50] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  155.740382][   T50] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  155.740395][   T50] usb 8-1: config 0 interface 0 has no altsetting 0
[  155.743329][   T50] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  155.790364][ T7852] geneve3: entered allmulticast mode
[  155.790898][   T50] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  155.790919][   T50] usb 8-1: config 0 interface 0 has no altsetting 0
[  155.792923][   T50] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  155.817883][   T50] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  155.817899][   T50] usb 8-1: Product: syz
[  155.817907][   T50] usb 8-1: Manufacturer: syz
[  155.817915][   T50] usb 8-1: SerialNumber: syz
[  155.819216][   T50] usb 8-1: config 0 descriptor??
[  155.825873][   T50] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0
[  155.944086][  T843] usb 42-1: SetAddress Request (10) to port 0
[  155.948185][  T843] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd
[  155.985485][ T7874] binder: 7873:7874 ioctl c0306201 0 returned -14
[  156.175475][ T7864] vhci_hcd: connection reset by peer
[  156.182146][ T1162] vhci_hcd vhci_hcd.2: stop threads
[  156.189564][ T1162] vhci_hcd vhci_hcd.2: release socket
[  156.196148][ T1162] vhci_hcd vhci_hcd.2: disconnect device
[  156.605351][ T7897] netlink: 'syz.0.459': attribute type 2 has an invalid length.
[  156.608759][ T7897] netlink: 224 bytes leftover after parsing attributes in process `syz.0.459'.
[  156.925085][ T7901] FAULT_INJECTION: forcing a failure.
[  156.925085][ T7901] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  156.931308][ T7901] CPU: 1 UID: 0 PID: 7901 Comm: syz.2.460 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  156.931328][ T7901] Tainted: [L]=SOFTLOCKUP
[  156.931332][ T7901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  156.931338][ T7901] Call Trace:
[  156.931345][ T7901]  <TASK>
[  156.931351][ T7901]  dump_stack_lvl+0x100/0x190
[  156.931367][ T7901]  should_fail_ex.cold+0x5/0xa
[  156.931382][ T7901]  _copy_to_user+0x32/0xd0
[  156.931401][ T7901]  simple_read_from_buffer+0xcb/0x170
[  156.931415][ T7901]  proc_fail_nth_read+0x1af/0x230
[  156.931434][ T7901]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  156.931453][ T7901]  ? rw_verify_area+0xce/0x6d0
[  156.931464][ T7901]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  156.931482][ T7901]  vfs_read+0x1e4/0xb30
[  156.931497][ T7901]  ? __pfx_vfs_read+0x10/0x10
[  156.931508][ T7901]  ? find_held_lock+0x2b/0x80
[  156.931524][ T7901]  ? __fget_files+0x215/0x3d0
[  156.931542][ T7901]  ? __fget_files+0x21f/0x3d0
[  156.931558][ T7901]  ksys_read+0x12a/0x250
[  156.931571][ T7901]  ? __pfx_ksys_read+0x10/0x10
[  156.931584][ T7901]  ? rcu_is_watching+0x12/0xc0
[  156.931597][ T7901]  ? rcu_is_watching+0x12/0xc0
[  156.931612][ T7901]  do_int80_emulation+0x14b/0x720
[  156.931632][ T7901]  asm_int80_emulation+0x1a/0x20
[  156.931643][ T7901] RIP: 0023:0xf71861ab
[  156.931653][ T7901] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  156.931664][ T7901] RSP: 002b:00000000f543d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  156.931675][ T7901] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f543d5d0
[  156.931682][ T7901] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  156.931689][ T7901] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  156.931695][ T7901] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  156.931701][ T7901] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  156.931715][ T7901]  </TASK>
[  158.032086][    C3] usb 8-1: yurex_control_callback - control failed: -2
[  158.671269][   T29] usb 44-1: device descriptor read/8, error -110
[  158.919727][ T5895] usb 8-1: USB disconnect, device number 7
[  158.928612][ T5895] yurex 8-1:0.0: USB YUREX #0 now disconnected
[  159.171256][ T7944] netlink: 60 bytes leftover after parsing attributes in process `syz.0.472'.
[  159.180635][ T7944] netlink: 60 bytes leftover after parsing attributes in process `syz.0.472'.
[  159.366014][   T29] usb usb44-port1: attempt power cycle
[  160.067322][   T29] usb usb44-port1: unable to enumerate USB device
[  160.170076][ T7963] netlink: 'syz.1.474': attribute type 2 has an invalid length.
[  160.173143][ T7963] netlink: 224 bytes leftover after parsing attributes in process `syz.1.474'.
[  160.736293][ T7961] wg2 speed is unknown, defaulting to 1000
[  160.988832][  T843] usb 42-1: device descriptor read/8, error -110
[  161.355623][   T40] kauditd_printk_skb: 329 callbacks suppressed
[  161.355634][   T40] audit: type=1326 audit(1781104983.142:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7993 comm="syz.0.483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef7c code=0x7ffc0000
[  161.365997][   T40] audit: type=1326 audit(1781104983.152:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7993 comm="syz.0.483" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709ef7c code=0x7ffc0000
[  161.368428][ T6208] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  161.376046][   T40] audit: type=1326 audit(1781104983.162:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7993 comm="syz.0.483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef7c code=0x7ffc0000
[  161.389318][   T40] audit: type=1326 audit(1781104983.172:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7993 comm="syz.0.483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef7c code=0x7ffc0000
[  161.399400][  T843] usb usb42-port1: attempt power cycle
[  161.401365][   T40] audit: type=1326 audit(1781104983.172:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7993 comm="syz.0.483" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf709ef7c code=0x7ffc0000
[  161.548899][ T6208] usb 8-1: too many configurations: 9, using maximum allowed: 8
[  161.553657][ T6208] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  161.558405][ T6208] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  161.567298][ T6208] usb 8-1: config 0 interface 0 has no altsetting 0
[  161.571829][ T6208] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  161.577328][ T6208] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  161.584389][ T6208] usb 8-1: config 0 interface 0 has no altsetting 0
[  161.589344][ T6208] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  161.596478][ T6208] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  161.602736][ T6208] usb 8-1: config 0 interface 0 has no altsetting 0
[  161.609590][ T6208] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  161.613076][ T6208] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  161.618410][ T6208] usb 8-1: config 0 interface 0 has no altsetting 0
[  161.631481][ T6208] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  161.638097][ T6208] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  161.642550][ T6208] usb 8-1: config 0 interface 0 has no altsetting 0
[  161.649217][ T6208] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  161.657896][ T6208] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  161.670944][ T6208] usb 8-1: config 0 interface 0 has no altsetting 0
[  161.675206][ T6208] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  161.688058][ T6208] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  161.692431][ T6208] usb 8-1: config 0 interface 0 has no altsetting 0
[  161.697635][ T6208] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  161.701693][ T6208] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  161.706035][ T6208] usb 8-1: config 0 interface 0 has no altsetting 0
[  161.711605][ T6208] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  161.715260][ T6208] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  161.719092][ T6208] usb 8-1: Product: syz
[  161.720802][ T6208] usb 8-1: Manufacturer: syz
[  161.722755][ T6208] usb 8-1: SerialNumber: syz
[  161.727352][ T6208] usb 8-1: config 0 descriptor??
[  161.738143][ T6208] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0
[  161.961801][  T843] usb usb42-port1: unable to enumerate USB device
[  161.981148][   T40] audit: type=1326 audit(1781104983.772:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7993 comm="syz.0.483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef7c code=0x7ffc0000
[  162.033878][   T40] audit: type=1326 audit(1781104983.812:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7993 comm="syz.0.483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef7c code=0x7ffc0000
[  162.160017][ T8008] netlink: 'syz.1.485': attribute type 2 has an invalid length.
[  162.162513][ T8008] netlink: 'syz.1.485': attribute type 2 has an invalid length.
[  162.164910][ T8008] netlink: 'syz.1.485': attribute type 2 has an invalid length.
[  162.168214][ T8008] netlink: 'syz.1.485': attribute type 1 has an invalid length.
[  162.651542][   T40] audit: type=1326 audit(1781104984.443:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8011 comm="syz.1.487" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef7c code=0x7ffc0000
[  162.663588][   T40] audit: type=1326 audit(1781104984.443:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8011 comm="syz.1.487" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef7c code=0x7ffc0000
[  162.676055][   T40] audit: type=1326 audit(1781104984.443:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8011 comm="syz.1.487" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf709ef7c code=0x7ffc0000
[  163.114782][ T8022] wg2 speed is unknown, defaulting to 1000
[  163.501880][ T8028] netlink: 'syz.1.489': attribute type 2 has an invalid length.
[  163.504454][ T8028] netlink: 224 bytes leftover after parsing attributes in process `syz.1.489'.
[  163.955799][    C0] usb 8-1: yurex_control_callback - control failed: -2
[  163.965802][   T29] usb 8-1: USB disconnect, device number 8
[  163.972205][   T29] yurex 8-1:0.0: USB YUREX #0 now disconnected
[  164.543594][ T8040] loop5: detected capacity change from 0 to 7
[  164.575669][ T8042] binder: 8038:8042 ioctl c0285840 0 returned -22
[  164.591110][ T8040] Dev loop5: unable to read RDB block 7
[  164.595108][ T8040]  loop5: unable to read partition table
[  164.601165][ T8040] loop5: partition table beyond EOD, truncated
[  164.603852][ T8040] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  165.173309][ T8047] netlink: 'syz.3.494': attribute type 2 has an invalid length.
[  165.570107][ T8059] netlink: 'syz.3.497': attribute type 11 has an invalid length.
[  165.573510][ T8059] netlink: 32 bytes leftover after parsing attributes in process `syz.3.497'.
[  165.648450][ T8061] netlink: 'syz.3.497': attribute type 11 has an invalid length.
[  165.651953][ T8061] netlink: 32 bytes leftover after parsing attributes in process `syz.3.497'.
[  167.118874][ T8081] netlink: 'syz.2.500': attribute type 2 has an invalid length.
[  167.121341][ T8081] netlink: 224 bytes leftover after parsing attributes in process `syz.2.500'.
[  167.691205][ T5838] kernel write not supported for file /input/event1 (pid: 5838 comm: kworker/2:3)
[  167.895111][ T8127] netlink: 'syz.3.509': attribute type 11 has an invalid length.
[  167.898285][ T8127] netlink: 20 bytes leftover after parsing attributes in process `syz.3.509'.
[  167.906750][ T8127] netlink: 'syz.3.509': attribute type 11 has an invalid length.
[  167.909774][ T8127] netlink: 20 bytes leftover after parsing attributes in process `syz.3.509'.
[  168.435237][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.507'.
[  168.798509][ T6208] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  169.031167][ T6208] usb 6-1: Using ep0 maxpacket: 32
[  169.785582][ T6208] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  169.788294][ T6208] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0
[  169.805806][ T6208] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  169.811832][ T6208] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  169.814122][ T6208] usb 6-1: Product: syz
[  169.819765][ T6208] usb 6-1: Manufacturer: syz
[  169.821136][ T6208] usb 6-1: SerialNumber: syz
[  169.826572][ T6208] usb 6-1: config 0 descriptor??
[  170.205799][ T8159] smc: removing ib device syz2
[  170.218975][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'.
[  170.222549][ T8159] smbdirect: ib_dev[syz2] removed
[  170.610039][ T8159] ------------[ cut here ]------------
[  170.611714][ T8159] !xa_empty(&pool->xa)
[  170.611723][ T8159] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#3: syz.0.513/8159
[  170.616456][ T8159] Modules linked in:
[  170.619440][ T8159] CPU: 3 UID: 0 PID: 8159 Comm: syz.0.513 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  170.622533][ T8159] Tainted: [L]=SOFTLOCKUP
[  170.622913][ T8169] netlink: 16 bytes leftover after parsing attributes in process `syz.3.515'.
[  170.623812][ T8159] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  170.623839][ T8159] RIP: 0010:rxe_pool_cleanup+0x46/0x60
[  170.623858][ T8159] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 86 ee 52 f9 5b c3 cc cc cc cc e8 7b ee 52 f9 90 <0f> 0b 90 e8 72 ee 52 f9 5b e9 cc fe d4 02 e8 87 dc bf f9 eb d0 0f
[  170.629272][ T8164] can0: slcan on ptm0.
[  170.629610][ T8159] RSP: 0000:ffffc90020a2f150 EFLAGS: 00010246
[  170.642484][ T8159] RAX: 0000000000080000 RBX: ffff888025351398 RCX: ffffc9000cc04000
[  170.644806][ T8159] RDX: 0000000000080000 RSI: ffffffff88b50dc5 RDI: ffff888025351418
[  170.647155][ T8159] RBP: ffffffff88b369b0 R08: 0000000000000005 R09: 0000000000000001
[  170.649567][ T8159] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888025350698
[  170.651912][ T8159] R13: ffff88802534ffe0 R14: ffff88802534ffe0 R15: ffff8880253510f8
[  170.654226][ T8159] FS:  0000000000000000(0000) GS:ffff88809748a000(0063) knlGS:00000000f548db40
[  170.656901][ T8159] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  170.659146][ T8159] CR2: 00000000f5473ff4 CR3: 000000004ddc7000 CR4: 0000000000352ef0
[  170.661533][ T8159] Call Trace:
[  170.662559][ T8159]  <TASK>
[  170.663474][ T8159]  rxe_dealloc+0x25/0xc0
[  170.664771][ T8159]  ib_dealloc_device+0x49/0x230
[  170.666353][ T8159]  __ib_unregister_device+0x396/0x480
[  170.667998][ T8159]  ib_unregister_device_and_put+0x5a/0x80
[  170.669789][ T8159]  nldev_dellink+0x308/0x430
[  170.671210][ T8159]  ? __pfx_nldev_dellink+0x10/0x10
[  170.672801][ T8159]  ? rcu_is_watching+0x12/0xc0
[  170.674274][ T8159]  ? apparmor_capable+0x1d7/0x4d0
[  170.675736][ T8159]  ? bpf_lsm_capable+0x9/0x10
[  170.677149][ T8159]  ? security_capable+0x80/0x260
[  170.678719][ T8159]  ? ns_capable+0xd2/0xf0
[  170.680035][ T8159]  ? __pfx_nldev_dellink+0x10/0x10
[  170.681593][ T8159]  rdma_nl_rcv_msg+0x392/0x6f0
[  170.683071][ T8159]  ? __pfx_rdma_nl_rcv_msg+0x10/0x10
[  170.684703][ T8159]  ? __lock_acquire+0x4a5/0x2630
[  170.686237][ T8159]  rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410
[  170.688225][ T8159]  ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10
[  170.690392][ T8159]  ? netlink_deliver_tap+0x1ae/0xcc0
[  170.691993][ T8159]  netlink_unicast+0x585/0x850
[  170.693455][ T8159]  ? __pfx_netlink_unicast+0x10/0x10
[  170.695026][ T8159]  netlink_sendmsg+0x8b0/0xda0
[  170.696456][ T8159]  ? __pfx_netlink_sendmsg+0x10/0x10
[  170.698053][ T8159]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  170.699847][ T8159]  ____sys_sendmsg+0x9e1/0xb70
[  170.701318][ T8159]  ? __pfx_netlink_sendmsg+0x10/0x10
[  170.702940][ T8159]  ? __pfx_____sys_sendmsg+0x10/0x10
[  170.704553][ T8159]  ? __pfx___futex_wait+0x10/0x10
[  170.706104][ T8159]  ? __pfx_futex_wake_mark+0x10/0x10
[  170.707746][ T8159]  ___sys_sendmsg+0x190/0x1e0
[  170.709277][ T8159]  ? __pfx____sys_sendmsg+0x10/0x10
[  170.710796][ T8159]  ? find_held_lock+0x2b/0x80
[  170.712224][ T8159]  __sys_sendmsg+0x170/0x220
[  170.713761][ T8159]  ? __pfx___sys_sendmsg+0x10/0x10
[  170.715437][ T8159]  ? rcu_is_watching+0x12/0xc0
[  170.716928][ T8159]  __do_fast_syscall_32+0xe7/0x970
[  170.718771][ T8159]  ? lockdep_hardirqs_on+0x78/0x100
[  170.720375][ T8159]  do_fast_syscall_32+0x32/0x70
[  170.721854][ T8159]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  170.723757][ T8159] RIP: 0023:0xf709ef7c
[  170.725020][ T8159] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  170.730904][ T8159] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  170.733423][ T8159] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800002c0
[  170.735852][ T8159] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  170.738191][ T8159] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  170.740641][ T8159] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  170.742960][ T8159] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  170.745257][ T8159]  </TASK>
[  170.746194][ T8159] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  170.748782][ T8159] CPU: 3 UID: 0 PID: 8159 Comm: syz.0.513 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  170.752311][ T8159] Tainted: [L]=SOFTLOCKUP
[  170.753652][ T8159] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  170.756786][ T8159] Call Trace:
[  170.757838][ T8159]  <TASK>
[  170.758968][ T8159]  dump_stack_lvl+0x100/0x190
[  170.760408][ T8159]  vpanic+0x552/0x970
[  170.761638][ T8159]  ? __pfx_vpanic+0x10/0x10
[  170.763036][ T8159]  panic+0xd1/0xe0
[  170.764152][ T8159]  ? __pfx_panic+0x10/0x10
[  170.765521][ T8159]  check_panic_on_warn.cold+0x19/0x34
[  170.767151][ T8159]  ? rxe_pool_cleanup+0x46/0x60
[  170.768656][ T8159]  __warn.cold+0x191/0x328
[  170.770043][ T8159]  __report_bug+0x296/0x3d0
[  170.771451][ T8159]  ? rxe_pool_cleanup+0x46/0x60
[  170.772933][ T8159]  ? __pfx___report_bug+0x10/0x10
[  170.774448][ T8159]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  170.776284][ T8159]  ? flush_workqueue_prep_pwqs+0x2e9/0x510
[  170.778058][ T8159]  ? __flush_workqueue+0x426/0x1200
[  170.779719][ T8159]  ? __mutex_unlock_slowpath+0x15d/0x8a0
[  170.781443][ T8159]  ? rxe_pool_cleanup+0x46/0x60
[  170.782953][ T8159]  report_bug+0xb2/0x220
[  170.784239][ T8159]  ? rxe_pool_cleanup+0x46/0x60
[  170.785717][ T8159]  handle_bug+0x16a/0x2a0
[  170.787007][ T8159]  exc_invalid_op+0x17/0x50
[  170.788338][ T8159]  asm_exc_invalid_op+0x1a/0x20
[  170.789754][ T8159] RIP: 0010:rxe_pool_cleanup+0x46/0x60
[  170.791357][ T8159] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 86 ee 52 f9 5b c3 cc cc cc cc e8 7b ee 52 f9 90 <0f> 0b 90 e8 72 ee 52 f9 5b e9 cc fe d4 02 e8 87 dc bf f9 eb d0 0f
[  170.797008][ T8159] RSP: 0000:ffffc90020a2f150 EFLAGS: 00010246
[  170.798816][ T8159] RAX: 0000000000080000 RBX: ffff888025351398 RCX: ffffc9000cc04000
[  170.801202][ T8159] RDX: 0000000000080000 RSI: ffffffff88b50dc5 RDI: ffff888025351418
[  170.803613][ T8159] RBP: ffffffff88b369b0 R08: 0000000000000005 R09: 0000000000000001
[  170.806127][ T8159] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888025350698
[  170.808583][ T8159] R13: ffff88802534ffe0 R14: ffff88802534ffe0 R15: ffff8880253510f8
[  170.810998][ T8159]  ? __pfx_rxe_dealloc+0x10/0x10
[  170.812491][ T8159]  ? rxe_pool_cleanup+0x45/0x60
[  170.813966][ T8159]  rxe_dealloc+0x25/0xc0
[  170.815270][ T8159]  ib_dealloc_device+0x49/0x230
[  170.816879][ T8159]  __ib_unregister_device+0x396/0x480
[  170.818540][ T8159]  ib_unregister_device_and_put+0x5a/0x80
[  170.820307][ T8159]  nldev_dellink+0x308/0x430
[  170.821728][ T8159]  ? __pfx_nldev_dellink+0x10/0x10
[  170.823345][ T8159]  ? rcu_is_watching+0x12/0xc0
[  170.824792][ T8159]  ? apparmor_capable+0x1d7/0x4d0
[  170.826306][ T8159]  ? bpf_lsm_capable+0x9/0x10
[  170.827780][ T8159]  ? security_capable+0x80/0x260
[  170.829306][ T8159]  ? ns_capable+0xd2/0xf0
[  170.830608][ T8159]  ? __pfx_nldev_dellink+0x10/0x10
[  170.832155][ T8159]  rdma_nl_rcv_msg+0x392/0x6f0
[  170.833592][ T8159]  ? __pfx_rdma_nl_rcv_msg+0x10/0x10
[  170.835197][ T8159]  ? __lock_acquire+0x4a5/0x2630
[  170.836699][ T8159]  rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410
[  170.838629][ T8159]  ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10
[  170.840719][ T8159]  ? netlink_deliver_tap+0x1ae/0xcc0
[  170.842317][ T8159]  netlink_unicast+0x585/0x850
[  170.843764][ T8159]  ? __pfx_netlink_unicast+0x10/0x10
[  170.845341][ T8159]  netlink_sendmsg+0x8b0/0xda0
[  170.846810][ T8159]  ? __pfx_netlink_sendmsg+0x10/0x10
[  170.848423][ T8159]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  170.850137][ T8159]  ____sys_sendmsg+0x9e1/0xb70
[  170.851606][ T8159]  ? __pfx_netlink_sendmsg+0x10/0x10
[  170.853205][ T8159]  ? __pfx_____sys_sendmsg+0x10/0x10
[  170.854847][ T8159]  ? __pfx___futex_wait+0x10/0x10
[  170.856470][ T8159]  ? __pfx_futex_wake_mark+0x10/0x10
[  170.858067][ T8159]  ___sys_sendmsg+0x190/0x1e0
[  170.859595][ T8159]  ? __pfx____sys_sendmsg+0x10/0x10
[  170.861174][ T8159]  ? find_held_lock+0x2b/0x80
[  170.862627][ T8159]  __sys_sendmsg+0x170/0x220
[  170.864040][ T8159]  ? __pfx___sys_sendmsg+0x10/0x10
[  170.865590][ T8159]  ? rcu_is_watching+0x12/0xc0
[  170.867061][ T8159]  __do_fast_syscall_32+0xe7/0x970
[  170.868595][ T8159]  ? lockdep_hardirqs_on+0x78/0x100
[  170.870136][ T8159]  do_fast_syscall_32+0x32/0x70
[  170.871626][ T8159]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  170.873536][ T8159] RIP: 0023:0xf709ef7c
[  170.874789][ T8159] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  170.880548][ T8159] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  170.883123][ T8159] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800002c0
[  170.885454][ T8159] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  170.887866][ T8159] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  170.890295][ T8159] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  170.892688][ T8159] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  170.895080][ T8159]  </TASK>
[  170.896730][ T8159] Kernel Offset: disabled
[  170.898059][ T8159] Rebooting in 86400 seconds..