last executing test programs:

4m6.541483107s ago: executing program 2 (id=585):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
read$FUSE(r1, &(0x7f0000001300)={0x2020, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
ioprio_get$pid(0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
timer_settime(0x0, 0x0, 0x0, 0x0)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
r4 = mq_open(&(0x7f00000000c0)='e_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000040000000, 0x1, 0x4, 0x2009})
r5 = epoll_create(0x1e)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)={0x10000000})
mq_timedsend(r4, 0x0, 0x0, 0x5, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r6, 0x0, 0x0)
listen(r7, 0xfffffffd)
r8 = accept4(r7, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000000), &(0x7f00000001c0)=0x4)
setsockopt$inet_int(r6, 0x0, 0xc, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYRESHEX=0x0, @ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x25}, 0x94)
sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x4, &(0x7f0000000080)=[{0x6, 0x9, 0x6, 0x3}, {0x3, 0x5, 0x8, 0x3}, {0x101, 0x9, 0x80}, {0x5, 0x8, 0x8, 0x1ad8f15b}]}, 0x8)
socket$nl_route(0x10, 0x3, 0x0)

4m4.322693049s ago: executing program 2 (id=598):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000a2b688a7321775c6aafa950000000000000000006fb40000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2eb2b00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002"], 0x122}, 0x1, 0x0, 0x0, 0x40000}, 0x20008800)
socket$nl_generic(0x10, 0x3, 0x10)
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=@base={0x8, 0x4, 0x4, 0x8}, 0x50)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = dup(r2)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="80", 0x1}], 0x1}, 0x4048043)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x20002, 0x0, 0x2, 0x5}}, 0x20)
sendmmsg$inet(r2, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)='`', 0x1}], 0x1}}], 0x1, 0x44081)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x8}, 0x9c)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0xb}}, 0x20)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c)
sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000003640)=ANY=[], 0xec4}], 0x1, 0x0, 0x0, 0x4040885}, 0x40)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x7d}], 0x1)

4m3.258960916s ago: executing program 2 (id=603):
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'erspan0\x00', &(0x7f0000000840)={'gre0\x00', 0x0, 0x7, 0x1, 0x7, 0xa5, {{0xa, 0x4, 0x2, 0x3f, 0x28, 0x65, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x6}, @loopback, {[@cipso={0x86, 0x6, 0x1}, @timestamp_addr={0x44, 0x4, 0x4f}, @cipso={0x86, 0xa, 0x0, [{0x0, 0x2}, {0x7, 0x2}]}]}}}}})
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r2, &(0x7f0000001d80)='.\x00', 0x9100, &(0x7f0000000080)={0x81, 0x7a, 0x40000, {r2}}, 0x20)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)

4m3.183070274s ago: executing program 2 (id=605):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000180))
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe34)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18)
getpid()
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r7, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000880000000fddbdf2536000000"], 0x14}}, 0x8000)
sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x200000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0)
r9 = dup(0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = accept4$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14, 0x80800)
recvfrom$packet(r10, &(0x7f0000000540)=""/78, 0x4e, 0x100, &(0x7f00000005c0)={0x11, 0x7, r6, 0x1, 0xff, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x14)
close_range(r1, 0xffffffffffffffff, 0x0)

4m2.213824217s ago: executing program 2 (id=611):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000005040000000000000d000000186900000d00000000000000ff030000185100000a00000000000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xca}, 0x94)
ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000080)=0x3)
syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x202100)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
open(&(0x7f0000000000)='.\x00', 0x800000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x39, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
syz_emit_ethernet(0xba, &(0x7f0000000380)={@random="bbc5f3bdc430", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x98, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "9c67524ed6ed152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb01908186ea04e641c89a2ee0432e9c0894a8d7aff0c865e96548d507f048f907320b0f8b1e83b5f1425b63ad9c6adfd09578bbda92c9bd8f57d6efd752a6f20487ebea241d612212e3ccb07"}}}}}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "9c5db9ae1351bbaa", "0a74c13551c38cf0f0d8de1904266cb56482a7ee2c46a6ae8ce57b881e080aa2", "e3463145", "eb9b272321093a61"}, 0x38)
shutdown(r5, 0x1)

4m2.063036742s ago: executing program 2 (id=612):
r0 = fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0)
r1 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x29cc, 0x10100}, &(0x7f0000000380)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close_range(r0, r4, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000002140), r5)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = inotify_init()
r7 = inotify_add_watch(r6, &(0x7f0000000400)='.\x00', 0x808)
r8 = semget$private(0x0, 0x6, 0x0)
semctl$SETVAL(r8, 0x3, 0x10, 0x0)
semctl$SETALL(r8, 0x0, 0x11, &(0x7f0000000000)=[0xd, 0x4, 0x0, 0x1, 0xfff, 0x9, 0x8, 0x7, 0x7])
inotify_rm_watch(r6, r7)

3m46.865076572s ago: executing program 32 (id=612):
r0 = fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0)
r1 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x29cc, 0x10100}, &(0x7f0000000380)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close_range(r0, r4, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000002140), r5)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = inotify_init()
r7 = inotify_add_watch(r6, &(0x7f0000000400)='.\x00', 0x808)
r8 = semget$private(0x0, 0x6, 0x0)
semctl$SETVAL(r8, 0x3, 0x10, 0x0)
semctl$SETALL(r8, 0x0, 0x11, &(0x7f0000000000)=[0xd, 0x4, 0x0, 0x1, 0xfff, 0x9, 0x8, 0x7, 0x7])
inotify_rm_watch(r6, r7)

4.120884417s ago: executing program 1 (id=2511):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r7 = openat$cgroup_devices(r6, &(0x7f00000003c0)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='b 75:*\t'], 0xa)
recvmmsg$unix(r3, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r8 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(r8, 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r8, 0x4, &(0x7f0000000080)='dirsync\x00', &(0x7f00000000c0)='./file0\x00', r9)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x620b}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r10, r0, 0x0)

3.201858679s ago: executing program 1 (id=2518):
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0)
mount$binder(0x0, 0x0, 0x0, 0xe2ca6, &(0x7f0000000200)={[{@max={'max', 0x3d, 0x1}}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000008000000000000000000000095", @ANYRESOCT], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8020640c, 0x0)
r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d100090507000000000000090589", @ANYBLOB="57c2e6"], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
openat$mice(0xffffff9c, &(0x7f0000000140), 0xac080)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1, @role_discovery={{0x809, 0x2}, {0xc8}}}, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
ioctl$RTC_AIE_ON(r2, 0x7001)

2.647888622s ago: executing program 1 (id=2525):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x42)
mount(&(0x7f0000000000)=@sr0, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x100080f, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"})
syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x80400)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
close(0xffffffffffffffff)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r2, 0x0)
listen(r2, 0x4)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x4, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000140)="63eced8e46dc3f0adf33c9f786dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88)
mkdir(0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_off}]})
r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7)
mknodat$loop(r5, &(0x7f0000001600)='./bus\x00', 0x8, 0x0)

2.596678532s ago: executing program 1 (id=2526):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r7 = openat$cgroup_devices(r6, &(0x7f00000003c0)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='b 75:*\t'], 0xa)
recvmmsg$unix(r3, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r8 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(r8, 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r8, 0x4, &(0x7f0000000080)='dirsync\x00', &(0x7f00000000c0)='./file0\x00', r9)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x620b}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r10, r0, 0x0)

2.181467743s ago: executing program 0 (id=2531):
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0)
r5 = openat$comedi(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r9, 0x0, r7, 0x0, 0x2, 0x0)
fcntl$setstatus(r7, 0x4, 0x2000)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000015000103000000000000000001000000a2c9892992ed4705fff934809d40eb29bf28dabe15c871946212dfea2e2fc7b17d54964cab29cb064f40d97a31e6529ac7b5feebe0e1d230bbf827977c37f11ab2d714ee6ced11673333891c3978a9b83b356bbf612102d90ec0d3aa7b2685b0bdeda9a679ec804b70a1ae3b240e4069da90c71f768fb7f2edbf51d69822a5ad6131233fb2336a4271036b297b2fa3da14"], 0x14}}, 0x0)
vmsplice(r6, &(0x7f0000000180), 0x0, 0x8)
write$binfmt_elf64(r8, &(0x7f0000000000)=ANY=[], 0x18c6)
recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)

2.00062098s ago: executing program 0 (id=2533):
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0)
mount$binder(0x0, 0x0, 0x0, 0xe2ca6, &(0x7f0000000200)={[{@max={'max', 0x3d, 0x1}}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000008000000000000000000000095", @ANYRESOCT], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8020640c, 0x0)
r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d100090507000000000000090589", @ANYBLOB="57c2e6"], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
openat$mice(0xffffff9c, &(0x7f0000000140), 0xac080)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1, @role_discovery={{0x809, 0x2}, {0xc8}}}, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
ioctl$RTC_AIE_ON(r2, 0x7001)

1.981278729s ago: executing program 4 (id=2534):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x18)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4)
mknodat(r1, &(0x7f00000000c0)='./bus\x00', 0x20, 0x40)
madvise(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)

1.931761192s ago: executing program 4 (id=2535):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x2d000000, 'cryptd(nhpoly1305-sse2)\x00'}, 0x58)

1.928538468s ago: executing program 4 (id=2536):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file1\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d3030303030303030303030303030303030303430b030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006180)={0x2020, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0x5, 0x2000000000000005, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000, {0x2, 0xd08, 0x3, 0x4, 0x0, 0xfffffffffffffffe, 0x47, 0x0, 0x126, 0x6000, 0x10000, r3, 0x0, 0x902, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0xfffffffffffffff5, r2, {0x7, 0x29, 0x0, 0x21410040, 0x7c, 0x2, 0xfffffffa, 0x2, 0x0, 0x0, 0x0, 0xb}}, 0x50)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0)
sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0x7)
ioctl$TCXONC(r4, 0x540a, 0x1)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1a, 0x17, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x6}, 0x94)
r7 = openat$uhid(0xffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000140)=ANY=[], 0x118)
ioctl$TIOCGPTPEER(r6, 0x932, 0x5)
ioctl$TIOCGPTPEER(r6, 0x4004092b, 0x3)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x1f, 0x9, 0x200, &(0x7f0000000180)="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"})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

1.881189938s ago: executing program 4 (id=2537):
socket$netlink(0x10, 0x3, 0x0)
socket(0x200000000000011, 0x2, 0x0)
socket(0x2, 0x2, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
dup(0xffffffffffffffff)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x301640, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setresgid(0xee00, 0xee01, 0x0)
r4 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_open_procfs(r4, &(0x7f0000000040)='syscall\x00')
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80046601, &(0x7f0000000280))

1.703429698s ago: executing program 1 (id=2540):
socket$netlink(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0)
socket$kcm(0x2d, 0x2, 0x0)
r2 = gettid()
ptrace$getregset(0x4204, r2, 0x201, &(0x7f00000002c0)={&(0x7f0000000380)=""/199, 0xc7})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=ANY=[@ANYBLOB="e40f00001300e9990000000000000000fc0000000000000000000000009483ce58495bf8000000ac1e00010000000000000000000000000a0040000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="020000002c001300fe80000000000000000000000000002164010102000000000000000000000000000000000a000000"], 0xfe4}}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r5}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r5}, 0x38)
r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r6, 0x0, 0x27)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xffffffff)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
socket$inet6(0xa, 0x3, 0x3c)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

1.485275791s ago: executing program 3 (id=2545):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$urandom(0xffffff9c, &(0x7f0000000340), 0x40, 0x0)
ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000380)=0x8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4a22, 0x23, @local, 0x23}, 0x1c)
r4 = dup(r3)
setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000480)={0x2e}, 0x8)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x4c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x10a, 0x0, 0xd479}]})

1.43065886s ago: executing program 0 (id=2546):
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@sco={0x1f, @none}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/11, 0xb}, {&(0x7f0000000100)=""/10, 0xa}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/236, 0xec}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/125, 0x7d}], 0x7, &(0x7f00000001c0)=""/61, 0x3d}, 0xc1e}, {{&(0x7f0000000640)=@nfc_llcp, 0x80, &(0x7f0000001d00)=[{&(0x7f00000006c0)=""/252, 0xfc}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f0000000880)=""/7, 0x7}, {&(0x7f00000008c0)=""/77, 0x4d}, {&(0x7f0000000940)=""/225, 0xe1}, {&(0x7f0000000a40)=""/241, 0xf1}, {&(0x7f0000000b40)=""/202, 0xca}, {&(0x7f0000000c40)=""/181, 0xb5}, {&(0x7f0000000d00)=""/4096, 0x1000}], 0xa}, 0x6cd9}], 0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1, 0x4e22, 0x0, 0x4e24, 0x712, 0x2, 0x0, 0x0, 0x2c}, {0x9, 0xf4e, 0x5, 0xeeb4, 0x4, 0x4, 0x2, 0xb46}, {0x0, 0x5, 0x5, 0x7245}, 0x9, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in=@multicast2, 0x4d4, 0xff}, 0x0, @in6=@remote, 0x0, 0x3625a792c3abf38a, 0x0, 0x5, 0x4, 0xa2, 0x63f}}, 0xe8)
fstatfs(r0, &(0x7f0000001dc0)=""/156)
sched_setattr(0x0, 0x0, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil)
syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0xc, 0x48001, 0xa, 0x9, 0xd, 0xfffffe0000000001, 0x3336, 0x4}, 0x0)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000563000/0x2000)=nil)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x100004, 0x220104, 0xe2a3, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x700}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r3}, 0x38)

1.430415548s ago: executing program 3 (id=2547):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r2])
umount2(&(0x7f0000000580)='./file0\x00', 0x1)

1.302627933s ago: executing program 3 (id=2548):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES16=r0, @ANYRESHEX=0x0, @ANYRES32, @ANYRES32=r0, @ANYRES64=r0], 0x48}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {0x1837}}, './file0\x00'})
sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa4, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x5c}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3ff}, @NL80211_ATTR_FRAME_MATCH={0x71, 0x5b, "5f5bbf858b5c4fac8e95872468b13b776bf067d5db3cdc4c6e03c010d719068faa224bd00c17a8bc512f1c3339aff18ee44408132402bc80605bf95202d1d3a4711d01a66c7bdd94d93fbb39fd713b11403bd180e5888dfd731a212bdf37ef4f04bc896ca9c52a025d57a50a55"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}]}, 0xa4}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0xb4}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000540)={'batadv0\x00', <r3=>0x0})
sendmmsg$inet(r1, &(0x7f0000002000)=[{{&(0x7f00000003c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000400)="09fa79dc338cbe40a8a63c0bdbbd7665c970973b4c3519711ae6b39c0cc6b77dcbd6d31cb83a2619e5113c27ba8245a9", 0x30}, {&(0x7f0000000740)="951d606cf3df9aab011287004abbc1ad243ac4b9bb6a36ac3f6f9fcbd87c56f831f92e5147c72c66f07f1459519b5c6b895342892304d80587f2b0864e78c2d9291638c904ea21cd2ad5a4befce0b1fa096ba0c835c1dc75dbec0cfb09a968f4d3675eaa8cf67dd3b55d9c5e3ea2f2515a3e23f0e9d8914df3830d1bf71ef53676c2ff35fe4c7de8ef591c12fa0624b471da0b1957e5ef320d9b42bfc58a47e88825c397d57377ebe4f1b239cf240ad02a3b8c2b71a6f56e236499f44bbda02734691c588b3fc87428ea23c937", 0xcd}], 0x2, &(0x7f0000000840)=[@ip_ttl={{0x10, 0x0, 0x2, 0xa}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @empty, @local}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0xbc, 0x0, 0x7, {[@cipso={0x86, 0x2e, 0x3, [{0x1, 0x6, "6dd4e3a6"}, {0x1, 0x12, "1323a14069aa3405b23005e067fb7902"}, {0x6, 0x10, "34c0cef706b8ace2feb1e97aca02"}]}, @timestamp_prespec={0x44, 0x24, 0x5, 0x3, 0x9, [{@multicast2, 0x8fe6}, {@empty, 0x8001}, {@broadcast, 0x1000}, {@multicast1, 0x7fffffff}]}, @cipso={0x86, 0x5c, 0x3, [{0x5, 0x10, "1d7a9b134733dfa5c70a42cac4e7"}, {0x5, 0xa, "64ca0a25c7ac5fcb"}, {0x0, 0x7, "109a25a8c7"}, {0x6, 0xf, "7d9e5fe9d7f6fcf909c57ce705"}, {0x2, 0x2}, {0x2, 0x12, "22d1d5f3d955feabe47ed0eb466e145d"}, {0x0, 0x12, "3bdc0d3a49f537dec5a7a94b7a89749f"}]}]}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x7}}, @ip_retopts={{0x54, 0x0, 0x7, {[@generic={0x94, 0x4, "05e4"}, @timestamp_addr={0x44, 0x24, 0xb4, 0x1, 0xf, [{@private=0xa010101, 0x81}, {@private=0xa010101, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x23}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x3}]}, @ssrr={0x89, 0x1f, 0xa5, [@broadcast, @broadcast, @multicast2, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}]}}}], 0x180}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f00000009c0)="4fadde772822f5e8c8715a983f765327f024c57ab72018d691de0e433861b87f71b171a2336d6abe9085e4d1c23898f4f92ee91068d2778ca15c2f8f4981f11d94589d7184723855480fd8a26180adeb03eb7fe6eb61f72082b19cda8ab95707cd2c73bb08fa7a3382747bbb75", 0x6d}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="62f87f5c267c9645ffbfaa4c6a5d5e38adf6f3cf6a6cf1f197bb08881512bf122881e524602aedf468b9400f68f89dfd73c60a130691b4ccb3bf1f36b37c7d5d07a18a8e2e0bb9247a3c5d0f8f803264251d3f5e3ce8389d4e9dbfdc075fb0130a08c9ae1cc51508c7f9f7a19c5edd2aefe2eec6bf", 0x75}, {&(0x7f0000001ac0)="1c649a54046194e5bc35a7d695b089f7863a6014f15b88d06b66787e4b6712077892c4eafd231c4cb30650425d6765c6c46f14d92afe3ed29eb8e29ee7921be979ff2df1f19cc8430ae688ec9c70e793d148297cbef68c5f1ea3e4a378853a18e11af6c0d40db09b689c30a6f52da83cb6ce347ba11f436cfb7f501a08a5962fdf7882a6bc1a38df1431c16658979a9a7658a50fd0935c9f5195c20c376347c1a0b878f309899cb06248e8774e97b566d7fa45befd5d5341c95805fe273196a9430fb7ccb9111f5be8fbffa885a3f23b54c300ced80c780f", 0xd8}, {&(0x7f0000000580)="bca518882036f0dae2cb3a32153a64755ad08d4bf1fc95619c0baad9e28f47de0822eb3323b55b09ebf37ee225b2ce", 0x2f}, {&(0x7f0000001bc0)}, {&(0x7f0000001c00)="1c8d9d266eed18e4f7db93f2e8c117f018a69c64dd55063d7a60976818418d86a384b6bee3017214d153eb8a6beee6b5bfa98150222ff7850f535601bbe73db66b4c2eafeb36f1aa22c63ba2e55ffab3fc04ece45b82158d73a655a808b354c2dc0b2cf5cfcd3897395b0e5310d34f553d0f986ddf0738dddd2f78473756b197a6b8ad799b20e22967c6744fc45006a758ad49c3d6361c9d6076da2ba56eecf4aa8c6852bf3c66ca0ea57a5e0618349c61c2c68fb5a7e5157e3e81c4b441b8032c088bb39f54d0dc35205597697ebdf6ddcccffe5b4481da0739c1", 0xdb}, {&(0x7f0000001d00)="5e87dfe13c443f2973e00c2e34e0c6c17fe2ad051d77aecabd0163746b3e320fdf9bddf66a71e3907c56ebbde24cd476b1159a3bc351a2eb4b208581", 0x3c}, {&(0x7f0000001d40)="a2e6922d75b62be410ba2c5ababfd35050dedc236361be1d94157d1d9b01074f81f6adafb74b1eae005ae768fd1915236abf591a06a13210801baddfca9cd1526f5780ed5d19dd40e35380f4eb24a1101bbbcd55a0f62919ec1aec9e899e6cbb769a14c551e8c36b1edad795c0ce5fda533f2a97d3a99f156364ec10f0b311bfabe3d8ef812908b962953a41441953b0e087cd0fa04d3c606fd7ce673e4b6f8baf55eb6b963e68aef814e194cf5889694b71977cafae47cdd734e40ef787ad2f0418334e83db9f92b8e3d370ca46f9ba81fdfe3f58d546cedcdad628f4a682777c2756dcf2c31ad4020c865a6973936fc9b923ab95c2238302ec6451ea65", 0xfe}, {&(0x7f0000001e40)="b206d89b099c5d1afb0585b53d0fda86c21d82085881661726f491cf148f609b41db7185ff6c69f676a4c4fba323f383a5ab09b9a23e9c91250cb6ae40dbfa8545dbe6b82c10202965128972bd85926a606f2789c2f6334620cee08b543ce29da15e510c5fd92b8c01ec3f89130a5aa12b5abe47a10bf363a3e92aebc189461709ab77c68395d5070d86b34b929971ba5fe0dcdb66858acff009e097ed220605a363d83b951d099807112a76925b43db0492fa04031e70e6d5f1110c1790e01ae2174f2a284a", 0xc6}], 0xa, &(0x7f0000001fc0)=[@ip_ttl={{0x10, 0x0, 0x2, 0xfffffffd}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xc}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xb}}], 0x30}}], 0x2, 0x4000884)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='page_pool_state_hold\x00', r4}, 0x18)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='page_pool_state_hold\x00', r5}, 0x18)
ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000500))
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)

1.299065213s ago: executing program 3 (id=2549):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r7 = openat$cgroup_devices(r6, &(0x7f00000003c0)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='b 75:*\tm'], 0xa)
recvmmsg$unix(r3, 0x0, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r8 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(r8, 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r8, 0x4, &(0x7f0000000080)='dirsync\x00', &(0x7f00000000c0)='./file0\x00', r9)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x620b}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r10, r0, 0x0)

981.967695ms ago: executing program 4 (id=2550):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0xe, 0x4, &(0x7f0000000b00)=ANY=[@ANYRES8, @ANYRESHEX, @ANYBLOB="3511fc61a61765cf023c17a5e84a0d757456565b6dcfa2b9e1e8e3970ae318ff1bf824f017541003b7153655a9f263da68065b6b429a92"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
r0 = socket$kcm(0x2, 0x1, 0x84)
socket$can_bcm(0x1d, 0x2, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa9}}, &(0x7f0000000480)='GPL\x00'}, 0x90)
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000700), &(0x7f0000000780), 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={'blake2s-128-generic\x00'}, &(0x7f0000000800)="16488a99a96b2b2862ca51fd34fbe6bb6cc4828fa5258d60c7c0b7ed804474b8237f458e0547090878c78ee564f9019c8cc77517486bffae55160b769cd9b44d061db1177f05ae87948702105448de8e102c34bfa82c4a81126a13dff8f69c5c01d9e59e499f410de14a1bcb18ee20796bbdf082da634deead0ea8c67eed3dfff019a4", 0x83})
fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0xc)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x37)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={0x0, @remote, @local}, &(0x7f0000000240)=0xc)
ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x1, 0x0, 0xfc})
write$cgroup_subtree(r5, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f)
setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000ac0), 0x90)
sendmsg$inet(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="93", 0x1}], 0x1}, 0xe0)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'})

812.075511ms ago: executing program 1 (id=2551):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
sendmmsg$inet(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="3aae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa73c0", 0x2de}, {&(0x7f0000000340)="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", 0x24a}, {&(0x7f00000006c0)="5be08105437c98b91b9455046f57b5fc090014bde2bb01000000000000001a7838d859207067c30aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd", 0x42}, {&(0x7f0000000140)="6011daffb3bc7ec41548698eff49287316578c3df521", 0x16}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0)

803.379644ms ago: executing program 4 (id=2552):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$sock_buf(r1, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100))
pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, 0x0, 0x0)
write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)

601.783002ms ago: executing program 0 (id=2554):
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0)
mount$binder(0x0, 0x0, 0x0, 0xe2ca6, &(0x7f0000000200)={[{@max={'max', 0x3d, 0x1}}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000008000000000000000000000095", @ANYRESOCT], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8020640c, 0x0)
r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d100090507000000000000090589", @ANYBLOB="57c2e6"], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
openat$mice(0xffffff9c, &(0x7f0000000140), 0xac080)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1, @role_discovery={{0x809, 0x2}, {0xc8}}}, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
ioctl$RTC_AIE_ON(r2, 0x7001)

365.721705ms ago: executing program 3 (id=2555):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x4a, 0x0, &(0x7f00000002c0))
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000004a0e74e7e39be7ad490001000a001800d2e9a05e88323d039a4a355da4e5150f50b26b28486306616c324a7b11ec224d2becb06a2c7a175f6b7c68290159121b5ce0cc4d75f8a3bb711dc657b7514baa269ce1634f99774be9e9b74199cab0373f3bed4b4ea5230520aeca02c63e67c2b8", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}}, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r4)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000a40)={'\x00', 0x6, 0x5, 0x6, 0x8, 0x80, <r5=>0xffffffffffffffff})
getpriority(0x1, r5)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
r7 = socket$qrtr(0x2a, 0x2, 0x0)
bind$qrtr(r7, &(0x7f0000000180)={0x2a, 0x1, 0xfffffffe}, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r6}, 0x10)
timer_delete(0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x80000000})
bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(nhpoly1305-sse2)\x00'}, 0x58)
r8 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40)
ioctl$F2FS_IOC_COMPRESS_FILE(r2, 0xf518, 0x0)
ioctl$DRM_IOCTL_MODE_GETENCODER(r8, 0xc01464a6, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r8, 0xc0106434, &(0x7f0000000500)={0x8, <r9=>0x0, 0x2})
ioctl$DRM_IOCTL_AGP_BIND(r8, 0x40086436, &(0x7f0000000a00)={r9, 0x6})
connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$kcm(r8, &(0x7f00000009c0)={&(0x7f0000000300)=@nl=@kern={0x10, 0x0, 0x0, 0x40000000}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000380)="d1233430ef3b198a2b635baee3c665847feac95a82bbffc5676220959b73bdfbeac9698fb201fb37d77f14b30a92b477bb23334a0a0457cfcf128897005ad72e4cc10c7899473ef6658052d806f0ac6a87a28a86873a27672b9ad5b283c689adbbc6eaff69ee037c1191414428e2", 0x6e}, {&(0x7f0000000400)="40c02050bf6f369d3169964f435c7385eb43d773ba011375ae62ba1a3b0289e8ca6a16224f80b2812794f37ef11940c8e3574b65cfd0b10b4d4967faa4eda80070650d50ef732041def0230c50710c8d94a205ee454b843258aaabdb2c8a6cb9561b0ac4912e152cd56dd0ac20a91dbfb44c32291855f065114a7aeed064e030c76e023afd3cfb7ef5bea82431c324f1d7d5b14e41b90d94d8bd8c4536d218c59bffc610a216867d9f05e18eafd60d7de0b7e28de9fe70949c938ef7d618a90526bf670e84714dcbe69c28a3635e6a17cb394365d1312af7a965c25cdd06da119040d56d36dbdc922a5b99c9", 0xec}, {&(0x7f0000000180)="99a95e9a8714b2b437801a8002b00250960e28788fd88753462917cd27b2c1148a4c355c19107c4ca0b0a5d0554de9af60", 0x31}, {&(0x7f00000005c0)="d542e432b34fd9e4759e4b486c96f80b94dc40c51d6adab75c362091ba31c050ab76b17c55e7d659421c585bf022bbeba6c499125a3c8539aa587ba193fbc206d63721b04377316dc2fa9931996ff64451361b00b4f7dd6123a6f61e596334ef57dc2fa02a9d7b844295255d162ffcb4c9a1a9bc393656741b6af96e6d8c789b741c943ef3f161b94b611e6338f6a639aa941944e176ac865a2961624aa307be6a60e1428596475857ec9c930d13ca71a1a3f8f44512a48ca97f3b8748e5fcc8af2b4c773c22b70ca33b4bd7fe46c0301187c1073feed83e602ea4721c6304e05686d91a165715b6f4", 0xe9}, {&(0x7f0000000e40)="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", 0x1000}, {&(0x7f0000000500)}, {&(0x7f00000006c0)="3fdf601ad3970b3dc9d9fe60cc1c9300d9508463f991b27a2ab5ab9100e666c39f0a095771221a0ef80c2e3228e81c4897092c641ca3bc641538effa6cf2e738f6906761eee11f34ef8633b9e4e020282980c37a2fce2b8f47ce9791542c4396eb51759d5a6a7adbbed9288f5bf6d047e1c006f5417d8539c8bcccaaea8f2fedde2c71054a91811ba66fb129e6dbd668575010dfbce9d6756f8b0c9edea8221881418f47fd660c71081f603f6875618a0fcc4fb57f9a52bd4a7406954f4dfc5abe7c77783946e3df3f25432a821602683fd08c57f0c19f8e957d1ae34681c72f996b27888a053727c568e68594", 0xed}, {&(0x7f00000007c0)="a3ef0ac1b812db8b2bc9f55a80d5ee70e683bde248597e5b2f7c30e75a9f263d1073a203a1", 0x25}, {&(0x7f0000000800)="367b2005530ec5e8cf7ca27f033394d8dd9835112f97dbab3a6c9cdd0b123eda287aae1d69847e2a19cc4bd2c5881532e5855d9f71b2ceb7090e1ef16f3c00040782e32aff077841f3b2d10d0c333db5e19fed85ebae7d1c896c5e743f33e4a44f13d65a520eba76d654335706bc4a9c5b07c86f5bfeabab25", 0x79}], 0x9, &(0x7f0000000900)=ANY=[@ANYBLOB="940000009a01000002000000baaed2b23b51fc11d9f3a4bc96f4fce5bdb3d969ed3f88bed90b56952df5b56f3231428d874f1c77e7db83506284cf1ec95903fe0e6861d99472a8298dc2d10cb0eebdd9d903000000000000000db044a89aa42082d6dbe9b9c0971e9fe036cd5b77fa637f00a498d81c514b61512caa9985e0cda58957eb690522a4e2e28242f0ee26630b8bd229"], 0x94}, 0x40002)

255.558346ms ago: executing program 3 (id=2556):
socket$nl_route(0x10, 0x3, 0x0)
fchmodat(0xffffffffffffff9c, 0x0, 0x20)
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_procfs(r1, &(0x7f0000000380)='net/if_inet6\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r5)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r6)
execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020)
execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab?P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb8\x10\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\x03\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7vC\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']})
recvmsg(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e06060e08"], 0x9)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001540)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)

1.780661ms ago: executing program 0 (id=2557):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000200), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0xa2)
sendto$inet6(r2, &(0x7f0000000340)="9d84515d1096873f8141f8a7386f0533324750a642133b462f34699d3b6921815653f62fdc3f5d0fecdb9130", 0x2c, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @empty, 0x6}, 0x1c)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="c2", 0x1}], 0x1)
r3 = openat$uhid(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$SNDCTL_SYNTH_INFO(r2, 0xc08c5102, &(0x7f0000000480)={"1606d1910e81364af6aae76ed743cf40914d14ff93e2d1f2d3b9ee7bf4e5", 0x3, 0x2d348ccbd9a9894, 0x1, 0x4, 0xffffff54, 0x2, 0xd0, 0x1, [0x3, 0xfffff91b, 0xc8, 0x40, 0x41, 0x7fff, 0xfffffff3, 0x8, 0xfd, 0x5, 0x3b8, 0x7, 0x1, 0x5, 0x1000, 0x8, 0x0, 0x29, 0xc12c]})
write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0xffe0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x0)
write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000380)={0xe, {0x9, 0x6, 0x1b, 0xc5, "67654ae4b213389e05ded58d850298e5abcfc24f17e2d7c747f117036161d373f9af7cdda5b84bf54215e0a4633ce74e36a6c0f801824db16d31e7c25ae32ef2dca7ad72652cba34b4129a05817c8f686e61feb53c6cbe128c4643967a8a04a8b303fc0de5e4782395db7f950b4f2a713e33216267f12a5ced8babb3c4e34986fe33e0853fd2a6896c900b1a90206f414e458f1dc18fdca3d23992f47df2f0be5f04f055575d5a33813583fa4450d3bd56a9693868aea4eb2a7ff16cad97e3e7f1faa17877"}}, 0xd1)

0s ago: executing program 0 (id=2558):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}, {0xfff1, 0xf}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x11000000, 0x0, 0x8001}, 0x0)

kernel console output (not intermixed with test programs):

tting 0 has an endpoint descriptor with address 0xF7, changing to 0x87
[  264.976937][ T1333] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7
[  264.997039][ T1333] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024
[  265.002062][ T1333] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  265.004892][ T1333] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  265.007887][ T1333] usb 5-1: Product: syz
[  265.009260][ T1333] usb 5-1: Manufacturer: syz
[  265.016175][ T1333] cdc_wdm 5-1:1.0: skipping garbage
[  265.018443][ T1333] cdc_wdm 5-1:1.0: skipping garbage
[  265.020355][ T1333] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[  265.186875][ T9837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.985'.
[  265.216071][ T1333] usb 5-1: USB disconnect, device number 20
[  265.401390][ T9842] rdma_rxe: rxe_newlink: failed to add syz_tun
[  265.515826][ T9845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.989'.
[  266.150484][ T9870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.996'.
[  266.234860][ T9870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  266.236238][   T40] audit: type=1326 audit(2000000014.680:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.4.996" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x0
[  266.414311][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.999'.
[  266.931868][ T9911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1008'.
[  267.831521][ T9938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1020'.
[  268.591733][ T9970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1030'.
[  269.362915][ T9984] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  269.489793][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1041'.
[  269.702327][T10010] usb usb5: usbfs: process 10010 (syz.4.1043) did not claim interface 0 before use
[  269.709331][T10010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1043'.
[  269.712821][T10010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1043'.
[  270.119464][T10029] netlink: 'syz.0.1051': attribute type 6 has an invalid length.
[  270.268944][T10034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1054'.
[  270.320881][T10036] =======================================================
[  270.320881][T10036] WARNING: The mand mount option has been deprecated and
[  270.320881][T10036]          and is ignored by this kernel. Remove the mand
[  270.320881][T10036]          option from the mount to silence this warning.
[  270.320881][T10036] =======================================================
[  270.337018][T10036] binder: Unknown parameter 'fowner>00000000000000000000'
[  270.459719][T10046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1058'.
[  270.887235][T10072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1068'.
[  270.916435][  T139] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  271.074608][  T139] usb 5-1: device descriptor read/64, error -71
[  271.326527][  T139] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  271.456459][  T139] usb 5-1: device descriptor read/64, error -71
[  271.505388][T10097] syzkaller0: entered promiscuous mode
[  271.507471][T10097] syzkaller0: entered allmulticast mode
[  271.576731][  T139] usb usb5-port1: attempt power cycle
[  271.621182][   T40] audit: type=1326 audit(2000000020.071:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10098 comm="syz.3.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000
[  271.629596][   T40] audit: type=1326 audit(2000000020.071:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10098 comm="syz.3.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000
[  271.636656][   T40] audit: type=1326 audit(2000000020.071:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10098 comm="syz.3.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ce579 code=0x7ffc0000
[  271.643579][   T40] audit: type=1326 audit(2000000020.071:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10098 comm="syz.3.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000
[  271.652189][   T40] audit: type=1326 audit(2000000020.071:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10098 comm="syz.3.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000
[  271.659866][   T40] audit: type=1326 audit(2000000020.071:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10098 comm="syz.3.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70ce579 code=0x7ffc0000
[  271.668823][   T40] audit: type=1326 audit(2000000020.071:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10098 comm="syz.3.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000
[  271.675557][   T40] audit: type=1326 audit(2000000020.071:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10098 comm="syz.3.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000
[  271.682517][   T40] audit: type=1326 audit(2000000020.071:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10098 comm="syz.3.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ce579 code=0x7ffc0000
[  271.690386][   T40] audit: type=1326 audit(2000000020.081:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10098 comm="syz.3.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000
[  272.066363][  T139] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  272.536618][  T139] usb 5-1: device descriptor read/8, error -71
[  272.836371][  T139] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  272.856736][  T139] usb 5-1: device descriptor read/8, error -71
[  272.976570][  T139] usb usb5-port1: unable to enumerate USB device
[  273.190585][T10126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1080'.
[  274.726877][   T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  274.806271][ T1333] usb 5-1: new full-speed USB device number 25 using dummy_hcd
[  274.835968][T10168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1093'.
[  274.968000][ T1333] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  274.971315][ T1333] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10
[  274.974935][ T1333] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 59074, setting to 64
[  274.983488][ T1333] usb 5-1: config 0 interface 0 has no altsetting 0
[  274.989800][ T1333] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  274.992651][ T1333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.997488][ T1333] usb 5-1: Product: syz
[  274.998913][ T1333] usb 5-1: Manufacturer: syz
[  275.000514][ T1333] usb 5-1: SerialNumber: syz
[  275.004498][ T1333] usb 5-1: config 0 descriptor??
[  275.008636][T10159] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  275.216976][T10159] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  275.228216][ T1333] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input12
[  275.499691][ T6021] usb 5-1: USB disconnect, device number 25
[  275.764305][T10195] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1099'.
[  276.151650][T10201] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1101'.
[  276.982820][T10243] rdma_rxe: rxe_newlink: failed to add syz_tun
[  277.431437][T10248] netlink: 'syz.0.1113': attribute type 4 has an invalid length.
[  277.897096][ T1117] sr 2:0:0:0: [sr0] tag#24 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  277.900688][ T1117] sr 2:0:0:0: [sr0] tag#24 Sense Key : Illegal Request [current] 
[  277.909787][ T1117] sr 2:0:0:0: [sr0] tag#24 Add. Sense: Invalid command operation code
[  277.912494][ T1117] sr 2:0:0:0: [sr0] tag#24 CDB: Write(10) 2a 00 00 00 00 00 00 00 04 00
[  277.915428][ T1117] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 2 prio class 1
[  277.920708][ T1117] buffer_io_error: 4856 callbacks suppressed
[  277.920720][ T1117] Buffer I/O error on dev sr0, logical block 0, lost async page write
[  277.925877][ T1117] Buffer I/O error on dev sr0, logical block 1, lost async page write
[  278.935237][T10288] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1122'.
[  279.322050][T10295] netlink: 'syz.4.1126': attribute type 4 has an invalid length.
[  279.555367][T10300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1124'.
[  280.318817][T10317] ieee802154 phy0 wpan0: encryption failed: -22
[  280.940141][T10325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1133'.
[  281.144353][T10328] batman_adv: batadv0: Interface deactivated: dummy0
[  281.146554][T10328] batman_adv: batadv0: Removing interface: dummy0
[  281.153247][T10328] bridge_slave_0: left allmulticast mode
[  281.155058][T10328] bridge_slave_0: left promiscuous mode
[  281.157812][T10328] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.186003][T10328] bridge_slave_1: left allmulticast mode
[  281.188198][T10328] bridge_slave_1: left promiscuous mode
[  281.190784][T10328] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.213863][T10328] bond0: (slave bond_slave_0): Releasing backup interface
[  281.225308][T10328] bond0: (slave bond_slave_1): Releasing backup interface
[  281.231268][T10328] batman_adv: batadv0: Removing interface: batadv_slave_0
[  281.234885][T10328] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  281.239373][T10328] batman_adv: batadv0: Removing interface: batadv_slave_1
[  281.261532][T10328] bond1: (slave bridge1): Releasing active interface
[  281.273792][T10328] bond1: (slave gretap1): Releasing active interface
[  281.273977][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1137'.
[  281.279371][T10337] netlink: 'syz.3.1137': attribute type 5 has an invalid length.
[  281.281662][T10332] XFS (nbd0): SB validate failed with error -5.
[  281.281811][T10337] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1137'.
[  281.309899][T10328] bond2: (slave geneve2): Releasing active interface
[  281.345106][T10337] geneve2: entered promiscuous mode
[  281.355966][T10337] geneve2: entered allmulticast mode
[  281.361240][ T8274] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  281.364081][ T8274] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  281.386298][ T8274] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  281.389551][ T8274] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  281.392369][ T8274] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  281.395167][ T8274] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  281.405922][ T8274] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  281.408442][ T8274] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  281.631396][T10353] xt_l2tp: invalid flags combination: 8
[  282.500067][T10371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1146'.
[  283.066158][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1152'.
[  283.831366][T10404] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1160'.
[  284.126201][T10422] fuse: Bad value for 'fd'
[  284.216793][ T5957] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  284.366431][ T5957] usb 6-1: Using ep0 maxpacket: 8
[  284.371803][ T5957] usb 6-1: config 0 interface 0 has no altsetting 0
[  284.374165][ T5957] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  284.377830][ T5957] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.382220][ T5957] usb 6-1: config 0 descriptor??
[  284.608835][ T5957] usbhid 6-1:0.0: can't add hid device: -71
[  284.610745][ T5957] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  284.614382][ T5957] usb 6-1: USB disconnect, device number 20
[  284.732856][T10444] ceph: Path missing in source
[  284.761652][T10444] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  285.032291][T10459] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1178'.
[  286.147766][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1185'.
[  286.150840][T10481] netlink: 'syz.0.1185': attribute type 5 has an invalid length.
[  286.153644][T10481] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1185'.
[  286.160216][T10481] geneve3: entered promiscuous mode
[  286.162144][T10481] geneve3: entered allmulticast mode
[  286.164590][ T8274] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  286.168128][ T8274] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  286.171586][ T8274] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  286.178768][ T8283] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  286.197762][T10486] team_slave_0: entered promiscuous mode
[  286.200212][T10486] team_slave_1: entered promiscuous mode
[  286.202350][T10486] macsec1: entered promiscuous mode
[  286.204341][T10486] team0: entered promiscuous mode
[  286.207499][T10486] macsec1: entered allmulticast mode
[  286.210546][T10486] team0: entered allmulticast mode
[  286.212584][T10486] team_slave_0: entered allmulticast mode
[  286.214686][T10486] team_slave_1: entered allmulticast mode
[  286.231314][T10486] bridge_slave_0: left allmulticast mode
[  286.233491][T10486] bridge_slave_0: left promiscuous mode
[  286.236284][T10486] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.246932][T10486] bridge_slave_1: left allmulticast mode
[  286.248752][T10486] bridge_slave_1: left promiscuous mode
[  286.250525][T10486] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.260376][T10486] bond0: (slave bond_slave_0): Releasing backup interface
[  286.266893][T10486] bond0: (slave bond_slave_1): Releasing backup interface
[  286.272098][T10486] team_slave_0: left allmulticast mode
[  286.274743][T10486] team_slave_0: left promiscuous mode
[  286.275346][T10502] netlink: 'syz.0.1191': attribute type 2 has an invalid length.
[  286.282847][T10486] team0: Port device team_slave_0 removed
[  286.285266][T10486] team_slave_1: left allmulticast mode
[  286.289861][T10502] binder: 10501:10502 ioctl c0306201 800003c0 returned -22
[  286.292697][T10486] team_slave_1: left promiscuous mode
[  286.298509][T10486] team0: Port device team_slave_1 removed
[  286.301661][T10486] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  286.304428][T10486] batman_adv: batadv0: Removing interface: batadv_slave_0
[  286.311646][T10486] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  286.314366][T10486] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.368764][T10486] XFS (nbd4): SB validate failed with error -5.
[  287.143143][T10551] netlink: 'syz.3.1203': attribute type 15 has an invalid length.
[  287.148203][T10551] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1203'.
[  287.371761][T10558] rdma_rxe: rxe_newlink: failed to add syz_tun
[  287.531551][T10563] team_slave_0: entered promiscuous mode
[  287.534156][T10563] team_slave_1: entered promiscuous mode
[  287.537866][T10563] macsec1: entered promiscuous mode
[  287.540042][T10563] team0: entered promiscuous mode
[  287.541996][T10563] macsec1: entered allmulticast mode
[  287.543700][T10563] team0: entered allmulticast mode
[  287.546009][T10563] team_slave_0: entered allmulticast mode
[  287.548837][T10563] team_slave_1: entered allmulticast mode
[  287.568488][T10563] bond0: (slave bond_slave_0): Releasing backup interface
[  287.571164][T10563] bond_slave_0: left allmulticast mode
[  287.576589][T10563] bond0: (slave bond_slave_1): Releasing backup interface
[  287.579826][T10563] bond_slave_1: left allmulticast mode
[  287.582927][T10563] team_slave_0: left allmulticast mode
[  287.585238][T10563] team_slave_0: left promiscuous mode
[  287.594342][T10563] team0: Port device team_slave_0 removed
[  287.597665][T10563] team_slave_1: left allmulticast mode
[  287.601482][T10563] team_slave_1: left promiscuous mode
[  287.608270][T10563] team0: Port device team_slave_1 removed
[  287.611879][T10563] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  287.614932][T10563] batman_adv: batadv0: Removing interface: batadv_slave_0
[  287.622380][T10563] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  287.629486][T10563] batman_adv: batadv0: Removing interface: batadv_slave_1
[  287.666025][ T6021] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  287.672057][T10566] netlink: 'syz.4.1213': attribute type 4 has an invalid length.
[  287.691296][T10563] XFS (nbd1): SB validate failed with error -5.
[  287.697133][T10566] netlink: 'syz.4.1213': attribute type 4 has an invalid length.
[  287.899579][T10577] ieee802154 phy0 wpan0: encryption failed: -22
[  288.085735][ T6021] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  288.876314][T10604] rdma_rxe: rxe_newlink: failed to add syz_tun
[  289.563941][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1223'.
[  289.566962][T10623] netlink: 'syz.4.1223': attribute type 5 has an invalid length.
[  289.569483][T10623] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1223'.
[  289.577069][T10623] geneve2: entered promiscuous mode
[  289.578735][T10623] geneve2: entered allmulticast mode
[  289.581177][ T8283] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  289.583922][ T8283] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  289.587100][ T8283] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  289.589773][ T8283] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  289.599887][T10629] syz1: rxe_newlink: already configured on syz_tun
[  290.043651][T10650] Bluetooth: MGMT ver 1.23
[  290.727871][T10667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1232'.
[  291.253181][T10690] tipc: Started in network mode
[  291.257409][T10690] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711
[  291.261528][T10690] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  291.592609][T10701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1242'.
[  292.592715][T10709] binder_alloc: 10708: pid 10708 spamming oneway? 1 buffers allocated for a total size of 4096
[  292.682239][T10713] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  292.685188][T10713] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  293.705922][T10702] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1244'.
[  294.766159][ T5954] Bluetooth: hci0: unexpected event for opcode 0x9103
[  296.092112][T10756] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  296.094413][T10756] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  296.097596][T10756] vhci_hcd vhci_hcd.0: Device attached
[  296.131851][   T40] kauditd_printk_skb: 97 callbacks suppressed
[  296.132464][   T40] audit: type=1800 audit(2000000044.582:603): pid=10756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1259" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  296.234782][T10756] bridge0: entered promiscuous mode
[  296.315526][T10765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1260'.
[  296.425475][ T1333] usb 38-1: SetAddress Request (2) to port 0
[  296.428221][ T1333] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd
[  296.467755][T10768] syz1: rxe_newlink: already configured on syz_tun
[  296.737988][T10758] vhci_hcd: connection reset by peer
[  296.743196][ T8274] vhci_hcd: stop threads
[  296.743802][T10777] netlink: 'syz.3.1263': attribute type 21 has an invalid length.
[  296.744700][ T8274] vhci_hcd: release socket
[  296.752369][ T8274] vhci_hcd: disconnect device
[  296.755106][T10777] netlink: 'syz.3.1263': attribute type 6 has an invalid length.
[  296.758455][T10777] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1263'.
[  297.366995][T10783] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1265'.
[  298.786599][ T5954] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  298.790354][ T5954] Bluetooth: hci0: Injecting HCI hardware error event
[  298.794987][ T5954] Bluetooth: hci0: hardware error 0x00
[  300.874841][ T5954] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  300.979537][   T40] audit: type=1800 audit(2000000049.422:604): pid=10830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1273" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  300.995584][T10836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1275'.
[  300.998899][T10827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1274'.
[  301.002870][T10827] netlink: 'syz.4.1274': attribute type 5 has an invalid length.
[  301.005613][T10827] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1274'.
[  301.106154][T10830] syz_tun: entered promiscuous mode
[  301.246384][T10851] rdma_rxe: rxe_newlink: failed to add syz_tun
[  301.504945][ T1333] usb 38-1: device descriptor read/8, error -110
[  301.895273][ T1333] usb usb38-port1: attempt power cycle
[  302.173291][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1289'.
[  302.178024][T10886] netlink: 'syz.3.1289': attribute type 5 has an invalid length.
[  302.180481][T10886] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1289'.
[  302.248172][T10892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1291'.
[  302.310899][   T40] audit: type=1326 audit(2000000050.762:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10893 comm="syz.3.1293" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000
[  302.321283][   T40] audit: type=1326 audit(2000000050.772:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10893 comm="syz.3.1293" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70ce579 code=0x7ffc0000
[  302.333218][   T40] audit: type=1326 audit(2000000050.772:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10893 comm="syz.3.1293" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000
[  302.341325][   T40] audit: type=1326 audit(2000000050.772:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10893 comm="syz.3.1293" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000
[  302.349168][   T40] audit: type=1326 audit(2000000050.772:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10893 comm="syz.3.1293" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70ce579 code=0x7ffc0000
[  302.356768][   T40] audit: type=1326 audit(2000000050.772:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10893 comm="syz.3.1293" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000
[  302.364011][   T40] audit: type=1326 audit(2000000050.772:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10893 comm="syz.3.1293" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000
[  302.376462][   T40] audit: type=1326 audit(2000000050.772:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10893 comm="syz.3.1293" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ce579 code=0x7ffc0000
[  302.383488][   T40] audit: type=1326 audit(2000000050.772:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10893 comm="syz.3.1293" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000
[  302.391366][   T40] audit: type=1326 audit(2000000050.782:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10893 comm="syz.3.1293" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000
[  302.485324][ T1333] usb usb38-port1: unable to enumerate USB device
[  303.045142][T10917] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  303.047322][T10917] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  303.054022][T10917] vhci_hcd vhci_hcd.0: Device attached
[  303.449268][ T1333] usb 40-1: SetAddress Request (2) to port 0
[  303.647670][ T1333] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd
[  303.871097][T10918] vhci_hcd: connection closed
[  303.871319][ T8268] vhci_hcd: stop threads
[  303.875995][ T8268] vhci_hcd: release socket
[  303.877561][ T8268] vhci_hcd: disconnect device
[  304.076149][ T5954] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  304.079419][ T5954] Bluetooth: hci1: Injecting HCI hardware error event
[  304.083294][ T5954] Bluetooth: hci1: hardware error 0x00
[  304.114609][ T1333] usb 40-1: enqueue for inactive port 0
[  304.280522][T10941] tipc: Started in network mode
[  304.282429][T10941] tipc: Node identity ee5783d89259, cluster identity 4711
[  304.285554][T10941] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  304.341345][T10945] syzkaller0: entered promiscuous mode
[  304.343100][T10945] syzkaller0: entered allmulticast mode
[  304.355505][T10945] tipc: Resetting bearer <eth:syzkaller0>
[  304.461163][T10939] tipc: Resetting bearer <eth:syzkaller0>
[  304.469549][T10939] tipc: Disabling bearer <eth:syzkaller0>
[  304.511338][T10956] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1313'.
[  304.515167][ T1333] usb usb40-port1: attempt power cycle
[  305.114624][  T139] usb 5-1: new full-speed USB device number 26 using dummy_hcd
[  305.266037][  T139] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  305.270915][  T139] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10
[  305.277260][ T1333] usb usb40-port1: unable to enumerate USB device
[  305.279496][  T139] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 59074, setting to 64
[  305.284190][  T139] usb 5-1: config 0 interface 0 has no altsetting 0
[  305.289715][  T139] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  305.294273][  T139] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.298584][  T139] usb 5-1: Product: syz
[  305.300874][  T139] usb 5-1: Manufacturer: syz
[  305.303337][  T139] usb 5-1: SerialNumber: syz
[  305.311567][  T139] usb 5-1: config 0 descriptor??
[  305.316398][T10965] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  305.535522][T10965] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  305.546218][  T139] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input14
[  305.710684][T10989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1323'.
[  305.713830][T10989] netlink: 'syz.4.1323': attribute type 5 has an invalid length.
[  305.714068][T10991] overlayfs: failed to clone upperpath
[  305.717716][T10989] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1323'.
[  305.803350][ T6043] usb 5-1: USB disconnect, device number 26
[  306.144914][ T5954] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  306.425465][T11026] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1328'.
[  306.650231][T11033] blkio.reset_stats is deprecated
[  306.654974][T11033] netlink: 'syz.0.1331': attribute type 4 has an invalid length.
[  306.657703][T11033] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1331'.
[  306.808881][T11049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1334'.
[  306.811859][T11049] netlink: 'syz.0.1334': attribute type 5 has an invalid length.
[  306.814620][T11049] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1334'.
[  307.652306][T11074] gtp0: entered promiscuous mode
[  307.657128][T11074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1338'.
[  307.805211][T11087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1344'.
[  307.808586][T11087] netlink: 'syz.3.1344': attribute type 5 has an invalid length.
[  307.811561][T11087] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1344'.
[  307.982548][  T139] libceph: connect (1)[c::]:6789 error -101
[  307.986695][  T139] libceph: mon0 (1)[c::]:6789 connect error
[  308.244562][ T6042] libceph: connect (1)[c::]:6789 error -101
[  308.247004][ T6042] libceph: mon0 (1)[c::]:6789 connect error
[  308.334702][  T139] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  308.495638][  T139] usb 5-1: config 0 interface 0 has no altsetting 0
[  308.499477][  T139] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  308.502444][  T139] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  308.505296][  T139] usb 5-1: Product: syz
[  308.506620][  T139] usb 5-1: Manufacturer: syz
[  308.508186][  T139] usb 5-1: SerialNumber: syz
[  308.511011][  T139] usb 5-1: config 0 descriptor??
[  308.516752][  T139] usb 5-1: selecting invalid altsetting 0
[  308.720385][T11118] 8021q: adding VLAN 0 to HW filter on device bond1
[  308.725909][T11119] bond_slave_0: entered promiscuous mode
[  308.728905][T11119] bond_slave_1: entered promiscuous mode
[  308.730992][T11119] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  308.735125][T11119] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[  308.755805][  T139] libceph: connect (1)[c::]:6789 error -101
[  308.761047][  T139] libceph: mon0 (1)[c::]:6789 connect error
[  308.770355][T11125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1354'.
[  308.773191][T11125] netlink: 'syz.3.1354': attribute type 5 has an invalid length.
[  308.775876][T11125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1354'.
[  308.780935][T11102] ceph: No mds server is up or the cluster is laggy
[  308.803587][  T139] usb 5-1: USB disconnect, device number 27
[  308.823284][T11130] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1356'.
[  309.053041][T11142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1360'.
[  309.062726][T11142] overlayfs: failed to resolve './file1': -2
[  309.108037][T11144] misc userio: No port type given on /dev/userio
[  309.109819][ T5957] Process accounting resumed
[  309.798928][T11158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1365'.
[  309.801759][T11158] netlink: 'syz.0.1365': attribute type 5 has an invalid length.
[  309.804643][T11158] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1365'.
[  310.110233][ T6043] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  310.137798][T11181] 9pnet_fd: Insufficient options for proto=fd
[  310.264764][ T6043] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  310.267977][ T6043] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  310.270957][ T6043] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  310.275085][ T6043] usb 5-1: config 0 interface 0 has no altsetting 0
[  310.278209][ T6043] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  310.278636][ T6042] libceph: connect (1)[c::]:6789 error -101
[  310.282775][ T6043] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  310.283296][ T6042] libceph: mon0 (1)[c::]:6789 connect error
[  310.286838][ T6043] usb 5-1: config 0 interface 0 has no altsetting 0
[  310.287661][ T6043] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  310.294313][ T6043] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  310.298088][ T6043] usb 5-1: config 0 interface 0 has no altsetting 0
[  310.301524][ T6043] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  310.305834][ T6043] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  310.310157][ T6043] usb 5-1: config 0 interface 0 has no altsetting 0
[  310.315116][ T6043] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  310.318303][ T6043] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  310.321658][ T6043] usb 5-1: config 0 interface 0 has no altsetting 0
[  310.324554][ T6043] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  310.327320][ T6043] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  310.330602][ T6043] usb 5-1: config 0 interface 0 has no altsetting 0
[  310.333459][ T6043] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  310.336454][ T6043] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  310.339752][ T6043] usb 5-1: config 0 interface 0 has no altsetting 0
[  310.342605][ T6043] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  310.345667][ T6043] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  310.349062][ T6043] usb 5-1: config 0 interface 0 has no altsetting 0
[  310.352623][ T6043] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  310.355449][ T6043] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  310.358067][ T6043] usb 5-1: Product: syz
[  310.359339][ T6043] usb 5-1: Manufacturer: syz
[  310.360650][ T6043] usb 5-1: SerialNumber: syz
[  310.367907][ T6043] usb 5-1: config 0 descriptor??
[  310.375995][ T6043] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[  310.545650][ T6042] libceph: connect (1)[c::]:6789 error -101
[  310.547745][ T6042] libceph: mon0 (1)[c::]:6789 connect error
[  310.644266][ T5957] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  310.676514][    C2] usb 5-1: yurex_control_callback - control failed: -71
[  310.676790][ T1333] usb 5-1: USB disconnect, device number 28
[  310.683965][ T1333] yurex 5-1:0.0: USB YUREX #0 now disconnected
[  310.766132][T11205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1374'.
[  310.769016][T11205] netlink: 'syz.3.1374': attribute type 5 has an invalid length.
[  310.816470][ T5957] usb 6-1: config 0 interface 0 has no altsetting 0
[  310.821619][ T5957] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  310.827521][ T5957] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  310.830881][ T5957] usb 6-1: Product: syz
[  310.834258][ T5957] usb 6-1: Manufacturer: syz
[  310.836125][ T5957] usb 6-1: SerialNumber: syz
[  310.843233][ T5957] usb 6-1: config 0 descriptor??
[  310.858075][ T5957] usb 6-1: selecting invalid altsetting 0
[  311.055366][ T6042] libceph: connect (1)[c::]:6789 error -101
[  311.057715][ T6042] libceph: mon0 (1)[c::]:6789 connect error
[  311.107995][T11220] trusted_key: encrypted_key: insufficient parameters specified
[  311.130725][T11194] ceph: No mds server is up or the cluster is laggy
[  311.153833][ T6043] usb 6-1: USB disconnect, device number 21
[  311.183285][T11227] bond2: entered promiscuous mode
[  311.189690][T11227] 8021q: adding VLAN 0 to HW filter on device bond2
[  311.233944][T11234] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  311.236950][T11234] overlayfs: failed to set xattr on upper
[  311.238783][T11234] overlayfs: ...falling back to redirect_dir=nofollow.
[  311.240933][T11234] overlayfs: ...falling back to index=off.
[  311.242775][T11234] overlayfs: ...falling back to uuid=null.
[  311.246627][T11234] overlayfs: ...falling back to xino=off.
[  311.301299][T11240] netlink: 'syz.3.1383': attribute type 5 has an invalid length.
[  311.391513][T11243] 9pnet_fd: Insufficient options for proto=fd
[  312.126053][T11266] netlink: 'syz.1.1392': attribute type 5 has an invalid length.
[  312.131502][T11266] geneve2: entered promiscuous mode
[  312.133289][T11266] geneve2: entered allmulticast mode
[  312.135885][ T8273] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  312.153113][ T8273] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  312.165986][ T8273] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  312.171641][ T8273] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  312.191684][T11272] FAULT_INJECTION: forcing a failure.
[  312.191684][T11272] name failslab, interval 1, probability 0, space 0, times 0
[  312.196779][T11272] CPU: 3 UID: 0 PID: 11272 Comm: syz.1.1394 Not tainted syzkaller #0 PREEMPT(full) 
[  312.196809][T11272] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  312.196816][T11272] Call Trace:
[  312.196821][T11272]  <TASK>
[  312.196825][T11272]  dump_stack_lvl+0x16c/0x1f0
[  312.196847][T11272]  should_fail_ex+0x512/0x640
[  312.196858][T11272]  ? fs_reclaim_acquire+0xae/0x150
[  312.196875][T11272]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  312.196889][T11272]  should_failslab+0xc2/0x120
[  312.196902][T11272]  __kmalloc_noprof+0xd2/0x510
[  312.196917][T11272]  tomoyo_realpath_from_path+0xc2/0x6e0
[  312.196933][T11272]  ? tomoyo_profile+0x47/0x60
[  312.196951][T11272]  tomoyo_path_number_perm+0x245/0x580
[  312.196962][T11272]  ? tomoyo_path_number_perm+0x237/0x580
[  312.196976][T11272]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  312.197003][T11272]  ? find_held_lock+0x2b/0x80
[  312.197016][T11272]  ? hook_file_ioctl_common+0x145/0x410
[  312.197033][T11272]  ? __fget_files+0x20e/0x3c0
[  312.197046][T11272]  security_file_ioctl_compat+0x9b/0x240
[  312.197060][T11272]  __ia32_compat_sys_ioctl+0xc3/0x370
[  312.197077][T11272]  __do_fast_syscall_32+0x7c/0x300
[  312.197096][T11272]  do_fast_syscall_32+0x32/0x80
[  312.197117][T11272]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  312.197131][T11272] RIP: 0023:0xf7f06579
[  312.197140][T11272] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  312.197151][T11272] RSP: 002b:00000000f53f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  312.197162][T11272] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000541b
[  312.197169][T11272] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  312.197175][T11272] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  312.197181][T11272] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  312.197187][T11272] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  312.197201][T11272]  </TASK>
[  312.197287][T11272] ERROR: Out of memory at tomoyo_realpath_from_path.
[  313.080991][T11310] __nla_validate_parse: 9 callbacks suppressed
[  313.081040][T11310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1401'.
[  313.104097][ T6043] usb 9-1: new full-speed USB device number 5 using dummy_hcd
[  313.267271][ T6043] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  313.270341][ T6043] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10
[  313.274440][ T6043] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 59074, setting to 64
[  313.278445][ T6043] usb 9-1: config 0 interface 0 has no altsetting 0
[  313.282463][ T6043] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  313.285589][ T6043] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.288151][ T6043] usb 9-1: Product: syz
[  313.289723][ T6043] usb 9-1: Manufacturer: syz
[  313.291463][ T6043] usb 9-1: SerialNumber: syz
[  313.295540][ T6043] usb 9-1: config 0 descriptor??
[  313.299675][T11306] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  313.454240][T11320] 9pnet_fd: Insufficient options for proto=fd
[  313.508705][T11306] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  313.513334][ T6043] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input15
[  313.669477][T11328] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1405'.
[  313.774708][ T5957] usb 9-1: USB disconnect, device number 5
[  314.273405][T11351] rdma_rxe: rxe_newlink: failed to add syz_tun
[  314.840223][T11364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1417'.
[  315.354234][ T1333] Process accounting resumed
[  316.210374][T11401] syz1: rxe_newlink: already configured on syz_tun
[  316.219945][T11403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1426'.
[  316.431105][T11411] overlayfs: failed to clone upperpath
[  316.484968][T11419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1431'.
[  316.489718][T11419] netlink: 'syz.3.1431': attribute type 5 has an invalid length.
[  316.492398][T11419] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1431'.
[  317.291147][T11445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1436'.
[  317.291393][T11444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1435'.
[  317.662180][T11452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1438'.
[  317.698396][T11432] Process accounting resumed
[  317.844908][T11458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1440'.
[  317.848001][T11458] netlink: 'syz.0.1440': attribute type 5 has an invalid length.
[  318.715771][T11498] __nla_validate_parse: 1 callbacks suppressed
[  318.715785][T11498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1446'.
[  318.785152][   T40] kauditd_printk_skb: 33 callbacks suppressed
[  318.785163][   T40] audit: type=1326 audit(2000000067.233:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11499 comm="syz.3.1447" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000
[  318.794402][   T40] audit: type=1326 audit(2000000067.233:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11499 comm="syz.3.1447" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000
[  319.104399][T11516] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1451'.
[  319.112345][T11516] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1451'.
[  319.653154][T11543] bridge2: entered promiscuous mode
[  320.196554][T11553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1460'.
[  321.486511][T11596] bridge1: entered promiscuous mode
[  321.846574][T11609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1473'.
[  322.187426][T11617] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=256, location=256
[  322.191232][T11617] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=512, location=512
[  322.194829][T11617] UDF-fs: warning (device sr0): udf_load_vrs: No anchor found
[  322.197651][T11617] UDF-fs: Scanning with blocksize 2048 failed
[  322.238129][ T1417] ieee802154 phy0 wpan0: encryption failed: -22
[  322.240102][ T1417] ieee802154 phy1 wpan1: encryption failed: -22
[  322.331656][T11617] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=256, location=256
[  322.335184][T11617] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=512, location=512
[  322.338133][T11617] UDF-fs: warning (device sr0): udf_load_vrs: No anchor found
[  322.340494][T11617] UDF-fs: Scanning with blocksize 4096 failed
[  322.342475][T11617] UDF-fs: warning (device sr0): udf_fill_super: No partition found (1)
[  323.187402][T11643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1488'.
[  323.883621][T11666] Bluetooth: MGMT ver 1.23
[  325.583452][ T5957] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  325.745345][ T5957] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  325.748119][ T5957] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10
[  325.751558][ T5957] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 59074, setting to 64
[  325.757159][ T5957] usb 5-1: config 0 interface 0 has no altsetting 0
[  325.762393][ T5957] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  325.765771][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.768748][ T5957] usb 5-1: Product: syz
[  325.770115][ T5957] usb 5-1: Manufacturer: syz
[  325.771640][ T5957] usb 5-1: SerialNumber: syz
[  325.778403][ T5957] usb 5-1: config 0 descriptor??
[  325.781004][T11701] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  325.988320][T11701] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  325.995446][ T5957] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input16
[  326.278258][ T6043] usb 5-1: USB disconnect, device number 29
[  327.019909][T11722] rdma_rxe: rxe_newlink: failed to add syz_tun
[  327.544203][T11741] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=256, location=256
[  327.549190][T11741] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=512, location=512
[  327.552291][T11741] UDF-fs: warning (device sr0): udf_load_vrs: No anchor found
[  327.555733][T11741] UDF-fs: Scanning with blocksize 2048 failed
[  327.616195][T11741] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=256, location=256
[  327.619921][T11741] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=512, location=512
[  327.623098][T11741] UDF-fs: warning (device sr0): udf_load_vrs: No anchor found
[  327.625583][T11741] UDF-fs: Scanning with blocksize 4096 failed
[  327.627706][T11741] UDF-fs: warning (device sr0): udf_fill_super: No partition found (1)
[  328.095274][T11755] 9pnet_fd: Insufficient options for proto=fd
[  329.303301][ T6042] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[  329.466020][ T6042] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  329.469506][ T6042] usb 6-1: config 0 has no interface number 0
[  329.473905][ T6042] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  329.477728][ T6042] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  329.481859][ T6042] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  329.487502][ T6042] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64
[  329.491724][ T6042] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  329.497644][ T6042] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  329.500739][ T6042] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.507771][ T6042] usb 6-1: config 0 descriptor??
[  329.510669][T11785] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  329.519982][ T6042] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  329.866570][T11807] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526
[  330.439886][T11821] 9pnet_fd: Insufficient options for proto=fd
[  331.230615][T11829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1527'.
[  331.235451][T11831] rdma_rxe: rxe_newlink: failed to add syz_tun
[  331.235578][T11829] netlink: 'syz.0.1527': attribute type 5 has an invalid length.
[  331.240610][T11829] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1527'.
[  331.687732][T11861] netlink: 'syz.3.1532': attribute type 4 has an invalid length.
[  332.135416][ T6021] usb 6-1: USB disconnect, device number 22
[  332.149281][ T6021] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  332.408175][T11882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1538'.
[  332.411140][T11882] netlink: 'syz.0.1538': attribute type 5 has an invalid length.
[  332.413942][T11882] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1538'.
[  332.473971][T11890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1539'.
[  332.478784][T11890] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1539'.
[  332.531384][T11893] rdma_rxe: rxe_newlink: failed to add syz_tun
[  333.216878][T11923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1548'.
[  333.219872][T11923] netlink: 'syz.1.1548': attribute type 5 has an invalid length.
[  333.222320][T11923] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1548'.
[  333.313199][ T6043] usb 5-1: new full-speed USB device number 30 using dummy_hcd
[  333.338033][T11934] loop6: detected capacity change from 0 to 524288000
[  333.343848][T11934] Buffer I/O error on dev loop6, logical block 0, async page read
[  333.350473][T11934] Buffer I/O error on dev loop6, logical block 0, async page read
[  333.360618][T11934] Buffer I/O error on dev loop6, logical block 0, async page read
[  333.379858][T11934] Buffer I/O error on dev loop6, logical block 0, async page read
[  333.387620][T11934] Buffer I/O error on dev loop6, logical block 0, async page read
[  333.403960][T11934] Buffer I/O error on dev loop6, logical block 0, async page read
[  333.406497][T11934] Buffer I/O error on dev loop6, logical block 0, async page read
[  333.475170][T11943] ieee802154 phy0 wpan0: encryption failed: -22
[  333.484675][T11940] loop6: detected capacity change from 524288000 to 0
[  333.485095][ T6043] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  333.489909][ T6043] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10
[  333.493081][T11934] Buffer I/O error on dev loop6, logical block 0, async page read
[  333.495842][T11934] ldm_validate_partition_table(): Disk read failed.
[  333.498809][ T6043] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 59074, setting to 64
[  333.508454][T11934] Dev loop6: unable to read RDB block 0
[  333.510256][T11934]  loop6: unable to read partition table
[  333.512102][T11934] loop6: partition table beyond EOD, truncated
[  333.513004][ T6043] usb 5-1: config 0 interface 0 has no altsetting 0
[  333.516229][T11934] loop_reread_partitions: partition scan of loop6 (™^L‹¦øíA;åó§Èb»ö@’†�Ö”:B‚w¾<ØÈgønf.-Ó‘†³.àië�í>^.¾dDd—Â) failed (rc=-5)
[  333.525775][ T6043] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  333.528771][ T6043] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.531752][ T6043] usb 5-1: Product: syz
[  333.533748][ T6043] usb 5-1: Manufacturer: syz
[  333.535581][ T6043] usb 5-1: SerialNumber: syz
[  333.539234][ T6043] usb 5-1: config 0 descriptor??
[  333.558026][T11921] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  333.772020][T11921] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  333.776907][ T6043] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input17
[  333.828085][T11941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1551'.
[  334.049511][ T6043] usb 5-1: USB disconnect, device number 30
[  334.268367][T11961] syz1: rxe_newlink: already configured on syz_tun
[  334.853978][T11982] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  334.856112][T11982] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  334.859053][T11982] vhci_hcd vhci_hcd.0: Device attached
[  334.913265][T11988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1559'.
[  334.915823][T11988] bridge_slave_1: left allmulticast mode
[  334.917527][T11988] bridge_slave_1: left promiscuous mode
[  334.930028][T11988] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.975039][T11988] bridge_slave_0: left allmulticast mode
[  334.980526][T11988] bridge_slave_0: left promiscuous mode
[  334.986164][T11988] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.172895][ T1333] usb 38-1: SetAddress Request (6) to port 0
[  335.174973][ T1333] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd
[  335.484986][T11983] vhci_hcd: connection reset by peer
[  335.487352][ T8284] vhci_hcd: stop threads
[  335.488793][ T8284] vhci_hcd: release socket
[  335.490608][ T8284] vhci_hcd: disconnect device
[  335.934151][T12009] ieee802154 phy0 wpan0: encryption failed: -22
[  336.002776][ T6041] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[  336.174566][ T6041] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  336.177903][ T6041] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10
[  336.183171][ T6041] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 59074, setting to 64
[  336.186605][ T6041] usb 9-1: config 0 interface 0 has no altsetting 0
[  336.190843][ T6041] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  336.197365][ T6041] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.200171][ T6041] usb 9-1: Product: syz
[  336.201577][ T6041] usb 9-1: Manufacturer: syz
[  336.203885][ T6041] usb 9-1: SerialNumber: syz
[  336.208129][ T6041] usb 9-1: config 0 descriptor??
[  336.210652][T12000] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  336.418091][T12000] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  336.424917][ T6041] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input18
[  336.695376][   T34] usb 9-1: USB disconnect, device number 6
[  336.718060][   T40] audit: type=1326 audit(2000000085.164:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12028 comm="syz.0.1575" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702e579 code=0x0
[  336.893224][T12033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1576'.
[  336.896867][T12033] netlink: 'syz.1.1576': attribute type 5 has an invalid length.
[  336.899402][T12033] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1576'.
[  337.108425][T12050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1580'.
[  337.166945][T12052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1578'.
[  337.198760][T12050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1580'.
[  337.823101][T12073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1585'.
[  337.826219][T12073] netlink: 'syz.3.1585': attribute type 5 has an invalid length.
[  337.828854][T12073] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1585'.
[  338.005668][T12079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1587'.
[  338.122195][    C3] vcan0: j1939_tp_rxtimer: 0xffff88805e8d2000: rx timeout, send abort
[  338.190333][T12090] syzkaller1: entered promiscuous mode
[  338.192163][T12090] syzkaller1: entered allmulticast mode
[  338.622806][    C3] vcan0: j1939_tp_rxtimer: 0xffff88805f383c00: rx timeout, send abort
[  338.626082][    C3] vcan0: j1939_tp_rxtimer: 0xffff88805e8d2000: abort rx timeout. Force session deactivation
[  339.125639][    C3] vcan0: j1939_tp_rxtimer: 0xffff88805f383c00: abort rx timeout. Force session deactivation
[  339.550979][T12111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1595'.
[  339.555104][T12111] netlink: 'syz.1.1595': attribute type 5 has an invalid length.
[  339.557666][T12111] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1595'.
[  340.114054][ T5957] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  340.211451][ T5957] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  340.222727][ T1333] usb 38-1: device descriptor read/8, error -110
[  340.633078][ T1333] usb usb38-port1: attempt power cycle
[  340.829410][T12160] netlink: 'syz.0.1607': attribute type 5 has an invalid length.
[  341.204659][ T1333] usb usb38-port1: unable to enumerate USB device
[  341.592311][T12187] tmpfs: Unknown parameter 'qu~a'
[  341.908659][T12207] __nla_validate_parse: 2 callbacks suppressed
[  341.908674][T12207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1617'.
[  341.914233][T12207] netlink: 'syz.0.1617': attribute type 5 has an invalid length.
[  341.922727][T12207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1617'.
[  342.143301][T12229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1621'.
[  342.555204][T12248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1626'.
[  342.559303][T12248] netlink: 'syz.1.1626': attribute type 5 has an invalid length.
[  342.563047][T12248] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1626'.
[  343.034454][T12284] syz_tun: entered allmulticast mode
[  343.042050][T12284] overlayfs: failed to clone upperpath
[  343.045977][T12283] syz_tun: left allmulticast mode
[  343.721793][T12300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1634'.
[  343.925724][T12305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1635'.
[  343.928576][T12305] netlink: 'syz.3.1635': attribute type 5 has an invalid length.
[  343.931090][T12305] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1635'.
[  344.084603][T12315] rdma_rxe: rxe_newlink: failed to add syz_tun
[  344.437886][T12330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1640'.
[  344.565536][T12330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1640'.
[  346.118657][T12377] FAULT_INJECTION: forcing a failure.
[  346.118657][T12377] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  346.122961][T12377] CPU: 2 UID: 0 PID: 12377 Comm: syz.1.1652 Not tainted syzkaller #0 PREEMPT(full) 
[  346.122977][T12377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  346.122985][T12377] Call Trace:
[  346.122988][T12377]  <TASK>
[  346.122993][T12377]  dump_stack_lvl+0x16c/0x1f0
[  346.123014][T12377]  should_fail_ex+0x512/0x640
[  346.123028][T12377]  _copy_from_user+0x2e/0xd0
[  346.123039][T12377]  copy_ctl_value_from_user+0x3b/0x710
[  346.123056][T12377]  ? kasan_save_track+0x14/0x30
[  346.123069][T12377]  snd_ctl_ioctl_compat+0x956/0xc70
[  346.123085][T12377]  ? __pfx_snd_ctl_ioctl_compat+0x10/0x10
[  346.123100][T12377]  ? find_held_lock+0x2b/0x80
[  346.123117][T12377]  ? __fget_files+0x20e/0x3c0
[  346.123129][T12377]  ? __pfx_snd_ctl_ioctl_compat+0x10/0x10
[  346.123145][T12377]  __ia32_compat_sys_ioctl+0x242/0x370
[  346.123163][T12377]  __do_fast_syscall_32+0x7c/0x300
[  346.123181][T12377]  do_fast_syscall_32+0x32/0x80
[  346.123197][T12377]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  346.123211][T12377] RIP: 0023:0xf7f06579
[  346.123220][T12377] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  346.123231][T12377] RSP: 002b:00000000f53f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  346.123242][T12377] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c2c45512
[  346.123249][T12377] RDX: 0000000080000640 RSI: 0000000000000000 RDI: 0000000000000000
[  346.123255][T12377] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  346.123261][T12377] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  346.123267][T12377] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  346.123280][T12377]  </TASK>
[  346.188397][    C2] vkms_vblank_simulate: vblank timer overrun
[  346.417206][T12388] syz1: rxe_newlink: already configured on syz_tun
[  346.654573][T12407] netlink: 'syz.4.1661': attribute type 16 has an invalid length.
[  346.657410][T12409] netlink: 'syz.4.1661': attribute type 16 has an invalid length.
[  348.880277][T12459] team0: left allmulticast mode
[  348.881950][T12459] team0: left promiscuous mode
[  348.883967][T12459] macsec1: left promiscuous mode
[  348.885801][T12459] macsec1: left allmulticast mode
[  348.889508][T12459] geneve2: left promiscuous mode
[  348.891357][T12459] geneve2: left allmulticast mode
[  348.897108][ T8270] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  348.900916][ T8270] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[  348.906939][ T8283] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  348.910279][ T8283] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[  348.913536][ T8283] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  348.916342][ T8283] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[  348.919070][ T8283] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  348.921800][ T8283] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[  350.448813][T12510] 9pnet_fd: Insufficient options for proto=fd
[  350.519224][T12515] fuse: Bad value for 'fd'
[  350.521431][T12515] __nla_validate_parse: 5 callbacks suppressed
[  350.521442][T12515] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1690'.
[  351.045636][T12546] netlink: 'syz.4.1691': attribute type 1 has an invalid length.
[  351.065080][T12546] bond1: entered promiscuous mode
[  351.067465][T12546] 8021q: adding VLAN 0 to HW filter on device bond1
[  351.075656][T12546] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1691'.
[  351.374503][T12556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1698'.
[  351.383282][T12556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1698'.
[  351.386637][T12556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1698'.
[  351.605560][T12570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1701'.
[  351.640535][T12569] lo: entered promiscuous mode
[  351.642556][T12569] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  351.660808][T12571] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  352.420813][T12595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1712'.
[  352.502065][ T1333] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  352.652951][ T1333] usb 6-1: Using ep0 maxpacket: 8
[  352.658356][ T1333] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  352.662088][ T1333] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  352.665593][ T1333] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  352.669180][ T1333] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  352.675383][ T1333] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  352.678709][ T1333] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.885706][ T1333] usb 6-1: usb_control_msg returned -32
[  352.887480][ T1333] usbtmc 6-1:16.0: can't read capabilities
[  352.902198][T12590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  352.909381][T12590] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  352.922136][ T6043] usb 6-1: USB disconnect, device number 23
[  353.480219][T12630] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1720'.
[  353.481939][ T1333] usb 9-1: new full-speed USB device number 7 using dummy_hcd
[  353.484799][T12630] nbd: must specify at least one socket
[  353.516730][T12631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1719'.
[  353.643069][ T1333] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  353.646132][ T1333] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10
[  353.649559][ T1333] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 59074, setting to 64
[  353.655350][ T1333] usb 9-1: config 0 interface 0 has no altsetting 0
[  353.663387][ T1333] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  353.666657][ T1333] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.668959][ T1333] usb 9-1: Product: syz
[  353.670306][ T1333] usb 9-1: Manufacturer: syz
[  353.676781][ T1333] usb 9-1: SerialNumber: syz
[  353.679553][ T1333] usb 9-1: config 0 descriptor??
[  353.682416][T12622] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  353.888698][T12622] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  353.897254][ T1333] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input19
[  354.166748][   T34] usb 9-1: USB disconnect, device number 7
[  354.589898][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  354.770702][T12679] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1731'.
[  354.773921][T12679] nbd: must specify at least one socket
[  354.950693][T12683] netlink: 'syz.4.1732': attribute type 5 has an invalid length.
[  362.364920][T12750] __nla_validate_parse: 3 callbacks suppressed
[  362.364932][T12750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1737'.
[  362.593245][ T1333] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  362.596502][T12758] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1738'.
[  362.753025][ T1333] usb 6-1: config index 0 descriptor too short (expected 39, got 27)
[  362.755897][ T1333] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  362.759280][ T1333] usb 6-1: config 0 interface 0 has no altsetting 0
[  362.763790][ T1333] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  362.767006][ T1333] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  362.769870][ T1333] usb 6-1: Product: syz
[  362.771327][ T1333] usb 6-1: Manufacturer: syz
[  362.773109][ T1333] usb 6-1: SerialNumber: syz
[  362.778053][ T1333] usb 6-1: config 0 descriptor??
[  362.781499][ T1333] hub 6-1:0.0: bad descriptor, ignoring hub
[  362.783482][ T1333] hub 6-1:0.0: probe with driver hub failed with error -5
[  362.787143][ T1333] usb 6-1: selecting invalid altsetting 0
[  363.347317][T12776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1744'.
[  363.351114][T12776] netlink: 'syz.3.1744': attribute type 5 has an invalid length.
[  363.355058][T12776] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1744'.
[  363.519166][T12779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1743'.
[  363.682982][T12746] usb 6-1: reset high-speed USB device number 24 using dummy_hcd
[  363.690821][   T40] audit: type=1800 audit(2000000112.136:651): pid=12784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1745" name="nullb0" dev="tmpfs" ino=1092 res=0 errno=0
[  363.869711][T12756] Set syz1 is full, maxelem 65536 reached
[  364.691218][ T6021] usb 5-1: new full-speed USB device number 31 using dummy_hcd
[  364.842707][ T6021] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  364.846664][ T6021] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10
[  364.850321][ T6021] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 59074, setting to 64
[  364.854235][ T6021] usb 5-1: config 0 interface 0 has no altsetting 0
[  364.860478][ T6021] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  364.864079][ T6021] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.866740][ T6021] usb 5-1: Product: syz
[  364.868149][ T6021] usb 5-1: Manufacturer: syz
[  364.869725][ T6021] usb 5-1: SerialNumber: syz
[  364.873004][ T6021] usb 5-1: config 0 descriptor??
[  364.877813][T12797] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  365.041338][T12813] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.046175][T12813] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  365.093236][T12797] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  365.097489][ T6021] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input20
[  365.127739][T12813] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.133811][T12813] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  365.304441][T12813] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.308653][T12813] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  365.375731][T12813] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.378252][ T6021] usb 5-1: USB disconnect, device number 31
[  365.380081][T12813] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  365.559632][ T8273] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  365.563310][ T8273] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  365.578301][ T8273] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  365.580875][ T8273] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  365.600964][ T8274] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  365.603636][ T8274] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  365.639646][ T8274] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  365.649210][ T8274] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  365.661579][ T6043] usb 6-1: USB disconnect, device number 24
[  365.699942][T12824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1759'.
[  365.704682][T12824] netlink: 'syz.3.1759': attribute type 5 has an invalid length.
[  365.707547][T12824] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1759'.
[  365.738587][T12826] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1760'.
[  365.741730][T12826] nbd: must specify at least one socket
[  366.422769][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  366.734223][T12851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1767'.
[  366.807145][   T40] audit: type=1326 audit(2000000115.256:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12855 comm="syz.3.1769" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000
[  366.813981][   T40] audit: type=1326 audit(2000000115.256:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12855 comm="syz.3.1769" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000
[  366.821932][   T40] audit: type=1326 audit(2000000115.256:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12855 comm="syz.3.1769" exe="/syz-executor" sig=0 arch=40000003 syscall=29 compat=1 ip=0xf70ce579 code=0x7ffc0000
[  366.839615][T12858] syz1: rxe_newlink: already configured on syz_tun
[  367.045220][T12865] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1772'.
[  367.048313][T12865] nbd: must specify at least one socket
[  367.072596][T12869] netlink: 'syz.4.1773': attribute type 1 has an invalid length.
[  367.456599][T12882] binder: 12881:12882 ioctl c0306201 80000040 returned -14
[  367.459819][T12882] binder: 12881:12882 ioctl c0306201 80000640 returned -22
[  367.505035][T12887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1775'.
[  367.582138][T12892] ieee802154 phy0 wpan0: encryption failed: -22
[  367.932246][T12905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1781'.
[  368.528487][T12909] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1782'.
[  368.532001][T12909] nbd: must specify at least one socket
[  368.575752][T12911] rdma_rxe: rxe_newlink: failed to add syz_tun
[  368.672923][T12914] /dev/nullb0: Can't lookup blockdev
[  368.779143][T12926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1787'.
[  368.823193][T12929] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1788'.
[  369.403438][T12947] Unsupported ieee802154 address type: 0
[  369.409822][T12947] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1793'.
[  369.413424][T12947] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1793'.
[  369.456437][T12949] kvm_intel: kvm [12948]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x89
[  369.601311][T12955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1795'.
[  369.601358][T12956] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1797'.
[  370.953615][T12970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1802'.
[  370.956632][T12970] netlink: 'syz.4.1802': attribute type 5 has an invalid length.
[  372.622004][T13031] __nla_validate_parse: 3 callbacks suppressed
[  372.622016][T13031] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1814'.
[  372.629931][T13031] nbd: must specify at least one socket
[  372.840860][ T6001] usb 6-1: new full-speed USB device number 25 using dummy_hcd
[  373.002660][ T6001] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  373.006151][ T6001] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10
[  373.009962][ T6001] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 59074, setting to 64
[  373.014671][ T6001] usb 6-1: config 0 interface 0 has no altsetting 0
[  373.023307][ T6001] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  373.026297][ T6001] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.029914][ T6001] usb 6-1: Product: syz
[  373.032626][ T6001] usb 6-1: Manufacturer: syz
[  373.036674][ T6001] usb 6-1: SerialNumber: syz
[  373.041943][ T6001] usb 6-1: config 0 descriptor??
[  373.047245][T13029] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  373.255868][T13029] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  373.260109][ T6001] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input21
[  373.527361][ T6041] usb 6-1: USB disconnect, device number 25
[  373.839245][T13065] nbd: must specify at least one socket
[  373.874503][T13067] ./file1: Can't lookup blockdev
[  373.970253][T13069] mkiss: ax0: crc mode is auto.
[  374.462459][T13096] nbd: must specify at least one socket
[  374.489669][T13100] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  374.491726][T13100] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  374.754928][T13109] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1835'.
[  375.193113][T13118] rdma_rxe: rxe_newlink: failed to add syz_tun
[  375.421986][T13126] could not open pipe file descriptor
[  375.744819][T13142] ieee802154 phy0 wpan0: encryption failed: -22
[  375.779476][T13143] afs: Unknown parameter 'dynr'
[  376.761047][T13161] netlink: 'syz.4.1852': attribute type 33 has an invalid length.
[  376.770675][T13161] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1852'.
[  377.196287][T13194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1862'.
[  377.685969][T13207] : Can't lookup blockdev
[  377.702545][T13207] bridge0: entered promiscuous mode
[  377.704341][T13207] macsec2: entered promiscuous mode
[  377.993857][T13220] rdma_rxe: rxe_newlink: failed to add syz_tun
[  378.018331][T13223] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1870'.
[  378.159065][T13230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1872'.
[  378.413839][T13237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1882'.
[  378.418742][T13238] rdma_rxe: rxe_newlink: failed to add syz_tun
[  379.616480][T13271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1886'.
[  379.754912][T13264] syz.4.1879 (13264) used greatest stack depth: 19736 bytes left
[  380.093957][T13287] usb usb5: usbfs: process 13287 (syz.0.1891) did not claim interface 0 before use
[  380.233859][T13298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1896'.
[  380.335917][T13267] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  380.532892][T13300] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=256, location=256
[  380.535906][T13300] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=512, location=512
[  380.538993][T13300] UDF-fs: warning (device sr0): udf_load_vrs: No anchor found
[  380.562913][T13300] UDF-fs: Scanning with blocksize 2048 failed
[  380.621837][T13300] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=256, location=256
[  380.625203][T13300] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=512, location=512
[  380.628232][T13300] UDF-fs: warning (device sr0): udf_load_vrs: No anchor found
[  380.630843][T13300] UDF-fs: Scanning with blocksize 4096 failed
[  380.633127][T13300] UDF-fs: warning (device sr0): udf_fill_super: No partition found (1)
[  381.115194][T13330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1906'.
[  381.544841][T13336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1908'.
[  381.673505][T13343] !
: renamed from ipvlan0
[  381.698864][T13347] netlink: 'syz.0.1911': attribute type 10 has an invalid length.
[  381.708781][T13347] netlink: 'syz.0.1911': attribute type 10 has an invalid length.
[  381.715559][T13347] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  382.447692][T13375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1922'.
[  382.478268][T13377] rdma_rxe: rxe_newlink: failed to add syz_tun
[  382.679821][T13382] rdma_rxe: rxe_newlink: failed to add syz_tun
[  382.909902][T13392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1926'.
[  382.935278][T13396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1928'.
[  383.662562][ T1417] ieee802154 phy0 wpan0: encryption failed: -22
[  383.664671][ T1417] ieee802154 phy1 wpan1: encryption failed: -22
[  383.779588][T13420] netlink: 504 bytes leftover after parsing attributes in process `syz.4.1936'.
[  383.783375][T13420] sch_tbf: burst 0 is lower than device lo mtu (2305) !
[  383.787984][T13420] netlink: 'syz.4.1936': attribute type 10 has an invalid length.
[  383.794824][T13420] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  383.825508][T13422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1937'.
[  383.829135][T13422] netlink: 'syz.4.1937': attribute type 5 has an invalid length.
[  383.832227][T13422] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1937'.
[  383.922263][T13428] rdma_rxe: rxe_newlink: failed to add syz_tun
[  383.983503][T13435] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  383.985822][   T40] audit: type=1804 audit(2000000132.437:655): pid=13436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1943" name="file0" dev="ramfs" ino=39429 res=1 errno=0
[  384.164168][T13447] befs: (nbd1): No write support. Marking filesystem read-only
[  384.167262][T13447] befs: (nbd1): unable to read superblock
[  385.024349][T13454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1948'.
[  385.027415][T13454] netlink: 'syz.0.1948': attribute type 5 has an invalid length.
[  385.031041][T13454] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1948'.
[  385.092846][T13459] netlink: 'syz.0.1950': attribute type 303 has an invalid length.
[  385.177139][T13465] sctp: [Deprecated]: syz.1.1953 (pid 13465) Use of int in max_burst socket option deprecated.
[  385.177139][T13465] Use struct sctp_assoc_value instead
[  385.288295][T13471] overlayfs: failed to clone lowerpath
[  385.822397][T13476] rdma_rxe: rxe_newlink: failed to add syz_tun
[  385.857026][T13478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1958'.
[  385.860022][T13478] netlink: 'syz.0.1958': attribute type 5 has an invalid length.
[  385.863047][T13478] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1958'.
[  386.038350][T13482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1959'.
[  386.244944][T13505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1967'.
[  386.248456][T13505] netlink: 'syz.0.1967': attribute type 5 has an invalid length.
[  386.252705][T13505] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1967'.
[  386.459780][ T1333] IPVS: starting estimator thread 0...
[  386.560957][T13517] IPVS: using max 42 ests per chain, 100800 per kthread
[  387.231487][ T1333] libceph: connect (1)[c::]:6789 error -101
[  387.238355][ T1333] libceph: mon0 (1)[c::]:6789 connect error
[  387.256437][T13531] ceph: No mds server is up or the cluster is laggy
[  387.303601][T13534] vxfs: WRONG superblock magic 00000000 at 1
[  387.306997][T13534] vxfs: WRONG superblock magic 00000000 at 8
[  387.308793][T13534] vxfs: can't find superblock.
[  387.337434][T13534] ntfs3(sr0): try to read out of volume at offset 0x0
[  387.375449][T13537] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  387.395389][T13537] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  387.406827][T13537] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  387.414813][T13537] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  387.431668][T13537] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  387.629931][T13535] chnl_net:caif_netlink_parms(): no params data found
[  387.725525][T13535] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.727716][T13535] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.730223][T13535] bridge_slave_0: entered allmulticast mode
[  387.733166][T13535] bridge_slave_0: entered promiscuous mode
[  387.736765][T13535] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.739075][T13535] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.746886][T13535] bridge_slave_1: entered allmulticast mode
[  387.748734][T13552] netlink: 'syz.4.1977': attribute type 5 has an invalid length.
[  387.752103][T13535] bridge_slave_1: entered promiscuous mode
[  387.790911][T13535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  387.795479][T13535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  387.834364][T13535] team0: Port device team_slave_0 added
[  387.837674][T13535] team0: Port device team_slave_1 added
[  387.873096][T13556] FAULT_INJECTION: forcing a failure.
[  387.873096][T13556] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  387.877190][T13556] CPU: 2 UID: 0 PID: 13556 Comm: syz.1.1979 Not tainted syzkaller #0 PREEMPT(full) 
[  387.877205][T13556] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  387.877212][T13556] Call Trace:
[  387.877216][T13556]  <TASK>
[  387.877221][T13556]  dump_stack_lvl+0x16c/0x1f0
[  387.877241][T13556]  should_fail_ex+0x512/0x640
[  387.877254][T13556]  _copy_from_user+0x2e/0xd0
[  387.877266][T13556]  ucma_bind+0xa6/0x220
[  387.877281][T13556]  ? __pfx_ucma_bind+0x10/0x10
[  387.877309][T13556]  ? __pfx_ucma_bind+0x10/0x10
[  387.877323][T13556]  ucma_write+0x1fb/0x330
[  387.877337][T13556]  ? __pfx_ucma_write+0x10/0x10
[  387.877351][T13556]  ? bpf_lsm_file_permission+0x9/0x10
[  387.877366][T13556]  ? security_file_permission+0x71/0x210
[  387.877380][T13556]  ? rw_verify_area+0xcf/0x6c0
[  387.877397][T13556]  ? __pfx_ucma_write+0x10/0x10
[  387.877410][T13556]  vfs_write+0x29d/0x11d0
[  387.877424][T13556]  ? __pfx_vfs_write+0x10/0x10
[  387.877433][T13556]  ? find_held_lock+0x2b/0x80
[  387.877447][T13556]  ? __fget_files+0x204/0x3c0
[  387.877459][T13556]  ? __fget_files+0x20e/0x3c0
[  387.877468][T13556]  ? handle_mm_fault+0x200/0xd10
[  387.877488][T13556]  ksys_write+0x1f8/0x250
[  387.877499][T13556]  ? __pfx_ksys_write+0x10/0x10
[  387.877511][T13556]  ? rcu_is_watching+0x12/0xc0
[  387.877526][T13556]  __do_fast_syscall_32+0x7c/0x300
[  387.877544][T13556]  do_fast_syscall_32+0x32/0x80
[  387.877560][T13556]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  387.877574][T13556] RIP: 0023:0xf7f06579
[  387.877583][T13556] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  387.877595][T13556] RSP: 002b:00000000f53f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004
[  387.877605][T13556] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100
[  387.877612][T13556] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000
[  387.877619][T13556] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  387.877625][T13556] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  387.877631][T13556] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  387.877644][T13556]  </TASK>
[  387.881603][T13535] batman_adv: batadv0: Adding interface: batadv_slave_0
[  387.938547][T13560] binder_alloc: 13559: binder_alloc_buf, no vma
[  387.939984][T13535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  387.960139][T13535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  387.964305][T13535] batman_adv: batadv0: Adding interface: batadv_slave_1
[  387.966575][T13535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  387.974301][T13535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  388.068375][T13535] hsr_slave_0: entered promiscuous mode
[  388.070892][T13535] hsr_slave_1: entered promiscuous mode
[  388.073087][T13535] debugfs: 'hsr0' already exists in 'hsr'
[  388.074897][T13535] Cannot create hsr debugfs directory
[  388.166969][T13535] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  388.171349][T13535] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  388.239591][T13535] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  388.243514][T13535] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  388.323202][T13535] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  388.326328][T13535] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  388.375733][T13535] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  388.379471][T13535] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  388.426634][T13572] netlink: 'syz.1.1985': attribute type 5 has an invalid length.
[  388.476343][ T8283] bond_slave_0: left promiscuous mode
[  388.478202][ T8283] bond_slave_1: left promiscuous mode
[  388.969148][ T8283] bond1 (unregistering): (slave macvlan2): Removing an active aggregator
[  388.973651][ T8283] bond1 (unregistering): (slave macvlan2): Releasing backup interface
[  388.984422][ T8283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  388.989069][ T8283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  388.992975][ T8283] bond0 (unregistering): Released all slaves
[  389.075908][ T8283] bond1 (unregistering): Released all slaves
[  389.163226][ T8283] bond2 (unregistering): Released all slaves
[  389.203769][T13535] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  389.208255][T13535] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  389.213632][T13535] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  389.218902][T13535] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  389.260918][ T8283] tipc: Left network mode
[  389.292958][T13535] 8021q: adding VLAN 0 to HW filter on device bond0
[  389.305303][T13535] 8021q: adding VLAN 0 to HW filter on device team0
[  389.312038][ T8268] bridge0: port 1(bridge_slave_0) entered blocking state
[  389.314352][ T8268] bridge0: port 1(bridge_slave_0) entered forwarding state
[  389.354096][ T8268] bridge0: port 2(bridge_slave_1) entered blocking state
[  389.356438][ T8268] bridge0: port 2(bridge_slave_1) entered forwarding state
[  389.399512][T13609] trusted_key: syz.0.1991 sent an empty control message without MSG_MORE.
[  389.511589][T13537] Bluetooth: hci4: command tx timeout
[  389.762556][T13535] 8021q: adding VLAN 0 to HW filter on device batadv0
[  389.814573][T13535] veth0_vlan: entered promiscuous mode
[  389.821689][T13535] veth1_vlan: entered promiscuous mode
[  389.840219][T13535] veth0_macvtap: entered promiscuous mode
[  389.844033][T13535] veth1_macvtap: entered promiscuous mode
[  389.855840][T13535] batman_adv: batadv0: Interface activated: batadv_slave_0
[  389.862943][T13535] batman_adv: batadv0: Interface activated: batadv_slave_1
[  389.886787][ T8273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  389.892173][ T8273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  389.894879][ T8273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  389.903694][ T8273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  389.967045][ T8274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  389.969533][ T8274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  390.093900][ T8283] hsr_slave_0: left promiscuous mode
[  390.096468][ T8283] hsr_slave_1: left promiscuous mode
[  390.108583][ T8283] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  390.112407][ T8283] batman_adv: batadv0: Removing interface: batadv_slave_0
[  390.123213][ T8283] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  390.126287][ T8283] batman_adv: batadv0: Removing interface: batadv_slave_1
[  390.137134][ T8283] batman_adv: batadv0: Removing interface: team0
[  390.218735][ T8283] veth1_macvtap: left promiscuous mode
[  390.221481][ T8283] veth0_macvtap: left promiscuous mode
[  390.224452][ T8283] veth1_vlan: left promiscuous mode
[  390.228082][ T8283] veth0_vlan: left promiscuous mode
[  391.403074][T13646] __nla_validate_parse: 4 callbacks suppressed
[  391.403097][T13646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1999'.
[  391.590013][T13537] Bluetooth: hci4: command tx timeout
[  391.880832][ T8283] team0 (unregistering): Port device team_slave_1 removed
[  391.950600][ T8283] team0 (unregistering): Port device team_slave_0 removed
[  392.278067][T13652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2000'.
[  392.282208][T13652] netlink: 'syz.1.2000': attribute type 5 has an invalid length.
[  392.285582][T13652] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2000'.
[  392.578414][ T8270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  392.582302][ T8270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  392.689843][T13661] rdma_rxe: rxe_newlink: failed to add syz_tun
[  392.850792][T13663] could not allocate digest TFM handle blake2s-128-generic
[  392.992796][ T8283] IPVS: stop unused estimator thread 0...
[  393.005602][T13691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2007'.
[  393.058058][T13693] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2009'.
[  393.230295][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2010'.
[  393.233338][T13699] netlink: 'syz.3.2010': attribute type 5 has an invalid length.
[  393.236051][T13699] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2010'.
[  393.243161][T13699] geneve2: entered promiscuous mode
[  393.244993][T13699] geneve2: entered allmulticast mode
[  393.247702][ T8273] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  393.255069][ T8283] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  393.258479][ T8283] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  393.268219][ T8283] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  393.474696][T13729] pim6reg: entered allmulticast mode
[  393.498978][T13730] pim6reg: left allmulticast mode
[  393.659835][T13537] Bluetooth: hci4: command tx timeout
[  394.054256][T13763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2026'.
[  394.334780][T13772] FAULT_INJECTION: forcing a failure.
[  394.334780][T13772] name failslab, interval 1, probability 0, space 0, times 0
[  394.338712][T13772] CPU: 2 UID: 0 PID: 13772 Comm: syz.1.2028 Not tainted syzkaller #0 PREEMPT(full) 
[  394.338728][T13772] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  394.338735][T13772] Call Trace:
[  394.338740][T13772]  <TASK>
[  394.338744][T13772]  dump_stack_lvl+0x16c/0x1f0
[  394.338766][T13772]  should_fail_ex+0x512/0x640
[  394.338777][T13772]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  394.338796][T13772]  should_failslab+0xc2/0x120
[  394.338809][T13772]  __kmalloc_cache_noprof+0x6a/0x3e0
[  394.338826][T13772]  ? do_signalfd4+0x169/0x430
[  394.338841][T13772]  do_signalfd4+0x169/0x430
[  394.338854][T13772]  __ia32_compat_sys_signalfd4+0x143/0x1e0
[  394.338868][T13772]  ? __pfx___ia32_compat_sys_signalfd4+0x10/0x10
[  394.338881][T13772]  ? syscall_trace_enter+0x1cb/0x240
[  394.338894][T13772]  ? rcu_is_watching+0x12/0xc0
[  394.338910][T13772]  __do_fast_syscall_32+0x7c/0x300
[  394.338928][T13772]  do_fast_syscall_32+0x32/0x80
[  394.338944][T13772]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  394.338958][T13772] RIP: 0023:0xf7f06579
[  394.338967][T13772] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  394.338978][T13772] RSP: 002b:00000000f53f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000147
[  394.338988][T13772] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 0000000080000140
[  394.338995][T13772] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000
[  394.339001][T13772] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  394.339007][T13772] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  394.339013][T13772] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  394.339027][T13772]  </TASK>
[  394.453979][T13778] mkiss: ax0: crc mode is auto.
[  394.467130][T13778] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  395.242186][T13790] ceph: No mds server is up or the cluster is laggy
[  395.244616][ T5957] libceph: connect (1)[c::]:6789 error -101
[  395.246665][ T5957] libceph: mon0 (1)[c::]:6789 connect error
[  395.584070][T13797] : Can't lookup blockdev
[  395.622637][T13807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2036'.
[  395.622975][T13808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2035'.
[  395.740520][T13537] Bluetooth: hci4: command tx timeout
[  396.222765][T13830] netlink: 'syz.4.2044': attribute type 5 has an invalid length.
[  396.384067][T13842] netlink: 'syz.0.2048': attribute type 2 has an invalid length.
[  396.389571][T13842] netlink: 'syz.0.2048': attribute type 1 has an invalid length.
[  396.716141][T13856] __nla_validate_parse: 2 callbacks suppressed
[  396.716155][T13856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2053'.
[  396.721455][T13856] netlink: 'syz.0.2053': attribute type 5 has an invalid length.
[  396.723922][T13856] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2053'.
[  396.743627][T13848] could not allocate digest TFM handle blake2s-128-generic
[  396.822183][T13861] 9pnet_fd: Insufficient options for proto=fd
[  397.099475][ T6044] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  397.157748][ T6021] IPVS: starting estimator thread 0...
[  397.201726][T13883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2061'.
[  397.268375][T13885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2062'.
[  397.272654][T13881] IPVS: using max 29 ests per chain, 69600 per kthread
[  397.276039][T13885] netlink: 'syz.4.2062': attribute type 5 has an invalid length.
[  397.280583][T13885] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2062'.
[  397.281103][ T6044] usb 6-1: Using ep0 maxpacket: 16
[  397.298437][ T6044] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  397.302021][ T6044] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  397.305855][ T6044] usb 6-1: Product: syz
[  397.307751][ T6044] usb 6-1: Manufacturer: syz
[  397.310071][ T6044] usb 6-1: SerialNumber: syz
[  397.314305][ T6044] usb 6-1: config 0 descriptor??
[  397.613316][T13898] rdma_rxe: rxe_newlink: failed to add syz_tun
[  398.202673][T13914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2071'.
[  398.206413][T13914] netlink: 'syz.4.2071': attribute type 5 has an invalid length.
[  398.210454][T13914] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2071'.
[  398.253695][T13916] syz_tun: entered promiscuous mode
[  399.209538][T13946] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  399.225237][T13946] Invalid ELF header magic: != ELF
[  399.925865][ T1333] usb 6-1: USB disconnect, device number 26
[  400.034512][T13971] fuse: Bad value for 'fd'
[  400.094137][T13975] random: crng reseeded on system resumption
[  401.313114][T14037] tipc: Started in network mode
[  401.315234][T14037] tipc: Node identity 428ad77cd179, cluster identity 4711
[  401.318500][T14037] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  401.322550][T14037] syzkaller0: entered promiscuous mode
[  401.324741][T14037] syzkaller0: entered allmulticast mode
[  401.339744][T14037] tipc: Resetting bearer <eth:syzkaller0>
[  401.344267][T14036] tipc: Resetting bearer <eth:syzkaller0>
[  401.355457][T14036] tipc: Disabling bearer <eth:syzkaller0>
[  401.378517][T14041] fuse: Bad value for 'rootmode'
[  401.394992][T14041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2113'.
[  401.524184][T14051] syz1: rxe_newlink: already configured on syz_tun
[  401.885045][T14061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2119'.
[  401.891969][T14061] netlink: 'syz.0.2119': attribute type 5 has an invalid length.
[  401.896576][T14061] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2119'.
[  402.769282][   T10] usb 6-1: new full-speed USB device number 27 using dummy_hcd
[  402.801177][T14089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2130'.
[  402.803983][T14089] netlink: 'syz.3.2130': attribute type 5 has an invalid length.
[  402.806748][T14089] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2130'.
[  402.838565][T14094] overlay: Unknown parameter 'fowner<00000000000000000000'
[  402.902629][T14103] rdma_rxe: rxe_newlink: failed to add syz_tun
[  403.089721][T14110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2137'.
[  403.096913][   T10] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  403.100261][   T10] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10
[  403.103763][   T10] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 59074, setting to 64
[  403.111563][   T10] usb 6-1: config 0 interface 0 has no altsetting 0
[  403.116270][   T10] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  403.119389][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.121901][   T10] usb 6-1: Product: syz
[  403.123584][   T10] usb 6-1: Manufacturer: syz
[  403.125116][   T10] usb 6-1: SerialNumber: syz
[  403.136210][   T10] usb 6-1: config 0 descriptor??
[  403.142313][T14079] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  403.354164][T14079] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  403.359822][   T10] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input22
[  403.493360][T14119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2141'.
[  403.536044][T14124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2142'.
[  403.542362][T14124] netlink: 'syz.3.2142': attribute type 5 has an invalid length.
[  403.545020][T14124] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2142'.
[  403.555156][T14116] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  403.677563][ T6044] usb 6-1: USB disconnect, device number 27
[  403.748554][T14142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2148'.
[  403.812637][T14146] rdma_rxe: rxe_newlink: failed to add syz_tun
[  404.015562][T14151] veth1_to_bond: entered allmulticast mode
[  404.018137][T14151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2151'.
[  404.075995][T14151] bond0: (slave bond_slave_1): Releasing backup interface
[  404.126468][T14151] veth1_to_bond (unregistering): left allmulticast mode
[  404.265678][T14158] usb usb8: usbfs: process 14158 (syz.1.2152) did not claim interface 0 before use
[  404.377333][T14176] netlink: 'syz.1.2158': attribute type 13 has an invalid length.
[  404.406599][T14176] gretap0: refused to change device tx_queue_len
[  404.409931][T14176] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  405.187088][T14214] netlink: 'syz.4.2165': attribute type 5 has an invalid length.
[  405.481508][T14237] rdma_rxe: rxe_newlink: failed to add syz_tun
[  405.600361][T14249] netlink: 'syz.4.2175': attribute type 5 has an invalid length.
[  405.728882][T14255] netlink: 'syz.4.2177': attribute type 10 has an invalid length.
[  405.733200][T14255] team0: Port device netdevsim0 added
[  407.151504][T14296] __nla_validate_parse: 5 callbacks suppressed
[  407.151519][T14296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2186'.
[  407.156910][T14296] netlink: 'syz.0.2186': attribute type 5 has an invalid length.
[  407.160000][T14296] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2186'.
[  407.191052][T14302] netlink: 'syz.0.2189': attribute type 13 has an invalid length.
[  407.204931][T14302] gretap0: refused to change device tx_queue_len
[  407.207440][T14302] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  407.779778][T14319] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2192'.
[  407.842279][T14323] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2194'.
[  407.848502][T14323] input: syz1 as /devices/virtual/input/input23
[  408.081563][T14332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2197'.
[  408.084602][T14332] netlink: 'syz.4.2197': attribute type 5 has an invalid length.
[  408.087228][T14332] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2197'.
[  408.136531][T14338] rdma_rxe: rxe_newlink: failed to add syz_tun
[  408.439331][T14355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2202'.
[  408.480210][T14355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2202'.
[  408.554513][T14355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2202'.
[  408.910206][T14382] usb usb4: usbfs: process 14382 (syz.1.2211) did not claim interface 0 before use
[  409.259299][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  409.417884][T14391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2216'.
[  409.657004][T14407] rdma_rxe: rxe_newlink: failed to add syz_tun
[  410.329274][T14441] loop2: detected capacity change from 0 to 7
[  410.341481][T12761] Dev loop2: unable to read RDB block 7
[  410.343568][T12761]  loop2: AHDI p1 p2 p3
[  410.345020][T12761] loop2: partition table partially beyond EOD, truncated
[  410.350178][T12761] loop2: p1 start 1601398130 is beyond EOD, truncated
[  410.354150][T12761] loop2: p2 start 1702059890 is beyond EOD, truncated
[  410.361102][T14441] Dev loop2: unable to read RDB block 7
[  410.363375][T14441]  loop2: AHDI p1 p2 p3
[  410.364728][T14441] loop2: partition table partially beyond EOD, truncated
[  410.367266][T14441] loop2: p1 start 1601398130 is beyond EOD, truncated
[  410.370051][T14441] loop2: p2 start 1702059890 is beyond EOD, truncated
[  410.416174][T14443] openvswitch: netlink: Missing key (keys=40, expected=100)
[  410.491158][T14445] rdma_rxe: rxe_newlink: failed to add syz_tun
[  411.303872][T14474] netlink: 'syz.0.2244': attribute type 5 has an invalid length.
[  411.360606][T14476] rdma_rxe: rxe_newlink: failed to add syz_tun
[  411.978074][T14465] delete_channel: no stack
[  412.550929][T14511] __nla_validate_parse: 7 callbacks suppressed
[  412.550946][T14511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2253'.
[  412.557625][T14511] netlink: 'syz.1.2253': attribute type 5 has an invalid length.
[  412.561340][T14511] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2253'.
[  412.888748][ T6044] usb 6-1: new full-speed USB device number 28 using dummy_hcd
[  413.039796][ T6044] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  413.043088][ T6044] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10
[  413.046744][ T6044] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 59074, setting to 64
[  413.058686][ T6044] usb 6-1: config 0 interface 0 has no altsetting 0
[  413.064323][ T6044] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  413.067418][ T6044] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.074260][ T6044] usb 6-1: Product: syz
[  413.075552][ T6044] usb 6-1: Manufacturer: syz
[  413.077091][ T6044] usb 6-1: SerialNumber: syz
[  413.080605][ T6044] usb 6-1: config 0 descriptor??
[  413.085591][T14524] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  413.291879][T14524] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  413.298762][ T6044] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input24
[  413.566325][ T6001] usb 6-1: USB disconnect, device number 28
[  414.158689][T14576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2268'.
[  414.161626][T14576] netlink: 'syz.0.2268': attribute type 5 has an invalid length.
[  414.164506][T14576] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2268'.
[  414.258519][T14582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2270'.
[  415.404888][T14613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2279'.
[  415.408304][T14613] netlink: 'syz.1.2279': attribute type 5 has an invalid length.
[  415.410905][T14613] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2279'.
[  415.521342][T14618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2280'.
[  416.351142][T14667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2290'.
[  416.868508][ T6044] usb 6-1: new full-speed USB device number 29 using dummy_hcd
[  416.877696][T14648] fuse: Unknown parameter 'ÖæÉ-iµÃÞ‚7¾ ë}�2¾‘Œ½ypVhi[”¹¬\ÎB¯w§Ú&µ˜AûW¶×N‚”	[Ð-!N0’dpä«÷[ Iªß
[  416.877696][T14648] z¬´"15Ÿ}UôÒ^÷¥Í¼Yì¸'\Z Ÿ¬±�àáÀ?½š|6ÒA¢‡Zùõò“Lá*ºš›`'³ö_¦ÔꣳßóÝ›òH'
[  417.019689][ T6044] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  417.029123][ T6044] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10
[  417.032652][ T6044] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 59074, setting to 64
[  417.037795][ T6044] usb 6-1: config 0 interface 0 has no altsetting 0
[  417.051516][ T6044] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  417.055190][ T6044] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.068588][ T6044] usb 6-1: Product: syz
[  417.070233][ T6044] usb 6-1: Manufacturer: syz
[  417.071911][ T6044] usb 6-1: SerialNumber: syz
[  417.075044][ T6044] usb 6-1: config 0 descriptor??
[  417.079863][T14671] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  417.123935][T14684] rdma_rxe: rxe_newlink: failed to add syz_tun
[  417.288705][T14671] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  417.296431][ T6044] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input25
[  417.566398][ T6044] usb 6-1: USB disconnect, device number 29
[  417.679533][ T6043] libceph: connect (1)[c::]:6789 error -101
[  417.681632][ T6043] libceph: mon0 (1)[c::]:6789 connect error
[  417.940500][ T6044] libceph: connect (1)[c::]:6789 error -101
[  417.943054][ T6044] libceph: mon0 (1)[c::]:6789 connect error
[  418.177619][   T40] audit: type=1326 audit(2000000166.629:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14702 comm="syz.0.2299" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702e579 code=0x0
[  418.448529][ T6044] libceph: connect (1)[c::]:6789 error -101
[  418.453379][ T6044] libceph: mon0 (1)[c::]:6789 connect error
[  418.509954][T14694] ceph: No mds server is up or the cluster is laggy
[  418.878456][T14725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2303'.
[  419.253917][T14736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2307'.
[  419.257797][T14736] netlink: 'syz.1.2307': attribute type 5 has an invalid length.
[  419.261513][T14736] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2307'.
[  419.950540][T14769] overlayfs: failed to clone upperpath
[  420.130664][T14782] overlayfs: failed to clone lowerpath
[  420.318879][T14785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2316'.
[  420.563271][T14788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2317'.
[  420.566188][T14788] netlink: 'syz.1.2317': attribute type 5 has an invalid length.
[  420.569970][T14788] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2317'.
[  421.076456][T14822] batadv1: entered promiscuous mode
[  421.202088][T14832] IPVS: Unknown mcast interface: syzkaller0
[  422.111992][T14856] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2333'.
[  422.259946][T14869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2336'.
[  422.263887][T14869] netlink: 'syz.1.2336': attribute type 5 has an invalid length.
[  422.266861][T14869] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2336'.
[  422.319741][T14872] syz1: rxe_newlink: already configured on syz_tun
[  422.721235][T14890] rdma_rxe: rxe_newlink: failed to add syz_tun
[  422.729977][T14887] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2341'.
[  422.748931][T14887] libceph: resolve '0..' (ret=-3): failed
[  422.767020][T14896] netlink: 'syz.1.2345': attribute type 5 has an invalid length.
[  423.226804][ T8273] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  423.230681][ T8273] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  423.235083][ T8273] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  423.239908][ T8273] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  423.667938][T14919] rdma_rxe: rxe_newlink: failed to add syz_tun
[  424.009852][T14931] __nla_validate_parse: 5 callbacks suppressed
[  424.009866][T14931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2355'.
[  424.223223][T14950] overlayfs: failed to clone upperpath
[  425.068697][T14973] rdma_rxe: rxe_newlink: failed to add syz_tun
[  425.100630][T14977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2370'.
[  425.131255][T14984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2373'.
[  425.134240][T14984] netlink: 'syz.3.2373': attribute type 5 has an invalid length.
[  425.136863][T14984] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2373'.
[  425.621655][T15021] overlayfs: failed to clone upperpath
[  426.023744][T15037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2388'.
[  426.253877][T15040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2389'.
[  426.810808][T15058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2395'.
[  426.814507][T15058] netlink: 'syz.0.2395': attribute type 5 has an invalid length.
[  426.817901][T15058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2395'.
[  426.976244][T15064] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2397'.
[  428.021093][T15104] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2407'.
[  428.835359][T15123] netlink: 'syz.1.2410': attribute type 2 has an invalid length.
[  428.854600][T15123] : entered promiscuous mode
[  429.005633][T15132] netlink: 'syz.3.2414': attribute type 5 has an invalid length.
[  429.892500][T15168] __nla_validate_parse: 3 callbacks suppressed
[  429.892522][T15168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2427'.
[  429.917129][T15168] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  429.930489][T15168] macvtap1: entered promiscuous mode
[  429.946084][T15168] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  430.028719][T15179] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2430'.
[  430.217310][ T5954] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  430.226195][ T5954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  430.230733][ T5954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  430.235129][ T5954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  430.243960][ T5954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  430.545466][T15188] chnl_net:caif_netlink_parms(): no params data found
[  430.720516][T15188] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.723786][T15188] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.727149][T15188] bridge_slave_0: entered allmulticast mode
[  430.734854][T15188] bridge_slave_0: entered promiscuous mode
[  430.741279][T15188] bridge0: port 2(bridge_slave_1) entered blocking state
[  430.744792][T15188] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.750262][T15188] bridge_slave_1: entered allmulticast mode
[  430.755159][T15188] bridge_slave_1: entered promiscuous mode
[  430.861959][ T8283] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.865732][ T8283] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  430.913591][T15188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  430.930826][T15188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  430.970188][ T8283] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.974437][ T8283] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  431.119765][ T8283] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.126576][ T8283] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  431.140611][T15188] team0: Port device team_slave_0 added
[  431.146239][T15188] team0: Port device team_slave_1 added
[  431.257836][ T8283] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.262699][ T8283] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  431.280958][T15188] batman_adv: batadv0: Adding interface: batadv_slave_0
[  431.284788][T15188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  431.296203][T15188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  431.302492][T15188] batman_adv: batadv0: Adding interface: batadv_slave_1
[  431.306009][T15188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  431.325655][T15188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  431.428860][T15188] hsr_slave_0: entered promiscuous mode
[  431.431238][T15188] hsr_slave_1: entered promiscuous mode
[  431.433735][T15188] debugfs: 'hsr0' already exists in 'hsr'
[  431.435825][T15188] Cannot create hsr debugfs directory
[  432.289239][ T8283] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  432.298565][ T5954] Bluetooth: hci2: command tx timeout
[  432.298567][ T8283] bond0 (unregistering): Released all slaves
[  432.309045][ T8283] bond1 (unregistering): Released all slaves
[  432.320113][ T8283] bond2 (unregistering): Released all slaves
[  432.429048][ T8283] tipc: Left network mode
[  432.881725][   T40] audit: type=1804 audit(2000000181.340:657): pid=15255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2448" name="bus" dev="tmpfs" ino=2139 res=1 errno=0
[  433.295210][ T8283] hsr_slave_0: left promiscuous mode
[  433.300889][ T8283] hsr_slave_1: left promiscuous mode
[  433.380279][ T8283] veth1_macvtap: left promiscuous mode
[  433.388058][ T8283] veth0_macvtap: left promiscuous mode
[  433.393404][ T8283] veth1_vlan: left promiscuous mode
[  433.395675][ T8283] veth0_vlan: left promiscuous mode
[  434.377703][ T5954] Bluetooth: hci2: command tx timeout
[  434.628399][T15298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2459'.
[  434.632321][T15298] netlink: 'syz.3.2459': attribute type 5 has an invalid length.
[  434.635841][T15298] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2459'.
[  435.419531][T15188] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  435.456446][T15188] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  435.464547][T15188] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  435.473624][T15188] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  435.643452][T15188] 8021q: adding VLAN 0 to HW filter on device bond0
[  435.655909][T15188] 8021q: adding VLAN 0 to HW filter on device team0
[  435.671744][ T8285] bridge0: port 1(bridge_slave_0) entered blocking state
[  435.675412][ T8285] bridge0: port 1(bridge_slave_0) entered forwarding state
[  435.678805][T15340] overlayfs: failed to clone upperpath
[  435.692384][ T8274] bridge0: port 2(bridge_slave_1) entered blocking state
[  435.694690][ T8274] bridge0: port 2(bridge_slave_1) entered forwarding state
[  435.899559][T15188] 8021q: adding VLAN 0 to HW filter on device batadv0
[  435.923927][T15188] veth0_vlan: entered promiscuous mode
[  435.932134][T15188] veth1_vlan: entered promiscuous mode
[  435.960671][T15188] veth0_macvtap: entered promiscuous mode
[  435.968163][T15188] veth1_macvtap: entered promiscuous mode
[  435.980108][T15188] batman_adv: batadv0: Interface activated: batadv_slave_0
[  435.991241][T15188] batman_adv: batadv0: Interface activated: batadv_slave_1
[  436.001765][ T8283] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  436.004826][ T8283] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  436.008636][ T8271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  436.015353][ T8271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  436.061557][ T8274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  436.065132][ T8274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  436.085070][ T8269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  436.088090][ T8269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  436.313225][T15361] dvmrp1: entered allmulticast mode
[  436.359675][T15363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2471'.
[  436.363095][T15363] netlink: 'syz.3.2471': attribute type 5 has an invalid length.
[  436.366300][T15363] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2471'.
[  436.472015][ T5954] Bluetooth: hci2: command tx timeout
[  437.034829][ T8269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  437.037733][ T8269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  437.817193][ T6041] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  437.836095][ T8273] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  437.839895][ T8273] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  437.843297][ T8273] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  437.846886][ T8273] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  438.050560][ T6041] usb 5-1: config index 0 descriptor too short (expected 39, got 27)
[  438.053550][ T6041] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  438.056833][ T6041] usb 5-1: config 0 interface 0 has no altsetting 0
[  438.061962][ T6041] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  438.065419][ T6041] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  438.069324][ T6041] usb 5-1: Product: syz
[  438.071371][ T6041] usb 5-1: Manufacturer: syz
[  438.073453][ T6041] usb 5-1: SerialNumber: syz
[  438.079810][ T6041] usb 5-1: config 0 descriptor??
[  438.083604][ T6041] hub 5-1:0.0: bad descriptor, ignoring hub
[  438.086141][ T6041] hub 5-1:0.0: probe with driver hub failed with error -5
[  438.090782][ T6041] usb 5-1: selecting invalid altsetting 0
[  438.537240][ T5954] Bluetooth: hci2: command tx timeout
[  439.363569][T15466] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2502'.
[  439.381767][T15469] netlink: 'syz.3.2503': attribute type 9 has an invalid length.
[  439.385016][T15469] netlink: 'syz.3.2503': attribute type 7 has an invalid length.
[  439.388648][T15469] netlink: 'syz.3.2503': attribute type 8 has an invalid length.
[  439.435067][T15472] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2504'.
[  440.378945][T15489] 9pnet_fd: Insufficient options for proto=fd
[  440.716921][T15503] syz_tun: left promiscuous mode
[  440.726315][T15503] 8021q: adding VLAN 0 to HW filter on device bond0
[  440.730129][T15503] 8021q: adding VLAN 0 to HW filter on device team0
[  440.734514][T15503] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  441.077428][ T6041] usb 5-1: USB disconnect, device number 32
[  441.382130][T15518] 9pnet_fd: Insufficient options for proto=fd
[  441.512095][T15526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2522'.
[  442.086105][T15546] 9pnet_fd: Insufficient options for proto=fd
[  442.565702][T15564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2532'.
[  442.622799][T15571] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2532'.
[  442.747603][T15578] 9pnet_fd: Insufficient options for proto=fd
[  442.934802][T15596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2543'.
[  442.937943][T15596] netlink: 'syz.3.2543': attribute type 5 has an invalid length.
[  442.940386][T15596] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2543'.
[  443.032810][T15602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2540'.
[  443.037167][T15602] netlink: 111 bytes leftover after parsing attributes in process `syz.1.2540'.
[  443.114511][T15601] IPVS: Unknown mcast interface: pim6reg
[  443.179663][T15606] 9pnet_fd: Insufficient options for proto=fd
[  443.936861][T13537] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  443.944972][T13537] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  443.951171][T13537] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  443.958752][T13537] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  443.961984][T13537] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  444.013009][ T6042] syz1: Port: 1 Link DOWN
[  444.080946][ T8269] smc: removing ib device syz1
[  444.223221][T15625] chnl_net:caif_netlink_parms(): no params data found
[  444.483062][T15625] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.485862][T15625] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.488435][T15625] bridge_slave_0: entered allmulticast mode
[  444.492747][T15625] bridge_slave_0: entered promiscuous mode
[  444.495961][T15625] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.498695][T15625] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.501176][T15625] bridge_slave_1: entered allmulticast mode
[  444.507731][T15625] bridge_slave_1: entered promiscuous mode
[  444.578284][ T8269] ------------[ cut here ]------------
[  444.581292][ T8269] GID entry ref leak for dev syz1 index 2 ref=1
[  444.583553][ T8269] WARNING: CPU: 3 PID: 8269 at drivers/infiniband/core/cache.c:806 gid_table_release_one+0x387/0x4b0
[  444.587215][ T8269] Modules linked in:
[  444.588620][ T8269] CPU: 3 UID: 0 PID: 8269 Comm: kworker/u32:45 Not tainted syzkaller #0 PREEMPT(full) 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  444.593311][ T8269] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  444.597022][ T8269] Workqueue: ib-unreg-wq ib_unregister_work
[  444.598950][ T8269] RIP: 0010:gid_table_release_one+0x387/0x4b0
[  444.600892][ T8269] Code: 07 00 00 48 85 f6 74 2b 48 89 74 24 38 e8 71 08 68 f9 48 8b 74 24 38 44 89 f1 44 89 ea 48 c7 c7 c0 76 74 8c e8 3a e3 26 f9 90 <0f> 0b 90 90 e9 6e fe ff ff e8 4b 08 68 f9 48 8d bd 78 07 00 00 48
[  444.607430][ T8269] RSP: 0018:ffffc900030afb50 EFLAGS: 00010286
[  444.609924][ T8269] RAX: 0000000000000000 RBX: ffff88804a619a00 RCX: ffffffff81796528
[  444.612738][ T8269] RDX: ffff88804f4c4900 RSI: ffffffff81796535 RDI: 0000000000000001
[  444.615305][ T8269] RBP: ffff88802463c000 R08: 0000000000000001 R09: 0000000000000000
[  444.618359][ T8269] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed10094c335b
[  444.621435][ T8269] R13: 0000000000000002 R14: 0000000000000001 R15: dffffc0000000000
[  444.624277][ T8269] FS:  0000000000000000(0000) GS:ffff888097f5d000(0000) knlGS:0000000000000000
[  444.627888][ T8269] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  444.630040][ T8269] CR2: 00007f9019e44e9c CR3: 000000006344f000 CR4: 0000000000352ef0
[  444.633219][ T8269] Call Trace:
[  444.634612][ T8269]  <TASK>
[  444.635878][ T8269]  ib_device_release+0xef/0x1e0
[  444.639292][ T8269]  ? __pfx_ib_device_release+0x10/0x10
[  444.641824][ T8269]  device_release+0xa4/0x240
[  444.643764][ T8269]  kobject_put+0x1e7/0x5a0
[  444.646120][ T8269]  put_device+0x1f/0x30
[  444.648331][ T8269]  process_one_work+0x9cf/0x1b70
[  444.650431][ T8269]  ? __pfx_batadv_nc_worker+0x10/0x10
[  444.652700][ T8269]  ? __pfx_process_one_work+0x10/0x10
[  444.654949][ T8269]  ? assign_work+0x1a0/0x250
[  444.657380][ T8269]  worker_thread+0x6c8/0xf10
[  444.659345][ T8269]  ? __pfx_worker_thread+0x10/0x10
[  444.662601][ T8269]  kthread+0x3c2/0x780
[  444.664432][ T8269]  ? __pfx_kthread+0x10/0x10
[  444.666577][ T8269]  ? rcu_is_watching+0x12/0xc0
[  444.669026][ T8269]  ? __pfx_kthread+0x10/0x10
[  444.671015][ T8269]  ret_from_fork+0x56d/0x730
[  444.673025][ T8269]  ? __pfx_kthread+0x10/0x10
[  444.675262][ T8269]  ret_from_fork_asm+0x1a/0x30
[  444.678119][ T8269]  </TASK>
[  444.679565][ T8269] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  444.682384][ T8269] CPU: 3 UID: 0 PID: 8269 Comm: kworker/u32:45 Not tainted syzkaller #0 PREEMPT(full) 
[  444.685966][ T8269] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  444.689603][ T8269] Workqueue: ib-unreg-wq ib_unregister_work
[  444.691564][ T8269] Call Trace:
[  444.692797][ T8269]  <TASK>
[  444.694150][ T8269]  dump_stack_lvl+0x3d/0x1f0
[  444.696063][ T8269]  vpanic+0x6e8/0x7a0
[  444.697558][ T8269]  ? __pfx_vpanic+0x10/0x10
[  444.699370][ T8269]  ? gid_table_release_one+0x387/0x4b0
[  444.701424][ T8269]  panic+0xca/0xd0
[  444.702618][ T8269]  ? __pfx_panic+0x10/0x10
[  444.704031][ T8269]  ? check_panic_on_warn+0x1f/0xb0
[  444.705682][ T8269]  check_panic_on_warn+0xab/0xb0
[  444.707254][ T8269]  __warn+0xf6/0x3c0
[  444.708511][ T8269]  ? preempt_schedule_notrace+0x62/0xe0
[  444.710283][ T8269]  ? gid_table_release_one+0x387/0x4b0
[  444.711997][ T8269]  report_bug+0x3c3/0x580
[  444.713405][ T8269]  ? gid_table_release_one+0x387/0x4b0
[  444.715188][ T8269]  handle_bug+0x184/0x210
[  444.716738][ T8269]  exc_invalid_op+0x17/0x50
[  444.718441][ T8269]  asm_exc_invalid_op+0x1a/0x20
[  444.720276][ T8269] RIP: 0010:gid_table_release_one+0x387/0x4b0
[  444.722505][ T8269] Code: 07 00 00 48 85 f6 74 2b 48 89 74 24 38 e8 71 08 68 f9 48 8b 74 24 38 44 89 f1 44 89 ea 48 c7 c7 c0 76 74 8c e8 3a e3 26 f9 90 <0f> 0b 90 90 e9 6e fe ff ff e8 4b 08 68 f9 48 8d bd 78 07 00 00 48
[  444.728554][ T8269] RSP: 0018:ffffc900030afb50 EFLAGS: 00010286
[  444.730473][ T8269] RAX: 0000000000000000 RBX: ffff88804a619a00 RCX: ffffffff81796528
[  444.732962][ T8269] RDX: ffff88804f4c4900 RSI: ffffffff81796535 RDI: 0000000000000001
[  444.735431][ T8269] RBP: ffff88802463c000 R08: 0000000000000001 R09: 0000000000000000
[  444.737964][ T8269] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed10094c335b
[  444.740435][ T8269] R13: 0000000000000002 R14: 0000000000000001 R15: dffffc0000000000
[  444.743274][ T8269]  ? __warn_printk+0x198/0x350
[  444.745806][ T8269]  ? __warn_printk+0x1a5/0x350
[  444.748096][ T8269]  ib_device_release+0xef/0x1e0
[  444.749719][ T8269]  ? __pfx_ib_device_release+0x10/0x10
[  444.751431][ T8269]  device_release+0xa4/0x240
[  444.752928][ T8269]  kobject_put+0x1e7/0x5a0
[  444.754359][ T8269]  put_device+0x1f/0x30
[  444.755742][ T8269]  process_one_work+0x9cf/0x1b70
[  444.757219][ T8269]  ? __pfx_batadv_nc_worker+0x10/0x10
[  444.758931][ T8269]  ? __pfx_process_one_work+0x10/0x10
[  444.760656][ T8269]  ? assign_work+0x1a0/0x250
[  444.762141][ T8269]  worker_thread+0x6c8/0xf10
[  444.763628][ T8269]  ? __pfx_worker_thread+0x10/0x10
[  444.765340][ T8269]  kthread+0x3c2/0x780
[  444.766766][ T8269]  ? __pfx_kthread+0x10/0x10
[  444.768534][ T8269]  ? rcu_is_watching+0x12/0xc0
[  444.770253][ T8269]  ? __pfx_kthread+0x10/0x10
[  444.772055][ T8269]  ret_from_fork+0x56d/0x730
[  444.773574][ T8269]  ? __pfx_kthread+0x10/0x10
[  444.775055][ T8269]  ret_from_fork_asm+0x1a/0x30
[  444.776791][ T8269]  </TASK>
[  444.778542][ T8269] Kernel Offset: disabled
[  444.779988][ T8269] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:01:57  Registers:
info registers vcpu 0

CPU#0
RAX=00000000000001cf RBX=ffff8880273e2fb0 RCX=0000000000010000 RDX=00000000000001cf
RSI=0000000000000000 RDI=ffff8880273e2fb0 RBP=0000000000000000 RSP=ffffc90002e8f8d0
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001
R12=ffff8880273e2fb0 R13=ffff8880273e2480 R14=0000000000000000 R15=ffff8880511601e0
RIP=ffffffff81965ca3 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888097c5d000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007faa34cfaeb8 CR3=0000000077a83000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 00000000000000e8
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000b68 000000000002c498
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000400140 RBX=7fffffffffffffff RCX=0000000000000000 RDX=0000000000000000
RSI=fffff5200063beb8 RDI=0000000000000001 RBP=1ffff9200063bedc RSP=ffffc900031df6e0
R8 =0000000000000000 R9 =fffffbfff20c1c92 R10=ffffffff9060e497 R11=0000000000000000
R12=ffffc900031df700 R13=dffffc0000000000 R14=7fffffffffffffff R15=ffff88804e958f30
RIP=ffffffff8b5127f7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888097d5d000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000032c04ffc CR3=0000000077a83000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=00000000000001cf RBX=ffff888025d18b30 RCX=000000007957ad1b RDX=0000000000000000
RSI=ffff888025d18b58 RDI=ffff888025d18b30 RBP=0000000000000000 RSP=ffffc90002dcf108
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=ffff888025d18b58 R13=ffff888025d18000 R14=0000000000000001 R15=0000000000000001
RIP=ffffffff81965ca3 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007faa34c4ec80 ffffffff 00c00000
GS =0000 ffff888097e5d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007faa34e22a90 CR3=000000004a9a3000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faa34d277b0 00007faa34fb95f0
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faa34d277b0
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f4342494c470033 2e325f4342494c47
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005f625f6570
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 696e695f79666974 6f6e616600636f6c
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000006d8
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000450
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faa34fb9b20 00007faa34fba050
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=000000000000006d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff851d7fe5 RDI=ffffffff9ab5b140 RBP=ffffffff9ab5b100 RSP=ffffc900030af4c0
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000
R12=0000000000000000 R13=000000000000006d R14=ffffffff9ab5b100 R15=ffffffff851d7f80
RIP=ffffffff851d800f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888097f5d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f9019e44e9c CR3=000000006344f000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000