last executing test programs:

8m28.513338333s ago: executing program 0 (id=1149):
r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000440)={0x80, "99b0f587ab891d4092ef24dcb9337f0a67af99fccd6a9e5ade883d0c3391775d4ad24cb974ebd6ea244be4ecfe61be00d3224e60057300adc5d2566a6c892345"})
r1 = syz_open_dev$audion(&(0x7f0000000100), 0x4, 0x0)
pipe(&(0x7f0000000140))
r2 = fspick(r1, &(0x7f0000000180)='./file0\x00', 0x0)
fsmount(r2, 0x0, 0x84)
mkdirat(0xffffffffffffff9c, 0x0, 0x80)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg1\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c00000008000400", @ANYRES32=r5], 0x24}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c000c"], 0x24}}, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

8m28.303183889s ago: executing program 0 (id=1150):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x104, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff97, 0x0, 0x0, 0x0, 0x0, 0xca, 0x8, 0x52, 0x0}}, 0x10)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r1, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x400000008000000, 0x0, 0x9, 0x5, 0x1000000000000, 0x0, 0x0, 0xfffffffe, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r1, &(0x7f0000000c00)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
ioctl$FIBMAP(r3, 0x401070ca, &(0x7f0000000040)=0x3)
syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x15)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040889}, 0x40)
r5 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8)
close(0x3)
epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000140), 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',^fdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00'])
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'macvlan1\x00', <r8=>0x0})
setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4)
sendto$packet(r7, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9", 0xe, 0x0, &(0x7f0000000540)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14)

8m27.432768394s ago: executing program 0 (id=1154):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0)

8m27.432211746s ago: executing program 0 (id=1155):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x8)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
statfs(&(0x7f0000000200)='.\x00', &(0x7f0000000300)=""/142)
fcntl$dupfd(r1, 0x406, 0xffffffffffffffff)
openat$sysctl(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r3, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10040881)
read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0)

8m26.494710198s ago: executing program 0 (id=1158):
socket$inet6_mptcp(0xa, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x10, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x8, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x38)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macsec0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000004b40)=@newlink={0x44, 0x10, 0x503, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x440, 0x80}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x400000000000000}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x24, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x8, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x1a, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c57, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x9, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x400, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x93, 0x6, 0x6, 0x0, 0x81, 0x6, 0xffff8001, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0x388000, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2b, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xfff, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xfe, 0x0, 0xa, 0x5, 0x1000005, 0x6, 0xf, 0xd86, 0x2, 0x4, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x200004, 0x9, 0x3, 0x3, 0x3, 0x4, 0x3, 0x5, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x8, 0x8, 0x86, 0x3, 0x3038, 0xff, 0xb, 0x2, 0x2, 0x2, 0x7, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0x47dc, 0x5, 0x7, 0x2000003, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x3, 0x5, 0x1b, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x0, 0x80000000], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x400002, 0x57, 0x4, 0x3, 0x3, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x699c, 0x14c, 0x60a7, 0x6, 0x10000016, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x3, 0x100, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0x40b1e, 0xd7, 0x200, 0xffff3441, 0x4]}, 0x45c)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket(0x10, 0x3, 0x0)
rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYBLOB="df255504000000d9321b21ee48a91c000000020303000000000000000008000100010000000000000000"], 0x1c}}, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
syz_pidfd_open(0x0, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000b00)=0x6)
io_setup(0x7, &(0x7f0000000280)=<r8=>0x0)
io_submit(r8, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}])
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000140000f80f2800010001000000"], 0x1c}}, 0x0)

8m25.713677968s ago: executing program 0 (id=1161):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = getpgrp(0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xf, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
landlock_create_ruleset(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r3=>0x0})
bind$can_raw(r0, &(0x7f0000000000)={0x1d, r3}, 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
bind$can_raw(r0, &(0x7f0000000080), 0x10)
timer_create(0x1, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
socket$kcm(0x21, 0x2, 0x2)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)

8m24.925028611s ago: executing program 32 (id=1161):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = getpgrp(0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xf, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
landlock_create_ruleset(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r3=>0x0})
bind$can_raw(r0, &(0x7f0000000000)={0x1d, r3}, 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
bind$can_raw(r0, &(0x7f0000000080), 0x10)
timer_create(0x1, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
socket$kcm(0x21, 0x2, 0x2)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)

1m3.39068023s ago: executing program 2 (id=3350):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0xc01, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x8050)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000140)=0x1e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f00000031c0)=ANY=[@ANYBLOB="58000000020601040000e0000000000005000003140007800500140080ff00000800084000000018050001000700000005000400040000000900020073797a300000000005000500020000000c000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40)
r6 = socket$inet6(0xa, 0x80002, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x2000, &(0x7f0000001ac0)={&(0x7f0000000000)={0x20, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c0d9}, 0x20000000)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x3, 0x300)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0)
preadv(r8, &(0x7f0000000440)=[{&(0x7f0000000180)=""/82, 0x52}], 0x1, 0xd651, 0x72b)
write$cgroup_netprio_ifpriomap(r8, &(0x7f0000000000)={'nicvf0', 0x32, 0x30}, 0x9)
unshare(0x28040600)

1m2.335215423s ago: executing program 2 (id=3358):
syz_open_dev$evdev(0x0, 0x0, 0x2002)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000603e6b6c1e1c0800000000000000adb7fa8f2656b4bb6a1db89fbfeeda000000b7080000edffffff7b8af8ff00000200bfa200000000000007020000f8ffffffb70300a67df7aea9c1573b"], &(0x7f0000000380)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
sync_file_range(r2, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a)
eventfd(0x80200003)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x8001, 0x0)
syz_io_uring_setup(0x286, &(0x7f0000000440)={0x0, 0xfad9, 0x200, 0x0, 0x0, 0x0, r3}, &(0x7f0000000340), &(0x7f00000001c0))
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="380000001214010027bd7000fde3df250800010002000000080015000000000008004f000000000008004b00130000000800030001000008"], 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810)

1m2.303492632s ago: executing program 2 (id=3359):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0xf000})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x64, &(0x7f00000005c0)=""/100}]})
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000580)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0, 0x0, <r5=>0x0, <r6=>0x0}, 0xfffffe14)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r5, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
prctl$PR_SCHED_CORE(0x3e, 0x0, r6, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000006340)="7c7a6a069306f2c5ddf91f36944f207a1bd11284b4445fa3507bbc5def2e6fec4bb7c6001eafe381e277221f30085acd5d0c251f7c60c23874c04db6aa516f773dd2e57e746d1a085193c8b7664fceb1fe764d87f4395c66e5d4eee443a555692ebe80f3a11b8be74963f1a18c1d0cd71dec65e609e065e14615d2e8b283e55b4aa8b485f81ce52443d61fac9f08cf34f2997c05a63f98f988cfcea9a5650b37dff5817e5033b3912c226bd9bf68b528dec710584242fbdcf7dd0d55e394d3742039e6960bb589fb9ba18ac8e9e82cdbd08e9b584d0a8224cae3e9dd91e25699549007dc0d99165a73cda1c99fc48f6bfdb900c60e4481222505c58cc1108fbaf317d361d1f2d78f6db6e14b283ca9f1927f4f8a0f6f52818be03c7b257aec57f06a0a4279131a2bb0a13b23ab188ea50a686abb2f7e4d0f7a166f358e4cb886b7fbdf51cd9a153410dcc4cc5db7e8e94cc9ba2371a328480ad20f51d7fa012f367a0a8f9c882c47b5f714f0e1b35f72b2261989513c1428d648aa8ab8c12c87dfea38d5be0d49097fce804c9cd2ac8f61b68579853129351e3bcdbdae3371d2b12a150d94b3097161c226c50a1d2c1f8b4c10a986e21dbbb854ad1d26d0ce5d950835d14664ee8f58c537f5256b761b4707fe8d46cc1658798d285310a1cff127b1280cab3f1f633569391d5a7cc08aa1d108b93c38df397d90bbb81753930934df7dcaf8f960dff660fe239aa15cf48872668cacf4d664dc0809fe9d780ab202c3a968abb56655267c907eb3343809b2407105a5c14d53a3b17a9a1552314d27e13daf48a2bb7b2c9fc15aba9ae1d6325c11fbe8432c067efa72878ca56c6463b6cf4d29646905422908a4a1f7741d0049febed4fc2b7cc27154031e50a0ab297826383935bef6a0f968db92128e8a940509b5368146bdcacc852b9d0b4ae9624635f9e69f3a7bc8e6f3340c7de46f49feb20a46f11aef464fa6696a60865bdd0c40b1c411c9661fa9f6393a33a7eb4afaef3eb1ab4634a42baeea780ac6c0c4fc8cf7a92cf0592f993ac85bdfd6c18ba4b7cf4c4438a8330413de8365b4a080234f59edefca0c5ce9697b20cc7b71d04438c00cf3d557bd03b5e1b86e167d2d6e09714135ef720667d0f2e7ca54da419d1bf6722eda31381059216009cd8c99ba1d7f9ebc1bc021457a195fa5be2f0727a84cf4cac5e080f22c836a4955d5ed06bee2eec0d39abc5f459ac43596fee3b341dfbd7ce6f4e57ea42e1e8d4f65880b8b77d2ee27dc1efe95ff1bacf5aa14933456b68645380d0f2ef6284b9946857456d64f4cb656998e99e3e286f596b31c69a69d0ee8444ed838ca2f0ead1be9538e4e927239d0e65a3f871dcad33881f69592eed93a9fafc934aefa67bb87d582d0ae4cfbb5c50325774bbc259a277749751228d3610f95fd56e9fbccb288eca1b14c8255b6996a59c91efbb08440ed91cdd53b0aab82600906904cee2a117a06157e24fa822e1cf4f9db4c2e8a5e842cfc503e578e69002fbae194b6bc7c8b69aac7359292109b712eb49d21946f5ea2745ab77ef59950dcfd926df2aef20e85f2a14554aabb417f15c725c73edd4853926ad6c525afa2c65de213cee799c18d1ced9424d10d7076fc5862579702a5f91031381f41cb8d9899ab514cfa1c8c51437df9710271d8cf69e8900921cba296703f1a7b5234500c1625884fea594d836a930b06142a6e577cd9c2a32cae65e712624abeeffc423a5d5ed7bd75fcb1a82ecec8acd0da9918a5c7c189f14f8cdf37062f93b87f9188501556060ffc6eac435cb1624f2af688316366e03cfb869eacf83d9d45fce910c3347f810b614c2e4291e70471ca2b574241c3f3d9740c6a45c7296a2f275acbde72e513ef4e5a1123a57c2eb1bd023af716c16a7747204338f60b6e3ac514af50b21952c21592aefb6149828a5183ba581d5ee8647f374645ff941bab67bef760ce353b456c4b51c5d3a0c5372b1773b944ad67a92937dd838e1b6f550a1dca975d6230e430bcc278afed54e0621008b2f850107b0244359e3747be5282630452d432e5df0fd160795effed150f9396a7da5a1e4dce0c8f62280ff2fbfaa813859a671208b4b9f05fe450729b0efad83a790acd688a90e5fee5550de4ddeac70ecd125ad076c4e2b68652e6ea520e2b6b339b4b9dc219d853e06b9aa79d022e53607213fc254e15ec3e6b776d2b562997e0fe52b98c58e1c0316b22a4219460053da87e7baff7dc1892c2de2f324dd1169b977f3a6698d0234c78de3e46ba5824f3e373f264e8d28fbb4cc108a41fdecd4b629d92b0a65f84366bf504eb5a894ba40c89f9df854dc469fa174ac85cb8d2adfdc099ca9848a1032b2e2f375bd1544dfb69e33492e1a4b921ad7ff17c4c7e357ff69f42d2301c302ee2ed313f0e9a20ebfe028a8737d6e38bf179940179cb779b70c2276264cb4f23249db7d5f179baa842b70f5b287cf74ce1ff6b70a56be8f2fe15aeadca229804923d28a793838bc605eaf5dcd362f757577ebdac54b09fd73326720d3522d002a41a3b5f2450f48286a5ea45836b5ee77fc415f47e0716049ec2610d607737fd5a73b066b4876f9d744f6b3486b088dd3bfc3d393a27c6c799ce078e2ee348257b5ec1ba9de76da2a67ca912dc2dd5afc70834ceecbb8bd41f6e790294cacd5891bef1b4e2124dcd6dffdedee8f16b3bddc030429dcb0f98e6fe0649cb14eed3293fa4933b2ab8c0ec0ff4dbbced1e32dceb317252e715b872b00478cbd7b0275b7394a0ccfe9887410b32f1ce9266b3b83470ec982cf908507d3ad0cc366bff3759388b624701b3e0dc0e7928386b155b50b42a8e352622516beeeddfb79866a2eb1d360802cd19d62fd171267a0fece5f54e315a8cd49c41072f2a7a0baab5aadae2c1ff28e285b642f8d3869321bd18b4aed107feaa12d055b179a8ab7b50e2796d287a196e280d527b526c45c8aa98696d88a02d923d06fedf51336c0695c218e70448073921971093ea44b5352e10ce6cec26d082b93f69958165bd986f56650a62224c2d9fd044bd8fefd33544c6bd141b4cc211a087fa57c09e195c8edffe559048db738d1395f5e2625dd7cd035b8c76aad6c238fb52a7c5ff0965fc7122a5899746ca88abd699d6078623722fff92726e18613519f2b1927504fd5cb7a38ffa373c3883022f0387953530834affb5f05e0f44c24caa75561b2b63994493ab857fdc30900586fed09298d846e5936869b43d81c4b91902028e57a8f2da16355ccb7a77d29ecc8e66015e979b2f3edc5b8d77c45348dea55c9ed6b7465acf899f4bc1a7edcae0b0daf69ff85c504eea1294620b6d3dbb004575044a5ae7c110010c2cf39827fbdab3b42ac35d147fc53bb5e7de6c47091dc80c14b8da494b2e913d1a52085e29af19edc4a417346c5a896a3851cb6132511e0627d190b77623c8a3bb6085eff22ede7127f7988a1d388fb70ea20d5c1b2424c5aa83532bc5162a5d177968b4a46583f2d4b92d04a5f19145221aeaf724d92ea1d4dfb53021b47585bbe5ce35f8d09a83e13fdb1de8e52dc646d41e810879ce9c830959c3ee93f11a16d030d141863244395e3f847505fe6d9594a34009fec9a743c033b9793335684cc5c3d0eb0ad094f40a60264b02cd88c583c850d99c5b9c6c5dcef467ca3ea38f2aa42f5657cd940aeb12960efa18d571e4f958b9cd90918e069a486d84f214617ce29c0f2c26bf84f12f5036f26a8de0c8359f572654bf5ee06d38f741c464976d95ae3fdda45c2ed2d08ef71d3590e82d235e0fa357c568158791a195d4a2d9615e1edc85be64cfd169f925ffc4f636f86783cf43624a77bdb9b172228097f02f391df00668dafbd9932298b23cfadfd1b8d14a25cb408a440f930f0813de73c1eb2eb4b3c802d718a672453d0038965c6dc98db96fb4e06f1fda72782d0839d4e8b477ebdb2c73510db44f643ec7dc4fcb837806853caa35cf622aff9d44381d3f7adae00650cbb6f0334ceca14ec982dfb5817d7fd49251c203b6463a09c14885f754603291ccf0a7ceaa57284ee751774fa5ad72f9f7a32fa542947af40601e98057895f2869d4ec2db0d73930962535fc9e12ba7e6777cb458592bee505b367012ebd27b256fa0fac1452cf3b28eab573549b7c7a13752ca0189768f738d5f8030fe999f7bdc466d67bb32937ae469f1a1e21fac2ae2ab92a0a260bf0e9ce20625e82f88d0ed4d13876aed768765d77433bb9137d92d622df502aef574de82fe28063128fe5a1787ced99734c2f3f221e80d3baefd367d01d950ee1bc981b4b5ff86b2a96ab78fa3c1201303cab473103d89bb185afc77dd2cb7ac1564045036fe9fcf85af5d73a7553bc45bf5e221564540982db2f81e612e7c1715d3498b8d7851c0160146d6eaae9e30c81dedfca8e7122fcb69b26b396629b723f1e1822b8d5d8f2ac583728a5ab40010f88aa42f37f2031a3e99d8d6661e63f86f65af521066ea6af89c89e1748521b8368cd03409e895a941025ee777653f55e66cd1a0cca21308666260c3b9a306ddadb322eb1d09f7b27fd570cd35b6ec88bb391e3ae4745e17fb4dd7aef1d75b4ebb91e6e7789b241566d7c0cc97a3a126ed50b0cb621e015414f62641afd85bad78470463f86d8287aa56d331911c23c4cae8e5dfea33f3789c03d61f51c590417b5ff9f1aa35ab6a15364296c5f9399216ce565210a4075ac5e43e916850774a127f9174d95b43d839e056b4a7d679bb8804951ca171c0b59f4d6f32c4fe8f908b9a1614591f5d1e1cf3348e02317ec4655c693417a4c4e7007a8db02faa1634f8eea9c9bbe5b149ce2279953a54884392dc7251dd38670fd59d9d1da5203340909d50f779e864339014bcb545d825cdcccedc558a1d01a2784b8f499ce9fa2ddb0dd1dc0b93d1b282a96cb4ecf152474dbc4b2853b30c8e5fcea85bdab949f5eb1e98d81c102c349f680230082db5aba9e20209c35b16598507d28211b49763b598a7e60519d5b28b67c027cb2657cf2ac7c7455291fcfe63f0b43afcd3afaea934da97c209d02e5b47a686c1c284aeee5d662fd9d9be7c576259d9f1a36fc0f7fe329a1da1dbe078381233940745fc28a56db98b1a8442325168158e3f0b3cbf8a368d19dd20cdfc1c4f3893a30a49223050159b0bb8b7c59ca705ae25453988d87ca6cdd2bd2fe37847ba67cbcf7a494925a8598b7b50a741c9ced10ea08e35c422b79265561a07f40ebb89bc46069a1c1ad95949fe757a76ff6b5386a043abc967c367a9d86b54d374e573540dfc1f6d396f398abe9735f523b778fd124ac1e1eb832a66dd4b1838a50e6a4eb1b95b8a60a94f067b24d1194976c539d5ec287a261bf25904575be3ff49e7411a8dc09739649828124c14fc2b89dad1f3f5725db2e45f5a447cd3e4bdf9e1e95c5ad7c76fcf0c1021cb6c32e6985e1d113030d534eecb0dff2554183ee18da2da5d21a8b994a81f05e0e6ae89b20bffb4be333d1956270da23e9905830921b1f3d615a56a20b11d45ccd1d22b910e33f475a92c31fa5b4675ddee18336d0ee7b75c07df2a9d4ad53d83142219a00aef15e1e9dace0f039d63a530fdf671a54aba3882dad0d439632af5576726c3aa095cc1a0a03063e8a6581b78bef501acc24b05a0150d8f683c90e8e5e283a49f898906dab926e544ead48cb9bf9a6e1bf140b5273443b8cb8166b2d8a5464a3e9d9f4246ac81ea91b33a0b399dde9f5efaf792bb04cfa028f40b7c92db2d9c33e16ef58b9263350879ea94e581a1187b2d1931b1cd7606a76bd8943b7c3098a33bdf476960af7bdf2854b1336e72feb603b8bb2242df0839d157843d369a50a615068ff5d99ecebe8dc19158a6c654e853cedf860a727bf8140c062f5d307fdcd150ad0af03d2c3a913b91047858ed6382d2d2d30f5c0bd419c2cd4047f225107ea8bf4a3a69384f16b5b5bb2655bdb750db4e975794592987df95f6a90374b0a08769b2c957faa16a21270196afba76b4527f01f0c5db7fa16e2da81fc49336e20bc3ee1ccbcb62255c84513d9ceb706f03c25000517070c03b7bce838e6b6cbc7f767959fbd62e11ab7ea6d760cff674a4296e6185eb348028b472290922160f3ea36c22c8375a016f505017c0a0e041dd8e52b4f19ccfc701109a19391a059d77db239d40a06d84a6f0ccd08aaad764e53ad1da19ee825a4d25ca7cd538289bffe135486ec1614e28b3682c7081a1b0a2c7272f4e36f6d0d9e68d84209126dc59312d48eed1c63c90efeadd472259392c28746abf394c5c6c97d3fb00b70a74c313a817ee1719c33f16d58f297fc7eacbca5803df115745079c5434e851ad6c1f0e8ba0bdbb66cbb6789b89a23526b476ad0f2cea0907e72702f93d37bdfe7b39fb9b33fb1111e58f5c45db8cc38afe4e03a318aa0690afb870a67aeda7da9640fdad1e1f551dd4757c69b4f523b616e502514a2e35495916f2e5ddab1ad9534644d99ec56e818caba173773aa5e45104deb869b23063eaea5542d3bc503a6948b83779aa46879443cad02477451b46429f1f67560c31d4377f96031ab94866a73be753c4ab91cc6576c3991c3423103ebae604e887c56cbacb9e95b8b46300b62e698a6456a0d175cf682eacabbe301e0b0ea34f963daed0dc6c1b75fa5e3870959913e69e61911d9ff646e9c6bab33fe566871027e861577c4d7fdfdf94ce7ac1a3f6d29daf28d660431a89c0b56c4b95090e2ca5df62c1e5c5dbf98f067751819d4c5914aa33883b7b521aab30d14e1cfae74fcf3ad4b2cf9448009d3223ad984e0c50f92d465573a6fc2894f8a5d4e855316738ecfd6a6c157d39b5c44d80a7cba944cf9f7a701899859821cf2bc248459f7a350fefba53c1481a7197f024f2eb74251455c06f4b82dfcf3ccf3e3b98b898fa1b16c310125e5e9fd4019acccbe91b4d842ddd52ee56f6d3112dec80159d6d3ef93bca70e7afcccb223361c39addbe3c429934cd0ae35f36a8f6309f08e36b27341db1f21fd8a148b239361b31a85f53bd1ad49fadace6c64d5f4363427fb2f268e8aec6d81cdb7f1252baa4652dc55881661114bf98cdf17190379591f0e22dc97e790f53f463bbb0ad0ead78ddf7dfe2e26052acc31cfe52b822afd5ec5c75957106cb5c368c09252ff3e4f624d90e599279fb985ecdb7d8880dfe05ac2d2da83e34e2b9b88f5dd60107a4509902fcddf4a36605e5c7a2606a4aea9fd4b5b24ca6b67d6945d133869cf9276d8c30b08c2a9f4bf03f4e0b956fd5f3c80b958ac5c41e4115b6708799c3102bd8b6c7fe17ff8c3f89c7437255faf69d1e16074086dd44d038bc0211ac74743169b462dbc085d77bf45eea72bf8348308bf48feea02d739a0fee9fbf71023ef8c6828da1aec8618cc2345ff663f88bc52a990e6b9591425435b0c7900ea4068f5aa6345e94254e259a71290fa23281658a6a165d1dee10dcb355518264824665ff2c5538de9ae4487782911f79e0bb09bc2c2d8e0d91b33cbec839075c9b38c848e9d2fad7368e96c1932042c3e85fd95b7d4500e6cae9e649082e9d5ca6f2cf91fc7ecaccc1049525d4325003424cacbd6eb5b8cc30b6893bd1ef46a8e7cbcc87dc2dda5c802ef1f8bb607c7457eb161254dc0feb60ed5ed0383fdb4db91d7e41d45c8eb80c1981e801ef05703f97f8710a2e00eb0559f854f700f946937b9e68c75ad6d0015d5d79be5423d0d846bc76f92ea7ebb0302b3d3c695c0aafa83b2bf029a444709cbf2cefbdcc7eaf3dd7a16f8ca8c861e883db10d433f7fec547be45e6829962e430bb3c93e8cdfb342c1cb7e53d8a6ea625d5574c4b4303f61c4338a658e652ab2bc0029c0a78a5114f495a439956909cf42128cb4348affbecb20b7fea98e22160e9a58e7666a00e7b37fbec4bd3860d66a39d1232a57e8cc50710c5c666f7efa98f16f9a02d843c94b0842a383945d06899998ff2fd01ffb58ab53ea89b2c93634c48d0420edb9791b8e451b35b534b8b2874c4859c684cd14afb5335a2555c75ad9df018635bb7131a7ef204ccecfed33a675fc51687e3f8818406fbf58e7b5fde1ca96153817e1b632e89a78d967eb6a34af1dac0d9ffa448b7b9bac27afc305a7b47febbe0a37036c18aef6852b1b2759d67479f9edb169e796d949844a1624b1e832a2eee9be36dc5866d6fde431cfcbd4e305d322c9dd07f83b5b361daaa74bfc9fbce8b447210c327468659ecbb0a5fc20d0cb79de7d1d70bf251c81d5f38711f3f4bd4752685b077058beb465711b1359d2a7d2f59216c5a807121bb97e7ccacc46526e4072f1d6de3b487d492fed0995e2273fa3bb115bd08d32d8e57eb2aa8f9d3b81babd1b8334c3a5e69422b75502ced3793d07b9bdf38e9d9fa1d2e48c7886dfc41985e8ffc49f09c4ba58ddc3b4cbf562b591f8939ced5d18214a77cc753075334a157373cc33cbc07a731cd6342492f5e05f78108e627bc88777203c76632bbe0120924c7a51bbfc9dc789a5695b7c95ef544935032fb81d499c454a2d78727875c20bc8a48a9f23cf6595c17c9cdaa8d04bab8ac567ebd3bbcdb40e11f1893fea3970f176f75f38d17d6ee1bd4ab76c660723a776bc72319199ab82c40ac4a9f4f475e8fd4643a4be8601cb5172e112c236c7c430078601bf183a59a03885e994c1116a9d4ef275790ff2417ffd85b43274fc57654466fa394958aeb11f343c3439604af13997011af70b67df1a9dfa4cdb751a2dc3e5bbf42f7b9ebc6dcebb2dbdc57d7a2cef7409dba307b7cf6eab148a924566341d035cabc877c68d0fbfaebdd39c16304b63a1bae376fb4650708bf5695dfd7ffc01f43f0021f622de0b116ea494454497337a0ec469963de7f9d2b1d6c5a7a0a7835777a78a2b9e16eec696446981d2fea550f011419b96f7b2018d027b87fc715521b0302bd7b5b3bc5f033346029eced73df07dd1bb1f91848376b40b9e9da7233e7832edcc7b54ef6fd320d19efce78d58ea7020fbbdf77612dc8a4f3281915ac9706f346e405b9f489f8f2e9a2decb8d18bec1e5f735a4ec69bba4dc5d36c9c1cc50b92fe67b2cdd53fa671c0cbe331abdf46787e7c9912b951aa20700dba6cf5a209fe5c9c61ef62a8e2e572ec774b2d0f42d570633fc44d44826e848d47a8f386a5704e0a3eaf1d06617181aeb166334ab55d5aedccb27abf19a42a480930e25465721336c70a2ea7799d21a3659124ac9503efc99c1b13ca2b9723e3e338055f9b3cef7502017ebbb09a64b06462db353a5c562101cb7fbf29e056deeb1ff0c7bc877210c941c87401ceae52bcecc83e87655069ab931bd813c1a87d67554f5d2cf435e6dd92a515c22f5d5a9a44ebc81e9c4849104343b80824005619312a9e349d996e366d381da42edad1a560bf5e31ecd049e92ceaf42954958600a7868599fe10e9b34587368d3044250c3d1a8ba6c8dcb6d318d4f9e71c2d33fc74cb57620a8343258d072f3aa767b4b178f3f66d5a713dae2426296c12edf9ee37636869e30df64cd3855fae20bc7602c1b7e6c8246ed4be71231a5ec7b5e7a9ebb08bf8667d8f2900ecdb0a0addc14a2328eebc448db13013e6a3c1a661065e5ac0a04b5171bd84c9d9d947a6c31257ed13a966530c5e20168c100117cf82b4c00ea3ad00ea65e1af89535b3f11a1418ddad33db8cec281543732d2ff4eab54b12cc95f7d872e75bc01bf6c580540b0e26413c6c2321ddfb0447bdb6acf05ddf2bb92534a3a5f37d6da882289f6fefc6a213cdfcf34902137fa3b982b2b4c27c611f08909a18405482f1e3a2bf3635d3e970457541da16e37bb3c422cceeb484bb64c78724431a543ecf4ca851914c1555e3b785ec87bba3769927f6c29f80e7ae8632bdb9acdddf7c3b5580740d9b2bfc25086c9566844136f3fac74f429121f86c378c68c20a194b0c98b1e92991954cbf60477e217a2e25297fc7b18972e40c531ec19e1eea193bbc8893392d8528c6a0375bcb4b082d20d5c47cb330bbb4b74b91ab55d4a0d3e1dee8182c581e8e70ac30108eeb7185c6ea3f786881ad124e1404651ee95cdb0fbb0d0f4a2b43c795ec1cd4e46234a88862d57903ce878b641004fb637341e5d6bf5163f1a3467b828f6eea96c3c2bb79503687867e11eec32dec452e0fdd2eaacfc0a477ee839ef049855da734d18212142dfe2a95ab9ad9bc4f98c3bfa34134c7e6c9f8669303314d4e8c1bc5475e8fcf418cbdb3246ebf393d911cdfee8f2550dc1593ece59ced81a4ffb2484f9c8ebed0aed8d418138445c4e96b209adcc4afd70f09901662daa2c8c557d6039768d97e6b9518f0de4ac2e0187ba08a4a9128d3e632fca102137338b5e568f12c7bd28db772c800fb5f4d4e683b201840731bb7c034235cd73313cde88891bbb31597bb537696e6c987302297f9717b8053779aed447d33ef9129e84d3031fa9b453bd5731fb010ffd19a9133e0ccbec2461cdd31ba294d68c60a8535b15584bab6e6d0ce6c1cef4755bd5f7d90f4debb40af1437a19a96ef9c0709692156152091c7efb58f2d39a65b96416dc09e8091ae08d9be5235a3c1ec062862baa1aab788f28e83ba4635cecc6671f2320f42b4f711e7d0fcad89d6727d3630da1ef35e32dee39eda665946abe6224f17f2acc29e62518fd51eb7f193d9bb16c38204069098c293fdce24c1c79229fd08622a4256b581cffce12e46c20248dc902753f0e3c91f9685b3d45f984620e262b3487d67d152f1c50de3fd2067a9d3debf715f346dd2f712c55545336a9036ba82bb06cfae59a48d083c3388f77790c9639fa0a9c33f4c66c7513042bffb765c2a4b3657dddf0ea094d8d79018f66c8ef8e9df980a89906275edf4a467a5db0a623976899f0efd167aab6ff385cdde59027a95a570277cb94ebce503906c28527e3114eb9ed739d0c2f4cf82786b35c0054718f47381ed8ce9b107e1f1019be5fc877166da667036f0c1b84e2b5118b5f4babc052d997e5f1e8c4cf45eb26430b74d9e1df3735b8d5df559903143d983e974bed6cc608c2580a991bdd3628ec676d348de8752cafa80c1661f162e35c25fc0ba0198423f83214fed800f9355ac8ea67951cfeeb3736b50c1e14d45d33aa25fc72c38702bd5dd217842e54114f4799c45ff1b7cec9729382ff7fc3ff80cbe1a13d03e19eecd7de676f6791fe34143ae30c97da9623907d974a37b65d0ef5d46b718d58541c6b1902814de71218ca7396ceb5fdacdc3cf4d110862402e7cc6254f1e44e28593fd443290262db75fd482ce1d305d6bf9fd3e5e0efbedac5a4d097650b111e6e9e1b2c66a23ac5bf27ed78d25d1a54c16ca4287126736c2f17ab73e683798c29d16481775ada8e20d94b00b6b29654b18f60e2853fdc7d3ba55d7df660db90288b6f440efd19f0478047b12c7b07ab2b1c9529597e6462d20612e6c3b6d1b1d11305f8ddc811860450504b7cbf9794edd0d07c25ab6307d74afdce958355eb919dcb1fcb8038c6dd5e774ee398dc8553a9ddeb551f", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil)
shmat(r7, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b)

1m1.021583125s ago: executing program 2 (id=3367):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', <r4=>0x0})
r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r3, r4, 0x25, 0x4, @val=@tcx}, 0x1c)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r5, r7, 0x4, r3}, 0x10) (fail_nth: 2)
close_range(r2, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)

1m0.86061363s ago: executing program 2 (id=3368):
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1)
ioctl$BLKPG(r4, 0xc0304d18, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0})

1m0.410156258s ago: executing program 2 (id=3371):
socket$inet6_mptcp(0xa, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x11)
sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x27, 0x0, 0xffffbfff, 0x5, 0xa, 0x4, "01ca05d295646750c787ccd18173f3ae5aad0085d3b412df1931ea5cfbf3704ccc9d30c96e88e98f05ecd642e3c5cda9720bf8f3373daeb9ca98c515b9ec59", 0x3f}, 0x58, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x2048895)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042)
mkdir(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x40)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000000c0)=@abs={0x8, 0x1, 0x4e22}, 0x8)
r2 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r2, &(0x7f00000002c0)=@file={0xa}, 0xa)
r3 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0)
gettid()
mkdirat(r3, &(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f00000001c0)=0x1)
r4 = open(&(0x7f00000002c0)='.\x00', 0x800, 0x82)
mkdirat(r4, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mkdirat(r4, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0)
rename(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000180)='./file0\x00')
sync()
sync()
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)

45.324265845s ago: executing program 33 (id=3371):
socket$inet6_mptcp(0xa, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x11)
sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x27, 0x0, 0xffffbfff, 0x5, 0xa, 0x4, "01ca05d295646750c787ccd18173f3ae5aad0085d3b412df1931ea5cfbf3704ccc9d30c96e88e98f05ecd642e3c5cda9720bf8f3373daeb9ca98c515b9ec59", 0x3f}, 0x58, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x2048895)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042)
mkdir(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x40)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000000c0)=@abs={0x8, 0x1, 0x4e22}, 0x8)
r2 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r2, &(0x7f00000002c0)=@file={0xa}, 0xa)
r3 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0)
gettid()
mkdirat(r3, &(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f00000001c0)=0x1)
r4 = open(&(0x7f00000002c0)='.\x00', 0x800, 0x82)
mkdirat(r4, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mkdirat(r4, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0)
rename(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000180)='./file0\x00')
sync()
sync()
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)

4.118563995s ago: executing program 1 (id=3638):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
close_range(r1, r1, 0x0)
io_setup(0x9, &(0x7f0000000240)=<r2=>0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r4, &(0x7f0000000040), 0x10)
r5 = dup3(r4, r3, 0x80000)
io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f0000001080)={0x400000, 0x0, 0x0, 0x2, 0x0, r1, &(0x7f0000000200)='\v', 0xfffffffffffffe93}])
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x6f631b4376e74f1e, {0x2, 0x0, @broadcast}, 'team_slave_0\x00'})
getsockopt$bt_hci(r0, 0x84, 0x1a, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f040000000000000000008500000005000000850000007d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r7 = socket(0x1d, 0x2, 0x7)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r7, 0x6b, 0x8, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r6}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010ea0104000000000000000000000006", @ANYRES32=0x0, @ANYBLOB="00000000060000000a00030008e7eebc872f0000180012800e00010077697265677561726400000004000280"], 0x44}}, 0x0)
mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2480, 0x1)
mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x800004, 0x0)
fgetxattr(r8, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r10 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r5, &(0x7f00000010c0)=ANY=[@ANYBLOB="5067ed265fa27f2949eb533ced7a16f6d5e44b1b796fea7fcea0dd748b0c3cb0ee53abb17ff14a6e2a5b3bb53a895ff224f04896a55f65994151560ada2954172f46b3f5403768c2a5e31b69916cbb206d3ba482bbb53d96cb19ba42094bac97d6c0a4aadcad5094f8f7aab79ce1be48d849ae4e233f6e1bc960251f0f0805c2e774644301a453803a0203387debc9f69f18d7ed58050dbe9937bb5381e23ae0e0ccb242f62319d562f647b3338116776a1b63972a67088586908211a1650702cf75"], 0x78)
close(r10)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

3.939808711s ago: executing program 1 (id=3640):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc4}}, 0x0) (fail_nth: 7)

3.77591678s ago: executing program 1 (id=3649):
openat$dlm_monitor(0xffffff9c, &(0x7f0000000040), 0x800000, 0x0)
syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200087300fe8000000000000000000020000000bbfe8000000000000000000000000000aa"], 0x0)

3.642158052s ago: executing program 1 (id=3644):
close(0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x51, 0x4, @fd=r2, 0x3, &(0x7f0000000140)=[{&(0x7f0000000100)="dce167a03837df3ffa9a0b9c0920", 0xe}, {&(0x7f00000003c0)="2508de51d9e90e9b0164bb907a5dafef1dfa459505d12c39b463c75322b3eb640bc99cb01e9cdb71a8a9a5e57402848be02b8fa85e69e14b5703501568548fb33954d386a53c403ec220c30b17a1a4d30c931e98c04f624460ef14abae903145a91e785a0359345282aede511c6a56aea86602ae8b99e6929d1cc4dfda8d6d32828866d2f58b55c0ee7a35f9781831e8abf383043a8935d154d0819af18118c6760f81c1c36345da9631b040154d1d756c9bf3b1a04d8ebd55efa238877bd7f6a031abe0d3813a50dec4ba596f092afc77fd6694571bb6812542772f9efcdd56ce03de162ab4", 0xe6}], 0x2, 0x19, 0x0, {0x0, r3}})
syz_io_uring_setup(0x48b, 0x0, &(0x7f0000000300), &(0x7f0000000080))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x3, 0x0, 0x0, 0x4)
r4 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, 0xffffffffffffffff)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x714000, 0x1000, 0x10, 0x2}, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8)
dup(0xffffffffffffffff)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
futex_waitv(&(0x7f00000047c0)=[{0x5, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x1)

2.200113057s ago: executing program 3 (id=3650):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r1, 0x201, 0x3ffffd, 0x7ffffe, {{}, {}, {0x8, 0x11, 0x84e}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x2000a004) (fail_nth: 9)

2.098954199s ago: executing program 3 (id=3651):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x160, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4f, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac=@device_b}, 0x200000000000000, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0xe3, 0x6, 0x7, 0x4}}, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0xdc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xd3, 0x2, "210e5468bb4955f4d474d624671d9544ee6925ff3826f75ea26f7e90289ac99ea036b0fb57e306a6e0b9de9f563f22154f0d4ad32e72a406753c3662c81f814fc6edb7e11bcb92d3b105d96804983aa8840cf9ebddc61c3644a1e974b35ef9069099211937f917eb871a14b1d9ef27bc50e014a7bac7c30618b9ce249c2537141fd67549671224ba2eda002352846bdc43d12f494071fba90c3d25ed5c02598bb8d3bc8add5ba06199fbed471ee365ac4ace149ddbdb724d343139b81d6740c2558b2ee753332543c86a76ec976b8f"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x11}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x160}}, 0x0)

1.935552606s ago: executing program 3 (id=3653):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1)
ioctl$BLKPG(r0, 0xc0184d15, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00000010004b0400000000fcdbdf257a000000b2394fb18126366b6bddb5475dc21faf5a830ddaebb5cc476f95896083040055b363f7cb378078e03cb32af160eb93df7510072841d5508d18d11ef53c66313a048c5a1db270c0efa3819cae608405aeeaeb6dfb7bd29fe78e63213d9986ec09611cb2c1c095134651f77d6219668da6511efcf05761c1bba767dfdfb4f055cf834631060b149fea3fc22d6725f271fac29d0e5ef481ca1d87ab2a3288aab437428b63142c0e83ccd5c6a945b2102732160dd8131a2f00000000", @ANYRES32=r3, @ANYBLOB="00420100000000000a000100aaaaaaaaaa1c0000"], 0x2c}, 0x1, 0x0, 0x0, 0x40002}, 0x4000)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@deltclass={0x9c, 0x29, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xa, 0x4}, {0x2, 0x7}, {0x9, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xc2}}, @tclass_kind_options=@c_qfq={{0x8}, {0x4c, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}, @TCA_QFQ_LMAX={0x8, 0x2, 0x401}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xc}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x1}, @TCA_QFQ_WEIGHT={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x1cd4e015}, @TCA_QFQ_LMAX={0x8, 0x2, 0x8}, @TCA_QFQ_LMAX={0x8}]}}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x4, 0x4}}, @TCA_RATE={0x6, 0x5, {0xb, 0x9}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20008006}, 0x40000)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x121000, 0x0)
read$FUSE(r4, &(0x7f0000002a80)={0x2020}, 0xfffffffe)

1.717117142s ago: executing program 3 (id=3657):
socket$inet6_mptcp(0xa, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x10, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x8, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x38)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macsec0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000004b40)=@newlink={0x44, 0x10, 0x503, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x440, 0x80}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x400000000000000}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x24, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x8, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x1a, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c57, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x9, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x400, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x93, 0x6, 0x6, 0x0, 0x81, 0x6, 0xffff8001, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0x388000, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2b, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xfff, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xfe, 0x0, 0xa, 0x5, 0x1000005, 0x6, 0xf, 0xd86, 0x2, 0x4, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x200004, 0x9, 0x3, 0x3, 0x3, 0x4, 0x3, 0x5, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x8, 0x8, 0x86, 0x3, 0x3038, 0xff, 0xb, 0x2, 0x2, 0x2, 0x7, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0x47dc, 0x5, 0x7, 0x2000003, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x3, 0x5, 0x1b, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x0, 0x80000000], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x400002, 0x57, 0x4, 0x3, 0x3, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x699c, 0x14c, 0x60a7, 0x6, 0x10000016, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x3, 0x100, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0x40b1e, 0xd7, 0x200, 0xffff3441, 0x4]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket(0x10, 0x3, 0x0)
rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYBLOB="df255504000000d9321b21ee48a91c000000020303000000000000000008000100010000000000000000"], 0x1c}}, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
syz_pidfd_open(0x0, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000b00)=0x6)
io_setup(0x7, &(0x7f0000000280)=<r8=>0x0)
io_submit(r8, 0x0, &(0x7f0000000080))
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000140000f80f2800010001000000"], 0x1c}}, 0x0)

1.300287178s ago: executing program 1 (id=3658):
socket$inet6(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x3, 0x300)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x9, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00))
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r3, 0x5008, 0x0)
ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000200))

698.238548ms ago: executing program 5 (id=3660):
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000020000000000000000000000000000000000007419941821f346305791560fdbf4b80000"], 0x50)

682.725571ms ago: executing program 4 (id=3661):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0)
memfd_create(&(0x7f00000001c0)='/duv/udmabuf\x00', 0x4)
rmdir(&(0x7f0000000040)='./cgroup/../file0\x00')
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x8, 0xa000000, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0)

680.850446ms ago: executing program 3 (id=3662):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x18)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000000000080"], 0x26}, 0x1, 0x0, 0x0, 0x4044844}, 0x0)

590.210659ms ago: executing program 3 (id=3663):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}]}]}, 0x28}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0xac, r1, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6b8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve1\x00'}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_team\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'pimreg0\x00'}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_team\x00'}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) (async)
r2 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) (async)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async)
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) (async)
recvmmsg(r6, &(0x7f00000021c0), 0x5b, 0x40, 0x0)

589.999151ms ago: executing program 4 (id=3664):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
fchmod(r1, 0x104)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x3e, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
accept4$tipc(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x40000)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x0, 'ip6gretap0\x00', {0x14}, 0x9})
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="420000000d0a010300000000000000000a00000109fd658675446f26fbd49473da4b19c59000020073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

492.352098ms ago: executing program 5 (id=3665):
r0 = syz_open_dev$video(&(0x7f0000000580), 0x10001, 0x20400)
ioctl$VIDIOC_CROPCAP(r0, 0xc02c5668, &(0x7f0000000000)={0x1, {0x0, 0x5, 0x2, 0x8}, {0x80000000, 0x480000, 0x9, 0xfffffffb}, {0x6, 0xffffffff}})

492.173192ms ago: executing program 4 (id=3666):
r0 = syz_clone(0x80001000, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0)
io_setup(0x6, &(0x7f0000001380)=<r1=>0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x278, 0x3d8, 0x3d8, 0x278, 0x3d8, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x31}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xffffff00, 0xff000000], [0x0, 0xffffff00, 0xffffffff], 'vxcan1\x00', 'bond0\x00', {0x1722a77d736144f5}, {0xff}, 0x8, 0x0, 0x3, 0x11}, 0x0, 0x124, 0x14c, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_vlan\x00', {0x22, 0x9, 0x0, 0x1, 0x6, 0xb3c, 0x10, 0x20, 0x20}, {0x6}}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x9, 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x1, 0x2}}}, {{@uncond, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}, {0x101, 0x1, 0x0, [0x34d, 0x4, 0x3, 0xb, 0x6, 0x2, 0x3da6, 0xd, 0x407, 0x7, 0x5, 0xe420, 0x3, 0x10, 0x7f, 0x2d], 0xe}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x60, 0x1, "bf50e684840e31838b38a8722c839ed5aca31d87e30f043f5135ab48dfbc"}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x39c)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}})
getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040)=0x6, &(0x7f0000000080)=0x4)
r4 = syz_open_procfs(r0, &(0x7f0000000000)='net/netlink\x00')
io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2, r4}])

492.083221ms ago: executing program 5 (id=3667):
openat$audio(0xffffffffffffff9c, 0x0, 0x81480, 0x0)
socket$alg(0x26, 0x5, 0x0)
openat$fb1(0xffffff9c, &(0x7f0000001680), 0x280000, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1, 0xf000}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0)

438.169691ms ago: executing program 1 (id=3668):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)=0x2)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x0, @local}, 0x2}}, 0x26)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r4, 0x300, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x3c}}, 0x20)
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r6 = syz_open_dev$vim2m(0x0, 0x100007, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00')
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0x8004b708, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
capset(0x0, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe})
sendmmsg$unix(r8, 0x0, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet_udp(0x2, 0x2, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r9, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r9, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
syz_usb_connect(0x5, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb010203010902"], 0x0)

437.803028ms ago: executing program 5 (id=3669):
openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000002280), 0x0, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) (async)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000240)=0x15)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x2040000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_uid}, {@posixacl}, {@posixacl}, {@access_uid={'access', 0x3d, 0xee00}}]}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r7, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a3200000000140000001100014707a082b178795ad1fcc02173fc70f8"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000431400000000000000000a3c00000012ed7cd461312613fa53dbe38645fc62d10a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a300000000a1400"], 0x64}}, 0x0) (async)
sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000431400000000000000000a3c00000012ed7cd461312613fa53dbe38645fc62d10a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a300000000a1400"], 0x64}}, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x25}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x300, @mcast1, 0xfffffffd}}, 0x300, 0xe9, 0x318, 0x1, 0x24}, 0x9c)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
socket$netlink(0x10, 0x3, 0x0) (async)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0xfffffffffffffce5, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b4c0b557a75df7fea7365630000180002800c0004000200000100c20100050003000400"], 0x48}}, 0x0)

230.262399ms ago: executing program 5 (id=3670):
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$video(&(0x7f0000000580), 0x10001, 0x0)
r0 = syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2)
ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)={0xb, {0x0, 0x4000005, 0x2, 0x10000006}, {0x6, 0x480000, 0x40, 0xfffffffb}, {0x6, 0xffffffff}})
r1 = openat$ndctl0(0xffffff9c, &(0x7f0000000040), 0x105000, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x32, @broadcast, 0x4e21, 0x0, 'dh\x00', 0xd, 0x1, 0x3e}, 0x2c)

229.775009ms ago: executing program 5 (id=3671):
socket$inet6_mptcp(0xa, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtaction={0x16c, 0x30, 0x1, 0x0, 0x0, {}, [{0x158, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x53, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mirred={0x110, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0xe4, 0x6, "09b30283c8ce91177a12f0b85be1ab71838ba99fb948a8aaca6427f95c40aa6fa110802f1f019748d3a355c14a1c4a0f919e171980dc2c74bc0c2c73ab89986b784fdf4b379bc4bea86d2b1625e5d3fb1af07f9176df134f043fd7aa59ef9cbe05c9df4a07b418de4e38645ad639b1c5911f4d5d1bd4a176f128b7cded41ca0b20509cc81ed718b784a57a88d5026a7c955a9ad47022194f870553395c6e3db5350a3c18a9dbff399cfe991089f3d097e9e810adfd8d1858c4ac889284f2d1a29d1b23572e6e50f484d93f291eb43a85ed79797d2386b694e3aa3066ec9439b6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000e0ff0000000000000000180100802020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000467a4f35cac60e7fda7e77a9b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0xf3a, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x7, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000fc0000007910ccfe00000000950000000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3f, 0x40206}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}, 0x1, 0x4000, 0x0, 0x44000}, 0x0)

128.278867ms ago: executing program 4 (id=3672):
r0 = syz_open_dev$video(&(0x7f0000000580), 0x10001, 0x20400)
ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)={0x1, {0x0, 0x5, 0x2, 0x8}, {0x80000000, 0x480000, 0x9, 0xfffffffb}, {0x6, 0xffffffff}}) (fail_nth: 4)

126.864039ms ago: executing program 4 (id=3673):
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000020000000000000000000000000000000000007419941821f346305791560fdbf4b80000000000"], 0x50)

0s ago: executing program 4 (id=3674):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
chdir(&(0x7f0000000080)='./file0\x00')
setpgid(r0, r0)
setpgid(0x0, r0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x1f00, 0x12)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40100, 0x0)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x74, r3}, './file0\x00'})

kernel console output (not intermixed with test programs):

 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  696.410308][T16306] RSP: 002b:00000000f541655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  696.410322][T16306] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240
[  696.410332][T16306] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000
[  696.410341][T16306] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  696.410349][T16306] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  696.410357][T16306] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  696.410376][T16306]  </TASK>
[  696.410384][T16306] socket: no more sockets
[  696.596559][T16311] syzkaller0: entered promiscuous mode
[  696.598869][T16311] syzkaller0: entered allmulticast mode
[  696.698453][T16312] lo speed is unknown, defaulting to 1000
[  696.850549][   T40] kauditd_printk_skb: 14 callbacks suppressed
[  696.850563][   T40] audit: type=1326 audit(1768784982.826:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16303 comm="syz.4.2847" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x0
[  696.999864][T16321] libceph: resolve '400' (ret=-3): failed
[  697.896837][T16346] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  697.899689][T16346] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  697.903465][T16346] vhci_hcd vhci_hcd.0: Device attached
[  698.184470][ T6027] usb 42-1: SetAddress Request (18) to port 0
[  698.186839][ T6027] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd
[  698.204064][ T6066] wlan1: Trigger new scan to find an IBSS to join
[  698.256402][T16353] netlink: set zone limit has 4 unknown bytes
[  698.476494][T16347] vhci_hcd: connection reset by peer
[  698.527652][ T6101] vhci_hcd vhci_hcd.2: stop threads
[  698.531472][ T6101] vhci_hcd vhci_hcd.2: release socket
[  698.536819][ T6101] vhci_hcd vhci_hcd.2: disconnect device
[  699.292572][T16381] netlink: 'syz.4.2869': attribute type 30 has an invalid length.
[  700.508660][T16406] netlink: set zone limit has 4 unknown bytes
[  700.633897][    T9] usb 9-1: new high-speed USB device number 34 using dummy_hcd
[  700.785576][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  700.790155][    T9] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  700.793927][   T34] usb 8-1: new high-speed USB device number 35 using dummy_hcd
[  700.794377][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  700.801248][    T9] usb 9-1: config 0 descriptor??
[  700.953927][   T34] usb 8-1: Using ep0 maxpacket: 8
[  700.958944][   T34] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  700.962415][   T34] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  700.965896][   T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  700.969059][   T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  700.972140][   T34] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  700.977454][   T34] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  700.981223][   T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  700.988602][T16416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2880'.
[  701.013076][    T9] usbhid 9-1:0.0: can't add hid device: -71
[  701.016166][    T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  701.020169][    T9] usb 9-1: USB disconnect, device number 34
[  701.190221][   T34] usb 8-1: usb_control_msg returned -32
[  701.193492][   T34] usbtmc 8-1:16.0: can't read capabilities
[  701.200323][T16413] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  701.202414][T16413] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  701.205608][T16413] vhci_hcd vhci_hcd.0: Device attached
[  701.276786][T16417] vhci_hcd: connection closed
[  701.276975][   T13] vhci_hcd vhci_hcd.3: stop threads
[  701.277398][   T29] usb 8-1: USB disconnect, device number 35
[  701.278582][   T13] vhci_hcd vhci_hcd.3: release socket
[  701.284991][   T13] vhci_hcd vhci_hcd.3: disconnect device
[  701.325348][ T6393] wlan1: Trigger new scan to find an IBSS to join
[  701.453903][   T34] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[  701.613938][   T34] usb 9-1: Using ep0 maxpacket: 32
[  701.622041][   T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  701.626115][   T34] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  701.628986][   T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.632669][   T34] usb 9-1: config 0 descriptor??
[  701.637046][   T34] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  701.642287][   T34] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  701.923211][T16429] netlink: 'syz.3.2884': attribute type 1 has an invalid length.
[  702.038651][   T34] usb 9-1: USB disconnect, device number 35
[  702.044787][   T34] ldusb 9-1:0.0: LD USB Device #0 now disconnected
[  702.324841][ T6101] wlan1: Creating new IBSS network, BSSID 0e:3b:34:c2:73:9b
[  702.817069][   T40] audit: type=1326 audit(1768784988.796:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16452 comm="syz.3.2894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000
[  702.832739][   T40] audit: type=1326 audit(1768784988.796:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16452 comm="syz.3.2894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000
[  702.870903][   T40] audit: type=1326 audit(1768784988.796:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16452 comm="syz.3.2894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000
[  702.884013][   T40] audit: type=1326 audit(1768784988.796:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16452 comm="syz.3.2894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000
[  702.890934][   T40] audit: type=1326 audit(1768784988.796:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16452 comm="syz.3.2894" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f35579 code=0x7ffc0000
[  702.902280][   T40] audit: type=1326 audit(1768784988.806:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16452 comm="syz.3.2894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000
[  702.910333][   T40] audit: type=1326 audit(1768784988.806:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16452 comm="syz.3.2894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000
[  702.944253][   T40] audit: type=1326 audit(1768784988.806:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16452 comm="syz.3.2894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000
[  702.951356][   T40] audit: type=1326 audit(1768784988.806:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16452 comm="syz.3.2894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000
[  702.964514][   T40] audit: type=1326 audit(1768784988.806:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16452 comm="syz.3.2894" exe="/syz-executor" sig=0 arch=40000003 syscall=438 compat=1 ip=0xf7f35579 code=0x7ffc0000
[  703.095911][T16465] tmpfs: Bad value for 'mpol'
[  703.143100][T16467] netlink: 'syz.4.2898': attribute type 10 has an invalid length.
[  703.147110][T16467] team0: Device ipvlan0 failed to register rx_handler
[  703.332026][ T6027] usb 42-1: device descriptor read/8, error -110
[  703.332564][T16477] block nbd4: NBD_DISCONNECT
[  703.560394][T16498] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2906'.
[  703.734735][ T6027] usb usb42-port1: attempt power cycle
[  703.812498][T16507] kAFS: unable to lookup cell '(,c¾Ì'
[  704.294724][ T6027] usb usb42-port1: unable to enumerate USB device
[  704.384065][ T6393] Bluetooth: hci2: Frame reassembly failed (-84)
[  704.386256][ T6393] Bluetooth: hci2: Frame reassembly failed (-84)
[  705.030823][T16556] ubi31: attaching mtd0
[  705.032910][T16556] ubi31 warning: ubi_attach: valid VID header but corrupted EC header at PEB 0
[  705.038355][T16556] ubi31: scanning is finished
[  705.125192][T16556] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  705.134367][T16556] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  705.142113][T16556] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  705.151923][T16556] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  705.162000][T16556] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  705.169312][T16556] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  705.175428][T16556] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2001629884
[  705.186467][T16556] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  705.189706][T16558] ubi31: background thread "ubi_bgt31d" started, PID 16558
[  705.195253][T16558] ubi31: scrubbed PEB 0 (LEB 2147479551:0), data moved to PEB 31
[  705.654290][ T6027] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[  705.804547][ T6027] usb 9-1: Using ep0 maxpacket: 8
[  705.810587][ T6027] usb 9-1: config 0 has an invalid interface number: 186 but max is 0
[  705.817827][ T6027] usb 9-1: config 0 has no interface number 0
[  705.822449][ T6027] usb 9-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  705.829345][ T6027] usb 9-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  705.835243][ T6027] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  705.840830][ T6027] usb 9-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  705.858737][ T6027] usb 9-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  705.861768][ T6027] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  705.864788][ T6027] usb 9-1: Product: syz
[  705.866146][ T6027] usb 9-1: Manufacturer: syz
[  705.867731][ T6027] usb 9-1: SerialNumber: syz
[  705.872756][ T6027] usb 9-1: config 0 descriptor??
[  706.081549][ T6027] iowarrior 9-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0
[  706.349529][    T9] usb 9-1: USB disconnect, device number 36
[  706.443931][T14334] Bluetooth: hci2: command 0x1003 tx timeout
[  706.444227][ T5958] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  706.546298][T16584] unsupported nla_type 256
[  707.643925][ T5954] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  707.644288][ T5958] Bluetooth: hci5: command 0x1003 tx timeout
[  707.871615][T16611] x_tables: duplicate underflow at hook 3
[  707.879993][T16611] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2946'.
[  707.910583][T16611] ptrace attach of "/syz-executor exec"[16612] was attempted by "/syz-executor exec"[16611]
[  707.977438][T16619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2948'.
[  707.981058][T16619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2948'.
[  707.988147][T16619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2948'.
[  708.184407][T16626] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  708.231633][T16626] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  708.235266][T16626] overlayfs: failed to look up (tracing) for ino (-66)
[  708.277360][T16625] netlink: set zone limit has 4 unknown bytes
[  709.308959][T16622] netlink: 'syz.1.2952': attribute type 1 has an invalid length.
[  709.984077][T16646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2958'.
[  710.824185][T16667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2962'.
[  711.444884][T16669] FAULT_INJECTION: forcing a failure.
[  711.444884][T16669] name failslab, interval 1, probability 0, space 0, times 0
[  711.449223][T16669] CPU: 1 UID: 0 PID: 16669 Comm: syz.3.2963 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  711.449242][T16669] Tainted: [L]=SOFTLOCKUP
[  711.449246][T16669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  711.449253][T16669] Call Trace:
[  711.449258][T16669]  <TASK>
[  711.449263][T16669]  dump_stack_lvl+0x16c/0x1f0
[  711.449285][T16669]  should_fail_ex+0x512/0x640
[  711.449298][T16669]  ? kmem_cache_alloc_node_noprof+0x65/0x800
[  711.449314][T16669]  should_failslab+0xc2/0x120
[  711.449337][T16669]  kmem_cache_alloc_node_noprof+0x86/0x800
[  711.449351][T16669]  ? copy_process+0x4b5/0x7430
[  711.449371][T16669]  ? copy_process+0x4b5/0x7430
[  711.449387][T16669]  copy_process+0x4b5/0x7430
[  711.449410][T16669]  ? __pfx_copy_process+0x10/0x10
[  711.449428][T16669]  ? lockdep_init_map_type+0x5c/0x270
[  711.449441][T16669]  ? lockdep_init_map_type+0x5c/0x270
[  711.449453][T16669]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  711.449472][T16669]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  711.449489][T16669]  vhost_task_create+0x1d2/0x370
[  711.449502][T16669]  ? __pfx_vhost_task_create+0x10/0x10
[  711.449519][T16669]  ? __pfx_vhost_task_fn+0x10/0x10
[  711.449533][T16669]  ? __pfx___mutex_lock+0x10/0x10
[  711.449548][T16669]  kvm_mmu_post_init_vm+0x1b7/0x380
[  711.449564][T16669]  kvm_arch_vcpu_ioctl_run+0x66/0x1860
[  711.449578][T16669]  ? kvm_vcpu_ioctl+0x14f8/0x16d0
[  711.449599][T16669]  kvm_vcpu_ioctl+0x76d/0x16d0
[  711.449617][T16669]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  711.449635][T16669]  ? tomoyo_path_number_perm+0x18d/0x580
[  711.449650][T16669]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  711.449669][T16669]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  711.449687][T16669]  ? do_vfs_ioctl+0x128/0x14f0
[  711.449702][T16669]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  711.449721][T16669]  kvm_vcpu_compat_ioctl+0x20f/0x3d0
[  711.449739][T16669]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  711.449757][T16669]  ? __fget_files+0x20e/0x3c0
[  711.449772][T16669]  ? __fput_deferred+0x420/0x480
[  711.449786][T16669]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  711.449804][T16669]  __ia32_compat_sys_ioctl+0x242/0x370
[  711.449820][T16669]  __do_fast_syscall_32+0xe8/0x680
[  711.449833][T16669]  do_fast_syscall_32+0x32/0x80
[  711.449844][T16669]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  711.449858][T16669] RIP: 0023:0xf7f35579
[  711.449868][T16669] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  711.449879][T16669] RSP: 002b:00000000f542655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  711.449890][T16669] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80
[  711.449898][T16669] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  711.449904][T16669] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  711.449911][T16669] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  711.449917][T16669] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  711.449931][T16669]  </TASK>
[  713.161274][T16692] FAULT_INJECTION: forcing a failure.
[  713.161274][T16692] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  713.165974][T16692] CPU: 1 UID: 0 PID: 16692 Comm: syz.3.2970 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  713.165993][T16692] Tainted: [L]=SOFTLOCKUP
[  713.165997][T16692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  713.166005][T16692] Call Trace:
[  713.166009][T16692]  <TASK>
[  713.166014][T16692]  dump_stack_lvl+0x16c/0x1f0
[  713.166037][T16692]  should_fail_ex+0x512/0x640
[  713.166053][T16692]  _copy_from_user+0x2e/0xd0
[  713.166067][T16692]  get_compat_msghdr+0xa7/0x170
[  713.166083][T16692]  ? __pfx_get_compat_msghdr+0x10/0x10
[  713.166099][T16692]  ? __lock_acquire+0x436/0x2890
[  713.166113][T16692]  ___sys_recvmsg+0x191/0x1a0
[  713.166130][T16692]  ? __pfx____sys_recvmsg+0x10/0x10
[  713.166146][T16692]  ? find_held_lock+0x2b/0x80
[  713.166165][T16692]  ? __pfx___might_resched+0x10/0x10
[  713.166185][T16692]  do_recvmmsg+0x55d/0x750
[  713.166202][T16692]  ? __pfx_do_recvmmsg+0x10/0x10
[  713.166226][T16692]  ? __fget_files+0x20e/0x3c0
[  713.166245][T16692]  __sys_recvmmsg+0x21c/0x280
[  713.166262][T16692]  ? __pfx___sys_recvmmsg+0x10/0x10
[  713.166278][T16692]  ? __pfx_ksys_write+0x10/0x10
[  713.166297][T16692]  __ia32_compat_sys_recvmmsg_time32+0xc4/0x160
[  713.166319][T16692]  ? __do_fast_syscall_32+0x9a/0x680
[  713.166331][T16692]  ? lockdep_hardirqs_on+0x7c/0x110
[  713.166349][T16692]  __do_fast_syscall_32+0xe8/0x680
[  713.166361][T16692]  do_fast_syscall_32+0x32/0x80
[  713.166373][T16692]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  713.166387][T16692] RIP: 0023:0xf7f35579
[  713.166397][T16692] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  713.166408][T16692] RSP: 002b:00000000f542655c EFLAGS: 00000296 ORIG_RAX: 0000000000000151
[  713.166420][T16692] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800055c0
[  713.166428][T16692] RDX: 000000000400023c RSI: 0000000000000300 RDI: 0000000000000000
[  713.166434][T16692] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  713.166441][T16692] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  713.166448][T16692] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  713.166461][T16692]  </TASK>
[  713.367068][T16703] ubi: mtd0 is already attached to ubi31
[  714.888411][T16718] netlink: 'syz.1.2976': attribute type 12 has an invalid length.
[  714.895107][T16719] ubi: mtd0 is already attached to ubi31
[  714.963304][T16720] netlink: zone id is out of range
[  714.989926][T16720] netlink: set zone limit has 4 unknown bytes
[  715.856489][   T13] wlan1: Selected IBSS BSSID 0e:3b:34:c2:73:9b based on configured SSID
[  716.961238][T16749] netlink: 'syz.2.2984': attribute type 4 has an invalid length.
[  716.969661][T16749] netlink: 'syz.2.2984': attribute type 4 has an invalid length.
[  717.044232][T16762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2986'.
[  717.053234][T16764] fuse: Bad value for 'rootmode'
[  718.384453][   T29] usb 9-1: new high-speed USB device number 37 using dummy_hcd
[  718.426508][T16782] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  718.428678][T16782] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  718.431169][T16782] vhci_hcd vhci_hcd.0: Device attached
[  718.535924][   T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  718.539486][   T29] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  718.803883][   T63] usb 41-1: new low-speed USB device number 8 using vhci_hcd
[  718.820193][T16790] netlink: set zone limit has 4 unknown bytes
[  719.136637][   T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  719.140745][   T29] usb 9-1: config 0 descriptor??
[  719.157042][T16793] fuse: Unknown parameter 'use00000000000000000000'
[  719.354103][T16783] vhci_hcd: connection reset by peer
[  719.364357][ T1141] vhci_hcd vhci_hcd.2: stop threads
[  719.366089][ T1141] vhci_hcd vhci_hcd.2: release socket
[  719.368637][ T1141] vhci_hcd vhci_hcd.2: disconnect device
[  719.407326][   T29] usbhid 9-1:0.0: can't add hid device: -71
[  719.413019][   T29] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  719.418844][   T29] usb 9-1: USB disconnect, device number 37
[  719.854261][   T29] usb 9-1: new high-speed USB device number 38 using dummy_hcd
[  720.014230][   T29] usb 9-1: Using ep0 maxpacket: 32
[  720.017893][   T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  720.021371][   T29] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  720.029822][   T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  720.044756][   T29] usb 9-1: config 0 descriptor??
[  720.058875][   T29] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  720.070455][   T29] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  720.230902][T16806] netlink: set zone limit has 4 unknown bytes
[  720.427383][T16812] netlink: 'syz.1.3000': attribute type 4 has an invalid length.
[  720.439801][T16812] netlink: 'syz.1.3000': attribute type 4 has an invalid length.
[  721.091395][T16817] netlink: 'syz.2.3002': attribute type 12 has an invalid length.
[  721.511650][T16829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3004'.
[  721.937289][ T6027] usb 9-1: USB disconnect, device number 38
[  721.995777][ T6027] ldusb 9-1:0.0: LD USB Device #0 now disconnected
[  722.126518][T16831] fuse: Unknown parameter 'use00000000000000000000'
[  722.410672][T16834] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3008'.
[  723.163905][ T5958] Bluetooth: hci4: command 0x040f tx timeout
[  723.298315][T16848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  723.405156][T16851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3013'.
[  723.604493][T16855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3013'.
[  724.131865][   T63] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  724.303954][   T35] block nbd0: Possible stuck request ffff888026780000: control (read@0,4096B). Runtime 120 seconds
[  724.745248][T16862] fuse: Unknown parameter 'use00000000000000000000'
[  725.004589][T16871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3018'.
[  726.052700][T16877] loop6: detected capacity change from 0 to 2640
[  726.055246][T16877] Buffer I/O error on dev loop6, logical block 0, async page read
[  726.057793][T16877] Buffer I/O error on dev loop6, logical block 0, async page read
[  726.060616][T16877] Buffer I/O error on dev loop6, logical block 0, async page read
[  726.063143][T16877] Buffer I/O error on dev loop6, logical block 0, async page read
[  726.065818][T16877] Buffer I/O error on dev loop6, logical block 0, async page read
[  726.068612][T16877] Buffer I/O error on dev loop6, logical block 0, async page read
[  726.071109][T16877] Buffer I/O error on dev loop6, logical block 0, async page read
[  726.073649][T16877] Buffer I/O error on dev loop6, logical block 0, async page read
[  726.076317][T16877] ldm_validate_partition_table(): Disk read failed.
[  726.078471][T16877] Buffer I/O error on dev loop6, logical block 0, async page read
[  726.080974][T16877] Buffer I/O error on dev loop6, logical block 0, async page read
[  726.083499][T16877] Dev loop6: unable to read RDB block 0
[  726.086106][T16877]  loop6: unable to read partition table
[  726.088117][T16877] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  726.183866][T16877] loop6: detected capacity change from 2640 to 524288000
[  726.829398][T16895] fuse: Unknown parameter 'user_i00000000000000000000'
[  727.613723][T16916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3030'.
[  728.279262][T16925] fuse: Unknown parameter 'user_i00000000000000000000'
[  728.368019][T16930] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  728.613872][T15221] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  728.833915][T15221] usb 6-1: Using ep0 maxpacket: 32
[  728.837062][T15221] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  728.840034][T15221] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  728.842760][T15221] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  728.853929][T15221] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  728.857387][T15221] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  728.860724][T15221] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  728.873870][T15221] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  728.877606][T15221] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  728.882170][T15221] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  728.886089][T15221] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  728.898339][T15221] usb 6-1: config 0 descriptor??
[  729.427292][T16951] FAULT_INJECTION: forcing a failure.
[  729.427292][T16951] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  729.431495][T16951] CPU: 3 UID: 0 PID: 16951 Comm: syz.2.3042 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  729.431513][T16951] Tainted: [L]=SOFTLOCKUP
[  729.431517][T16951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  729.431536][T16951] Call Trace:
[  729.431541][T16951]  <TASK>
[  729.431546][T16951]  dump_stack_lvl+0x16c/0x1f0
[  729.431568][T16951]  should_fail_ex+0x512/0x640
[  729.431584][T16951]  _copy_to_user+0x32/0xd0
[  729.431599][T16951]  simple_read_from_buffer+0xcb/0x170
[  729.431616][T16951]  proc_fail_nth_read+0x197/0x240
[  729.431637][T16951]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  729.431658][T16951]  ? rw_verify_area+0xcf/0x6c0
[  729.431672][T16951]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  729.431691][T16951]  vfs_read+0x1e4/0xcf0
[  729.431707][T16951]  ? __pfx___mutex_lock+0x10/0x10
[  729.431720][T16951]  ? __pfx_vfs_read+0x10/0x10
[  729.431734][T16951]  ? find_held_lock+0x2b/0x80
[  729.431753][T16951]  ? __fget_files+0x20e/0x3c0
[  729.431773][T16951]  ksys_read+0x12a/0x250
[  729.431789][T16951]  ? __pfx_ksys_read+0x10/0x10
[  729.431806][T16951]  ? do_user_addr_fault+0x843/0x1370
[  729.431823][T16951]  __do_fast_syscall_32+0xe8/0x680
[  729.431848][T16951]  do_fast_syscall_32+0x32/0x80
[  729.431861][T16951]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  729.431876][T16951] RIP: 0023:0xf7f25579
[  729.431886][T16951] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  729.431898][T16951] RSP: 002b:00000000f5416590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  729.431910][T16951] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5416620
[  729.431917][T16951] RDX: 000000000000000f RSI: 00000000f73b6ff4 RDI: 0000000000000000
[  729.431924][T16951] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  729.431931][T16951] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  729.431938][T16951] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  729.431952][T16951]  </TASK>
[  729.503363][T16952] netlink: 'syz.4.3041': attribute type 12 has an invalid length.
[  729.662183][T16958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3043'.
[  730.585468][T16963] fuse: Unknown parameter 'user_i00000000000000000000'
[  731.246097][T15221] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  731.255352][T15221] usb 6-1: USB disconnect, device number 20
[  731.258643][T15221] usblp0: removed
[  731.349786][T16978] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  731.351910][T16978] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  731.365342][T16978] vhci_hcd vhci_hcd.0: Device attached
[  731.603959][   T24] usb 43-1: new low-speed USB device number 5 using vhci_hcd
[  731.914889][T16979] vhci_hcd: connection reset by peer
[  731.917035][   T76] vhci_hcd vhci_hcd.3: stop threads
[  731.919159][   T76] vhci_hcd vhci_hcd.3: release socket
[  731.921218][   T76] vhci_hcd vhci_hcd.3: disconnect device
[  732.392555][T16989] netlink: zone id is out of range
[  732.414458][T16989] netlink: set zone limit has 4 unknown bytes
[  732.756391][T17001] netlink: 'syz.3.3053': attribute type 10 has an invalid length.
[  733.063188][T17003] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  733.070832][T17003] binder: 17002:17003 ioctl c00c6211 ffffffff returned -14
[  734.635840][T17027] netlink: set zone limit has 4 unknown bytes
[  734.760847][T17039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3067'.
[  735.824310][T17046] lo speed is unknown, defaulting to 1000
[  735.898557][T17040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3065'.
[  736.754341][   T24] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  736.853245][T17067] netlink: zone id is out of range
[  737.365669][T17067] netlink: set zone limit has 4 unknown bytes
[  737.903158][T17085] FAULT_INJECTION: forcing a failure.
[  737.903158][T17085] name failslab, interval 1, probability 0, space 0, times 0
[  737.907640][T17085] CPU: 1 UID: 0 PID: 17085 Comm: syz.2.3080 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  737.907671][T17085] Tainted: [L]=SOFTLOCKUP
[  737.907675][T17085] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  737.907683][T17085] Call Trace:
[  737.907687][T17085]  <TASK>
[  737.907692][T17085]  dump_stack_lvl+0x16c/0x1f0
[  737.907714][T17085]  should_fail_ex+0x512/0x640
[  737.907728][T17085]  ? __kmalloc_cache_noprof+0x5f/0x800
[  737.907743][T17085]  should_failslab+0xc2/0x120
[  737.907761][T17085]  __kmalloc_cache_noprof+0x80/0x800
[  737.907775][T17085]  ? genl_start+0x1e8/0x980
[  737.907789][T17085]  ? genl_start+0x1e8/0x980
[  737.907799][T17085]  genl_start+0x1e8/0x980
[  737.907811][T17085]  __netlink_dump_start+0x60e/0x990
[  737.907830][T17085]  genl_family_rcv_msg_dumpit+0x1e2/0x2e0
[  737.907843][T17085]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  737.907856][T17085]  ? stack_depot_save_flags+0x29/0x9b0
[  737.907872][T17085]  ? __pfx_genl_get_cmd+0x10/0x10
[  737.907881][T17085]  ? __pfx_genl_start+0x10/0x10
[  737.907891][T17085]  ? __pfx_genl_dumpit+0x10/0x10
[  737.907901][T17085]  ? __pfx_genl_done+0x10/0x10
[  737.907913][T17085]  ? ____sys_sendmsg+0xa5d/0xc30
[  737.907923][T17085]  ? ___sys_sendmsg+0x134/0x1d0
[  737.907937][T17085]  ? __radix_tree_lookup+0x21f/0x2c0
[  737.907955][T17085]  genl_rcv_msg+0x46e/0x800
[  737.907968][T17085]  ? __pfx_genl_rcv_msg+0x10/0x10
[  737.907980][T17085]  ? __pfx_netdev_nl_qstats_get_dumpit+0x10/0x10
[  737.908000][T17085]  ? __lock_acquire+0x436/0x2890
[  737.908014][T17085]  netlink_rcv_skb+0x158/0x420
[  737.908031][T17085]  ? __pfx_genl_rcv_msg+0x10/0x10
[  737.908043][T17085]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  737.908066][T17085]  ? netlink_deliver_tap+0x1ae/0xd30
[  737.908085][T17085]  genl_rcv+0x28/0x40
[  737.908094][T17085]  netlink_unicast+0x5aa/0x870
[  737.908113][T17085]  ? __pfx_netlink_unicast+0x10/0x10
[  737.908136][T17085]  netlink_sendmsg+0x8c8/0xdd0
[  737.908155][T17085]  ? __pfx_netlink_sendmsg+0x10/0x10
[  737.908174][T17085]  ? aa_sock_msg_perm.constprop.0+0x100/0x1b0
[  737.908197][T17085]  ____sys_sendmsg+0xa5d/0xc30
[  737.908206][T17085]  ? iterate_extent_inodes+0x660/0x1270
[  737.908224][T17085]  ? __pfx_____sys_sendmsg+0x10/0x10
[  737.908234][T17085]  ? get_compat_msghdr+0x11a/0x170
[  737.908256][T17085]  ___sys_sendmsg+0x134/0x1d0
[  737.908272][T17085]  ? __pfx____sys_sendmsg+0x10/0x10
[  737.908294][T17085]  ? find_held_lock+0x2b/0x80
[  737.908322][T17085]  __sys_sendmsg+0x16d/0x220
[  737.908337][T17085]  ? __pfx___sys_sendmsg+0x10/0x10
[  737.908362][T17085]  __do_fast_syscall_32+0xe8/0x680
[  737.908375][T17085]  do_fast_syscall_32+0x32/0x80
[  737.908386][T17085]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  737.908400][T17085] RIP: 0023:0xf7f25579
[  737.908409][T17085] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  737.908420][T17085] RSP: 002b:00000000f53d455c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  737.908432][T17085] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000100
[  737.908439][T17085] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000
[  737.908446][T17085] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  737.908452][T17085] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  737.908459][T17085] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  737.908473][T17085]  </TASK>
[  739.877722][T17112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3088'.
[  739.881292][T17112] siw: device registration error -23
[  740.686849][T17114] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3089'.
[  740.733066][T17114] veth1_to_bond: entered allmulticast mode
[  740.733497][T17114] veth1_to_bond: left allmulticast mode
[  740.827811][T17123] overlayfs: missing 'lowerdir'
[  740.835053][T17123] tmpfs: Unknown parameter 'usrquotax|ê£#ŸJÉ0ÏF󼲦åÓýúŠ‘Ó½qH+IÞ#åŒÜؘ^v‚sÝC9*¦ü\¶gˆs·JØmòiÁ€M«ÖÇ|XK¤ä+Ä2‡­ï˜dÌúvŒ$n¡qIïä9R	×'
[  741.151256][T17133] netlink: 17780 bytes leftover after parsing attributes in process `syz.3.3097'.
[  741.470492][T17143] lo speed is unknown, defaulting to 1000
[  741.895663][T17155] netlink: 17780 bytes leftover after parsing attributes in process `syz.1.3106'.
[  741.955393][T17159] x_tables: duplicate underflow at hook 1
[  741.986613][T17160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3102'.
[  742.363923][   T24] usb 9-1: new high-speed USB device number 39 using dummy_hcd
[  742.396324][T17168] x_tables: duplicate underflow at hook 1
[  742.535566][   T24] usb 9-1: config index 0 descriptor too short (expected 39, got 27)
[  742.539313][   T24] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  742.543507][   T24] usb 9-1: config 0 interface 0 has no altsetting 0
[  742.574826][   T24] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  742.577750][   T24] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  742.580516][   T24] usb 9-1: Product: syz
[  742.582160][   T24] usb 9-1: Manufacturer: syz
[  742.584285][   T24] usb 9-1: SerialNumber: syz
[  742.587089][   T24] usb 9-1: config 0 descriptor??
[  742.592041][   T24] hub 9-1:0.0: bad descriptor, ignoring hub
[  742.594227][   T24] hub 9-1:0.0: probe with driver hub failed with error -5
[  742.597868][   T24] usb 9-1: selecting invalid altsetting 0
[  742.772138][T17178] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  742.792580][T17179] 8021q: adding VLAN 0 to HW filter on device bond0
[  742.801750][T17179] 8021q: adding VLAN 0 to HW filter on device team0
[  742.824101][T17179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  742.904021][T15221] usb 9-1: USB disconnect, device number 39
[  743.044318][T17185] FAULT_INJECTION: forcing a failure.
[  743.044318][T17185] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  743.052437][T17185] CPU: 0 UID: 0 PID: 17185 Comm: syz.3.3114 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  743.052457][T17185] Tainted: [L]=SOFTLOCKUP
[  743.052461][T17185] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  743.052468][T17185] Call Trace:
[  743.052472][T17185]  <TASK>
[  743.052477][T17185]  dump_stack_lvl+0x16c/0x1f0
[  743.052499][T17185]  should_fail_ex+0x512/0x640
[  743.052515][T17185]  _copy_from_user+0x2e/0xd0
[  743.052529][T17185]  kstrtouint_from_user+0xd6/0x1d0
[  743.052546][T17185]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  743.052562][T17185]  ? __lock_acquire+0x436/0x2890
[  743.052580][T17185]  proc_fail_nth_write+0x83/0x220
[  743.052593][T17185]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  743.052607][T17185]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  743.052618][T17185]  vfs_write+0x2a0/0x11d0
[  743.052635][T17185]  ? __pfx___mutex_lock+0x10/0x10
[  743.052648][T17185]  ? __pfx_vfs_write+0x10/0x10
[  743.052662][T17185]  ? find_held_lock+0x2b/0x80
[  743.052681][T17185]  ? __fget_files+0x20e/0x3c0
[  743.052702][T17185]  ksys_write+0x12a/0x250
[  743.052718][T17185]  ? __pfx_ksys_write+0x10/0x10
[  743.052735][T17185]  ? do_user_addr_fault+0x843/0x1370
[  743.052752][T17185]  __do_fast_syscall_32+0xe8/0x680
[  743.052764][T17185]  do_fast_syscall_32+0x32/0x80
[  743.052776][T17185]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  743.052791][T17185] RIP: 0023:0xf7f35579
[  743.052800][T17185] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  743.052811][T17185] RSP: 002b:00000000f5426590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004
[  743.052822][T17185] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5426620
[  743.052829][T17185] RDX: 0000000000000001 RSI: 00000000f73c6ff4 RDI: 0000000000000000
[  743.052836][T17185] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  743.052842][T17185] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  743.052849][T17185] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  743.052863][T17185]  </TASK>
[  744.394026][T15221] usb 9-1: new full-speed USB device number 40 using dummy_hcd
[  744.555483][T15221] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 4
[  744.559382][T15221] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 13368, setting to 1023
[  744.565901][T15221] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  744.569294][T15221] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  744.572494][T15221] usb 9-1: Product: syz
[  744.574221][T15221] usb 9-1: Manufacturer: syz
[  744.576171][T15221] usb 9-1: SerialNumber: syz
[  744.580982][T15221] usb 9-1: config 0 descriptor??
[  744.585737][T15221] hub 9-1:0.0: bad descriptor, ignoring hub
[  744.588375][T15221] hub 9-1:0.0: probe with driver hub failed with error -5
[  744.594255][T15221] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input32
[  745.252334][T17209] FAULT_INJECTION: forcing a failure.
[  745.252334][T17209] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  745.256893][T17209] CPU: 0 UID: 0 PID: 17209 Comm: syz.3.3121 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  745.256917][T17209] Tainted: [L]=SOFTLOCKUP
[  745.256923][T17209] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  745.256934][T17209] Call Trace:
[  745.256940][T17209]  <TASK>
[  745.256954][T17209]  dump_stack_lvl+0x16c/0x1f0
[  745.256988][T17209]  should_fail_ex+0x512/0x640
[  745.257012][T17209]  _copy_from_user+0x2e/0xd0
[  745.257026][T17209]  cec_ioctl+0xf02/0x2970
[  745.257045][T17209]  ? __pfx_cec_ioctl+0x10/0x10
[  745.257063][T17209]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  745.257082][T17209]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  745.257101][T17209]  ? do_vfs_ioctl+0x128/0x14f0
[  745.257116][T17209]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  745.257133][T17209]  ? find_held_lock+0x2b/0x80
[  745.257148][T17209]  ? hook_file_ioctl_common+0x144/0x410
[  745.257165][T17209]  ? __fget_files+0x20e/0x3c0
[  745.257180][T17209]  ? __fput_deferred+0x420/0x480
[  745.257194][T17209]  ? __pfx_cec_ioctl+0x10/0x10
[  745.257212][T17209]  __ia32_compat_sys_ioctl+0x242/0x370
[  745.257228][T17209]  __do_fast_syscall_32+0xe8/0x680
[  745.257241][T17209]  do_fast_syscall_32+0x32/0x80
[  745.257252][T17209]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  745.257267][T17209] RIP: 0023:0xf7f35579
[  745.257277][T17209] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  745.257288][T17209] RSP: 002b:00000000f540555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  745.257299][T17209] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c0386105
[  745.257308][T17209] RDX: 0000000080000d40 RSI: 0000000000000000 RDI: 0000000000000000
[  745.257318][T17209] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  745.257327][T17209] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  745.257337][T17209] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  745.257361][T17209]  </TASK>
[  745.494212][ T6027] usb 8-1: new full-speed USB device number 36 using dummy_hcd
[  745.646601][ T6027] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 4
[  745.650140][ T6027] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 13368, setting to 1023
[  745.656767][ T6027] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  745.659716][ T6027] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  745.662501][ T6027] usb 8-1: Product: syz
[  745.664537][ T6027] usb 8-1: Manufacturer: syz
[  745.666203][ T6027] usb 8-1: SerialNumber: syz
[  745.674463][ T6027] usb 8-1: config 0 descriptor??
[  745.677106][ T6027] hub 8-1:0.0: bad descriptor, ignoring hub
[  745.678996][ T6027] hub 8-1:0.0: probe with driver hub failed with error -5
[  745.682966][ T6027] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input33
[  747.264095][   T63] usb 9-1: USB disconnect, device number 40
[  748.314198][   T61] usb 8-1: USB disconnect, device number 36
[  749.143728][T17243] overlay: ./bus is not a directory
[  749.163814][T17247] netlink: zone id is out of range
[  749.251805][T17247] netlink: set zone limit has 4 unknown bytes
[  749.658438][T17250] fuse: Unknown parameter '0x0000000000000003'
[  749.701675][T17252] netlink: 17780 bytes leftover after parsing attributes in process `syz.3.3135'.
[  749.737039][T17254] batadv1: entered allmulticast mode
[  749.740145][T17254] 8021q: adding VLAN 0 to HW filter on device batadv1
[  749.785278][T17255] bridge0: port 4(syz_tun) entered blocking state
[  749.787446][T17255] bridge0: port 4(syz_tun) entered disabled state
[  749.789580][T17255] syz_tun: entered allmulticast mode
[  749.792298][T17255] syz_tun: entered promiscuous mode
[  749.799843][T17255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3136'.
[  749.950291][T17257] FAULT_INJECTION: forcing a failure.
[  749.950291][T17257] name failslab, interval 1, probability 0, space 0, times 0
[  749.955553][T17257] CPU: 1 UID: 0 PID: 17257 Comm: syz.2.3137 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  749.955571][T17257] Tainted: [L]=SOFTLOCKUP
[  749.955575][T17257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  749.955582][T17257] Call Trace:
[  749.955587][T17257]  <TASK>
[  749.955591][T17257]  dump_stack_lvl+0x16c/0x1f0
[  749.955613][T17257]  should_fail_ex+0x512/0x640
[  749.955627][T17257]  ? kmem_cache_alloc_lru_noprof+0x66/0x770
[  749.955643][T17257]  should_failslab+0xc2/0x120
[  749.955660][T17257]  kmem_cache_alloc_lru_noprof+0x87/0x770
[  749.955675][T17257]  ? alloc_inode+0x64/0x240
[  749.955690][T17257]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  749.955713][T17257]  ? alloc_inode+0x64/0x240
[  749.955729][T17257]  alloc_inode+0x64/0x240
[  749.955747][T17257]  new_inode+0x22/0x1c0
[  749.955769][T17257]  __debugfs_create_file+0x105/0x530
[  749.955792][T17257]  debugfs_create_file_full+0x41/0x60
[  749.955812][T17257]  ? __pfx_ppp_setup+0x10/0x10
[  749.955836][T17257]  ref_tracker_dir_debugfs+0x19d/0x2f0
[  749.955859][T17257]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  749.955904][T17257]  ? alloc_netdev_mqs+0xd7/0x1550
[  749.955931][T17257]  ? lockdep_init_map_type+0x5c/0x270
[  749.955954][T17257]  alloc_netdev_mqs+0x314/0x1550
[  749.955981][T17257]  ? ppp_ioctl+0x1626/0x2880
[  749.956011][T17257]  ppp_ioctl+0x168f/0x2880
[  749.956038][T17257]  ? __mutex_unlock_slowpath+0x161/0x790
[  749.956058][T17257]  ? __pfx_ppp_ioctl+0x10/0x10
[  749.956085][T17257]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  749.956116][T17257]  ppp_compat_ioctl+0x110/0x400
[  749.956144][T17257]  ? __pfx_ppp_compat_ioctl+0x10/0x10
[  749.956175][T17257]  ? __fget_files+0x20e/0x3c0
[  749.956199][T17257]  ? __fput_deferred+0x420/0x480
[  749.956223][T17257]  ? __pfx_ppp_compat_ioctl+0x10/0x10
[  749.956257][T17257]  __ia32_compat_sys_ioctl+0x242/0x370
[  749.956283][T17257]  __do_fast_syscall_32+0xe8/0x680
[  749.956305][T17257]  do_fast_syscall_32+0x32/0x80
[  749.956323][T17257]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  749.956346][T17257] RIP: 0023:0xf7f25579
[  749.956361][T17257] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  749.956379][T17257] RSP: 002b:00000000f541655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  749.956397][T17257] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c004743e
[  749.956409][T17257] RDX: 000000000c230000 RSI: 0000000000000000 RDI: 0000000000000000
[  749.956420][T17257] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  749.956431][T17257] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  749.956442][T17257] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  749.956467][T17257]  </TASK>
[  749.956475][T17257] debugfs: out of free dentries, can not create file 'netdev@ffff888059484618'
[  750.001327][T17259] FAULT_INJECTION: forcing a failure.
[  750.001327][T17259] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  750.064886][T17259] CPU: 0 UID: 0 PID: 17259 Comm: syz.3.3138 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  750.064905][T17259] Tainted: [L]=SOFTLOCKUP
[  750.064909][T17259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  750.064916][T17259] Call Trace:
[  750.064920][T17259]  <TASK>
[  750.064925][T17259]  dump_stack_lvl+0x16c/0x1f0
[  750.064947][T17259]  should_fail_ex+0x512/0x640
[  750.064963][T17259]  strncpy_from_user+0x3b/0x2e0
[  750.064976][T17259]  strncpy_from_user_nofault+0x7f/0x180
[  750.064992][T17259]  bpf_bprintf_prepare+0xe90/0x13f0
[  750.065009][T17259]  ? kasan_save_track+0x14/0x30
[  750.065025][T17259]  ? __pfx_bpf_bprintf_prepare+0x10/0x10
[  750.065037][T17259]  ? call_usermodehelper_exec+0x21d/0x4d0
[  750.065051][T17259]  ? dev_load+0x1ff/0x240
[  750.065066][T17259]  ? dev_ioctl+0x40c/0x1060
[  750.065079][T17259]  ? sock_do_ioctl+0x19d/0x280
[  750.065097][T17259]  ? __ia32_compat_sys_ioctl+0x242/0x370
[  750.065111][T17259]  ? __do_fast_syscall_32+0xe8/0x680
[  750.065126][T17259]  ? bpf_trace_run2+0x3f9/0x5c0
[  750.065143][T17259]  bpf_trace_printk+0xda/0x190
[  750.065162][T17259]  ? __pfx_bpf_trace_printk+0x10/0x10
[  750.065180][T17259]  ? bpf_trace_run2+0x3f9/0x5c0
[  750.065200][T17259]  bpf_prog_930ede9872f2967c+0x3e/0x44
[  750.065211][T17259]  bpf_trace_run2+0x239/0x5c0
[  750.065228][T17259]  ? __pfx_bpf_trace_run2+0x10/0x10
[  750.065247][T17259]  ? __lock_acquire+0x436/0x2890
[  750.065260][T17259]  __bpf_trace_contention_begin+0xc9/0x110
[  750.065272][T17259]  ? __pfx___bpf_trace_contention_begin+0x10/0x10
[  750.065285][T17259]  ? lock_acquire+0x179/0x330
[  750.065297][T17259]  ? __pfx___might_resched+0x10/0x10
[  750.065313][T17259]  ? __pfx_up+0x10/0x10
[  750.065324][T17259]  trace_contention_begin+0xc1/0x110
[  750.065336][T17259]  __mutex_lock+0x1b7/0x1ca0
[  750.065346][T17259]  ? dev_ioctl+0x45e/0x1060
[  750.065361][T17259]  ? __request_module+0x182/0x660
[  750.065375][T17259]  ? dev_ioctl+0x45e/0x1060
[  750.065388][T17259]  ? __pfx___request_module+0x10/0x10
[  750.065404][T17259]  ? __pfx___mutex_lock+0x10/0x10
[  750.065419][T17259]  ? apparmor_capable+0x1d7/0x4e0
[  750.065432][T17259]  ? bpf_lsm_capable+0x9/0x10
[  750.065450][T17259]  ? dev_ioctl+0x45e/0x1060
[  750.065463][T17259]  ? rtnl_lock+0x9/0x20
[  750.065474][T17259]  dev_ioctl+0x45e/0x1060
[  750.065489][T17259]  sock_do_ioctl+0x19d/0x280
[  750.065506][T17259]  ? __pfx_sock_do_ioctl+0x10/0x10
[  750.065524][T17259]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  750.065544][T17259]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  750.065561][T17259]  ? unix_ioctl+0x9f/0x580
[  750.065572][T17259]  compat_sock_ioctl+0x301/0x730
[  750.065585][T17259]  ? __pfx_compat_sock_ioctl+0x10/0x10
[  750.065596][T17259]  ? hook_file_ioctl_common+0x144/0x410
[  750.065613][T17259]  ? __fget_files+0x20e/0x3c0
[  750.065628][T17259]  ? __fput_deferred+0x420/0x480
[  750.065643][T17259]  ? __pfx_compat_sock_ioctl+0x10/0x10
[  750.065654][T17259]  __ia32_compat_sys_ioctl+0x242/0x370
[  750.065670][T17259]  __do_fast_syscall_32+0xe8/0x680
[  750.065682][T17259]  do_fast_syscall_32+0x32/0x80
[  750.065693][T17259]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  750.065707][T17259] RIP: 0023:0xf7f35579
[  750.065717][T17259] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  750.065728][T17259] RSP: 002b:00000000f542655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  750.065739][T17259] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008923
[  750.065746][T17259] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000
[  750.065753][T17259] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  750.065759][T17259] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  750.065765][T17259] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  750.065779][T17259]  </TASK>
[  750.589132][T17277] fuse: Unknown parameter '0x0000000000000003'
[  750.951546][T17284] netlink: zone id is out of range
[  751.016015][T17284] netlink: set zone limit has 4 unknown bytes
[  751.741713][T17289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3146'.
[  751.761466][T17289] macvlan2: entered allmulticast mode
[  751.763278][T17289] veth1_vlan: entered allmulticast mode
[  751.808613][ T1416] ieee802154 phy1 wpan1: encryption failed: -22
[  751.988063][T17289] veth1_vlan: left allmulticast mode
[  752.629273][T17311] netlink: 'syz.1.3152': attribute type 4 has an invalid length.
[  753.114118][   T61] usb 8-1: new high-speed USB device number 37 using dummy_hcd
[  753.278864][   T61] usb 8-1: config 0 has no interfaces?
[  753.289845][   T61] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  753.293975][   T61] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  753.311774][T17326] fuse: Unknown parameter 'fd0x0000000000000003'
[  753.329879][   T61] usb 8-1: config 0 descriptor??
[  753.600586][T17315] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  753.624876][T17315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3153'.
[  753.643341][   T29] usb 8-1: USB disconnect, device number 37
[  753.885527][ T5958] Bluetooth: hci1: command 0x206a tx timeout
[  754.371649][   T35] block nbd0: Possible stuck request ffff888026780000: control (read@0,4096B). Runtime 150 seconds
[  754.788375][T17357] netlink: 'syz.3.3166': attribute type 12 has an invalid length.
[  754.928552][T17359] netlink: 'syz.4.3167': attribute type 10 has an invalid length.
[  754.958352][   T40] kauditd_printk_skb: 203 callbacks suppressed
[  754.958371][   T40] audit: type=1800 audit(1768785296.939:1556): pid=17361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3168" name="file1" dev="tmpfs" ino=2815 res=0 errno=0
[  755.068264][T17365] random: crng reseeded on system resumption
[  755.208910][T17368] FAULT_INJECTION: forcing a failure.
[  755.208910][T17368] name failslab, interval 1, probability 0, space 0, times 0
[  755.214165][T17368] CPU: 0 UID: 0 PID: 17368 Comm: syz.4.3171 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  755.214193][T17368] Tainted: [L]=SOFTLOCKUP
[  755.214199][T17368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  755.214210][T17368] Call Trace:
[  755.214216][T17368]  <TASK>
[  755.214224][T17368]  dump_stack_lvl+0x16c/0x1f0
[  755.214255][T17368]  should_fail_ex+0x512/0x640
[  755.214275][T17368]  ? __kmalloc_cache_noprof+0x5f/0x800
[  755.214297][T17368]  should_failslab+0xc2/0x120
[  755.214323][T17368]  __kmalloc_cache_noprof+0x80/0x800
[  755.214343][T17368]  ? allocate_cgrp_cset_links+0xca/0x230
[  755.214373][T17368]  ? allocate_cgrp_cset_links+0xca/0x230
[  755.214398][T17368]  allocate_cgrp_cset_links+0xca/0x230
[  755.214427][T17368]  find_css_set+0x785/0x1c70
[  755.214454][T17368]  ? __pfx_find_css_set+0x10/0x10
[  755.214471][T17368]  ? lockdep_hardirqs_on+0x7c/0x110
[  755.214497][T17368]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  755.214540][T17368]  cgroup_migrate_prepare_dst+0x10b/0x7f0
[  755.214567][T17368]  cgroup_update_dfl_csses+0x30a/0x650
[  755.214593][T17368]  ? __pfx_cgroup_update_dfl_csses+0x10/0x10
[  755.214632][T17368]  cgroup_subtree_control_write+0xbbf/0xef0
[  755.214663][T17368]  ? __pfx_cgroup_subtree_control_write+0x10/0x10
[  755.214689][T17368]  ? kernfs_root+0xf8/0x2a0
[  755.214713][T17368]  cgroup_file_write+0x1ef/0x7a0
[  755.214729][T17368]  ? __pfx_cgroup_subtree_control_write+0x10/0x10
[  755.214754][T17368]  ? __pfx_cgroup_file_write+0x10/0x10
[  755.214770][T17368]  ? __kmalloc_noprof+0x35d/0x910
[  755.214795][T17368]  kernfs_fop_write_iter+0x3af/0x570
[  755.214819][T17368]  ? __pfx_cgroup_file_write+0x10/0x10
[  755.214839][T17368]  vfs_write+0x7d3/0x11d0
[  755.214889][T17368]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  755.214918][T17368]  ? __pfx_vfs_write+0x10/0x10
[  755.214939][T17368]  ? find_held_lock+0x2b/0x80
[  755.214977][T17368]  ksys_write+0x12a/0x250
[  755.215000][T17368]  ? __pfx_ksys_write+0x10/0x10
[  755.215026][T17368]  ? do_user_addr_fault+0x843/0x1370
[  755.215051][T17368]  __do_fast_syscall_32+0xe8/0x680
[  755.215070][T17368]  do_fast_syscall_32+0x32/0x80
[  755.215088][T17368]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  755.215109][T17368] RIP: 0023:0xf70ad579
[  755.215123][T17368] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  755.215139][T17368] RSP: 002b:00000000f549d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004
[  755.215156][T17368] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000300
[  755.215167][T17368] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000
[  755.215177][T17368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  755.215186][T17368] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  755.215196][T17368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  755.215220][T17368]  </TASK>
[  755.417769][T17371] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.3172'.
[  755.421084][T17372] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.3172'.
[  755.429120][T17371] ieee802154 phy1 wpan1: encryption failed: -90
[  755.848022][T17391] siw: device registration error -23
[  755.970605][T17393] Restarting kernel threads ...
[  755.975307][T17393] Done restarting kernel threads.
[  757.079675][T17398] syzkaller0: entered promiscuous mode
[  757.081470][T17398] syzkaller0: entered allmulticast mode
[  757.353055][T17402] netlink: 'syz.2.3183': attribute type 11 has an invalid length.
[  757.356306][T17402] netlink: 448 bytes leftover after parsing attributes in process `syz.2.3183'.
[  757.428791][T17406] netlink: zone id is out of range
[  757.545309][T17406] netlink: set zone limit has 4 unknown bytes
[  757.686251][T17413] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3185'.
[  757.888482][T17419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3186'.
[  757.892730][T17419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3186'.
[  758.155774][T13847] udevd[13847]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  758.169405][T13847] udevd[13847]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  758.616430][T17433] netlink: 'syz.4.3189': attribute type 12 has an invalid length.
[  758.684286][ T5954] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  758.689292][ T5954] Bluetooth: hci3: Injecting HCI hardware error event
[  758.693550][ T5954] Bluetooth: hci3: hardware error 0x00
[  759.213461][T17446] Bluetooth: MGMT ver 1.23
[  759.864368][T17460] netlink: zone id is out of range
[  759.886256][T17460] netlink: set zone limit has 4 unknown bytes
[  760.258635][T17465] FAULT_INJECTION: forcing a failure.
[  760.258635][T17465] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  760.266043][T17465] CPU: 2 UID: 0 PID: 17465 Comm: syz.2.3199 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  760.266063][T17465] Tainted: [L]=SOFTLOCKUP
[  760.266067][T17465] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  760.266074][T17465] Call Trace:
[  760.266078][T17465]  <TASK>
[  760.266084][T17465]  dump_stack_lvl+0x16c/0x1f0
[  760.266106][T17465]  should_fail_ex+0x512/0x640
[  760.266122][T17465]  should_fail_alloc_page+0xe7/0x130
[  760.266156][T17465]  prepare_alloc_pages+0x401/0x670
[  760.266181][T17465]  ? rcu_is_watching+0x12/0xc0
[  760.266199][T17465]  __alloc_frozen_pages_noprof+0x18b/0x2430
[  760.266214][T17465]  ? cpa_flush+0x19b/0x980
[  760.266229][T17465]  ? __pfx_cpa_flush+0x10/0x10
[  760.266243][T17465]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  760.266259][T17465]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  760.266279][T17465]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  760.266298][T17465]  ? policy_nodemask+0xea/0x4e0
[  760.266315][T17465]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  760.266333][T17465]  ? policy_nodemask+0xea/0x4e0
[  760.266351][T17465]  alloc_pages_mpol+0x1fb/0x550
[  760.266369][T17465]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  760.266387][T17465]  ? alloc_pages_noprof+0x23c/0x390
[  760.266406][T17465]  alloc_pages_noprof+0x131/0x390
[  760.266423][T17465]  kimage_alloc_pages+0x74/0x350
[  760.266442][T17465]  kimage_alloc_page+0x14b/0x920
[  760.266462][T17465]  kimage_load_segment+0x78e/0xdd0
[  760.266484][T17465]  do_kexec_load+0x69e/0x860
[  760.266495][T17465]  ? __pfx_do_kexec_load+0x10/0x10
[  760.266509][T17465]  __ia32_compat_sys_kexec_load+0x37f/0x400
[  760.266523][T17465]  ? __pfx___ia32_compat_sys_kexec_load+0x10/0x10
[  760.266539][T17465]  __do_fast_syscall_32+0xe8/0x680
[  760.266552][T17465]  do_fast_syscall_32+0x32/0x80
[  760.266563][T17465]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  760.266578][T17465] RIP: 0023:0xf7f25579
[  760.266587][T17465] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  760.266609][T17465] RSP: 002b:00000000f53f555c EFLAGS: 00000296 ORIG_RAX: 000000000000011b
[  760.266621][T17465] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000001
[  760.266627][T17465] RDX: 00000000800012c0 RSI: 0000000000160000 RDI: 0000000000000000
[  760.266634][T17465] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  760.266641][T17465] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  760.266647][T17465] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  760.266661][T17465]  </TASK>
[  760.764292][ T5954] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  761.360426][T17476] netlink: 300 bytes leftover after parsing attributes in process `syz.2.3202'.
[  761.446956][T17481] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3202'.
[  762.774491][T17504] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10)
[  762.776674][T17504] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  762.779470][T17504] vhci_hcd vhci_hcd.0: Device attached
[  762.782261][T17504] random: crng reseeded on system resumption
[  762.791709][T17506] vhci_hcd: connection closed
[  762.794510][ T1144] vhci_hcd vhci_hcd.4: stop threads
[  762.797890][ T1144] vhci_hcd vhci_hcd.4: release socket
[  762.799585][ T1144] vhci_hcd vhci_hcd.4: disconnect device
[  763.645491][T17517] Invalid logical block size (51711)
[  763.963701][T17531] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  764.801287][T17535] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  764.803919][T17535] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  764.814302][T17535] vhci_hcd vhci_hcd.0: Device attached
[  765.076467][T15193] usb 39-1: new low-speed USB device number 5 using vhci_hcd
[  765.181820][T17535] could not allocate digest TFM handle sha224-neon
[  765.251621][T17536] vhci_hcd: connection reset by peer
[  765.254248][ T1141] vhci_hcd vhci_hcd.1: stop threads
[  765.257743][ T1141] vhci_hcd vhci_hcd.1: release socket
[  765.262222][ T1141] vhci_hcd vhci_hcd.1: disconnect device
[  765.825666][T17557] FAULT_INJECTION: forcing a failure.
[  765.825666][T17557] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  765.831069][T17557] CPU: 3 UID: 0 PID: 17557 Comm: syz.4.3226 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  765.831096][T17557] Tainted: [L]=SOFTLOCKUP
[  765.831102][T17557] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  765.831113][T17557] Call Trace:
[  765.831119][T17557]  <TASK>
[  765.831126][T17557]  dump_stack_lvl+0x16c/0x1f0
[  765.831156][T17557]  should_fail_ex+0x512/0x640
[  765.831179][T17557]  _copy_from_iter+0x2a4/0x16c0
[  765.831202][T17557]  ? __alloc_skb+0x220/0x410
[  765.831220][T17557]  ? __alloc_skb+0x35d/0x410
[  765.831239][T17557]  ? __pfx__copy_from_iter+0x10/0x10
[  765.831258][T17557]  ? netlink_autobind.isra.0+0x158/0x370
[  765.831291][T17557]  netlink_sendmsg+0x820/0xdd0
[  765.831319][T17557]  ? __pfx_netlink_sendmsg+0x10/0x10
[  765.831346][T17557]  ? aa_sock_msg_perm.constprop.0+0x100/0x1b0
[  765.831378][T17557]  ____sys_sendmsg+0xa5d/0xc30
[  765.831397][T17557]  ? __pfx_____sys_sendmsg+0x10/0x10
[  765.831412][T17557]  ? get_compat_msghdr+0x11a/0x170
[  765.831445][T17557]  ___sys_sendmsg+0x134/0x1d0
[  765.831465][T17557]  ? __pfx____sys_sendmsg+0x10/0x10
[  765.831487][T17557]  ? find_held_lock+0x2b/0x80
[  765.831512][T17557]  __sys_sendmsg+0x16d/0x220
[  765.831527][T17557]  ? __pfx___sys_sendmsg+0x10/0x10
[  765.831547][T17557]  ? rcu_is_watching+0x12/0xc0
[  765.831567][T17557]  __do_fast_syscall_32+0xe8/0x680
[  765.831580][T17557]  do_fast_syscall_32+0x32/0x80
[  765.831592][T17557]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  765.831606][T17557] RIP: 0023:0xf70ad579
[  765.831615][T17557] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  765.831626][T17557] RSP: 002b:00000000f547c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  765.831638][T17557] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080001ac0
[  765.831646][T17557] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  765.831652][T17557] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  765.831659][T17557] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  765.831665][T17557] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  765.831680][T17557]  </TASK>
[  766.431720][T17566] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  767.253892][T17588] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  767.256175][T17588] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  767.256987][T17587] lo speed is unknown, defaulting to 1000
[  767.258800][T17588] vhci_hcd vhci_hcd.0: Device attached
[  767.281547][T17588] overlayfs: failed to resolve './bus': -2
[  767.332544][T17596] program syz.1.3237 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  767.342559][T17596] usb usb8: usbfs: process 17596 (syz.1.3237) did not claim interface 0 before use
[  767.410701][T17587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3235'.
[  767.513880][   T24] usb 43-1: new low-speed USB device number 6 using vhci_hcd
[  767.644936][T17589] vhci_hcd: connection reset by peer
[  767.656217][   T60] vhci_hcd vhci_hcd.3: stop threads
[  767.657909][   T60] vhci_hcd vhci_hcd.3: release socket
[  767.663828][   T60] vhci_hcd vhci_hcd.3: disconnect device
[  768.067101][T17627] netlink: 'syz.4.3245': attribute type 1 has an invalid length.
[  768.093651][T17627] 8021q: adding VLAN 0 to HW filter on device bond1
[  769.371473][T17643] netlink: zone id is out of range
[  769.421010][T17643] netlink: set zone limit has 4 unknown bytes
[  770.194278][T15193] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  770.433936][   T61] usb 9-1: new high-speed USB device number 41 using dummy_hcd
[  771.489406][T17671] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  771.814624][T17682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3265'.
[  771.905598][ T5958] block nbd1: Receive control failed (result -107)
[  772.593981][   T24] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  772.604057][   T61] usb 9-1: Using ep0 maxpacket: 8
[  772.611619][T17702] cgroup2: Unknown parameter 'pids_ÉlocalÊ¥aq"*'
[  772.616144][   T61] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  772.620869][   T61] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  772.633903][   T61] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  772.638149][   T61] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  772.643714][   T61] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  772.647900][   T61] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  772.929247][   T61] usb 9-1: usb_control_msg returned -32
[  772.933858][   T61] usbtmc 9-1:16.0: can't read capabilities
[  774.157748][T17737] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3282'.
[  774.437295][   T24] usb 9-1: USB disconnect, device number 41
[  774.690787][T17749] netlink: 'syz.4.3286': attribute type 12 has an invalid length.
[  775.503337][T17761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  776.369920][   T40] audit: type=1326 audit(1768785318.349:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17762 comm="syz.4.3291" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ad579 code=0x0
[  776.455453][T17767] /dev/nullb0: Can't open blockdev
[  777.389097][T17781] siw: device registration error -23
[  777.407243][T17782] netlink: 'syz.4.3295': attribute type 12 has an invalid length.
[  777.496689][ T5954] Bluetooth: hci4: command 0x040f tx timeout
[  778.493016][T17796] netlink: 'syz.4.3300': attribute type 16 has an invalid length.
[  778.498610][T17796] netlink: 'syz.4.3300': attribute type 17 has an invalid length.
[  778.504465][T17796] netlink: 'syz.4.3300': attribute type 27 has an invalid length.
[  778.541528][T17796] 8021q: adding VLAN 0 to HW filter on device bond0
[  778.547778][T17796] 8021q: adding VLAN 0 to HW filter on device team0
[  778.556125][T17796] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  779.194528][T17812] FAULT_INJECTION: forcing a failure.
[  779.194528][T17812] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  779.200057][T17812] CPU: 2 UID: 0 PID: 17812 Comm: syz.2.3306 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  779.200086][T17812] Tainted: [L]=SOFTLOCKUP
[  779.200093][T17812] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  779.200104][T17812] Call Trace:
[  779.200112][T17812]  <TASK>
[  779.200119][T17812]  dump_stack_lvl+0x16c/0x1f0
[  779.200153][T17812]  should_fail_ex+0x512/0x640
[  779.200179][T17812]  _copy_from_user+0x2e/0xd0
[  779.200201][T17812]  kstrtouint_from_user+0xd6/0x1d0
[  779.200228][T17812]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  779.200253][T17812]  ? __lock_acquire+0x436/0x2890
[  779.200285][T17812]  proc_fail_nth_write+0x83/0x220
[  779.200305][T17812]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  779.200330][T17812]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  779.200347][T17812]  vfs_write+0x2a0/0x11d0
[  779.200376][T17812]  ? __pfx___mutex_lock+0x10/0x10
[  779.200396][T17812]  ? __pfx_vfs_write+0x10/0x10
[  779.200420][T17812]  ? find_held_lock+0x2b/0x80
[  779.200452][T17812]  ? __fget_files+0x20e/0x3c0
[  779.200485][T17812]  ksys_write+0x12a/0x250
[  779.200510][T17812]  ? __pfx_ksys_write+0x10/0x10
[  779.200544][T17812]  __do_fast_syscall_32+0xe8/0x680
[  779.200565][T17812]  do_fast_syscall_32+0x32/0x80
[  779.200584][T17812]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  779.200607][T17812] RIP: 0023:0xf7f25579
[  779.200622][T17812] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  779.200640][T17812] RSP: 002b:00000000f5416590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004
[  779.200658][T17812] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5416620
[  779.200670][T17812] RDX: 0000000000000001 RSI: 00000000f73b6ff4 RDI: 0000000000000000
[  779.200681][T17812] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  779.200697][T17812] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  779.200709][T17812] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  779.200734][T17812]  </TASK>
[  779.733911][   T24] usb 8-1: new high-speed USB device number 38 using dummy_hcd
[  779.753913][    T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  779.885792][   T24] usb 8-1: unable to get BOS descriptor or descriptor too short
[  779.889979][   T24] usb 8-1: config 6 has an invalid interface number: 158 but max is 0
[  779.893558][   T24] usb 8-1: config 6 has no interface number 0
[  779.895610][   T24] usb 8-1: config 6 interface 158 has no altsetting 0
[  779.899952][   T24] usb 8-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29
[  779.904115][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  779.907469][   T24] usb 8-1: Product: syz
[  779.909249][   T24] usb 8-1: Manufacturer: syz
[  779.911247][   T24] usb 8-1: SerialNumber: syz
[  779.916520][    T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  779.923872][    T9] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  779.927936][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  779.933872][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  779.938219][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  779.954949][    T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  779.957832][    T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  779.960360][    T9] usb 6-1: Product: syz
[  779.961700][    T9] usb 6-1: Manufacturer: syz
[  779.981165][    T9] cdc_wdm 6-1:1.0: skipping garbage
[  779.982865][    T9] cdc_wdm 6-1:1.0: skipping garbage
[  779.986685][    T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  779.988592][    T9] cdc_wdm 6-1:1.0: Unknown control protocol
[  780.044968][T17829] lo speed is unknown, defaulting to 1000
[  780.183550][    C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  780.185690][    C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  780.187770][    C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  780.189579][    C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  780.191722][    C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  780.193735][    C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  780.195857][    C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  780.197918][    C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  780.200053][    C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  780.202110][    C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  780.204235][    C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  780.206315][    C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  780.208410][    C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  780.210463][    C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  780.212570][    C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  780.214659][    C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  780.217086][    C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  780.219181][    C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  780.221339][    C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  780.224033][    C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  780.226929][T15193] usb 6-1: USB disconnect, device number 21
[  780.228873][    C2] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  781.394366][   T24] rtsx_usb 8-1:6.158: probe with driver rtsx_usb failed with error -110
[  782.147213][T17863] netlink: zone id is out of range
[  782.177416][T17863] netlink: set zone limit has 4 unknown bytes
[  782.520000][ T6050] usb 8-1: USB disconnect, device number 38
[  783.227826][T17879] 8021q: adding VLAN 0 to HW filter on device bond2
[  784.462654][   T35] block nbd0: Possible stuck request ffff888026780000: control (read@0,4096B). Runtime 180 seconds
[  784.654984][T17906] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3333'.
[  784.835272][T17915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3335'.
[  784.853686][T17915] lo speed is unknown, defaulting to 1000
[  785.619543][T17915] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3335'.
[  786.104253][T17944] FAULT_INJECTION: forcing a failure.
[  786.104253][T17944] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  786.109959][T17944] CPU: 2 UID: 0 PID: 17944 Comm: syz.2.3344 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  786.110000][T17944] Tainted: [L]=SOFTLOCKUP
[  786.110008][T17944] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  786.110021][T17944] Call Trace:
[  786.110028][T17944]  <TASK>
[  786.110037][T17944]  dump_stack_lvl+0x16c/0x1f0
[  786.110071][T17944]  should_fail_ex+0x512/0x640
[  786.110098][T17944]  _copy_from_user+0x2e/0xd0
[  786.110122][T17944]  futex_parse_waitv+0x101/0x520
[  786.110147][T17944]  ? __pfx_futex_wake_mark+0x10/0x10
[  786.110174][T17944]  ? __pfx_futex_parse_waitv+0x10/0x10
[  786.110195][T17944]  ? rcu_is_watching+0x12/0xc0
[  786.110222][T17944]  ? __kmalloc_noprof+0x35d/0x910
[  786.110245][T17944]  ? trace_irq_enable.constprop.0+0x2f/0x110
[  786.110274][T17944]  ? __do_sys_futex_waitv+0x127/0x2c0
[  786.110302][T17944]  __do_sys_futex_waitv+0x14f/0x2c0
[  786.110326][T17944]  ? __pfx___do_sys_futex_waitv+0x10/0x10
[  786.110354][T17944]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  786.110381][T17944]  ? trace_irq_enable.constprop.0+0x2f/0x110
[  786.110413][T17944]  do_int80_emulation+0x104/0x480
[  786.110451][T17944]  asm_int80_emulation+0x1a/0x20
[  786.110473][T17944] RIP: 0023:0xf7f25579
[  786.110488][T17944] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  786.110506][T17944] RSP: 002b:00000000f53f555c EFLAGS: 00000296 ORIG_RAX: 00000000000001c1
[  786.110526][T17944] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 0000000000000001
[  786.110540][T17944] RDX: 0000000000000000 RSI: 0000000080000240 RDI: 0000000000000001
[  786.110558][T17944] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  786.110569][T17944] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  786.110600][T17944] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  786.110625][T17944]  </TASK>
[  787.604847][T17968] netlink: 'syz.2.3350': attribute type 12 has an invalid length.
[  788.135799][T17978] sg_write: process 777 (syz.3.3355) changed security contexts after opening file descriptor, this is not allowed.
[  788.793306][T17998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3360'.
[  789.334834][T18013] FAULT_INJECTION: forcing a failure.
[  789.334834][T18013] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  789.344722][T18013] CPU: 1 UID: 0 PID: 18013 Comm: syz.1.3364 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  789.344743][T18013] Tainted: [L]=SOFTLOCKUP
[  789.344747][T18013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  789.344754][T18013] Call Trace:
[  789.344758][T18013]  <TASK>
[  789.344763][T18013]  dump_stack_lvl+0x16c/0x1f0
[  789.344785][T18013]  should_fail_ex+0x512/0x640
[  789.344801][T18013]  _copy_to_user+0x32/0xd0
[  789.344815][T18013]  simple_read_from_buffer+0xcb/0x170
[  789.344845][T18013]  proc_fail_nth_read+0x197/0x240
[  789.344875][T18013]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  789.344906][T18013]  ? rw_verify_area+0xcf/0x6c0
[  789.344928][T18013]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  789.344958][T18013]  vfs_read+0x1e4/0xcf0
[  789.344982][T18013]  ? __pfx___mutex_lock+0x10/0x10
[  789.344996][T18013]  ? __pfx_vfs_read+0x10/0x10
[  789.345010][T18013]  ? find_held_lock+0x2b/0x80
[  789.345029][T18013]  ? __fget_files+0x20e/0x3c0
[  789.345049][T18013]  ksys_read+0x12a/0x250
[  789.345065][T18013]  ? __pfx_ksys_read+0x10/0x10
[  789.345081][T18013]  ? fput+0x70/0xf0
[  789.345094][T18013]  __do_fast_syscall_32+0xe8/0x680
[  789.345107][T18013]  do_fast_syscall_32+0x32/0x80
[  789.345118][T18013]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  789.345133][T18013] RIP: 0023:0xf7f72579
[  789.345142][T18013] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  789.345154][T18013] RSP: 002b:00000000f5466590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  789.345165][T18013] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5466620
[  789.345172][T18013] RDX: 000000000000000f RSI: 00000000f7406ff4 RDI: 0000000000000000
[  789.345179][T18013] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  789.345185][T18013] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  789.345192][T18013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  789.345206][T18013]  </TASK>
[  789.814201][T18025] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  789.816342][T18025] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  789.819135][T18025] vhci_hcd vhci_hcd.0: Device attached
[  789.826587][T18024] FAULT_INJECTION: forcing a failure.
[  789.826587][T18024] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  789.830763][T18024] CPU: 2 UID: 0 PID: 18024 Comm: syz.2.3367 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  789.830784][T18024] Tainted: [L]=SOFTLOCKUP
[  789.830788][T18024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  789.830795][T18024] Call Trace:
[  789.830800][T18024]  <TASK>
[  789.830806][T18024]  dump_stack_lvl+0x16c/0x1f0
[  789.830828][T18024]  should_fail_ex+0x512/0x640
[  789.830845][T18024]  _copy_to_user+0x32/0xd0
[  789.830860][T18024]  simple_read_from_buffer+0xcb/0x170
[  789.830878][T18024]  proc_fail_nth_read+0x197/0x240
[  789.830897][T18024]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  789.830917][T18024]  ? rw_verify_area+0xcf/0x6c0
[  789.830932][T18024]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  789.830950][T18024]  vfs_read+0x1e4/0xcf0
[  789.830967][T18024]  ? __pfx___mutex_lock+0x10/0x10
[  789.830979][T18024]  ? __pfx_vfs_read+0x10/0x10
[  789.830994][T18024]  ? find_held_lock+0x2b/0x80
[  789.831012][T18024]  ? __fget_files+0x20e/0x3c0
[  789.831033][T18024]  ksys_read+0x12a/0x250
[  789.831049][T18024]  ? __pfx_ksys_read+0x10/0x10
[  789.831068][T18024]  __do_fast_syscall_32+0xe8/0x680
[  789.831081][T18024]  do_fast_syscall_32+0x32/0x80
[  789.831093][T18024]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  789.831107][T18024] RIP: 0023:0xf7f25579
[  789.831116][T18024] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  789.831127][T18024] RSP: 002b:00000000f5416590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  789.831138][T18024] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f5416620
[  789.831145][T18024] RDX: 000000000000000f RSI: 00000000f73b6ff4 RDI: 0000000000000000
[  789.831152][T18024] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  789.831158][T18024] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  789.831165][T18024] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  789.831179][T18024]  </TASK>
[  789.972751][T18031] fuse: Bad value for 'fd'
[  790.072497][T18026] vhci_hcd: connection closed
[  790.072755][ T1141] vhci_hcd vhci_hcd.4: stop threads
[  790.076127][ T1141] vhci_hcd vhci_hcd.4: release socket
[  790.077996][ T1141] vhci_hcd vhci_hcd.4: disconnect device
[  790.083878][ T6050] usb 46-1: enqueue for inactive port 0
[  790.336195][T18019] Bluetooth: hci0: Opcode 0x080f failed: -4
[  790.339237][T18022] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  790.342638][T18022] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  790.346228][T18022] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  790.575807][ T6050] usb usb46-port1: attempt power cycle
[  790.792045][T18041] lo speed is unknown, defaulting to 1000
[  791.154311][ T6050] usb usb46-port1: unable to enumerate USB device
[  791.580159][T18055] netlink: zone id is out of range
[  791.604968][T18055] netlink: set zone limit has 4 unknown bytes
[  791.750523][T18058] overlay: Bad value for 'verity'
[  791.753221][T18058] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  791.765437][T18058] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  791.768659][T18058] overlayfs: failed to look up (tracing) for ino (-66)
[  791.803926][ T5954] Bluetooth: hci4: command 0x040f tx timeout
[  792.364622][ T5954] Bluetooth: hci1: command 0x206a tx timeout
[  792.711670][T18074] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  792.714404][T18074] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  792.733627][T18074] vhci_hcd vhci_hcd.0: Device attached
[  792.756056][T18077] netlink: 'syz.1.3378': attribute type 12 has an invalid length.
[  793.023932][T15221] usb 44-1: SetAddress Request (26) to port 0
[  793.025960][T15221] usb 44-1: new SuperSpeed USB device number 26 using vhci_hcd
[  793.561126][   T61] kernel write not supported for file /input/event1 (pid: 61 comm: kworker/2:1)
[  794.005686][T18093] netlink: 'syz.4.3383': attribute type 1 has an invalid length.
[  794.009029][T18093] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3383'.
[  794.023365][T18093] netlink: 'syz.4.3383': attribute type 1 has an invalid length.
[  794.066881][T18093] 8021q: adding VLAN 0 to HW filter on device bond3
[  794.325028][T18100] netlink: zone id is out of range
[  794.394056][T18100] netlink: set zone limit has 4 unknown bytes
[  794.426685][T18075] vhci_hcd: connection reset by peer
[  794.428613][   T76] vhci_hcd vhci_hcd.3: stop threads
[  794.430334][   T76] vhci_hcd vhci_hcd.3: release socket
[  794.432211][   T76] vhci_hcd vhci_hcd.3: disconnect device
[  794.445487][ T5954] Bluetooth: hci1: command 0x206a tx timeout
[  794.749236][T18105] netlink: 'syz.1.3386': attribute type 12 has an invalid length.
[  796.654753][T18137] lo speed is unknown, defaulting to 1000
[  796.999461][T18150] netlink: zone id is out of range
[  797.028651][T18150] netlink: set zone limit has 4 unknown bytes
[  797.765373][T18161] /dev/nullb0: Can't open blockdev
[  798.124248][T15221] usb 44-1: device descriptor read/8, error -110
[  798.213940][T18168] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3401'.
[  798.521560][T15221] usb usb44-port1: attempt power cycle
[  798.747286][T18171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3402'.
[  798.750145][T18171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3402'.
[  798.855877][T18170] netlink: 'syz.4.3402': attribute type 1 has an invalid length.
[  798.859342][T18170] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.3402'.
[  798.863231][T18170] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3402'.
[  799.135901][T15221] usb usb44-port1: unable to enumerate USB device
[  799.378109][T18178] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3405'.
[  799.381969][T18178] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3405'.
[  800.687055][T18192] vlan3: entered promiscuous mode
[  800.688643][T18192] bridge0: entered promiscuous mode
[  802.699062][T18221] netlink: 'syz.3.3415': attribute type 12 has an invalid length.
[  805.705329][ T5958] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  805.725403][ T5958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  805.730469][ T5958] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  805.735213][ T5958] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  805.738778][ T5958] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  805.774322][T18272] lo speed is unknown, defaulting to 1000
[  805.940876][T18272] chnl_net:caif_netlink_parms(): no params data found
[  806.111203][T18272] bridge0: port 1(bridge_slave_0) entered blocking state
[  806.113422][T18272] bridge0: port 1(bridge_slave_0) entered disabled state
[  806.142221][T18272] bridge_slave_0: entered allmulticast mode
[  806.164876][T18272] bridge_slave_0: entered promiscuous mode
[  806.168685][T18272] bridge0: port 2(bridge_slave_1) entered blocking state
[  806.171011][T18272] bridge0: port 2(bridge_slave_1) entered disabled state
[  806.173395][T18272] bridge_slave_1: entered allmulticast mode
[  806.177446][T18272] bridge_slave_1: entered promiscuous mode
[  806.319792][T18272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  806.345590][T18272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  806.362433][T18272] team0: Port device team_slave_0 added
[  806.455866][T18272] team0: Port device team_slave_1 added
[  806.497090][T18272] batman_adv: batadv0: Adding interface: batadv_slave_0
[  806.500000][T18272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  806.513988][T18272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  806.519353][T18272] batman_adv: batadv0: Adding interface: batadv_slave_1
[  806.521879][T18272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  806.553911][T18272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  806.595256][T18272] hsr_slave_0: entered promiscuous mode
[  806.598067][T18272] hsr_slave_1: entered promiscuous mode
[  806.600417][T18272] debugfs: 'hsr0' already exists in 'hsr'
[  806.602339][T18272] Cannot create hsr debugfs directory
[  807.030335][T18302] vlan1: entered promiscuous mode
[  807.032299][T18302] bridge0: entered promiscuous mode
[  807.390353][T18272] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  807.401638][T18272] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  807.406904][T18272] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  807.412811][T18272] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  807.626485][T18272] 8021q: adding VLAN 0 to HW filter on device bond0
[  807.695488][T18272] 8021q: adding VLAN 0 to HW filter on device team0
[  807.745865][T18272] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  807.750216][T18272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  807.773068][  T105] bridge0: port 1(bridge_slave_0) entered blocking state
[  807.775572][  T105] bridge0: port 1(bridge_slave_0) entered forwarding state
[  807.780442][  T105] bridge0: port 2(bridge_slave_1) entered blocking state
[  807.782763][  T105] bridge0: port 2(bridge_slave_1) entered forwarding state
[  807.803914][ T5954] Bluetooth: hci2: command tx timeout
[  807.860747][T18272] 8021q: adding VLAN 0 to HW filter on device batadv0
[  808.116832][T18272] veth0_vlan: entered promiscuous mode
[  808.129082][T18272] veth1_vlan: entered promiscuous mode
[  808.165395][T18272] veth0_macvtap: entered promiscuous mode
[  808.173027][T18272] veth1_macvtap: entered promiscuous mode
[  808.201038][T18272] batman_adv: batadv0: Interface activated: batadv_slave_0
[  808.209313][T18272] batman_adv: batadv0: Interface activated: batadv_slave_1
[  808.229033][ T6393] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  808.232718][ T6393] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  808.239754][ T6393] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  808.242706][ T6393] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  808.315372][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  808.317925][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  808.339955][   T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  808.342437][   T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  809.604138][T15221] usb 9-1: new full-speed USB device number 42 using dummy_hcd
[  809.755598][T15221] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  809.758873][T15221] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2
[  809.761728][T15221] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  809.773835][T15221] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  809.777763][T15221] usb 9-1: config 0 descriptor??
[  809.782500][T15221] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  809.793852][T15221] dvb-usb: bulk message failed: -22 (3/0)
[  809.797290][T15221] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  809.800488][T15221] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  809.802786][T15221] usb 9-1: media controller created
[  809.812117][T15221] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  809.819898][T15221] dvb-usb: bulk message failed: -22 (6/0)
[  809.821742][T15221] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  809.827648][T15221] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input34
[  809.832881][T15221] dvb-usb: schedule remote query interval to 150 msecs.
[  809.835179][T15221] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  809.884010][ T5954] Bluetooth: hci2: command tx timeout
[  809.993854][T15221] dvb-usb: bulk message failed: -22 (1/0)
[  809.996184][T15221] dvb-usb: error while querying for an remote control event.
[  810.116916][    T9] usb 9-1: USB disconnect, device number 42
[  810.140759][    T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  810.390694][T18382] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[  810.394173][T18382] overlayfs: overlapping lowerdir path
[  811.964493][ T5958] Bluetooth: hci2: command tx timeout
[  811.975073][T18407] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3456'.
[  813.250656][ T1416] ieee802154 phy1 wpan1: encryption failed: -22
[  813.504114][T18418] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  814.044495][ T5958] Bluetooth: hci2: command tx timeout
[  814.314249][T18441] netlink: zone id is out of range
[  814.349491][T18441] netlink: set zone limit has 4 unknown bytes
[  814.540598][   T35] block nbd0: Possible stuck request ffff888026780000: control (read@0,4096B). Runtime 210 seconds
[  816.334330][T18474] ubi: mtd0 is already attached to ubi31
[  816.374320][ T6050] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  816.534141][ T6050] usb 6-1: Using ep0 maxpacket: 8
[  816.538479][ T6050] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  816.543857][ T6050] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  816.558250][ T6050] pvrusb2: Hardware description: Terratec Grabster AV400
[  816.561002][ T6050] pvrusb2: **********
[  816.562628][ T6050] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  816.573844][ T6050] pvrusb2: Important functionality might not be entirely working.
[  816.577501][ T6050] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  816.582451][ T6050] pvrusb2: **********
[  816.772961][ T2488] pvrusb2: Invalid write control endpoint
[  816.834577][ T2488] pvrusb2: Invalid write control endpoint
[  816.836597][ T2488] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  816.839588][ T2488] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  816.842954][ T2488] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  816.847150][ T2488] pvrusb2: Device being rendered inoperable
[  816.850408][ T2488] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  816.852995][ T2488] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  816.864745][ T2488] pvrusb2: Attached sub-driver cx25840
[  816.866722][ T2488] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  816.869952][ T2488] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  816.960482][T18470] pvrusb2: Attempted to execute control transfer when device not ok
[  816.971039][ T6050] usb 6-1: USB disconnect, device number 22
[  818.879257][T18503] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3480'.
[  818.938575][T18503] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3480'.
[  819.241821][T18514] netlink: 'syz.4.3481': attribute type 1 has an invalid length.
[  819.376723][T18514] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3481'.
[  819.384531][T18516] 8021q: adding VLAN 0 to HW filter on device bond5
[  819.387741][T18516] bond4: (slave bond5): making interface the new active one
[  819.390380][T18516] bond4: (slave bond5): Enslaving as an active interface with an up link
[  819.394328][T18514] 8021q: adding VLAN 0 to HW filter on device bond4
[  819.397494][T18514] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3481'.
[  819.578419][T18522] overlayfs: failed to resolve './file1': -2
[  820.604273][T18546] netlink: 'syz.1.3488': attribute type 12 has an invalid length.
[  821.311552][T18551] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  821.773919][T15221] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  821.923970][T15221] usb 6-1: Using ep0 maxpacket: 8
[  821.927416][T15221] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  821.930092][T15221] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  821.933179][T15221] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  821.936442][T15221] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  821.939581][T15221] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  821.943919][T15221] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  821.946800][T15221] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  822.165570][T18556] overlayfs: conflicting options: userxattr,redirect_dir=on
[  822.169855][T15221] usb 6-1: usb_control_msg returned -32
[  822.171673][T15221] usbtmc 6-1:16.0: can't read capabilities
[  822.789313][T18569] netlink: zone id is out of range
[  822.832265][T18569] netlink: set zone limit has 4 unknown bytes
[  823.872843][T18577] input: syz1 as /devices/virtual/input/input35
[  823.975958][T18580] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[  823.978039][T18580] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  823.980601][T18580] vhci_hcd vhci_hcd.0: Device attached
[  824.194470][T18583] vhci_hcd: connection closed
[  824.211644][ T1141] vhci_hcd vhci_hcd.5: stop threads
[  824.223496][ T1141] vhci_hcd vhci_hcd.5: release socket
[  824.228878][ T1141] vhci_hcd vhci_hcd.5: disconnect device
[  824.252170][T15221] usb 48-1: enqueue for inactive port 0
[  824.408863][ T5958] Bluetooth: hci4: unexpected event for opcode 0x1004
[  824.553908][T18346] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  824.566354][ T6027] usb 6-1: USB disconnect, device number 23
[  824.744947][T15221] usb usb48-port1: attempt power cycle
[  824.759144][T18346] usb 10-1: Using ep0 maxpacket: 8
[  825.134919][ T5954] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  825.140445][ T5954] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  825.143555][ T5954] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  825.148907][ T5954] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  825.153960][ T5954] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  825.195338][T18346] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  825.198099][T18607] lo speed is unknown, defaulting to 1000
[  825.199427][T18346] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  825.311464][T18346] pvrusb2: Hardware description: Terratec Grabster AV400
[  825.327411][T18346] pvrusb2: **********
[  825.329227][T18346] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  825.342810][T18346] pvrusb2: Important functionality might not be entirely working.
[  825.344929][T15221] usb usb48-port1: unable to enumerate USB device
[  825.351139][T18612] netlink: 'syz.3.3506': attribute type 1 has an invalid length.
[  825.356177][T18612] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3506'.
[  825.359357][T18346] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  825.384434][T18346] pvrusb2: **********
[  825.467538][ T2488] pvrusb2: Invalid write control endpoint
[  825.501880][ T2488] pvrusb2: Invalid write control endpoint
[  825.516055][ T2488] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  825.527878][ T2488] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  825.530726][ T2488] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  825.537098][ T2488] pvrusb2: Device being rendered inoperable
[  825.540283][ T2488] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  825.543675][ T2488] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  825.557663][ T2488] pvrusb2: Attached sub-driver cx25840
[  825.560907][ T2488] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  825.567400][ T2488] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  825.640271][T18607] chnl_net:caif_netlink_parms(): no params data found
[  825.668731][T18597] pvrusb2: Attempted to execute control transfer when device not ok
[  825.676091][T15221] usb 10-1: USB disconnect, device number 2
[  825.734663][T18607] bridge0: port 1(bridge_slave_0) entered blocking state
[  825.737920][T18607] bridge0: port 1(bridge_slave_0) entered disabled state
[  825.741138][T18607] bridge_slave_0: entered allmulticast mode
[  825.745179][T18607] bridge_slave_0: entered promiscuous mode
[  825.753325][T18607] bridge0: port 2(bridge_slave_1) entered blocking state
[  825.756899][T18607] bridge0: port 2(bridge_slave_1) entered disabled state
[  825.760048][T18607] bridge_slave_1: entered allmulticast mode
[  825.764214][T18607] bridge_slave_1: entered promiscuous mode
[  825.790349][T18607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  825.797434][T18607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  825.821604][T18607] team0: Port device team_slave_0 added
[  825.826512][T18607] team0: Port device team_slave_1 added
[  825.840709][T18607] batman_adv: batadv0: Adding interface: batadv_slave_0
[  825.843128][T18607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  825.843451][ T6027] libceph: connect (1)[c::]:6789 error -101
[  825.851418][T18607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  825.852883][T18607] batman_adv: batadv0: Adding interface: batadv_slave_1
[  825.854440][ T6027] libceph: mon0 (1)[c::]:6789 connect error
[  825.857571][T18607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  825.873177][T18607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  825.881432][T18628] ceph: No mds server is up or the cluster is laggy
[  825.957407][T18631] 8021q: adding VLAN 0 to HW filter on device bond0
[  825.962567][T18631] 8021q: adding VLAN 0 to HW filter on device team0
[  825.975311][T18631] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  826.009926][T18607] hsr_slave_0: entered promiscuous mode
[  826.013456][T18607] hsr_slave_1: entered promiscuous mode
[  826.017077][T18607] debugfs: 'hsr0' already exists in 'hsr'
[  826.019683][T18607] Cannot create hsr debugfs directory
[  826.231172][ T6101] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode
[  826.234421][ T6101] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode
[  826.238735][ T6101] bridge0: port 4(netdevsim0) entered disabled state
[  826.403039][ T6101] team0: left allmulticast mode
[  826.404708][ T6101] team_slave_0: left allmulticast mode
[  826.406595][ T6101] team_slave_1: left allmulticast mode
[  826.408485][ T6101] team0: left promiscuous mode
[  826.410112][ T6101] team_slave_0: left promiscuous mode
[  826.412109][ T6101] team_slave_1: left promiscuous mode
[  826.414309][ T6101] bridge0: port 3(team0) entered disabled state
[  826.417967][ T6101] bridge_slave_1: left allmulticast mode
[  826.419963][ T6101] bridge_slave_1: left promiscuous mode
[  826.421936][ T6101] bridge0: port 2(bridge_slave_1) entered disabled state
[  826.426978][ T6101] bridge_slave_0: left allmulticast mode
[  826.429374][ T6101] bridge_slave_0: left promiscuous mode
[  826.431934][ T6101] bridge0: port 1(bridge_slave_0) entered disabled state
[  827.163974][ T5958] Bluetooth: hci5: command tx timeout
[  827.405376][ T6101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  827.424673][ T6101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  827.431631][ T6101] bond0 (unregistering): Released all slaves
[  827.545548][ T6101] bond1 (unregistering): Released all slaves
[  827.724840][ T6101] bond2 (unregistering): Released all slaves
[  827.873442][ T6101] bond3 (unregistering): Released all slaves
[  827.997039][ T6101] bond4 (unregistering): (slave bond5): Releasing backup interface
[  828.001076][ T6101] bond4 (unregistering): Released all slaves
[  828.088732][ T6101] bond5 (unregistering): Released all slaves
[  828.243998][ T6101] tipc: Left network mode
[  828.443972][ T5954] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  828.454647][ T5954] Bluetooth: hci4: Injecting HCI hardware error event
[  828.460018][ T5954] Bluetooth: hci4: hardware error 0x00
[  828.946879][T18607] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  828.958484][T18607] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  828.962918][T18607] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  828.988245][T18607] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  829.038526][T18687] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  829.041617][T18687] /dev/nullb0: Can't open blockdev
[  829.154668][T18607] 8021q: adding VLAN 0 to HW filter on device bond0
[  829.176787][T18607] 8021q: adding VLAN 0 to HW filter on device team0
[  829.197807][T18607] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  829.201214][T18607] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  829.243925][T14334] Bluetooth: hci5: command tx timeout
[  829.253073][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  829.256175][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  829.267400][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  829.270416][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  829.324189][T18607] 8021q: adding VLAN 0 to HW filter on device batadv0
[  829.477363][ T6101] hsr_slave_0: left promiscuous mode
[  829.479722][ T6101] hsr_slave_1: left promiscuous mode
[  829.835858][T18726] netlink: 'syz.1.3522': attribute type 16 has an invalid length.
[  829.838355][T18726] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.3522'.
[  829.897337][T18729] netlink: 'syz.5.3526': attribute type 12 has an invalid length.
[  830.198136][ T6101] team0 (unregistering): Port device team_slave_1 removed
[  830.242314][ T6101] team0 (unregistering): Port device team_slave_0 removed
[  830.432358][ T6101] wg0 (unregistering): left allmulticast mode
[  830.534017][ T5954] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  830.559910][T18734] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  830.697377][T18607] veth0_vlan: entered promiscuous mode
[  830.712513][T18737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3528'.
[  830.719630][T18607] veth1_vlan: entered promiscuous mode
[  830.763265][T18607] veth0_macvtap: entered promiscuous mode
[  830.773204][T18607] veth1_macvtap: entered promiscuous mode
[  830.815868][T18607] batman_adv: batadv0: Interface activated: batadv_slave_0
[  830.890670][T18607] batman_adv: batadv0: Interface activated: batadv_slave_1
[  830.946439][   T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  830.950428][   T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  830.968979][   T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  830.983362][   T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  831.008439][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  831.017922][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  831.058944][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  831.061527][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  831.221034][ T6101] IPVS: stop unused estimator thread 0...
[  831.333914][ T5954] Bluetooth: hci5: command 0x040f tx timeout
[  831.526761][ T5947] libceph: connect (1)[c::]:6789 error -101
[  831.532465][ T5947] libceph: mon0 (1)[c::]:6789 connect error
[  831.567809][T18765] ceph: No mds server is up or the cluster is laggy
[  831.673371][T18768] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  831.717373][T18772] fuse: Bad value for 'fd'
[  832.586626][T18780] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  832.770321][T18783] lo speed is unknown, defaulting to 1000
[  832.968000][T18796] sp0: Synchronizing with TNC
[  833.104687][T18807] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3546'.
[  833.354501][T18818] comedi comedi4: bad chanlist[0]=0x00000009 chan=9 range length=2
[  833.405656][ T5958] Bluetooth: hci5: command 0x040f tx timeout
[  833.575671][T18828] ubi: mtd0 is already attached to ubi31
[  833.984279][T18833] netlink: 'syz.4.3552': attribute type 21 has an invalid length.
[  833.987217][T18833] IPv6: NLM_F_CREATE should be specified when creating new route
[  834.243905][T16117] usb 9-1: new high-speed USB device number 43 using dummy_hcd
[  834.397345][T16117] usb 9-1: config index 0 descriptor too short (expected 45961, got 36)
[  834.400115][T16117] usb 9-1: config 39 has an invalid descriptor of length 186, skipping remainder of the config
[  834.403610][T16117] usb 9-1: config 39 has 0 interfaces, different from the descriptor's value: 22
[  834.417844][T16117] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  834.421639][T16117] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  834.583492][T18853] netlink: 'syz.3.3558': attribute type 12 has an invalid length.
[  835.048884][T18857] 8021q: adding VLAN 0 to HW filter on device bond1
[  835.052755][T18857] bond0: (slave bond1): Enslaving as an active interface with an up link
[  835.103996][T18857] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3559'.
[  835.182810][T18857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  835.187280][T18857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  835.191176][T18857] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  835.195335][T18857] bond0 (unregistering): (slave bond1): Releasing backup interface
[  835.199309][T18857] bond0 (unregistering): Released all slaves
[  835.342509][   T40] audit: type=1804 audit(1768785377.319:1558): pid=18863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3561" name="/newroot/36/file0/bus" dev="9p" ino=74186833 res=1 errno=0
[  835.484040][ T5958] Bluetooth: hci5: command 0x040f tx timeout
[  836.105264][T18878] input: syz1 as /devices/virtual/input/input36
[  836.115876][T18878] /dev/nullb0: Can't open blockdev
[  836.945368][T16117] usb 9-1: string descriptor 0 read error: -71
[  836.948210][T16117] usb 9-1: USB disconnect, device number 43
[  838.057875][T18912] FAULT_INJECTION: forcing a failure.
[  838.057875][T18912] name failslab, interval 1, probability 0, space 0, times 0
[  838.061875][T18912] CPU: 1 UID: 0 PID: 18912 Comm: syz.5.3576 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  838.061893][T18912] Tainted: [L]=SOFTLOCKUP
[  838.061897][T18912] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  838.061904][T18912] Call Trace:
[  838.061909][T18912]  <TASK>
[  838.061913][T18912]  dump_stack_lvl+0x16c/0x1f0
[  838.061940][T18912]  should_fail_ex+0x512/0x640
[  838.061953][T18912]  ? fs_reclaim_acquire+0xae/0x150
[  838.061985][T18912]  should_failslab+0xc2/0x120
[  838.062003][T18912]  __kmalloc_noprof+0xeb/0x910
[  838.062015][T18912]  ? tomoyo_encode2+0x100/0x3e0
[  838.062034][T18912]  ? tomoyo_encode2+0x100/0x3e0
[  838.062048][T18912]  tomoyo_encode2+0x100/0x3e0
[  838.062065][T18912]  tomoyo_encode+0x29/0x50
[  838.062080][T18912]  tomoyo_realpath_from_path+0x18f/0x6e0
[  838.062099][T18912]  tomoyo_path_number_perm+0x245/0x580
[  838.062130][T18912]  ? tomoyo_path_number_perm+0x237/0x580
[  838.062145][T18912]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  838.062172][T18912]  ? find_held_lock+0x2b/0x80
[  838.062187][T18912]  ? hook_file_ioctl_common+0x144/0x410
[  838.062204][T18912]  ? __fget_files+0x20e/0x3c0
[  838.062220][T18912]  ? __fput_deferred+0x420/0x480
[  838.062234][T18912]  security_file_ioctl_compat+0x9b/0x240
[  838.062249][T18912]  __ia32_compat_sys_ioctl+0xc3/0x370
[  838.062266][T18912]  __do_fast_syscall_32+0xe8/0x680
[  838.062279][T18912]  do_fast_syscall_32+0x32/0x80
[  838.062290][T18912]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  838.062305][T18912] RIP: 0023:0xf706d579
[  838.062314][T18912] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  838.062326][T18912] RSP: 002b:00000000f545d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  838.062337][T18912] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005101
[  838.062349][T18912] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  838.062355][T18912] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  838.062362][T18912] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  838.062369][T18912] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  838.062384][T18912]  </TASK>
[  838.062460][T18912] ERROR: Out of memory at tomoyo_realpath_from_path.
[  838.738435][T18938] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[  838.740506][T18938] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  838.743183][T18938] vhci_hcd vhci_hcd.0: Device attached
[  839.003862][T15221] usb 45-1: new high-speed USB device number 3 using vhci_hcd
[  839.074710][T18947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3585'.
[  839.275769][T18939] vhci_hcd: connection reset by peer
[  839.278804][ T1239] vhci_hcd vhci_hcd.4: stop threads
[  839.281032][ T1239] vhci_hcd vhci_hcd.4: release socket
[  839.286166][ T1239] vhci_hcd vhci_hcd.4: disconnect device
[  840.954453][T18975] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  840.957144][T18975] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  840.962189][T18975] vhci_hcd vhci_hcd.0: Device attached
[  841.096887][T18978] vhci_hcd: connection closed
[  841.102885][   T13] vhci_hcd vhci_hcd.3: stop threads
[  841.106338][   T13] vhci_hcd vhci_hcd.3: release socket
[  841.108161][   T13] vhci_hcd vhci_hcd.3: disconnect device
[  841.334794][ T6050] hid_parser_main: 5 callbacks suppressed
[  841.334807][ T6050] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0
[  841.339389][ T6050] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0
[  841.341836][ T6050] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0
[  841.366648][ T6050] hid-generic 0003:0004:0000.000A: hidraw1: USB HID v0.00 Device [syz0] on syz1
[  841.756508][T18990] overlayfs: missing 'lowerdir'
[  843.518236][T19050] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3614'.
[  844.114077][T15221] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  844.574185][T19073] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  844.576305][T19073] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  844.579017][T19073] vhci_hcd vhci_hcd.0: Device attached
[  844.665416][   T35] block nbd0: Possible stuck request ffff888026780000: control (read@0,4096B). Runtime 240 seconds
[  844.737444][T19078] fuse: Unknown parameter '0177777777777777777777700000000000000000000'
[  844.854832][T19084] lo speed is unknown, defaulting to 1000
[  844.953943][   T34] usb 46-1: SetAddress Request (14) to port 0
[  844.956561][   T34] usb 46-1: new SuperSpeed USB device number 14 using vhci_hcd
[  845.035684][T19074] vhci_hcd: connection reset by peer
[  845.041280][   T13] vhci_hcd vhci_hcd.4: stop threads
[  845.043602][   T13] vhci_hcd vhci_hcd.4: release socket
[  845.046440][   T13] vhci_hcd vhci_hcd.4: disconnect device
[  845.265297][   T40] audit: type=1326 audit(1768785387.249:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19100 comm="syz.3.3629" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x6ffc0000
[  846.112657][T19111] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3633'.
[  846.126564][T19111] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3633'.
[  846.618821][T19119] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9)
[  846.621068][T19119] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  846.633921][T19119] vhci_hcd vhci_hcd.0: Device attached
[  846.648282][T19119] random: crng reseeded on system resumption
[  846.654640][T19120] vhci_hcd: connection closed
[  846.655397][  T105] vhci_hcd vhci_hcd.5: stop threads
[  846.665699][  T105] vhci_hcd vhci_hcd.5: release socket
[  846.667991][  T105] vhci_hcd vhci_hcd.5: disconnect device
[  846.733376][T19129] Invalid source name
[  846.738992][T19129] UBIFS error (pid: 19129): cannot open "./file0", error -22
[  846.877026][T19138] FAULT_INJECTION: forcing a failure.
[  846.877026][T19138] name failslab, interval 1, probability 0, space 0, times 0
[  846.883250][T19138] CPU: 2 UID: 0 PID: 19138 Comm: syz.1.3640 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  846.883270][T19138] Tainted: [L]=SOFTLOCKUP
[  846.883274][T19138] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  846.883281][T19138] Call Trace:
[  846.883286][T19138]  <TASK>
[  846.883291][T19138]  dump_stack_lvl+0x16c/0x1f0
[  846.883313][T19138]  should_fail_ex+0x512/0x640
[  846.883331][T19138]  ? __kvmalloc_node_noprof+0x129/0xa40
[  846.883349][T19138]  should_failslab+0xc2/0x120
[  846.883367][T19138]  __kvmalloc_node_noprof+0x14a/0xa40
[  846.883384][T19138]  ? bucket_table_alloc.isra.0+0x88/0x460
[  846.883406][T19138]  ? bucket_table_alloc.isra.0+0x88/0x460
[  846.883423][T19138]  bucket_table_alloc.isra.0+0x88/0x460
[  846.883443][T19138]  rhashtable_init_noprof+0x41a/0x7e0
[  846.883456][T19138]  rhltable_init_noprof+0x20/0x60
[  846.883467][T19138]  nf_tables_newtable+0xfa7/0x1b50
[  846.883483][T19138]  ? __pfx___nla_validate_parse+0x10/0x10
[  846.883500][T19138]  ? __pfx_nf_tables_newtable+0x10/0x10
[  846.883517][T19138]  ? __nla_parse+0x40/0x60
[  846.883534][T19138]  nfnetlink_rcv_batch+0x190d/0x2350
[  846.883556][T19138]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[  846.883572][T19138]  ? kasan_save_stack+0x33/0x60
[  846.883587][T19138]  ? kasan_save_track+0x14/0x30
[  846.883601][T19138]  ? __kasan_slab_alloc+0x89/0x90
[  846.883616][T19138]  ? kmem_cache_alloc_node_noprof+0x298/0x800
[  846.883629][T19138]  ? kmalloc_reserve+0x18b/0x2c0
[  846.883666][T19138]  ? __nla_parse+0x40/0x60
[  846.883684][T19138]  nfnetlink_rcv+0x3c1/0x430
[  846.883697][T19138]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  846.883714][T19138]  netlink_unicast+0x5aa/0x870
[  846.883733][T19138]  ? __pfx_netlink_unicast+0x10/0x10
[  846.883755][T19138]  netlink_sendmsg+0x8c8/0xdd0
[  846.883788][T19138]  ? __pfx_netlink_sendmsg+0x10/0x10
[  846.883807][T19138]  ? aa_sock_msg_perm.constprop.0+0x100/0x1b0
[  846.883829][T19138]  ____sys_sendmsg+0xa5d/0xc30
[  846.883842][T19138]  ? __pfx_____sys_sendmsg+0x10/0x10
[  846.883852][T19138]  ? get_compat_msghdr+0x11a/0x170
[  846.883874][T19138]  ___sys_sendmsg+0x134/0x1d0
[  846.883890][T19138]  ? __pfx____sys_sendmsg+0x10/0x10
[  846.883912][T19138]  ? find_held_lock+0x2b/0x80
[  846.883936][T19138]  __sys_sendmsg+0x16d/0x220
[  846.883951][T19138]  ? __pfx___sys_sendmsg+0x10/0x10
[  846.883972][T19138]  ? do_user_addr_fault+0x843/0x1370
[  846.883989][T19138]  __do_fast_syscall_32+0xe8/0x680
[  846.884002][T19138]  do_fast_syscall_32+0x32/0x80
[  846.884013][T19138]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  846.884027][T19138] RIP: 0023:0xf7f72579
[  846.884037][T19138] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  846.884048][T19138] RSP: 002b:00000000f546655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  846.884059][T19138] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0
[  846.884066][T19138] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  846.884073][T19138] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  846.884079][T19138] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  846.884086][T19138] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  846.884101][T19138]  </TASK>
[  847.277810][T19151] input: syz1 as /devices/virtual/input/input37
[  847.284313][T19151] /dev/nullb0: Can't open blockdev
[  848.134545][T19159] bridge0: port 2(bridge_slave_1) entered disabled state
[  848.137023][T19159] bridge0: port 1(bridge_slave_0) entered disabled state
[  848.312553][T19159] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  848.320020][T19159] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  848.617718][ T6101] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  848.621589][ T6101] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  848.624928][  T105] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  848.628115][  T105] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  848.792043][T19179] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode
[  848.809550][T19176] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3651'.
[  848.828259][T19179] bridge_slave_0: left allmulticast mode
[  848.843910][T19179] bridge_slave_0: left promiscuous mode
[  848.847956][T19179] bridge0: port 1(bridge_slave_0) entered disabled state
[  848.859510][T19181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3653'.
[  848.861801][T19179] bridge_slave_1: left allmulticast mode
[  848.865828][T19179] bridge_slave_1: left promiscuous mode
[  848.868468][T19179] bridge0: port 2(bridge_slave_1) entered disabled state
[  848.872691][T19182] netlink: 'syz.5.3652': attribute type 10 has an invalid length.
[  848.880552][T19179] bond0: (slave bond_slave_0): Releasing backup interface
[  848.886996][T19179] bond0: (slave bond_slave_1): Releasing backup interface
[  848.898947][T19179] team0: Port device team_slave_0 removed
[  848.912285][T19179] team0: Port device team_slave_1 removed
[  848.918551][T19179] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  848.922449][T19179] batman_adv: batadv0: Removing interface: batadv_slave_0
[  848.932257][T19179] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  848.936578][T19179] batman_adv: batadv0: Removing interface: batadv_slave_1
[  848.941434][T19179] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  848.950510][T19182] mac80211_hwsim hwsim38 wlan1: left allmulticast mode
[  848.971159][T19182] 8021q: adding VLAN 0 to HW filter on device bond0
[  848.997389][T19182] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  849.599978][T19203] netlink: 'syz.4.3655': attribute type 12 has an invalid length.
[  850.044329][   T34] usb 46-1: device descriptor read/8, error -110
[  850.173227][T19217] tipc: Started in network mode
[  850.175046][T19217] tipc: Node identity , cluster identity 4711
[  850.176972][T19217] tipc: Failed to obtain node identity
[  850.178718][T19217] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[  850.250204][T19219] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3664'.
[  850.327077][T19227] netlink: 'syz.5.3667': attribute type 3 has an invalid length.
[  850.348113][T19225] xt_addrtype: ipv6 does not support BROADCAST matching
[  850.434450][   T34] usb usb46-port1: attempt power cycle
[  850.625612][T19243] FAULT_INJECTION: forcing a failure.
[  850.625612][T19243] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  850.629742][T19243] CPU: 3 UID: 0 PID: 19243 Comm: syz.4.3672 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  850.629760][T19243] Tainted: [L]=SOFTLOCKUP
[  850.629764][T19243] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  850.629771][T19243] Call Trace:
[  850.629777][T19243]  <TASK>
[  850.629781][T19243]  dump_stack_lvl+0x16c/0x1f0
[  850.629803][T19243]  should_fail_ex+0x512/0x640
[  850.629819][T19243]  _copy_to_user+0x32/0xd0
[  850.629833][T19243]  simple_read_from_buffer+0xcb/0x170
[  850.629863][T19243]  proc_fail_nth_read+0x197/0x240
[  850.629883][T19243]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  850.629903][T19243]  ? rw_verify_area+0xcf/0x6c0
[  850.629917][T19243]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  850.629936][T19243]  vfs_read+0x1e4/0xcf0
[  850.629952][T19243]  ? __pfx___mutex_lock+0x10/0x10
[  850.629965][T19243]  ? __pfx_vfs_read+0x10/0x10
[  850.629979][T19243]  ? find_held_lock+0x2b/0x80
[  850.630020][T19243]  ? __fget_files+0x20e/0x3c0
[  850.630044][T19243]  ksys_read+0x12a/0x250
[  850.630060][T19243]  ? __pfx_ksys_read+0x10/0x10
[  850.630076][T19243]  ? fput+0x70/0xf0
[  850.630089][T19243]  __do_fast_syscall_32+0xe8/0x680
[  850.630102][T19243]  do_fast_syscall_32+0x32/0x80
[  850.630113][T19243]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  850.630128][T19243] RIP: 0023:0xf7fe6579
[  850.630137][T19243] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  850.630148][T19243] RSP: 002b:00000000f54d6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  850.630158][T19243] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54d6620
[  850.630165][T19243] RDX: 000000000000000f RSI: 00000000f7476ff4 RDI: 0000000000000000
[  850.630172][T19243] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  850.630178][T19243] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  850.630185][T19243] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  850.630199][T19243]  </TASK>
[  850.684084][T18346] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  850.829255][T19248] 
[  850.830090][T19248] ======================================================
[  850.832867][T19248] WARNING: possible circular locking dependency detected
[  850.835729][T19248] syzkaller #0 Tainted: G             L     
[  850.838513][T19248] ------------------------------------------------------
[  850.841315][T19248] syz.4.3674/19248 is trying to acquire lock:
[  850.843774][T19248] ffff8880438dd948 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60
[  850.847669][T19248] 
[  850.847669][T19248] but task is already holding lock:
[  850.850646][T19248] ffff88804f8f2488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570
[  850.854411][T19248] 
[  850.854411][T19248] which lock already depends on the new lock.
[  850.854411][T19248] 
[  850.858541][T19248] 
[  850.858541][T19248] the existing dependency chain (in reverse order) is:
[  850.862143][T19248] 
[  850.862143][T19248] -> #3 (&of->mutex){+.+.}-{4:4}:
[  850.865060][T19248]        __mutex_lock+0x1aa/0x1ca0
[  850.867167][T19248]        kernfs_seq_start+0x4f/0x2a0
[  850.869330][T19248]        seq_read_iter+0x2c1/0x12d0
[  850.871470][T19248]        kernfs_fop_read_iter+0x46c/0x610
[  850.873838][T19248]        copy_splice_read+0x618/0xc20
[  850.876057][T19248]        do_splice_read+0x285/0x370
[  850.878195][T19248]        splice_file_to_pipe+0x109/0x120
[  850.880517][T19248]        do_sendfile+0x400/0xe50
[  850.880544][T19248]        __ia32_sys_sendfile64+0x1d7/0x220
[  850.884627][T19248]        __do_fast_syscall_32+0xe8/0x680
[  850.886945][T19248]        do_fast_syscall_32+0x32/0x80
[  850.889132][T19248]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  850.891918][T19248] 
[  850.891918][T19248] -> #2 (&p->lock){+.+.}-{4:4}:
[  850.893899][T18346] usb 6-1: Using ep0 maxpacket: 32
[  850.894694][T19248]        __mutex_lock+0x1aa/0x1ca0
[  850.894715][T19248]        seq_read_iter+0xe1/0x12d0
[  850.894740][T19248]        kernfs_fop_read_iter+0x46c/0x610
[  850.902890][T19248]        copy_splice_read+0x618/0xc20
[  850.905027][T18346] usb 6-1: config 0 has no interfaces?
[  850.905082][T19248]        do_splice_read+0x285/0x370
[  850.908851][T18346] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  850.908998][T19248]        splice_file_to_pipe+0x109/0x120
[  850.911958][T18346] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  850.914218][T19248]        do_sendfile+0x400/0xe50
[  850.914245][T19248]        __ia32_sys_sendfile64+0x1d7/0x220
[  850.914267][T19248]        __do_fast_syscall_32+0xe8/0x680
[  850.923098][T19248]        do_fast_syscall_32+0x32/0x80
[  850.923994][T18346] usb 6-1: Product: syz
[  850.925283][T19248]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  850.926667][T18346] usb 6-1: Manufacturer: syz
[  850.929426][T19248] 
[  850.929426][T19248] -> #1 (&pipe->mutex){+.+.}-{4:4}:
[  850.929456][T19248]        __mutex_lock+0x1aa/0x1ca0
[  850.930999][T18346] usb 6-1: SerialNumber: syz
[  850.933560][T19248]        anon_pipe_write+0x15d/0x1bd0
[  850.939373][T19248]        __kernel_write_iter+0x720/0xb10
[  850.941662][T19248]        __kernel_write+0xf5/0x140
[  850.943772][T19248]        autofs_notify_daemon+0x4db/0xd60
[  850.946089][T19248]        autofs_wait+0x10f3/0x1ac0
[  850.948169][T19248]        autofs_mount_wait+0x132/0x3c0
[  850.950341][T19248]        autofs_d_automount+0x4b2/0x960
[  850.952069][T19248]        __traverse_mounts+0x1b9/0x830
[  850.953779][T19248]        step_into_slowpath+0x772/0xf50
[  850.955513][T19248]        link_path_walk+0xd26/0x1c70
[  850.957103][T19248]        path_lookupat+0x74/0xc40
[  850.958697][T19248]        filename_lookup+0x224/0x5f0
[  850.960373][T19248]        user_path_at+0x3a/0x60
[  850.961924][T19248]        __ia32_sys_mount+0x1fa/0x310
[  850.963597][T19248]        __do_fast_syscall_32+0xe8/0x680
[  850.965384][T19248]        do_fast_syscall_32+0x32/0x80
[  850.967078][T19248]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  850.969204][T19248] 
[  850.969204][T19248] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}:
[  850.971634][T19248]        __lock_acquire+0x1669/0x2890
[  850.973321][T19248]        lock_acquire+0x179/0x330
[  850.974915][T19248]        __mutex_lock+0x1aa/0x1ca0
[  850.976542][T19248]        autofs_notify_daemon+0x4a6/0xd60
[  850.978360][T19248]        autofs_wait+0x10f3/0x1ac0
[  850.979970][T19248]        autofs_mount_wait+0x132/0x3c0
[  850.981677][T19248]        autofs_d_automount+0x4b2/0x960
[  850.983430][T19248]        __traverse_mounts+0x1b9/0x830
[  850.985146][T19248]        step_into_slowpath+0x772/0xf50
[  850.986897][T19248]        path_lookupat+0x627/0xc40
[  850.988519][T19248]        filename_lookup+0x224/0x5f0
[  850.990209][T19248]        kern_path+0x35/0x50
[  850.991683][T19248]        lookup_bdev+0xd8/0x280
[  850.993222][T19248]        resume_store+0x1d6/0x490
[  850.994827][T19248]        kobj_attr_store+0x58/0x80
[  850.996456][T19248]        sysfs_kf_write+0xf2/0x150
[  850.998081][T19248]        kernfs_fop_write_iter+0x3af/0x570
[  850.999896][T19248]        vfs_write+0x7d3/0x11d0
[  851.001432][T19248]        ksys_write+0x12a/0x250
[  851.002985][T19248]        __do_fast_syscall_32+0xe8/0x680
[  851.004691][T19248]        do_fast_syscall_32+0x32/0x80
[  851.006400][T19248]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  851.008530][T19248] 
[  851.008530][T19248] other info that might help us debug this:
[  851.008530][T19248] 
[  851.011688][T19248] Chain exists of:
[  851.011688][T19248]   &sbi->pipe_mutex --> &p->lock --> &of->mutex
[  851.011688][T19248] 
[  851.015420][T19248]  Possible unsafe locking scenario:
[  851.015420][T19248] 
[  851.017751][T19248]        CPU0                    CPU1
[  851.019443][T19248]        ----                    ----
[  851.021127][T19248]   lock(&of->mutex);
[  851.022410][T19248]                                lock(&p->lock);
[  851.024395][T19248]                                lock(&of->mutex);
[  851.026413][T19248]   lock(&sbi->pipe_mutex);
[  851.027827][T19248] 
[  851.027827][T19248]  *** DEADLOCK ***
[  851.027827][T19248] 
[  851.030336][T19248] 4 locks held by syz.4.3674/19248:
[  851.031965][T19248]  #0: ffff888027a5b7b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370
[  851.034751][T19248]  #1: ffff888043b84420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  851.037576][T19248]  #2: ffff88804f8f2488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570
[  851.040594][T19248]  #3: ffff888040e8c0f8 (kn->active#67){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570
[  851.043704][T19248] 
[  851.043704][T19248] stack backtrace:
[  851.045568][T19248] CPU: 3 UID: 0 PID: 19248 Comm: syz.4.3674 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  851.045585][T19248] Tainted: [L]=SOFTLOCKUP
[  851.045589][T19248] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  851.045596][T19248] Call Trace:
[  851.045600][T19248]  <TASK>
[  851.045605][T19248]  dump_stack_lvl+0x116/0x1f0
[  851.045624][T19248]  print_circular_bug+0x275/0x340
[  851.045643][T19248]  check_noncircular+0x146/0x160
[  851.045661][T19248]  __lock_acquire+0x1669/0x2890
[  851.045674][T19248]  lock_acquire+0x179/0x330
[  851.045684][T19248]  ? autofs_notify_daemon+0x4a6/0xd60
[  851.045699][T19248]  ? __pfx___might_resched+0x10/0x10
[  851.045715][T19248]  ? __lock_acquire+0x12c2/0x2890
[  851.045725][T19248]  __mutex_lock+0x1aa/0x1ca0
[  851.045736][T19248]  ? autofs_notify_daemon+0x4a6/0xd60
[  851.045748][T19248]  ? __kernel_text_address+0xd/0x40
[  851.045761][T19248]  ? find_held_lock+0x2b/0x80
[  851.045775][T19248]  ? autofs_notify_daemon+0x4a6/0xd60
[  851.045787][T19248]  ? autofs_notify_daemon+0x45a/0xd60
[  851.045801][T19248]  ? __pfx___mutex_lock+0x10/0x10
[  851.045811][T19248]  ? __mutex_unlock_slowpath+0x161/0x790
[  851.045822][T19248]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  851.045834][T19248]  ? from_kgid_munged+0xab/0x130
[  851.045853][T19248]  ? autofs_notify_daemon+0x4a6/0xd60
[  851.045865][T19248]  autofs_notify_daemon+0x4a6/0xd60
[  851.045878][T19248]  ? __pfx_autofs_notify_daemon+0x10/0x10
[  851.045891][T19248]  ? kernfs_fop_write_iter+0x3af/0x570
[  851.045907][T19248]  ? vfs_write+0x7d3/0x11d0
[  851.045921][T19248]  ? ksys_write+0x12a/0x250
[  851.045941][T19248]  ? lockdep_init_map_type+0x5c/0x270
[  851.045952][T19248]  ? lockdep_init_map_type+0x5c/0x270
[  851.045964][T19248]  autofs_wait+0x10f3/0x1ac0
[  851.045977][T19248]  ? __pfx_autofs_wait+0x10/0x10
[  851.046003][T19248]  ? __pfx_path_check_mount+0x10/0x10
[  851.046016][T19248]  ? find_held_lock+0x2b/0x80
[  851.046030][T19248]  ? path_has_submounts+0xcf/0x120
[  851.046043][T19248]  ? do_raw_spin_unlock+0x172/0x230
[  851.046056][T19248]  ? find_held_lock+0x2b/0x80
[  851.046070][T19248]  autofs_mount_wait+0x132/0x3c0
[  851.046083][T19248]  autofs_d_automount+0x4b2/0x960
[  851.046096][T19248]  __traverse_mounts+0x1b9/0x830
[  851.046108][T19248]  step_into_slowpath+0x772/0xf50
[  851.046123][T19248]  ? __up_read+0x2d1/0x700
[  851.046134][T19248]  ? __pfx_step_into_slowpath+0x10/0x10
[  851.046149][T19248]  ? lookup_slow+0x50/0x70
[  851.046162][T19248]  path_lookupat+0x627/0xc40
[  851.046177][T19248]  filename_lookup+0x224/0x5f0
[  851.046192][T19248]  ? __pfx_filename_lookup+0x10/0x10
[  851.046211][T19248]  ? getname_kernel+0x52/0x370
[  851.046221][T19248]  ? __asan_memcpy+0x3c/0x60
[  851.046235][T19248]  kern_path+0x35/0x50
[  851.046253][T19248]  lookup_bdev+0xd8/0x280
[  851.046265][T19248]  ? __pfx_lookup_bdev+0x10/0x10
[  851.046276][T19248]  ? __asan_memcpy+0x3c/0x60
[  851.046289][T19248]  resume_store+0x1d6/0x490
[  851.046303][T19248]  ? __pfx_resume_store+0x10/0x10
[  851.046317][T19248]  ? find_held_lock+0x2b/0x80
[  851.046332][T19248]  ? __pfx_resume_store+0x10/0x10
[  851.046344][T19248]  kobj_attr_store+0x58/0x80
[  851.046354][T19248]  ? __pfx_kobj_attr_store+0x10/0x10
[  851.046364][T19248]  sysfs_kf_write+0xf2/0x150
[  851.046375][T19248]  kernfs_fop_write_iter+0x3af/0x570
[  851.046391][T19248]  ? __pfx_sysfs_kf_write+0x10/0x10
[  851.046402][T19248]  vfs_write+0x7d3/0x11d0
[  851.046418][T19248]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  851.046435][T19248]  ? __pfx_vfs_write+0x10/0x10
[  851.046449][T19248]  ? find_held_lock+0x2b/0x80
[  851.046466][T19248]  ksys_write+0x12a/0x250
[  851.046481][T19248]  ? __pfx_ksys_write+0x10/0x10
[  851.046498][T19248]  __do_fast_syscall_32+0xe8/0x680
[  851.046510][T19248]  do_fast_syscall_32+0x32/0x80
[  851.046520][T19248]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  851.046535][T19248] RIP: 0023:0xf7fe6579
[  851.046544][T19248] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  851.046555][T19248] RSP: 002b:00000000f54d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004
[  851.046565][T19248] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040
[  851.046572][T19248] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000
[  851.046579][T19248] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  851.046585][T19248] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  851.046591][T19248] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  851.046601][T19248]  </TASK>
[  851.185554][   T34] usb usb46-port1: unable to enumerate USB device
[  851.188105][T19248] PM: Image not found (code -22)
[  851.228569][T18346] usb 6-1: config 0 descriptor??
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  851.499203][T19216] syz_tun (unregistering): left allmulticast mode
[  851.501311][T19216] syz_tun (unregistering): left promiscuous mode
[  851.503380][T19216] bridge0: port 4(syz_tun) entered disabled state
[  851.607375][ T6027] usb 6-1: USB disconnect, device number 24
[  851.948685][  T105] bridge_slave_1: left allmulticast mode
[  851.951172][  T105] bridge_slave_1: left promiscuous mode
[  851.953646][  T105] bridge0: port 2(bridge_slave_1) entered disabled state
[  851.957781][  T105] bridge_slave_0: left allmulticast mode
[  851.960185][  T105] bridge_slave_0: left promiscuous mode
[  851.962621][  T105] bridge0: port 1(bridge_slave_0) entered disabled state
[  852.170045][  T105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  852.174596][  T105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  852.178607][  T105] bond0 (unregistering): Released all slaves
[  852.534105][  T105] hsr_slave_0: left promiscuous mode
[  852.536858][  T105] hsr_slave_1: left promiscuous mode
[  852.538996][  T105] batman_adv: batadv0: Removing interface: batadv_slave_0
[  852.541852][  T105] batman_adv: batadv0: Removing interface: batadv_slave_1
[  852.785733][  T105] team0 (unregistering): Port device team_slave_1 removed
[  852.809797][  T105] team0 (unregistering): Port device team_slave_0 removed
[  853.438937][  T105] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  853.508482][  T105] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  853.579207][  T105] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  853.638615][  T105] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  853.958703][  T105] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  853.963285][  T105] bond0 (unregistering): Released all slaves
[  854.340689][  T105] hsr_slave_0: left promiscuous mode
[  854.342906][  T105] hsr_slave_1: left promiscuous mode
[  854.346682][  T105] veth1_macvtap: left promiscuous mode
[  854.348497][  T105] veth0_macvtap: left promiscuous mode
[  854.350336][  T105] veth1_vlan: left promiscuous mode
[  854.352065][  T105] veth0_vlan: left promiscuous mode
[  858.028000][ T5352] udevd[5352]: worker [13557] /devices/virtual/block/nbd0 timeout; kill it
[  858.030892][ T5352] udevd[5352]: seq 15298 '/devices/virtual/block/nbd0' killed