last executing test programs:

9.599942093s ago: executing program 2 (id=381):
mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1)
socket$packet(0x11, 0x3, 0x300)
unshare(0x2c020400)
r0 = gettid()
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0xfffffffffffffffd, 0x2000000000000}, 0x0, &(0x7f0000000080)={0x1f, 0x3, 0x9117}, 0x0, 0x0)
timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
socket(0x10, 0x803, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x4, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1)
syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000718000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="c744240050000000c744240200000000ff2c244500290f07c4437905b30a00000000b9800000c00f3235001000000f30b805000000b9040000000f01d90f011845e6da66b882008ec83e0f79700c", 0x4e}], 0x1, 0x40, &(0x7f00000000c0), 0x0)

9.079778429s ago: executing program 3 (id=383):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000031, 0x4, 0x0, 0x4, 0x100000000, 0x10000000000000b, 0x0, 0x3}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CLEAR_DIRTY_LOG(r5, 0xc018aec0, &(0x7f00000005c0)={0x1fd, 0x3c0, 0x280, 0x0})
r6 = openat$ptmx(0xffffff9c, 0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000080), 0x4a)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xa8, 0x21, 0x1, 0x0, 0x4, {{@in=@multicast2, @in6=@local, 0x4e21, 0x0, 0x0, 0xfffe, 0xa, 0x0, 0xa0, 0x33}}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, @in=@empty, @in=@rand_addr=0x6, 0x32, 0x0, 0x0, 0x3, 0xa, 0xa}]}, @replay_thresh={0x8, 0xb, 0x100}]}, 0xa8}, 0x1, 0x0, 0x0, 0xc060}, 0x0)
sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r8)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1f, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r10, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYRES16=r10, @ANYRES16=r11, @ANYBLOB="010000000000000000001400000008000f00fc00", @ANYRESOCT=r6], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054)
r12 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0x0)
sendfile(r0, r12, 0x0, 0x6)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r12, 0x3312, 0x2)

8.071435788s ago: executing program 2 (id=388):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={0x0, 0x14}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mount$9p_virtio(0x0, 0x0, 0x0, 0x8c, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x2478, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

7.487008382s ago: executing program 1 (id=389):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xd, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
readv(r2, &(0x7f0000000380)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1)
r3 = socket$l2tp(0x2, 0x2, 0x73)
recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x20040814)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
pipe2$watch_queue(0x0, 0x80)
r6 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77f0", 0x9, 0xfffffffffffffffe)
r7 = add_key$keyring(&(0x7f0000001600), &(0x7f0000001640)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000200)={'fscrypt:', @auto=[0x63, 0x54, 0x61, 0x36, 0x32, 0x38, 0x53, 0x37, 0x38, 0x38, 0x66, 0x38, 0x62, 0x31, 0x37, 0x30]}, &(0x7f0000001580)={0x0, "636a2102000058595f1b5dcca06ea210a2249f7e134073d576a06d78d73e8c8b6f01940ae046476cd2d99382ae72520311026fb932f371fb32d8e413b7b48acf", 0x3e}, 0x48, r7)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000300)={0x0, 0x0, r6}, &(0x7f00000003c0)=""/4096, 0x1000, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)

7.020061713s ago: executing program 3 (id=391):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00')
ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f00000000c0)={0x4, r0, 'id0\x00'})
exit(0xffff)
preadv(r0, &(0x7f0000001bc0)=[{&(0x7f0000000580)=""/75, 0x4b}, {0x0}], 0x2, 0x3, 0x5)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setresuid(0x0, 0xee00, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}], 0x10)
listen(r3, 0x7)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4ea1, @dev={0xac, 0x14, 0x14, 0x23}}], 0x10)
listen(r2, 0x7)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a80"], 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x4004090)

6.186739397s ago: executing program 3 (id=392):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x9, 0x0, 0x200}, 0x3c) (async)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000240)=""/206, &(0x7f0000000440)=0xce) (async)
r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB])
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/bus/input/devices\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000002640)={0x2020}, 0x2020) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f6, &(0x7f0000000340)="b2d311af94b883a7c917af570ae7b1e843a0a788f69d7891ade96769393efc8056a6f002e30c8d84568d737b56856a562c77400d2763599c42c39c2c346641f570afdc53d009685de5793fa1d5eece360b7f7647069f8c0e53a28126b06a6b5e797d92fc70f0bbf7cf41ac7523191c55decb8e836ebd8eba368cc270864fb703f797122b8690d189cd617620b20d0a9b8796")
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32)
r4 = socket$kcm(0x2, 0x3, 0x2) (rerun: 32)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) (async)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2})
write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc)
ioctl$TIOCGPTPEER(r2, 0x5441, 0x10000)
unshare(0x6a040000)
r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo\x00')
unlinkat(r5, &(0x7f0000000000)='./file0\x00', 0x200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x185b2000) (async)
r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80100, 0x9c) (async, rerun: 32)
r7 = memfd_create(0x0, 0x7) (rerun: 32)
ioctl$FS_IOC_RESVSP(r7, 0x40305829, 0x0) (async)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r8, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x54) (async, rerun: 64)
setsockopt$WPAN_WANTLQI(r6, 0x0, 0x3, 0x0, 0x0) (rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10)
connect$packet(r6, &(0x7f00000003c0)={0x11, 0x12, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) (async, rerun: 64)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002280), 0xffffffffffffffff) (async, rerun: 64)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x57, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000002e00090027bd700000000000040000004500118031f9e05e2f826cfc31dc2af824704f63dac994ce01dc7224e5479795b50d9015743a8b755e02e490bdfc3da898257de5b8996dbc932b5009df63b75f105c53ead0000000acc652da811ec41bc62fcd1ece064007233e937838ec6dd310243bb25df3f3da4035c973b36db7eee41680503e9a85319b6cde33bdcbed0f57b013b4c015dd521107a0df866951fe5769bce047be17f072233a9eb9244fd8d9ecd9ec5c3acf4bf2d9cd7209000000c3eb0e5d2c2ae6227b44019352854167792e1dacdee31a98d2591ced646e3ae8"], 0x5c}, 0x1, 0x0, 0x0, 0x5}, 0x40e0)

5.809851078s ago: executing program 1 (id=394):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xffffffff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x30}}, 0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x4, 0x70bd29, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x884}, 0xc0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6(0xa, 0x2, 0x0)

5.437980884s ago: executing program 2 (id=396):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xffffffff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x30}}, 0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x4, 0x70bd29, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x884}, 0xc0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6(0xa, 0x2, 0x0)

4.859614859s ago: executing program 1 (id=397):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x101000, 0x0)
syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r3, &(0x7f0000000000)="e0309b", 0x3)
ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000005c0))
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x800, 0x4)
read$char_usb(r4, &(0x7f0000000040)=""/236, 0xec)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r1)
sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r5, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x401}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0xb4022f52f8a411f1)

4.367034755s ago: executing program 3 (id=398):
r0 = socket(0xa, 0x80000, 0x3a)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
mremap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000000b000/0x3000)=nil)
mremap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000008000/0x4000)=nil)
r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r5, r6}, 0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0), 0x0, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800000, 0x0, 0x1, 0x1, 0x1, 0x6}, 0x20)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000680)='\xfc\xa5\x13\x9c\xa1\xfdcP\x9a\xf0\x12Eu[2E\x89\xe7\xa0W%\xd2\x8d\xc2\xab\xb9y\xe9\xc0\\\r\x18u\xd4C=\xe9\xee+\xd4J\xfd\x1ew\x99\xe8<\xcdjk(\xfe\xbf\xe9\x81j;\xe7n\bG\xb5<\xcdN.\xd9Y\xee\xbd\a\xa0\xcdv\x81\xaf\x17\xfc\xa3r\xc8m\xa8\xa0t\x02\xf1\f/@\x00\x00\x009\xca\xd1q\xa1`\x99\xad*\x10\xb1\x02\x05\xde:1/N8\x03\xcbe\xb7\x9c\xcf\x15\x90E\x9e\xe06\x85!\xbe\xf3\x9d\xcc`C\x15\x959\xa4\xd0j\xf9l\x82\xe1\xeaL\xc2\xab\xc7F;\x87]\xd7\xda\x98\xddI=;\x13j\xcf\x9cw\xf8\xf7\x17\xdah\x01\x9bL\x00\x969\x8b\x04\x85\xe5\xcc,\xe0\xd3\x02%\xf7\\7\xd7d\xdbX\x9b[\x8b\xb6\xc7\xf7\x00'/223, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r1, 0x0, 0x0, 0x80800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d300", 0x38}], 0x1}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x1)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)
syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9200103afffe8000006dba8eccbfa9ac8f16996fd50000000000000000000000bbff0200000000000000000000000000018b009078"], 0x0)

4.355650576s ago: executing program 0 (id=399):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200, 0x8040)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000020c0)=""/62)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001e00110227bd7000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="00000000400003"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, 0x0)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x9d, 0x7}, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010005000000000000000000000a14000000e9090103000014000000110001"], 0x3c}}, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c000000320007012bbd7000ffdbdf250a7c0000080001800400dd80100003800c0001"], 0x2c}, 0x1, 0x0, 0x0, 0x10000004}, 0x4890)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setownex(r8, 0xf, &(0x7f0000000140)={0x2, r2})
sendmmsg$unix(r7, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x2b}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x2c}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001b40), &(0x7f0000001bc0), 0xffffffff, r10}, 0x38)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r11, r10}, 0xc)
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00006149d900ffffffff000000000000000000861dba60891d5e8e6b3bea238bd03c073ac8f2869214e17732b0a46754e5cb06cb5cdbf8d1362cea107d62d84c6739"], 0x48)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x44}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="00000000b7030000060000d099ada06b1c2c7e2026b649410000000000950000000000000000000000000088f1f1ced9d952b72c043ebdfd8ec987085997380e8cfa16c93ca2a80e3a251dc8f4f93274e82198de89c60aefc67adcb5575e70fe26a81d9b267c81d6d3213afbd984505e89119959753a7608a88a440ffb708a81d285eb96e5e3ea560e28d13be346588a7a7559e7687b69cb185b7defc8f247994186c46a8376062ca32a23969c6bbc104f49bee499d4"], &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1}, 0x94)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
syz_open_dev$media(&(0x7f00000000c0), 0x7, 0x40140)

4.049793081s ago: executing program 3 (id=400):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
unshare(0x26020480)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
sendmmsg$unix(r2, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xeffdffff}}], 0x299, 0x0)

3.95154194s ago: executing program 2 (id=401):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000080", @ANYRES16=r1, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r2, @ANYBLOB="3000308014000400403a050c5baee2004ef2b6d713459a7a100001800800010000000000040003800500020008000000"], 0x4c}}, 0x0)

3.777830318s ago: executing program 2 (id=402):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xa000000}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0xffffff3e)
sendto$inet(r3, 0x0, 0x0, 0x4800, &(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10)
sendto$inet6(r1, &(0x7f0000000280)="f7", 0x1, 0x20000810, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
pread64(0xffffffffffffffff, &(0x7f0000000100)=""/99, 0x63, 0x91e)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0)
getrusage(0xfffe, &(0x7f0000000440))
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000))
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000)=0x80000203, 0x4)

3.149039439s ago: executing program 0 (id=403):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x11, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000030000000000000000400000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x0)
r4 = openat$cachefiles(0xffffff9c, &(0x7f0000000280), 0x0, 0x0)
mmap(&(0x7f0000c16000/0x2000)=nil, 0x2000, 0x8, 0x4000010, r1, 0xfe6bf000)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000340)={0x43, 0x6, 0x10, 0x6}, 0x10)
r5 = fsmount(r4, 0x1, 0x9)
write(0xffffffffffffffff, &(0x7f0000000440)="240000001e0007000000a600000000000000080008001d000000a497782a531742110a1adcb9400d628a63db6091992b01e0140554abc090c64bc6f9a6681f868b0b4b0010e9ecfa7bbd0a9cf1a606b775fc3f6e7d92a9880e914ec7bd8b4e79f69779ec567257a4727cd5412c6dee3a2204a38e9762c88b2f99408a3b36d90861abe12814c5a2969f3edd862ff96f6fe7010374ad5932c02b3bcc42f3728265c3b68566d6a7609e68b61352b2c0c20500f97d8286f9e307d01c41195e05d67a4d", 0xc1)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e21, @private=0xa010101}, 0x3e37e755da0dbb5c)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
mprotect(&(0x7f0000b3f000/0x1000)=nil, 0x1000, 0xb)
r6 = openat$tun(0xffffff9c, &(0x7f0000000200), 0x2, 0x0)
fcntl$lock(r1, 0x25, &(0x7f0000000380)={0x0, 0x1, 0xf987})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$nl_generic(r4, &(0x7f0000001f80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f40)={&(0x7f0000003800)={0x2d24, 0x3e, 0x20, 0x70bd2d, 0x25dfdbfd, {0x16}, [@typed={0x8, 0x24, 0x0, 0x0, @pid}, @generic="f4e6643bdbb84ba286d3c42d1b8f34ac7e82537a8f3de7cf44ccbbf917ad400c781bb63040028581d66dde0e77d06ecd107b395e204c979cbe0dcfe001ee19291b7d2449e936106f17", @generic="d2bc056a1756be1f4ee41cb3f6e3b2ae641d05766c049aa5a5d502212d5062d1f0c3a6f307c12e9f22b0d77938682249456c5532845b55a536bb9234c988d437d3f76f71867ebbde666e907a8b9a6e2c14ec86db5db320f9a890a0f40809b04d028629f84e3a8d0c74aaba8e98b21c5368a95d1930badac8fb0a74f00bd943b367e4602834", @generic="116ecba0e9cec4da86e9c89772281c346659c93d4885294a977ba266c69bcb766f3c075d252f04fe885a79034f792286ba9b4c521ffe712092f158091d13b9bb37c8f7997f114ce6dd4e49a8c515e7d65980c028dd5595133f2ee8686e4f0dc43bd8b5130757e7163884f5644f7735abc4092216c818841d75463e70f6f4905165f27c5af80ec91958d4595fa9cc426567de4b623ff68bef077092ac7f4312dcffebdf2d0cc944cd7d074ebb56be81dcce095b929558a70a61760a4fd0d46183e689910067498417ef7d1eb12fed63ab9593c045ca784beb6dff1052490f1ed51719c7c05d4cb377be32db4e3bdf25d463dcb4b80f58736d", @nested={0x10df, 0x30, 0x0, 0x1, [@generic="7d7032a56dc251ce5a6595062aab6edceebd7c21610cea6f39fe63397a9463a2272bfc588d9edf984b17ce67c0a03a293f9bc7c5d3418ef88dfb200fdecfd82c2c2373b5edd7783378bf5c1bb59d97909679f7c7c6e8b24dd792ee973a54b42f4d06dd0d6521fa4063004cb9a95a5402b6694a64b0c75a299247295045c09d6ecdd620deeaa52d9032565a2f6b0ab194032dbc3ce5a98d80d7e1fd47d2a34ead8f2ffbf0a39c477d0ac8357353df85", @nested={0x4, 0x7}, @typed={0x14, 0x39, 0x0, 0x0, @ipv6=@loopback}, @typed={0xc, 0xa4, 0x0, 0x0, @u64=0xffffffffffffffd1}, @typed={0x8, 0x133, 0x0, 0x0, @pid}, @generic="696d7805456a796432c354d920736c983be968882ba9364e93c5cded1e5de20a3558ab31db4a5b13c7d7e785a5dbdc6a5ac9c1f1b81a2d7c9fa82848d5e80be944c8380667271dd238a16840b9552c24683779653ed14dafb04ac0ffaf22fe931ef178d23028a4e0c46106ffccc328e562b227e56d48ed0b405d780c6aaf0ae10df08dcc474071dcfd37ad460f166734014b13157aa21a33f23546edc9d3a15363768be5c50e2fd185b0eb5ad6faae2c9498740d83011040935025d66c3be1ab4a7b6d322582aef036eb951b5d47833d3650f0b85213262b2d5392024a54748fda1486adb46c2d209b1ef5c06ac0b3ae8a4747be558d9bac891f7da191464c51dfcdeb44c83b022fe5f7cffeaaf2b2be1b6ad5c18a5c59f683e4f3423ccc09ff5880b3e0d31716355ee50fdc0bf374fbd1f5b5f7e552088dee1513c6ab793eb81f13d81965256df9238cc24f46a5bf4499c1396babd4ea6fa09206fe46e3009b0056f5f6869fdd371ee948233929b76135461c742bbdc684790f78d5678c63630fa14eeeaa408a7c03ce59981b497ee20e3a1301813518ea0f76f70a61c5b3ffc497c50bdc408acd80c9c7348403285583b17d69f32b302a12e8b138147f54032e4a02be7233c86b6926974e26b2fc7e1a18518d110f28dc806942f04ac85135d13a7eadf438bdb3ac04348f4a1df7c33d6a44819e5709759ea6e72b33bd9f391c40e33296112b8681e9560dbd336eb2f6fa6e507d72337dce0bc4c41cf5aba8b6c5f3d08fe1304ddeb9ece14fee5bbb460fa93006842088abdc3df291ce9e8e36c7067515898c6db3d2257c44f3fd790e0b3309bb1e0014f74ed5301b7b2f29b211c77fd524391c33f46c2771b37c3b8468df20a0bdee71fdecd666811b34edb9e177f8bf87d08e5c60951db143f7be2cd0930609d7bd29242c162f812632c2ab46407a289f08508b78b7b05f8de91c363efd03dc2af03b1740c9765782974647fb84ad91980bf48b19e87dfc3c64b7b6562f6f075f3e08c8e23202fd3193096ea7e499ce82eb25132eaf5206b2fd5280e54ff84f0f6bafe9f2f2fe63ec705b3ac8500a90ce298e268900bd25e2ea33d1904d6633a752bed7a6c0c3499edfb92d642c93d32c636a696426210ca032e2f9a77d45e4b60c5ea171bc3636c47e36cfcdbd5e9d34a4bba7a19ca7b3457d29d57e855c02b035168c3073b7c29144dd47f950fc44be4de50cc74d7f22cd394b9388d251dc2f1bbd012636a8f37ab3d4bc3749b337b6f24d570cc8e159f51606e36fd85c4ac714bfa36f264096effc16d104eaf82b76d1e1b5e67c5dd4416bcb84e5b1ec4f120fa8e39276fe935f28ea732c3583a2ba620f245f6402a00fe4cd8d6470af6b581c840404ef4f095fa073580445dab091db42d7217b4e4b7b14a14382a866cfe66cfb9c0a391018bab1c1ea46f02c39dadcec78b02676028b42f40cb7314335c0f83b77d7c2153c7ae5197ed34fc09afc12bbe46ff5e675461df9d17ff13da3fb08e3d4ac5571ea5dd6041d7854717ea16ab863d50007542e87bba1144e5bb5a7a943628eccd065527e9969b9b01c6e2e37b7ffe33e31ea31433bd8b64ace6f783c1cf0d08b6974ce76ef10865862320d7dfa76ed0886964f36f9e466684f37583e9d2994ff5ab0f8844dcdeae5ede6d734c892c9eb6b3494690a22050da5162c8bc92f8a1797d8036b1ddd4b648711892f429c4fb9e8b10f9bad53524cd540912b5ffbfbc5e51dd5fc9eae045c2f363ce678e59921a093001ecc44eb0a4eb16ebbff6fed50fd757d3ec0e784fdd106d737f77453ba989e02d7e8ffe749cc562915f42d42277ef999d289ef9065c3db41b484555f54be52a1319b6fae43561fd905db9e1771f218084f8ca1b619bfc08f211c1283fe5c23e7b057e96d71a481e95053aa55d463f3c589c183f11fde29df36d0cd634cf2b34f86502ab720e4c3c1ec0e5ebfa788d0caeb719f044a1efbd2e3a58117f2980aa7b16f968dcc3c193e6b1e6b33243e4a148505c6a1c40684dc13e63fc63bb29f2d215acb5346e89d1ceec1f90680aefd7872b00473025264641197907c0a3964114ffea6b09c40b62d463068d3f8ad6364e458e59c05848b33de826cc4dc1fdb34dbdf0d8661a7f74bfc89e70bdab88f9017f0d12fe336c5834f70e6eb4b253fe049c2a599704ce3157f1a89ea514ef8c7ec4a14356bec86b9393a539244c88dde665fee5f40d01bf7c6b98944af5e1ef215899fb588f4e8fa1cdcfd1a65bc6e2caa930e491ce9a62c8bbd274b941616d5a99b9dd999aa7e5dd6c904d1ccd6ef35b99679b534549f221baea78f78896c996804247977bae0d67cd17e53a61cceeec3bcf19142ed1a03b6b751d689ddf5e1abcee8ebff4bdd83f7cef46c3b786cd2d0261a15fd7aae2d1f76750b96a1051dc78a137c6fb516d5d3eda538376be041b44a664e4171cba08001681be67e08da016085fe13cf4d3327bd1e71598efc995dc8be4eeb3cdccad107176b1e8c175f81a9c9f374487f2c148e53d3770e4df99a39f5dfd5fa62504c7ffbfe822328aafe260e0a2082d513581c6a43d3025d94743f9d600aac7db21834351977619d897c14644a8f770c0170ab52aae4435f3cbf5a75aa043a63a3fa8bca4d17da3aacec92180b1b22c0dd24ff11e2e43318eebda983e6a5f0d49452030b2c4fc66fc2bfa826de78109653a7700dfb4eca2a9e35d8b368d09694e6b11be8ef45bf251e7a64720b50037d3b20c83b4f33adc5a638943b598f80342ed6a224c8d02e3df694541739f42759e4fdecd9c1fd4af08b6df1423361337603e431ad4cc00835cbb2534fb06c3c43ae4502195ab4f126b94a98ed523b2c0eb95193f143afa4a3829f246a83546f19f0b010cd531ebdba38ba4dfc10db12646ded0e94d3827486c0a99eadf731395f73e8dcfb0638e73578a9a4d7aa4bd7af1c44c1ef62f0376642ed5adba2e595e05b3485f81239539679698a9bc6f286c3088b58b72c6374d3762c908959e0c9bdb314e177157256bb846f922b8858fe3840f8aeea6230ddfa0438d1deefd22ca90dcfa6954ff4dca4d522ad0867af94075c0d30b4bd596cbc4028d58e3b5cb991b0c2af354eacb4ebcfb289ae8ff4f72f08f94814cf6649826e42d56ed5040ede0bf7db73f19ebf64f78c0d094c8e934a7492a57c514b6ae35990916bb9ee4109f3d4628554688ff6f888a4e4929e8640f96597d8a238aad2d1873283ed9d19b0058845ff2cbb1c7673a8ba3a68fd029d3866251b64f423da81c3cdca6bc6f1e7375a9247cc3f63b53b0b10edee69fcd9e07551f8e28540c236d82ea3ea7a980ad6d9623249f1edd0c40baca8c7dfc160b1624cf1169f51b31822327d0f0e71b2d897de2b2e3ab16d6eb0226f5f54421a093210dffa389b00b9ab7d9c4c0b2e12905d62f1bd648e716f44d532e89b50dec24105bf0db1926621ea86f897debc9578075fdb9800b8a97b9a9d7f9276c05c8b3c8cfc4c29e761d861ca94c9b2b5d454070a2af8027e383f17c5bc14c5d8a2300e0207c3b70d82249fb3ec825c24e7f1e4a0a0ca1c7608183244f93b508327bb0fbd52ca138dad715dfbaf35951bc261c2a0e70b4ffd500a66c38c126ed24787a8ac0dcf5af9130ac7c0f32e8f57e79b253fe719aee5af487206012b9f3cf5cb6908df07d5742e688f5bc15a2bacab1fe28eacacd3abfa0dcfc681de1688525c69caa5e2ed956f70e9752ffc37f8b110c1309f0fd35a896d651f43592272dea0e62bb2aea3c171170d5d1aa198b3b603e52e1617e16e14a95e8228e724ba4a56514dc5e2f4cbd05ec92078177e7bab13483a17f960470ccfab864deb1da2c521d0bf8c3f0cd42fd60c24f65f5c3473706cb3a26fa3e46bd16a8d53edc8eaf6cc02f16c5bd5fd837010f6b48e406fe672d6a452fca05ce3a4d2a81a9c166481f422995efa37d8b630edc07f56f4e133ea6a440bfe7ffe5d5ffa0b8aa42dc524bba9d7704d55d16c93dfd49890204cdd3e621b9dac8fbff19f18d10d82c2d9cc7a40a1913284913e40dadec0f06ca830c92dee5c4797cc6db70d74ed60e06ca611b6bb30e456a57c823f52b31ff8c68edaa169f661ff6409182a23dd2dffd5311836dd949333aedb4d3b2f8b094a09aa39322df8f11159fd7c27fa4c839e72932b54de109b57a4a5edd8016ca3802e9123b98496b7cfc58fdc0a71e858d8de2d0e5f3950b74a145f2f0229955b5ccf7a5c00fceec7f07942dff87b844aa2773da5814baddb0ba49e164e07da5e1bda7b532ff4afd1e9476cc84643de50df1f32287796b2038e067dce2bca3ff958acdd8954fd315fb3e05451cd6d53f616516d6f76679134e6e0d7be2a8fd43c5901192bc6d4cf73cb8e1183589be85e69c37dec4169df55ba11e39052055369a7aacbb11ae16cada98caa7184d41a107394643f8780b96fd5443dcab2bda9837ca3cd69b29dc780e1a7afe345cc6421f23f4d3686af38515b126fd1d81e526c84e77156571ef74378e3f74e533c5a2a4640d514411135cd6640c28cd7e9547730499175b9008ae34651b174b35ae0822bd28bfaee5f66844c3f3578513a6e1f518aefef3efe482411d481c54e4582b8ce3b6f6188b3aa918961904f3c131c1cfd587b23d397628f49204efc9977effe186531cda0f5d6a49dbaa636e8bf5a5dcc8a337a628f90124b9bd5295478b65c9c1dcdad48e13c3e33e2b66076c4ccaf2a89c2d92319d7351952b1424c7d7c9c274fce1c1d332fa5704ffe217a0d2a29cd4f35549193667fb19db5b5386da16ace289eed4a78dca3865fbc9832042b0ff2a77ecf84937f396e32a437d53d61d748a05e774022ea1d524d3a8fb7dd5c856ecf7eaf52245cc7104cb187a2e6a015465161b2f8e9517bd5b723d12c132dc7d3760a03039e59cc99d3f7cf00c54935e4d75a4831eae5e188c3d4f1c6677ad849baad2d64e4c165e956575f9c2f676ef583a225cdd3927cd2ed21bdf5d94ecdc17974a28e80a5bceb86deb84a8996ba8f9183cf02e333ba33ee0d27fe051a702da989ea5137aca6692c97b1a8d017333bf99992b3b346da27abcad752ead4122c1679cea936a92cb775c2afdcfa0f6f27682f4324d0f4e3d9b868004a27db9877a2a3fe10cd0519eddd174565595e0948ff78aceb4396f5852e6ce0807867fa16abb1f3eb7bd78f83dbb18a0585fa41605f16f53615c8651946f1cfc6a97abbd862cb254b1095b6ab63d1932ba03cc648ecbcbf19317916d8f4dd048df65048bf11027b936497fa087f28a8a54624a05c37b69183bd0e2e11d79daa8caa48c5d8b1400ce5f86ac68838a719bd2b896c1796f033dd9c361c775827307dee9cec5566d9fa44c4160b5fc93b75fa5004940d968eb6b4c44e0bfcad12b6a19e01c70421073dd08cc77a0ce463c181df884643b8a47749b8bbf9e59fa5e8eb16f069bd2ae8d891fcd758aea970181dd4a2a34d9c77028154c7328e48c5ffc2f9170dc7a28c02da87603d0327b401783925f4fea86f43f3e771a2d493130004bfb62a947b7ada3b7b56e2905b57c15836d50317e459f9d528b90b72393b274fd23525cb22393a0f0e4ae1b7cb883d4c4346a10ba77ee9587ab60606a9854ca056c909157d404d527fb12ab38ea916722e611e715efe4cf470071e5ac4185bacd0551748db063a2402f67c61b60e72e7ee8191653729802fd015bc14c2c85ff71ab0f83c954643573964466929dfca161e04e23db618d2e49540ebc2839b678927"]}, @nested={0x35, 0x8c, 0x0, 0x1, [@typed={0x14, 0x3a, 0x0, 0x0, @str='/dev/cachefiles\x00'}, @typed={0xc, 0x6f, 0x0, 0x0, @u64=0x1000}, @typed={0x8, 0x8c, 0x0, 0x0, @u32=0x200}, @typed={0x8, 0xdc, 0x0, 0x0, @u32=0x100}, @generic="0f"]}, @generic="728ee60e42932c114eb30793a9539d8792c07a9f8ddbcf6b44bcd01cf3f2242e0e2e8e82557d8d5a33aaab2d49011991b302307e54718134e918215e415c8dfa655e0b03f1249920ccd265", @nested={0x258, 0x94, 0x0, 0x1, [@generic="e31eefeaa5fe6011098e2a2b91e9743659206e2a8ed92878ca2251e9c8ccff8af90b4f1de0a712b5775ed13d4fec6710c35286d51c62aa59f3315c7491c587c01fe655f3ff33e0f9e4f8556075d14f3d3a462d6cc06666c3f33f32ac367b90486beb2b41aeaec8740fc1a81c4f633da3bf7c9d09bdc4b0ad97de6b4f30927cf688e5fa9255b267cf68f123c3a5922796fd766e7b31b43fda4bc65a957ac22fd8738046", @generic="00affaab78f4cbd1320c60cb22a3ae891fb8c8a588431aad884e788fd3d0928fd9ed0c42ffdc793698737a745330d2c086b01c0c069f2a65da0426fe73507e4ed0979e91933457f8b0e3ba4633ab11386c09ff19fd40e56b40f54b4e22440c8a1cd966b3f2987627ff6736f71ef4a95b29f58d836966a7e7cb0592b0e1c76163dc405d231c261182d772c435329fef15ccded8b099e04b9ace1edc4b90d2186304b601721ab5ee47cb8d6aa532f64ac83df6772446a7e026fb02cbe45d9f9b2285d721f28c271c3e9aea0d8346d71203c5104f16fbcd1e45e09e5acdef85f83e5516e4c05f9b20454f91b85144f1ad06aba365af357b", @nested={0x4, 0x1f}, @typed={0x8, 0x68, 0x0, 0x0, @uid}, @generic="83347f30a682ccf20f008a7e3dfcb9299bd87c3b8565db0e7ad2b4a26ed8ddc39525f4ff05e1065dc13744e3529c91a4dc60b02211b74ae053f519860315427c68ebc73a753d9b5359763c61ea5504727493bf2fb660e53ecf2338d1cf252f52aa923137403cef3d20f8b5077c", @typed={0x14, 0x95, 0x0, 0x0, @ipv6=@mcast2}, @generic="460f23de8cd868a8ef84cc30a6a96317dc0fb0e67658104c9f3752b516da31b39f87e895a16fdcc0421488c69d7e"]}, @nested={0x1782, 0x64, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xffffffff}, @nested={0x4, 0x7c}, @nested={0x15d0, 0x103, 0x0, 0x1, [@nested={0xd3, 0xa3, 0x0, 0x1, [@typed={0x8, 0x93, 0x0, 0x0, @fd}, @nested={0xa9, 0x165, 0x0, 0x1, [@generic="c4849ea42f48db401663a0be47d87215fd4103c9bb58d5e7c3413351a1457437b5204d99a3f2973fe06ff683af90c7602b291e1a9d51a8fde73817137c23773ba76f6bcf073746ceccf750f776c6a26e616ca312386f8bd208694610fdcb1191dc4f9f3f74bcdce8b002d4d6b839826afa1ffa2965028533bca894888662efc076109ce683cd5281a21d1962fe88581156d59991d5c0f49e6dd877226b7fcbcfc6884c7cb7"]}, @generic="5eca99edb1186870ffc80aac45afa458a80371ffa67637ac7a8bce"]}, @nested={0x1074, 0x119, 0x0, 0x1, [@nested={0x1034, 0x45, 0x0, 0x1, [@nested={0x4, 0x14f}, @generic="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", @nested={0x4, 0xfc}, @typed={0x4, 0x147}, @typed={0x23, 0x21, 0x0, 0x0, @binary="9a771b5a1d79424c72e6f2cc9ebbb8eb1261c62cfb120ef15cd608958a5116"}]}, @typed={0x3a, 0x1e, 0x0, 0x0, @binary="dc08fbb518e01f05cb9b61cb5f47edecdb13158be36cf541e433671169b53b60777f58f3742f12291a523e28623ca56eefc3cf577645"}]}, @nested={0x21c, 0xc7, 0x0, 0x1, [@typed={0x8, 0x149, 0x0, 0x0, @pid}, @generic="d31364717b73ed6f9ddc4bcfe4bd3445df48c8faf468f3f09ea88a67069680d5dd81666df3ba99d951082f5e67747944b81641a544273e4ca2704d6718813d44c718bf1efc6ce707ad44ae38dc41b93d0a0e3ff57d83cf54f22dc208d0e4ac6c51a055589ddf8cd4479dcaeb4b02aa341ae212d5abde40a4fafe839bdc4b4f8faea29509c5c9557e140f41c3c4216ec2aff4b85f7b358aa63fe93de51b8717db237bf9f91af80e18b4f002f0d6134d72a54eb36836765a166c2a687dc14f09ed", @nested={0xd3, 0xee, 0x0, 0x1, [@nested={0x4, 0x77}, @generic="ae6a7ab244e6200956286c0ce6a154bb8cbe2487ea44a54a130d0f03bddd3685ab4c1d2ef4860861f6f756c189689df6c0564669eaa4d59cd54bdfe3de40b80449d92bd807e34d8b23111ea286d312b1e66535b797fd695d2fcef05734c36f588a6902d13584e4c6b1a408270b23d2d156751351f70db987404e3f0b6c2331209004bd6a9cdd695d2b8dd805ee70995ab299c409caae90aee469f1504b9aa0f15b6a959415cee671dde05e276a768698baf433", @nested={0x4, 0xb2}, @typed={0x8, 0x51, 0x0, 0x0, @fd=r6}, @nested={0x4, 0xc3}, @typed={0x8, 0x146, 0x0, 0x0, @pid}]}, @nested={0x7a, 0x164, 0x0, 0x1, [@generic="310375631c6b8fc473fe1c56667e3e7691302ba82c8a93f7ae1377f3745e4814e1576c9cacc3ef224b10059101f9eb17d36919f2a08e02615c9771173257ce40e25c1126d37f61bb29cd38d97bb9cea7ad982e4997a4f8e2b3d9b2d4abf001a34e99941b724baa0584ce55ed98ffc266f480", @nested={0x4, 0xeb}]}]}, @nested={0x264, 0x13e, 0x0, 0x1, [@generic="11a1be6c508d4e5911ae3c7355d3fa56638af95b242c10612e658b65cf5e4406337a436499f3fc8a472b2af422046b92b4d33b2b429a1a4a0078422e9e3f08251f0b3917cb0e6486d1a873d765137b13af41eeb0974a958f7fe43b0a0f1b4bdd73f089827b494161744719e6a41571ad03f8eb9ae67beda598f0b9646dfb023b86818a735d2e54e6e2c0cb4a1eddb9ab1cd76b916a6fae7fc6ee9b6f6d57630cf06f208daeb4c6359982abe0b462228d2d7f861c090bc3b0668550f4de5cd6a3378720df8f5dd4856898393ff5cf83ff614799c449e8df02bd30da40b7d6a2", @generic="523ff936eeabcfe163fc9bbda09d7a2c5c2d30ed9896f55474faef4704210de14d09412186", @nested={0x15b, 0x11f, 0x0, 0x1, [@nested={0x4, 0xb2}, @typed={0x9, 0x4a, 0x0, 0x0, @str='vegas'}, @typed={0x4, 0x27}, @nested={0x4, 0x4b}, @typed={0x8, 0x7c, 0x0, 0x0, @pid}, @generic="f8253d644d2d5b5bb5eccece5b1e17911828d35228780e0f8bf746bded1e9caf3e2120aecfda6f273306c8599f60faa346bf4fabe6e948aebda6a79eacad561542256930a95e1c6b3f804ed5207e830d7ed9359d15eba68424767ecae3662d635424", @nested={0x4, 0xe4}, @generic="d3a1beffb87d6b60b32b097423574196f27ab0a43889cbb7f964a6d1162f1c81ffb061e35ce8b29009b76ccceb2f92492f080c86ccc83029603333b5cc6afd4a53c4dac67f09e03e896e2cf21fe2260b4a4eb9e1af5bb92a40a023bc3bd91840f7cfabf6343f23f8a2c36ec1dd56c462d55df4268dcf9f45493526e38031339e1d4f2d957832c2ea75da031c6184d0c2fe7c20708b1fd7abe79e67bdffdfcac3268bc9c91d8c9f61e9671133f512131b5f53fd464a7c7aa240cb82e82fb9b7fa3e9a62dd6e1a784c531201716b6f5f2a18"]}]}, @typed={0x4, 0x8c, 0x0, 0x0, @binary}]}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@remote}, @generic="be914a3aa75b83f9407ef890300670c387cee2a20b678394896f3cd80a418f26fa789ec66f7cd110720d14c593ca83bad3e5cde2e9a15d5071f16a09a0a69724599cefcb684354bed38f0d0828c332adaf4c5e209df1b9f0b6b9fad12da186c07fe35983d03f0d1c5d3a355e2128bb5b1b5d933d731f58c97907b936cc9bdac41f110dd3df596dae38028f38311aeea4a6fa1dc0087ea2ec137267dc72baf14f6c830376a6701c1f5d74666e208e3d577f667272935c0be141879b6b80cdece3a3d919422b7a8998698c", @generic="bbe19855dcce8929fbb66aff159947d363b60ce52a2b61c5858de00a1e870ab262", @typed={0x8, 0x97, 0x0, 0x0, @uid}, @generic="def60a89d2b568a1841d83d406fa6c36c5495fbf2153611abca65961bb248c7ad623d4fac884f0b7935acb3dc4100e83df49d70905c041c1dffc8a47c0fe0a27675ae3656b2f13d2326f056d6daaf21aeef1ce1a0844a7fd1452cffa599df404fcff7e8e8d413195f6d2bfadcca5f58da644bfd54a059327ac1ccb34fbac53c65f2894a70954ec5e09bf7d84a291417b7a2edb", @nested={0x4, 0xff}]}]}, 0x2d24}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000010)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000)
r7 = userfaultfd(0x1)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108})
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='vegas', 0x5)
sendto$inet(r5, &(0x7f0000000700)="3cd4645e084cfc2268108bda96a2f18f570123556d80795ff9e053542b8bd130618cf81c28aba2841ea04fd87c1faac48a4e540ccfcd3e4b078dceb923bacb724813b3044664a2f16a71fcccf75550337e10ad5f3f96559e829da5a1c32b5ddce9a07a0eee331bb1d156a25668b2fccd8a791207000000000000004d186ded7a9f746b3b2c6bfcf07e9a66a31f2280db3007caa4360279ecc7bad24adefdb3dde05d6942d5cc90d22886", 0xaa, 0x0, 0x0, 0x0)

2.800357791s ago: executing program 0 (id=404):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x18, 0x76, 0xb0d, 0x4000, 0x0, {0x3}}, 0x18}, 0x1, 0x0, 0x4000000}, 0x0)

2.800034491s ago: executing program 0 (id=405):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xffffffff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x30}}, 0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x4, 0x70bd29, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x884}, 0xc0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6(0xa, 0x2, 0x0)

1.769962346s ago: executing program 1 (id=406):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'tunl0\x00'})
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f00000000c0)=0x1ff)
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000)
syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880)
syz_open_dev$ttys(0xc, 0x2, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x2c4, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1fc, 0xffffffff, 0xffffffff, 0x1fc, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@local, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0xffdd, 0x6, 0xcc1, 'syz0\x00', 'syz1\x00', {0x58}}}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24, '\x00', 0x7}}}}, 0x320)
add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000180)="0000000000000002ff69000000000001000000c000000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da888c7", 0x41, 0xffffffffffffffff)
sendfile(r3, r3, 0x0, 0x200000)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40c03)
readv(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x4800)

1.640211704s ago: executing program 2 (id=407):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3081, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd"], 0x66)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50)
pwrite64(r2, &(0x7f0000000000)='2', 0x1, 0x7)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r3, &(0x7f0000000000), 0xd)

1.547205048s ago: executing program 0 (id=408):
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fdffffff000000000200020118050000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008001800b7030000500d0000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x2d, &(0x7f00000000c0)=""/45, 0x41000, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x703, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x7c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x50, 0x3, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x40, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}}, 0x0)
getsockname(r0, &(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000000280)=0x80)

569.807231ms ago: executing program 3 (id=409):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14}}, 0x28}}, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xd, {"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", 0x1000}}, 0x1006)
ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000200)={0x10, 0x3})
socket$kcm(0x21, 0x7, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x9, 0x4, 0x4455db47, 0xfffffffd}, 0x4, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_usb_connect$cdc_ecm(0x5, 0x69, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x57, 0x1, 0x1, 0x6, 0x0, 0xe2, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x8, 0x24, 0x6, 0x0, 0x0, "72727f"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xefc, 0x9, 0x100, 0x7f}, [@country_functional={0x10, 0x24, 0x7, 0x3, 0x1, [0x4, 0x80, 0xb, 0x1, 0x9]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x64, 0x1, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x40, 0x4, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x6, 0x76, 0x7}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x1, 0x80, 0x5, 0x40, 0x81}, 0x10, &(0x7f0000000180)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x30, 0x7, 0xd6, 0x81b7, 0x8}]}, 0x2, [{0x81, &(0x7f0000000240)=@string={0x81, 0x3, "064fb230b91806a25bd93fbf42c56a53adf2852c48d6f8e9415e0eef61a894bb200da0a817ea38ea65a27127f46af56ee2014c329c7aada9493a7c66288a26d0aecf2981cb901511e035809ac405e542299ba19eb792bc0386e6db99bc339e893b106e1397793b1bd2915c026db2c4c6de99030dd6c0df56b93b5fcb242c84"}}, {0x34, &(0x7f0000000300)=@string={0x34, 0x3, "4c902cf38ac67432bbee61a17899289eb627b2716943a9dd81811b05bc2521384ae0524a59dacc5c3258ea91df480e44e08e"}}]})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b00000085000000070000009500000000000000"], &(0x7f0000000680)='GPL\x00'}, 0x5d)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000180)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = dup(r4)
write$UHID_INPUT(r6, &(0x7f0000002140)={0xf, {"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", 0x1000}}, 0x1006)

534.591875ms ago: executing program 1 (id=410):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2f, 0x4, 0xff, 0x9, 0x50, @dev={0xfe, 0x80, '\x00', 0x14}, @mcast1, 0x40, 0x10, 0x40, 0xffff}}) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', <r1=>0x0, 0x2f, 0x4, 0xff, 0x9, 0x50, @dev={0xfe, 0x80, '\x00', 0x14}, @mcast1, 0x40, 0x10, 0x40, 0xffff}})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@delneigh={0x7c, 0x1d, 0x8, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, r1, 0x2, 0x94, 0x9}, [@NDA_VLAN={0x6}, @NDA_PROTOCOL={0x5, 0xc, 0x3}, @NDA_NH_ID={0x8, 0xd, 0x6}, @NDA_LLADDR={0xa, 0x2, @local}, @NDA_DST_IPV4={0x8, 0x1, @loopback}, @NDA_FDB_EXT_ATTRS={0x18, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x7}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x6}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @NDA_PROBES={0x8, 0x4, 0x7}, @NDA_LINK_NETNSID={0x8, 0xa, 0x5}]}, 0x7c}}, 0x0)

479.337083ms ago: executing program 1 (id=411):
socket$kcm(0x11, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000300))
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r3, 0x0, 0x8000)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6}]}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x0, 0x3, 0x5, 0x4})

0s ago: executing program 0 (id=412):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80880)
write$P9_RFSYNC(r0, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7)
r1 = openat$bsg(0xffffff9c, &(0x7f00000001c0)='/dev/bsg/2:0:0:0\x00', 0x800, 0x0)
splice(r0, &(0x7f0000000200)=0xc, r1, &(0x7f0000000280)=0xfffffffffffffff9, 0x0, 0x1)
r2 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@local, @dev={0xfe, 0x80, '\x00', 0x44}, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r3})
syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x200}}}}}}, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0xfffffffe, 0x143102)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:9392' (ED25519) to the list of known hosts.
[   78.091941][ T5733] cgroup: Unknown subsys name 'net'
[   78.271180][ T5733] cgroup: Unknown subsys name 'cpuset'
[   78.275867][ T5733] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   79.153365][ T5733] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   83.157606][ T5755] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   83.162483][ T5760] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   83.167722][ T5760] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   83.171004][ T5760] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   83.172099][ T5764] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   83.174063][ T5760] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   83.176350][ T5764] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   83.179680][ T5760] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   83.180787][ T5766] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   83.183386][ T5760] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   83.186566][ T5764] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   83.187567][ T5762] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   83.188452][ T5766] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   83.188841][ T5766] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   83.191936][ T5767] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   83.192414][ T5764] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   83.192737][ T5764] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   83.195973][ T5762] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   83.197646][ T5767] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   83.199579][ T5762] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   83.722168][ T5758] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.725964][ T5758] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.729378][ T5758] bridge_slave_0: entered allmulticast mode
[   83.733301][ T5758] bridge_slave_0: entered promiscuous mode
[   83.760491][ T5758] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.763845][ T5758] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.767004][ T5758] bridge_slave_1: entered allmulticast mode
[   83.771765][ T5758] bridge_slave_1: entered promiscuous mode
[   83.845587][ T5758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.869009][ T5758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.882378][ T5751] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.885687][ T5751] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.890219][ T5751] bridge_slave_0: entered allmulticast mode
[   83.894200][ T5751] bridge_slave_0: entered promiscuous mode
[   83.912129][ T5761] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.914911][ T5761] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.917737][ T5761] bridge_slave_0: entered allmulticast mode
[   83.920896][ T5761] bridge_slave_0: entered promiscuous mode
[   83.935874][ T5751] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.939023][ T5751] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.942100][ T5751] bridge_slave_1: entered allmulticast mode
[   83.946271][ T5751] bridge_slave_1: entered promiscuous mode
[   83.951769][ T5758] team0: Port device team_slave_0 added
[   83.953734][ T5761] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.956177][ T5761] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.958949][ T5761] bridge_slave_1: entered allmulticast mode
[   83.962678][ T5761] bridge_slave_1: entered promiscuous mode
[   84.005062][ T5758] team0: Port device team_slave_1 added
[   84.025181][ T5752] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.028524][ T5752] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.031711][ T5752] bridge_slave_0: entered allmulticast mode
[   84.034306][ T5752] bridge_slave_0: entered promiscuous mode
[   84.039749][ T5761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.057068][ T5752] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.059526][ T5752] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.061807][ T5752] bridge_slave_1: entered allmulticast mode
[   84.064338][ T5752] bridge_slave_1: entered promiscuous mode
[   84.074422][ T5761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.085972][ T5751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.090882][ T5751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.094500][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.097474][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.108370][ T5758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.135603][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.138871][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.149026][ T5758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.155508][ T5752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.159443][ T5761] team0: Port device team_slave_0 added
[   84.175402][ T5752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.179205][ T5761] team0: Port device team_slave_1 added
[   84.182361][ T5751] team0: Port device team_slave_0 added
[   84.203379][ T5752] team0: Port device team_slave_0 added
[   84.207580][ T5751] team0: Port device team_slave_1 added
[   84.221695][ T5752] team0: Port device team_slave_1 added
[   84.230489][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.233748][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.243467][ T5761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.260530][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.262672][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.270458][ T5751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.281386][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.284512][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.292417][ T5761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.306104][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.308283][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.315972][ T5751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.323016][ T5758] hsr_slave_0: entered promiscuous mode
[   84.325535][ T5758] hsr_slave_1: entered promiscuous mode
[   84.333048][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.335679][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.344612][ T5752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.351971][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.354265][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.362059][ T5752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.388866][ T5761] hsr_slave_0: entered promiscuous mode
[   84.391096][ T5761] hsr_slave_1: entered promiscuous mode
[   84.393109][ T5761] debugfs: 'hsr0' already exists in 'hsr'
[   84.394913][ T5761] Cannot create hsr debugfs directory
[   84.437781][ T5751] hsr_slave_0: entered promiscuous mode
[   84.439998][ T5751] hsr_slave_1: entered promiscuous mode
[   84.442122][ T5751] debugfs: 'hsr0' already exists in 'hsr'
[   84.443857][ T5751] Cannot create hsr debugfs directory
[   84.481155][ T5752] hsr_slave_0: entered promiscuous mode
[   84.483515][ T5752] hsr_slave_1: entered promiscuous mode
[   84.485519][ T5752] debugfs: 'hsr0' already exists in 'hsr'
[   84.487282][ T5752] Cannot create hsr debugfs directory
[   84.748312][ T5758] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   84.754764][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   84.759347][ T5758] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   84.766493][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   84.770494][ T5758] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   84.774883][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   84.786360][ T5758] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   84.791941][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   84.827082][ T5761] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   84.835833][ T5761] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   84.838865][ T5761] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   84.843530][ T5761] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   84.850919][ T5761] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   84.857361][ T5761] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   84.862020][ T5761] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   84.868959][ T5761] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   84.928035][ T5752] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   84.934887][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   84.941005][ T5752] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   84.945697][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   84.950466][ T5752] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   84.956876][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   84.961159][ T5752] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   84.967012][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   85.017766][ T5751] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   85.024609][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   85.034917][ T5751] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   85.040670][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   85.044447][ T5751] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   85.050183][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   85.054805][ T5751] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   85.058859][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   85.102294][ T5758] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.141848][ T5758] 8021q: adding VLAN 0 to HW filter on device team0
[   85.155994][  T232] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.159369][  T232] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.166087][ T5761] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.178897][  T232] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.181249][  T232] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.200739][ T5752] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.209740][ T5762] Bluetooth: hci1: command tx timeout
[   85.209955][ T5764] Bluetooth: hci0: command tx timeout
[   85.215113][ T5761] 8021q: adding VLAN 0 to HW filter on device team0
[   85.221543][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.224429][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.245747][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.248009][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.270255][ T5751] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.285568][ T5752] 8021q: adding VLAN 0 to HW filter on device team0
[   85.289050][ T5764] Bluetooth: hci2: command tx timeout
[   85.298790][ T5764] Bluetooth: hci3: command tx timeout
[   85.307829][  T232] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.310492][  T232] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.323241][   T78] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.326327][   T78] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.335752][ T5751] 8021q: adding VLAN 0 to HW filter on device team0
[   85.348811][ T1293] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.351295][ T1293] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.370910][  T232] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.374268][  T232] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.634836][ T5758] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.694501][ T5761] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.697792][ T5758] veth0_vlan: entered promiscuous mode
[   85.712544][ T5752] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.715525][ T5758] veth1_vlan: entered promiscuous mode
[   85.721500][ T5751] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.766542][ T5752] veth0_vlan: entered promiscuous mode
[   85.779066][ T5758] veth0_macvtap: entered promiscuous mode
[   85.782478][ T5752] veth1_vlan: entered promiscuous mode
[   85.792350][ T5761] veth0_vlan: entered promiscuous mode
[   85.795526][ T5758] veth1_macvtap: entered promiscuous mode
[   85.803906][ T5751] veth0_vlan: entered promiscuous mode
[   85.809828][ T5761] veth1_vlan: entered promiscuous mode
[   85.815215][ T5751] veth1_vlan: entered promiscuous mode
[   85.823222][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.834078][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.852048][   T47] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.855953][   T47] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.868007][   T47] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.871545][   T47] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.875997][ T5751] veth0_macvtap: entered promiscuous mode
[   85.881253][ T5761] veth0_macvtap: entered promiscuous mode
[   85.889039][ T5751] veth1_macvtap: entered promiscuous mode
[   85.895280][ T5761] veth1_macvtap: entered promiscuous mode
[   85.903067][ T5752] veth0_macvtap: entered promiscuous mode
[   85.913959][ T5752] veth1_macvtap: entered promiscuous mode
[   85.928019][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.942368][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.954158][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.972627][   T47] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.973660][   T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.975765][   T47] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.977492][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.978616][   T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.989756][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.996620][   T47] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.007352][   T47] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.024988][   T47] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.029382][  T232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.032157][  T232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.034036][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.039046][   T47] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.041817][   T47] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.054134][   T47] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.072114][   T47] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.079391][   T47] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.091421][   T47] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.095752][   T47] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.103726][ T5758] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   86.131273][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.133804][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.180865][   T34] cfg80211: failed to load regulatory.db
[   86.191141][  T232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.199465][  T232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.229785][   T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.232774][   T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.253369][ T1293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.259244][ T1293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.265977][   T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.272878][   T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.289065][   T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.306664][   T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.528829][ T5909] tipc: Started in network mode
[   86.530498][ T5909] tipc: Node identity 16b67f6ac77c, cluster identity 4711
[   86.533442][ T5909] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.542634][ T5909] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   86.542892][ T5907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'.
[   86.547799][ T5909] tipc: Enabled bearer <ib:tunl0>, priority 10
[   86.554833][ T5909] syzkaller0: entered promiscuous mode
[   86.556579][ T5909] syzkaller0: entered allmulticast mode
[   86.574121][ T5908] tipc: Resetting bearer <eth:syzkaller0>
[   86.588999][ T5908] tipc: Disabling bearer <eth:syzkaller0>
[   86.836933][   T29] libceph: connect (1)[c::]:6789 error -101
[   86.839657][   T29] libceph: mon0 (1)[c::]:6789 connect error
[   86.846052][   T29] libceph: connect (1)[c::]:6789 error -101
[   86.849014][   T29] libceph: mon0 (1)[c::]:6789 connect error
[   86.871710][ T5913] ceph: No mds server is up or the cluster is laggy
[   86.948995][ T5931] ceph: No mds server is up or the cluster is laggy
[   86.952700][    T9] libceph: connect (1)[c::]:6789 error -101
[   86.961839][    T9] libceph: mon0 (1)[c::]:6789 connect error
[   87.289660][ T5764] Bluetooth: hci1: command tx timeout
[   87.368714][ T5762] Bluetooth: hci2: command tx timeout
[   87.370846][ T5764] Bluetooth: hci3: command tx timeout
[   88.069648][ T5956] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   88.591238][    T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   88.602599][ T5858] tipc: Node number set to 3519709034
[   88.749315][    T9] usb 8-1: too many configurations: 9, using maximum allowed: 8
[   88.755528][    T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[   88.759528][    T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   88.764123][    T9] usb 8-1: config 0 interface 0 has no altsetting 0
[   88.767805][    T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[   88.773653][    T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   88.780812][    T9] usb 8-1: config 0 interface 0 has no altsetting 0
[   88.784416][ T5958] 
: renamed from bond_slave_0 (while UP)
[   88.787805][    T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[   88.791522][    T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   88.794895][    T9] usb 8-1: config 0 interface 0 has no altsetting 0
[   88.797923][    T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[   88.801538][    T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   88.806078][    T9] usb 8-1: config 0 interface 0 has no altsetting 0
[   88.810677][    T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[   88.814047][ T5958] bridge_slave_0: left allmulticast mode
[   88.816715][ T5958] bridge_slave_0: left promiscuous mode
[   88.819639][    T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   88.820773][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.823634][    T9] usb 8-1: config 0 interface 0 has no altsetting 0
[   88.824632][    T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[   88.832044][    T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   88.835931][    T9] usb 8-1: config 0 interface 0 has no altsetting 0
[   88.842268][    T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[   88.848411][    T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   88.853246][    T9] usb 8-1: config 0 interface 0 has no altsetting 0
[   88.856928][    T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[   88.860720][    T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   88.864877][ T5958] bridge_slave_1: left allmulticast mode
[   88.865150][    T9] usb 8-1: config 0 interface 0 has no altsetting 0
[   88.873515][    T9] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[   88.874000][ T5958] bridge_slave_1: left promiscuous mode
[   88.877438][    T9] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[   88.883291][    T9] usb 8-1: Product: syz
[   88.885031][    T9] usb 8-1: Manufacturer: syz
[   88.886979][    T9] usb 8-1: SerialNumber: syz
[   88.887527][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.899605][    T9] usb 8-1: config 0 descriptor??
[   88.913420][ T5958] bond0: (slave 
3
0
): Releasing backup interface
[   88.925848][    T9] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0
[   88.934000][ T5958] bond0: (slave bond_slave_1): Releasing backup interface
[   88.972251][ T5958] team0: Port device team_slave_0 removed
[   88.987939][ T5958] team0: Port device team_slave_1 removed
[   88.997906][ T5958] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.002331][ T5958] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.007911][    T9] libceph: connect (1)[c::]:6789 error -101
[   89.011808][    T9] libceph: mon0 (1)[c::]:6789 connect error
[   89.035512][ T5965] ceph: No mds server is up or the cluster is laggy
[   89.093002][ T5958] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.103379][ T5958] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.134931][ T5958] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   89.141264][ T5959] team0: Mode changed to "activebackup"
[   89.154608][ T5966] tipc: Started in network mode
[   89.157091][ T5966] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   89.161338][ T5966] tipc: Enabled bearer <eth:team0>, priority 0
[   89.165775][ T5963] vlan0: entered promiscuous mode
[   89.179964][ T5963] team0: Port device vlan0 added
[   89.247425][    C0] usb 8-1: yurex_control_callback - control failed: -71
[   89.253103][   T50] usb 8-1: USB disconnect, device number 2
[   89.262234][   T50] yurex 8-1:0.0: USB YUREX #0 now disconnected
[   89.378291][ T5764] Bluetooth: hci1: command tx timeout
[   89.460532][ T5762] Bluetooth: hci2: command tx timeout
[   89.462967][ T5764] Bluetooth: hci3: command tx timeout
[   90.348831][    T9] tipc: Node number set to 11578026
[   90.395268][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'.
[   90.483501][ T5999] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   91.190435][ T5857] libceph: connect (1)[c::]:6789 error -101
[   91.193756][ T5857] libceph: mon0 (1)[c::]:6789 connect error
[   91.253783][ T6005] ceph: No mds server is up or the cluster is laggy
[   91.460130][ T5764] Bluetooth: hci1: command tx timeout
[   91.528328][ T6019] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   91.539360][ T5762] Bluetooth: hci2: command tx timeout
[   91.542799][ T5764] Bluetooth: hci3: command tx timeout
[   91.569809][   T40] audit: type=1804 audit(1781033745.986:2): pid=6019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.23" name="/newroot/6/file0" dev="tmpfs" ino=48 res=1 errno=0
[   91.632015][   T40] audit: type=1804 audit(1781033745.996:3): pid=6019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.23" name="/newroot/6/file0" dev="tmpfs" ino=48 res=1 errno=0
[   92.297024][ T6026] No source specified
[   92.415708][ T6031] random: crng reseeded on system resumption
[   92.604121][ T6034] The dccp option matching is deprecated and scheduled to be removed in 2027.
[   92.604121][ T6034] Please contact the netfilter-devel mailing list or update your nftables rules.
[   93.614210][ T6039] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[   93.649125][ T1468] libceph: connect (1)[c::]:6789 error -101
[   93.651086][ T1468] libceph: mon0 (1)[c::]:6789 connect error
[   93.719316][ T6044] ceph: No mds server is up or the cluster is laggy
[   93.750433][ T5857] libceph: connect (1)[c::]:6789 error -101
[   93.757523][ T5857] libceph: mon0 (1)[c::]:6789 connect error
[   93.802993][ T6051] ceph: No mds server is up or the cluster is laggy
[   93.931671][ T6060] syz.0.32 uses obsolete (PF_INET,SOCK_PACKET)
[   94.042681][ T6063] 9p: Bad value for 'wfdno'
[   94.047979][ T6063] loop9: detected capacity change from 0 to 524287936
[   94.267425][ T6073] Zero length message leads to an empty skb
[   94.622141][ T6078] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   95.470059][ T6085] 9pnet: Found fid 0 not clunked
[   95.593053][ T6093] input: syz1 as /devices/virtual/input/input5
[   96.916571][ T6106] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   97.274690][ T5837] libceph: connect (1)[c::]:6789 error -101
[   97.280356][ T5837] libceph: mon0 (1)[c::]:6789 connect error
[   97.328771][ T6112] ceph: No mds server is up or the cluster is laggy
[   97.578899][   T10] libceph: connect (1)[c::]:6789 error -101
[   97.581052][   T10] libceph: mon0 (1)[c::]:6789 connect error
[   97.677714][ T6124] ceph: No mds server is up or the cluster is laggy
[   98.104830][ T6136] can0: slcan on ttyS3.
[   99.218778][ T6134] can0 (unregistered): slcan off ttyS3.
[   99.310154][ T6158] netlink: 68 bytes leftover after parsing attributes in process `syz.0.51'.
[   99.406292][ T6161] xt_CT: You must specify a L4 protocol and not use inversions on it
[  100.386632][ T6162] syz.0.51 (6162) used greatest stack depth: 18936 bytes left
[  100.432378][ T5861] libceph: connect (1)[c::]:6789 error -101
[  100.434473][ T5861] libceph: mon0 (1)[c::]:6789 connect error
[  100.466281][ T6175] ceph: No mds server is up or the cluster is laggy
[  100.555400][ T6182] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  100.963673][ T6189] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  102.704319][   T10] libceph: connect (1)[c::]:6789 error -101
[  102.706511][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  102.762239][ T6207] ceph: No mds server is up or the cluster is laggy
[  103.396535][ T5861] libceph: connect (1)[c::]:6789 error -101
[  103.401419][ T5861] libceph: mon0 (1)[c::]:6789 connect error
[  103.448455][ T6223] ceph: No mds server is up or the cluster is laggy
[  104.450422][ T6236] netlink: 24 bytes leftover after parsing attributes in process `syz.1.68'.
[  104.456163][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.68'.
[  104.750609][ T5762] Bluetooth: hci4: sending frame failed (-49)
[  104.756386][ T5764] Bluetooth: hci4: Opcode 0x1003 failed: -49
[  104.996318][ T6249] netlink: 260 bytes leftover after parsing attributes in process `syz.2.70'.
[  105.013601][   T40] audit: type=1326 audit(1781033759.446:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.2.70" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f93f7c code=0x0
[  105.369270][ T6252] can0: slcan on ttyS3.
[  105.543012][ T6252] can0 (unregistered): slcan off ttyS3.
[  107.813631][   T34] libceph: connect (1)[c::]:6789 error -101
[  107.816284][   T34] libceph: mon0 (1)[c::]:6789 connect error
[  107.920617][ T6291] ceph: No mds server is up or the cluster is laggy
[  108.091318][   T34] libceph: connect (1)[c::]:6789 error -101
[  108.098362][   T34] libceph: mon0 (1)[c::]:6789 connect error
[  108.618633][   T34] libceph: connect (1)[c::]:6789 error -101
[  108.620933][   T34] libceph: mon0 (1)[c::]:6789 connect error
[  110.405317][ T5861] libceph: connect (1)[c::]:6789 error -101
[  110.407531][ T5861] libceph: mon0 (1)[c::]:6789 connect error
[  110.564582][ T6329] ceph: No mds server is up or the cluster is laggy
[  110.678800][   T34] libceph: connect (1)[c::]:6789 error -101
[  110.684852][   T34] libceph: mon0 (1)[c::]:6789 connect error
[  111.148417][ T6341] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[  111.150674][ T6341] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  111.172445][ T6341] vhci_hcd vhci_hcd.0: Device attached
[  111.212316][ T6341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.86'.
[  111.688137][   T50] usb 40-1: SetAddress Request (2) to port 0
[  111.782120][   T50] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd
[  111.897888][ T6342] vhci_hcd: connection reset by peer
[  112.140252][ T1293] vhci_hcd vhci_hcd.1: stop threads
[  112.142654][ T1293] vhci_hcd vhci_hcd.1: release socket
[  112.148311][ T1293] vhci_hcd vhci_hcd.1: disconnect device
[  112.198286][   T29] libceph: connect (1)[c::]:6789 error -101
[  112.200285][   T29] libceph: mon0 (1)[c::]:6789 connect error
[  112.254958][ T6356] ceph: No mds server is up or the cluster is laggy
[  112.842806][ T6378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.99'.
[  113.181672][ T6388] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  113.368275][ T5762] Bluetooth: hci3: command 0x0405 tx timeout
[  114.455512][ T6409] netlink: 'syz.0.104': attribute type 1 has an invalid length.
[  114.600926][ T6433] netlink: 'syz.1.105': attribute type 12 has an invalid length.
[  114.628151][ T6433] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1��^!�l�1�*�$pOc�ɔ��r$�G����
[  115.583819][ T6439] netlink: 20 bytes leftover after parsing attributes in process `syz.3.107'.
[  115.674675][ T5859] libceph: connect (1)[c::]:6789 error -101
[  115.676829][ T5859] libceph: mon0 (1)[c::]:6789 connect error
[  115.942588][ T5859] libceph: connect (1)[c::]:6789 error -101
[  115.948305][ T5859] libceph: mon0 (1)[c::]:6789 connect error
[  116.003568][ T5859] libceph: connect (1)[c::]:6789 error -101
[  116.006379][ T5859] libceph: mon0 (1)[c::]:6789 connect error
[  116.059337][ T6454] ceph: No mds server is up or the cluster is laggy
[  116.298589][ T5859] libceph: connect (1)[c::]:6789 error -101
[  116.301198][ T5859] libceph: mon0 (1)[c::]:6789 connect error
[  116.359108][ T6467] ceph: No mds server is up or the cluster is laggy
[  116.466600][ T6443] ceph: No mds server is up or the cluster is laggy
[  116.472428][ T5859] libceph: connect (1)[c::]:6789 error -101
[  116.477275][ T5859] libceph: mon0 (1)[c::]:6789 connect error
[  117.085641][   T34] libceph: connect (1)[c::]:6789 error -101
[  117.089406][   T34] libceph: mon0 (1)[c::]:6789 connect error
[  117.092054][ T6485] ceph: No mds server is up or the cluster is laggy
[  117.354419][ T6490] netlink: 'syz.3.117': attribute type 1 has an invalid length.
[  117.507466][   T50] usb 40-1: device descriptor read/8, error -110
[  117.719497][ T6494] netlink: 'syz.1.118': attribute type 1 has an invalid length.
[  117.875051][ T6501] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  117.909834][   T50] usb usb40-port1: attempt power cycle
[  118.170415][ T1486] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  118.318313][ T1486] usb 7-1: Using ep0 maxpacket: 16
[  118.471079][   T50] usb usb40-port1: unable to enumerate USB device
[  118.849663][ T1486] usb 7-1: unable to get BOS descriptor or descriptor too short
[  118.854894][ T1486] usb 7-1: unable to read config index 0 descriptor/start: -71
[  118.857391][ T1486] usb 7-1: can't read configurations, error -71
[  118.918946][   T34] libceph: connect (1)[c::]:6789 error -101
[  118.921621][   T34] libceph: mon0 (1)[c::]:6789 connect error
[  118.980865][ T6520] ceph: No mds server is up or the cluster is laggy
[  119.295370][   T34] libceph: connect (1)[c::]:6789 error -101
[  119.299771][   T34] libceph: mon0 (1)[c::]:6789 connect error
[  119.462931][ T6533] ceph: No mds server is up or the cluster is laggy
[  119.559461][   T34] libceph: connect (1)[c::]:6789 error -101
[  119.562086][   T34] libceph: mon0 (1)[c::]:6789 connect error
[  120.068605][   T34] libceph: connect (1)[c::]:6789 error -101
[  120.071537][   T34] libceph: mon0 (1)[c::]:6789 connect error
[  121.409645][ T6561] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  122.329418][   T29] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  122.458312][   T29] usb 8-1: device descriptor read/64, error -71
[  122.699384][   T29] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  123.403627][ T6567] kthread_run failed with err -4
[  124.008414][   T29] usb 8-1: device descriptor read/64, error -71
[  124.120360][   T29] usb usb8-port1: attempt power cycle
[  124.892176][ T6602] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  124.896686][ T6602] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  126.860715][ T1002] libceph: connect (1)[c::]:6789 error -101
[  126.866453][ T1002] libceph: mon0 (1)[c::]:6789 connect error
[  127.037887][ T6626] ceph: No mds server is up or the cluster is laggy
[  127.084930][ T6629] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  129.183353][ T6667] netlink: 'syz.3.159': attribute type 1 has an invalid length.
[  130.255357][ T6685] netlink: 20 bytes leftover after parsing attributes in process `syz.2.163'.
[  130.296020][ T6682] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.334549][ T6689] netlink: 'syz.0.166': attribute type 7 has an invalid length.
[  130.336969][ T6689] netlink: 'syz.0.166': attribute type 5 has an invalid length.
[  130.339323][ T6689] netlink: 17 bytes leftover after parsing attributes in process `syz.0.166'.
[  130.507226][ T6695] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  130.530119][ T6694] block nbd0: NBD_DISCONNECT
[  130.626270][ T6686] block nbd0: Disconnected due to user request.
[  130.630210][ T6686] block nbd0: shutting down sockets
[  130.866753][ T6682] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.014589][ T6682] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.108202][ T6682] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.201247][ T3575] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.211921][ T3575] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.226245][ T3575] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.237211][ T3575] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.755652][ T6710] ceph: No mds server is up or the cluster is laggy
[  131.759363][ T5861] libceph: connect (1)[c::]:6789 error -101
[  131.764466][ T5861] libceph: mon0 (1)[c::]:6789 connect error
[  131.843493][   T10] libceph: connect (1)[c::]:6789 error -101
[  131.845579][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  131.918289][ T6720] ceph: No mds server is up or the cluster is laggy
[  132.058761][ T6731] netlink: 'syz.1.172': attribute type 1 has an invalid length.
[  133.215065][   T40] audit: type=1326 audit(1781033787.646:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.3.177" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fdef7c code=0x600000
[  134.223673][ T6767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  134.270301][   T29] libceph: connect (1)[c::]:6789 error -101
[  134.272524][   T29] libceph: mon0 (1)[c::]:6789 connect error
[  134.332565][ T6765] ceph: No mds server is up or the cluster is laggy
[  134.413981][ T6781] netlink: 'syz.0.184': attribute type 1 has an invalid length.
[  134.473245][ T6759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  134.784757][ T5859] IPVS: starting estimator thread 0...
[  134.868415][ T6810] IPVS: using max 44 ests per chain, 105600 per kthread
[  135.988038][ T5861] libceph: connect (1)[c::]:6789 error -101
[  135.991955][ T5861] libceph: mon0 (1)[c::]:6789 connect error
[  136.043774][ T6846] ceph: No mds server is up or the cluster is laggy
[  136.154086][ T6855] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  136.156233][ T6855] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  136.159109][ T6855] vhci_hcd vhci_hcd.0: Device attached
[  136.196108][ T6855] EXT4-fs (sr0): VFS: Can't find ext4 filesystem
[  136.266341][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'.
[  136.439194][ T1002] usb 40-1: SetAddress Request (6) to port 0
[  136.441294][ T1002] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd
[  136.870467][ T6856] vhci_hcd: connection reset by peer
[  136.874713][ T3575] vhci_hcd vhci_hcd.1: stop threads
[  136.877328][ T3575] vhci_hcd vhci_hcd.1: release socket
[  136.880247][ T3575] vhci_hcd vhci_hcd.1: disconnect device
[  137.370144][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  137.373862][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  137.448302][ T5861] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  137.600092][ T5861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.604011][ T5861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.607368][ T5861] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  137.610545][ T6873] netlink: 'syz.1.204': attribute type 1 has an invalid length.
[  137.612051][ T5861] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  137.617861][ T5861] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.622758][ T5861] usb 7-1: config 0 descriptor??
[  138.040321][ T5861] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  138.042777][ T5861] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  138.046833][ T5861] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  138.050135][ T5861] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  138.052548][ T5861] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  138.055216][ T5861] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  138.057717][ T5861] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  138.062222][ T5861] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  138.064556][ T5861] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  138.066967][ T5861] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  138.086241][ T5861] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  138.301632][ T5861] usb 7-1: USB disconnect, device number 4
[  138.889412][ T5952] libceph: connect (1)[c::]:6789 error -101
[  138.893362][ T5952] libceph: mon0 (1)[c::]:6789 connect error
[  138.943775][ T6886] ceph: No mds server is up or the cluster is laggy
[  139.078017][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.210'.
[  139.082210][ T6898] IPv6: NLM_F_CREATE should be specified when creating new route
[  140.277149][ T6909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.213'.
[  141.214301][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'.
[  141.219873][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'.
[  141.955109][ T5952] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  141.963048][ T1002] usb 40-1: device descriptor read/8, error -110
[  142.109494][ T5952] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  142.112834][ T5952] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  142.117060][ T5952] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40
[  142.120742][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.123183][ T5952] usb 6-1: Product: syz
[  142.124527][ T5952] usb 6-1: Manufacturer: syz
[  142.125926][ T5952] usb 6-1: SerialNumber: syz
[  142.197197][ T6928] =======================================================
[  142.197197][ T6928] WARNING: The mand mount option has been deprecated and
[  142.197197][ T6928]          and is ignored by this kernel. Remove the mand
[  142.197197][ T6928]          option from the mount to silence this warning.
[  142.197197][ T6928] =======================================================
[  142.212901][ T6928] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  142.370624][ T1002] usb usb40-port1: attempt power cycle
[  142.615906][ T6948] netlink: 27 bytes leftover after parsing attributes in process `syz.1.216'.
[  142.939068][ T1002] usb usb40-port1: unable to enumerate USB device
[  144.666744][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'.
[  144.821063][ T5952] usb 6-1: 0:1 : does not exist
[  144.843856][ T5952] usb 6-1: USB disconnect, device number 2
[  144.877162][ T5757] udevd[5757]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  145.023546][ T6980] Illegal XDP return value 3171591415 on prog  (id 35) dev syz_tun, expect packet loss!
[  145.482188][ T5764] block nbd0: Receive control failed (result -32)
[  145.487682][ T6970] block nbd0: shutting down sockets
[  145.640440][ T5764] Bluetooth: hci1: Malformed HCI Event: 0x22
[  145.648142][   T40] audit: type=1326 audit(1781033800.076:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.0.236" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93f7c code=0x7ffc0000
[  145.799935][   T40] audit: type=1326 audit(1781033800.076:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.0.236" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93f7c code=0x7ffc0000
[  145.814289][   T40] audit: type=1326 audit(1781033800.086:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.0.236" exe="/syz-executor" sig=0 arch=40000003 syscall=27 compat=1 ip=0xf7f93f7c code=0x7ffc0000
[  145.962831][   T40] audit: type=1326 audit(1781033800.086:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.0.236" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93f7c code=0x7ffc0000
[  145.983410][   T40] audit: type=1326 audit(1781033800.086:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.0.236" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93f7c code=0x7ffc0000
[  145.998746][   T40] audit: type=1326 audit(1781033800.086:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.0.236" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f93f7c code=0x7ffc0000
[  146.061759][   T24] libceph: connect (1)[c::]:6789 error -101
[  146.064246][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  146.113991][ T6998] ceph: No mds server is up or the cluster is laggy
[  146.383530][   T24] libceph: connect (1)[c::]:6789 error -101
[  146.385618][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  146.446140][ T7004] ceph: No mds server is up or the cluster is laggy
[  146.658267][   T40] audit: type=1326 audit(1781033800.866:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.0.236" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93f7c code=0x7ffc0000
[  146.667260][   T40] audit: type=1326 audit(1781033800.866:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.0.236" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93f7c code=0x7ffc0000
[  146.855080][ T7012] FAULT_INJECTION: forcing a failure.
[  146.855080][ T7012] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  146.865742][ T7012] CPU: 2 UID: 0 PID: 7012 Comm: syz.2.242 Not tainted syzkaller #0 PREEMPT(full) 
[  146.865766][ T7012] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  146.865776][ T7012] Call Trace:
[  146.865782][ T7012]  <TASK>
[  146.865789][ T7012]  dump_stack_lvl+0x100/0x190
[  146.865825][ T7012]  should_fail_ex.cold+0x5/0xa
[  146.865848][ T7012]  _copy_from_user+0x2e/0xd0
[  146.865872][ T7012]  kstrtouint_from_user+0xd6/0x1d0
[  146.865889][ T7012]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  146.865905][ T7012]  ? __lock_acquire+0x4a5/0x2630
[  146.865943][ T7012]  proc_fail_nth_write+0x83/0x220
[  146.865971][ T7012]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  146.866005][ T7012]  vfs_write+0x2aa/0x1070
[  146.866027][ T7012]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  146.866056][ T7012]  ? __pfx_vfs_write+0x10/0x10
[  146.866074][ T7012]  ? find_held_lock+0x2b/0x80
[  146.866096][ T7012]  ? __fget_files+0x215/0x3d0
[  146.866120][ T7012]  ? __fget_files+0x21f/0x3d0
[  146.866147][ T7012]  ksys_write+0x12a/0x250
[  146.866166][ T7012]  ? __pfx_ksys_write+0x10/0x10
[  146.866188][ T7012]  ? rcu_is_watching+0x12/0xc0
[  146.866211][ T7012]  do_int80_emulation+0x14b/0x720
[  146.866240][ T7012]  asm_int80_emulation+0x1a/0x20
[  146.866257][ T7012] RIP: 0023:0xf71961ab
[  146.866271][ T7012] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  146.866287][ T7012] RSP: 002b:00000000f54564bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[  146.866303][ T7012] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f54565d0
[  146.866314][ T7012] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  146.866323][ T7012] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  146.866332][ T7012] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  146.866341][ T7012] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  146.866364][ T7012]  </TASK>
[  146.951186][    C2] hpet: Lost 4 RTC interrupts
[  148.413143][   T29] libceph: connect (1)[c::]:6789 error -101
[  148.416759][   T29] libceph: mon0 (1)[c::]:6789 connect error
[  148.464199][ T7031] ceph: No mds server is up or the cluster is laggy
[  148.941900][ T7040] �����a��D: renamed from lo (while UP)
[  148.963148][ T7048] syzkaller0: entered promiscuous mode
[  148.965572][ T7048] syzkaller0: entered allmulticast mode
[  149.120670][ T7052] netlink: 64 bytes leftover after parsing attributes in process `syz.0.253'.
[  149.185745][ T7056] netlink: 24 bytes leftover after parsing attributes in process `syz.3.254'.
[  149.639196][ T7083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  149.639524][ T7077] 9p: Bad value for 'rfdno'
[  149.654969][ T7083] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  149.868326][ T5861] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  149.958113][   T40] audit: type=1326 audit(1781033804.386:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.0.261" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f93f7c code=0x0
[  150.021892][ T5861] usb 8-1: config 1 has an invalid interface number: 249 but max is 1
[  150.026176][ T5861] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  150.029497][ T5861] usb 8-1: config 1 has 3 interfaces, different from the descriptor's value: 2
[  150.032399][ T5861] usb 8-1: config 1 has no interface number 2
[  150.034292][ T5861] usb 8-1: config 1 interface 249 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  150.039740][ T5861] usb 8-1: config 1 interface 249 has no altsetting 0
[  150.043733][ T5861] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  150.046785][ T5861] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.049671][ T5861] usb 8-1: Product: syz
[  150.050975][ T5861] usb 8-1: Manufacturer: syz
[  150.052464][ T5861] usb 8-1: SerialNumber: syz
[  150.053166][ T7092] IPv6: syztnl0: Disabled Multicast RS
[  150.060538][ T5861] cdc_ncm 8-1:1.0: skipping garbage
[  150.062258][ T5861] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found
[  150.066569][ T5861] cdc_ncm 8-1:1.0: bind() failure
[  150.076357][ T5861] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found
[  150.079229][ T5861] cdc_ncm 8-1:1.1: bind() failure
[  150.554164][ T7084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.557115][ T7084] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.566363][ T7083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.570779][ T7083] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.574675][ T7084] i2c i2c-1: dtv_property_process_set: SET cmd 0x80000380 undefined
[  150.773275][ T7128] capability: warning: `syz.0.268' uses deprecated v2 capabilities in a way that may be insecure
[  151.052480][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.271'.
[  151.163098][ T7147] netlink: 'syz.0.271': attribute type 10 has an invalid length.
[  151.166575][ T7147] netlink: 40 bytes leftover after parsing attributes in process `syz.0.271'.
[  151.170863][ T7147] dummy0: entered promiscuous mode
[  151.180003][ T7147] bridge0: port 3(dummy0) entered blocking state
[  151.183145][ T7147] bridge0: port 3(dummy0) entered disabled state
[  151.186528][ T7147] dummy0: entered allmulticast mode
[  151.195726][ T7147] bridge0: port 3(dummy0) entered blocking state
[  151.197862][ T7147] bridge0: port 3(dummy0) entered forwarding state
[  152.027410][ T7153] binder: 7152:7153 ioctl c028564d 80000100 returned -22
[  152.122109][ T7159] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size.
[  152.410575][   T40] audit: type=1804 audit(1781033806.846:15): pid=7165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.278" name="bus" dev="ramfs" ino=15360 res=1 errno=0
[  152.422995][   T40] audit: type=1804 audit(1781033806.846:16): pid=7165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.278" name="bus" dev="ramfs" ino=15360 res=1 errno=0
[  152.667343][   T10] usb 8-1: USB disconnect, device number 6
[  152.897438][ T7175] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  153.882866][ T7188] bridge_slave_0: left allmulticast mode
[  153.887168][ T7188] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.409949][ T7188] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  154.834610][ T7189] comedi comedi3: comedi_config --init_data is deprecated
[  155.086744][ T7202] loop7: detected capacity change from 0 to 16384
[  155.215705][ T7206] netlink: 13 bytes leftover after parsing attributes in process `syz.0.287'.
[  155.458260][   T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  155.639413][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'.
[  156.382996][ T7205] loop7: detected capacity change from 16384 to 0
[  156.384326][    C3] I/O error, dev loop7, sector 32 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  156.426355][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  156.436212][   T10] usb 5-1: unable to read config index 0 descriptor/start: -71
[  156.439509][   T10] usb 5-1: can't read configurations, error -71
[  156.808364][ T5764] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  156.809203][ T5762] Bluetooth: hci4: command 0x1003 tx timeout
[  156.981361][   T34] libceph: connect (1)[c::]:6789 error -101
[  156.984484][   T34] libceph: mon0 (1)[c::]:6789 connect error
[  157.038617][ T7227] ceph: No mds server is up or the cluster is laggy
[  157.151377][ T7237] openvswitch: netlink: IP tunnel dst address not specified
[  157.479326][ T7239] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  158.241646][ T7243] kAFS: Can only specify source 'none' with -o dyn
[  160.197128][   T29] libceph: connect (1)[c::]:6789 error -101
[  160.203365][   T29] libceph: mon0 (1)[c::]:6789 connect error
[  160.247315][ T7280] ceph: No mds server is up or the cluster is laggy
[  160.664704][ T7289] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  162.314205][ T7321] overlayfs: conflicting lowerdir path
[  162.566785][ T7326] can0: slcan on ttyS3.
[  163.619195][ T7322] can0 (unregistered): slcan off ttyS3.
[  164.388317][   T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  164.518359][   T24] usb 7-1: device descriptor read/64, error -71
[  164.713295][ T5861] libceph: connect (1)[c::]:6789 error -101
[  164.715342][ T5861] libceph: mon0 (1)[c::]:6789 connect error
[  164.767842][ T7375] ceph: No mds server is up or the cluster is laggy
[  164.790527][   T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  164.884672][ T7382] Bluetooth: MGMT ver 1.23
[  164.958337][   T24] usb 7-1: device descriptor read/64, error -71
[  165.079487][   T24] usb usb7-port1: attempt power cycle
[  165.212766][ T7392] 9p: Bad value for 'port'
[  165.638299][   T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  165.668910][   T24] usb 7-1: device descriptor read/8, error -71
[  165.908366][   T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  165.930914][   T24] usb 7-1: device descriptor read/8, error -71
[  165.989840][ T7407] process 'syz.0.336' launched '/dev/fd/7' with NULL argv: empty string added
[  166.007863][ T7407] warning: `syz.0.336' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  166.051686][   T24] usb usb7-port1: unable to enumerate USB device
[  166.831797][ T7416] netlink: 'syz.0.340': attribute type 1 has an invalid length.
[  167.615619][ T7436] netlink: 'syz.2.346': attribute type 1 has an invalid length.
[  167.808282][ T5859] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  167.978259][ T5859] usb 6-1: Using ep0 maxpacket: 16
[  167.990552][ T5859] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  167.995733][ T5859] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.003619][ T5859] usb 6-1: Product: syz
[  168.006950][ T5859] usb 6-1: Manufacturer: syz
[  168.011594][ T5859] usb 6-1: SerialNumber: syz
[  168.030788][ T5859] usb 6-1: config 0 descriptor??
[  168.202770][ T7451] FAULT_INJECTION: forcing a failure.
[  168.202770][ T7451] name failslab, interval 1, probability 0, space 0, times 1
[  168.207443][ T7451] CPU: 3 UID: 0 PID: 7451 Comm: syz.3.350 Not tainted syzkaller #0 PREEMPT(full) 
[  168.207458][ T7451] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  168.207464][ T7451] Call Trace:
[  168.207469][ T7451]  <TASK>
[  168.207473][ T7451]  dump_stack_lvl+0x100/0x190
[  168.207496][ T7451]  should_fail_ex.cold+0x5/0xa
[  168.207509][ T7451]  should_failslab+0xc2/0x120
[  168.207522][ T7451]  __kmalloc_cache_noprof+0x7a/0x6f0
[  168.207536][ T7451]  ? __io_queue_proc+0x2c2/0x900
[  168.207551][ T7451]  ? mark_held_locks+0x40/0x70
[  168.207570][ T7451]  __io_queue_proc+0x2c2/0x900
[  168.207587][ T7451]  ? __pfx_io_async_queue_proc+0x10/0x10
[  168.207602][ T7451]  v4l2_m2m_poll+0x10d/0x6e0
[  168.207614][ T7451]  v4l2_m2m_fop_poll+0xa2/0x110
[  168.207629][ T7451]  ? __pfx_v4l2_m2m_fop_poll+0x10/0x10
[  168.207639][ T7451]  v4l2_poll+0x15f/0x220
[  168.207654][ T7451]  __io_arm_poll_handler+0x44b/0x1270
[  168.207670][ T7451]  ? __pfx_v4l2_poll+0x10/0x10
[  168.207687][ T7451]  io_arm_apoll+0x661/0xa60
[  168.207702][ T7451]  ? io_read+0xe0/0x1f0
[  168.207716][ T7451]  ? __pfx_io_arm_apoll+0x10/0x10
[  168.207730][ T7451]  ? trace_contention_end+0x122/0x170
[  168.207740][ T7451]  ? __pfx_io_async_queue_proc+0x10/0x10
[  168.207757][ T7451]  ? __io_issue_sqe+0x14a/0x7a0
[  168.207772][ T7451]  io_arm_poll_handler+0x21f/0x2b0
[  168.207789][ T7451]  io_queue_async+0x159/0x290
[  168.207804][ T7451]  io_req_task_submit+0x266/0x290
[  168.207820][ T7451]  ? __pfx_io_req_task_submit+0x10/0x10
[  168.207835][ T7451]  ? find_held_lock+0x2b/0x80
[  168.207847][ T7451]  ? __pfx_io_handle_tw_list+0x10/0x10
[  168.207865][ T7451]  ? __pfx_io_req_task_submit+0x10/0x10
[  168.207880][ T7451]  io_handle_tw_list+0x4d8/0x580
[  168.207899][ T7451]  tctx_task_work_run+0x59/0x330
[  168.207917][ T7451]  tctx_task_work+0x7a/0xd0
[  168.207932][ T7451]  ? __pfx_tctx_task_work+0x10/0x10
[  168.207947][ T7451]  ? rcu_is_watching+0x12/0xc0
[  168.207959][ T7451]  ? _raw_spin_unlock_irq+0x23/0x50
[  168.207972][ T7451]  ? lockdep_hardirqs_on+0x78/0x100
[  168.207987][ T7451]  task_work_run+0x150/0x240
[  168.208024][ T7451]  ? __pfx_task_work_run+0x10/0x10
[  168.208039][ T7451]  ? __do_sys_io_uring_enter+0xbac/0x1b50
[  168.208059][ T7451]  get_signal+0x1b9/0x2210
[  168.208073][ T7451]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  168.208091][ T7451]  ? __pfx_get_signal+0x10/0x10
[  168.208106][ T7451]  ? fput+0x79/0x100
[  168.208129][ T7451]  arch_do_signal_or_restart+0x91/0x7a0
[  168.208167][ T7451]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  168.208199][ T7451]  ? rcu_is_watching+0x12/0xc0
[  168.208220][ T7451]  exit_to_user_mode_loop+0x98/0x670
[  168.208244][ T7451]  ? rcu_is_watching+0x12/0xc0
[  168.208264][ T7451]  __do_fast_syscall_32+0x701/0x970
[  168.208284][ T7451]  ? lockdep_hardirqs_on+0x78/0x100
[  168.208310][ T7451]  do_fast_syscall_32+0x32/0x70
[  168.208332][ T7451]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  168.208350][ T7451] RIP: 0023:0xf6fdef7c
[  168.208365][ T7451] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  168.208380][ T7451] RSP: 002b:00000000f53ac50c EFLAGS: 00000292 ORIG_RAX: 00000000000001aa
[  168.208395][ T7451] RAX: 0000000000000002 RBX: 0000000000000005 RCX: 0000000000002000
[  168.208404][ T7451] RDX: 00000000fffffffd RSI: 0000000000000009 RDI: 0000000000000000
[  168.208412][ T7451] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  168.208420][ T7451] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  168.208428][ T7451] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  168.208449][ T7451]  </TASK>
[  168.540233][ T5859] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  168.550234][ T5859] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  168.560155][ T5859] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  168.564652][ T5859] usb 6-1: media controller created
[  168.575423][ T5859] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  168.946437][ T5859] zl10353_read_register: readreg error (reg=127, ret==0)
[  168.952073][ T5859] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  168.956826][ T5859] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  168.976528][ T5859] usb 6-1: USB disconnect, device number 3
[  169.044451][ T5859] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  169.068303][   T40] audit: type=1326 audit(1781033823.496:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7462 comm="syz.2.354" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f93f7c code=0x0
[  169.499635][ T5859] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  169.615007][   T24] libceph: connect (1)[c::]:6789 error -101
[  169.617568][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  169.658373][ T5859] usb 6-1: Using ep0 maxpacket: 16
[  169.663664][ T5859] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  169.668780][ T5859] usb 6-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  169.683512][ T7477] ceph: No mds server is up or the cluster is laggy
[  169.691141][ T5859] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  169.696498][ T5859] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  169.701055][ T5859] usb 6-1: config 0 interface 0 has no altsetting 0
[  169.716694][ T5859] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  169.720158][ T5859] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.728131][ T5859] usb 6-1: Product: syz
[  169.729918][ T5859] usb 6-1: Manufacturer: syz
[  169.731961][ T5859] usb 6-1: SerialNumber: syz
[  169.741997][ T5859] usb 6-1: config 0 descriptor??
[  169.745652][ T7475] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  169.812300][   T40] audit: type=1400 audit(1781033824.246:18): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=7491 comm="syz.2.361"
[  169.952692][ T7475] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  169.957728][ T5952] libceph: connect (1)[c::]:6789 error -101
[  169.962028][ T5952] libceph: mon0 (1)[c::]:6789 connect error
[  169.962198][ T5859] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input17
[  170.019675][   T24] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  170.021575][ T7501] ceph: No mds server is up or the cluster is laggy
[  170.253466][ T7475] overlayfs: failed to get index nlink (file0/file2, err=-61)
[  170.260830][ T5829] usb 6-1: USB disconnect, device number 4
[  170.419017][ T7509] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  170.864857][ T5861] libceph: connect (1)[c::]:6789 error -101
[  170.867703][ T5861] libceph: mon0 (1)[c::]:6789 connect error
[  170.909773][ T7513] ceph: No mds server is up or the cluster is laggy
[  171.086220][   T24] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  171.089120][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=8
[  171.091578][   T24] usb 5-1: Product: syz
[  171.092867][   T24] usb 5-1: Manufacturer: syz
[  171.094315][   T24] usb 5-1: SerialNumber: syz
[  171.155745][   T29] libceph: connect (1)[c::]:6789 error -101
[  171.157968][   T29] libceph: mon0 (1)[c::]:6789 connect error
[  171.214013][ T7522] ceph: No mds server is up or the cluster is laggy
[  171.307382][ T7529] random: crng reseeded on system resumption
[  171.314026][   T24] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  171.324990][   T24] usb 5-1: USB disconnect, device number 4
[  171.331650][   T24] usblp0: removed
[  171.378437][ T5829] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  171.386992][ T7531] FAULT_INJECTION: forcing a failure.
[  171.386992][ T7531] name failslab, interval 1, probability 0, space 0, times 0
[  171.392895][ T7531] CPU: 1 UID: 0 PID: 7531 Comm: syz.2.370 Not tainted syzkaller #0 PREEMPT(full) 
[  171.392910][ T7531] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  171.392916][ T7531] Call Trace:
[  171.392920][ T7531]  <TASK>
[  171.392924][ T7531]  dump_stack_lvl+0x100/0x190
[  171.392946][ T7531]  should_fail_ex.cold+0x5/0xa
[  171.392959][ T7531]  ? tomoyo_encode2+0xfb/0x3c0
[  171.392974][ T7531]  should_failslab+0xc2/0x120
[  171.392986][ T7531]  __kmalloc_noprof+0xe0/0x850
[  171.393002][ T7531]  ? d_absolute_path+0x136/0x1b0
[  171.393015][ T7531]  tomoyo_encode2+0xfb/0x3c0
[  171.393031][ T7531]  tomoyo_encode+0x29/0x50
[  171.393045][ T7531]  tomoyo_realpath_from_path+0x18c/0x690
[  171.393063][ T7531]  tomoyo_realpath_nofollow+0xe0/0x100
[  171.393078][ T7531]  ? __pfx_tomoyo_realpath_nofollow+0x10/0x10
[  171.393094][ T7531]  ? tomoyo_profile+0x47/0x60
[  171.393127][ T7531]  ? tomoyo_init_request_info+0x101/0x370
[  171.393140][ T7531]  tomoyo_find_next_domain+0x2a8/0x2010
[  171.393152][ T7531]  ? __pfx___kernel_read+0x10/0x10
[  171.393163][ T7531]  ? __pfx___might_resched+0x10/0x10
[  171.393176][ T7531]  ? __pfx_tomoyo_find_next_domain+0x10/0x10
[  171.393193][ T7531]  tomoyo_bprm_check_security+0x12d/0x1d0
[  171.393202][ T7531]  ? tomoyo_bprm_check_security+0x11f/0x1d0
[  171.393213][ T7531]  security_bprm_check+0x87/0x1e0
[  171.393224][ T7531]  bprm_execve+0x845/0x1740
[  171.393237][ T7531]  ? __pfx_bprm_execve+0x10/0x10
[  171.393247][ T7531]  ? copy_string_kernel+0x339/0x3f0
[  171.393261][ T7531]  do_execveat_common.isra.0+0x4a5/0x580
[  171.393275][ T7531]  __ia32_compat_sys_execve+0x9c/0xd0
[  171.393287][ T7531]  __do_fast_syscall_32+0xe7/0x970
[  171.393303][ T7531]  ? lockdep_hardirqs_on+0x78/0x100
[  171.393319][ T7531]  do_fast_syscall_32+0x32/0x70
[  171.393334][ T7531]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  171.393347][ T7531] RIP: 0023:0xf7f93f7c
[  171.393356][ T7531] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  171.393366][ T7531] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 000000000000000b
[  171.393376][ T7531] RAX: ffffffffffffffda RBX: 0000000080000400 RCX: 0000000000000000
[  171.393382][ T7531] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  171.393388][ T7531] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  171.393393][ T7531] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  171.393399][ T7531] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  171.393412][ T7531]  </TASK>
[  171.393423][ T7531] ERROR: Out of memory at tomoyo_realpath_from_path.
[  171.683026][ T7540] netlink: 'syz.3.373': attribute type 1 has an invalid length.
[  171.693614][ T7542] IPVS: set_ctl: invalid protocol: 8 172.30.0.3:20004
[  171.718389][ T5829] usb 6-1: Using ep0 maxpacket: 32
[  171.723544][ T5829] usb 6-1: unable to get BOS descriptor or descriptor too short
[  171.729142][ T5829] usb 6-1: config 14 has an invalid interface number: 57 but max is 0
[  171.732612][ T5829] usb 6-1: config 14 has no interface number 0
[  171.735344][ T5829] usb 6-1: config 14 interface 57 has no altsetting 0
[  171.741201][ T5829] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  171.745007][ T5829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.747413][ T5829] usb 6-1: Product: syz
[  171.758343][ T5829] usb 6-1: Manufacturer: syz
[  171.759802][ T5829] usb 6-1: SerialNumber: syz
[  172.136782][ T7547] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.354143][ T5859] libceph: connect (1)[c::]:6789 error -101
[  172.357833][ T5859] libceph: mon0 (1)[c::]:6789 connect error
[  172.370079][ T5859] libceph: connect (1)[c::]:6789 error -101
[  172.375805][ T5859] libceph: mon0 (1)[c::]:6789 connect error
[  172.377776][ T7554] ceph: No mds server is up or the cluster is laggy
[  172.447647][ T7547] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.695072][ T7547] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.738913][ T5829] legousbtower 6-1:14.57: interrupt endpoints not found
[  172.742843][ T5829] usb 6-1: USB disconnect, device number 5
[  172.903327][ T7547] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.139135][ T1181] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.238546][ T1181] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  173.257383][ T1181] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  173.284314][ T1181] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  173.674955][ T7575] FAULT_INJECTION: forcing a failure.
[  173.674955][ T7575] name failslab, interval 1, probability 0, space 0, times 0
[  173.678983][ T7575] CPU: 3 UID: 0 PID: 7575 Comm: syz.1.382 Not tainted syzkaller #0 PREEMPT(full) 
[  173.678998][ T7575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  173.679004][ T7575] Call Trace:
[  173.679008][ T7575]  <TASK>
[  173.679012][ T7575]  dump_stack_lvl+0x100/0x190
[  173.679033][ T7575]  should_fail_ex.cold+0x5/0xa
[  173.679046][ T7575]  ? tomoyo_encode2+0xfb/0x3c0
[  173.679060][ T7575]  should_failslab+0xc2/0x120
[  173.679072][ T7575]  __kmalloc_noprof+0xe0/0x850
[  173.679089][ T7575]  ? d_absolute_path+0x136/0x1b0
[  173.679101][ T7575]  tomoyo_encode2+0xfb/0x3c0
[  173.679117][ T7575]  tomoyo_encode+0x29/0x50
[  173.679131][ T7575]  tomoyo_realpath_from_path+0x18c/0x690
[  173.679149][ T7575]  tomoyo_path_number_perm+0x23c/0x580
[  173.679161][ T7575]  ? tomoyo_path_number_perm+0x22e/0x580
[  173.679174][ T7575]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  173.679187][ T7575]  ? get_pid_task+0x106/0x250
[  173.679213][ T7575]  ? find_held_lock+0x2b/0x80
[  173.679225][ T7575]  ? __fget_files+0x215/0x3d0
[  173.679236][ T7575]  ? hook_file_ioctl_common+0x149/0x410
[  173.679249][ T7575]  ? __fget_files+0x215/0x3d0
[  173.679263][ T7575]  ? __fget_files+0x21f/0x3d0
[  173.679277][ T7575]  security_file_ioctl_compat+0xd3/0x230
[  173.679290][ T7575]  __ia32_compat_sys_ioctl+0xc2/0x360
[  173.679303][ T7575]  __do_fast_syscall_32+0xe7/0x970
[  173.679318][ T7575]  ? lockdep_hardirqs_on+0x78/0x100
[  173.679334][ T7575]  do_fast_syscall_32+0x32/0x70
[  173.679352][ T7575]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  173.679364][ T7575] RIP: 0023:0xf702ef7c
[  173.679373][ T7575] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  173.679383][ T7575] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  173.679393][ T7575] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004b72
[  173.679399][ T7575] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000
[  173.679405][ T7575] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  173.679411][ T7575] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  173.679416][ T7575] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  173.679429][ T7575]  </TASK>
[  173.679439][ T7575] ERROR: Out of memory at tomoyo_realpath_from_path.
[  176.711085][ T7613] IPVS: length: 206 != 8
[  176.948288][ T5861] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  177.120739][ T5861] usb 8-1: Using ep0 maxpacket: 8
[  177.125670][ T5861] usb 8-1: config 179 has an invalid interface number: 65 but max is 0
[  177.131199][ T5861] usb 8-1: config 179 has no interface number 0
[  177.135013][ T5861] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  177.140579][ T5861] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  177.144571][ T5861] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  177.148912][ T5861] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  177.154210][ T5861] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  177.159682][ T5861] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  177.163181][ T5861] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.182990][ T7612] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x92000)
[  177.418596][ T1129] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1
[  177.428230][ T1129] ata1: failed to read log page 10h (errno=-5)
[  177.438406][ T1129] ata1.00: NCQ disabled due to excessive errors
[  177.448707][ T1129] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0
[  177.460462][ T1129] ata1.00: irq_stat 0x41000000
[  177.462392][ T1129] ata1.00: failed command: WRITE FPDMA QUEUED
[  177.468338][ T1129] ata1.00: cmd 61/90:70:a6:ec:09/04:00:00:00:00/40 tag 14 ncq dma 598016 out
[  177.468338][ T1129]          res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[  177.477716][ T1129] ata1.00: status: { DRDY }
[  177.480025][ T1129] ata1.00: failed command: WRITE FPDMA QUEUED
[  177.482863][ T1129] ata1.00: cmd 61/28:78:0e:2e:0a/03:00:00:00:00/40 tag 15 ncq dma 413696 out
[  177.482863][ T1129]          res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[  177.490218][ T1129] ata1.00: status: { DRDY }
[  177.493882][ T1129] ata1.00: configured for UDMA/100
[  177.496387][ T1129] ata1: EH complete
[  178.288264][   T50] usb 6-1: new low-speed USB device number 6 using dummy_hcd
[  178.418282][   T50] usb 6-1: device descriptor read/64, error -71
[  178.495087][    C3] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  178.498189][    C3] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  178.501861][ T5861] usb 8-1: USB disconnect, device number 7
[  178.626177][ T7638] netlink: 'syz.0.399': attribute type 1 has an invalid length.
[  178.655279][ T5952] libceph: connect (1)[c::]:6789 error -101
[  178.658326][ T5952] libceph: mon0 (1)[c::]:6789 connect error
[  178.668287][   T50] usb 6-1: new low-speed USB device number 7 using dummy_hcd
[  178.685802][ T7635] ceph: No mds server is up or the cluster is laggy
[  178.798272][   T50] usb 6-1: device descriptor read/64, error -71
[  178.908527][   T50] usb usb6-port1: attempt power cycle
[  178.920975][ T7647] trusted_key: syz.3.400 sent an empty control message without MSG_MORE.
[  179.348415][   T50] usb 6-1: new low-speed USB device number 8 using dummy_hcd
[  180.970168][   T50] usb 6-1: device descriptor read/8, error -71
[  181.588375][ T5829] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  181.748306][ T5829] usb 5-1: Using ep0 maxpacket: 16
[  181.755296][ T5829] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  181.764584][ T5829] usb 5-1: config 0 has no interface number 0
[  181.778833][ T5829] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  181.787457][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.796608][ T5829] usb 5-1: Product: syz
[  181.801070][ T5829] usb 5-1: Manufacturer: syz
[  181.803108][ T5829] usb 5-1: SerialNumber: syz
[  181.845930][ T5829] usb 5-1: config 0 descriptor??
[  181.855348][ T5829] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  182.291916][ T5829] gspca_spca1528: reg_w err -71
[  182.311414][ T5829] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71
[  182.323830][ T5829] usb 5-1: USB disconnect, device number 5
[  182.663057][ T5952] usb 8-1: new full-speed USB device number 8 using dummy_hcd
[  182.873967][ T5952] usb 8-1: config 0 has an invalid interface number: 8 but max is 0
[  182.882655][ T5952] usb 8-1: config 0 has no interface number 0
[  182.885431][ T5952] usb 8-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  182.893316][ T5952] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  182.897981][ T5952] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  182.933607][ T5952] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  182.944933][ T5952] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  182.947815][ T5952] usb 8-1: Product: syz
[  182.949333][ T5952] usb 8-1: SerialNumber: syz
[  183.022597][ T5952] usb 8-1: config 0 descriptor??
[  183.190312][ T5952] cm109 8-1:0.8: invalid payload size 0, expected 4
[  183.264323][ T7687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  183.268545][ T7687] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  183.271859][ T5952] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input20
[  183.303373][ T5952] ------------[ cut here ]------------
[  183.306119][ T5952] URB ffff88804ee8e100 submitted while active
[  183.308343][ T5952] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x15fa/0x1910, CPU#0: kworker/0:5/5952
[  183.311703][ T5952] Modules linked in:
[  183.313304][ T5952] CPU: 0 UID: 0 PID: 5952 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) 
[  183.316326][ T5952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  183.319775][ T5952] Workqueue: usb_hub_wq hub_event
[  183.321812][ T5952] RIP: 0010:usb_submit_urb+0x15fd/0x1910
[  183.323803][ T5952] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 fd 54 b2 fa 48 8d 3d 86 a2 8e 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00
[  183.330552][ T5952] RSP: 0018:ffffc90004cf6e50 EFLAGS: 00010293
[  183.332595][ T5952] RAX: 0000000000000000 RBX: ffff88804ee8e100 RCX: fffff5200099edb6
[  183.335245][ T5952] RDX: ffff888027ad4a80 RSI: ffff88804ee8e100 RDI: ffffffff90e44af0
[  183.338451][ T5952] RBP: ffff8880699c2140 R08: 0000000000000000 R09: fffffbfff21ae8ea
[  183.341623][ T5952] R10: ffffc90004cf6ed8 R11: 0000000000000000 R12: ffff888025d270a0
[  183.344761][ T5952] R13: ffff888025d27010 R14: ffff888025d27050 R15: ffff88804acb42e0
[  183.347873][ T5952] FS:  0000000000000000(0000) GS:ffff88809718e000(0000) knlGS:0000000000000000
[  183.351615][ T5952] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  183.354344][ T5952] CR2: 00000000f7197810 CR3: 00000000743a2000 CR4: 0000000000352ef0
[  183.357476][ T5952] Call Trace:
[  183.358634][ T5952]  <TASK>
[  183.359649][ T5952]  ? _raw_spin_unlock_irqrestore+0x61/0x80
[  183.361796][ T5952]  ? __pm_runtime_resume+0xc3/0x170
[  183.361837][ T5952]  cm109_input_open+0x273/0x420
[  183.361855][ T5952]  ? __pfx_cm109_input_open+0x10/0x10
[  183.361870][ T5952]  input_open_device+0x24c/0x3d0
[  183.361886][ T5952]  kbd_connect+0x124/0x180
[  183.365315][    C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[  183.365816][ T5952]  input_attach_handler.isra.0+0x177/0x1e0
[  183.369904][    C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[  183.371423][ T5952]  input_register_device.cold+0x139/0x375
[  183.374631][    C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[  183.376014][ T5952]  cm109_usb_probe+0x128d/0x17f0
[  183.379626][    C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[  183.380674][ T5952]  usb_probe_interface+0x303/0x8f0
[  183.383937][    C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[  183.385253][ T5952]  ? __pfx_usb_probe_interface+0x10/0x10
[  183.388348][    C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[  183.389789][ T5952]  really_probe+0x241/0xa60
[  183.392753][    C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[  183.394295][ T5952]  __driver_probe_device+0x22e/0x480
[  183.397233][    C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[  183.399160][ T5952]  driver_probe_device+0x4c/0x1b0
[  183.401898][    C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[  183.403723][ T5952]  __device_attach_driver+0x1df/0x340
[  183.406870][    C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[  183.408934][ T5952]  ? __pfx___device_attach_driver+0x10/0x10
[  183.419277][ T5952]  bus_for_each_drv+0x159/0x1e0
[  183.421324][ T5952]  ? __pfx_bus_for_each_drv+0x10/0x10
[  183.423444][ T5952]  ? lockdep_hardirqs_on+0x78/0x100
[  183.425599][ T5952]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  183.428038][ T5952]  __device_attach+0x1e4/0x4d0
[  183.430102][ T5952]  ? __pfx___device_attach+0x10/0x10
[  183.432304][ T5952]  ? do_raw_spin_unlock+0x145/0x1e0
[  183.434483][ T5952]  device_initial_probe+0xaf/0xd0
[  183.436480][ T5952]  bus_probe_device+0x64/0x160
[  183.438496][ T5952]  device_add+0x1210/0x1950
[  183.440399][ T5952]  ? __pfx_device_add+0x10/0x10
[  183.442412][ T5952]  usb_set_configuration+0xd97/0x1c60
[  183.444547][ T5952]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[  183.446750][ T5952]  usb_generic_driver_probe+0xa1/0xe0
[  183.448774][ T5952]  usb_probe_device+0xef/0x400
[  183.450530][ T5952]  ? __pfx_usb_probe_device+0x10/0x10
[  183.452512][ T5952]  really_probe+0x241/0xa60
[  183.454220][ T5952]  __driver_probe_device+0x22e/0x480
[  183.455870][ T5952]  ? usb_driver_applicable+0x1c7/0x220
[  183.457455][ T5952]  driver_probe_device+0x4c/0x1b0
[  183.459028][ T5952]  __device_attach_driver+0x1df/0x340
[  183.460841][ T5952]  ? __pfx___device_attach_driver+0x10/0x10
[  183.462779][ T5952]  bus_for_each_drv+0x159/0x1e0
[  183.464317][ T5952]  ? __pfx_bus_for_each_drv+0x10/0x10
[  183.465948][ T5952]  ? lockdep_hardirqs_on+0x78/0x100
[  183.467535][ T5952]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  183.469424][ T5952]  __device_attach+0x1e4/0x4d0
[  183.470905][ T5952]  ? __pfx___device_attach+0x10/0x10
[  183.472535][ T5952]  ? do_raw_spin_unlock+0x145/0x1e0
[  183.474197][ T5952]  device_initial_probe+0xaf/0xd0
[  183.475734][ T5952]  bus_probe_device+0x64/0x160
[  183.477216][ T5952]  device_add+0x1210/0x1950
[  183.478690][ T5952]  ? __pfx_device_add+0x10/0x10
[  183.480198][ T5952]  ? add_device_randomness+0xb7/0xf0
[  183.481831][ T5952]  usb_new_device.cold+0x685/0x115c
[  183.483433][ T5952]  ? do_raw_spin_lock+0x128/0x260
[  183.485021][ T5952]  ? __pfx_usb_new_device+0x10/0x10
[  183.486636][ T5952]  ? mark_held_locks+0x40/0x70
[  183.488137][ T5952]  hub_event+0x314d/0x4af0
[  183.489570][ T5952]  ? __pfx_hub_event+0x10/0x10
[  183.490973][ T5952]  ? preempt_schedule_thunk+0x16/0x30
[  183.492607][ T5952]  process_one_work+0xa0e/0x1980
[  183.494130][ T5952]  ? __pfx_process_one_work+0x10/0x10
[  183.495752][ T5952]  ? __pfx_hub_event+0x10/0x10
[  183.497218][ T5952]  worker_thread+0x5ef/0xe50
[  183.498679][ T5952]  ? __pfx_worker_thread+0x10/0x10
[  183.500248][ T5952]  ? kthread+0x13a/0x450
[  183.501554][ T5952]  ? __pfx_worker_thread+0x10/0x10
[  183.503109][ T5952]  kthread+0x370/0x450
[  183.504397][ T5952]  ? __pfx_kthread+0x10/0x10
[  183.505819][ T5952]  ret_from_fork+0x72b/0xd50
[  183.507227][ T5952]  ? __pfx_ret_from_fork+0x10/0x10
[  183.508860][ T5952]  ? __switch_to+0x800/0x1100
[  183.510302][ T5952]  ? __pfx_kthread+0x10/0x10
[  183.511725][ T5952]  ret_from_fork_asm+0x1a/0x30
[  183.513218][ T5952]  </TASK>
[  183.514213][ T5952] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  183.516416][ T5952] CPU: 0 UID: 0 PID: 5952 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) 
[  183.519237][ T5952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  183.522277][ T5952] Workqueue: usb_hub_wq hub_event
[  183.523834][ T5952] Call Trace:
[  183.524890][ T5952]  <TASK>
[  183.525801][ T5952]  dump_stack_lvl+0x100/0x190
[  183.527251][ T5952]  vpanic+0x552/0x970
[  183.528655][ T5952]  ? __pfx_vpanic+0x10/0x10
[  183.530171][ T5952]  panic+0xd1/0xe0
[  183.531382][ T5952]  ? __pfx_panic+0x10/0x10
[  183.532847][ T5952]  ? check_panic_on_warn+0x1f/0x90
[  183.534566][ T5952]  check_panic_on_warn.cold+0x19/0x34
[  183.536257][ T5952]  ? usb_submit_urb+0x15fa/0x1910
[  183.538002][ T5952]  __warn.cold+0x191/0x328
[  183.539576][ T5952]  __report_bug+0x296/0x3d0
[  183.541006][ T5952]  ? usb_submit_urb+0x15fa/0x1910
[  183.542574][ T5952]  ? __pfx___report_bug+0x10/0x10
[  183.544160][ T5952]  ? lockdep_hardirqs_on+0x78/0x100
[  183.545769][ T5952]  ? usb_submit_urb+0x15fd/0x1910
[  183.547343][ T5952]  report_bug_entry+0xe1/0x290
[  183.548827][ T5952]  ? usb_submit_urb+0x15fd/0x1910
[  183.550377][ T5952]  handle_bug+0x1cd/0x2a0
[  183.551716][ T5952]  exc_invalid_op+0x17/0x50
[  183.553139][ T5952]  asm_exc_invalid_op+0x1a/0x20
[  183.554661][ T5952] RIP: 0010:usb_submit_urb+0x15fd/0x1910
[  183.556394][ T5952] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 fd 54 b2 fa 48 8d 3d 86 a2 8e 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00
[  183.562329][ T5952] RSP: 0018:ffffc90004cf6e50 EFLAGS: 00010293
[  183.564266][ T5952] RAX: 0000000000000000 RBX: ffff88804ee8e100 RCX: fffff5200099edb6
[  183.566692][ T5952] RDX: ffff888027ad4a80 RSI: ffff88804ee8e100 RDI: ffffffff90e44af0
[  183.569116][ T5952] RBP: ffff8880699c2140 R08: 0000000000000000 R09: fffffbfff21ae8ea
[  183.571520][ T5952] R10: ffffc90004cf6ed8 R11: 0000000000000000 R12: ffff888025d270a0
[  183.573950][ T5952] R13: ffff888025d27010 R14: ffff888025d27050 R15: ffff88804acb42e0
[  183.576364][ T5952]  ? _raw_spin_unlock_irqrestore+0x61/0x80
[  183.578154][ T5952]  ? __pm_runtime_resume+0xc3/0x170
[  183.579752][ T5952]  cm109_input_open+0x273/0x420
[  183.581251][ T5952]  ? __pfx_cm109_input_open+0x10/0x10
[  183.582886][ T5952]  input_open_device+0x24c/0x3d0
[  183.584413][ T5952]  kbd_connect+0x124/0x180
[  183.585788][ T5952]  input_attach_handler.isra.0+0x177/0x1e0
[  183.587581][ T5952]  input_register_device.cold+0x139/0x375
[  183.589330][ T5952]  cm109_usb_probe+0x128d/0x17f0
[  183.590862][ T5952]  usb_probe_interface+0x303/0x8f0
[  183.592440][ T5952]  ? __pfx_usb_probe_interface+0x10/0x10
[  183.594102][ T5952]  really_probe+0x241/0xa60
[  183.595380][ T5952]  __driver_probe_device+0x22e/0x480
[  183.596986][ T5952]  driver_probe_device+0x4c/0x1b0
[  183.598507][ T5952]  __device_attach_driver+0x1df/0x340
[  183.600175][ T5952]  ? __pfx___device_attach_driver+0x10/0x10
[  183.602000][ T5952]  bus_for_each_drv+0x159/0x1e0
[  183.603510][ T5952]  ? __pfx_bus_for_each_drv+0x10/0x10
[  183.605180][ T5952]  ? lockdep_hardirqs_on+0x78/0x100
[  183.606789][ T5952]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  183.608573][ T5952]  __device_attach+0x1e4/0x4d0
[  183.609989][ T5952]  ? __pfx___device_attach+0x10/0x10
[  183.611572][ T5952]  ? do_raw_spin_unlock+0x145/0x1e0
[  183.613219][ T5952]  device_initial_probe+0xaf/0xd0
[  183.614786][ T5952]  bus_probe_device+0x64/0x160
[  183.616272][ T5952]  device_add+0x1210/0x1950
[  183.617669][ T5952]  ? __pfx_device_add+0x10/0x10
[  183.619167][ T5952]  usb_set_configuration+0xd97/0x1c60
[  183.620825][ T5952]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[  183.622619][ T5952]  usb_generic_driver_probe+0xa1/0xe0
[  183.624450][ T5952]  usb_probe_device+0xef/0x400
[  183.625930][ T5952]  ? __pfx_usb_probe_device+0x10/0x10
[  183.627572][ T5952]  really_probe+0x241/0xa60
[  183.629004][ T5952]  __driver_probe_device+0x22e/0x480
[  183.630932][ T5952]  ? usb_driver_applicable+0x1c7/0x220
[  183.633091][ T5952]  driver_probe_device+0x4c/0x1b0
[  183.635055][ T5952]  __device_attach_driver+0x1df/0x340
[  183.637201][ T5952]  ? __pfx___device_attach_driver+0x10/0x10
[  183.639680][ T5952]  bus_for_each_drv+0x159/0x1e0
[  183.641244][ T5952]  ? __pfx_bus_for_each_drv+0x10/0x10
[  183.642896][ T5952]  ? lockdep_hardirqs_on+0x78/0x100
[  183.644510][ T5952]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  183.646412][ T5952]  __device_attach+0x1e4/0x4d0
[  183.648018][ T5952]  ? __pfx___device_attach+0x10/0x10
[  183.649653][ T5952]  ? do_raw_spin_unlock+0x145/0x1e0
[  183.651253][ T5952]  device_initial_probe+0xaf/0xd0
[  183.653009][ T5952]  bus_probe_device+0x64/0x160
[  183.654930][ T5952]  device_add+0x1210/0x1950
[  183.656719][ T5952]  ? __pfx_device_add+0x10/0x10
[  183.658492][ T5952]  ? add_device_randomness+0xb7/0xf0
[  183.660493][ T5952]  usb_new_device.cold+0x685/0x115c
[  183.662307][ T5952]  ? do_raw_spin_lock+0x128/0x260
[  183.664213][ T5952]  ? __pfx_usb_new_device+0x10/0x10
[  183.665851][ T5952]  ? mark_held_locks+0x40/0x70
[  183.667320][ T5952]  hub_event+0x314d/0x4af0
[  183.669017][ T5952]  ? __pfx_hub_event+0x10/0x10
[  183.670862][ T5952]  ? preempt_schedule_thunk+0x16/0x30
[  183.672934][ T5952]  process_one_work+0xa0e/0x1980
[  183.674873][ T5952]  ? __pfx_process_one_work+0x10/0x10
[  183.676936][ T5952]  ? __pfx_hub_event+0x10/0x10
[  183.678777][ T5952]  worker_thread+0x5ef/0xe50
[  183.680573][ T5952]  ? __pfx_worker_thread+0x10/0x10
[  183.682530][ T5952]  ? kthread+0x13a/0x450
[  183.684283][ T5952]  ? __pfx_worker_thread+0x10/0x10
[  183.686095][ T5952]  kthread+0x370/0x450
[  183.687389][ T5952]  ? __pfx_kthread+0x10/0x10
[  183.688926][ T5952]  ret_from_fork+0x72b/0xd50
[  183.690361][ T5952]  ? __pfx_ret_from_fork+0x10/0x10
[  183.691956][ T5952]  ? __switch_to+0x800/0x1100
[  183.693437][ T5952]  ? __pfx_kthread+0x10/0x10
[  183.694985][ T5952]  ret_from_fork_asm+0x1a/0x30
[  183.696524][ T5952]  </TASK>
[  183.698275][ T5952] Kernel Offset: disabled
[  183.699662][ T5952] Rebooting in 86400 seconds..