last executing test programs:

7.093073034s ago: executing program 2 (id=789):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f0000000340)=[{0xb1, 0x57, 0x0, 0xab49}, {0x6, 0x3, 0x6, 0x8}]}, 0x8)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
syz_extract_tcp_res(0x0, 0x6, 0x5)
syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[], &(0x7f0000000640)={0x0, 0x2, [0x4a1, 0xc34, 0xf62, 0x4b]})
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, 0x0}}], 0x2, 0x14)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0xa, 0x2, 0x0, @empty=0x2000000, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0)
r4 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x880b1)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2004095)

6.061017928s ago: executing program 2 (id=794):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x1100}, 0x1, 0x7}, 0x0)

5.835706188s ago: executing program 2 (id=795):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0)
syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000340)={0xc, &(0x7f0000000240)={0x20, 0x2, 0x44, {0x44, 0x22, "24648b633d05f256dad5430c1280e6d114b61a8549f8c0058c6dfd61aaf7cf2fbcd12c3a990b178a80904c716ead7f60bcd5af1f2c6c1ea577df595fff35b74bb5e0"}}, &(0x7f0000000300)=ANY=[@ANYBLOB="0003840000000403610a"]}, &(0x7f0000000a40)={0x10, &(0x7f00000003c0)={0x40, 0x14, 0xae, "bc0130d0de85d87e68afcc7c48fa325c0f0cf2b8b8909bbed6f8a07ddce71fa80bc869b4b3fe2c90bbecc5e9fe1fb88b93ae1c4fca3c3be6c750b2535d9df25e2ba1a7703d4ac308b53f5316fe2540ef596a230608c3e1bbfd321bd782576381d16e98baebea2426762636df7f0f4a7989aedce2126939fbfd54f445da4b94c25ee96c4da246dc70e070b9a2f404e7f7a9b3e3e54fc6b8f045476af0f1f8d0a224ff18cf10352301d9e4f821f435"}, &(0x7f00000005c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000a80)=ANY=[@ANYBLOB="2102da1c52c49f416e1023539fb51ae2ad41c56078040beb77895728a984c3fdae5ec686649ac36504097839e29b4f90df7797fbf61b773890052ce47b01313a5797d53f25cb8a825712ea9d07a4842879eb2bd2e0ca7ccbf90701c9c0c74121929d613789bdb06abb7c6e6bc45101c3f059947c33cf3e9c13a35f2b881f6b57d88a6677ac63062edc2ebd713462fd7fa82e218658ba19818bcda41f"]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r1, 0x40786e88, &(0x7f0000000dc0)={{&(0x7f0000000f40)=[{0x4, 0x7fff, 0x5, {0x5, 0x5718}, 0x4cda, 0x3ff, 0x3}, {0x9, 0x3ff, 0xffffffffffffffff, {0x14c0000000, 0x9}, 0x8, 0xb, 0x2}, {0x2, 0x1000, 0x5, {0x7, 0xffffffffffffffff}, 0x0, 0xe026, 0x7}, {0x9, 0x2, 0xa, {0x1}, 0x5, 0x4, 0x4}, {0x7ff, 0x6, 0x5, {0xe, 0xf49}, 0x1, 0x7fffffffffffffff, 0x2}, {0x3aad, 0x2cea818f, 0xfffffffffffffffb, {0x4a3, 0x2}, 0x7, 0x2, 0x6}, {0x2, 0x8000000000000000, 0x8, {0xffff, 0x2}, 0x1c000, 0x5, 0x3ff}, {0x0, 0x3ff, 0x0, {0x100000000, 0x3ff}, 0x8, 0x7, 0x6}], 0x8, 0x40, 0x3, 0x1}, {&(0x7f0000000e80)=[{0x0, 0x4}, {0x1, 0x2}, {0x7, 0x7}, {0x400, 0xa5af}, {0x0, 0x1c00}, {0x2, 0xfffffffffffffff9}, {0x9, 0x8}, {0x100, 0x4000000f815}, {0x8000000000000001, 0x10}], 0x9, 0x10, 0x800, 0x1}, {&(0x7f0000000d00)=[0x7, 0x80000000, 0x7, 0x334dc4b5, 0x7f11, 0x10000000000004], 0x6, 0x8, 0x46, 0x8}, {&(0x7f0000000d40)=[{0x3, 0x4, 0x8, 0x9, 0x4}], 0x1, 0x28, 0x3, 0x5}, {&(0x7f0000000d80)=[0x4], 0x1, 0x8, 0x3, 0x9}})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000500)={0x0, 0xffff, 0x0, 0x0, <r3=>0xffffffffffffffff})
sched_setaffinity(r3, 0x8, &(0x7f0000000580)=0x4)
capset(0x0, &(0x7f00000004c0)={0xffffffff, 0x2, 0x800, 0x3, 0xffff8258})
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0)
bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
write$apparmor_exec(r5, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0xe3)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000400)=[@acquire], 0x0, 0x0, 0x0})
r6 = inotify_init1(0x0)
inotify_add_watch(r6, &(0x7f0000000080)='./file0\x00', 0x2c8)
r7 = dup3(r1, r0, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x10, 0x0, &(0x7f0000000440)=[@increfs, @release={0x40046306, 0x1}], 0x0, 0x0, 0x0})
capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000480)={0xc7, 0x1, 0x7ff, 0xa, 0x1, 0xbc})

5.835304618s ago: executing program 0 (id=796):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x24004081}, 0x40)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='uid_map\x00')
memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xf2)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x20004803)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40044)
recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0)
openat$comedi(0xffffff9c, &(0x7f0000000300)='/dev/comedi5\x00', 0x8000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x0, 0x0, 0x0, 0x3a5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
unshare(0x6a040000)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000400))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x10})
writev(0xffffffffffffffff, &(0x7f0000000440), 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280), 0x0)

4.147392553s ago: executing program 2 (id=800):
r0 = gettid()
timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581)
ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000000)={0x4, 0xb, 0x80005, 0xfffffffe, 0x8, 0x16, "260000000000f50754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9e})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000100000000000000000000006118140000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.798422655s ago: executing program 0 (id=802):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x1a61)

3.646022634s ago: executing program 3 (id=803):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2/custom0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r2=>r0, {0xfffff5d4}}, './file0\x00'})
ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000003c0)=0x4)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010473797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30000000003c000000060a010400000000000000000500000008000b400000000014000480100001800800010066776400040002800900010073797a3000000000140000001100010000000000000000000000000a"], 0xb0}}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r4 = socket$unix(0x1, 0x1, 0x0)
listen(r4, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
fsopen(0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0x7, 0xd8f9})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000)
clock_gettime(0x0, &(0x7f0000000180)={<r6=>0x0, <r7=>0x0})
pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0xcb3c, 0x1ce, 0x7fff, 0x2}, &(0x7f00000000c0)={0x6, 0x1, 0x6, 0x2, 0xcf69, 0x5, 0x6, 0x1}, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, &(0x7f00000001c0)={r6, r7+60000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x1000, 0x8]}, 0x8})
syz_clone(0x4000, &(0x7f0000000500)="f622fb49a963f8d3e35271e10dd43942c81ce8e4ac1c28d72de839d3cdc25bbf8d0ea85197b823fe80d43a31abc57c34e7cf516ce67013f38dc4e0230cfb83e1991d5c8cde3c96d8cf0288e9a34ed6cd90b37c6b68ad120866b48171586ab61296a3a88d675600a83ff18394c7a27bf9a1a5a596551af49c0f50ad85f66cfb349b7a6a6dd5329e560438970d855dda86cf4770537e5d9fed21de97927f4bf794732a078bfa43f15aaded896e3c4f61c2503679ca2b9cb57f3d0d5c58cfc83c8f5853bc458c9ac49b3c8cae51042117ba4db2fbbcbdc0a6c54181c01cc499e764de9b1f799944d231de6e133698", 0xed, &(0x7f0000000600), &(0x7f0000000680), &(0x7f00000006c0)="55f15faa131fbfd6339ea6e67a51d36b745f81b0aca2d1c6d21a1fbdad40b8d2e8815b48f3407ed9f13fb4c7580f6910f76c662d18be3c9ef5bb2d08bc960c632f41c8fdf984c8a293bdf6fafd2383214ebf56c89d2f7b6812e39dd2b410e34c823da5b0ddbf8aff0c445e93bfa77c3468496830b5d024724563faadd5d96d30ddf43044d00ccab7d72776ff0f8593719e51b8058c0c426be0f8699b4f4e1c3fc11bb0c8fb9c07d95799e18bb2")
fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
syz_clone(0xa7083000, &(0x7f0000000780)="100bacc575cd1575385407151e365297b2876120730ebf157c0dd27bc4a4269345400e421205b66fa42eed501c3c463467cafcbcd40de67123128ce0150391655694213a1654cedd8ebc8596dd90b2492a6d26278fc115eae45d743a2b18c3c9dad10aafd241fbdbe82716fbdd6c68c33db8db24be740583121e0f99d46609bcc5fd89af6a9afc63d189a334734a8e38cd92c132011e635208b232e7968bd5c7c53baad5", 0xa4, &(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)="ea2c86a4b67d7fa32dc2f97338318b4f7e21b5a16036cb1a4352e42d90d5c12aceafa5ebcbc95cd12315366a00a0cc7ab46d6e328a52e062dd8e76ad75dffd55de4b2de906f983cc1f0322288f5801d29b5256f4699d3405f2438db92d7ffe3d649fb6e96751d5ed0ae3bf16d2dad091c81deeda2c6e20d983b06a67d596abf013bfaac86c660ea14739d81070aa2fff04141cbe34123190ba948144bd593ef73917d10f7f97d526574262efca2af0c2818db16d2615d1569eb3fbf2e24015eb3f1e6d19f859b43ebd33eea109123a4a7651c200d8db7310fd64993d6d62c48a1ebcd1a5c017e634ae0134d92b40543436a95150a313d7cd581baa6e506d6e70799b6b9305906335abbc138743b4a70aef71413d224adb80fe651068948381564f194d0a3d31dae0c70bfe3c22b105c087d5e720e73961bd1738a684799d9933c20b34c98412af9d54e157ad753b7aaa7c826cccf52f12a760d1999cf4515f9880d00f7405b4cae934ee1c847f0bf61d5a287514611bd1f19aaf3dce28eb0364e27969004fc185c8ad3ee4e6a9518086dc4c787a6c2489c17e8c12c7d12fa2f451d4a04682dd039bfe5e49bac3f2353ad98ee9bd2724a7e1d21cb830053f6245c997abe7bfbec759b7bf2609b1f8bc23bdbbe212408b9ef44c0045f45879b66838c66dfe460d433e0cba38a624df85d616fed1d437256d7a55e91789a709ce10bacd87e102ec3d45f480ab6b843a51cbe5b4c68456cf6b343f5a8f54821f9dce20eb4eada5e688935b2323856d18959f65e8eeb413f9f7d8697775993886838f63bc4831ae1f06f47f4939c4e7cca54b66aaa2c09e4cd7eb482ae357ce130665d60326234a74d23f695a44d1cd80a0deb935716fabd1cf0d3c191cad5a4035c5cdff1341ddbeecf407d11a3e6ef565b8d251acf4523023635723eb59c6a7a75ed209367f73eff1a8c4a0b5a120d3013e47a8c80ae4b7e2f6df8b17763ac23099d98f77500efc12b2c492338a0ad6d02b62b872d756e0974b092226fca05de9d0e367844f794e2de52e2510b59e8779ba7c5585a211789efed28dfef60062d6bfeee80e516b0d4bc5bdb8d9e1b498cb509d6b3aadf7d443dcf8ef728eac992590ea53cebfdd0a0d28672efb9866bc6a1320e3ec278919f686f8f56191e731a3b35b368daecbfa2da5d99e50a1d98cbbba39b50dec4586ec5f1029b88a31553d1fe7d23da750018283a75bb1270b761ef6d61740496e25f5d1a47ac2d9554ed6eff8073fafa086b197193a563f5e6001bd9ab51ffa7a3f7b042dad5593db072828c3071a300702cd7845afd16094415123e03ed62bae859651795d3daaf27f6b820e561dcebfaea017e5fb0f978131df8ac14ea4d96ce0edac6202615b750d3ab3a5ccb8c199dca8448aed09d04e20e4c51d5ce1f0730210ab7141ede1e5417ccb8f1c9b078015149c5c1b48c2e9359caf4dd7a6357613ee1ee175e8df2016dd94e74853fa6bbf2dfb9b1ff9248669bde24ccd660f4b7cff5a28ad2254121c24a2da8ee13334cc570240309c85706d08bab22c0bc4d43974838ff127f8aba89d7587c09610d883cce0dfbc953cc4832122d4ae569476bb36c1dd36b03346a9453ee124c5e62ff6b951f4c8ff2ff1eaed3cd7e6bc53a9975e1b0e8ed38ec6e1ef6479e2e6ce1a8133fb4d66723d6081538ed266c7b97ddfed16a228069f749ba62826076221a081c400abbe2f0a2a935e25b780c5c8a08ebcdd3001a869d7b7f6ac8ad58f819758d4f57e7c40cf51dbc50c0451c00bf1bc3fff687547d077f57fb6ce53db54df65aad44c26e20db5e67fc37358277fbf620bf3277491838419cf763fc528b43288c6b3b11500f2b5f142404d5920a9da030a361dc21b99826f39a04ad01cdf5d79622e7f3963c1db8cd7a1f85f31f3abd3ca29903f279ce7462df6a2c17e77d120fe323b68d3db9076f83ae0c26e8ee41c5fc4d0524a41d6ea130b76a26d349f84e49df0d9cf16f0b1bc6522ce4c4fff257cb1465559e661949e48726595884dd73d38b95f30ad1b819c291987ce2c5406e1442405f0a3939da13a60100d18bbff6294715350121692927d406650d0469552697b6d9784590183562df730664e5225d517864007c9d8759161aad00ac0135c02a2d40f1cd7790389141f82c70dbf3584af39d6dc11c91860f5a57f89da76b6243289d0d58d20688e199126e62e6079f0ee370b13b464a390c5e39e94941f3528b512717500f0a4e70d051bba8582479424279269ba663456fc2bc090e16d25d36f6c1b4802585766be9367b108bf6f2745d90110d284f67bcd49f6f58bbf3fe0a82347f3f26e0be08334bcda4d1117fbe4c977d0aa93cd60d8dcb1b9b09fde0d4b132de233155396f30301801c5728bde2e2daca54694e51757e296ac2c25acc29e157dc55b8f623eab097a7af20e7c100b942b527b4c075e9b6a484d3f1c140cb228796bb5bd174a2054c7fc600e747317a9d886e473d5b3de94bd9fead6d3464eb1506e8b93def734878ea8bf40eaa6914116f9d2b08d5efdbd8ffa7fbd5d7adb5d94a77b8f13e6857c61f0a9f7762e36194fb69eb45200fdf59c774ea3daaf296a0e3caab112e66556436ed6914b3a4f6e2c251c6fda839ce110c77c582af0a6bf70a5f3a1c03a9d780a0f58c4271fa5279d02f821ccbbfe513261313b2979cd65c8629a1fa3540f6fd287e5173f0f6a816fde534af583aa4de96dd584835bdff62f940e3341731f5bb0f3212cd5d46aed4096e0ab74bf524f6ac54e780b8fc097fc210815ff112f4f5fb8ac1f59535fcbce8524ef3d7e5583f7bc30ee5b7134afa18a03abf361757ea4408b88fb21a9a38774778c1f342ee554ca543b22d9c8a61fe1c0d90b0c0d27199b03be527939599318784e357764275cdf16c3833b05ab8a50d3f6668e6fdf394ff098f472afdc7efdc0a3532a5b8270db45d08f2d07ae5eefded4273183f45a8199ac05531329d6abc403c73d8365f25494a6cb788b412ba3c544f11c8bb961fcbac4a31e8e04708d3779a11a828615b17acb174fbcb2707f09711365ce5cb42868d04a0cea7ea11eacd32bf19df8b9248b37a2803671e16ed891cbd5e555e631924ed6d5c50691d60753a3043f2859c7c58e63dca62f6d762c67175df5cd6ff6bc30ec592fe1a514607fc2d3a08e980bbc9a29db97df0ae575d2f760ca1328c8ddb0ac9818b1ba5ac6d9b9812c9109be3e6c5dac5487c6c8d9b0eb4f6436f71a3cd0094107755b5676b5e062eea3d345b0b080f08eb71efea7ea8cd070dea24eed82d39ecf30fdf59cdb44f1f8a81c785c1495a69b194834aad7ed738f238ee0d9ba43a6d6d0254353a487f5c6318445686ce244046388624f92fb0bb5120eb1a57f5d5cb9923b0e5442a3eeca1bb3d1aa183f7e7c12abfc0c5b602696f486cfa8e0e94d68fc691f236b82015b6ac402cc337f6376e8bb5bdfbfb98157e1578fc5d671e1fe52a70dcea32558b7062d5299bd4f7d9535ac8577d78e408c3937b29bfc9e08f443225597e91305af383e9131d5aaa9cef8443f2403d3d23383067d22eba9846cf7ad5e307b6691bea3810e5d610c7c9e3855b88e085cc8dced843aeb1440c899951eb7644e704d9edefc3582486fd9e8f3a6537c65c70fa24e6c8f550a03e0cc4d4c33ddd558e264789ae33d4904183e70bb01a1904cca60ace897f157363f5a229dcfb0ba0c0c58d3edd31c0c941c5ce6c1f61c6eb0952cefcc9803cae62b9da78c00b0750a6f3311e1158528aa62f833e31ef4bac103be035ba46aae9aef5afb106c9f6f75cbb907cfdc90381de0ebc7dc47e34a9d15f5b5ec6daed186829d5d947f5fa6ed4ce75a35fc36814efd3319f66c42bfbfa10218f2e8173cdbcd8215c2e40f28f210d691faa27da34c4acb74b23bd6ab4ee162635097717be285286016f112500561caeca791b4c57bd0065e5675fffc414bf794e5134d3436c173301e6d0c210c8be126b559b94ee0e6e7f71b4b1e8b9c761afed5b8666ea19fbb9e1806d33f39679e4a5a19297ee59bbfd732c216d54612f59d416893d9e11cd9f8cb71db5b11695b7a6b26f45f038ab710eb7770ac0970434fee2ab3254dab91a84d38bc0cc1af48f0258d4884bb64d2bc9623eb4d458b3de550dea868b77993f6298fea39bcc9bbda7ba7c900452608932fcb448cd2f4ef37e8a996d3eee4c1110b3fec7b40635789fb54ca91159af625cfd4124aa2a25ef61bdb7b83edf89f6e285aaef6ae89bcb5eaad0056ab57e03e01df3f6f4f89055d61a39366e0a5473483e5a768bcaa4c36762ccaf0ef697dd3bbe6a0cbd16d43227c7d6836b76a32bd5c25191554f84214f77ed09cb1cc072fb586349a7198c518e941465757d53a1a5cb32431914bae4990079e111860880fcd4c1aa7117cfaa4c77d04c2f352935d35633d7d66f4c6869b9ec990567f553fb1598a3823ee56efb5463b35279d2fd5d85fb5f0f9a85f4f85606322ff36af380bc9ae731c73eda57f7a975c7587b22ee07409442fba03c8c89e17bc80f5fa4ef7cb1027041d76a4627d0eff4faf58a652e08540993bd8dd1b04a62ae03bdb8317279ead006d432411ff1fa0bcb332722670592ca9e5b4400b910415e6d63c828d2d157ffa6c8d086a454b9b360643009aa13eb53b0890c529f1dba147cc6d237c7730447ea250389424fe41837cb712531b8d9e18c8b7891ea30ea733ea843919aee4d8c65711450d1eabac6a33d1ca03c4bf26ab482abfcb56e492a21349fc46236e6312f3bf0ed1117380a640d09ef0ef9c2008dc69a2367c4280a309a0e9d3256f8ec96e99ab99e8c30061c9bf739cbd8a86c405150c397e851c2c0f844b10e6db526704a724f7fbdf04b2aac4b73edf08e7eaaabe37ce98f97cf8255ee4e107495f67254745315c67f8c95aeec5c0d32631905f97d1cb56dc0289f6c0341dd38c8eb0dc8bb6f7de29f3c681d418cbc324604c596d78a16a83cb159f6fd8a611bdaeb7e7cb151eb409cb9f7adc56026766c249b63708b0335590b14e9972cbdf3e11ba1a30897eb0d5ba9608ed785368e270a7d62c4b8d6eb613dc899286f66566303067bec3548a36ecafd358bc93c8959352731cfbe20d6556f44a61e3994333feafb0958c535ecdd537e957ddd1fd9c1b1d6f2a252bac0262ea24249c7591ab7d8d5c0ed61faeb309eae5b70d0eec4ab4770b83811a6a7574cc68f974f9c157fc1f892dfe4d8fc5ecf16629e0fe45286cae155e472c860ce7753aba91f359761a64d55f75b4d36bfcdf8b8284581e74b0443dabd2d40afcce782e8a902f4b0b4a1fe73f4d17f69bf39fb9dc9883d3d48637101c01176af1193a65b9dfd26a3640d43a0edcf348c6f952c7be504caf65ed58bbb083a326608ac199c9c421229e6adfb05aa985cf32953009e4fc53412fc75d82f75b8e14ebc5f6619bf49ff205f2ddfafa4e4a9d1f72c71efbc8f74f821015f4a7ca6468a02db2dc55d5d9a9489fffef8b87412d98ab5d474b0c94c8086ef73085bf8e3f0005a1a51cc45502320acd6da7ce4a29fd95dfa13677b8033fb43644d52d891e45e6e47f2ed0abf3c5011b9850809fb616dfb8ae22fd39a8e803344a48e955321267f03b5270145cb84b605d143f58a016b33855d9ab718f798ee6ce7785f1f7541ef6707555b9b79d4e1eedd935cba70b6e982792275da9d1df5f34f378cbad02c80323f4fd8f6f364b8aee3513fce67fb3c3ff2cf8bedb5220fb8271dd75fcc5bf2ea1bc9f5795fedd029")
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff010}, {0x28, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x0, 0x2}]}, 0x8)
sendmmsg(r8, &(0x7f000000bd00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="0a1057d48a", 0x33fe0}], 0x1}}], 0x1, 0x48844)

3.522935401s ago: executing program 0 (id=804):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000102c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x6001, 0x43098}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x20008800)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x72213, 0x58091}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @local}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1000}]}}}]}, 0x4c}, 0x1, 0x10000000}, 0x20000010)

3.466167151s ago: executing program 0 (id=805):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x288082, 0x52)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xb733fae3fc8f90bd)
ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, 0x0)
r3 = syz_io_uring_setup(0x403084, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x0, 0x529}, &(0x7f0000000240), &(0x7f0000ffc000), 0x0)
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000006740)=[0xffffffffffffffff], 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x9}, 0x0)
syz_io_uring_setup(0x10000048, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x3, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2206, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x9, 0x0, 0x6, 0x1, 0x10000, 0x0, 0x7ffffffd, 0x1ef, 0x1, 0x1, 0x55, 0x8, 0x4004, 0x746f, 0x8, 0x4006, 0x4, 0xee, 0x4, 0x7ffd]})
socket$nl_route(0x10, 0x3, 0x0)
lsetxattr(&(0x7f0000001680)='.\x00', &(0x7f00000016c0)=@known='security.selinux\x00', 0x0, 0x0, 0x3)
r6 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
unshare(0x26020480)
r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x0, 0x0)
r9 = openat$cgroup_int(r8, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="158804000300000008000d000100000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="44001000", @ANYRESHEX=r10, @ANYRES8=r9], 0x44}}, 0x0)

3.024183019s ago: executing program 1 (id=807):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x24004081}, 0x40)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='uid_map\x00')
memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xf2)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x20004803)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40044)
recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0)
openat$comedi(0xffffff9c, &(0x7f0000000300)='/dev/comedi5\x00', 0x8000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x0, 0x0, 0x0, 0x3a5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
unshare(0x6a040000)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000400))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x10})
writev(0xffffffffffffffff, &(0x7f0000000440), 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280), 0x0)

2.714440627s ago: executing program 3 (id=808):
mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000)
timer_create(0x2, 0x0, &(0x7f0000000480))
r0 = fsopen(&(0x7f0000000500)='ext4\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x1)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_create(0x2, 0x0, &(0x7f0000000480)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_settime(r1, 0x1, &(0x7f0000000140)={{0x0, 0x989680}}, 0x0)
timer_delete(r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB='\x00'/20, @ANYRESDEC, @ANYRES32, @ANYBLOB="0000002bc100000000000000000000000000000000000000000000000000a2641b495fcc5bc76f72d91532ae1ee00c8579cbd11de712756100dc1753f13b9e03702965e14aae7beac43c6288533ca1ba4fae"], 0x48)
r3 = timerfd_create(0x9, 0x80800)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r4, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x8, 0x0, 0x0}}, 0x10)
timerfd_settime(r3, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000000080))
timer_getoverrun(r1)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, 0x0, 0x0, 0x4}, 0x1c)

2.425922976s ago: executing program 3 (id=809):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000290009002abd700000dcdf250800000008000100", @ANYRES32, @ANYBLOB="04711b11eff706000000fed48447cd0152f21c"], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x40070)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f00000023c0)={0x79})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5)
ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f00000000c0))
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000080)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @sint={0x0, 0x3}}]})
r4 = socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
fchmod(r5, 0x29)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}, {0x6, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x8, 0x2, 0x5, 0x787, 0x3, 0x9}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x8000000000000001}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000018000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000e8b5314b8000000000000000b40059bfc27839dc2a31494f0c2f118912c84922d734eaf4cd8428e423ecc14f52f0e36783b39e8a880262735bfc02a154b61682e1865302755c9c1c47d889ba7b8e08d82f87ae49", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000004c0), 0x1000, r10}, 0x38)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'})
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r5, @ANYBLOB="000014000a000100000000000000000008000f0004"], 0x30}, 0x1, 0x0, 0x0, 0x850}, 0x48000)

2.373200903s ago: executing program 2 (id=810):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f0000000340)=[{0xb1, 0x57, 0x0, 0xab49}, {0x6, 0x3, 0x6, 0x8}]}, 0x8)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
syz_extract_tcp_res(0x0, 0x6, 0x5)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, 0x0}}], 0x2, 0x14)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0xa, 0x2, 0x0, @empty=0x2000000, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0)
r4 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x880b1)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2004095)

2.365832203s ago: executing program 1 (id=811):
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)}, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f00000000c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r1, 0x2, 0x16b, 0xb}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000440)={0xa30000, 0x401, 0xffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x17, 0x10001, '\x00', @p_u8=&(0x7f00000003c0)=0x6}})
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0xe}, 0x10)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000300)={@private2}, &(0x7f0000000340)=0x14)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB="b6fe0c05dfa3e4af8cc1ccfa8938a293a92da2ddd7c9"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000480)={0x32c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb}, 0xffffffffffffff08}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x0, 0xe, 0x0, &(0x7f0000000540)="db759469e36512be2770717f865d", 0x0, 0x2, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000900)="ffffdd014376ea94fe6f22446ab33726e5de056400000000"}, 0x4c)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_getnetconf={0x14, 0x6a, 0x7}, 0x14}}, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2000000002ffff, 0x0)
socket$packet(0x11, 0x3, 0x300)
write(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)

2.332285164s ago: executing program 0 (id=812):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7)
r3 = openat$userfaultfd(0xffffff9c, &(0x7f0000000080), 0x801, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48)
r5 = epoll_create(0x3ff)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)={0x20000008})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
fchdir(r3)

1.263221552s ago: executing program 1 (id=813):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
mkdir(&(0x7f0000000040)='./file0\x00', 0x80)
lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'trusted.', '\x00'}, 0x0, 0x0, 0x2)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0)
r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r8=>0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
r11 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0x0)
keyctl$setperm(0x5, r11, 0x52b242d)
syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x40, 0x2, 0x15e, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x8, 0x3, 0x1ab, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000010000001c0012000c0001006272"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0)

1.126138964s ago: executing program 2 (id=814):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0245629, &(0x7f00000000c0)={0x0, 0x0, 0x9, '\x00', &(0x7f0000000080)=0x1})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xe, 0x7f, 0x800, 0x5}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000c00)=0xc, 0x6, 0x2)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(r5, &(0x7f0000000100)='./file1\x00', 0x9893728a6bb3b0a4)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5'])
chdir(&(0x7f0000000140)='./file0\x00')
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80a42, 0x47)
write$P9_RVERSION(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="9e9f3c00000065ffff2200008008003950323068b9"], 0xfffffd1e)
sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x1, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0xfff2, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_ECN={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0c0}, 0x44850)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)

1.076000691s ago: executing program 0 (id=815):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4)
write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0001}]})
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c)
syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad7, 0x10000, 0x3}, &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000000))
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)={0xfffffeff})
close(r5)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, 0x0, 0x0)
getsockname$packet(r7, 0x0, &(0x7f0000000200))
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x20048015)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r8, &(0x7f0000005600)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2b, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001fff00f000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES64=r8, @ANYBLOB="dc196c174c0f622e019df2d7fcc0c6e67e55dd353e5b54dbb5c89c1e"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014", 0x23}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)

1.075590094s ago: executing program 3 (id=816):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
landlock_create_ruleset(0x0, 0x0, 0x1)
r1 = openat$dsp1(0xffffff9c, &(0x7f00000001c0), 0x400000, 0x0)
mmap$dsp(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x230013, r1, 0x0)
r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e21, @rand_addr=0x64010102}, 0x8, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)='lo\x00', 0x81, 0x4, 0x2a})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
socket$unix(0x1, 0x5, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc8, 0x3})
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0xb, 0xffffffffffffffff, 0x1})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r6)
sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x67f, 0x6, 0xf3b8, 0x1, 0x1000, 0x400, 0x4002004c4, 0x8, 0x0, 0x2000000097, 0x10, 0x0, 0x5, 0x4, 0x0, 0x8], 0xeeee8000, 0x100602})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
statx(r6, &(0x7f0000000300)='./file0\x00', 0x0, 0x800, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
sendmsg$nl_generic(r6, &(0x7f0000001840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001800)={&(0x7f0000000440)={0x13c0, 0x38, 0x200, 0x70bd25, 0x25dfdbfd, {0x6}, [@generic="5454fd89eed02e67e47a8e43da0e71b02f24e1a47e3504f9bc32a7a09d9ceab12337414cff5a5930473e11c6143482e61bb3a8fa6a13bec228a94c3a54e2289c360caff48187e5a611bef327de49e4e77b6a1a029b34e5d3846f1e9f7f50b611f22630b567853c92219b0e9d2e66c1702737f80427fed0a940ce1b32c6ed23669558a4014cbc7a2a51392e2f0a336ab5ecba72f35863ed3312ce07db8205434831b73b829c7467d2356a72e2de8992ccdf6ea1ccf99cc5afb93999e9d819541b8c589129a5dd4990906c77fbc636b91cdcabbd5135eee060a8367b3a8af54a4df81761cf526e2608087a52d957f6dc57438bc0a93e6b", @typed={0x8, 0x7e, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1b}}, @generic="2289cb61f3f8dccfd8774e3b9a355bdd367c4b2bb94a4cfd546f5e767cfacef324706bd882194ee4191feee13bf4966c59c7644ea03d532e7b74ce82453687080c71afc21388b256311e42d954b337ea45dfcb2fa7336eb7a4f5d9d44cff22855a76feabbde1a5fc4123ef0fa0ce3e35b45ff5e961fe8e94d32e7a865d984a9591c316c97bda732246dd4254b9d3faa6dd60bf507d1c5f626de88c4fdc58fd07882ebc41a824b9ad2354601672b65bf45a25871a28892149148d", @typed={0x8, 0x20, 0x0, 0x0, @uid=r7}, @generic="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", @typed={0x8, 0x3a, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x15f, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x63, 0x0, 0x0, @ipv4=@remote}, @nested={0x103, 0x52, 0x0, 0x1, [@nested={0x4, 0x9a}, @nested={0x4, 0x29}, @nested={0x4, 0x167}, @nested={0x4, 0x168}, @generic="b800a342a68561a51bc78f795fe8b2b35e96e92d19f9040700ec4b1de5024a8b45e707a9e8ecbb90f6d9a513c5c0e204a004de04b55c2dfe459fe6ff0578dbe7e3f10b09750cc1a9ca2aa2188b033d7d10cb6fd27ba8af8e87d4723fdd2716dcd1e9cf544f1febda5845383194f938ba53874db8a5d8de9334eadc7ca31dd6cd35f15464ac4e44fa6f499d7da5e69a2d1f3efd5265a8a6d6e34da26e65151627ac1e6a3a4984c818d6fce372d262941a43a3972d256d8231cf7effeb4bcb3c4474cc6c2ed265c582600be956e96b49090a38e8eb9432d0725efea67cdd4ba88ff8d1f648f6ceecb65eca48d3d7ad07"]}, @generic="770f5ddbea56606542972e5a540b2ec27254c7b989c53b976bdb0d705892d52fbecf2266a4a818f9c600c21a73702a2e5200ec78e40668295e0061a0576520bea279ab3623c6911047d56bbdd65e28a0e83367065aa703a2e2f048573039612c58da900aa611f276f9b5fdc353dd82a07a0676cea5d71e92fff4c7a34494ab40ccb673e943ea76f20750f236632f822b4ac9301aaebdcda9f062f43dbcdd7d22808dc3244d5075d5b108bcfcb68c4a58dbdaa88beb2ab027ff1a45aba8851d2871a0c3d551626d09915049ff1139fbd8"]}, 0x13c0}, 0x1, 0x0, 0x0, 0x4040010}, 0x40804)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x5)

944.106942ms ago: executing program 3 (id=817):
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'})
ioctl$KVM_CAP_PTP_KVM(r0, 0x4068aea3, &(0x7f0000000240))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000200081054e81f782db4cb904021d080006007c09e8fe04a1180008800a00142603600e1208000f", 0x2b}], 0x1}, 0x8000)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
mkdir(0x0, 0x12)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0)
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d000000000000", 0x1b)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x8000)
write$dsp(r3, &(0x7f0000002200)="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", 0x1000)

336.121035ms ago: executing program 3 (id=818):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38)
splice(r0, &(0x7f0000000040), r1, &(0x7f0000000080)=0x5, 0x7ff, 0x6)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xb0, 0x24, 0xf0b, 0x709d2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0x34}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x48c}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xb0}}, 0x0)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r6, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000ff1000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x200005}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
sendfile(r1, r5, 0x0, 0x20000000002)

245.984095ms ago: executing program 1 (id=819):
setresuid(0xee01, 0xee00, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x4, 0x1}, {0xe, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000bc0)=@newlink={0x58, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x58}}, 0x0)
setfsuid(0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
bind$netlink(r0, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xc)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYBLOB="e1b030bc92db0b19bf267d25a27f50e985995e", @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]})
close_range(r3, 0xffffffffffffffff, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f00000002c0)=0xe4)
quotactl_fd$Q_QUOTAOFF(r0, 0x32aa287cf6e33439, r4, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x2d0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x7f9b342e821bcffc, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@userxattr}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_off}]})

166.21105ms ago: executing program 1 (id=820):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
connect$qrtr(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) (fail_nth: 1)

0s ago: executing program 1 (id=821):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = memfd_create(&(0x7f00000000c0)='\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES16=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB="6cd7a077e3ef457784c3c5c07d8ec42ea0b240e2ecd7e7ea7e575733cf0378b3c843f52f55b381f3dddb4f54ead2a0029bb00212b6261ce629a760d729c8240fa8bba240f0d822685d02a609743557d3232d1f33b03be82fde4a680e1027cc04a1a5426f43be5686b3fb8b0b8e8e736aa33f84a09332556c31119e4d6ef494699823387e1f369257f0ccdff16e63dbcdf1aaa4acdce505c98b469c7b2381955188f3033d379f5153b771e2299328e3c96567c8fd6eb18f2e0c23093d98ce6d24668974e17ed68a974841ffd14c2a25f32250ff39b947cd3e135c028d9566643b2bf55a3168a0924b3a48f925ffdb365b6babb135ae3afe825b", @ANYRESHEX=r0, @ANYRESDEC=0x0])
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x21, 0x1, 0x5fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x6, 0x9, 0x0, 0x0, @str='{\x00'}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x20, 0x9f)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f00000023c0)={0x79})
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x5)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000080)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @sint={0x0, 0x3}}]})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
fchmod(r5, 0x29)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
io_uring_setup(0x180d, &(0x7f0000000140)={0x0, 0x4178, 0x400, 0x8001002, 0x3d7})
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)

kernel console output (not intermixed with test programs):

tover after parsing attributes in process `syz.1.90'.
[   74.497307][ T6184] af_packet: tpacket_rcv: packet too big, clamped from 2916 to 4294967286. macoff=82
[   74.700091][ T6189] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[   74.838238][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.95'.
[   75.634664][ T6209] netlink: 'syz.3.98': attribute type 10 has an invalid length.
[   75.638275][ T6210] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.111562][ T6215] netlink: 16 bytes leftover after parsing attributes in process `syz.1.100'.
[   76.125161][ T6215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.100'.
[   76.128238][ T6215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.100'.
[   76.223503][ T6216] atomic_op ffff88806aa41198 conn xmit_atomic 0000000000000000
[   77.287153][ T6222] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[   77.516515][ T6232] overlayfs: failed to resolve './file0': -2
[   77.539371][ T6233] netlink: 774 bytes leftover after parsing attributes in process `syz.3.108'.
[   77.548538][ T6233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.108'.
[   77.718955][ T6242] netlink: 'syz.1.111': attribute type 10 has an invalid length.
[   77.750306][ T6242] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   77.754868][ T6242] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[   77.773416][ T6245] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[   77.927284][ T6254] capability: warning: `syz.1.116' uses 32-bit capabilities (legacy support in use)
[   78.158226][ T2326] cfg80211: failed to load regulatory.db
[   78.864154][ T6268] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[   79.126397][ T6276] netlink: 16 bytes leftover after parsing attributes in process `syz.0.124'.
[   79.133090][ T6276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.124'.
[   79.136045][ T6276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.124'.
[   79.194917][ T6279] atomic_op ffff88802a4db198 conn xmit_atomic 0000000000000000
[   79.463941][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'.
[   79.479423][ T6284] netlink: 'syz.2.126': attribute type 10 has an invalid length.
[   79.487219][ T6284] syz_tun: entered promiscuous mode
[   79.512292][ T6284] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   80.257106][ T6270] syz.3.122 (6270) used greatest stack depth: 19104 bytes left
[   80.314517][ T6291] FAULT_INJECTION: forcing a failure.
[   80.314517][ T6291] name failslab, interval 1, probability 0, space 0, times 0
[   80.321556][ T6291] CPU: 0 UID: 0 PID: 6291 Comm: syz.3.129 Not tainted syzkaller #0 PREEMPT(full) 
[   80.321573][ T6291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   80.321635][ T6291] Call Trace:
[   80.321690][ T6291]  <TASK>
[   80.321695][ T6291]  dump_stack_lvl+0x100/0x190
[   80.322616][ T6291]  should_fail_ex.cold+0x5/0xa
[   80.322817][ T6291]  should_failslab+0xc2/0x120
[   80.323039][ T6291]  __kmalloc_cache_noprof+0x91/0x6c0
[   80.323085][ T6291]  ? p9_client_create+0xaf/0xd40
[   80.323693][ T6291]  p9_client_create+0xaf/0xd40
[   80.323709][ T6291]  ? __pfx_p9_client_create+0x10/0x10
[   80.323726][ T6291]  ? lockdep_init_map_type+0x5c/0x250
[   80.323876][ T6291]  ? __raw_spin_lock_init+0x3a/0x110
[   80.323924][ T6291]  v9fs_session_init+0x3c/0xdd0
[   80.324238][ T6291]  ? v9fs_get_tree+0x9c/0xb50
[   80.324354][ T6291]  v9fs_get_tree+0xb8/0xb50
[   80.324369][ T6291]  ? rcu_is_watching+0x12/0xc0
[   80.324383][ T6291]  ? __pfx_v9fs_get_tree+0x10/0x10
[   80.324396][ T6291]  ? bpf_lsm_capable+0x9/0x10
[   80.324442][ T6291]  ? security_capable+0x80/0x260
[   80.324719][ T6291]  vfs_get_tree+0x92/0x320
[   80.324812][ T6291]  path_mount+0x7d0/0x23d0
[   80.324828][ T6291]  ? __pfx_path_mount+0x10/0x10
[   80.324839][ T6291]  ? lockdep_hardirqs_on+0x78/0x100
[   80.324854][ T6291]  ? putname+0xb1/0x110
[   80.324865][ T6291]  ? kmem_cache_free+0x127/0x6b0
[   80.324879][ T6291]  ? __ia32_sys_mount+0x292/0x310
[   80.324891][ T6291]  __ia32_sys_mount+0x292/0x310
[   80.324903][ T6291]  ? __pfx___ia32_sys_mount+0x10/0x10
[   80.324915][ T6291]  ? ksys_write+0x1ac/0x250
[   80.324931][ T6291]  ? __pfx_ksys_write+0x10/0x10
[   80.324950][ T6291]  __do_fast_syscall_32+0xe7/0x970
[   80.324963][ T6291]  ? lockdep_hardirqs_on+0x78/0x100
[   80.324975][ T6291]  do_fast_syscall_32+0x32/0x70
[   80.324987][ T6291]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   80.325003][ T6291] RIP: 0023:0xf6fcefec
[   80.325073][ T6291] Code: Unable to access opcode bytes at 0xf6fcefc2.
[   80.325149][ T6291] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015
[   80.325166][ T6291] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800000c0
[   80.325176][ T6291] RDX: 0000000080004500 RSI: 0000000000000000 RDI: 0000000080000100
[   80.325185][ T6291] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   80.325193][ T6291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   80.325202][ T6291] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   80.325222][ T6291]  </TASK>
[   80.573796][ T6296] netlink: 9 bytes leftover after parsing attributes in process `syz.2.128'.
[   81.067735][ T6304] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[   82.176387][   T34] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   82.326623][ T6335] sctp: [Deprecated]: syz.0.141 (pid 6335) Use of int in max_burst socket option.
[   82.326623][ T6335] Use struct sctp_assoc_value instead
[   82.333955][ T6335] __nla_validate_parse: 2 callbacks suppressed
[   82.333996][ T6335] netlink: 44 bytes leftover after parsing attributes in process `syz.0.141'.
[   82.340878][   T34] usb 7-1: Using ep0 maxpacket: 8
[   82.344776][   T34] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[   82.348639][   T34] usb 7-1: config 179 has no interface number 0
[   82.352078][   T34] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   82.358004][   T34] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   82.362686][   T34] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   82.363960][ T6338] netlink: 88 bytes leftover after parsing attributes in process `syz.1.142'.
[   82.368502][   T34] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   82.383813][   T34] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   82.393545][   T34] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   82.399207][   T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.437039][ T6322] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   82.804655][ T6350] xt_hashlimit: Unknown mode mask AF, kernel too old?
[   82.869707][ T6322] syzkaller1: entered promiscuous mode
[   82.872115][ T6322] syzkaller1: entered allmulticast mode
[   83.479324][   T29] usb 7-1: USB disconnect, device number 2
[   83.479324][    C3] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   83.485579][    C3] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[   85.627433][ T6398] netlink: 16 bytes leftover after parsing attributes in process `syz.3.158'.
[   85.775422][ T6404] netlink: 774 bytes leftover after parsing attributes in process `syz.3.160'.
[   85.781205][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.160'.
[   86.385593][ T6419] netlink: 20 bytes leftover after parsing attributes in process `syz.1.164'.
[   86.476040][ T6420] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=12 (24 ns) > initial count (10 ns). Using initial count to start timer.
[   87.855932][ T6435] netlink: 16 bytes leftover after parsing attributes in process `syz.0.169'.
[   87.869525][ T6435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.169'.
[   87.873575][ T6435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.169'.
[   87.905955][ T6435] atomic_op ffff88805f8cd998 conn xmit_atomic 0000000000000000
[   88.909059][ T6445] netlink: 16 bytes leftover after parsing attributes in process `syz.2.171'.
[   88.922227][ T6445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.171'.
[   88.926102][ T6445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.171'.
[   88.947778][ T6445] atomic_op ffff88806d754198 conn xmit_atomic 0000000000000000
[   89.894000][ T6468] netlink: 830 bytes leftover after parsing attributes in process `syz.3.180'.
[   89.903900][ T6468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'.
[   90.164419][ T6473] netlink: 96 bytes leftover after parsing attributes in process `syz.0.181'.
[   90.201254][ T6473] netlink: 56 bytes leftover after parsing attributes in process `syz.0.181'.
[   90.546023][ T6483] comedi comedi2: pcl726: I/O base address or length out of range
[   90.701123][ T6487] netlink: 'syz.2.182': attribute type 32 has an invalid length.
[   90.703813][ T6487] netlink: 'syz.2.182': attribute type 32 has an invalid length.
[   90.793017][ T6487] kvm: kvm [6486]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000008a) = 0x39
[   91.009606][ T6498] atomic_op ffff88801dfb1198 conn xmit_atomic 0000000000000000
[   91.168036][ T6500] ipt_rpfilter: unknown options
[   91.460414][ T6503] netlink: 'syz.2.187': attribute type 4 has an invalid length.
[   91.506043][ T6503] netlink: 'syz.2.187': attribute type 4 has an invalid length.
[   92.200707][    C2] sr 2:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[   92.204385][    C2] sr 2:0:0:0: [sr0] tag#0 CDB: Test Unit Ready 
[   92.207237][ T6518] loop4: detected capacity change from 0 to 524287936
[   92.361045][ T6515] netlink: 'syz.1.189': attribute type 1 has an invalid length.
[   92.363662][ T6515] netlink: 'syz.1.189': attribute type 2 has an invalid length.
[   92.408677][ T6507] atomic_op ffff8880270f3198 conn xmit_atomic 0000000000000000
[   93.205324][ T6527] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[   93.209931][ T6527] netlink: 'syz.1.194': attribute type 2 has an invalid length.
[   93.303037][ T6529] __nla_validate_parse: 11 callbacks suppressed
[   93.303051][ T6529] netlink: 96 bytes leftover after parsing attributes in process `syz.1.195'.
[   93.324790][ T6529] netlink: 56 bytes leftover after parsing attributes in process `syz.1.195'.
[   93.337740][ T6529] netlink: 56 bytes leftover after parsing attributes in process `syz.1.195'.
[   93.434671][ T6534] netlink: 830 bytes leftover after parsing attributes in process `syz.0.193'.
[   93.462904][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.193'.
[   93.763356][ T6549] loop4: detected capacity change from 0 to 524287936
[   93.886288][ T6546] netlink: 16 bytes leftover after parsing attributes in process `syz.2.199'.
[   93.890925][ T6546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.199'.
[   93.894726][ T6546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.199'.
[   93.907240][ T6546] atomic_op ffff888013546998 conn xmit_atomic 0000000000000000
[   93.959030][ T6549] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.032657][ T6549] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.188940][ T6549] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.297854][ T6549] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.328507][ T6558] Invalid logical block size (117440512)
[   94.383262][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.205'.
[   94.465095][ T6564] capability: warning: `syz.1.206' uses deprecated v2 capabilities in a way that may be insecure
[   94.511764][ T6562] syzkaller0: entered promiscuous mode
[   94.514100][ T6562] syzkaller0: entered allmulticast mode
[   94.534505][ T6479] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.542875][ T6479] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.555517][ T6567] netlink: 830 bytes leftover after parsing attributes in process `syz.2.208'.
[   94.563299][ T6479] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.571067][ T6567] bridge_slave_1: left allmulticast mode
[   94.573475][ T6567] bridge_slave_1: left promiscuous mode
[   94.585468][ T6567] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.598400][ T6567] bridge_slave_0: left allmulticast mode
[   94.600931][ T6567] bridge_slave_0: left promiscuous mode
[   94.603520][ T6567] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.633388][ T6576] x_tables: duplicate underflow at hook 2
[   94.637580][ T6479] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.735608][ T6576] lo: entered promiscuous mode
[   95.738124][ T6576] lo: entered allmulticast mode
[   95.741196][ T6576] tunl0: entered promiscuous mode
[   95.742913][ T6576] tunl0: entered allmulticast mode
[   95.745242][ T6576] gre0: entered promiscuous mode
[   95.747364][ T6576] gre0: entered allmulticast mode
[   95.750176][ T6576] gretap0: entered promiscuous mode
[   95.752028][ T6576] gretap0: entered allmulticast mode
[   95.754752][ T6576] erspan0: entered promiscuous mode
[   95.757663][ T6576] erspan0: entered allmulticast mode
[   95.761718][ T6576] ip_vti0: entered promiscuous mode
[   95.763677][ T6576] ip_vti0: entered allmulticast mode
[   95.766053][ T6576] ip6_vti0: entered promiscuous mode
[   95.768627][ T6576] ip6_vti0: entered allmulticast mode
[   95.770981][ T6576] sit0: entered promiscuous mode
[   95.772608][ T6576] sit0: entered allmulticast mode
[   95.775393][ T6576] ip6tnl0: entered promiscuous mode
[   95.778547][ T6576] ip6tnl0: entered allmulticast mode
[   95.781795][ T6576] ip6gre0: entered promiscuous mode
[   95.784061][ T6576] ip6gre0: entered allmulticast mode
[   95.787823][ T6576] syz_tun: entered promiscuous mode
[   95.792329][ T6576] syz_tun: entered allmulticast mode
[   95.797246][ T6576] ip6gretap0: entered promiscuous mode
[   95.801354][ T6576] ip6gretap0: entered allmulticast mode
[   95.855411][ T6587] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[   96.232308][ T6601] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size.
[   96.586537][ T6608] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000)
[   96.851416][ T6620] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[   97.026308][   T34] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   97.180104][   T34] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   97.183260][   T34] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[   97.187511][   T34] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[   97.190503][   T34] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   97.190608][ T6640] atomic_op ffff8880511a3998 conn xmit_atomic 0000000000000000
[   97.194050][   T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[   97.207150][   T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   97.214191][   T34] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   97.221416][   T34] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   97.225752][   T34] usb 5-1: Product: syz
[   97.229756][   T34] usb 5-1: Manufacturer: syz
[   97.239455][ T6619] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   97.243633][   T34] cdc_wdm 5-1:1.0: skipping garbage
[   97.245496][   T34] cdc_wdm 5-1:1.0: skipping garbage
[   97.252250][   T34] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[   97.254345][   T34] cdc_wdm 5-1:1.0: Unknown control protocol
[   97.447778][ T6619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.453051][ T6619] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.462295][   T34] usb 5-1: USB disconnect, device number 2
[   97.830482][ T6654] netlink: 'syz.2.234': attribute type 3 has an invalid length.
[   97.872520][ T6656] FAULT_INJECTION: forcing a failure.
[   97.872520][ T6656] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   97.877397][ T6656] CPU: 1 UID: 0 PID: 6656 Comm: syz.3.235 Not tainted syzkaller #0 PREEMPT(full) 
[   97.877412][ T6656] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   97.877446][ T6656] Call Trace:
[   97.877471][ T6656]  <TASK>
[   97.877475][ T6656]  dump_stack_lvl+0x100/0x190
[   97.877864][ T6656]  should_fail_ex.cold+0x5/0xa
[   97.877938][ T6656]  _copy_from_iter+0x1f4/0x1690
[   97.878095][ T6656]  ? __asan_memset+0x23/0x50
[   97.878186][ T6656]  ? __pfx__copy_from_iter+0x10/0x10
[   97.878201][ T6656]  ? __pfx___alloc_skb+0x10/0x10
[   97.878393][ T6656]  netlink_sendmsg+0x808/0xda0
[   97.878445][ T6656]  ? __pfx_netlink_sendmsg+0x10/0x10
[   97.878472][ T6656]  ? apparmor_socket_sendmsg+0x15b/0x270
[   97.878549][ T6656]  ____sys_sendmsg+0xa4d/0xbe0
[   97.878570][ T6656]  ? __pfx_netlink_sendmsg+0x10/0x10
[   97.878595][ T6656]  ? __pfx_____sys_sendmsg+0x10/0x10
[   97.878627][ T6656]  ___sys_sendmsg+0x190/0x1e0
[   97.878651][ T6656]  ? __pfx____sys_sendmsg+0x10/0x10
[   97.878683][ T6656]  ? find_held_lock+0x2b/0x80
[   97.878812][ T6656]  __sys_sendmsg+0x160/0x210
[   97.878831][ T6656]  ? __pfx___sys_sendmsg+0x10/0x10
[   97.878855][ T6656]  ? __pfx_ksys_write+0x10/0x10
[   97.878909][ T6656]  __do_fast_syscall_32+0xe7/0x970
[   97.879093][ T6656]  ? lockdep_hardirqs_on+0x78/0x100
[   97.879111][ T6656]  do_fast_syscall_32+0x32/0x70
[   97.879128][ T6656]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   97.879149][ T6656] RIP: 0023:0xf6fcefec
[   97.879168][ T6656] Code: Unable to access opcode bytes at 0xf6fcefc2.
[   97.879219][ T6656] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[   97.879234][ T6656] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080
[   97.879243][ T6656] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   97.879252][ T6656] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   97.879261][ T6656] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   97.879269][ T6656] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   97.879289][ T6656]  </TASK>
[   98.048364][ T6658] syzkaller1: entered promiscuous mode
[   98.050266][ T6658] syzkaller1: entered allmulticast mode
[   98.395618][ T6672] __nla_validate_parse: 10 callbacks suppressed
[   98.395735][ T6672] netlink: 16 bytes leftover after parsing attributes in process `syz.2.240'.
[   98.407717][ T6672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.240'.
[   98.410594][ T6672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.240'.
[   98.421857][ T6672] atomic_op ffff88804e8a8998 conn xmit_atomic 0000000000000000
[   98.656310][ T5757] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   98.826234][ T5757] usb 8-1: Using ep0 maxpacket: 32
[   98.831257][ T5757] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[   98.836107][ T5757] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[   98.839252][ T5757] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[   98.842813][ T5757] usb 8-1: Product: syz
[   98.844133][ T5757] usb 8-1: Manufacturer: syz
[   98.846445][ T5757] usb 8-1: SerialNumber: syz
[   98.851136][ T5757] usb 8-1: config 0 descriptor??
[   98.860174][ T6678] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   98.865187][ T5757] hub 8-1:0.0: bad descriptor, ignoring hub
[   98.869255][ T5757] hub 8-1:0.0: probe with driver hub failed with error -5
[   99.199045][   T29] usb 8-1: USB disconnect, device number 2
[   99.427077][ T5757] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   99.586809][ T5757] usb 5-1: Using ep0 maxpacket: 32
[   99.589647][ T5757] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[   99.592918][ T5757] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[   99.598220][ T5757] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   99.603659][ T5757] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[   99.610677][ T5757] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[   99.613620][ T5757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.618582][ T5757] usb 5-1: Product: syz
[   99.619864][ T5757] usb 5-1: Manufacturer: syz
[   99.621311][ T5757] usb 5-1: SerialNumber: syz
[   99.630480][    C2] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71)
[   99.641908][ T5757] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input5
[   99.859349][ T5757] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[   99.866978][ T5757]  (id 0x00)
[   99.926230][ T5757] rc_core: IR keymap rc-imon-pad not found
[   99.928102][ T5757] Registered IR keymap rc-empty
[   99.930487][ T5757] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[   99.935064][ T5757] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  100.057212][ T5757] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0
[  100.065124][ T5757] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input6
[  100.076459][ T5757] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:3> initialized
[  100.205250][ T6697] input: syz1 as /devices/virtual/input/input7
[  100.296631][ T2326] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[  100.330433][ T6704] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.414325][ T6712] syzkaller0: entered promiscuous mode
[  100.417482][ T6712] syzkaller0: entered allmulticast mode
[  100.472152][ T2326] usb 8-1: not running at top speed; connect to a high speed hub
[  100.476380][ T2326] usb 8-1: config 3 has an invalid interface number: 161 but max is 0
[  100.479117][ T2326] usb 8-1: config 3 has no interface number 0
[  100.481091][ T2326] usb 8-1: config 3 interface 161 altsetting 2 has an endpoint descriptor with address 0x19, changing to 0x9
[  100.484620][ T2326] usb 8-1: config 3 interface 161 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[  100.488562][ T2326] usb 8-1: config 3 interface 161 has no altsetting 0
[  100.491376][ T2326] usb 8-1: language id specifier not provided by device, defaulting to English
[  100.501191][ T2326] usb 8-1: New USB device found, idVendor=19d2, idProduct=1084, bcdDevice=50.4f
[  100.503919][ T2326] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.572016][ T6715] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[  100.598677][ T6715] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  100.602455][ T6715] kvm: requested 93028 ns i8254 timer period limited to 200000 ns
[  100.605584][ T6715] kvm: requested 41904 ns i8254 timer period limited to 200000 ns
[  100.609648][ T6715] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  100.613760][ T6715] kvm: requested 3352 ns i8254 timer period limited to 200000 ns
[  100.616848][ T6715] kvm: requested 100571 ns i8254 timer period limited to 200000 ns
[  100.619735][ T6715] kvm: requested 70400 ns i8254 timer period limited to 200000 ns
[  100.622743][ T6715] kvm: requested 53638 ns i8254 timer period limited to 200000 ns
[  100.625486][ T6715] kvm: requested 167619 ns i8254 timer period limited to 200000 ns
[  100.779026][ T6695] Bluetooth: MGMT ver 1.23
[  100.790623][ T6722] netlink: 'syz.2.255': attribute type 21 has an invalid length.
[  100.871778][ T2326] option 8-1:3.161: GSM modem (1-port) converter detected
[  100.879412][ T2326] usb 8-1: USB disconnect, device number 3
[  100.882960][ T2326] option 8-1:3.161: device disconnected
[  101.017893][   T29] IPVS: starting estimator thread 0...
[  101.118498][ T6727] IPVS: using max 27 ests per chain, 64800 per kthread
[  101.385903][ T6731] imon:send_packet: task interrupted
[  101.388464][ T6731] imon:send_packet: packet tx failed (-512)
[  101.391314][ T6731] imon:vfd_write: send packet #3 failed
[  101.421360][ T6734] netlink: 860 bytes leftover after parsing attributes in process `syz.3.257'.
qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details.
[  102.520908][ T6750] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  102.530504][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.535284][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.538653][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.541036][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.543328][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.545694][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.549614][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.552017][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.554343][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.558980][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.564466][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.567452][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.569754][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.572242][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.574522][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.576895][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.579355][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.581612][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.583994][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.587168][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.589458][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.591696][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.593918][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.599313][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.601660][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.603870][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.606075][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.608415][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.610719][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.613169][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.615406][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.617936][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.620238][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.622524][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.624821][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.627451][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.629755][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.632059][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.634348][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.636745][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.639634][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.641885][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.644172][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.646544][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.648848][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.651056][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.653273][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.655564][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.657940][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.660260][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.662545][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.664771][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.667077][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.669378][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.671654][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.673897][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.676659][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.678964][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.681280][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.683560][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.685750][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.688199][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.690521][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.692857][ T6752] binder: 6749:6752 ioctl c0306201 80000180 returned -11
[  102.804895][ T6756] syzkaller0: entered promiscuous mode
[  102.807712][ T6756] syzkaller0: entered allmulticast mode
[  102.815840][ T6756] tipc: Started in network mode
[  102.820089][ T6756] tipc: Node identity 0679c2db70da, cluster identity 4711
[  102.825824][ T6756] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.835871][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.264'.
[  102.880740][ T6756] tipc: Resetting bearer <eth:syzkaller0>
[  102.883516][ T6756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  102.886851][ T6756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  102.889525][ T6756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  102.892687][ T6756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  102.911065][ T6755] tipc: Resetting bearer <eth:syzkaller0>
[  102.929260][ T6755] tipc: Disabling bearer <eth:syzkaller0>
[  103.065063][ T2326] usb 5-1: USB disconnect, device number 3
[  103.081531][ T6758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.265'.
[  103.094978][ T6758] netlink: 16 bytes leftover after parsing attributes in process `syz.1.265'.
[  103.135061][ T6767] imon:display_open: could not find interface for minor 0
[  103.164611][ T6766] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  103.222501][ T6770] netlink: 16 bytes leftover after parsing attributes in process `syz.2.267'.
[  103.236400][ T6770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.267'.
[  103.239353][ T6770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.267'.
[  103.530850][ T5756] Bluetooth: hci0: unexpected event 0x18 length: 247 > 23
[  103.532173][ T5756] Bluetooth: hci0: unexpected event 0x18 length: 247 > 23
[  103.536491][ T5756] Bluetooth: hci0: unexpected event 0x18 length: 247 > 23
[  103.539219][ T5756] Bluetooth: hci0: unexpected event 0x18 length: 247 > 23
[  103.541735][ T5756] Bluetooth: hci0: unexpected event 0x18 length: 247 > 23
[  103.544264][ T5756] Bluetooth: hci0: unexpected event 0x18 length: 247 > 23
[  103.546615][ T5756] Bluetooth: hci0: unexpected event 0x18 length: 247 > 23
[  103.549022][ T5756] Bluetooth: hci0: unexpected event 0x18 length: 247 > 23
[  103.551290][ T5756] Bluetooth: hci0: unexpected event 0x18 length: 247 > 23
[  103.553585][ T5756] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  103.558257][ T5756] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  103.561126][ T5756] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  103.563830][ T5756] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  103.567360][ T5756] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  103.569642][ T5756] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  103.572516][ T5756] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  103.574834][ T5756] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  103.577609][ T5756] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  103.579908][ T5756] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  103.786117][   T34] Process accounting resumed
[  103.817653][ T6764] atomic_op ffff88802a37f998 conn xmit_atomic 0000000000000000
[  103.959535][ T6796] syzkaller0: entered promiscuous mode
[  103.961427][ T6796] syzkaller0: entered allmulticast mode
[  104.062515][ T6794] netlink: 16 bytes leftover after parsing attributes in process `syz.1.277'.
[  104.067364][ T6794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.277'.
[  104.070957][ T6794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.277'.
[  104.087647][ T6794] atomic_op ffff88806f9d4998 conn xmit_atomic 0000000000000000
[  104.685229][ T6822] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  104.690130][ T6822] No control pipe specified
[  105.364799][ T6829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.283'.
[  105.851262][ T6839] netlink: 32 bytes leftover after parsing attributes in process `syz.1.289'.
[  105.872009][ T6839] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1
[  106.318095][ T6848] netlink: 96 bytes leftover after parsing attributes in process `syz.2.292'.
[  106.335670][ T6848] netlink: 56 bytes leftover after parsing attributes in process `syz.2.292'.
[  106.345660][ T6848] netlink: 56 bytes leftover after parsing attributes in process `syz.2.292'.
[  107.435033][ T6871] fuse: Bad value for 'fd'
[  107.578292][ T6873] xt_SECMARK: invalid mode: 0
[  108.105852][ T6878] Invalid logical block size (1454112767)
[  108.829864][ T6892] netlink: 'syz.3.305': attribute type 1 has an invalid length.
[  108.870418][ T6892] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  108.872602][   T62] IPVS: starting estimator thread 0...
[  108.966330][ T6898] IPVS: using max 27 ests per chain, 64800 per kthread
[  108.970926][ T6888] create_pit_timer: 4 callbacks suppressed
[  108.970939][ T6888] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  109.671337][ T5105] Bluetooth: hci0: command 0x0406 tx timeout
[  109.892646][ T6921] FAULT_INJECTION: forcing a failure.
[  109.892646][ T6921] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  109.897173][ T6921] CPU: 3 UID: 0 PID: 6921 Comm: syz.2.310 Not tainted syzkaller #0 PREEMPT(full) 
[  109.897188][ T6921] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  109.897195][ T6921] Call Trace:
[  109.897200][ T6921]  <TASK>
[  109.897205][ T6921]  dump_stack_lvl+0x100/0x190
[  109.897226][ T6921]  should_fail_ex.cold+0x5/0xa
[  109.897239][ T6921]  ? prepare_alloc_pages+0x16d/0x5f0
[  109.897287][ T6921]  should_fail_alloc_page+0xeb/0x140
[  109.897305][ T6921]  prepare_alloc_pages+0x1f0/0x5f0
[  109.897324][ T6921]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  109.897345][ T6921]  ? stack_trace_save+0x8e/0xc0
[  109.897385][ T6921]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  109.897401][ T6921]  ? kasan_save_stack+0x3f/0x50
[  109.897415][ T6921]  ? kasan_save_stack+0x30/0x50
[  109.897427][ T6921]  ? kasan_save_track+0x14/0x30
[  109.897439][ T6921]  ? __kasan_kmalloc+0xaa/0xb0
[  109.897451][ T6921]  ? __kmalloc_noprof+0x322/0x820
[  109.897464][ T6921]  ? copy_splice_read+0x1a3/0xbb0
[  109.897524][ T6921]  ? do_splice_read+0x285/0x370
[  109.897547][ T6921]  ? splice_direct_to_actor+0x2a1/0xa30
[  109.897557][ T6921]  ? do_splice_direct+0x174/0x240
[  109.897567][ T6921]  ? do_sendfile+0xadc/0xe20
[  109.897583][ T6921]  ? __ia32_compat_sys_sendfile+0x1e5/0x220
[  109.897606][ T6921]  alloc_pages_bulk_noprof+0x5de/0x13c0
[  109.897631][ T6921]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[  109.897648][ T6921]  ? rcu_is_watching+0x12/0xc0
[  109.897694][ T6921]  ? trace_kmalloc+0xeb/0x110
[  109.897715][ T6921]  ? __kasan_kmalloc+0xaa/0xb0
[  109.897738][ T6921]  ? copy_splice_read+0x1a3/0xbb0
[  109.897768][ T6921]  copy_splice_read+0x1e1/0xbb0
[  109.897799][ T6921]  ? __pfx_copy_splice_read+0x10/0x10
[  109.897821][ T6921]  ? __pfx_splice_from_pipe+0x10/0x10
[  109.897834][ T6921]  ? __pfx_pipe_lock_cmp_fn+0x10/0x10
[  109.897853][ T6921]  ? __pfx_copy_splice_read+0x10/0x10
[  109.897871][ T6921]  do_splice_read+0x285/0x370
[  109.897891][ T6921]  splice_direct_to_actor+0x2a1/0xa30
[  109.897903][ T6921]  ? __pfx_direct_splice_actor+0x10/0x10
[  109.897923][ T6921]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  109.897945][ T6921]  do_splice_direct+0x174/0x240
[  109.897956][ T6921]  ? __pfx_do_splice_direct+0x10/0x10
[  109.897967][ T6921]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  109.897985][ T6921]  ? bpf_lsm_file_permission+0x9/0x10
[  109.898027][ T6921]  ? security_file_permission+0x76/0x210
[  109.898065][ T6921]  ? rw_verify_area+0xce/0x6d0
[  109.898082][ T6921]  do_sendfile+0xadc/0xe20
[  109.898101][ T6921]  ? __pfx_do_sendfile+0x10/0x10
[  109.898117][ T6921]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  109.898132][ T6921]  ? __fget_files+0x21f/0x3d0
[  109.898152][ T6921]  __ia32_compat_sys_sendfile+0x1e5/0x220
[  109.898164][ T6921]  ? fput+0x79/0x100
[  109.898174][ T6921]  ? __pfx___ia32_compat_sys_sendfile+0x10/0x10
[  109.898186][ T6921]  ? ksys_write+0x1ac/0x250
[  109.898202][ T6921]  ? __pfx_ksys_write+0x10/0x10
[  109.898221][ T6921]  __do_fast_syscall_32+0xe7/0x970
[  109.898233][ T6921]  ? lockdep_hardirqs_on+0x78/0x100
[  109.898245][ T6921]  do_fast_syscall_32+0x32/0x70
[  109.898258][ T6921]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  109.898273][ T6921] RIP: 0023:0xf703efec
[  109.898288][ T6921] Code: Unable to access opcode bytes at 0xf703efc2.
[  109.898293][ T6921] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb
[  109.898303][ T6921] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000000009
[  109.898310][ T6921] RDX: 0000000000000000 RSI: 0000000002000009 RDI: 0000000000000000
[  109.898316][ T6921] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  109.898322][ T6921] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  109.898328][ T6921] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  109.898341][ T6921]  </TASK>
[  110.377721][ T6929] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  110.381900][ T6929] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  110.385849][ T6929] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  110.389265][ T6929] UDF-fs: Scanning with blocksize 512 failed
[  110.393823][ T6929] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  110.398257][ T6929] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  110.402195][ T6929] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  110.405353][ T6929] UDF-fs: Scanning with blocksize 1024 failed
[  110.409768][ T6929] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  110.415703][ T6929] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  110.421603][ T6929] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  110.424826][ T6929] UDF-fs: Scanning with blocksize 2048 failed
[  110.429268][ T6929] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  110.433523][ T6929] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  110.437649][ T6929] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  110.440905][ T6929] UDF-fs: Scanning with blocksize 4096 failed
[  110.443458][ T6929] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1)
[  110.487643][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.315'.
[  110.648442][ T6940] syzkaller0: entered promiscuous mode
[  110.653388][ T6940] syzkaller0: entered allmulticast mode
[  110.665490][ T6942] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  110.675961][ T6943] syzkaller0: entered promiscuous mode
[  110.678800][ T6943] syzkaller0: entered allmulticast mode
[  110.687115][ T6943] tipc: Started in network mode
[  110.689439][ T6943] tipc: Node identity 7602233857, cluster identity 4711
[  110.697019][ T6943] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.706694][ T6941] tipc: Resetting bearer <eth:syzkaller0>
[  110.757495][ T6941] tipc: Disabling bearer <eth:syzkaller0>
[  111.507984][ T6952] xt_CT: You must specify a L4 protocol and not use inversions on it
[  111.539981][ T6954] netlink: 766 bytes leftover after parsing attributes in process `syz.1.322'.
[  111.548592][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'.
[  112.287072][ T6956] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[  112.546276][ T6958] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  112.570025][ T6958] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  112.575077][ T6958] overlayfs: failed to look up (tracing) for ino (-66)
[  113.674807][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.330'.
[  113.760420][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.330'.
[  113.778049][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.330'.
[  113.870493][ T6989] afs: Unknown parameter 'd
'
[  113.901842][ T6986] vlan2: entered allmulticast mode
[  113.903959][ T6986] bridge_slave_0: entered allmulticast mode
[  114.386622][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'.
[  114.596302][ T5757] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  114.767880][ T5757] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  114.772345][ T5757] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  114.777558][ T5757] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[  114.780738][ T5757] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  114.785127][ T5757] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  114.797835][ T5757] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  114.808784][ T5757] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  114.812261][ T5757] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  114.815369][ T5757] usb 8-1: Product: syz
[  114.817642][ T5757] usb 8-1: Manufacturer: syz
[  114.841933][ T7002] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  114.860461][ T5757] cdc_wdm 8-1:1.0: skipping garbage
[  114.862214][ T5757] cdc_wdm 8-1:1.0: skipping garbage
[  114.874470][ T5757] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[  114.879907][ T5757] cdc_wdm 8-1:1.0: Unknown control protocol
[  114.886581][ T7001] netlink: 766 bytes leftover after parsing attributes in process `syz.0.333'.
[  114.999237][ T7021] syzkaller0: entered promiscuous mode
[  115.001059][ T7021] syzkaller0: entered allmulticast mode
[  115.048676][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  115.051545][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  115.054275][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  115.057009][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  115.060204][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  115.062460][ T7026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.335'.
[  115.062901][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  115.069270][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  115.071803][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  115.072727][ T7026] ipvlan2: entered allmulticast mode
[  115.077068][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  115.077087][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  115.077649][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  115.084356][ T7026] dummy0: entered allmulticast mode
[  115.085463][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  115.085805][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  115.092794][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  115.095349][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  115.098051][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  115.102464][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  115.105293][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  115.108281][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  115.111038][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  115.221430][ T5757] usb 8-1: USB disconnect, device number 4
[  115.222212][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  115.228633][ T6998] cdc_wdm 8-1:1.0: Tx URB error: -19
[  115.314288][ T7035] binder: 7031:7035 ioctl 4c0a 0 returned -22
[  115.706728][ T5757] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[  116.003694][ T5757] usb 8-1: unable to read config index 0 descriptor/start: -71
[  116.029005][ T5757] usb 8-1: can't read configurations, error -71
[  116.217535][ T7045] netlink: 16 bytes leftover after parsing attributes in process `syz.1.339'.
[  116.351859][ T7045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.339'.
[  116.355091][ T7045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.339'.
[  116.372037][ T7045] atomic_op ffff888025676998 conn xmit_atomic 0000000000000000
[  116.525365][ T7053] random: crng reseeded on system resumption
[  116.642594][ T7055] netlink: 'syz.3.345': attribute type 10 has an invalid length.
[  116.664313][ T7055] team0: Port device wg2 added
[  116.761599][ T7059] netlink: 766 bytes leftover after parsing attributes in process `syz.2.346'.
[  117.017725][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'.
[  117.190417][ T7066] binder: 7064:7066 ioctl 4c0a 80000500 returned -22
[  118.205039][ T7079] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.233059][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.352'.
[  118.339605][ T7083] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  118.446309][ T5824] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  118.596512][ T5824] usb 5-1: device descriptor read/64, error -71
[  118.666577][   T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  118.763699][ T7091] netlink: 'syz.3.356': attribute type 13 has an invalid length.
[  118.768412][ T7091] gretap0: refused to change device tx_queue_len
[  118.770721][ T7091] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  118.826398][   T24] usb 6-1: Using ep0 maxpacket: 8
[  118.834132][   T24] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  118.846530][   T24] usb 6-1: config 179 has 0 interfaces, different from the descriptor's value: 1
[  118.851976][   T24] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  118.852183][ T7095] netlink: 96 bytes leftover after parsing attributes in process `syz.2.357'.
[  118.854895][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.867731][ T7095] netlink: 56 bytes leftover after parsing attributes in process `syz.2.357'.
[  118.872586][ T7095] netlink: 56 bytes leftover after parsing attributes in process `syz.2.357'.
[  118.876402][ T5824] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  119.016236][ T5824] usb 5-1: device descriptor read/64, error -71
[  119.127849][ T5824] usb usb5-port1: attempt power cycle
[  119.477138][ T5824] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  119.506696][ T5824] usb 5-1: device descriptor read/8, error -71
[  119.691198][ T3268] usb 6-1: USB disconnect, device number 3
[  119.746519][ T5824] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  119.766763][ T5824] usb 5-1: device descriptor read/8, error -71
[  119.833533][ T7106] wireguard: wg0: Could not create IPv4 socket
[  119.888505][ T5824] usb usb5-port1: unable to enumerate USB device
[  119.923368][ T7109] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.030463][ T7117] netlink: 'syz.3.364': attribute type 1 has an invalid length.
[  120.034573][ T7117] netlink: 48 bytes leftover after parsing attributes in process `syz.3.364'.
[  120.647584][ T5837] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  120.827615][ T5837] usb 6-1: Using ep0 maxpacket: 8
[  120.841422][ T5837] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  120.844704][ T5837] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  120.848528][ T5837] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  120.851925][ T5837] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  120.855614][ T5837] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  120.858436][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.076531][ T7124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  121.083375][ T7124] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  121.088939][ T5837] usb 6-1: GET_CAPABILITIES returned 0
[  121.090596][ T5837] usbtmc 6-1:16.0: can't read capabilities
[  121.426802][ T5837] usb 8-1: new low-speed USB device number 7 using dummy_hcd
[  121.615897][ T5837] usb 8-1: config index 0 descriptor too short (expected 1307, got 27)
[  121.626939][ T5837] usb 8-1: config 0 has an invalid interface number: 0 but max is -1
[  121.641048][ T5837] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0
[  121.654965][ T5837] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  121.664980][ T5837] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  121.678532][ T5837] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  121.691857][ T5837] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  121.719855][ T5837] usb 8-1: string descriptor 0 read error: -22
[  121.725659][ T5837] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  121.732708][ T5837] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.799026][ T5837] usb 8-1: config 0 descriptor??
[  121.849938][ T5837] hub 8-1:0.0: bad descriptor, ignoring hub
[  121.855716][ T5837] hub 8-1:0.0: probe with driver hub failed with error -5
[  121.898516][ T5837] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input8
[  122.584560][ T7146] __nla_validate_parse: 2 callbacks suppressed
[  122.584573][ T7146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.372'.
[  123.427710][ T7145] netlink: 830 bytes leftover after parsing attributes in process `syz.2.372'.
[  123.428099][ T5757] usb 8-1: USB disconnect, device number 7
[  123.578801][   T62] usb 6-1: USB disconnect, device number 4
[  123.702413][ T7160] netlink: 96 bytes leftover after parsing attributes in process `syz.1.377'.
[  123.760043][ T7160] netlink: 56 bytes leftover after parsing attributes in process `syz.1.377'.
[  123.770729][ T7160] netlink: 56 bytes leftover after parsing attributes in process `syz.1.377'.
[  124.530481][ T7169] syzkaller0: entered promiscuous mode
[  124.532938][ T7169] syzkaller0: entered allmulticast mode
[  124.970984][ T7177] netlink: 830 bytes leftover after parsing attributes in process `syz.3.382'.
[  124.975736][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'.
[  124.997578][ T7191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.385'.
[  125.091174][ T7194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.386'.
[  125.153394][ T7197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'.
[  126.336666][ T6474] tipc: Subscription rejected, illegal request
[  126.763157][ T7231] netlink: 'syz.2.399': attribute type 29 has an invalid length.
[  127.633180][ T7241] mmap: syz.1.402 (7241) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  127.779293][   T42] audit: type=1326 audit(1784464035.655:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.3.401" exe="/syz-executor" sig=9 arch=40000003 syscall=20 compat=1 ip=0xf6fcefec code=0x0
[  128.911266][ T7259] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  129.257968][ T7261] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0)
[  130.424958][ T7286] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  130.428587][ T7286] IPv6: NLM_F_CREATE should be set when creating new route
[  130.733000][ T6474] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.740904][ T6474] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.744212][ T6474] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.762893][ T6474] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.848564][ T7292] __nla_validate_parse: 1 callbacks suppressed
[  130.848612][ T7292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.413'.
[  130.854907][ T7294] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  131.213781][ T7312] netlink: 9 bytes leftover after parsing attributes in process `syz.2.418'.
[  131.524599][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'.
[  131.724242][ T7320] netlink: 'syz.1.421': attribute type 1 has an invalid length.
[  131.749926][ T7320] 8021q: adding VLAN 0 to HW filter on device bond1
[  131.786692][ T7320] bond1: (slave geneve2): making interface the new active one
[  131.792950][ T7320] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  131.885729][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'.
[  131.895164][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'.
[  131.898998][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'.
[  131.903438][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'.
[  131.907401][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'.
[  132.650847][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.430'.
[  132.653910][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.430'.
[  132.709674][ T1440] ieee802154 phy0 wpan0: encryption failed: -22
[  132.714630][ T1440] ieee802154 phy1 wpan1: encryption failed: -22
[  134.219516][ T7358] ntfs3(sr0): Primary boot signature is not NTFS.
[  134.223241][ T7358] ntfs3(sr0): try to read out of volume at offset 0xf800
[  136.206496][ T7400] netlink: 'syz.1.442': attribute type 2 has an invalid length.
[  136.210351][ T7400] netlink: 'syz.1.442': attribute type 2 has an invalid length.
[  136.357791][ T7405] netlink: 'syz.3.443': attribute type 10 has an invalid length.
[  136.405810][ T7407] __nla_validate_parse: 3 callbacks suppressed
[  136.405829][ T7407] netlink: 76 bytes leftover after parsing attributes in process `syz.0.445'.
[  136.416432][ T7407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.445'.
[  136.499666][ T7409] 9pnet: p9_errstr2errno: server reported unknown error 0x000000
[  136.534768][ T7415] syzkaller0: entered promiscuous mode
[  136.537495][ T7415] syzkaller0: entered allmulticast mode
[  136.599186][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.450'.
[  136.830895][ T7431] netlink: 96 bytes leftover after parsing attributes in process `syz.0.453'.
[  136.833582][ T7432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.454'.
[  136.840150][ T7432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.454'.
[  136.858805][ T7431] netlink: 56 bytes leftover after parsing attributes in process `syz.0.453'.
[  136.863916][ T7431] netlink: 56 bytes leftover after parsing attributes in process `syz.0.453'.
[  137.126346][   T24] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  137.346416][   T24] usb 7-1: unable to get BOS descriptor or descriptor too short
[  137.353082][   T24] usb 7-1: unable to read config index 0 descriptor/start: -71
[  137.356784][   T24] usb 7-1: can't read configurations, error -71
[  137.508545][ T7443] syzkaller0: entered promiscuous mode
[  137.510317][ T7443] syzkaller0: entered allmulticast mode
[  137.913128][ T7464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.466'.
[  137.952060][ T7464] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  137.998837][ T7466] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.048865][ T7471] netlink: 96 bytes leftover after parsing attributes in process `syz.2.470'.
[  138.194418][ T7475] set match dimension is over the limit!
[  138.278373][ T7479] FAULT_INJECTION: forcing a failure.
[  138.278373][ T7479] name failslab, interval 1, probability 0, space 0, times 0
[  138.283574][ T7479] CPU: 3 UID: 0 PID: 7479 Comm: syz.0.473 Not tainted syzkaller #0 PREEMPT(full) 
[  138.283601][ T7479] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  138.283640][ T7479] Call Trace:
[  138.283671][ T7479]  <TASK>
[  138.283679][ T7479]  dump_stack_lvl+0x100/0x190
[  138.284049][ T7479]  should_fail_ex.cold+0x5/0xa
[  138.284160][ T7479]  should_failslab+0xc2/0x120
[  138.284267][ T7479]  __kvmalloc_node_noprof+0x116/0x970
[  138.284307][ T7479]  ? rcu_is_cpu_rrupt_from_idle+0x241/0x270
[  138.284415][ T7479]  ? __kasan_slab_alloc+0x89/0x90
[  138.284437][ T7479]  ? p9_fcall_init+0x227/0x420
[  138.284662][ T7479]  p9_fcall_init+0x227/0x420
[  138.284686][ T7479]  p9_tag_alloc+0x20d/0x860
[  138.284710][ T7479]  ? __pfx_p9_tag_alloc+0x10/0x10
[  138.284735][ T7479]  ? __lock_acquire+0x49f/0x1a40
[  138.284795][ T7479]  p9_client_prepare_req+0x19b/0x4d0
[  138.284820][ T7479]  ? __pfx_p9_client_prepare_req+0x10/0x10
[  138.284874][ T7479]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  138.284894][ T7479]  ? do_raw_spin_lock+0x128/0x260
[  138.284910][ T7479]  ? _raw_spin_lock_irqsave+0x52/0x60
[  138.284938][ T7479]  ? find_held_lock+0x2b/0x80
[  138.284963][ T7479]  p9_client_rpc+0x1c4/0xd60
[  138.284985][ T7479]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  138.285014][ T7479]  ? __pfx_p9_client_rpc+0x10/0x10
[  138.285059][ T7479]  ? unix_poll+0x39e/0x450
[  138.285245][ T7479]  ? __pfx_unix_poll+0x10/0x10
[  138.285270][ T7479]  ? sock_poll+0x16b/0x510
[  138.285385][ T7479]  ? p9_fd_poll+0x1db/0x2c0
[  138.285411][ T7479]  ? p9_conn_create+0x42f/0x550
[  138.285441][ T7479]  p9_client_create+0x7a6/0xd40
[  138.285465][ T7479]  ? __pfx_p9_client_create+0x10/0x10
[  138.285493][ T7479]  ? lockdep_init_map_type+0x5c/0x250
[  138.285520][ T7479]  ? __raw_spin_lock_init+0x3a/0x110
[  138.285542][ T7479]  v9fs_session_init+0x3c/0xdd0
[  138.285668][ T7479]  ? v9fs_get_tree+0x9c/0xb50
[  138.285692][ T7479]  v9fs_get_tree+0xb8/0xb50
[  138.285710][ T7479]  ? rcu_is_watching+0x12/0xc0
[  138.285730][ T7479]  ? __pfx_v9fs_get_tree+0x10/0x10
[  138.285752][ T7479]  ? bpf_lsm_capable+0x9/0x10
[  138.285796][ T7479]  ? security_capable+0x80/0x260
[  138.285958][ T7479]  vfs_get_tree+0x92/0x320
[  138.286010][ T7479]  path_mount+0x7d0/0x23d0
[  138.286036][ T7479]  ? __pfx_path_mount+0x10/0x10
[  138.286053][ T7479]  ? lockdep_hardirqs_on+0x78/0x100
[  138.286075][ T7479]  ? putname+0xb1/0x110
[  138.286092][ T7479]  ? kmem_cache_free+0x127/0x6b0
[  138.286117][ T7479]  ? __ia32_sys_mount+0x292/0x310
[  138.286153][ T7479]  __ia32_sys_mount+0x292/0x310
[  138.286173][ T7479]  ? __pfx___ia32_sys_mount+0x10/0x10
[  138.286197][ T7479]  ? ksys_write+0x1ac/0x250
[  138.286223][ T7479]  ? __pfx_ksys_write+0x10/0x10
[  138.286253][ T7479]  __do_fast_syscall_32+0xe7/0x970
[  138.286273][ T7479]  ? lockdep_hardirqs_on+0x78/0x100
[  138.286292][ T7479]  do_fast_syscall_32+0x32/0x70
[  138.286312][ T7479]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  138.286336][ T7479] RIP: 0023:0xf7f58fec
[  138.286357][ T7479] Code: Unable to access opcode bytes at 0xf7f58fc2.
[  138.286413][ T7479] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015
[  138.286430][ T7479] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800000c0
[  138.286441][ T7479] RDX: 0000000080004500 RSI: 0000000000000000 RDI: 0000000080000100
[  138.286451][ T7479] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  138.286460][ T7479] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  138.286470][ T7479] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  138.286493][ T7479]  </TASK>
[  138.355683][ T7483] binder: 7480:7483 ioctl c0306201 80000080 returned -14
[  138.549879][ T7491] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  139.300844][ T7503] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  139.304004][ T7503] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  139.485988][ T7503] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  139.490658][ T7503] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  139.535613][ T7503] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  139.538237][ T7503] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  139.565912][ T7503] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  139.569864][ T7503] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  140.497880][ T7524] Mount JFS Failure: -22
[  140.503732][ T7524] jfs_mount failed w/return code = -22
[  140.507734][ T7526] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  141.590257][ T7553] misc userio: No port type given on /dev/userio
[  141.718615][ T7564] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  141.789161][ T7566] kvm: apic: phys broadcast and lowest prio
[  143.120599][ T7592] FAULT_INJECTION: forcing a failure.
[  143.120599][ T7592] name failslab, interval 1, probability 0, space 0, times 0
[  143.125754][ T7592] CPU: 2 UID: 0 PID: 7592 Comm: syz.1.508 Not tainted syzkaller #0 PREEMPT(full) 
[  143.125791][ T7592] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  143.125801][ T7592] Call Trace:
[  143.125807][ T7592]  <TASK>
[  143.125814][ T7592]  dump_stack_lvl+0x100/0x190
[  143.125855][ T7592]  should_fail_ex.cold+0x5/0xa
[  143.125876][ T7592]  should_failslab+0xc2/0x120
[  143.125900][ T7592]  kmem_cache_alloc_noprof+0x91/0x6a0
[  143.125922][ T7592]  ? do_getname+0x35/0x390
[  143.125944][ T7592]  do_getname+0x35/0x390
[  143.125966][ T7592]  user_path_at+0x26/0x60
[  143.125988][ T7592]  __ia32_sys_mount+0x1fb/0x310
[  143.126008][ T7592]  ? __pfx___ia32_sys_mount+0x10/0x10
[  143.126025][ T7592]  ? ksys_write+0x1ac/0x250
[  143.126050][ T7592]  ? __pfx_ksys_write+0x10/0x10
[  143.126078][ T7592]  __do_fast_syscall_32+0xe7/0x970
[  143.126096][ T7592]  ? lockdep_hardirqs_on+0x78/0x100
[  143.126113][ T7592]  do_fast_syscall_32+0x32/0x70
[  143.126132][ T7592]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  143.126154][ T7592] RIP: 0023:0xf7fe8fec
[  143.126181][ T7592] Code: Unable to access opcode bytes at 0xf7fe8fc2.
[  143.126189][ T7592] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000015
[  143.126206][ T7592] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000080000040
[  143.126215][ T7592] RDX: 0000000080000080 RSI: 0000000001a0c000 RDI: 0000000000000000
[  143.126223][ T7592] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  143.126232][ T7592] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  143.126240][ T7592] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  143.126259][ T7592]  </TASK>
[  143.811843][ T7597] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  144.849975][ T7617] syz_tun: entered allmulticast mode
[  144.864154][ T7615] syz_tun: left allmulticast mode
[  145.720884][ T7634] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  146.168952][   T62] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  146.710456][ T7653] __nla_validate_parse: 7 callbacks suppressed
[  146.710474][ T7653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.524'.
[  146.846323][   T62] usb 8-1: Using ep0 maxpacket: 32
[  146.850328][   T62] usb 8-1: config index 0 descriptor too short (expected 29220, got 36)
[  146.854033][   T62] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  146.857712][   T62] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81
[  146.860634][   T62] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  146.863588][   T62] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  146.867176][   T62] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  146.871715][   T62] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  146.874555][   T62] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.882045][   T62] usb 8-1: config 0 descriptor??
[  147.100320][   T62] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  147.137415][   T62] usb 8-1: USB disconnect, device number 8
[  147.148911][   T62] usblp0: removed
[  147.353035][ T7692] netlink: 'syz.2.533': attribute type 1 has an invalid length.
[  147.356471][ T7692] netlink: 84 bytes leftover after parsing attributes in process `syz.2.533'.
[  147.360122][ T7692] netlink: 'syz.2.533': attribute type 2 has an invalid length.
[  147.363498][ T7692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.533'.
[  147.656259][   T62] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  147.806263][   T62] usb 8-1: Using ep0 maxpacket: 32
[  147.810606][   T62] usb 8-1: config index 0 descriptor too short (expected 29220, got 36)
[  147.813572][   T62] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  147.817315][   T62] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81
[  147.820728][   T62] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  147.823918][   T62] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  147.827101][   T62] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  147.831506][   T62] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  147.834409][   T62] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.840988][   T62] usb 8-1: config 0 descriptor??
[  148.515247][   T62] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  148.571983][ T7714] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.927835][   T62] usb 8-1: USB disconnect, device number 9
[  148.949311][   T62] usblp0: removed
[  149.093068][   T42] audit: type=1107 audit(1784464056.965:3): pid=7720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  149.588034][ T7732] netlink: 830 bytes leftover after parsing attributes in process `syz.0.543'.
[  149.628519][ T7732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.543'.
[  149.712597][ T7736] syzkaller0: entered promiscuous mode
[  149.714695][ T7736] syzkaller0: entered allmulticast mode
[  149.765330][ T7738] netlink: 28 bytes leftover after parsing attributes in process `syz.3.544'.
[  149.797057][ T7738] netlink: 'syz.3.544': attribute type 10 has an invalid length.
[  149.811992][ T7738] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.821849][ T7738] team0: Device bond0 is of different type
[  149.995111][ T7741] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.000665][ T7741] 8021q: adding VLAN 0 to HW filter on device team0
[  150.015679][ T7741] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.176063][ T7748] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.276495][ T5824] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  150.434734][ T5824] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  150.445307][ T5824] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  150.451562][ T5824] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  150.459636][ T5824] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  150.463244][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.463292][ T7741] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  150.476711][ T7741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  150.539347][ T7741] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  150.575662][ T5824] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  150.585250][ T5824] usb 5-1: invalid MIDI out EP 0
[  150.815064][ T7760] netlink: 80 bytes leftover after parsing attributes in process `syz.1.551'.
[  151.710078][ T7779] veth3: entered promiscuous mode
[  151.711969][ T7779] veth3: entered allmulticast mode
[  152.046268][ T5757] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  152.079980][ T5824] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22
[  152.103450][ T5824] usb 5-1: USB disconnect, device number 8
[  152.111807][ T7792] ip6t_rpfilter: unknown options
[  152.113825][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.558'.
[  152.119024][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.558'.
[  152.121801][ T7794] netlink: 'syz.3.558': attribute type 30 has an invalid length.
[  152.124272][ T7793] netlink: 'syz.3.558': attribute type 30 has an invalid length.
[  152.134558][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.558'.
[  152.135013][ T6481] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  152.135072][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.558'.
[  152.135092][ T7793] netlink: 'syz.3.558': attribute type 30 has an invalid length.
[  152.138075][ T7794] netlink: 'syz.3.558': attribute type 30 has an invalid length.
[  152.141140][ T6481] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  152.152119][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.558'.
[  152.152897][ T6481] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  152.153043][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.558'.
[  152.153062][ T7794] netlink: 'syz.3.558': attribute type 30 has an invalid length.
[  152.155679][ T7793] netlink: 'syz.3.558': attribute type 30 has an invalid length.
[  152.158649][ T6481] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  152.170741][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.558'.
[  152.171080][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.558'.
[  152.173480][ T7794] netlink: 'syz.3.558': attribute type 30 has an invalid length.
[  152.176379][ T5757] usb 6-1: device descriptor read/64, error -71
[  152.177993][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.558'.
[  152.180853][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.558'.
[  152.271731][ T7796] loop4: detected capacity change from 0 to 524287936
[  152.306311][ T5756] Bluetooth: hci4: command 0x1003 tx timeout
[  152.307780][ T5105] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  152.416362][ T5757] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  152.546419][ T5757] usb 6-1: device descriptor read/64, error -71
[  152.656614][ T5757] usb usb6-port1: attempt power cycle
[  153.027069][ T5757] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  153.051552][ T5757] usb 6-1: device descriptor read/8, error -71
[  153.231011][ T7814] syz_tun: entered allmulticast mode
[  153.238574][ T7814] bond0: entered promiscuous mode
[  153.240198][ T7814] bond_slave_0: entered promiscuous mode
[  153.242097][ T7814] bond_slave_1: entered promiscuous mode
[  153.286383][ T5757] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  153.307474][ T5757] usb 6-1: device descriptor read/8, error -71
[  153.416601][ T5757] usb usb6-port1: unable to enumerate USB device
[  154.055031][ T7849] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  154.058455][ T7849] IPv6: NLM_F_CREATE should be set when creating new route
[  154.202203][ T7854] comedi comedi1: comedi_config --init_data is deprecated
[  154.556328][ T2326] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  154.709412][ T2326] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  154.714479][ T2326] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  154.726341][ T2326] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  154.729335][ T2326] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  154.732837][ T2326] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  154.747165][ T2326] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  154.756132][ T2326] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  154.760484][ T2326] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  154.764238][ T2326] usb 5-1: Product: syz
[  154.766693][ T2326] usb 5-1: Manufacturer: syz
[  154.774812][ T7859] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  154.780431][ T2326] cdc_wdm 5-1:1.0: skipping garbage
[  154.782108][ T2326] cdc_wdm 5-1:1.0: skipping garbage
[  154.789309][ T2326] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  154.793204][ T2326] cdc_wdm 5-1:1.0: Unknown control protocol
[  155.005674][    C2] wdm_int_callback: 579 callbacks suppressed
[  155.005692][    C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  155.009893][    C2] wdm_int_callback: 579 callbacks suppressed
[  155.009905][    C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  155.014051][    C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  155.016121][    C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  155.018360][    C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  155.020543][    C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  155.022653][    C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  155.024802][    C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  155.027024][    C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  155.029157][    C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  155.031333][    C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  155.033434][    C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  155.035992][    C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  155.038709][    C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  155.040911][    C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  155.042999][    C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  155.045146][    C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  155.047234][    C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  155.049433][    C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  155.051575][    C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  155.162056][ T7888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.166099][ T7888] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  155.173190][   T10] usb 5-1: USB disconnect, device number 9
[  155.173215][    C2] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  155.208297][ T7890] batadv_slave_1: entered promiscuous mode
[  155.269192][ T7891] batadv_slave_1: left promiscuous mode
[  155.656998][ T5757] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  155.825606][ T5757] usb 5-1: unable to read config index 0 descriptor/start: -71
[  155.834355][ T5757] usb 5-1: can't read configurations, error -71
[  156.348216][ T7924] FAULT_INJECTION: forcing a failure.
[  156.348216][ T7924] name failslab, interval 1, probability 0, space 0, times 0
[  156.356331][ T7924] CPU: 0 UID: 0 PID: 7924 Comm: syz.3.600 Not tainted syzkaller #0 PREEMPT(full) 
[  156.356349][ T7924] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  156.356357][ T7924] Call Trace:
[  156.356362][ T7924]  <TASK>
[  156.356367][ T7924]  dump_stack_lvl+0x100/0x190
[  156.356385][ T7924]  should_fail_ex.cold+0x5/0xa
[  156.356399][ T7924]  should_failslab+0xc2/0x120
[  156.356415][ T7924]  __kmalloc_cache_noprof+0x91/0x6c0
[  156.356435][ T7924]  ? sctp_add_bind_addr+0xae/0x3e0
[  156.356503][ T7924]  sctp_add_bind_addr+0xae/0x3e0
[  156.356519][ T7924]  sctp_copy_local_addr_list+0x349/0x550
[  156.356537][ T7924]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  156.356553][ T7924]  ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360
[  156.356569][ T7924]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  156.356588][ T7924]  sctp_bind_addr_copy+0xe0/0x530
[  156.356603][ T7924]  sctp_connect_new_asoc+0x1c9/0x770
[  156.356622][ T7924]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  156.356643][ T7924]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  156.356661][ T7924]  sctp_sendmsg+0x1743/0x22e0
[  156.356685][ T7924]  ? __pfx___might_resched+0x10/0x10
[  156.356713][ T7924]  ? __pfx_sctp_sendmsg+0x10/0x10
[  156.356739][ T7924]  ? aa_sk_perm+0x309/0xaa0
[  156.356819][ T7924]  ? __might_fault+0xc5/0x140
[  156.356862][ T7924]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  156.356888][ T7924]  ? __pfx_sctp_sendmsg+0x10/0x10
[  156.356911][ T7924]  inet_sendmsg+0x11c/0x140
[  156.356927][ T7924]  __sys_sendto+0x453/0x4e0
[  156.356940][ T7924]  ? __pfx_inet_sendmsg+0x10/0x10
[  156.356954][ T7924]  ? __pfx___sys_sendto+0x10/0x10
[  156.356976][ T7924]  ? fput+0x79/0x100
[  156.356989][ T7924]  ? ksys_write+0x1ac/0x250
[  156.357012][ T7924]  __ia32_sys_sendto+0xdd/0x1b0
[  156.357024][ T7924]  ? __do_fast_syscall_32+0x98/0x970
[  156.357038][ T7924]  ? lockdep_hardirqs_on+0x78/0x100
[  156.357049][ T7924]  __do_fast_syscall_32+0xe7/0x970
[  156.357065][ T7924]  ? lockdep_hardirqs_on+0x78/0x100
[  156.357080][ T7924]  do_fast_syscall_32+0x32/0x70
[  156.357099][ T7924]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  156.357119][ T7924] RIP: 0023:0xf6fcefec
[  156.357155][ T7924] Code: Unable to access opcode bytes at 0xf6fcefc2.
[  156.357165][ T7924] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171
[  156.357182][ T7924] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0
[  156.357192][ T7924] RDX: 000000000000fffd RSI: 00000000000000c1 RDI: 0000000080000280
[  156.357202][ T7924] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000
[  156.357211][ T7924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  156.357221][ T7924] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  156.357243][ T7924]  </TASK>
[  157.433974][ T7958] __nla_validate_parse: 132 callbacks suppressed
[  157.433989][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.611'.
[  157.497731][ T7963] validate_nla: 123 callbacks suppressed
[  157.497746][ T7963] netlink: 'syz.3.612': attribute type 3 has an invalid length.
[  157.502206][ T7965] batadv_slave_1: entered promiscuous mode
[  157.834916][ T7978] netlink: 'syz.2.617': attribute type 16 has an invalid length.
[  157.838033][ T7978] netlink: 'syz.2.617': attribute type 3 has an invalid length.
[  157.840519][ T7978] netlink: 132 bytes leftover after parsing attributes in process `syz.2.617'.
[  157.855962][ T7978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.617'.
[  157.881074][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.617'.
[  157.911120][ T7978] veth3: entered allmulticast mode
[  157.920582][ T7978] bond1: (slave veth3): Enslaving as an active interface with an up link
[  157.935362][ T7978] bond1 (unregistering): (slave veth3): Releasing backup interface
[  157.943565][ T7978] bond1 (unregistering): Released all slaves
[  158.336126][ T7964] batadv_slave_1: left promiscuous mode
[  158.421573][ T7995] syzkaller0: entered promiscuous mode
[  158.423322][ T7995] syzkaller0: entered allmulticast mode
[  159.946836][   T42] audit: type=1326 audit(1784464067.815:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.0.627" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f58fec code=0x0
[  160.514397][ T8022] xt_hashlimit: max too large, truncated to 1048576
[  160.972464][ T8040] netlink: 20 bytes leftover after parsing attributes in process `syz.1.637'.
[  160.987086][ T8040] team0 (unregistering): Port device team_slave_0 removed
[  160.993579][ T8040] team0 (unregistering): Port device team_slave_1 removed
[  161.615875][ T8057] Invalid logical block size (1904894288)
[  161.842824][ T5837] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  162.136278][ T3268] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  162.236351][ T5837] usb 6-1: Using ep0 maxpacket: 8
[  162.242980][ T5837] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  162.249215][ T5837] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  162.253507][ T5837] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  162.257996][ T5837] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  162.263113][ T5837] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  162.267125][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.316321][ T3268] usb 5-1: Using ep0 maxpacket: 8
[  162.320557][ T3268] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  162.323496][ T3268] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  162.326374][ T3268] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  162.329546][ T3268] usb 5-1: config 250 has no interface number 0
[  162.331843][ T3268] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  162.335760][ T3268] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  162.339327][ T3268] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  162.342801][ T3268] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  162.347401][ T3268] usb 5-1: config 250 interface 228 has no altsetting 0
[  162.351485][ T3268] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  162.354579][ T3268] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  162.357345][ T3268] usb 5-1: Product: syz
[  162.358834][ T3268] usb 5-1: SerialNumber: syz
[  162.367614][ T3268] hub 5-1:250.228: bad descriptor, ignoring hub
[  162.369767][ T3268] hub 5-1:250.228: probe with driver hub failed with error -5
[  162.482012][ T8052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  162.486556][ T8052] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  162.504353][ T5837] usb 6-1: GET_CAPABILITIES returned 0
[  162.506902][ T5837] usbtmc 6-1:16.0: can't read capabilities
[  162.676595][ T5837] usb 5-1: USB disconnect, device number 12
[  163.026316][ T5837] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  163.187126][ T5837] usb 5-1: Using ep0 maxpacket: 8
[  163.191998][ T5837] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  163.197447][ T5837] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  163.203096][ T5837] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  163.208236][ T5837] usb 5-1: config 250 has no interface number 0
[  163.210225][ T5837] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  163.219171][ T5837] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  163.226346][ T5837] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  163.232208][ T5837] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  163.238703][ T5837] usb 5-1: config 250 interface 228 has no altsetting 0
[  163.244293][ T5837] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  163.248914][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  163.253690][ T5837] usb 5-1: Product: syz
[  163.255034][ T5837] usb 5-1: SerialNumber: syz
[  163.262490][ T5837] hub 5-1:250.228: bad descriptor, ignoring hub
[  163.268288][ T5837] hub 5-1:250.228: probe with driver hub failed with error -5
[  163.404007][ T8082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.648'.
[  163.444385][ T8082] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  163.586424][ T3268] usb 5-1: USB disconnect, device number 13
[  164.052938][ T8091] bond1: (slave bond_slave_1): Device is not our slave
[  164.055983][ T8091] bond1: option active_slave: invalid value (bond_slave_1)
[  164.511719][ T8091] bond1 (unregistering): Released all slaves
[  164.564622][   T42] audit: type=1326 audit(1784464072.435:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.3.650" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000
[  164.580035][   T42] audit: type=1326 audit(1784464072.445:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.3.650" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000
[  164.590288][   T42] audit: type=1326 audit(1784464072.445:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.3.650" exe="/syz-executor" sig=0 arch=40000003 syscall=92 compat=1 ip=0xf6fcefec code=0x7ffc0000
[  164.599009][   T42] audit: type=1326 audit(1784464072.445:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.3.650" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000
[  164.607628][   T42] audit: type=1326 audit(1784464072.445:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.3.650" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000
[  164.616320][   T42] audit: type=1326 audit(1784464072.465:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.3.650" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf6fcefec code=0x7ffc0000
[  164.633353][   T42] audit: type=1326 audit(1784464072.465:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.3.650" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000
[  164.641195][   T42] audit: type=1326 audit(1784464072.465:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.3.650" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000
[  164.657172][   T42] audit: type=1326 audit(1784464072.465:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.3.650" exe="/syz-executor" sig=0 arch=40000003 syscall=131 compat=1 ip=0xf6fcefec code=0x7ffc0000
[  164.759034][   T10] usb 6-1: USB disconnect, device number 9
[  164.889118][ T8097] netlink: 830 bytes leftover after parsing attributes in process `syz.2.652'.
[  164.889957][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.652'.
[  165.676793][ T3268] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  165.848940][ T3268] usb 8-1: Using ep0 maxpacket: 8
[  165.870499][ T3268] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  165.884475][ T3268] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  165.898585][ T3268] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  165.904121][ T3268] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  165.914932][ T3268] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  165.921425][ T3268] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.255280][ T8119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  166.272291][ T8119] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  166.286364][ T3268] usb 8-1: GET_CAPABILITIES returned 0
[  166.288479][ T3268] usbtmc 8-1:16.0: can't read capabilities
[  166.656509][ T8131] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  166.835155][   T42] kauditd_printk_skb: 11 callbacks suppressed
[  166.838996][   T42] audit: type=1800 audit(1784464074.705:25): pid=8135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.666" name="file0" dev="overlay" ino=908 res=0 errno=0
[  167.820963][ T8140] netlink: 72 bytes leftover after parsing attributes in process `syz.0.667'.
[  168.549110][ T3268] usb 8-1: USB disconnect, device number 10
[  168.652724][ T8163] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  168.654450][ T8162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.675'.
[  169.357269][ T8181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.681'.
[  169.364974][ T8181] netlink: 'syz.3.681': attribute type 10 has an invalid length.
[  169.370266][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.681'.
[  169.583234][ T8191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.683'.
[  169.667324][ T8193] netlink: 'syz.2.684': attribute type 4 has an invalid length.
[  169.682399][ T8193] netlink: 'syz.2.684': attribute type 4 has an invalid length.
[  169.745470][ T8197] netlink: 20 bytes leftover after parsing attributes in process `syz.1.685'.
[  169.787897][ T8200] evm: overlay not supported
[  169.841692][   T42] audit: type=1326 audit(1784464077.715:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.3.689" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000
[  169.853607][   T42] audit: type=1326 audit(1784464077.715:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.3.689" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000
[  169.859509][ T8206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  169.866790][   T42] audit: type=1326 audit(1784464077.715:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.3.689" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fcefec code=0x7ffc0000
[  169.873955][   T42] audit: type=1326 audit(1784464077.715:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.3.689" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000
[  169.878637][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.689'.
[  169.894072][ T8206] erspan0: entered promiscuous mode
[  169.898444][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.689'.
[  169.899080][   T42] audit: type=1326 audit(1784464077.715:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.3.689" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000
[  169.916757][   T42] audit: type=1326 audit(1784464077.715:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.3.689" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf6fcefec code=0x7ffc0000
[  169.924386][   T42] audit: type=1326 audit(1784464077.715:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.3.689" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71072eb code=0x7ffc0000
[  169.932453][   T42] audit: type=1326 audit(1784464077.715:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.3.689" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71072eb code=0x7ffc0000
[  169.940119][   T42] audit: type=1326 audit(1784464077.715:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.3.689" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71072eb code=0x7ffc0000
[  170.923013][ T8234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.698'.
[  170.933097][ T8235] netlink: 16 bytes leftover after parsing attributes in process `syz.1.696'.
[  170.941067][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.696'.
[  171.346728][    C2] sr 2:0:0:0: [sr0] tag#7 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  171.350796][    C2] sr 2:0:0:0: [sr0] tag#7 CDB: ATA command pass through(16)
[  171.353597][    C2] sr 2:0:0:0: [sr0] tag#7 CDB[00]: 85 36 b6 0b fa d6 6e 0d 02 27 75 e7 13 6f 4f 8e
[  171.357422][    C2] sr 2:0:0:0: [sr0] tag#7 CDB[10]: 31
[  171.903086][ T8266] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  172.217655][ T8269] FAULT_INJECTION: forcing a failure.
[  172.217655][ T8269] name failslab, interval 1, probability 0, space 0, times 0
[  172.223654][ T8269] CPU: 3 UID: 0 PID: 8269 Comm: syz.3.710 Not tainted syzkaller #0 PREEMPT(full) 
[  172.223678][ T8269] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  172.223719][ T8269] Call Trace:
[  172.223751][ T8269]  <TASK>
[  172.223758][ T8269]  dump_stack_lvl+0x100/0x190
[  172.224196][ T8269]  should_fail_ex.cold+0x5/0xa
[  172.224297][ T8269]  should_failslab+0xc2/0x120
[  172.224425][ T8269]  __kmalloc_cache_noprof+0x91/0x6c0
[  172.224474][ T8269]  ? alloc_netdev_mqs+0xea8/0x15c0
[  172.224649][ T8269]  alloc_netdev_mqs+0xea8/0x15c0
[  172.224672][ T8269]  rtnl_create_link+0xc13/0xf80
[  172.224696][ T8269]  veth_newlink+0x617/0xa00
[  172.224840][ T8269]  ? __pfx_veth_newlink+0x10/0x10
[  172.224858][ T8269]  ? __lock_acquire+0x49f/0x1a40
[  172.224973][ T8269]  ? __css_rstat_updated+0x1ce/0x5a0
[  172.225048][ T8269]  ? alloc_netdev_mqs+0xf5f/0x15c0
[  172.225066][ T8269]  ? validate_linkmsg+0x57c/0xba0
[  172.225085][ T8269]  ? __pfx_validate_linkmsg+0x10/0x10
[  172.225103][ T8269]  ? alloc_netdev_mqs+0x120a/0x15c0
[  172.225126][ T8269]  ? rtnl_create_link+0xa4b/0xf80
[  172.225146][ T8269]  ? __pfx_veth_newlink+0x10/0x10
[  172.225185][ T8269]  rtnl_newlink+0x1499/0x2380
[  172.225216][ T8269]  ? __pfx_rtnl_newlink+0x10/0x10
[  172.225234][ T8269]  ? rcu_is_watching+0x12/0xc0
[  172.225275][ T8269]  ? kasan_quarantine_put+0x104/0x240
[  172.225296][ T8269]  ? kfree_skbmem+0x19a/0x210
[  172.225317][ T8269]  ? kmem_cache_free+0x127/0x6b0
[  172.225342][ T8269]  ? find_held_lock+0x2b/0x80
[  172.225370][ T8269]  ? find_held_lock+0x2b/0x80
[  172.225388][ T8269]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  172.225411][ T8269]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  172.225440][ T8269]  ? __pfx_rtnl_newlink+0x10/0x10
[  172.225462][ T8269]  rtnetlink_rcv_msg+0x95e/0xe90
[  172.225485][ T8269]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  172.225512][ T8269]  ? ref_tracker_free+0x37e/0x6c0
[  172.225686][ T8269]  netlink_rcv_skb+0x159/0x420
[  172.225736][ T8269]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  172.225757][ T8269]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  172.225778][ T8269]  ? netlink_deliver_tap+0x1ae/0xcc0
[  172.225804][ T8269]  netlink_unicast+0x585/0x850
[  172.225829][ T8269]  ? __pfx_netlink_unicast+0x10/0x10
[  172.225857][ T8269]  netlink_sendmsg+0x8b0/0xda0
[  172.225883][ T8269]  ? __pfx_netlink_sendmsg+0x10/0x10
[  172.225909][ T8269]  ? apparmor_socket_sendmsg+0x15b/0x270
[  172.226015][ T8269]  ____sys_sendmsg+0xa4d/0xbe0
[  172.226038][ T8269]  ? __pfx_netlink_sendmsg+0x10/0x10
[  172.226062][ T8269]  ? __pfx_____sys_sendmsg+0x10/0x10
[  172.226095][ T8269]  ___sys_sendmsg+0x190/0x1e0
[  172.226118][ T8269]  ? __pfx____sys_sendmsg+0x10/0x10
[  172.226150][ T8269]  ? find_held_lock+0x2b/0x80
[  172.226182][ T8269]  __sys_sendmsg+0x160/0x210
[  172.226200][ T8269]  ? __pfx___sys_sendmsg+0x10/0x10
[  172.226225][ T8269]  ? __pfx_ksys_write+0x10/0x10
[  172.226279][ T8269]  __do_fast_syscall_32+0xe7/0x970
[  172.226483][ T8269]  ? lockdep_hardirqs_on+0x78/0x100
[  172.226501][ T8269]  do_fast_syscall_32+0x32/0x70
[  172.226518][ T8269]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  172.226539][ T8269] RIP: 0023:0xf6fcefec
[  172.226559][ T8269] Code: Unable to access opcode bytes at 0xf6fcefc2.
[  172.226611][ T8269] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  172.226627][ T8269] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0
[  172.226637][ T8269] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  172.226646][ T8269] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  172.226654][ T8269] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  172.226663][ T8269] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  172.226683][ T8269]  </TASK>
[  172.655282][ T8282] binder: 8280:8282 ioctl 4c0a 0 returned -22
[  173.055366][ T8293] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  173.388496][ T8304] Mount JFS Failure: -5
[  173.422335][   T42] kauditd_printk_skb: 74 callbacks suppressed
[  173.422383][   T42] audit: type=1326 audit(1784464081.295:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.3.720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000
[  173.465066][   T42] audit: type=1326 audit(1784464081.295:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.3.720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000
[  173.485255][   T42] audit: type=1326 audit(1784464081.295:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.3.720" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fcefec code=0x7ffc0000
[  173.501668][   T42] audit: type=1326 audit(1784464081.295:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.3.720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000
[  173.525971][   T42] audit: type=1326 audit(1784464081.295:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.3.720" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6fcefec code=0x7ffc0000
[  173.546276][   T42] audit: type=1326 audit(1784464081.295:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.3.720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000
[  173.556333][   T42] audit: type=1326 audit(1784464081.295:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.3.720" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf6fcefec code=0x7ffc0000
[  173.563201][   T42] audit: type=1326 audit(1784464081.295:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.3.720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000
[  173.574087][   T42] audit: type=1326 audit(1784464081.295:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.3.720" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf6fcefec code=0x7ffc0000
[  173.582143][ T8309] syzkaller0: entered promiscuous mode
[  173.583930][   T42] audit: type=1326 audit(1784464081.305:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.3.720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000
[  173.584614][ T8309] syzkaller0: entered allmulticast mode
[  173.793487][ T8315] __nla_validate_parse: 1 callbacks suppressed
[  173.793581][ T8315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.725'.
[  173.865484][ T8315] netlink: 'syz.2.725': attribute type 1 has an invalid length.
[  174.398062][ T3268] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  174.628797][ T8328] bond0: (slave bond_slave_0): Releasing backup interface
[  174.756468][ T3268] usb 7-1: Using ep0 maxpacket: 32
[  175.154886][ T8328] bond0: (slave bond_slave_1): Releasing backup interface
[  175.357653][ T8328] team0: Port device team_slave_0 removed
[  175.403495][ T8328] team0: Port device team_slave_1 removed
[  175.466720][ T8346] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  175.475524][ T8346] netlink: 'syz.3.728': attribute type 3 has an invalid length.
[  175.478425][ T8346] netlink: 244 bytes leftover after parsing attributes in process `syz.3.728'.
[  175.521886][ T8346] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  175.525824][ T8346] overlayfs: failed to look up (tracing) for ino (-66)
[  176.025083][ T3268] usb 7-1: unable to get BOS descriptor or descriptor too short
[  176.040431][ T3268] usb 7-1: unable to read config index 0 descriptor/start: -71
[  176.043414][ T3268] usb 7-1: can't read configurations, error -71
[  176.177281][ T8328] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.187337][ T8328] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.198040][ T8328] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.207213][ T8328] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.219404][ T8328] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  176.320235][ T8380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.733'.
[  176.556231][ T8394] kvm: user requested TSC rate below hardware speed
[  176.686585][ T8404] FAULT_INJECTION: forcing a failure.
[  176.686585][ T8404] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  176.698706][ T8404] CPU: 2 UID: 0 PID: 8404 Comm: syz.2.741 Not tainted syzkaller #0 PREEMPT(full) 
[  176.698726][ T8404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  176.698736][ T8404] Call Trace:
[  176.698741][ T8404]  <TASK>
[  176.698747][ T8404]  dump_stack_lvl+0x100/0x190
[  176.698774][ T8404]  should_fail_ex.cold+0x5/0xa
[  176.698795][ T8404]  _copy_from_user+0x2e/0xd0
[  176.698858][ T8404]  get_compat_msghdr+0xb3/0x480
[  176.698908][ T8404]  ? __pfx_get_compat_msghdr+0x10/0x10
[  176.698931][ T8404]  ? rcu_is_watching+0x12/0xc0
[  176.698952][ T8404]  ? ___sys_sendmsg+0x19d/0x1e0
[  176.698978][ T8404]  ? kfree+0x1e5/0x6c0
[  176.699002][ T8404]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  176.699052][ T8404]  ___sys_sendmsg+0x1b6/0x1e0
[  176.699081][ T8404]  ? __pfx____sys_sendmsg+0x10/0x10
[  176.699105][ T8404]  ? do_user_addr_fault+0x7de/0x12f0
[  176.699163][ T8404]  ? lockdep_hardirqs_on+0x78/0x100
[  176.699182][ T8404]  ? irqentry_exit+0x24d/0xa00
[  176.699209][ T8404]  ? __pfx___might_resched+0x10/0x10
[  176.699235][ T8404]  ? __sys_sendmmsg+0x31d/0x440
[  176.699260][ T8404]  __sys_sendmmsg+0x309/0x440
[  176.699282][ T8404]  ? __pfx___sys_sendmmsg+0x10/0x10
[  176.699302][ T8404]  ? find_held_lock+0x2b/0x80
[  176.699329][ T8404]  ? __mutex_unlock_slowpath+0x35d/0x930
[  176.699361][ T8404]  ? fput+0x79/0x100
[  176.699381][ T8404]  ? ksys_write+0x1ac/0x250
[  176.699408][ T8404]  __ia32_compat_sys_sendmmsg+0x9d/0x100
[  176.699427][ T8404]  ? lockdep_hardirqs_on+0x78/0x100
[  176.699438][ T8404]  __do_fast_syscall_32+0xe7/0x970
[  176.699451][ T8404]  ? lockdep_hardirqs_on+0x78/0x100
[  176.699463][ T8404]  do_fast_syscall_32+0x32/0x70
[  176.699475][ T8404]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  176.699491][ T8404] RIP: 0023:0xf703efec
[  176.699506][ T8404] Code: Unable to access opcode bytes at 0xf703efc2.
[  176.699511][ T8404] RSP: 002b:00000000f540c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159
[  176.699522][ T8404] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080001380
[  176.699529][ T8404] RDX: 00000000fffffeed RSI: 0000000000000000 RDI: 0000000000000000
[  176.699535][ T8404] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  176.699542][ T8404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  176.699548][ T8404] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  176.699566][ T8404]  </TASK>
[  176.741568][ T8407] netlink: 766 bytes leftover after parsing attributes in process `syz.3.742'.
[  177.057221][ T8416] FAULT_INJECTION: forcing a failure.
[  177.057221][ T8416] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  177.062903][ T8416] CPU: 3 UID: 0 PID: 8416 Comm: syz.0.745 Not tainted syzkaller #0 PREEMPT(full) 
[  177.062925][ T8416] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  177.062935][ T8416] Call Trace:
[  177.062941][ T8416]  <TASK>
[  177.062948][ T8416]  dump_stack_lvl+0x100/0x190
[  177.062968][ T8416]  should_fail_ex.cold+0x5/0xa
[  177.062980][ T8416]  ? prepare_alloc_pages+0x16d/0x5f0
[  177.062998][ T8416]  should_fail_alloc_page+0xeb/0x140
[  177.063015][ T8416]  prepare_alloc_pages+0x1f0/0x5f0
[  177.063032][ T8416]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  177.063061][ T8416]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  177.063085][ T8416]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  177.063104][ T8416]  ? policy_nodemask+0xed/0x4f0
[  177.063121][ T8416]  alloc_pages_mpol+0x1fb/0x540
[  177.063137][ T8416]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  177.063156][ T8416]  folio_alloc_mpol_noprof+0x36/0x260
[  177.063176][ T8416]  vma_alloc_folio_noprof+0xed/0x1d0
[  177.063198][ T8416]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  177.063227][ T8416]  do_anonymous_page+0xb2b/0x2080
[  177.063261][ T8416]  ? rcu_read_unlock+0x2d/0xb0
[  177.063284][ T8416]  __handle_mm_fault+0x1d2c/0x2a00
[  177.063311][ T8416]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  177.063327][ T8416]  ? __pfx___handle_mm_fault+0x10/0x10
[  177.063345][ T8416]  ? pte_offset_map_lock+0x174/0x320
[  177.063360][ T8416]  ? find_held_lock+0x2b/0x80
[  177.063378][ T8416]  ? follow_page_pte+0x4d0/0x13f0
[  177.063396][ T8416]  handle_mm_fault+0x37b/0xa30
[  177.063416][ T8416]  __get_user_pages+0x1178/0x32a0
[  177.063434][ T8416]  ? down_read_killable+0x35e/0x520
[  177.063450][ T8416]  ? __pfx___get_user_pages+0x10/0x10
[  177.063469][ T8416]  __gup_longterm_locked+0x87d/0x16f0
[  177.063488][ T8416]  ? __pfx___gup_longterm_locked+0x10/0x10
[  177.063505][ T8416]  ? find_held_lock+0x2b/0x80
[  177.063517][ T8416]  ? gup_fast_fallback+0x7e8/0x2790
[  177.063531][ T8416]  ? sanity_check_pinned_pages+0x4f2/0x8b0
[  177.063548][ T8416]  gup_fast_fallback+0x16dc/0x2790
[  177.063574][ T8416]  ? __pfx_gup_fast_fallback+0x10/0x10
[  177.063588][ T8416]  ? __ia32_sys_getsockopt+0xbc/0x160
[  177.063602][ T8416]  ? __do_fast_syscall_32+0xe7/0x970
[  177.063614][ T8416]  ? do_fast_syscall_32+0x32/0x70
[  177.063633][ T8416]  pin_user_pages_fast+0xa7/0xf0
[  177.063648][ T8416]  ? __pfx_pin_user_pages_fast+0x10/0x10
[  177.063667][ T8416]  iov_iter_extract_pages+0xac8/0x2100
[  177.063688][ T8416]  ? rcu_is_watching+0x12/0xc0
[  177.063701][ T8416]  ? __pfx_iov_iter_extract_pages+0x10/0x10
[  177.063716][ T8416]  ? __kasan_kmalloc+0xaa/0xb0
[  177.063730][ T8416]  ? __kvmalloc_node_noprof+0x36d/0x970
[  177.063745][ T8416]  ? rds_info_getsockopt+0x441/0x610
[  177.063806][ T8416]  rds_info_getsockopt+0x46f/0x610
[  177.063821][ T8416]  ? __pfx_rds_info_getsockopt+0x10/0x10
[  177.063838][ T8416]  ? find_held_lock+0x2b/0x80
[  177.063869][ T8416]  rds_getsockopt+0x126/0x310
[  177.063889][ T8416]  ? __pfx_rds_getsockopt+0x10/0x10
[  177.063906][ T8416]  ? copy_from_sockptr_offset.constprop.0+0xe2/0x150
[  177.063925][ T8416]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[  177.063947][ T8416]  do_sock_getsockopt+0x3f6/0x6e0
[  177.063966][ T8416]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  177.063987][ T8416]  ? find_held_lock+0x2b/0x80
[  177.064003][ T8416]  ? __fget_files+0x21f/0x3d0
[  177.064025][ T8416]  __sys_getsockopt+0x133/0x1d0
[  177.064042][ T8416]  ? __ia32_sys_getsockopt+0xbc/0x160
[  177.064059][ T8416]  __ia32_sys_getsockopt+0xbc/0x160
[  177.064072][ T8416]  ? __do_fast_syscall_32+0x98/0x970
[  177.064084][ T8416]  ? lockdep_hardirqs_on+0x78/0x100
[  177.064096][ T8416]  __do_fast_syscall_32+0xe7/0x970
[  177.064108][ T8416]  ? lockdep_hardirqs_on+0x78/0x100
[  177.064119][ T8416]  do_fast_syscall_32+0x32/0x70
[  177.064132][ T8416]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  177.064147][ T8416] RIP: 0023:0xf7f58fec
[  177.064162][ T8416] Code: Unable to access opcode bytes at 0xf7f58fc2.
[  177.064168][ T8416] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 000000000000016d
[  177.064179][ T8416] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000114
[  177.064186][ T8416] RDX: 000000000000271f RSI: 0000000080019440 RDI: 00000000800000c0
[  177.064192][ T8416] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  177.064198][ T8416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  177.064205][ T8416] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  177.064219][ T8416]  </TASK>
[  177.809485][ T8421] uprobe: syz.0.747:8421 failed to unregister, leaking uprobe
[  177.973364][ T8439] FAULT_INJECTION: forcing a failure.
[  177.973364][ T8439] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  177.979592][ T8439] CPU: 2 UID: 0 PID: 8439 Comm: syz.0.753 Not tainted syzkaller #0 PREEMPT(full) 
[  177.979618][ T8439] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  177.979630][ T8439] Call Trace:
[  177.979637][ T8439]  <TASK>
[  177.979644][ T8439]  dump_stack_lvl+0x100/0x190
[  177.979678][ T8439]  should_fail_ex.cold+0x5/0xa
[  177.979703][ T8439]  _copy_to_user+0x32/0xd0
[  177.979733][ T8439]  simple_read_from_buffer+0xcb/0x170
[  177.979835][ T8439]  proc_fail_nth_read+0x1af/0x230
[  177.979886][ T8439]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  177.979909][ T8439]  ? rw_verify_area+0xce/0x6d0
[  177.979936][ T8439]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  177.979960][ T8439]  vfs_read+0x1e4/0xb40
[  177.979990][ T8439]  ? __pfx_vfs_read+0x10/0x10
[  177.980015][ T8439]  ? find_held_lock+0x2b/0x80
[  177.980039][ T8439]  ? __fget_files+0x215/0x3d0
[  177.980076][ T8439]  ? __fget_files+0x21f/0x3d0
[  177.980136][ T8439]  ksys_read+0x12a/0x250
[  177.980161][ T8439]  ? __pfx_ksys_read+0x10/0x10
[  177.980193][ T8439]  do_int80_emulation+0x14b/0x720
[  177.980220][ T8439]  asm_int80_emulation+0x1a/0x20
[  177.980240][ T8439] RIP: 0023:0xf71572eb
[  177.980256][ T8439] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  177.980273][ T8439] RSP: 002b:00000000f54164bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  177.980290][ T8439] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54165d0
[  177.980303][ T8439] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  177.980312][ T8439] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  177.980321][ T8439] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  177.980332][ T8439] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  177.980355][ T8439]  </TASK>
[  178.109071][ T8442] netlink: 40 bytes leftover after parsing attributes in process `syz.0.754'.
[  178.116265][ T8442] netlink: 'syz.0.754': attribute type 1 has an invalid length.
[  178.138160][ T8442] bond1: (slave bridge0): making interface the new active one
[  178.144243][ T8442] bond1: (slave bridge0): Enslaving as an active interface with an up link
[  178.238191][ T8448] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  178.425840][ T8460] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  178.622352][ T8469] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  178.678169][ T8473] netlink: 32 bytes leftover after parsing attributes in process `syz.3.762'.
[  178.681060][ T8473] openvswitch: netlink: Flow key attr not present in new flow.
[  178.809322][ T8480] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  178.818247][ T8482] netlink: 20 bytes leftover after parsing attributes in process `syz.3.766'.
[  178.847107][ T8484] netlink: 'syz.1.768': attribute type 1 has an invalid length.
[  178.863279][ T8484] 8021q: adding VLAN 0 to HW filter on device bond3
[  178.926372][ T1476] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  179.060661][ T8497] netlink: 32 bytes leftover after parsing attributes in process `syz.3.773'.
[  179.064553][ T8497] openvswitch: netlink: Flow key attr not present in new flow.
[  179.087795][ T1476] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  179.093623][ T1476] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  179.102062][ T1476] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  179.107143][ T1476] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.118998][ T8472] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  179.128292][ T1476] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  179.142598][ T8506] netlink: 'syz.1.776': attribute type 3 has an invalid length.
[  179.336590][ T8472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.341954][ T8472] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.360863][   T24] usb 5-1: USB disconnect, device number 14
[  179.446371][   T34] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  179.613384][   T34] usb 6-1: Using ep0 maxpacket: 32
[  179.618863][   T34] usb 6-1: unable to get BOS descriptor or descriptor too short
[  179.623272][   T34] usb 6-1: config 14 has an invalid interface number: 57 but max is 1
[  179.627213][   T34] usb 6-1: config 14 has an invalid interface number: 228 but max is 1
[  179.630626][   T34] usb 6-1: config 14 has no interface number 0
[  179.633090][   T34] usb 6-1: config 14 has no interface number 1
[  179.635174][   T34] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  179.639084][   T34] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  179.642806][   T34] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  179.647014][   T34] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  179.651379][   T34] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  179.656849][   T34] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  179.662324][   T34] usb 6-1: config 14 interface 57 has no altsetting 0
[  179.664858][   T34] usb 6-1: config 14 interface 228 has no altsetting 0
[  179.682493][   T34] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  179.694291][   T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.702719][   T34] usb 6-1: Product: syz
[  179.710583][   T34] usb 6-1: Manufacturer: syz
[  179.712389][   T34] usb 6-1: SerialNumber: syz
[  179.778929][ T8528] 8021q: adding VLAN 0 to HW filter on device batadv2
[  180.202353][   T34] legousbtower 6-1:14.57: interrupt endpoints not found
[  180.245173][   T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  180.597802][   T34] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507
[  180.605230][   T34] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  180.700326][   T24] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  180.704590][   T24] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 205, changing to 11
[  180.708410][   T24] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 18340, setting to 1024
[  180.712614][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  180.718029][   T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  180.721096][   T24] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  180.723831][   T24] usb 5-1: Product: syz
[  180.725300][   T24] usb 5-1: Manufacturer: syz
[  180.727378][   T24] usb 5-1: SerialNumber: syz
[  180.731393][   T24] usb 5-1: config 0 descriptor??
[  180.739300][ T8521] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  180.753111][   T24] usb 5-1: selecting invalid altsetting 0
[  180.962940][ T8518] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  180.965919][ T8518] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  180.969035][ T8518] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  180.971724][ T8518] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  180.974434][ T8518] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  180.977464][ T8518] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  180.980214][ T8518] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  180.982713][ T8518] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  180.985377][ T8518] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  180.988219][ T8518] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  180.990835][ T8518] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  180.993498][ T8518] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  180.996604][ T8518] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  180.999254][ T8518] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  181.001824][ T8518] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  181.004334][ T8518] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  181.007375][ T8518] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  181.481899][   T24] usb 6-1: USB disconnect, device number 10
[  181.500329][   T24] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected
[  181.654020][ T8554] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  181.968957][   T42] kauditd_printk_skb: 1 callbacks suppressed
[  181.968970][   T42] audit: type=1804 audit(1784464089.845:120): pid=8557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.791" name="/newroot/218/file0" dev="fuse" ino=1 res=1 errno=0
[  182.825461][ T8517] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  182.836458][   T24] usb 5-1: USB disconnect, device number 15
[  182.966746][ T8571] binder: 8570:8571 ioctl 40786e88 80000dc0 returned -22
[  183.082893][ T8575] binder: BINDER_SET_CONTEXT_MGR already set
[  183.087416][ T8575] binder: 8570:8575 ioctl 4018620d 80004a80 returned -16
[  183.178453][ T8577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.793'.
[  183.599341][ T8569] nbd0: detected capacity change from 0 to 1688849860263936
[  183.629750][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.793'.
[  183.685429][   T66] block nbd0: Wrong magic (0x25609513)
[  183.757495][  T963] block nbd0: Receive control failed (result -32)
[  184.979055][ T8598] syzkaller0: entered promiscuous mode
[  184.981500][ T8598] syzkaller0: entered allmulticast mode
[  185.369107][ T8607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.805'.
[  185.636895][ T8609] openvswitch: netlink: Flow actions attr not present in new flow.
[  187.626943][ T8640] syzkaller0: entered promiscuous mode
[  187.629383][ T8640] syzkaller0: entered allmulticast mode
[  187.900243][ T8656] netlink: 766 bytes leftover after parsing attributes in process `syz.3.817'.
[  188.442514][ T8661] netlink: 84 bytes leftover after parsing attributes in process `syz.3.818'.
[  188.467851][ T8661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.818'.
[  188.584305][ T8666] FAULT_INJECTION: forcing a failure.
[  188.584305][ T8666] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  188.606238][ T8666] CPU: 3 UID: 0 PID: 8666 Comm: syz.1.820 Not tainted syzkaller #0 PREEMPT(full) 
[  188.606266][ T8666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  188.606277][ T8666] Call Trace:
[  188.606284][ T8666]  <TASK>
[  188.606291][ T8666]  dump_stack_lvl+0x100/0x190
[  188.606319][ T8666]  should_fail_ex.cold+0x5/0xa
[  188.606345][ T8666]  save_fsave_header+0x14c/0x2f0
[  188.606402][ T8666]  ? __pfx_save_fsave_header+0x10/0x10
[  188.606438][ T8666]  ? copy_fpstate_to_sigframe+0x2b8/0xae0
[  188.606467][ T8666]  ? __local_bh_enable_ip+0x9e/0x120
[  188.606491][ T8666]  copy_fpstate_to_sigframe+0x755/0xae0
[  188.606521][ T8666]  ? __hrtimer_rearm_deferred+0x23c/0x720
[  188.606570][ T8666]  ? __pfx_copy_fpstate_to_sigframe+0x10/0x10
[  188.606598][ T8666]  ? do_raw_spin_unlock+0x145/0x1e0
[  188.606618][ T8666]  ? rcu_is_watching+0x12/0xc0
[  188.606655][ T8666]  ? irqentry_exit+0x24d/0xa00
[  188.606677][ T8666]  ? x86_task_fpu+0x5f/0x90
[  188.606740][ T8666]  get_sigframe+0x3fb/0x940
[  188.606795][ T8666]  ? __pfx_get_sigframe+0x10/0x10
[  188.606823][ T8666]  ? _raw_spin_unlock_irq+0x29/0x50
[  188.606848][ T8666]  ? siginfo_layout+0x156/0x290
[  188.606904][ T8666]  ia32_setup_rt_frame+0xe7/0xaf0
[  188.606931][ T8666]  ? __pfx_ia32_setup_rt_frame+0x10/0x10
[  188.606959][ T8666]  arch_do_signal_or_restart+0x459/0x7a0
[  188.606985][ T8666]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  188.607018][ T8666]  ? fput+0x79/0x100
[  188.607044][ T8666]  exit_to_user_mode_loop+0x139/0x6f0
[  188.607074][ T8666]  ? rcu_is_watching+0x12/0xc0
[  188.607094][ T8666]  do_int80_emulation+0x513/0x720
[  188.607117][ T8666]  asm_int80_emulation+0x1a/0x20
[  188.607135][ T8666] RIP: 0023:0xf71e72eb
[  188.607150][ T8666] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  188.607167][ T8666] RSP: 002b:00000000f54a64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[  188.607185][ T8666] RAX: 0000000000000001 RBX: 0000000000000004 RCX: 00000000f54a65c0
[  188.607196][ T8666] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  188.607205][ T8666] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  188.607215][ T8666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  188.607225][ T8666] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  188.607248][ T8666]  </TASK>
[  188.781392][ T8667] Set syz1 is full, maxelem 14 reached
[  188.784839][ T8669] fuse: Unknown parameter 'ÿÿÿÿ'
[  188.962047][   T66] block nbd1: Receive control failed (result -1)
[  188.967178][   T66] 
[  188.968028][   T66] ======================================================
[  188.970306][   T66] WARNING: possible circular locking dependency detected
[  188.972787][   T66] syzkaller #0 Not tainted
[  188.974413][   T66] ------------------------------------------------------
[  188.976630][   T66] kworker/u35:0/66 is trying to acquire lock:
[  188.978553][   T66] ffff88804bc00fe0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x67/0x410
[  188.982282][   T66] 
[  188.982282][   T66] but task is already holding lock:
[  188.984792][   T66] ffff88802abc0068 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x5e7/0x8c0
[  188.987825][   T66] 
[  188.987825][   T66] which lock already depends on the new lock.
[  188.987825][   T66] 
[  188.991054][   T66] 
[  188.991054][   T66] the existing dependency chain (in reverse order) is:
[  188.993857][   T66] 
[  188.993857][   T66] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  188.996349][   T66]        lock_acquire+0x1b9/0x370
[  188.997988][   T66]        __mutex_lock+0x1a4/0x1bd0
[  188.999697][   T66]        nbd_queue_rq+0x428/0x1080
[  189.001847][   T66]        blk_mq_dispatch_rq_list+0x422/0x1e70
[  189.004289][   T66]        __blk_mq_sched_dispatch_requests+0xcea/0x1620
[  189.006810][   T66]        blk_mq_sched_dispatch_requests+0xd7/0x1c0
[  189.009555][   T66]        blk_mq_run_work_fn+0x135/0x380
[  189.011870][   T66]        process_one_work+0xa23/0x1940
[  189.014089][   T66]        worker_thread+0x5ef/0xe50
[  189.016170][   T66]        kthread+0x370/0x450
[  189.018017][   T66]        ret_from_fork+0x72b/0xd50
[  189.019632][   T66]        ret_from_fork_asm+0x1a/0x30
[  189.021383][   T66] 
[  189.021383][   T66] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  189.023720][   T66]        lock_acquire+0x1b9/0x370
[  189.025413][   T66]        __mutex_lock+0x1a4/0x1bd0
[  189.027077][   T66]        nbd_queue_rq+0xba/0x1080
[  189.028692][   T66]        blk_mq_dispatch_rq_list+0x422/0x1e70
[  189.030630][   T66]        __blk_mq_sched_dispatch_requests+0xcea/0x1620
[  189.032892][   T66]        blk_mq_sched_dispatch_requests+0xd7/0x1c0
[  189.034972][   T66]        blk_mq_run_work_fn+0x135/0x380
[  189.036826][   T66]        process_one_work+0xa23/0x1940
[  189.038575][   T66]        worker_thread+0x5ef/0xe50
[  189.040253][   T66]        kthread+0x370/0x450
[  189.041732][   T66]        ret_from_fork+0x72b/0xd50
[  189.043472][   T66]        ret_from_fork_asm+0x1a/0x30
[  189.045194][   T66] 
[  189.045194][   T66] -> #4 (set->srcu){.+.+}-{0:0}:
[  189.047887][   T66]        lock_sync+0x9d/0x110
[  189.049847][   T66]        __synchronize_srcu+0xa2/0x300
[  189.051635][   T66]        blk_mq_quiesce_queue+0x149/0x1c0
[  189.053544][   T66]        elevator_switch+0x17b/0x7e0
[  189.055323][   T66]        elevator_change+0x352/0x530
[  189.057043][   T66]        elevator_set_default+0x29e/0x360
[  189.059149][   T66]        blk_register_queue+0x48e/0x630
[  189.060922][   T66]        __add_disk+0x73f/0xe40
[  189.062463][   T66]        add_disk_fwnode+0x118/0x480
[  189.064248][   T66]        nbd_dev_add+0x77a/0xb10
[  189.065866][   T66]        nbd_init+0x291/0x2b0
[  189.067620][   T66]        do_one_initcall+0x11d/0x700
[  189.069351][   T66]        kernel_init_freeable+0x6ea/0x7b0
[  189.071241][   T66]        kernel_init+0x1f/0x1e0
[  189.072836][   T66]        ret_from_fork+0x72b/0xd50
[  189.074485][   T66]        ret_from_fork_asm+0x1a/0x30
[  189.076668][   T66] 
[  189.076668][   T66] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  189.079559][   T66]        lock_acquire+0x1b9/0x370
[  189.081209][   T66]        __mutex_lock+0x1a4/0x1bd0
[  189.082882][   T66]        elevator_change+0x1bc/0x530
[  189.084576][   T66]        elevator_set_none+0x92/0xf0
[  189.086339][   T66]        blk_mq_update_nr_hw_queues+0x4c1/0x15f0
[  189.088457][   T66]        nbd_start_device+0x1a6/0xbd0
[  189.090410][   T66]        nbd_genl_connect+0xff2/0x1a40
[  189.092177][   T66]        genl_family_rcv_msg_doit+0x214/0x300
[  189.094085][   T66]        genl_rcv_msg+0x560/0x800
[  189.095698][   T66]        netlink_rcv_skb+0x159/0x420
[  189.097384][   T66]        genl_rcv+0x28/0x40
[  189.098777][   T66]        netlink_unicast+0x585/0x850
[  189.100566][   T66]        netlink_sendmsg+0x8b0/0xda0
[  189.102261][   T66]        ____sys_sendmsg+0xa4d/0xbe0
[  189.103933][   T66]        ___sys_sendmsg+0x190/0x1e0
[  189.105590][   T66]        __sys_sendmsg+0x160/0x210
[  189.107199][   T66]        __do_fast_syscall_32+0xe7/0x970
[  189.109126][   T66]        do_fast_syscall_32+0x32/0x70
[  189.111355][   T66]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  189.113860][   T66] 
[  189.113860][   T66] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  189.117051][   T66]        lock_acquire+0x1b9/0x370
[  189.118660][   T66]        blk_alloc_queue+0x610/0x790
[  189.120330][   T66]        blk_mq_alloc_queue+0x174/0x290
[  189.122275][   T66]        __blk_mq_alloc_disk+0x29/0x120
[  189.124593][   T66]        nbd_dev_add+0x492/0xb10
[  189.126589][   T66]        nbd_init+0x291/0x2b0
[  189.128490][   T66]        do_one_initcall+0x11d/0x700
[  189.130501][   T66]        kernel_init_freeable+0x6ea/0x7b0
[  189.132399][   T66]        kernel_init+0x1f/0x1e0
[  189.134339][   T66]        ret_from_fork+0x72b/0xd50
[  189.136349][   T66]        ret_from_fork_asm+0x1a/0x30
[  189.138403][   T66] 
[  189.138403][   T66] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  189.141152][   T66]        lock_acquire+0x1b9/0x370
[  189.143042][   T66]        fs_reclaim_acquire+0xc4/0x100
[  189.144785][   T66]        __kmalloc_noprof+0xce/0x820
[  189.146490][   T66]        tls_sw_sendmsg+0x10f4/0x2b10
[  189.148389][   T66]        inet6_sendmsg+0x11c/0x140
[  189.150361][   T66]        sock_sendmsg+0x28c/0x410
[  189.152368][   T66]        splice_to_socket+0xb3c/0x11a0
[  189.154522][   T66]        direct_splice_actor+0x192/0x690
[  189.156726][   T66]        splice_direct_to_actor+0x345/0xa30
[  189.159023][   T66]        do_splice_direct+0x174/0x240
[  189.161101][   T66]        do_sendfile+0xadc/0xe20
[  189.163060][   T66]        __ia32_compat_sys_sendfile+0x1e5/0x220
[  189.165412][   T66]        __do_fast_syscall_32+0xe7/0x970
[  189.167644][   T66]        do_fast_syscall_32+0x32/0x70
[  189.169735][   T66]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  189.172386][   T66] 
[  189.172386][   T66] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}:
[  189.175530][   T66]        check_prev_add+0xeb/0xe60
[  189.177541][   T66]        __lock_acquire+0x136c/0x1a40
[  189.179671][   T66]        lock_acquire+0x1b9/0x370
[  189.181685][   T66]        lock_sock_nested+0x41/0xf0
[  189.183905][   T66]        inet_shutdown+0x67/0x410
[  189.186039][   T66]        nbd_mark_nsock_dead+0xae/0x5c0
[  189.188378][   T66]        recv_work+0x5fb/0x8c0
[  189.190432][   T66]        process_one_work+0xa23/0x1940
[  189.192770][   T66]        worker_thread+0x5ef/0xe50
[  189.194966][   T66]        kthread+0x370/0x450
[  189.196903][   T66]        ret_from_fork+0x72b/0xd50
[  189.198967][   T66]        ret_from_fork_asm+0x1a/0x30
[  189.201083][   T66] 
[  189.201083][   T66] other info that might help us debug this:
[  189.201083][   T66] 
[  189.205045][   T66] Chain exists of:
[  189.205045][   T66]   sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock
[  189.205045][   T66] 
[  189.210119][   T66]  Possible unsafe locking scenario:
[  189.210119][   T66] 
[  189.212531][   T66]        CPU0                    CPU1
[  189.214202][   T66]        ----                    ----
[  189.215886][   T66]   lock(&nsock->tx_lock);
[  189.217289][   T66]                                lock(&cmd->lock);
[  189.219321][   T66]                                lock(&nsock->tx_lock);
[  189.221454][   T66]   lock(sk_lock-AF_INET6-NBD);
[  189.223018][   T66] 
[  189.223018][   T66]  *** DEADLOCK ***
[  189.223018][   T66] 
[  189.226114][   T66] 3 locks held by kworker/u35:0/66:
[  189.228148][   T66]  #0: ffff8880272e8940 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940
[  189.232174][   T66]  #1: ffffc90000a2fd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940
[  189.236365][   T66]  #2: ffff88802abc0068 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x5e7/0x8c0
[  189.239924][   T66] 
[  189.239924][   T66] stack backtrace:
[  189.242232][   T66] CPU: 2 UID: 0 PID: 66 Comm: kworker/u35:0 Not tainted syzkaller #0 PREEMPT(full) 
[  189.242251][   T66] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  189.242263][   T66] Workqueue: nbd1-recv recv_work
[  189.242287][   T66] Call Trace:
[  189.242296][   T66]  <TASK>
[  189.242302][   T66]  dump_stack_lvl+0x100/0x190
[  189.242321][   T66]  print_circular_bug.cold+0x178/0x1c7
[  189.242388][   T66]  check_noncircular+0x146/0x160
[  189.242412][   T66]  check_prev_add+0xeb/0xe60
[  189.242432][   T66]  __lock_acquire+0x136c/0x1a40
[  189.242453][   T66]  ? lockdep_hardirqs_on+0x78/0x100
[  189.242476][   T66]  lock_acquire+0x1b9/0x370
[  189.242495][   T66]  ? inet_shutdown+0x67/0x410
[  189.242512][   T66]  lock_sock_nested+0x41/0xf0
[  189.242527][   T66]  ? inet_shutdown+0x67/0x410
[  189.242540][   T66]  inet_shutdown+0x67/0x410
[  189.242555][   T66]  nbd_mark_nsock_dead+0xae/0x5c0
[  189.242573][   T66]  recv_work+0x5fb/0x8c0
[  189.242592][   T66]  ? lockdep_unlock+0x5a/0xc0
[  189.242608][   T66]  ? __pfx_recv_work+0x10/0x10
[  189.242630][   T66]  ? rcu_is_watching+0x12/0xc0
[  189.242648][   T66]  process_one_work+0xa23/0x1940
[  189.242671][   T66]  ? __pfx_process_one_work+0x10/0x10
[  189.242714][   T66]  ? __pfx_recv_work+0x10/0x10
[  189.242735][   T66]  worker_thread+0x5ef/0xe50
[  189.242757][   T66]  ? kthread+0x13a/0x450
[  189.242774][   T66]  ? __pfx_worker_thread+0x10/0x10
[  189.242792][   T66]  kthread+0x370/0x450
[  189.242808][   T66]  ? __pfx_kthread+0x10/0x10
[  189.242826][   T66]  ret_from_fork+0x72b/0xd50
[  189.242842][   T66]  ? __pfx_ret_from_fork+0x10/0x10
[  189.242858][   T66]  ? __switch_to+0x800/0x10f0
[  189.242879][   T66]  ? __pfx_kthread+0x10/0x10
[  189.242896][   T66]  ret_from_fork_asm+0x1a/0x30
[  189.242920][   T66]  </TASK>
[  194.148699][ T1440] ieee802154 phy0 wpan0: encryption failed: -22
[  194.150890][ T1440] ieee802154 phy1 wpan1: encryption failed: -22