last executing test programs:

3m0.346088802s ago: executing program 1 (id=9):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = creat(&(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x200000000000017a, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockname$packet(r1, &(0x7f0000001180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000011c0)=0x14)
write$binfmt_elf64(r1, &(0x7f0000000e00)=ANY=[], 0x1820)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000001040)={0x4, 0x8, 0x0, 0xff, 0x14, "a7939e814f4c65bcaada45f551c9084046c55c"})
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
ioctl$RTC_SET_TIME(r2, 0x4008700c, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = dup(r0)
write$UHID_INPUT(r3, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0xb}, 0x14}}, 0x40804)
ioctl$KDSETLED(r0, 0x4b32, 0x7)

2m59.985957489s ago: executing program 1 (id=10):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0xa8, 0x2, 0x1, 0x307, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x80000000}]}, @CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x5}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xc40}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x100}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x520}]}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0xc0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0)
write$P9_RSTATu(r4, &(0x7f0000000080)={0x265, 0x2, 0xafd, {{0x54f, 0x124, 0x28, 0x1f00, {}, 0x0, 0x0, 0xc, 0x401, 0xffffffffffffff7d, '\nnodev{evo\x03\xd3\x8b\x92\x00'/27, 0x28, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18x\x99\xa9\x16c\x88\x14\xe5p\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0xac, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4@\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x009\x86Ac\x1dD\xf4\xa3\x9b\x11\x91\x93z(\x0e\x8d\x88\x9f\xc2 \xd1\x15\xac\x8e/\x18K\x9aau\x8d&w*\xb0\xf2\x04M\x8e\xf0&=\xdd\x97\xd3\xc4\'\xb3\xa52\xef\xab\x1d\x1c\xe3,\xa7\xc1\xfc#\x1a\xf4\x84\b\xe0+%P(\xb7\xc9\xbb\x859oM\x8a\xf0\xeb\x95\xfc\x0e\xcc\x99\xf7\x80\xe2'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0xfd85)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r6, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
socket(0x10, 0x3, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r7 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}})
write$FUSE_INIT(r7, 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15460100005b38001c0012800500010067656e65766500004cde01bf1b02cd91a77b0f4e911bc98006000501f8d9c74c11b842"], 0x3c}}, 0x4000)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}}, 0x0)

2m58.75542076s ago: executing program 1 (id=16):
r0 = openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x6, 0x0)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040))
r1 = socket$unix(0x1, 0x5, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000440)=0xe4)
r3 = getegid()
fstat(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0xee00, <r5=>0x0}}, './file0\x00'})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000006c0)={0x26adc62b, 0x5, {}, {<r6=>0x0}, 0x9, 0x2})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000700)={0x0, 0x10, {<r7=>0xffffffffffffffff}, {0xffffffffffffffff}, 0x0, 0x9a})
read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020, 0x0, 0x0, <r8=>0x0}, 0x2020)
statx(0xffffffffffffffff, &(0x7f0000002780)='./file0\x00', 0x6000, 0x80, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000002b00)={0x0, 0x80000, <r10=>0xffffffffffffffff})
r11 = getpgrp(0xffffffffffffffff)
statx(0xffffffffffffffff, &(0x7f0000002b40)='./file0\x00', 0x1000, 0x100, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
getgroups(0xa, &(0x7f0000002c80)=[0xee01, 0x0, 0xee00, 0xee00, 0xee00, 0xee00, <r13=>0x0, 0xee01, 0xee00, 0x0])
r14 = gettid()
getresuid(&(0x7f0000002cc0)=<r15=>0x0, &(0x7f0000002d00), &(0x7f0000002d40))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002d80)={{0x1, 0x1, 0x18, <r16=>r0, {0xee01, <r17=>0xee00}}, './file0\x00'})
r18 = syz_clone(0xc000100, &(0x7f0000002dc0)="cda4c6cf1a1102400ef1175764f2671e30de6bb40b052b50f4fdee54db5fd4c3d533cdf1326ea52e8418f1634725c400b61b7a244215c6299bfdace850d8a5d5bf7e4288b1989e057b0659b63ce8eef973cad00afd352b056831bd08d9141498d3ead07dbf12fd15278f122996d6ef3d477664a74fd5024a6993e7be33402059759b859a99a17099d25abaa154d115f2c5ea681254bea163513cef19828b0e650f2fe97b0f", 0xa5, &(0x7f0000002e80), &(0x7f0000002ec0), &(0x7f0000002f00)="babe6bdbdd3fb7bbd3157962e8d8baf0c964ebbdd7f7378ea87b4b890d84f89971a684072bdb5804face768a53147d8186850265a97a1a9668bdffe84ef5b926a261cdee4ef63dcf0b29b01baff861c734fbea8536219eca1f5bcc508c04dd1c03ee785da15ff99a29279ef5341da3bec573f9bfec3d9fb5930ded2767604ec8bc8f8ac1e8fff2a214d2001661b875a24d9e8225951efbe59d4c0868242d3f32436a36ae436fb229c646aaf1a37b0010360f110d990841")
read$FUSE(0xffffffffffffffff, &(0x7f0000002fc0)={0x2020, 0x0, 0x0, <r19=>0x0}, 0x2020)
r20 = getgid()
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000005000)=<r21=>0x0)
lstat(&(0x7f0000005040)='./file0\x00', &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, <r22=>0x0})
statx(0xffffffffffffffff, &(0x7f0000005100)='./file0\x00', 0x4000, 0x8, &(0x7f0000005140)={0x0, 0x0, 0x0, 0x0, 0x0, <r23=>0x0})
r24 = syz_open_dev$vivid(&(0x7f0000005240), 0x3, 0x2)
r25 = syz_open_dev$rtc(&(0x7f0000005280), 0x0, 0x1)
sendmmsg$unix(r1, &(0x7f0000005380)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000100)="97a54895cb892684f4036a6683d8438caf7c95e86569e3175502b6396bed0e37feebd9fc1496420a41b5d16cd9c6273129eaf71bc9bed007902446051b3f4ac401ed12a2d8e3ddb636b25752c1097e4195c0ec98f1d33962248bf3c6cf822db513ab5362206ab35da7385abcb4f0d8227a5a65810d2c2a4c8239bef65bb7cebed22e5f96b2530db5ee881f43f017d6735cba5de824f3819871c4b9ac340ae24acbbd27e534aaa05651833ff7ba869e3af52d658e129f6b0b1833178a29f0ddecb321111c1dff8f8f2a8d35f142e627c2a7ead9f84f3f0ceeb862ab2829f9", 0xde}, {&(0x7f0000000200)="3d93b3b25a9ab3f2d010d6b619f1ea01ed4e6f018fe0bb23b1e24adb9331de6371ab82827477ccb578ec97fe2fe42c94f1070a674d53eb5154ed11982d873e022ebb3d6b76d4bd93579ca3d00e49d317b1472f6c95141ed698eeabb8035e047c322a44bb635924fe6740f5fda73d3e54cc1769e2fdb2415473c624de1017d5671a7527cca32d37271bf71e90f316c0758c3a150a66e0356a0038bca91678a0404ebe1215a72c6ca0201172f8b78268d105d72c14df235b6a0bf00b9b1399c597de2e8fce0c847599c080a722ff42ad5ed5ae5d86366432a34df6", 0xda}], 0x2, &(0x7f0000000480)=[@cred={{0x18, 0x1, 0x2, {0x0, r2, r3}}}], 0x18, 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)="598886fdb26b9d01b48cfc145d61000aea1ee2c06d715acf080920847f6e22f5f798bbffb4b882bba29e72d4f334487ea6a0543a57", 0x35}, {&(0x7f0000000500)="3cc33371ebf9ee93c35e47a7f2ce94522f0d93662f82820f9393793635d971254433d00f47bbe99bc61e50b73e5a7232994b9b819cbf86d4e49c62e2f20881a744bfd94afd219cc652fd02da91b0bb8239de54630b9f2a15ac4f894fac4d7022eb3b6d1183d147a28b376a87d0e6aebc90e7262db2437c8356e3a7af0ff295590dc15db21519552e8583761f63076fa8018c864f294fb45658b137cec739930b6bfe0a", 0xa3}], 0x2, &(0x7f00000028c0)=[@cred={{0x18, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x18, 0x1, 0x2, {0x0, r6}}}, @cred={{0x18, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x10, 0x1, 0x1, [r0]}}], 0x58, 0x40884}}, {{&(0x7f0000002940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002ac0)=[{&(0x7f00000029c0)="6b46bbdae72514e1d5c4d4b57b26ea2a0bad23d1dd23d5ef82d1506d4d89adc233eacdd4e63bc22cefbc48fbab43c3903f96c4f9aa1743400f2ae293c74234a86ffd0ca4bab4c0d94b514caa08fc1d7d409ab0978762502070eb7261f34e78980a9506405205dbafe63094e5c8498454edc7540faa7321dd753ffaa0def4f00c85653c7a6355a51e8e2d5b9f7455a16d26d3e63f07cea510b8c178fe29564f0b0a6ed220d7d9da1418d282bc5c8e3a9d2e0587f279d1f2c4defc515755c365a08e", 0xc1}], 0x1, &(0x7f00000052c0)=[@rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r10]}}, @cred={{0x18, 0x1, 0x2, {r11, r12, r13}}}, @cred={{0x18, 0x1, 0x2, {r14, r15, r17}}}, @cred={{0x18, 0x1, 0x2, {r18, r19, r20}}}, @cred={{0x18, 0x1, 0x2, {r21, r22, r23}}}, @rights={{0x20, 0x1, 0x1, [r0, r24, r25, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0, r0]}}], 0xbc, 0x4000011}}], 0x3, 0x80)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r16, 0x84, 0xa, &(0x7f0000005400)={0x76, 0x0, 0x210, 0x5, 0x9, 0x8, 0x20000000, 0x10000}, &(0x7f0000005440)=0x20)
ioctl$FITHAW(r1, 0xc0045878)
fsopen(&(0x7f0000005480)='msdos\x00', 0x0)

2m58.430417651s ago: executing program 1 (id=20):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/64, 0x40, 0x1, &(0x7f0000000280)=""/242, 0xf2}, &(0x7f00000001c0)=0x40)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r1 = syz_socket_connect_nvme_tcp()
r2 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0x40a45323, &(0x7f00000000c0)={{0x80}, 'port1\x00'})
getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000380), &(0x7f00000003c0)=0xc)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x38, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x84d}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x337}]}]}, 0x38}}, 0x0)
unshare(0x22020000)

2m58.149334575s ago: executing program 1 (id=21):
listen(0xffffffffffffffff, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x4}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0x6)
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000003c0)=0x5, 0x4)
sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x280842, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000071, 0x0, 0x81}]})
ioctl$KVM_REINJECT_CONTROL(r4, 0xae71, &(0x7f0000000000)={0x9})
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r8, 0x0, 0x486, &(0x7f0000000680), &(0x7f00000006c0)=0x2)
r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r10 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r10, 0x1, &(0x7f0000000080)={0x7, 0x7, 0xf8f, "a04517f70c38ca"})
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="14e10000190a0104000000cb56c7d58350bf4d00"], 0x14}}, 0x8004)
ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f00000001c0)=0x3)
ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000880)={"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"})

2m57.220880088s ago: executing program 1 (id=22):
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008009)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0)
ioctl$BLKPG(0xffffffffffffffff, 0x40104d14, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0})
r1 = socket(0x10, 0x80002, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f0000000000)={'wlan0\x00'})
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f00000004c0)={0x2, 0xfffc, @loopback}, 0x10)
getsockname$packet(r2, 0x0, &(0x7f00000006c0))
openat$null(0xffffff9c, &(0x7f0000000040), 0xa0c02, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
socket$tipc(0x1e, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xb635773f05ebbee7, 0x8031, r4, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')

2m56.746080166s ago: executing program 32 (id=22):
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008009)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0)
ioctl$BLKPG(0xffffffffffffffff, 0x40104d14, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0})
r1 = socket(0x10, 0x80002, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f0000000000)={'wlan0\x00'})
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f00000004c0)={0x2, 0xfffc, @loopback}, 0x10)
getsockname$packet(r2, 0x0, &(0x7f00000006c0))
openat$null(0xffffff9c, &(0x7f0000000040), 0xa0c02, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
socket$tipc(0x1e, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xb635773f05ebbee7, 0x8031, r4, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')

2m38.419744167s ago: executing program 0 (id=63):
r0 = openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x6, 0x0)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040))
r1 = socket$unix(0x1, 0x5, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000440)=0xe4)
r3 = getegid()
fstat(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0xee00, <r5=>0x0}}, './file0\x00'})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000006c0)={0x26adc62b, 0x5, {}, {<r6=>0x0}, 0x9, 0x2})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000700)={0x0, 0x10, {<r7=>0xffffffffffffffff}, {0xffffffffffffffff}, 0x0, 0x9a})
read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020, 0x0, 0x0, <r8=>0x0}, 0x2020)
statx(0xffffffffffffffff, &(0x7f0000002780)='./file0\x00', 0x6000, 0x80, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000002b00)={0x0, 0x80000, <r10=>0xffffffffffffffff})
r11 = getpgrp(0xffffffffffffffff)
statx(0xffffffffffffffff, &(0x7f0000002b40)='./file0\x00', 0x1000, 0x100, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
getgroups(0xa, &(0x7f0000002c80)=[0xee01, 0x0, 0xee00, 0xee00, 0xee00, 0xee00, <r13=>0x0, 0xee01, 0xee00, 0x0])
r14 = gettid()
getresuid(&(0x7f0000002cc0)=<r15=>0x0, &(0x7f0000002d00), &(0x7f0000002d40))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002d80)={{0x1, 0x1, 0x18, r0, {0xee01, <r16=>0xee00}}, './file0\x00'})
r17 = syz_clone(0xc000100, &(0x7f0000002dc0)="cda4c6cf1a1102400ef1175764f2671e30de6bb40b052b50f4fdee54db5fd4c3d533cdf1326ea52e8418f1634725c400b61b7a244215c6299bfdace850d8a5d5bf7e4288b1989e057b0659b63ce8eef973cad00afd352b056831bd08d9141498d3ead07dbf12fd15278f122996d6ef3d477664a74fd5024a6993e7be33402059759b859a99a17099d25abaa154d115f2c5ea681254bea163513cef19828b0e650f2fe97b0f", 0xa5, &(0x7f0000002e80), &(0x7f0000002ec0), &(0x7f0000002f00)="babe6bdbdd3fb7bbd3157962e8d8baf0c964ebbdd7f7378ea87b4b890d84f89971a684072bdb5804face768a53147d8186850265a97a1a9668bdffe84ef5b926a261cdee4ef63dcf0b29b01baff861c734fbea8536219eca1f5bcc508c04dd1c03ee785da15ff99a29279ef5341da3bec573f9bfec3d9fb5930ded2767604ec8bc8f8ac1e8fff2a214d2001661b875a24d9e8225951efbe59d4c0868242d3f32436a36ae436fb229c646aaf1a37b0010360f110d990841")
read$FUSE(0xffffffffffffffff, &(0x7f0000002fc0)={0x2020, 0x0, 0x0, <r18=>0x0}, 0x2020)
r19 = getgid()
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000005000)=<r20=>0x0)
lstat(&(0x7f0000005040)='./file0\x00', &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, <r21=>0x0})
statx(0xffffffffffffffff, &(0x7f0000005100)='./file0\x00', 0x4000, 0x8, &(0x7f0000005140)={0x0, 0x0, 0x0, 0x0, 0x0, <r22=>0x0})
r23 = syz_open_dev$vivid(&(0x7f0000005240), 0x3, 0x2)
sendmmsg$unix(r1, &(0x7f0000005380)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000100)="97a54895cb892684f4036a6683d8438caf7c95e86569e3175502b6396bed0e37feebd9fc1496420a41b5d16cd9c6273129eaf71bc9bed007902446051b3f4ac401ed12a2d8e3ddb636b25752c1097e4195c0ec98f1d33962248bf3c6cf822db513ab5362206ab35da7385abcb4f0d8227a5a65810d2c2a4c8239bef65bb7cebed22e5f96b2530db5ee881f43f017d6735cba5de824f3819871c4b9ac340ae24acbbd27e534aaa05651833ff7ba869e3af52d658e129f6b0b1833178a29f0ddecb321111c1dff8f8f2a8d35f142e627c2a7ead9f84f3f0ceeb862ab2829f9", 0xde}, {&(0x7f0000000200)="3d93b3b25a9ab3f2d010d6b619f1ea01ed4e6f018fe0bb23b1e24adb9331de6371ab82827477ccb578ec97fe2fe42c94f1070a674d53eb5154ed11982d873e022ebb3d6b76d4bd93579ca3d00e49d317b1472f6c95141ed698eeabb8035e047c322a44bb635924fe6740f5fda73d3e54cc1769e2fdb2415473c624de1017d5671a7527cca32d37271bf71e90f316c0758c3a150a66e0356a0038bca91678a0404ebe1215a72c6ca0201172f8b78268d105d72c14df235b6a0bf00b9b1399c597de2e8fce0c847599c080a722ff42ad5ed5ae5d86366432a34df6", 0xda}], 0x2, &(0x7f0000000480)=[@cred={{0x18, 0x1, 0x2, {0x0, r2, r3}}}], 0x18, 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)="598886fdb26b9d01b48cfc145d61000aea1ee2c06d715acf080920847f6e22f5f798bbffb4b882bba29e72d4f334487ea6a0543a57", 0x35}, {&(0x7f0000000500)="3cc33371ebf9ee93c35e47a7f2ce94522f0d93662f82820f9393793635d971254433d00f47bbe99bc61e50b73e5a7232994b9b819cbf86d4e49c62e2f20881a744bfd94afd219cc652fd02da91b0bb8239de54630b9f2a15ac4f894fac4d7022eb3b6d1183d147a28b376a87d0e6aebc90e7262db2437c8356e3a7af0ff295590dc15db21519552e8583761f63076fa8018c864f294fb45658b137cec739930b6bfe0a", 0xa3}], 0x2, &(0x7f00000028c0)=[@cred={{0x18, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x18, 0x1, 0x2, {0x0, r6}}}, @cred={{0x18, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x10, 0x1, 0x1, [r0]}}], 0x58, 0x40884}}, {{&(0x7f0000002940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002ac0)=[{&(0x7f00000029c0)="6b46bbdae72514e1d5c4d4b57b26ea2a0bad23d1dd23d5ef82d1506d4d89adc233eacdd4e63bc22cefbc48fbab43c3903f96c4f9aa1743400f2ae293c74234a86ffd0ca4bab4c0d94b514caa08fc1d7d409ab0978762502070eb7261f34e78980a9506405205dbafe63094e5c8498454edc7540faa7321dd753ffaa0def4f00c85653c7a6355a51e8e2d5b9f7455a16d26d3e63f07cea510b8c178fe29564f0b0a6ed220d7d9da1418d282bc5c8e3a9d2e0587f279d1f2c4defc515755c365a08e", 0xc1}], 0x1, &(0x7f00000052c0)=[@rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r10]}}, @cred={{0x18, 0x1, 0x2, {r11, r12, r13}}}, @cred={{0x18, 0x1, 0x2, {r14, r15, r16}}}, @cred={{0x18, 0x1, 0x2, {r17, r18, r19}}}, @cred={{0x18, 0x1, 0x2, {r20, r21, r22}}}, @rights={{0x20, 0x1, 0x1, [r0, r23, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0, r0]}}], 0xbc, 0x4000011}}], 0x3, 0x80)

2m38.231401227s ago: executing program 0 (id=55):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100))
recvmmsg(r0, &(0x7f0000004340)=[{{&(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1, &(0x7f0000000580)=""/8, 0x8}, 0x5d95}, {{&(0x7f00000006c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000001800)=""/211, 0xd3}, {&(0x7f0000001900)=""/89, 0x59}, {&(0x7f0000001980)=""/85, 0x55}, {&(0x7f0000001a00)=""/131, 0x83}, {&(0x7f0000001ac0)=""/187, 0xbb}, {&(0x7f0000001b80)=""/247, 0xf7}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/141, 0x8d}], 0x9, &(0x7f0000003100)=""/4083, 0xff3}, 0x6}, {{&(0x7f0000001dc0)=@xdp, 0x80, &(0x7f00000042c0)=[{&(0x7f0000001e40)=""/122, 0x7a}, {&(0x7f0000001ec0)=""/91, 0x5b}, {&(0x7f0000001f40)=""/175, 0xaf}, {&(0x7f0000004100)=""/174, 0xae}, {&(0x7f0000003040)=""/119, 0x77}, {&(0x7f00000041c0)=""/87, 0x57}, {&(0x7f0000004240)=""/84, 0x54}], 0x7, &(0x7f0000004300)=""/40, 0x28}}], 0x3, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x0)
r3 = socket(0x1e, 0x4, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000480)={'bridge_slave_1\x00', &(0x7f0000000440)=@ethtool_ts_info})
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c)
r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad7, 0x1, 0x3}, &(0x7f0000000040), &(0x7f0000000280))
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@ifindex, 0xffffffffffffffff, 0x15, 0x949264e8eff316a5, 0xffffffffffffffff, @void, @void, @void, @value=0xffffffffffffffff}, 0x20)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
r7 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0xc4bc, 0x10100, 0x0, 0xbe}, &(0x7f0000002000)=<r8=>0x0, &(0x7f0000000000)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
io_uring_enter(r7, 0x48eb, 0x1158, 0x2, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)={0xfffffeff})
openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
close(r6)
io_uring_enter(r4, 0x1f85, 0x40110a, 0x4d, 0x0, 0xa6)
recvmmsg$unix(r3, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/156, 0x9c}], 0x1}}], 0x2, 0x40000000, 0x0)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2m36.771485205s ago: executing program 0 (id=60):
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10004400}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000001100)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8}, 0x94)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x5)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x110, 0xffffffffffffffff, 0x75b08000)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000340), 0x101302, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x1e)
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x83)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000002c0))
read$dsp(r2, &(0x7f00000001c0)=""/95, 0x5f)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x7101})
socket$netlink(0x10, 0x3, 0x4)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001440)={0x38, 0xb, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008041}, 0x8190)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB])
chdir(&(0x7f0000000300)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0)

2m33.640190758s ago: executing program 0 (id=74):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/64, 0x40, 0x1, &(0x7f0000000280)=""/242, 0xf2}, &(0x7f00000001c0)=0x40)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r1 = syz_socket_connect_nvme_tcp()
r2 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0x40a45323, &(0x7f00000000c0)={{0x80}, 'port1\x00'})
getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000380), &(0x7f00000003c0)=0xc)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x38, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x84d}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x337}]}]}, 0x38}}, 0x0)
unshare(0x22020000)

2m33.346010209s ago: executing program 0 (id=76):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e24, @remote}], 0x10)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0))
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="910720080000000080000000", @ANYBLOB="48f4c4d7d328d5a43d726027bfd0a2533479478dbdd98bac1763388a3919b27dc0f9f270e1041fc756164b0c5f2101f4faf035aa9f0d7dbffb2ab52dc3087d92a2f4e9d6fd647f265aaf00654f098f964ae8df8b7758ba53cffb9d268719ca3f80ac1a6157e4fb7072f647063561215593afe98902f6231104f9fc1476af0635fab936ee9437cc43943a2dfa2ada76c90b49193806e68d9ed1f4c27082600c1601f37a6e0bb4b255940e7e0b1eb3a2d2912fa67554c65482f6b67a8c2586107c6a91b82836e3764d3a5ffdab11ecd778ae830118e9bc1ca39efe426f83ad019fc30eaf2115feacfcf52bf522da", @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRESDEC], 0xe)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000faffff0d7b8af0ff00000000bfa10000000000000701000000feffffbfa4000000", @ANYRES16=r1], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x5dcf0efdfdc212ab, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x1)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x40c5}, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_io_uring_setup(0x110, 0x0, 0x0, 0x0)
r6 = msgget(0x2, 0x624)
msgctl$IPC_RMID(r6, 0x0)
r7 = syz_open_dev$media(&(0x7f0000000080), 0x8, 0x88000)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x16, &(0x7f0000000000)=0xffff, 0x4)
sendmmsg$inet6(r8, &(0x7f0000000a00)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000500)={0xa, 0x4e23, 0x4, @remote, 0x3}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000540)="6c2a3ef98bf22667e6c0f8353f3b781416d3010a6ef8b0f39894177e558f3d82bdb64ced9c11943d572cebb1221d85e7f2e20d7d57146d36e678de1bb16126af467da5ffe01226361d6a3936826e043c38d575d615472d0b843421c7fca569e087ecfea74d43c0b01c955d48f3e9b09a6ec5598c1e6f7c7968b603e95e44c80baca2735fdaa0496949d0bdb538c960566b525af743d6", 0x96}, {&(0x7f0000000880)="36dbf27adecdad24c3b75dd705d4ca270de850cbc3fdea6a298e8c9b66fdb2ef9324813fd9a06610df745fe1da3946ade2270a9a878ede7665c59c6ea643d8dd391c83c8b4922cb2f1492b1828cd6806edefd4db3cd7938d48afa900e3b11d010faac60110da39a887493f9ace9a6764cd32e12143e4cb2c29f93710a9a2069725138da2db976668054419521d64d541c3ba95e2df0c47cd271a24b5cd60952256a3876d773547eb3e6912f05137fe1f0e549a19ff409314b45c80c20e6ead15a02cb3b5a314f638247d1770bdd362020195b6144ab8801ff7c91511d66d29935025d8d9f104", 0xe6}, {&(0x7f00000007c0)="f5134b55f0a44df4d01b262effce58f22eb68a73972c89b613ab0d5ba1dee847f82f2e07550e058cddedac71dbb7b5a9fff6248b0df37868cbd7472e442d0c2a0569cde7d488db62285d00314d3bf3e31b42b487b387a35605ef767684d684bb54089d35825b002ce26821cf63", 0x6d}], 0x3, &(0x7f0000000a40)=[@pktinfo={{0x20, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r4}}}, @dontfrag={{0x10, 0x29, 0x3e, 0x9c}}, @dontfrag={{0x10, 0x29, 0x3e, 0x7}}, @dontfrag={{0x10, 0x29, 0x3e, 0x7}}], 0x50}}], 0x2, 0xc814)

2m32.512624421s ago: executing program 0 (id=77):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x28, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)

2m31.957237938s ago: executing program 33 (id=77):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x28, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)

30.309463555s ago: executing program 4 (id=703):
socket(0x1d, 0x2, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRESHEX], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001400)={0x200, r2, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0xbb62]}, @NL80211_ATTR_FRAME={0x1dc, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @device_b, @from_mac, {0x3, 0x400}}, 0xeb, @random=0x2, 0x200, @val, @void, @val={0x3, 0x1, 0xb3}, @void, @val={0x6, 0x2, 0x6}, @val={0x5, 0x3, {0x7, 0xab}}, @void, @val={0x2a, 0x1, {0x1}}, @void, @val={0x2d, 0x1a, {0x80, 0x3, 0x7, 0x0, {0xebc, 0x6, 0x0, 0x140, 0x0, 0x1}, 0x400, 0x6, 0x3}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x2b, "070d81f9f51ffaba49296128b44ccbe31a0102b522acccb1f1fb0c57ed56fdbe0cf72d72d84a3b71ef1477"}, {0xdd, 0x98, "4e3e195e65ecfc56f460b7ade6dc879a745ead2a674006c166d2d143afd8ad29fc7243294dcf8e582be6063b4f2dce07f7be2efb3e5be3132a52177fcdc90664c4c879888268aec6cd686b60e98daa3ef4e72d04e65b6f523eec32c31950201cadc49915c021f9aa1c3584404c84bc2d985195a1b1bf7aba848422894508dda7ac5028c483a8efedf19dc61759b718a66055c5a8de58a67c"}, {0xdd, 0xb6, "bc1ef2837a52e6397db3e967cc0797fe9b2eb73399fbd1631a663aeca974af52b93029f222dd24623f0dc4d68ec75033fb9523d985a4460a2875315f6349924e81582e4207a7ec34bd44cd43d09a2d54b96d173bd0e98bab4bc90cdb9666011c7081b4793d95f7bd3b211a0b6c74e3cdd7cf351db94380359917be8331d83594621c9ac989854b54cc8a7cb21a2f0c2440f105de944afc0430ee76006da906928d3741988d906b2ddc1ac6c28d35e11d15342ef03aef"}]}}]}, 0x200}, 0x1, 0x0, 0x0, 0x800}, 0x80)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r3, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1, 0x400000}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4)
write(r3, &(0x7f0000000000)='\"', 0x1)
recvmmsg(r3, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
r5 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0xff60)
listen(r5, 0x0)
r6 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r6, &(0x7f0000000080), 0x10)

29.437827342s ago: executing program 4 (id=711):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x5, 0x2, 0x3, 0x4, 0x0, 0xfffffff6, 0x8, 0x5}}}}]}, 0x58}}, 0x20040084) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) (async)
unshare(0x60000) (async)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async, rerun: 64)
recvmsg$can_bcm(r1, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x10002) (async, rerun: 64)
r2 = epoll_create(0x84)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000280)={0x7}) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="bc1b0000400000017c00000400c2800c00018006000000843b000097130280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054)

29.36720663s ago: executing program 4 (id=712):
r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x11, 0x1, 0x2ca}, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000300))
io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000180)={0x80, 0x6}, 0x1)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7})
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456})
io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1d0000000406050205000100070000000000000000000000000000008d50ca57dc3aba6cb86876c7cb0824861755fba9a9b9"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_SIOCOUTQ(r7, 0x5411, &(0x7f0000000140))
setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000100), 0x4)
r8 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @broadcast}, 0xc)
r9 = fcntl$dupfd(r6, 0x406, r6)
write$cgroup_pid(r9, 0x0, 0x0)

29.335949476s ago: executing program 4 (id=713):
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)

29.228407251s ago: executing program 4 (id=717):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r2=>0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x8efe, 0x1, 0x4, 0x100800, 0xc0, 0x1, 0x2000067, 0x401, r2}, 0x20)

28.989341795s ago: executing program 4 (id=719):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={&(0x7f0000000040)="164a0087b141ac5f18616577de26570e2c958ede898d13916e70f45cd5f69344ac2880760b5777c98712d8c7a7f5dc52f1be7686832c279601ba951e282024691b65c57d2377dc16a3be2b6dd4bf7bf497a335d3ee35eed8c2ca651af725c76f6d053f343199", &(0x7f0000000140)=""/32, &(0x7f0000000280)="f1b18a55f163b729d0d30234e779fd4ee62bd081ba6b4d07652b2c91625b66a143a2c8a4fb9fd2f607e3165303ab8631a3c7e2d78773ca0be533c826636017e14d82c872b221cfb483365bec3f71ecb417aae0cdcedfef601e8a372ac6ead393124ae3079b244ee112da1c18560dcaaa230a6bbae3eea26b1d3faec675a283961d82c3168492e73d253f41872ed200ba5d1f41cf432f6790d2a73b502b32881f27a3f9ed1decebfbf95fc9b829c46f1c04ea90723a2bd9c98d100844f9e163877bb8869623813242e553b89427401c9d224a0af4a387a4ce70606c", &(0x7f0000000180)="8d3ec70239e29fca9127bede0a4a15a673fa61ad1b652d473d016e8f0d9bce0f4c5ca8a6dfe3ffb6b1325eff4c132d437f1e82e9d6e3999bf821352793b0299bb25a05970d4401c66b56cdf19eeba210de94d243829cec9ae07a66bd5afedf3a13311a1bead9df641b0b2e64f4d178fdab19c707d4653103561d889e1fcf0775df8f255025af", 0x4, 0xffffffffffffffff, 0x4}, 0x38)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket(0x2, 0xa, 0x2)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000100)={@val={0x800e, 0x6005}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x4500, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x4, 0x100}}}}}}}}, 0x36)

28.94349481s ago: executing program 34 (id=719):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={&(0x7f0000000040)="164a0087b141ac5f18616577de26570e2c958ede898d13916e70f45cd5f69344ac2880760b5777c98712d8c7a7f5dc52f1be7686832c279601ba951e282024691b65c57d2377dc16a3be2b6dd4bf7bf497a335d3ee35eed8c2ca651af725c76f6d053f343199", &(0x7f0000000140)=""/32, &(0x7f0000000280)="f1b18a55f163b729d0d30234e779fd4ee62bd081ba6b4d07652b2c91625b66a143a2c8a4fb9fd2f607e3165303ab8631a3c7e2d78773ca0be533c826636017e14d82c872b221cfb483365bec3f71ecb417aae0cdcedfef601e8a372ac6ead393124ae3079b244ee112da1c18560dcaaa230a6bbae3eea26b1d3faec675a283961d82c3168492e73d253f41872ed200ba5d1f41cf432f6790d2a73b502b32881f27a3f9ed1decebfbf95fc9b829c46f1c04ea90723a2bd9c98d100844f9e163877bb8869623813242e553b89427401c9d224a0af4a387a4ce70606c", &(0x7f0000000180)="8d3ec70239e29fca9127bede0a4a15a673fa61ad1b652d473d016e8f0d9bce0f4c5ca8a6dfe3ffb6b1325eff4c132d437f1e82e9d6e3999bf821352793b0299bb25a05970d4401c66b56cdf19eeba210de94d243829cec9ae07a66bd5afedf3a13311a1bead9df641b0b2e64f4d178fdab19c707d4653103561d889e1fcf0775df8f255025af", 0x4, 0xffffffffffffffff, 0x4}, 0x38)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket(0x2, 0xa, 0x2)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000100)={@val={0x800e, 0x6005}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x4500, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x4, 0x100}}}}}}}}, 0x36)

6.20005051s ago: executing program 3 (id=897):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0)

6.119590401s ago: executing program 3 (id=899):
shmget$private(0x0, 0x3000, 0xfcf774859b375a8c, &(0x7f0000ffd000/0x3000)=nil) (async)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
r2 = openat$cachefiles(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
accept4$tipc(r2, &(0x7f0000000100)=@name, &(0x7f00000001c0)=0x10, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) (async)
syz_emit_ethernet(0x4e, &(0x7f00000007c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "b341af", 0x18, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, {[@routing={0xff, 0x2, 0x7, 0x8, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}]}}}}}, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) (async)
write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112006558"], 0xfdef)

6.06969372s ago: executing program 3 (id=900):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000380)=0x9, 0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001a0001000000c80e000000000000000000000000000000001400010000000000000000000000ffffe0000001fae03a4fcbcbc8eac4f4c55d4115d1a0f345c30cf3d10320e67505ecffcc91a559b505c0644d1138bf028fe197a2c2fb349603ad596b41892dc337f0"], 0x30}}, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x80009, @mcast1, 0x2005}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'syztnl1\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x47, 0x80, 0x51, 0xd5, {{0x1a, 0x4, 0x1, 0x6, 0x68, 0x67, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp={0x44, 0x1c, 0x9f, 0x0, 0x6, [0x200, 0x7, 0x8c81, 0x1, 0x3a, 0xa12]}, @timestamp={0x44, 0x1c, 0x7d, 0x0, 0x1, [0xfffffffe, 0x56, 0x6, 0x2, 0x4, 0x1000]}, @noop, @end, @cipso={0x86, 0x6, 0x3}, @ssrr={0x89, 0x13, 0xb4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2, @broadcast]}]}}}}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000002200)}, 0x2)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9, 0x4}, 0x10)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f", 0x15}], 0x1}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r3 = gettid()
fcntl$setflags(r1, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3)
fcntl$setsig(r4, 0xa, 0x12)
dup2(r4, r5)
ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000040))
fcntl$setown(r4, 0x8, r3)
tkill(r3, 0x13)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r6, 0x25, &(0x7f0000000000)={0x1})
socket(0x3, 0x4, 0x5)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)

3.441045236s ago: executing program 2 (id=920):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000140)=@phonet, 0x80, 0x0}, 0x9}], 0x1, 0xa022, 0x0)
sendmsg$802154_dgram(r0, 0x0, 0x0)

3.051864477s ago: executing program 3 (id=924):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mount$9p_xen(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0), 0x4, &(0x7f0000001540)=ANY=[@ANYBLOB="7472616e733d78656e2c6d73697a653d30783830303030cff03043303030303030302c00e13755650aa4a852bba3a25ab3c92eab6e80000000b834ca465efe585fc090421c2c"])
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r1, 0x0, 0x4004)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
write$nbd(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000000000000000040000900000082b0cfc4337965941538be09000000000000000000007400a391793ba70d0000000000fdf700000000baffda6e775d6a"], 0x40)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0)
io_uring_enter(r4, 0x1b46, 0x532, 0xf, &(0x7f0000000280)={[0x8, 0x7]}, 0x8)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000002000000010000002300000000000000", @ANYRES32=0x1, @ANYBLOB="03000000000000000000000000e9ff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2.538069746s ago: executing program 2 (id=926):
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f00000005c0)={0xfc2, 0x8})
connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58)
r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2b423, 0x0, 0x5, 0x199}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000000)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="180200008677000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000c0000008500000006000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xe}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f00000004c0)="0000000000000081d5c7f80c857d", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r4, 0x0, 0x0, 0x0, 0x80800})
io_uring_enter(r5, 0x3516, 0x3e44, 0x8, 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@fallback=r10, 0x35, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], <r11=>0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=r11], 0x20)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0b000000000000006f1d6928988cfc05157a3c06069d2efa87a269e7402d0ecba7ebceacb9dee0ba823eaeab1fb09d6b07c45d23b12d614d49bd7b6cf34663c75bd1339fe8be5259c24d615a9aaaef88446095716ca8179e9e6ac3bf42e50c9baafae4ef69e823dca4e8f9dc07eb274545994ce1140f1c1511ec61", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=r11], 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYRES32=<r12=>0xffffffffffffffff, @ANYBLOB="1900edff01000000e11b8c67d5bebe589b6308aa0b2fea00000000", @ANYRES32, @ANYBLOB, @ANYRES64=r11], 0x20)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32=r9, @ANYBLOB="0d00000018000000", @ANYBLOB="84f2f6772866a8106b934ffd020062deb0f7", @ANYRESOCT=r0, @ANYBLOB, @ANYRES64=r11], 0x20)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./bus\x00', 0x0, 0x10}, 0x18)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)=ANY=[@ANYRES32=r12, @ANYRES32, @ANYRES8, @ANYRESDEC, @ANYBLOB, @ANYRES64=r11], 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x9, @val=@netkit={@void, @value, @void, @void, r11}}, 0x1c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r3, 0x58, &(0x7f0000000400)}, 0x10)

1.769632891s ago: executing program 6 (id=930):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpgid(0x0)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=<r4=>0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
syz_io_uring_submit(r4, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f00000000c0)={0x100000, 0x302000, 0x8})
syz_emit_ethernet(0x0, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x8)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r7, 0x4020aed2, &(0x7f0000000000)={0xffff1000, 0x13800, 0x8})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETSTEERINGEBPF(r8, 0x400454da, &(0x7f0000000000))
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)

1.664508856s ago: executing program 3 (id=932):
syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002)
openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x397)
lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000540), 0x4, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = socket$inet6(0xa, 0x1, 0x8010000000000084)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x9de}}, './file0\x00'})
socket(0x10, 0x3, 0x0)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0xfcff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0)
r6 = eventfd2(0x0, 0x80800)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0xfffffffffffffff9, 0x0, 0x1, r6})
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
write$evdev(r0, &(0x7f0000000040), 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)

1.662736849s ago: executing program 5 (id=933):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x1, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x3, 0x3, 0x0, 0xb, 0x4}], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28}, 0x94)

1.661851998s ago: executing program 5 (id=934):
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0)
mount$cgroup2(0x0, &(0x7f0000000600)='./bus\x00', &(0x7f0000000700), 0x8a4a2, &(0x7f0000000000)={[{@pids_localevents}, {}]})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, 0x0, 0xc000)
r3 = socket(0x10, 0x803, 0x0)
socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r3, 0x0, 0x2000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x66, &(0x7f00000001c0)=""/102}]})
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, &(0x7f0000000340)={{0x8, 0x6, 0x0, 0x0, '\x00', 0xfffffffd}, 0x0, [0x0, 0x0, 0xffffffff, 0x0, 0x4000000, 0x100001, 0x7, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x80000004, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8d5e08d4, 0x5, 0x0, 0x0, 0xe4, 0x0, 0x9, 0x3, 0x800, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0xa, 0x1, 0xcdc, 0x0, 0xffffffff, 0x600000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x2, 0x0, 0x1559, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x8, 0x4, 0x800, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0x80000000, 0x400000, 0x6, 0xc13, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x80000000, 0xfffffffd, 0x0, 0x1, 0x800001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40000000, 0x2cbb, 0x2, 0x7b1ae8f, 0x3, 0x0, 0x80000005, 0x0, 0x3, 0x2d6, 0x0, 0x6, 0x100000, 0x0, 0x0, 0x4, 0x1, 0x2002001, 0x0, 0x0, 0xd686, 0x0, 0x3ff, 0x40000000, 0xfffffffb]})

1.568117423s ago: executing program 2 (id=935):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2b030000008002001c00128009000100626f6e64000000000c00028008001f000000000014003500626f6e6430"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
openat$ubi_ctrl(0xffffff9c, &(0x7f0000000280), 0x264002, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d0000000000000000170000000c007f00", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x40, r2, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3bbabeb64c001e42}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x800)

1.534284728s ago: executing program 5 (id=936):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000190011010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0)

1.521520693s ago: executing program 2 (id=937):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x60642, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x11e41e7a, 0x8, 0xa0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x18, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x8000, 0x0, 0x0, 0x20}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x14, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket(0x1, 0x1, 0x0)
ioctl$SIOCGETSGCNT(r1, 0x89a0, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010125})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f0000000340), 0x1, 0x2)
ptrace(0x10, 0x0)
r4 = socket$packet(0x11, 0x1, 0x300)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
fcntl$setlease(r6, 0x400, 0x1)
fcntl$setlease(r6, 0x400, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x20000000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000280))

1.450184274s ago: executing program 5 (id=938):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x18})
io_uring_enter(r0, 0x7b6d, 0x2, 0x0, 0x0, 0x0) (fail_nth: 7)

1.449972531s ago: executing program 5 (id=939):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x60642, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x11e41e7a, 0x8, 0xa0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x18, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x8000, 0x0, 0x0, 0x20}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x14, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket(0x1, 0x1, 0x0)
ioctl$SIOCGETSGCNT(r1, 0x89a0, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010125})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f0000000340), 0x1, 0x2)
ptrace(0x10, 0x0)
socket$packet(0x11, 0x1, 0x300)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
fcntl$setlease(r5, 0x400, 0x1)
fcntl$setlease(r5, 0x400, 0x1)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x20000000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

692.540141ms ago: executing program 6 (id=940):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480"], 0xa4}}, 0x0)
r1 = syz_io_uring_complete(0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r2, &(0x7f0000000000)="b3a24a616ac1228b1e84cc44bd0c730184", &(0x7f0000000180)=""/4096, 0x4}, 0x1c)

654.165106ms ago: executing program 3 (id=941):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2, 0x7}}, {{0xa, 0x0, 0x6df, @empty, 0x5}}}, 0x108)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
syslog(0x3, &(0x7f0000000700)=""/231, 0xe7)
socket$netlink(0x10, 0x3, 0x4) (async)
r5 = socket$netlink(0x10, 0x3, 0x4)
writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000", 0x50}, {&(0x7f00000001c0)="ee641681c41fd678", 0x8}], 0x2) (async)
writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000", 0x50}, {&(0x7f00000001c0)="ee641681c41fd678", 0x8}], 0x2)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001000010800000000fcff000000000000", @ANYRES32=0x0, @ANYRES64=r1], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0)
close(0x3)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
write$binfmt_aout(r6, &(0x7f0000000300)=ANY=[], 0xff2e) (async)
write$binfmt_aout(r6, &(0x7f0000000300)=ANY=[], 0xff2e)
openat$vcsa(0xffffff9c, &(0x7f00000000c0), 0x40100, 0x0) (async)
r7 = openat$vcsa(0xffffff9c, &(0x7f00000000c0), 0x40100, 0x0)
getsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000140), &(0x7f00000001c0)=0x4)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000580)={0x0, 0xfffffff8, 0x3, 0xd, 0x1b, "00000000000000000000ffff00"})
ioctl$TCSETS(r6, 0x5402, &(0x7f0000000080)={0x9, 0xfffffffd, 0x0, 0x40, 0x2, "e30cdb3ef8f2a0666fb242e1fff4a5905446ce"})

595.54055ms ago: executing program 2 (id=942):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r3})

593.384088ms ago: executing program 6 (id=943):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000004240)=0x7, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1, 0x700}, 0x1c)

380.578656ms ago: executing program 5 (id=944):
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f00000005c0)={0xfc2, 0x8})
connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58)
r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2b423, 0x0, 0x5, 0x199}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000000)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="180200008677000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000c0000008500000006000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xe}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f00000004c0)="0000000000000081d5c7f80c857d", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r4, 0x0, 0x0, 0x0, 0x80800})
io_uring_enter(r5, 0x3516, 0x3e44, 0x8, 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@fallback=r10, 0x35, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], <r11=>0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=r11], 0x20)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0b000000000000006f1d6928988cfc05157a3c06069d2efa87a269e7402d0ecba7ebceacb9dee0ba823eaeab1fb09d6b07c45d23b12d614d49bd7b6cf34663c75bd1339fe8be5259c24d615a9aaaef88446095716ca8179e9e6ac3bf42e50c9baafae4ef69e823dca4e8f9dc07eb274545994ce1140f1c1511ec61", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=r11], 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYRES32=<r12=>0xffffffffffffffff, @ANYBLOB="1900edff01000000e11b8c67d5bebe589b6308aa0b2fea00000000", @ANYRES32, @ANYBLOB, @ANYRES64=r11], 0x20)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32=r9, @ANYBLOB="0d00000018000000", @ANYBLOB="84f2f6772866a8106b934ffd020062deb0f7", @ANYRESOCT=r0, @ANYBLOB, @ANYRES64=r11], 0x20)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./bus\x00', 0x0, 0x10}, 0x18)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)=ANY=[@ANYRES32=r12, @ANYRES32, @ANYRES8, @ANYRESDEC, @ANYBLOB, @ANYRES64=r11], 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x9, @val=@netkit={@void, @value, @void, @void, r11}}, 0x1c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r3, 0x58, &(0x7f0000000400)}, 0x10)

380.350527ms ago: executing program 6 (id=945):
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0)
mount$cgroup2(0x0, &(0x7f0000000600)='./bus\x00', &(0x7f0000000700), 0x8a4a2, &(0x7f0000000000)={[{@pids_localevents}, {}]})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, 0x0, 0xc000)
socket(0x10, 0x803, 0x0)
socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/57, 0xd000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x66, &(0x7f00000001c0)=""/102}]})
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, &(0x7f0000000340)={{0x8, 0x6, 0x0, 0x0, '\x00', 0xfffffffd}, 0x0, [0x0, 0x0, 0xffffffff, 0x0, 0x4000000, 0x100001, 0x7, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x80000004, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8d5e08d4, 0x5, 0x0, 0x0, 0xe4, 0x0, 0x9, 0x3, 0x800, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0xa, 0x1, 0xcdc, 0x0, 0xffffffff, 0x600000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x2, 0x0, 0x1559, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x8, 0x4, 0x800, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0x80000000, 0x400000, 0x6, 0xc13, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x80000000, 0xfffffffd, 0x0, 0x1, 0x800001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40000000, 0x2cbb, 0x2, 0x7b1ae8f, 0x3, 0x0, 0x80000005, 0x0, 0x3, 0x2d6, 0x0, 0x6, 0x100000, 0x0, 0x0, 0x4, 0x1, 0x2002001, 0x0, 0x0, 0xd686, 0x0, 0x3ff, 0x40000000, 0xfffffffb]})

380.284874ms ago: executing program 2 (id=946):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={<r2=>0xffffffffffffffff}, 0x111, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {r2, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1={0xfc, 0x1, '\x00', 0x2}, 0x9}, @in6={0xa, 0x4e22, 0x2, @local, 0x2}}}, 0x118)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x3, r2, 0x30, 0x1, @in6={0xa, 0x4e21, 0x0, @empty, 0x1}}}, 0xa0)
write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)

339.242879ms ago: executing program 6 (id=947):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x1d9, 0x0, 0x2a34988d}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0xfffffffffffffc89, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 6 (id=948):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00')
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r0, @ANYRES32=r2], 0x44}}, 0x0)

kernel console output (not intermixed with test programs):

000000000
[  176.414604][ T6871] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  176.414625][ T6871]  </TASK>
[  176.887312][   T40] audit: type=1400 audit(1770107338.677:2): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6881 comm="syz.5.150"
[  177.012132][ T6891] FAULT_INJECTION: forcing a failure.
[  177.012132][ T6891] name failslab, interval 1, probability 0, space 0, times 0
[  177.021241][ T6891] CPU: 3 UID: 0 PID: 6891 Comm: syz.4.151 Not tainted syzkaller #0 PREEMPT(full) 
[  177.021265][ T6891] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  177.021275][ T6891] Call Trace:
[  177.021281][ T6891]  <TASK>
[  177.021288][ T6891]  dump_stack_lvl+0x100/0x190
[  177.021314][ T6891]  should_fail_ex.cold+0x5/0xa
[  177.021340][ T6891]  should_failslab+0xc2/0x120
[  177.021362][ T6891]  kmem_cache_alloc_noprof+0x83/0x780
[  177.021382][ T6891]  ? __kernel_text_address+0xd/0x30
[  177.021407][ T6891]  ? p9_tag_alloc+0x9c/0x860
[  177.021435][ T6891]  ? p9_tag_alloc+0x9c/0x860
[  177.021454][ T6891]  p9_tag_alloc+0x9c/0x860
[  177.021485][ T6891]  ? __pfx_p9_tag_alloc+0x10/0x10
[  177.021510][ T6891]  ? check_irq_usage+0xe5/0x810
[  177.021535][ T6891]  p9_client_prepare_req+0x19b/0x4a0
[  177.021559][ T6891]  ? __pfx_p9_client_prepare_req+0x10/0x10
[  177.021590][ T6891]  p9_client_rpc+0x1c4/0xc80
[  177.021615][ T6891]  ? __pfx_p9_client_rpc+0x10/0x10
[  177.021637][ T6891]  ? idr_alloc_u32+0x22b/0x320
[  177.021659][ T6891]  ? find_held_lock+0x2b/0x80
[  177.021675][ T6891]  ? find_held_lock+0x2b/0x80
[  177.021689][ T6891]  ? p9_fid_create+0x26d/0x460
[  177.021709][ T6891]  ? p9_fid_create+0x26d/0x460
[  177.021729][ T6891]  ? rcu_is_watching+0x12/0xc0
[  177.021750][ T6891]  p9_client_attach+0x153/0x2b0
[  177.021777][ T6891]  ? __pfx_p9_client_attach+0x10/0x10
[  177.021799][ T6891]  ? v9fs_fid_lookup+0x4cb/0xec0
[  177.021831][ T6891]  v9fs_fid_lookup+0x96f/0xec0
[  177.021859][ T6891]  v9fs_vfs_lookup+0x1a1/0x5b0
[  177.021880][ T6891]  ? __pfx_v9fs_vfs_lookup+0x10/0x10
[  177.021901][ T6891]  ? do_raw_spin_unlock+0x145/0x1e0
[  177.021925][ T6891]  ? _raw_spin_unlock+0x28/0x50
[  177.021946][ T6891]  lookup_one_qstr_excl+0x1d1/0x250
[  177.021999][ T6891]  ? mnt_want_write+0x161/0x450
[  177.022022][ T6891]  do_rmdir+0x261/0x560
[  177.022047][ T6891]  ? __pfx_do_rmdir+0x10/0x10
[  177.022080][ T6891]  ? getname_flags.part.0+0x1c5/0x540
[  177.022104][ T6891]  __ia32_sys_rmdir+0xc4/0x110
[  177.022124][ T6891]  __do_fast_syscall_32+0xde/0x660
[  177.022148][ T6891]  do_fast_syscall_32+0x32/0x70
[  177.022191][ T6891]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  177.022214][ T6891] RIP: 0023:0xf742d579
[  177.022227][ T6891] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00
[  177.022242][ T6891] RSP: 002b:00000000f543550c EFLAGS: 00000292 ORIG_RAX: 0000000000000028
[  177.022259][ T6891] RAX: ffffffffffffffda RBX: 0000000080000380 RCX: 0000000000000000
[  177.022269][ T6891] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  177.022278][ T6891] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  177.022287][ T6891] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  177.022296][ T6891] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  177.022318][ T6891]  </TASK>
[  177.351969][ T6889] netlink: 20 bytes leftover after parsing attributes in process `syz.2.153'.
[  178.106796][ T6920] vlan2: entered promiscuous mode
[  178.110029][ T6920] bridge0: entered promiscuous mode
[  179.902605][ T6963] warning: `syz.4.172' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  180.451058][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.5.176'.
[  180.525620][ T6973] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  180.812650][ T6041] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[  180.943555][ T6985] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found
[  180.946442][ T6985] UDF-fs: Scanning with blocksize 2048 failed
[  181.002585][ T6985] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found
[  181.025522][ T6985] UDF-fs: Scanning with blocksize 4096 failed
[  181.073035][ T6041] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  181.076732][ T6041] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  181.092034][ T6041] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  181.136831][ T6041] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.417868][ T6041] usb 10-1: usb_control_msg returned -32
[  181.424571][ T6041] usbtmc 10-1:16.0: can't read capabilities
[  182.920187][ T7010] comedi comedi2: reset error (fatal)
[  183.419651][ T7044] binder: 7037:7044 ioctl 81009431 80000340 returned -22
[  183.515023][  T831] usb 10-1: USB disconnect, device number 2
[  183.778323][ T7059] syzkaller1: entered promiscuous mode
[  183.791439][ T7059] syzkaller1: entered allmulticast mode
[  184.644484][ T7073] process 'syz.5.199' launched '/dev/fd/7' with NULL argv: empty string added
[  184.711804][ T7071] x_tables: duplicate underflow at hook 1
[  184.850231][ T7071] hub 8-0:1.0: USB hub found
[  184.852849][ T7071] hub 8-0:1.0: 1 port detected
[  184.998305][ T7071] capability: warning: `syz.2.194' uses deprecated v2 capabilities in a way that may be insecure
[  185.062334][ T7071] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  186.011339][ T7097] fuse: Bad value for 'fd'
[  186.671425][ T7110] syzkaller1: entered promiscuous mode
[  186.674358][ T7110] syzkaller1: entered allmulticast mode
[  186.697386][ T7109] netlink: 'syz.2.216': attribute type 10 has an invalid length.
[  186.853453][ T7109] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.871685][ T7109] team0: Port device bond0 added
[  187.827449][ T7119] comedi comedi2: reset error (fatal)
[  188.171821][   T53] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  188.177328][ T7143] netlink: 36 bytes leftover after parsing attributes in process `syz.4.225'.
[  188.373529][   T53] usb 10-1: config index 0 descriptor too short (expected 39, got 27)
[  188.407252][   T53] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  188.435369][   T53] usb 10-1: config 0 interface 0 has no altsetting 0
[  188.450497][   T53] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  188.490014][   T53] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  188.507277][   T53] usb 10-1: Product: syz
[  188.537253][   T53] usb 10-1: Manufacturer: syz
[  188.567487][   T53] usb 10-1: SerialNumber: syz
[  188.578285][   T53] usb 10-1: config 0 descriptor??
[  188.596384][   T53] hub 10-1:0.0: bad descriptor, ignoring hub
[  188.601023][   T53] hub 10-1:0.0: probe with driver hub failed with error -5
[  188.612273][   T53] usb 10-1: selecting invalid altsetting 0
[  189.359747][ T7134] usb 10-1: reset high-speed USB device number 3 using dummy_hcd
[  189.679361][ T7134] usb 10-1: device firmware changed
[  189.714344][ T6314] usb 10-1: USB disconnect, device number 3
[  189.834200][ T7156] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.153279][ T7166] netlink: 24 bytes leftover after parsing attributes in process `syz.2.232'.
[  190.358535][ T7156] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.438328][ T6314] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  190.620390][ T6314] usb 10-1: config 0 has no interfaces?
[  190.624412][ T6314] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41
[  190.629776][ T6314] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  190.634151][ T6314] usb 10-1: Product: syz
[  190.635918][ T6314] usb 10-1: Manufacturer: syz
[  190.639916][ T6314] usb 10-1: SerialNumber: syz
[  190.644618][ T6314] usb 10-1: config 0 descriptor??
[  190.650911][ T7156] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.669062][ T7179] Bluetooth: MGMT ver 1.23
[  190.824556][   T40] audit: type=1326 audit(1770107352.627:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.2.238" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[  190.851351][   T40] audit: type=1326 audit(1770107352.627:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.2.238" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[  190.852576][ T6314] usb 10-1: USB disconnect, device number 4
[  190.867421][   T40] audit: type=1326 audit(1770107352.647:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.2.238" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf746d598 code=0x7ffc0000
[  190.876661][   T40] audit: type=1326 audit(1770107352.647:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.2.238" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf746d598 code=0x7ffc0000
[  190.886797][   T40] audit: type=1326 audit(1770107352.647:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.2.238" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf746d598 code=0x7ffc0000
[  190.895228][   T40] audit: type=1326 audit(1770107352.647:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.2.238" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf746d598 code=0x7ffc0000
[  190.907049][   T40] audit: type=1326 audit(1770107352.647:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.2.238" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf746d598 code=0x7ffc0000
[  190.917529][   T40] audit: type=1326 audit(1770107352.647:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.2.238" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf746d598 code=0x7ffc0000
[  190.929725][   T40] audit: type=1326 audit(1770107352.647:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.2.238" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf746d598 code=0x7ffc0000
[  190.938779][   T40] audit: type=1326 audit(1770107352.647:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.2.238" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf746d598 code=0x7ffc0000
[  190.950209][ T7156] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.080986][ T7181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.237'.
[  191.930842][   T46] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  191.953604][   T46] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  191.969555][   T46] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  191.986621][ T1206] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.127057][ T7198] input: syz0 as /devices/virtual/input/input6
[  192.504964][ T7212] 8021q: VLANs not supported on ip_vti0
[  192.540198][  T831] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  192.677560][ T5962] Bluetooth: hci0: command 0x0c1a tx timeout
[  192.682329][ T5959] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  192.704795][  T831] usb 10-1: config index 0 descriptor too short (expected 39, got 27)
[  192.785026][  T831] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  193.404135][  T831] usb 10-1: config 0 interface 0 has no altsetting 0
[  193.424840][  T831] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  193.444895][  T831] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  193.450593][  T831] usb 10-1: Product: syz
[  193.463311][  T831] usb 10-1: Manufacturer: syz
[  193.480114][  T831] usb 10-1: SerialNumber: syz
[  193.484636][  T831] usb 10-1: config 0 descriptor??
[  193.500349][  T831] hub 10-1:0.0: bad descriptor, ignoring hub
[  193.503910][  T831] hub 10-1:0.0: probe with driver hub failed with error -5
[  193.510278][  T831] usb 10-1: selecting invalid altsetting 0
[  193.768405][   T53] usb 10-1: USB disconnect, device number 5
[  193.791504][ T7253] syzkaller1: entered promiscuous mode
[  193.794862][ T7253] syzkaller1: entered allmulticast mode
[  194.307299][   T53] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  194.554538][   T53] usb 10-1: config 0 has no interfaces?
[  194.559455][   T53] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41
[  194.588076][   T53] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  194.600763][   T53] usb 10-1: Product: syz
[  194.602760][   T53] usb 10-1: Manufacturer: syz
[  194.604656][   T53] usb 10-1: SerialNumber: syz
[  194.610836][   T53] usb 10-1: config 0 descriptor??
[  194.664561][ T7277] faux_driver vgem: [drm] Unknown color mode 727; guessing buffer size.
[  194.828353][ T5629] usb 10-1: USB disconnect, device number 6
[  195.818859][ T7280] mmap: syz.5.264 (7280) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  195.937267][ T7290] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  195.944715][ T7290] block device autoloading is deprecated and will be removed.
[  196.138083][ T7298] netlink: 9 bytes leftover after parsing attributes in process `syz.4.273'.
[  196.153455][ T7298] netlink: 9 bytes leftover after parsing attributes in process `syz.4.273'.
[  196.233105][ T7300] netlink: 'syz.2.274': attribute type 1 has an invalid length.
[  196.635129][ T6023] libceph: connect (1)[c::]:6789 error -101
[  196.645239][ T6023] libceph: mon0 (1)[c::]:6789 connect error
[  196.862447][ T7313] ceph: No mds server is up or the cluster is laggy
[  197.082594][ T7322] syzkaller1: entered allmulticast mode
[  197.223362][ T7330] netlink: 16 bytes leftover after parsing attributes in process `syz.3.281'.
[  197.223965][ T7327] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232
[  197.626567][  T831] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  197.814296][  T831] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  197.818291][  T831] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  197.877332][  T831] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[  197.886796][  T831] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  197.897231][  T831] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  197.931073][  T831] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  197.936563][  T831] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  197.963910][  T831] usb 8-1: Product: syz
[  197.977414][  T831] usb 8-1: Manufacturer: syz
[  198.004853][  T831] cdc_wdm 8-1:1.0: skipping garbage
[  198.008245][  T831] cdc_wdm 8-1:1.0: skipping garbage
[  198.013038][  T831] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[  198.016707][  T831] cdc_wdm 8-1:1.0: Unknown control protocol
[  198.187565][ T5959] Bluetooth: hci2: Malformed LE Event: 0x0d
[  198.286306][    C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  198.298654][    C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  198.304038][    C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  198.308843][    C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  198.330383][    C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  198.332432][    C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  198.335482][    C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  198.337553][    C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  198.348337][    C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  198.351614][    C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  198.354396][    C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  198.357329][    C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  198.360632][    C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  198.363184][    C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  198.365949][    C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  198.368530][    C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  198.370840][    C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  198.372974][    C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  198.375098][  T831] usb 8-1: USB disconnect, device number 2
[  198.377390][    C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  198.377403][    C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  198.377413][    C2] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  198.869027][ T7369] SQUASHFS error: Failed to read block 0x0: -5
[  198.927875][ T7361] netlink: 'syz.4.291': attribute type 10 has an invalid length.
[  198.984206][ T7361] team0: Port device netdevsim0 added
[  199.633380][ T7386] netlink: 24 bytes leftover after parsing attributes in process `syz.4.300'.
[  201.955255][ T7415] openvswitch: netlink: IP tunnel dst address not specified
[  202.013916][ T7415] syzkaller0: entered promiscuous mode
[  202.016814][ T7415] syzkaller0: entered allmulticast mode
[  202.241913][ T7417] ucma_write: process 258 (syz.4.310) changed security contexts after opening file descriptor, this is not allowed.
[  202.364397][ T7422] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  203.118712][   T46] tipc: Subscription rejected, illegal request
[  207.626426][ T7496] netlink: 27 bytes leftover after parsing attributes in process `syz.4.334'.
[  209.431990][ T7535] netlink: 9 bytes leftover after parsing attributes in process `syz.4.342'.
[  209.446992][ T7535] netlink: 9 bytes leftover after parsing attributes in process `syz.4.342'.
[  210.922734][ T1415] ieee802154 phy0 wpan0: encryption failed: -22
[  210.930062][ T1415] ieee802154 phy1 wpan1: encryption failed: -22
[  211.992030][ T7588] netlink: 'syz.5.363': attribute type 1 has an invalid length.
[  212.062655][ T7588] bond1: entered promiscuous mode
[  212.067104][ T7588] bond1: entered allmulticast mode
[  212.073449][ T7588] 8021q: adding VLAN 0 to HW filter on device bond1
[  212.093411][ T7591] erspan1: entered allmulticast mode
[  212.127921][ T7591] bond1: (slave erspan1): making interface the new active one
[  212.133279][ T7591] erspan1: entered promiscuous mode
[  212.144269][ T7591] bond1: (slave erspan1): Enslaving as an active interface with an up link
[  212.924108][ T7602] kernel read not supported for file /file0 (pid: 7602 comm: syz.5.367)
[  212.930816][   T40] kauditd_printk_skb: 769 callbacks suppressed
[  212.930844][   T40] audit: type=1800 audit(1770107374.727:782): pid=7602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.367" name="file0" dev="mqueue" ino=19077 res=0 errno=0
[  213.567112][ T7609] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  213.718933][   T40] audit: type=1326 audit(1770107375.527:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.2.372" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[  213.742884][   T40] audit: type=1326 audit(1770107375.547:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.2.372" exe="/syz-executor" sig=0 arch=40000003 syscall=459 compat=1 ip=0xf746d579 code=0x7ffc0000
[  213.766681][   T40] audit: type=1326 audit(1770107375.557:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.2.372" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[  213.784695][   T40] audit: type=1326 audit(1770107375.557:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.2.372" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf746d579 code=0x7ffc0000
[  213.810952][   T40] audit: type=1326 audit(1770107375.557:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.2.372" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[  213.821559][   T40] audit: type=1326 audit(1770107375.557:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.2.372" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf746d579 code=0x7ffc0000
[  213.834059][   T40] audit: type=1326 audit(1770107375.557:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.2.372" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[  213.857911][   T40] audit: type=1326 audit(1770107375.557:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.2.372" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[  213.867722][   T40] audit: type=1326 audit(1770107375.557:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.2.372" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf746d579 code=0x7ffc0000
[  215.072681][ T7648] syzkaller1: entered promiscuous mode
[  215.075707][ T7648] syzkaller1: entered allmulticast mode
[  217.118896][ T7678] usb 2-1: USB disconnect, device number 2
[  217.976754][   T40] kauditd_printk_skb: 1570 callbacks suppressed
[  217.976773][   T40] audit: type=1326 audit(1770107379.647:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.5.386" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7fc00000
[  218.031972][   T40] audit: type=1326 audit(1770107379.717:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.5.386" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f32579 code=0x7ffc0000
[  218.041058][   T40] audit: type=1326 audit(1770107379.827:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.5.386" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f325a7 code=0x7ffc0000
[  218.064256][   T40] audit: type=1326 audit(1770107379.827:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.5.386" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f32579 code=0x7ffc0000
[  218.102219][   T40] audit: type=1326 audit(1770107379.827:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.5.386" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f325a7 code=0x7ffc0000
[  218.114901][   T40] audit: type=1326 audit(1770107379.827:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.5.386" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f32579 code=0x7ffc0000
[  218.126865][   T40] audit: type=1326 audit(1770107379.827:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.5.386" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f325a7 code=0x7ffc0000
[  218.140838][   T40] audit: type=1326 audit(1770107379.827:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.5.386" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f32579 code=0x7ffc0000
[  218.151482][   T40] audit: type=1326 audit(1770107379.827:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.5.386" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f325a7 code=0x7ffc0000
[  218.162169][   T40] audit: type=1326 audit(1770107379.827:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.5.386" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f32579 code=0x7ffc0000
[  219.674385][ T7696] sp0: Synchronizing with TNC
[  220.444278][  T958] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  220.632498][  T958] usb 7-1: Using ep0 maxpacket: 16
[  220.648743][  T958] usb 7-1: config 0 has an invalid interface number: 132 but max is 0
[  220.657803][  T958] usb 7-1: config 0 has no interface number 0
[  220.673365][  T958] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  220.686857][  T958] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.702116][  T958] usb 7-1: Product: syz
[  220.713584][  T958] usb 7-1: Manufacturer: syz
[  220.719984][  T958] usb 7-1: SerialNumber: syz
[  220.742265][  T958] usb 7-1: config 0 descriptor??
[  220.748090][  T958] hub 7-1:0.132: bad descriptor, ignoring hub
[  220.750824][  T958] hub 7-1:0.132: probe with driver hub failed with error -5
[  220.767981][  T958] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.132/input/input7
[  221.215739][ T6041] usb 7-1: USB disconnect, device number 2
[  221.396480][ T7705] netlink: 'syz.5.394': attribute type 1 has an invalid length.
[  221.462453][ T7707] netlink: 28 bytes leftover after parsing attributes in process `syz.5.394'.
[  221.471089][ T7705] 8021q: adding VLAN 0 to HW filter on device bond2
[  221.475621][ T7707] bond2: entered promiscuous mode
[  221.487243][ T7707] bond2: entered allmulticast mode
[  221.552848][ T7705] bond2: (slave dummy0): making interface the new active one
[  221.556942][ T7705] dummy0: entered promiscuous mode
[  221.562568][ T7705] dummy0: entered allmulticast mode
[  221.576938][ T7705] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  223.332586][ T7728] netlink: 32 bytes leftover after parsing attributes in process `syz.4.401'.
[  223.369689][ T7729] ������: renamed from vlan0 (while UP)
[  223.421052][  T831] kernel write not supported for file 284/net/vlan/vlan0 (pid: 831 comm: kworker/2:2)
[  223.506666][ T7731] FAULT_INJECTION: forcing a failure.
[  223.506666][ T7731] name failslab, interval 1, probability 0, space 0, times 0
[  223.525717][ T7731] CPU: 1 UID: 0 PID: 7731 Comm: syz.4.402 Not tainted syzkaller #0 PREEMPT(full) 
[  223.525743][ T7731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  223.525774][ T7731] Call Trace:
[  223.525781][ T7731]  <TASK>
[  223.525802][ T7731]  dump_stack_lvl+0x100/0x190
[  223.525852][ T7731]  should_fail_ex.cold+0x5/0xa
[  223.525878][ T7731]  should_failslab+0xc2/0x120
[  223.525901][ T7731]  __kmalloc_cache_noprof+0x80/0x810
[  223.525918][ T7731]  ? rtnl_newlink+0x126/0x2380
[  223.525955][ T7731]  ? __pfx_rtnl_newlink+0x10/0x10
[  223.525976][ T7731]  ? rtnl_newlink+0x126/0x2380
[  223.525998][ T7731]  rtnl_newlink+0x126/0x2380
[  223.526034][ T7731]  ? __pfx_rtnl_newlink+0x10/0x10
[  223.526057][ T7731]  ? kasan_quarantine_put+0x104/0x240
[  223.526075][ T7731]  ? lockdep_hardirqs_on+0x78/0x100
[  223.526098][ T7731]  ? kmem_cache_free+0x143/0x720
[  223.526113][ T7731]  ? sk_tx_queue_get+0x119/0x270
[  223.526137][ T7731]  ? __lock_acquire+0x4a5/0x2630
[  223.526158][ T7731]  ? consume_skb+0xd6/0x110
[  223.526174][ T7731]  ? find_held_lock+0x2b/0x80
[  223.526198][ T7731]  ? find_held_lock+0x2b/0x80
[  223.526212][ T7731]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  223.526235][ T7731]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  223.526259][ T7731]  ? __pfx_rtnl_newlink+0x10/0x10
[  223.526283][ T7731]  rtnetlink_rcv_msg+0x95e/0xe90
[  223.526309][ T7731]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  223.526340][ T7731]  ? ref_tracker_free+0x37e/0x6c0
[  223.526367][ T7731]  netlink_rcv_skb+0x159/0x420
[  223.526392][ T7731]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  223.526418][ T7731]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  223.526450][ T7731]  ? netlink_deliver_tap+0x1ae/0xcc0
[  223.526478][ T7731]  netlink_unicast+0x5aa/0x870
[  223.526506][ T7731]  ? __pfx_netlink_unicast+0x10/0x10
[  223.526539][ T7731]  netlink_sendmsg+0x8b0/0xda0
[  223.526567][ T7731]  ? __pfx_netlink_sendmsg+0x10/0x10
[  223.526594][ T7731]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  223.526618][ T7731]  ____sys_sendmsg+0xa54/0xc30
[  223.526639][ T7731]  ? __pfx_____sys_sendmsg+0x10/0x10
[  223.526654][ T7731]  ? _parse_integer_limit+0x17f/0x1d0
[  223.526675][ T7731]  ? _kstrtoull+0x13c/0x1f0
[  223.526692][ T7731]  ? __pfx__kstrtoull+0x10/0x10
[  223.526712][ T7731]  ___sys_sendmsg+0x190/0x1e0
[  223.526733][ T7731]  ? __pfx____sys_sendmsg+0x10/0x10
[  223.526750][ T7731]  ? __lock_acquire+0x4a5/0x2630
[  223.526780][ T7731]  ? find_held_lock+0x2b/0x80
[  223.526809][ T7731]  __sys_sendmmsg+0x2ff/0x430
[  223.526836][ T7731]  ? __pfx___sys_sendmmsg+0x10/0x10
[  223.526866][ T7731]  ? __fget_files+0x215/0x3d0
[  223.526895][ T7731]  ? fput+0x79/0x100
[  223.526916][ T7731]  ? ksys_write+0x1ac/0x250
[  223.526934][ T7731]  ? __pfx_ksys_write+0x10/0x10
[  223.526955][ T7731]  __ia32_compat_sys_sendmmsg+0x9d/0x100
[  223.526978][ T7731]  ? lockdep_hardirqs_on+0x78/0x100
[  223.526996][ T7731]  __do_fast_syscall_32+0xde/0x660
[  223.527023][ T7731]  do_fast_syscall_32+0x32/0x70
[  223.527044][ T7731]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  223.527065][ T7731] RIP: 0023:0xf742d579
[  223.527079][ T7731] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00
[  223.527094][ T7731] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159
[  223.527110][ T7731] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000800002c0
[  223.527120][ T7731] RDX: 000000000000009f RSI: 0000000000000000 RDI: 0000000000000000
[  223.527128][ T7731] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  223.527137][ T7731] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  223.527146][ T7731] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  223.527167][ T7731]  </TASK>
[  225.184830][ T7749] overlayfs: workdir and upperdir must be separate subtrees
[  226.070864][ T7757] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  226.074034][ T7757] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  226.081436][ T7757] vhci_hcd vhci_hcd.0: Device attached
[  226.168926][ T7757] netlink: 9 bytes leftover after parsing attributes in process `syz.4.411'.
[  226.175528][ T7757] 0�: renamed from hsr_slave_1 (while UP)
[  226.211371][ T7757] 0�: entered allmulticast mode
[  226.213845][ T7757] A link change request failed with some changes committed already. Interface 
c0� may have been left with an inconsistent configuration, please check.
[  226.379695][ T5994] usb 46-1: SetAddress Request (2) to port 0
[  226.394381][ T5994] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd
[  226.467004][ T7760] vhci_hcd: connection reset by peer
[  226.512331][   T61] vhci_hcd vhci_hcd.4: stop threads
[  226.516735][   T61] vhci_hcd vhci_hcd.4: release socket
[  226.523224][   T61] vhci_hcd vhci_hcd.4: disconnect device
[  226.542974][ T7705] Set syz1 is full, maxelem 65536 reached
[  226.633154][ T7768] FAULT_INJECTION: forcing a failure.
[  226.633154][ T7768] name failslab, interval 1, probability 0, space 0, times 0
[  226.644100][ T7768] CPU: 0 UID: 0 PID: 7768 Comm: syz.3.414 Not tainted syzkaller #0 PREEMPT(full) 
[  226.644130][ T7768] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  226.644139][ T7768] Call Trace:
[  226.644146][ T7768]  <TASK>
[  226.644153][ T7768]  dump_stack_lvl+0x100/0x190
[  226.644179][ T7768]  should_fail_ex.cold+0x5/0xa
[  226.644206][ T7768]  should_failslab+0xc2/0x120
[  226.644227][ T7768]  ? tomoyo_realpath_from_path+0xb6/0x690
[  226.644243][ T7768]  __kmalloc_noprof+0xf6/0x9c0
[  226.644265][ T7768]  ? tomoyo_realpath_from_path+0xb6/0x690
[  226.644280][ T7768]  tomoyo_realpath_from_path+0xb6/0x690
[  226.644301][ T7768]  tomoyo_path_number_perm+0x23c/0x580
[  226.644322][ T7768]  ? tomoyo_path_number_perm+0x22e/0x580
[  226.644346][ T7768]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  226.644391][ T7768]  ? find_held_lock+0x2b/0x80
[  226.644406][ T7768]  ? hook_file_ioctl_common+0x146/0x410
[  226.644429][ T7768]  ? __fget_files+0x215/0x3d0
[  226.644450][ T7768]  ? __fget_files+0x21f/0x3d0
[  226.644471][ T7768]  security_file_ioctl_compat+0xd3/0x230
[  226.644496][ T7768]  __ia32_compat_sys_ioctl+0xc2/0x360
[  226.644524][ T7768]  __do_fast_syscall_32+0xde/0x660
[  226.644547][ T7768]  do_fast_syscall_32+0x32/0x70
[  226.644567][ T7768]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  226.644586][ T7768] RIP: 0023:0xf746d579
[  226.644599][ T7768] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00
[  226.644615][ T7768] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  226.644630][ T7768] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c018643a
[  226.644639][ T7768] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000
[  226.644648][ T7768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  226.644656][ T7768] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  226.644664][ T7768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  226.644686][ T7768]  </TASK>
[  226.644694][ T7768] ERROR: Out of memory at tomoyo_realpath_from_path.
[  227.946662][ T5629] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  228.017370][ T6041] usb 10-1: new low-speed USB device number 7 using dummy_hcd
[  228.071398][ T7802] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  228.113809][   T40] kauditd_printk_skb: 62 callbacks suppressed
[  228.113830][   T40] audit: type=1804 audit(1770107389.917:2434): pid=7803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.423" name="/newroot/63/bus/bus" dev="overlay" ino=357 res=1 errno=0
[  228.127855][ T7803] evm: overlay not supported
[  228.150032][ T5629] usb 9-1: Using ep0 maxpacket: 16
[  228.153360][ T5629] usb 9-1: no configurations
[  228.160148][ T5629] usb 9-1: can't read configurations, error -22
[  228.176559][   T40] audit: type=1804 audit(1770107389.977:2435): pid=7803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.423" name="/newroot/63/bus/bus" dev="overlay" ino=357 res=1 errno=0
[  228.245345][ T6041] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[  228.249762][ T6041] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  228.256101][ T6041] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  228.271241][ T6041] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  228.279964][ T6041] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  228.290081][ T6041] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[  228.295515][ T6041] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  228.302462][ T6041] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  228.310208][ T5629] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  228.316902][ T6041] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  228.328387][ T6041] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  228.344790][ T6041] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[  228.375894][ T6041] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  228.381237][ T6041] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  228.409284][ T6041] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  228.424305][ T6041] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  228.470282][ T6041] usb 10-1: string descriptor 0 read error: -22
[  228.495125][ T6041] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  228.513229][ T6041] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.543368][ T5629] usb 9-1: Using ep0 maxpacket: 16
[  228.581761][ T5629] usb 9-1: no configurations
[  228.592043][ T5629] usb 9-1: can't read configurations, error -22
[  228.630227][ T5629] usb usb9-port1: attempt power cycle
[  228.632770][ T6041] adutux 10-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  228.990094][ T5629] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  229.008357][ T5629] usb 9-1: Using ep0 maxpacket: 16
[  229.020507][ T5629] usb 9-1: no configurations
[  229.023647][ T5629] usb 9-1: can't read configurations, error -22
[  229.157511][ T5629] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  229.217979][ T5629] usb 9-1: Using ep0 maxpacket: 16
[  229.234571][ T5629] usb 9-1: no configurations
[  229.244577][ T5629] usb 9-1: can't read configurations, error -22
[  229.256270][ T5629] usb usb9-port1: unable to enumerate USB device
[  229.601163][ T7825] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  230.005530][ T7839] openvswitch: netlink: IP tunnel dst address not specified
[  230.117358][ T7843] netlink: 'syz.3.437': attribute type 1 has an invalid length.
[  230.122142][ T7843] netlink: 224 bytes leftover after parsing attributes in process `syz.3.437'.
[  230.560469][ T7843] xt_hashlimit: overflow, try lower: 60585/0
[  231.412327][ T6023] hid (null): report_id 8205 is invalid
[  231.425547][ T6023] hid-generic 0005:0006:5538.0002: unknown main item tag 0x4
[  231.429384][ T6023] hid-generic 0005:0006:5538.0002: unknown main item tag 0x6
[  231.432759][ T6023] hid-generic 0005:0006:5538.0002: report_id 8205 is invalid
[  231.435700][ T6023] hid-generic 0005:0006:5538.0002: item 0 2 1 8 parsing failed
[  231.439596][ T6023] hid-generic 0005:0006:5538.0002: probe with driver hid-generic failed with error -22
[  231.477421][ T5994] usb 46-1: device descriptor read/8, error -110
[  231.882701][ T5994] usb usb46-port1: attempt power cycle
[  231.891231][ T7904] netlink: 'syz.3.454': attribute type 10 has an invalid length.
[  231.899393][ T7906] gretap1: entered promiscuous mode
[  231.902336][ T7906] batman_adv: batadv0: Adding interface: gretap1
[  231.905035][ T7906] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  231.915254][ T7906] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  231.926159][ T7904] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.944607][ T7904] bridge_slave_1: left allmulticast mode
[  231.955819][ T7904] bridge_slave_1: left promiscuous mode
[  231.960111][ T7904] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.971128][ T7904] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  232.449272][ T5994] usb usb46-port1: unable to enumerate USB device
[  232.694582][ T7924] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  232.696698][ T7924] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  232.700271][ T7924] vhci_hcd vhci_hcd.0: Device attached
[  232.705858][ T7924] fuse: Bad value for 'group_id'
[  232.708090][ T7924] fuse: Bad value for 'group_id'
[  232.850930][ T6021] usb 10-1: USB disconnect, device number 7
[  232.987249][ T5629] usb 42-1: SetAddress Request (2) to port 0
[  232.989205][ T5629] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd
[  233.191908][ T7926] vhci_hcd: connection reset by peer
[  233.199768][ T1146] vhci_hcd vhci_hcd.2: stop threads
[  233.201435][ T1146] vhci_hcd vhci_hcd.2: release socket
[  233.204226][ T1146] vhci_hcd vhci_hcd.2: disconnect device
[  233.478006][ T7957] ������: renamed from vlan0 (while UP)
[  233.483396][ T6008] kernel write not supported for file 391/net/vlan/vlan0 (pid: 6008 comm: kworker/0:3)
[  234.107819][ T7964] netlink: 'syz.5.471': attribute type 10 has an invalid length.
[  234.129455][ T7964] team0: Port device netdevsim0 added
[  234.357546][ T7954] comedi comedi2: reset error (fatal)
[  234.643526][ T8009] overlayfs: failed to resolve './file1': -2
[  234.650292][ T8012] netlink: 24 bytes leftover after parsing attributes in process `syz.4.487'.
[  234.744940][ T8018] x_tables: duplicate underflow at hook 1
[  234.748606][ T8018] hub 8-0:1.0: USB hub found
[  234.750819][ T8018] hub 8-0:1.0: 1 port detected
[  234.760899][ T8018] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  235.925304][ T8038] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[  235.927739][ T8038] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  235.933044][ T8041] netlink: 'syz.3.493': attribute type 10 has an invalid length.
[  236.066135][ T8038] vhci_hcd vhci_hcd.0: Device attached
[  236.119740][ T8038] netlink: 9 bytes leftover after parsing attributes in process `syz.5.494'.
[  236.123408][ T8038] 0�: renamed from hsr_slave_1 (while UP)
[  236.131740][ T8038] 0�: entered allmulticast mode
[  236.134332][ T8038] A link change request failed with some changes committed already. Interface 
c0� may have been left with an inconsistent configuration, please check.
[  236.328088][ T6041] usb 48-1: SetAddress Request (2) to port 0
[  236.330309][ T6041] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd
[  236.417961][ T6008] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  236.495921][ T8039] vhci_hcd: connection reset by peer
[  236.498297][ T1146] vhci_hcd vhci_hcd.5: stop threads
[  236.500569][ T1146] vhci_hcd vhci_hcd.5: release socket
[  236.503085][ T1146] vhci_hcd vhci_hcd.5: disconnect device
[  236.587516][ T6008] usb 7-1: Using ep0 maxpacket: 8
[  236.596562][ T6008] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  236.602453][ T6008] usb 7-1: config 0 has no interface number 0
[  236.606030][ T6008] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  236.611035][ T6008] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  236.616346][ T6008] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  236.623069][ T6008] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  236.629521][ T6008] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  236.634021][ T6008] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.641134][ T6008] usb 7-1: config 0 descriptor??
[  236.657702][ T6008] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  236.734008][ T8056] overlayfs: failed to resolve './file1': -2
[  236.767208][ T5962] Bluetooth: hci0: command 0x0c1a tx timeout
[  236.847215][ T8037] comedi comedi2: reset error (fatal)
[  236.853468][ T5994] usb 7-1: USB disconnect, device number 3
[  236.857796][ T5994] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[  236.895808][ T8058] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found
[  236.898706][ T8058] UDF-fs: Scanning with blocksize 2048 failed
[  236.901252][ T8058] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found
[  236.903597][ T8058] UDF-fs: Scanning with blocksize 4096 failed
[  237.347837][ T8064] x_tables: duplicate underflow at hook 1
[  237.353292][ T8064] hub 8-0:1.0: USB hub found
[  237.356134][ T8064] hub 8-0:1.0: 1 port detected
[  237.381257][ T8064] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  237.648219][ T8066] netlink: 'syz.2.501': attribute type 1 has an invalid length.
[  237.738417][ T8068] netlink: 28 bytes leftover after parsing attributes in process `syz.2.501'.
[  237.776761][ T8066] 8021q: adding VLAN 0 to HW filter on device bond2
[  237.786479][ T8068] bond2: entered promiscuous mode
[  237.793325][ T8068] bond2: entered allmulticast mode
[  237.854427][ T8066] bond2: (slave dummy0): making interface the new active one
[  237.858493][ T8066] dummy0: entered promiscuous mode
[  237.860944][ T8066] dummy0: entered allmulticast mode
[  237.865721][ T8066] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  238.037563][ T5629] usb 42-1: device descriptor read/8, error -110
[  238.050702][ T8081] netlink: 'syz.2.505': attribute type 10 has an invalid length.
[  238.056124][ T8081] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.062794][ T8081] bridge_slave_1: left allmulticast mode
[  238.065313][ T8081] bridge_slave_1: left promiscuous mode
[  238.069917][ T8081] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.079397][ T8081] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  238.114260][ T8088] netlink: 'syz.3.506': attribute type 5 has an invalid length.
[  238.117247][ T8088] netlink: 24 bytes leftover after parsing attributes in process `syz.3.506'.
[  238.128044][ T8089] ������: renamed from vlan0 (while UP)
[  238.133034][   T53] kernel write not supported for file 267/net/vlan/vlan0 (pid: 53 comm: kworker/2:1)
[  238.141675][ T8087] FAULT_INJECTION: forcing a failure.
[  238.141675][ T8087] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  238.146857][ T8087] CPU: 2 UID: 0 PID: 8087 Comm: syz.4.514 Not tainted syzkaller #0 PREEMPT(full) 
[  238.146872][ T8087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  238.146878][ T8087] Call Trace:
[  238.146882][ T8087]  <TASK>
[  238.146886][ T8087]  dump_stack_lvl+0x100/0x190
[  238.146904][ T8087]  should_fail_ex.cold+0x5/0xa
[  238.146922][ T8087]  _copy_to_user+0x32/0xd0
[  238.146941][ T8087]  simple_read_from_buffer+0xcb/0x170
[  238.146953][ T8087]  proc_fail_nth_read+0x1af/0x230
[  238.146967][ T8087]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  238.146980][ T8087]  ? rw_verify_area+0xce/0x6d0
[  238.146991][ T8087]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  238.147003][ T8087]  vfs_read+0x1e4/0xb30
[  238.147017][ T8087]  ? __pfx_vfs_read+0x10/0x10
[  238.147028][ T8087]  ? find_held_lock+0x2b/0x80
[  238.147039][ T8087]  ? __fget_files+0x215/0x3d0
[  238.147053][ T8087]  ? __fget_files+0x21f/0x3d0
[  238.147068][ T8087]  ksys_read+0x12a/0x250
[  238.147080][ T8087]  ? __pfx_ksys_read+0x10/0x10
[  238.147095][ T8087]  do_int80_emulation+0x101/0x470
[  238.147111][ T8087]  asm_int80_emulation+0x1a/0x20
[  238.147122][ T8087] RIP: 0023:0xf719572b
[  238.147131][ T8087] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  238.147153][ T8087] RSP: 002b:00000000f54564bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  238.147164][ T8087] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54565d0
[  238.147170][ T8087] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  238.147176][ T8087] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  238.147182][ T8087] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  238.147188][ T8087] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  238.147202][ T8087]  </TASK>
[  238.348227][ T8098] netlink: 'syz.3.511': attribute type 1 has an invalid length.
[  238.429791][ T5629] usb usb42-port1: attempt power cycle
[  238.521228][ T8107] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232
[  239.008186][ T5629] usb usb42-port1: unable to enumerate USB device
[  239.275122][ T8116] netlink: 'syz.3.513': attribute type 1 has an invalid length.
[  239.290228][ T8116] 8021q: adding VLAN 0 to HW filter on device bond1
[  239.310088][ T8116] netlink: 28 bytes leftover after parsing attributes in process `syz.3.513'.
[  239.313763][ T8116] bond1: entered promiscuous mode
[  239.316055][ T8116] bond1: entered allmulticast mode
[  239.325689][ T8116] bond1: (slave dummy0): making interface the new active one
[  239.328150][ T8116] dummy0: entered promiscuous mode
[  239.330010][ T8116] dummy0: entered allmulticast mode
[  239.332613][ T8116] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  239.400259][ T8102] comedi comedi2: reset error (fatal)
[  239.627848][ T8121] bond0: entered promiscuous mode
[  239.629574][ T8121] bond_slave_0: entered promiscuous mode
[  239.631825][ T8121] bond_slave_1: entered promiscuous mode
[  239.649747][ T8121] bond0: left promiscuous mode
[  239.651837][ T8121] bond_slave_0: left promiscuous mode
[  239.655057][ T8121] bond_slave_1: left promiscuous mode
[  240.368938][ T8137] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  240.432647][ T8141] netlink: 24 bytes leftover after parsing attributes in process `syz.3.523'.
[  240.654515][ T8145] x_tables: duplicate underflow at hook 1
[  240.658106][ T8145] hub 8-0:1.0: USB hub found
[  240.660472][ T8145] hub 8-0:1.0: 1 port detected
[  240.670825][ T8145] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  241.007383][   T53] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  241.188099][ T8156] kernel profiling enabled (shift: 63)
[  241.189831][ T8156] profiling shift: 63 too large
[  241.193539][   T53] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  241.212375][   T53] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  241.218747][   T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.397633][ T6041] usb 48-1: device descriptor read/8, error -110
[  242.300002][ T8163] netlink: zone id is out of range
[  242.301746][ T8163] netlink: get zone limit has 4 unknown bytes
[  242.537049][ T8166] bridge0: port 3(erspan0) entered blocking state
[  242.539887][ T8166] bridge0: port 3(erspan0) entered disabled state
[  242.542564][ T8166] erspan0: entered allmulticast mode
[  242.545690][ T8166] erspan0: entered promiscuous mode
[  242.550139][ T8166] bridge0: port 3(erspan0) entered blocking state
[  242.552843][ T8166] bridge0: port 3(erspan0) entered forwarding state
[  243.099646][ T6041] usb usb48-port1: attempt power cycle
[  243.224308][ T8172] bond0: entered promiscuous mode
[  243.226023][ T8172] bond_slave_0: entered promiscuous mode
[  243.232830][ T8172] bond_slave_1: entered promiscuous mode
[  243.247219][ T8172] bond0: left promiscuous mode
[  243.248811][ T8172] bond_slave_0: left promiscuous mode
[  243.251117][ T8172] bond_slave_1: left promiscuous mode
[  243.370066][ T8176] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  243.372168][ T8176] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  243.374967][ T8176] vhci_hcd vhci_hcd.0: Device attached
[  243.442237][ T8176] netlink: 9 bytes leftover after parsing attributes in process `syz.3.531'.
[  243.446257][ T8176] 0�: renamed from hsr_slave_1 (while UP)
[  243.456916][ T8176] 0�: entered allmulticast mode
[  243.459882][ T8176] A link change request failed with some changes committed already. Interface 
c0� may have been left with an inconsistent configuration, please check.
[  243.637289][   T55] usb 44-1: SetAddress Request (2) to port 0
[  243.639301][   T55] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd
[  243.668220][ T6041] usb usb48-port1: unable to enumerate USB device
[  243.720128][   T53] usb 7-1: USB disconnect, device number 4
[  244.138765][ T8177] vhci_hcd: connection reset by peer
[  244.147670][ T1206] vhci_hcd vhci_hcd.3: stop threads
[  244.149204][ T1206] vhci_hcd vhci_hcd.3: release socket
[  244.150855][ T1206] vhci_hcd vhci_hcd.3: disconnect device
[  244.287386][ T6008] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  244.367405][ T5959] Bluetooth: hci2: command 0x0406 tx timeout
[  244.415196][ T8230] FAULT_INJECTION: forcing a failure.
[  244.415196][ T8230] name failslab, interval 1, probability 0, space 0, times 0
[  244.420885][ T8230] CPU: 3 UID: 0 PID: 8230 Comm: syz.5.543 Not tainted syzkaller #0 PREEMPT(full) 
[  244.420908][ T8230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  244.420918][ T8230] Call Trace:
[  244.420924][ T8230]  <TASK>
[  244.420930][ T8230]  dump_stack_lvl+0x100/0x190
[  244.420955][ T8230]  should_fail_ex.cold+0x5/0xa
[  244.420981][ T8230]  should_failslab+0xc2/0x120
[  244.421003][ T8230]  ? tomoyo_encode2+0xfb/0x3c0
[  244.421018][ T8230]  __kmalloc_noprof+0xf6/0x9c0
[  244.421042][ T8230]  ? tomoyo_encode2+0xfb/0x3c0
[  244.421056][ T8230]  tomoyo_encode2+0xfb/0x3c0
[  244.421075][ T8230]  tomoyo_encode+0x29/0x50
[  244.421089][ T8230]  tomoyo_realpath_from_path+0x18c/0x690
[  244.421111][ T8230]  tomoyo_path_number_perm+0x23c/0x580
[  244.421133][ T8230]  ? tomoyo_path_number_perm+0x22e/0x580
[  244.421157][ T8230]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  244.421202][ T8230]  ? find_held_lock+0x2b/0x80
[  244.421217][ T8230]  ? hook_file_ioctl_common+0x146/0x410
[  244.421240][ T8230]  ? __fget_files+0x215/0x3d0
[  244.421261][ T8230]  ? __fget_files+0x21f/0x3d0
[  244.421282][ T8230]  security_file_ioctl_compat+0xd3/0x230
[  244.421307][ T8230]  __ia32_compat_sys_ioctl+0xc2/0x360
[  244.421335][ T8230]  __do_fast_syscall_32+0xde/0x660
[  244.421358][ T8230]  do_fast_syscall_32+0x32/0x70
[  244.421378][ T8230]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  244.421397][ T8230] RIP: 0023:0xf7f32579
[  244.421409][ T8230] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00
[  244.421424][ T8230] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  244.421440][ T8230] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008008640b
[  244.421450][ T8230] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000
[  244.421459][ T8230] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  244.421468][ T8230] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  244.421477][ T8230] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  244.421498][ T8230]  </TASK>
[  244.421513][ T8230] ERROR: Out of memory at tomoyo_realpath_from_path.
[  244.467310][ T6008] usb 7-1: Using ep0 maxpacket: 8
[  244.514375][ T6008] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  244.524686][ T6008] usb 7-1: config 0 has no interface number 0
[  244.527567][ T6008] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  244.532176][ T6008] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  244.537109][ T6008] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  244.545174][ T6008] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  244.550736][ T6008] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  244.554506][ T6008] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.560397][ T6008] usb 7-1: config 0 descriptor??
[  244.572303][ T6008] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  244.728310][ T8239] ip6gretap0: entered promiscuous mode
[  244.731107][ T8239] macsec1: entered promiscuous mode
[  244.733010][ T8239] macsec1: entered allmulticast mode
[  244.734594][ T8239] ip6gretap0: entered allmulticast mode
[  244.778187][ T8209] IPVS: set_ctl: invalid protocol: 0 172.20.20.61:20001
[  244.824317][ T8243] IPv6: Can't replace route, no match found
[  244.860744][   T40] audit: type=1326 audit(1770107406.667:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.3.548" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[  244.870934][   T40] audit: type=1326 audit(1770107406.677:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.3.548" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[  244.882123][   T40] audit: type=1326 audit(1770107406.677:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.3.548" exe="/syz-executor" sig=0 arch=40000003 syscall=171 compat=1 ip=0xf746d579 code=0x7ffc0000
[  244.891956][   T40] audit: type=1326 audit(1770107406.677:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.3.548" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[  244.901089][   T40] audit: type=1326 audit(1770107406.677:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.3.548" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[  244.910376][   T40] audit: type=1326 audit(1770107406.677:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.3.548" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf746d579 code=0x7ffc0000
[  244.919212][   T40] audit: type=1326 audit(1770107406.677:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.3.548" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[  244.919325][ T6023] usb 7-1: USB disconnect, device number 5
[  244.925879][   T40] audit: type=1326 audit(1770107406.677:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.3.548" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[  244.935339][   T40] audit: type=1326 audit(1770107406.677:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.3.548" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf746d579 code=0x7ffc0000
[  244.940544][ T8254] netlink: 'syz.5.551': attribute type 1 has an invalid length.
[  244.942267][   T40] audit: type=1326 audit(1770107406.677:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.3.548" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[  244.944617][ T6023] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[  246.061643][ T8267] 9p: Bad value for 'rfdno'
[  247.328956][ T8297] openvswitch: netlink: Unknown key attributes 2
[  248.303658][ T8304] netlink: 32 bytes leftover after parsing attributes in process `syz.3.563'.
[  248.677269][   T55] usb 44-1: device descriptor read/8, error -110
[  248.700950][ T8319] netlink: 'syz.3.568': attribute type 7 has an invalid length.
[  249.078787][   T55] usb usb44-port1: attempt power cycle
[  249.105842][ T8331] FAULT_INJECTION: forcing a failure.
[  249.105842][ T8331] name failslab, interval 1, probability 0, space 0, times 0
[  249.115628][ T8331] CPU: 0 UID: 0 PID: 8331 Comm: syz.2.573 Not tainted syzkaller #0 PREEMPT(full) 
[  249.115653][ T8331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  249.115663][ T8331] Call Trace:
[  249.115669][ T8331]  <TASK>
[  249.115675][ T8331]  dump_stack_lvl+0x100/0x190
[  249.115693][ T8331]  should_fail_ex.cold+0x5/0xa
[  249.115713][ T8331]  should_failslab+0xc2/0x120
[  249.115729][ T8331]  ? tomoyo_realpath_from_path+0xb6/0x690
[  249.115742][ T8331]  __kmalloc_noprof+0xf6/0x9c0
[  249.115754][ T8331]  ? kfree+0x2a9/0x690
[  249.115768][ T8331]  ? tomoyo_realpath_from_path+0xb6/0x690
[  249.115780][ T8331]  tomoyo_realpath_from_path+0xb6/0x690
[  249.115795][ T8331]  tomoyo_check_open_permission+0x2af/0x3c0
[  249.115813][ T8331]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  249.115845][ T8331]  ? do_raw_spin_lock+0x128/0x260
[  249.115863][ T8331]  ? path_get+0x61/0x80
[  249.115880][ T8331]  tomoyo_file_open+0x6b/0x90
[  249.115894][ T8331]  security_file_open+0xb5/0x1e0
[  249.115905][ T8331]  do_dentry_open+0x58c/0x1570
[  249.115920][ T8331]  ? security_inode_permission+0xbf/0x250
[  249.115939][ T8331]  vfs_open+0x82/0x3f0
[  249.115958][ T8331]  path_openat+0x21dc/0x3120
[  249.115977][ T8331]  ? __pfx_path_openat+0x10/0x10
[  249.115995][ T8331]  do_filp_open+0x1f7/0x420
[  249.116010][ T8331]  ? __pfx_do_filp_open+0x10/0x10
[  249.116035][ T8331]  ? alloc_fd+0x476/0x790
[  249.116051][ T8331]  do_sys_openat2+0x12e/0x220
[  249.116067][ T8331]  ? __pfx_do_sys_openat2+0x10/0x10
[  249.116083][ T8331]  ? __fget_files+0x215/0x3d0
[  249.116097][ T8331]  ? __fget_files+0x21f/0x3d0
[  249.116110][ T8331]  __ia32_compat_sys_openat+0x12d/0x210
[  249.116128][ T8331]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  249.116147][ T8331]  ? __pfx_ksys_write+0x10/0x10
[  249.116162][ T8331]  __do_fast_syscall_32+0xde/0x660
[  249.116179][ T8331]  do_fast_syscall_32+0x32/0x70
[  249.116193][ T8331]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  249.116207][ T8331] RIP: 0023:0xf746d579
[  249.116216][ T8331] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00
[  249.116227][ T8331] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127
[  249.116238][ T8331] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040
[  249.116245][ T8331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  249.116251][ T8331] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  249.116257][ T8331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  249.116263][ T8331] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  249.116276][ T8331]  </TASK>
[  249.116281][ T8331] ERROR: Out of memory at tomoyo_realpath_from_path.
[  249.263908][ T8342] netlink: 'syz.5.575': attribute type 5 has an invalid length.
[  249.274994][ T8342] ip6erspan0: entered promiscuous mode
[  249.317381][ T8347] netlink: 'syz.2.579': attribute type 1 has an invalid length.
[  249.319864][ T8347] netlink: 'syz.2.579': attribute type 1 has an invalid length.
[  249.355629][ T8352] 9p: Bad value for 'port'
[  249.597243][ T6023] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  249.637735][   T55] usb usb44-port1: unable to enumerate USB device
[  249.690883][ T8366] netlink: 'syz.3.584': attribute type 2 has an invalid length.
[  249.694119][ T8366] netlink: 'syz.3.584': attribute type 1 has an invalid length.
[  249.697863][ T8366] netlink: 'syz.3.584': attribute type 1 has an invalid length.
[  249.700895][ T8366] netlink: 'syz.3.584': attribute type 1 has an invalid length.
[  249.703948][ T8366] netlink: 'syz.3.584': attribute type 2 has an invalid length.
[  249.721297][   T53] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  249.726766][ T8368] capability: warning: `syz.5.582' uses 32-bit capabilities (legacy support in use)
[  249.757324][ T6023] usb 9-1: Using ep0 maxpacket: 8
[  249.761341][ T6023] usb 9-1: config 181 has an invalid interface number: 1 but max is 0
[  249.763939][ T6023] usb 9-1: config 181 has no interface number 0
[  249.766064][ T6023] usb 9-1: config 181 interface 1 altsetting 11 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  249.772279][ T6023] usb 9-1: config 181 interface 1 altsetting 11 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  249.775823][ T6023] usb 9-1: config 181 interface 1 has no altsetting 0
[  249.788341][ T6023] usb 9-1: New USB device found, idVendor=0c52, idProduct=2211, bcdDevice=7b.8b
[  249.791399][ T6023] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.794155][ T6023] usb 9-1: Product: ꥢ魽횂臸짴幾戱豸ၪ幕뀬䄟鿩⛋碡ǰ踾ꉴ᮵ᚊ肦⦣"㣂蠣퇁暣ㇹ龄Ὡ艹ᨖ陛⽒퀯꾱㸥试傇鷽홳
[  249.799051][ T6023] usb 9-1: Manufacturer: ᠊
[  249.800960][ T6023] usb 9-1: SerialNumber: ю
[  249.873948][   T53] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  249.887994][   T53] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.890668][   T53] usb 7-1: Product: syz
[  249.891963][   T53] usb 7-1: Manufacturer: syz
[  249.893398][   T53] usb 7-1: SerialNumber: syz
[  249.904689][   T53] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  249.924106][   T53] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  250.019533][ T6023] ftdi_sio 9-1:181.1: FTDI USB Serial Device converter detected
[  250.022984][ T6023] ftdi_sio ttyUSB0: unknown device type: 0x7b8b
[  250.028891][ T6023] usb 9-1: USB disconnect, device number 6
[  250.035076][ T6023] ftdi_sio 9-1:181.1: device disconnected
[  250.143066][ T5994] usb 7-1: USB disconnect, device number 6
[  250.568118][ T8384] input: syz1 as /devices/virtual/input/input9
[  250.578393][ T8380] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  250.584323][ T8380] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  250.661733][ T8385] netlink: 44 bytes leftover after parsing attributes in process `syz.5.590'.
[  250.746510][ T8389] comedi comedi1: c6xdigio: I/O port conflict (0x6,3)
[  250.955318][ T8403] syzkaller0: entered promiscuous mode
[  250.957116][ T8403] syzkaller0: entered allmulticast mode
[  250.960019][ T8403] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  251.008149][   T53] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[  251.011416][   T53] ath9k_htc: Failed to initialize the device
[  251.015648][ T5994] usb 7-1: ath9k_htc: USB layer deinitialized
[  251.052670][ T8408] misc userio: No port type given on /dev/userio
[  251.106766][ T8409] misc userio: The device must be registered before sending interrupts
[  251.327568][ T5994] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[  251.468855][ T8417] input: syz1 as /devices/virtual/input/input10
[  251.479264][ T5994] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  251.485751][ T5994] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  251.489457][ T5994] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64
[  251.493106][ T5994] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  251.496105][ T5994] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.507500][ T8399] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  251.520469][ T5994] hub 7-1:1.0: bad descriptor, ignoring hub
[  251.522409][ T5994] hub 7-1:1.0: probe with driver hub failed with error -5
[  251.525912][ T5994] cdc_wdm 7-1:1.0: skipping garbage
[  251.527713][ T5994] cdc_wdm 7-1:1.0: skipping garbage
[  251.588851][ T5994] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  251.590827][ T5994] cdc_wdm 7-1:1.0: Unknown control protocol
[  251.791107][ T8426] openvswitch: netlink: Unknown key attributes 2
[  251.803656][    C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  251.806319][    C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  251.808659][    C2] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[  251.827437][   T55] usb 7-1: USB disconnect, device number 7
[  251.973524][ T8431] ntfs3(nullb0): Primary boot signature is not NTFS.
[  251.976252][ T8431] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  252.257337][  T844] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[  252.408415][  T844] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  252.411657][  T844] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  252.414433][  T844] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  252.418346][  T844] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  252.421058][  T844] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.425674][ T8399] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  252.430500][  T844] hub 7-1:1.0: bad descriptor, ignoring hub
[  252.432421][  T844] hub 7-1:1.0: probe with driver hub failed with error -5
[  252.434895][  T844] cdc_wdm 7-1:1.0: skipping garbage
[  252.436569][  T844] cdc_wdm 7-1:1.0: skipping garbage
[  252.438502][  T844] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22
[  252.743701][ T8440] tmpfs: Unknown parameter 'GPL'
[  252.747381][ T5994] usb 7-1: USB disconnect, device number 8
[  253.018846][ T5959] Bluetooth: hci0: unexpected event 0x10 length: 11 > 1
[  253.019605][ T5959] Bluetooth: hci0: hardware error 0xff
[  253.389001][ T8450] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  253.391651][ T8450] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  253.397021][ T8450] vhci_hcd vhci_hcd.0: Device attached
[  253.408539][ T8450] random: crng reseeded on system resumption
[  253.431399][ T8450] ata1.00: invalid command format 189
[  253.446242][ T8454] misc userio: No port type given on /dev/userio
[  253.501034][ T8455] misc userio: The device must be registered before sending interrupts
[  253.678461][ T5994] usb 42-1: SetAddress Request (6) to port 0
[  253.681234][ T5994] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd
[  253.999564][ T8464] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  254.001641][ T8464] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  254.009331][ T8451] vhci_hcd: connection reset by peer
[  254.009910][ T8464] vhci_hcd vhci_hcd.0: Device attached
[  254.011205][   T13] vhci_hcd vhci_hcd.2: stop threads
[  254.014565][   T13] vhci_hcd vhci_hcd.2: release socket
[  254.016751][   T13] vhci_hcd vhci_hcd.2: disconnect device
[  254.269834][ T8470] ntfs3(nullb0): Primary boot signature is not NTFS.
[  254.272397][ T8470] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  254.287404][  T844] usb 44-1: SetAddress Request (6) to port 0
[  254.289279][  T844] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd
[  254.454170][ T8472] geneve2: entered promiscuous mode
[  254.455891][ T8472] geneve2: entered allmulticast mode
[  254.632912][ T8465] vhci_hcd: connection reset by peer
[  254.636218][   T46] vhci_hcd vhci_hcd.3: stop threads
[  254.638502][   T46] vhci_hcd vhci_hcd.3: release socket
[  254.641007][   T46] vhci_hcd vhci_hcd.3: disconnect device
[  254.713110][ T8477] input: syz1 as /devices/virtual/input/input11
[  254.894777][ T8479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'.
[  255.077322][ T5959] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  255.239387][ T8485] delete_channel: no stack
[  255.251024][ T8487] validate_nla: 9 callbacks suppressed
[  255.251034][ T8487] netlink: 'syz.4.627': attribute type 1 has an invalid length.
[  255.275403][ T8487] netlink: 224 bytes leftover after parsing attributes in process `syz.4.627'.
[  255.342747][ T8498] netlink: 'syz.4.627': attribute type 12 has an invalid length.
[  255.343579][ T8487] could not allocate digest TFM handle sha1-ssse3
[  255.345451][ T8498] netlink: 'syz.4.627': attribute type 29 has an invalid length.
[  255.345484][ T8498] netlink: 148 bytes leftover after parsing attributes in process `syz.4.627'.
[  255.345503][ T8498] netlink: 'syz.4.627': attribute type 2 has an invalid length.
[  255.345511][ T8498] netlink: 43 bytes leftover after parsing attributes in process `syz.4.627'.
[  255.450575][ T8504] misc userio: No port type given on /dev/userio
[  255.454628][ T8499] siw: device registration error -23
[  255.506121][ T8507] misc userio: The device must be registered before sending interrupts
[  255.512770][ T8508] netlink: 44 bytes leftover after parsing attributes in process `syz.2.628'.
[  256.248522][ T8514] 9pnet_virtio: no channels available for device syz
[  256.495986][ T8527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.639'.
[  256.558876][ T8525] netlink: 40 bytes leftover after parsing attributes in process `syz.2.640'.
[  256.577848][ T8522] misc userio: Begin command sent, but we're already running
[  256.606440][ T8533] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.612268][ T8528] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[  256.614542][ T8528] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  256.619477][ T8528] vhci_hcd vhci_hcd.0: Device attached
[  256.916932][ T8538] siw: device registration error -23
[  256.927377][  T958] usb 48-1: SetAddress Request (6) to port 0
[  256.930038][  T958] usb 48-1: new SuperSpeed USB device number 6 using vhci_hcd
[  256.972508][ T8542] netlink: 44 bytes leftover after parsing attributes in process `syz.4.642'.
[  257.172680][ T8534] vhci_hcd: connection reset by peer
[  257.175048][ T1146] vhci_hcd vhci_hcd.5: stop threads
[  257.177100][ T1146] vhci_hcd vhci_hcd.5: release socket
[  257.180642][ T1146] vhci_hcd vhci_hcd.5: disconnect device
[  257.298823][ T8548] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  257.301181][ T8548] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  257.305869][ T8548] vhci_hcd vhci_hcd.0: Device attached
[  257.316599][ T8548] random: crng reseeded on system resumption
[  257.584930][ T8552] netlink: 44 bytes leftover after parsing attributes in process `syz.4.646'.
[  257.932916][ T8549] vhci_hcd: connection closed
[  257.935109][ T1148] vhci_hcd vhci_hcd.3: stop threads
[  257.940486][ T1148] vhci_hcd vhci_hcd.3: release socket
[  257.942271][ T1148] vhci_hcd vhci_hcd.3: disconnect device
[  258.054123][ T8585] netlink: 'syz.5.657': attribute type 10 has an invalid length.
[  258.063038][ T8585] 8021q: adding VLAN 0 to HW filter on device bond0
[  258.067073][ T8585] team0: Port device bond0 added
[  258.244043][ T8590] 9p: Bad value for 'wfdno'
[  258.415374][ T8594] netlink: 12 bytes leftover after parsing attributes in process `syz.5.660'.
[  258.757286][ T5994] usb 42-1: device descriptor read/8, error -110
[  259.038682][   T53] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  259.148306][ T5994] usb usb42-port1: attempt power cycle
[  259.188823][   T53] usb 7-1: config 0 has no interfaces?
[  259.190754][   T53] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  259.193572][   T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.197509][   T53] usb 7-1: config 0 descriptor??
[  259.397302][  T844] usb 44-1: device descriptor read/8, error -110
[  259.589180][ T8623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.669'.
[  259.642146][ T8624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.669'.
[  259.679884][ T8625] 9p: Bad value for 'rfdno'
[  259.708595][ T5994] usb usb42-port1: unable to enumerate USB device
[  259.797830][  T844] usb usb44-port1: attempt power cycle
[  260.359632][  T844] usb usb44-port1: unable to enumerate USB device
[  261.602260][ T8623] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  261.605745][ T8623] team0: Device ipvlan2 is already an upper device of the team interface
[  261.621335][ T8624] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  261.623761][ T8624] team0: Device ipvlan2 is already an upper device of the team interface
[  261.957244][  T958] usb 48-1: device descriptor read/8, error -110
[  262.347902][  T958] usb usb48-port1: attempt power cycle
[  262.661481][ T8651] : entered promiscuous mode
[  262.720988][  T844] usb 7-1: USB disconnect, device number 9
[  262.765884][ T8662] 
@0�: renamed from bond_slave_1 (while UP)
[  262.920765][  T958] usb usb48-port1: unable to enumerate USB device
[  263.034282][ T8683] FAULT_INJECTION: forcing a failure.
[  263.034282][ T8683] name failslab, interval 1, probability 0, space 0, times 0
[  263.043396][ T8683] CPU: 1 UID: 0 PID: 8683 Comm: syz.4.687 Not tainted syzkaller #0 PREEMPT(full) 
[  263.043420][ T8683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  263.043430][ T8683] Call Trace:
[  263.043436][ T8683]  <TASK>
[  263.043443][ T8683]  dump_stack_lvl+0x100/0x190
[  263.043483][ T8683]  should_fail_ex.cold+0x5/0xa
[  263.043513][ T8683]  should_failslab+0xc2/0x120
[  263.043536][ T8683]  ? tomoyo_encode2+0xfb/0x3c0
[  263.043552][ T8683]  __kmalloc_noprof+0xf6/0x9c0
[  263.043577][ T8683]  ? tomoyo_encode2+0xfb/0x3c0
[  263.043596][ T8683]  tomoyo_encode2+0xfb/0x3c0
[  263.043616][ T8683]  tomoyo_encode+0x29/0x50
[  263.043631][ T8683]  tomoyo_realpath_from_path+0x18c/0x690
[  263.043659][ T8683]  tomoyo_mount_acl+0x1b6/0x8b0
[  263.043687][ T8683]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  263.043712][ T8683]  ? kernel_text_address+0x8d/0x100
[  263.043744][ T8683]  ? __pfx_tomoyo_mount_acl+0x10/0x10
[  263.043768][ T8683]  ? arch_stack_walk+0xa6/0xf0
[  263.043815][ T8683]  ? tomoyo_domain+0xb2/0x150
[  263.043833][ T8683]  ? tomoyo_profile+0x47/0x60
[  263.043855][ T8683]  tomoyo_mount_permission+0x214/0x460
[  263.043880][ T8683]  ? tomoyo_mount_permission+0x1f6/0x460
[  263.043908][ T8683]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[  263.043953][ T8683]  security_sb_mount+0xdd/0x270
[  263.043985][ T8683]  path_mount+0x158/0x23c0
[  263.044007][ T8683]  ? rcu_is_watching+0x12/0xc0
[  263.044024][ T8683]  ? kasan_quarantine_put+0x104/0x240
[  263.044048][ T8683]  ? __pfx_path_mount+0x10/0x10
[  263.044069][ T8683]  ? kmem_cache_free+0x143/0x720
[  263.044088][ T8683]  ? putname+0xf5/0x1a0
[  263.044113][ T8683]  ? putname+0xf5/0x1a0
[  263.044133][ T8683]  ? putname+0xfa/0x1a0
[  263.044158][ T8683]  ? __ia32_sys_mount+0x292/0x310
[  263.044179][ T8683]  __ia32_sys_mount+0x292/0x310
[  263.044202][ T8683]  ? __pfx___ia32_sys_mount+0x10/0x10
[  263.044225][ T8683]  ? getname_flags.part.0+0x1c5/0x540
[  263.044255][ T8683]  __do_fast_syscall_32+0xde/0x660
[  263.044281][ T8683]  do_fast_syscall_32+0x32/0x70
[  263.044303][ T8683]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  263.044322][ T8683] RIP: 0023:0xf742d579
[  263.044336][ T8683] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00
[  263.044352][ T8683] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015
[  263.044369][ T8683] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000280
[  263.044380][ T8683] RDX: 0000000000000000 RSI: 0000000001000038 RDI: 0000000080000800
[  263.044390][ T8683] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  263.044399][ T8683] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  263.044408][ T8683] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  263.044432][ T8683]  </TASK>
[  263.044451][ T8683] ERROR: Out of memory at tomoyo_realpath_from_path.
[  263.517272][ T5994] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  263.668644][ T5994] usb 9-1: config 0 has no interfaces?
[  263.670482][ T5994] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  263.673279][ T5994] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.691709][ T5994] usb 9-1: config 0 descriptor??
[  263.725049][   T40] kauditd_printk_skb: 1 callbacks suppressed
[  263.725061][   T40] audit: type=1326 audit(1770107425.527:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.3.692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[  263.747512][   T40] audit: type=1326 audit(1770107425.527:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.3.692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[  263.755941][   T40] audit: type=1326 audit(1770107425.547:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.3.692" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf746d579 code=0x7ffc0000
[  263.767326][   T40] audit: type=1326 audit(1770107425.547:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.3.692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[  263.768031][   T46] Bluetooth: hci4: Frame reassembly failed (-84)
[  263.774708][   T40] audit: type=1326 audit(1770107425.547:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.3.692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[  263.784886][   T40] audit: type=1326 audit(1770107425.547:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.3.692" exe="/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf746d579 code=0x7ffc0000
[  263.791788][   T40] audit: type=1326 audit(1770107425.547:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.3.692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[  263.800606][   T40] audit: type=1326 audit(1770107425.547:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.3.692" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf746d579 code=0x7ffc0000
[  263.807748][   T40] audit: type=1326 audit(1770107425.547:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.3.692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[  263.812731][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.5.694'.
[  263.815506][   T40] audit: type=1326 audit(1770107425.547:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.3.692" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf746d579 code=0x7ffc0000
[  263.822285][ T8704] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  263.830496][ T8704] team0: Device ipvlan2 is already an upper device of the team interface
[  263.876137][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.694'.
[  263.890028][ T8706] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  263.893511][ T8706] team0: Device ipvlan2 is already an upper device of the team interface
[  263.941336][ T8691] bridge0: port 3(erspan0) entered disabled state
[  263.960815][ T8691] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.963362][ T8691] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.018198][ T8691] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  264.024758][ T8691] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  264.175283][   T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  264.191175][   T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  264.194484][   T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  264.197442][ T5955] Bluetooth: hci1: command 0x0406 tx timeout
[  264.205149][   T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  264.318315][ T6041] usb 9-1: USB disconnect, device number 7
[  264.379465][ T8726] sp0: Synchronizing with TNC
[  265.128158][ T8735] binder: binder_mmap: 8734 80a76000-80a7a000 bad vm_flags failed -1
[  265.134083][ T8735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.702'.
[  265.256003][ T8742] can: request_module (can-proto-0) failed.
[  265.260150][ T5962] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  265.263230][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: kworker/u33:6 Not tainted syzkaller #0 PREEMPT(full) 
[  265.263246][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  265.263254][ T5962] Workqueue: hci2 hci_rx_work
[  265.263272][ T5962] Call Trace:
[  265.263276][ T5962]  <TASK>
[  265.263280][ T5962]  dump_stack_lvl+0x100/0x190
[  265.263295][ T5962]  sysfs_warn_dup.cold+0x1c/0x28
[  265.263311][ T5962]  sysfs_create_dir_ns+0x24b/0x2b0
[  265.263327][ T5962]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  265.263341][ T5962]  ? find_held_lock+0x2b/0x80
[  265.263352][ T5962]  ? kobject_add_internal+0x25f/0x930
[  265.263367][ T5962]  ? kobject_add_internal+0x25f/0x930
[  265.263383][ T5962]  ? do_raw_spin_unlock+0x145/0x1e0
[  265.263401][ T5962]  kobject_add_internal+0x2c8/0x930
[  265.263419][ T5962]  kobject_add+0x16a/0x1e0
[  265.263434][ T5962]  ? __pfx_kobject_add+0x10/0x10
[  265.263448][ T5962]  ? class_to_subsys+0x10f/0x150
[  265.263465][ T5962]  ? kobject_put+0xb9/0x640
[  265.263478][ T5962]  ? _raw_spin_unlock+0x28/0x50
[  265.263492][ T5962]  device_add+0x294/0x1950
[  265.263507][ T5962]  ? __pfx_dev_set_name+0x10/0x10
[  265.263524][ T5962]  ? __pfx_device_add+0x10/0x10
[  265.263539][ T5962]  ? mgmt_send_event_skb+0x2fb/0x460
[  265.263556][ T5962]  hci_conn_add_sysfs+0x1a3/0x260
[  265.263573][ T5962]  le_conn_complete_evt+0x11cb/0x1f40
[  265.263591][ T5962]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  265.263608][ T5962]  hci_le_enh_conn_complete_evt+0x23d/0x3b0
[  265.263623][ T5962]  ? skb_pull_data+0x15f/0x1e0
[  265.263638][ T5962]  hci_le_meta_evt+0x34a/0x5f0
[  265.263658][ T5962]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  265.263674][ T5962]  hci_event_packet+0x682/0x11c0
[  265.263688][ T5962]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  265.263705][ T5962]  ? __pfx_hci_event_packet+0x10/0x10
[  265.263720][ T5962]  ? kcov_remote_start+0x374/0x660
[  265.263733][ T5962]  ? lockdep_hardirqs_on+0x78/0x100
[  265.263750][ T5962]  hci_rx_work+0x451/0xfc0
[  265.263767][ T5962]  process_one_work+0x9c2/0x1840
[  265.263789][ T5962]  ? __pfx_process_one_work+0x10/0x10
[  265.263809][ T5962]  ? assign_work+0x19c/0x250
[  265.263826][ T5962]  worker_thread+0x5da/0xe40
[  265.263846][ T5962]  ? __pfx_worker_thread+0x10/0x10
[  265.263862][ T5962]  ? kthread+0x17d/0x730
[  265.263876][ T5962]  ? __pfx_worker_thread+0x10/0x10
[  265.263891][ T5962]  kthread+0x3b3/0x730
[  265.263907][ T5962]  ? __pfx_kthread+0x10/0x10
[  265.263921][ T5962]  ? ret_from_fork+0x79/0xaf0
[  265.263930][ T5962]  ? ret_from_fork+0x79/0xaf0
[  265.263940][ T5962]  ? rcu_is_watching+0x12/0xc0
[  265.263951][ T5962]  ? __pfx_kthread+0x10/0x10
[  265.263966][ T5962]  ret_from_fork+0x754/0xaf0
[  265.263980][ T5962]  ? __pfx_ret_from_fork+0x10/0x10
[  265.263996][ T5962]  ? __switch_to+0x7b9/0x10c0
[  265.264014][ T5962]  ? __pfx_kthread+0x10/0x10
[  265.264037][ T5962]  ret_from_fork_asm+0x1a/0x30
[  265.264077][ T5962]  </TASK>
[  265.264100][ T5962] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  265.348422][ T8749] netlink: 'syz.5.705': attribute type 1 has an invalid length.
[  265.350949][ T5962] Bluetooth: hci2: failed to register connection device
[  265.351385][ T8749] netlink: 236 bytes leftover after parsing attributes in process `syz.5.705'.
[  265.423024][ T8753] netlink: 16 bytes leftover after parsing attributes in process `syz.2.706'.
[  265.797394][ T5959] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  266.072315][ T8760] syzkaller0: entered promiscuous mode
[  266.075080][ T8760] syzkaller0: entered allmulticast mode
[  266.745822][ T8779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.716'.
[  266.766998][ T5959] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  266.775557][ T5959] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  266.778975][ T5959] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  266.779690][ T1146] team0: Port device netdevsim0 removed
[  266.782399][ T5959] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  266.785772][ T5959] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  266.888613][ T8792] chnl_net:caif_netlink_parms(): no params data found
[  266.932373][ T1146] erspan0: left allmulticast mode
[  266.934127][ T1146] erspan0: left promiscuous mode
[  266.935785][ T1146] bridge0: port 3(erspan0) entered disabled state
[  266.940234][ T1146] bridge_slave_1: left allmulticast mode
[  266.942727][ T1146] bridge_slave_1: left promiscuous mode
[  266.945612][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.950780][ T1146] bridge_slave_0: left allmulticast mode
[  266.953181][ T1146] bridge_slave_0: left promiscuous mode
[  266.955743][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.328717][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  267.333940][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  267.342037][ T1146] bond0 (unregistering): Released all slaves
[  267.348873][ T1146] bond1 (unregistering): Released all slaves
[  267.411892][ T8792] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.414616][ T8792] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.417657][ T8792] bridge_slave_0: entered allmulticast mode
[  267.420763][ T8792] bridge_slave_0: entered promiscuous mode
[  267.426168][ T8792] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.430563][ T8792] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.433927][ T8792] bridge_slave_1: entered allmulticast mode
[  267.437246][ T8792] bridge_slave_1: entered promiscuous mode
[  267.478663][ T8792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  267.488063][ T8792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  267.585299][ T8792] team0: Port device team_slave_0 added
[  267.596589][ T8792] team0: Port device team_slave_1 added
[  267.642593][ T8792] batman_adv: batadv0: Adding interface: batadv_slave_0
[  267.647015][ T8792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  267.665087][ T8792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  267.673546][ T8792] batman_adv: batadv0: Adding interface: batadv_slave_1
[  267.675839][ T8792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  267.688955][ T8792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  267.761647][ T8792] hsr_slave_0: entered promiscuous mode
[  267.764686][ T8792] hsr_slave_1: entered promiscuous mode
[  267.766804][ T8792] debugfs: 'hsr0' already exists in 'hsr'
[  267.768837][ T8792] Cannot create hsr debugfs directory
[  267.872972][ T1146] hsr_slave_0: left promiscuous mode
[  267.875141][ T1146] 0�: left promiscuous mode
[  267.876910][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0
[  267.882261][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1
[  268.174007][ T1146] team0 (unregistering): Port device team_slave_1 removed
[  268.195108][ T1146] team0 (unregistering): Port device team_slave_0 removed
[  268.438959][ T8837] bond1: (slave dummy0): Releasing active interface
[  268.441871][ T8837] dummy0: left promiscuous mode
[  268.444041][ T8837] dummy0: left allmulticast mode
[  268.451566][ T8837] bridge_slave_0: left allmulticast mode
[  268.453461][ T8837] bridge_slave_0: left promiscuous mode
[  268.455314][ T8837] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.461892][ T8837] bond0: (slave bridge_slave_1): Releasing backup interface
[  268.466413][ T8837] bond0: (slave bond_slave_0): Releasing backup interface
[  268.471832][ T8837] bond0: (slave 
c
@0�): Releasing backup interface
[  268.479230][ T8837] team0: Port device team_slave_0 removed
[  268.486970][ T8837] team0: Port device team_slave_1 removed
[  268.489804][ T8837] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  268.492139][ T8837] batman_adv: batadv0: Removing interface: batadv_slave_0
[  268.495165][ T8837] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  268.498085][ T8837] batman_adv: batadv0: Removing interface: batadv_slave_1
[  268.502272][ T8837] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  268.584721][ T8792] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  268.593500][ T8792] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  268.610548][ T8792] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  268.687217][ T8792] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  268.727904][ T8861] pim6reg1: entered promiscuous mode
[  268.729786][ T8861] pim6reg1: entered allmulticast mode
[  268.778945][ T8792] 8021q: adding VLAN 0 to HW filter on device bond0
[  268.809131][ T8792] 8021q: adding VLAN 0 to HW filter on device team0
[  268.877251][ T5959] Bluetooth: hci2: command tx timeout
[  268.910880][   T73] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.913815][   T73] bridge0: port 1(bridge_slave_0) entered forwarding state
[  268.920224][ T1206] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.923134][ T1206] bridge0: port 2(bridge_slave_1) entered forwarding state
[  268.947259][ T6008] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  269.053710][ T8888] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  269.055834][ T8888] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  269.061939][ T8888] vhci_hcd vhci_hcd.0: Device attached
[  269.081562][ T8894] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.734'.
[  269.084437][ T8894] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  269.089774][ T8894] fuse: Bad value for 'fd'
[  269.109526][ T6008] usb 10-1: config 0 has no interfaces?
[  269.111972][ T6008] usb 10-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  269.115737][ T6008] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.129636][ T6008] usb 10-1: config 0 descriptor??
[  269.149664][ T8888] x_tables: duplicate underflow at hook 3
[  269.164033][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.733'.
[  269.171507][ T8888] fuse: Unknown parameter ''�м-���fr0xffffffffffffffff'
[  269.179409][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.733'.
[  269.200958][ T8888] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  269.204408][ T8888] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  269.211513][ T8888] bridge1: entered promiscuous mode
[  269.233232][ T8792] 8021q: adding VLAN 0 to HW filter on device batadv0
[  269.317951][ T5959] Bluetooth: hci3: command 0x0406 tx timeout
[  269.337301][   T29] usb 42-1: SetAddress Request (10) to port 0
[  269.339725][   T29] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd
[  269.374131][ T8856] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.376648][ T8856] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.483028][ T8856] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  269.490074][ T8856] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  269.670715][ T8889] vhci_hcd: connection reset by peer
[  269.672782][ T1149] vhci_hcd vhci_hcd.2: stop threads
[  269.674646][ T1149] vhci_hcd vhci_hcd.2: release socket
[  269.678781][ T1149] vhci_hcd vhci_hcd.2: disconnect device
[  269.742000][ T6021] syz0: Port: 1 Link DOWN
[  269.742008][ T1148] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  269.743813][ T1148] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  269.754547][ T1148] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  269.759390][ T1148] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  269.779992][ T6021] usb 10-1: USB disconnect, device number 8
[  269.792282][ T8792] veth0_vlan: entered promiscuous mode
[  269.805589][ T8792] veth1_vlan: entered promiscuous mode
[  269.828919][ T8792] veth0_macvtap: entered promiscuous mode
[  269.833428][ T8792] veth1_macvtap: entered promiscuous mode
[  269.857747][ T8792] batman_adv: batadv0: Interface activated: batadv_slave_0
[  269.864991][ T8792] batman_adv: batadv0: Interface activated: batadv_slave_1
[  269.875373][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.879473][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.901089][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.903918][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  269.941241][ T3737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.943757][ T3737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.954116][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.956672][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.770447][ T8942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.743'.
[  270.919507][ T5962] Bluetooth: hci2: command tx timeout
[  270.931296][ T8947] bridge_slave_0: left allmulticast mode
[  270.933682][ T8947] bridge_slave_0: left promiscuous mode
[  270.936144][ T8947] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.943453][ T8947] bridge_slave_1: left allmulticast mode
[  270.945891][ T8947] bridge_slave_1: left promiscuous mode
[  270.948769][ T8947] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.956075][ T8947] bond0: (slave bond_slave_0): Releasing backup interface
[  270.962608][ T8947] bond0: (slave bond_slave_1): Releasing backup interface
[  270.971889][ T8947] team0: Port device team_slave_0 removed
[  270.982648][ T8947] team0: Port device team_slave_1 removed
[  270.986055][ T8947] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  270.989570][ T8947] batman_adv: batadv0: Removing interface: batadv_slave_0
[  270.993899][ T8947] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  270.996994][ T8947] batman_adv: batadv0: Removing interface: batadv_slave_1
[  271.002537][ T8947] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  271.116037][ T8955] openvswitch: netlink: nsh attr 247 is out of range max 3
[  271.177400][   T55] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  271.329057][   T55] usb 7-1: config 0 has no interfaces?
[  271.330856][   T55] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  271.333743][   T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.338969][   T55] usb 7-1: config 0 descriptor??
[  271.417217][ T8377] usb 11-1: new high-speed USB device number 2 using dummy_hcd
[  271.567327][ T8377] usb 11-1: Using ep0 maxpacket: 8
[  271.570581][ T8377] usb 11-1: config index 0 descriptor too short (expected 301, got 45)
[  271.573403][ T8377] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  271.576399][ T8949] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.576567][ T8377] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  271.582746][ T8377] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  271.586414][ T8377] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  271.590634][ T8377] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  271.593637][ T8377] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.621371][ T8949] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  271.626425][ T8949] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  271.694054][ T3737] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  271.700643][ T3737] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  271.708209][ T3737] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  271.711181][ T3737] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  271.810129][ T6039] usb 7-1: USB disconnect, device number 10
[  272.365213][ T1415] ieee802154 phy0 wpan0: encryption failed: -22
[  272.366899][ T8989] usbtmc 11-1:16.0: simple usb_control_msg returned 0
[  272.369166][ T1415] ieee802154 phy1 wpan1: encryption failed: -22
[  272.570073][   T34] usb 11-1: USB disconnect, device number 2
[  272.614142][ T9006] netlink: 224 bytes leftover after parsing attributes in process `syz.3.765'.
[  272.619177][ T9006] netlink: 220 bytes leftover after parsing attributes in process `syz.3.765'.
[  272.697280][  T958] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  272.858854][  T958] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  272.862740][  T958] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  272.866249][  T958] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  272.869581][  T958] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  272.873743][  T958] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  272.876628][  T958] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.880953][  T958] usb 10-1: config 0 descriptor??
[  272.997337][ T5962] Bluetooth: hci2: command tx timeout
[  273.299967][  T958] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  273.302940][  T958] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  273.306012][  T958] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  273.317267][  T958] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  273.319678][  T958] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  273.322028][  T958] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  273.324365][  T958] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  273.326788][  T958] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  273.346625][  T958] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  273.352562][  T958] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  273.368961][  T958] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  273.479646][ T8377] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  273.550934][   T53] usb 10-1: USB disconnect, device number 9
[  273.639306][ T8377] usb 8-1: config 0 has no interfaces?
[  273.641721][ T8377] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  273.645567][ T8377] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.650880][ T8377] usb 8-1: config 0 descriptor??
[  274.144662][ T9012] ip6gretap0: left allmulticast mode
[  274.156996][   T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  274.160070][   T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  274.162978][   T13] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  274.165946][   T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  274.437277][   T29] usb 42-1: device descriptor read/8, error -110
[  274.508895][ T8952] usb 8-1: USB disconnect, device number 3
[  274.827765][   T29] usb usb42-port1: attempt power cycle
[  274.998298][ T9057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.779'.
[  275.013229][ T9057] bond2: (slave dummy0): Releasing active interface
[  275.015871][ T9057] dummy0 (unregistering): left promiscuous mode
[  275.019854][ T9057] dummy0 (unregistering): left allmulticast mode
[  275.092685][ T5962] Bluetooth: hci2: command tx timeout
[  275.380592][ T9068] netlink: 12 bytes leftover after parsing attributes in process `syz.5.783'.
[  275.391083][   T29] usb usb42-port1: unable to enumerate USB device
[  275.406839][ T9068] 8021q: adding VLAN 0 to HW filter on device bond3
[  275.422782][ T9068] macvlan2: entered promiscuous mode
[  275.424504][ T9068] macvlan2: entered allmulticast mode
[  275.428988][ T9068] bond3: (slave macvlan2): Opening slave failed
[  275.902532][ T9065] syz.6.781 (9065) used greatest stack depth: 17736 bytes left
[  276.535040][ T9085] syzkaller0: entered promiscuous mode
[  276.536823][ T9085] syzkaller0: entered allmulticast mode
[  276.548171][ T9086] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[  276.550286][ T9086] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  276.553002][ T9086] vhci_hcd vhci_hcd.0: Device attached
[  276.563655][ T9086] x_tables: duplicate underflow at hook 3
[  276.566650][ T9086] netlink: 8 bytes leftover after parsing attributes in process `syz.5.786'.
[  276.570435][ T9086] fuse: Unknown parameter ''�м-���fr0xffffffffffffffff'
[  276.573387][ T9086] netlink: 8 bytes leftover after parsing attributes in process `syz.5.786'.
[  276.879629][ T9086] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  276.883004][ T9086] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  276.886705][ T9086] bridge2: entered promiscuous mode
[  276.936257][ T9097] overlay: filesystem on ./bus not supported as upperdir
[  276.999543][ T9087] vhci_hcd: connection closed
[  276.999726][   T13] vhci_hcd vhci_hcd.5: stop threads
[  277.002954][   T13] vhci_hcd vhci_hcd.5: release socket
[  277.004730][   T13] vhci_hcd vhci_hcd.5: disconnect device
[  277.324947][ T9091] netlink: 8 bytes leftover after parsing attributes in process `syz.6.788'.
[  277.773170][ T9115] netlink: 4 bytes leftover after parsing attributes in process `syz.6.795'.
[  278.217444][ T6008] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  278.427213][ T6008] usb 10-1: Using ep0 maxpacket: 8
[  278.431418][ T6008] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[  278.434577][ T6008] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  278.438908][ T6008] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  278.443228][ T6008] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  278.447314][ T6008] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  278.453732][ T6008] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  278.461335][ T6008] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.489598][ T9139] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  278.491755][ T9139] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  278.494557][ T9139] vhci_hcd vhci_hcd.0: Device attached
[  278.498840][ T9139] random: crng reseeded on system resumption
[  278.505280][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  278.509074][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  278.520883][ T9144] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7)
[  278.523407][ T9144] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  278.529796][ T9144] vhci_hcd vhci_hcd.0: Device attached
[  278.533027][ T9139] EXT4-fs (sr0): VFS: Can't find ext4 filesystem
[  278.552092][ T9144] x_tables: duplicate underflow at hook 3
[  278.558210][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.6.805'.
[  278.563646][ T9144] fuse: Unknown parameter ''�м-���fr0xffffffffffffffff'
[  278.568409][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.6.805'.
[  278.586003][ T9144] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  278.589671][ T9144] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  278.594187][ T9144] bridge1: entered promiscuous mode
[  278.768363][  T958] usb 42-1: SetAddress Request (14) to port 0
[  278.770491][  T958] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd
[  278.797391][   T53] usb 50-1: SetAddress Request (2) to port 0
[  278.799378][   T53] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd
[  279.123852][ T9145] vhci_hcd: connection reset by peer
[  279.125787][   T13] vhci_hcd vhci_hcd.6: stop threads
[  279.127564][   T13] vhci_hcd vhci_hcd.6: release socket
[  279.129599][   T13] vhci_hcd vhci_hcd.6: disconnect device
[  279.265030][ T9154] usbtmc 10-1:16.0: simple usb_control_msg returned 0
[  279.518570][ T6008] usb 10-1: USB disconnect, device number 10
[  279.812007][ T9142] vhci_hcd: connection reset by peer
[  279.814549][ T1148] vhci_hcd vhci_hcd.2: stop threads
[  279.816765][ T1148] vhci_hcd vhci_hcd.2: release socket
[  279.819261][ T1148] vhci_hcd vhci_hcd.2: disconnect device
[  280.056036][ T9169] comedi comedi0: Minor 2 could not be opened
[  281.163602][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.814'.
[  281.181838][ T9207] bond2: (slave dummy0): Releasing active interface
[  281.184055][ T9207] dummy0 (unregistering): left promiscuous mode
[  281.186052][ T9207] dummy0 (unregistering): left allmulticast mode
[  281.258269][ T1026] usb 11-1: new high-speed USB device number 3 using dummy_hcd
[  281.333629][ T9218] ip6gretap0: left promiscuous mode
[  281.339782][ T9218] 8021q: adding VLAN 0 to HW filter on device bond0
[  281.342576][ T9218] 8021q: adding VLAN 0 to HW filter on device team0
[  281.345486][ T9218] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  281.397795][ T9221] netlink: 36 bytes leftover after parsing attributes in process `syz.3.823'.
[  281.407238][   T34] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  281.419377][ T1026] usb 11-1: config 7 has an invalid interface number: 83 but max is 2
[  281.422079][ T1026] usb 11-1: config 7 has an invalid interface number: 38 but max is 2
[  281.425410][ T1026] usb 11-1: config 7 has an invalid interface number: 90 but max is 2
[  281.429051][ T1026] usb 11-1: config 7 has an invalid interface number: 153 but max is 2
[  281.431711][ T1026] usb 11-1: config 7 has 4 interfaces, different from the descriptor's value: 3
[  281.434697][ T1026] usb 11-1: config 7 has no interface number 0
[  281.436711][ T1026] usb 11-1: config 7 has no interface number 1
[  281.438764][ T1026] usb 11-1: config 7 has no interface number 2
[  281.440785][ T1026] usb 11-1: config 7 has no interface number 3
[  281.442841][ T1026] usb 11-1: config 7 interface 83 altsetting 1 bulk endpoint 0xE has invalid maxpacket 64
[  281.446078][ T1026] usb 11-1: config 7 interface 83 altsetting 1 has a duplicate endpoint with address 0xB, skipping
[  281.449545][ T1026] usb 11-1: config 7 interface 83 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[  281.453741][ T1026] usb 11-1: too many endpoints for config 7 interface 38 altsetting 224: 158, using maximum allowed: 30
[  281.457391][ T1026] usb 11-1: config 7 interface 38 altsetting 224 bulk endpoint 0x6 has invalid maxpacket 1024
[  281.460651][ T1026] usb 11-1: config 7 interface 38 altsetting 224 has 2 endpoint descriptors, different from the interface descriptor's value: 158
[  281.465191][ T1026] usb 11-1: config 7 interface 90 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  281.468699][ T1026] usb 11-1: config 7 interface 90 altsetting 8 has a duplicate endpoint with address 0xB, skipping
[  281.472029][ T1026] usb 11-1: config 7 interface 90 altsetting 8 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  281.475449][ T1026] usb 11-1: config 7 interface 90 altsetting 8 has a duplicate endpoint with address 0x6, skipping
[  281.479189][ T1026] usb 11-1: config 7 interface 90 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 8
[  281.482252][ T1026] usb 11-1: config 7 interface 90 altsetting 8 has a duplicate endpoint with address 0xE, skipping
[  281.485578][ T1026] usb 11-1: config 7 interface 90 altsetting 8 endpoint 0x9 has an invalid bInterval 186, changing to 7
[  281.489166][ T1026] usb 11-1: config 7 interface 90 altsetting 8 endpoint 0xF has invalid maxpacket 1023, setting to 64
[  281.492562][ T1026] usb 11-1: config 7 interface 90 altsetting 8 has a duplicate endpoint with address 0x8F, skipping
[  281.495816][ T1026] usb 11-1: config 7 interface 90 altsetting 8 endpoint 0x7 has invalid maxpacket 1040, setting to 64
[  281.499343][ T1026] usb 11-1: config 7 interface 90 altsetting 8 has a duplicate endpoint with address 0x7, skipping
[  281.502674][ T1026] usb 11-1: config 7 interface 90 altsetting 8 has 14 endpoint descriptors, different from the interface descriptor's value: 13
[  281.506767][ T1026] usb 11-1: config 7 interface 153 altsetting 155 has a duplicate endpoint with address 0x9, skipping
[  281.510343][ T1026] usb 11-1: config 7 interface 153 altsetting 155 has a duplicate endpoint with address 0x6, skipping
[  281.513745][ T1026] usb 11-1: config 7 interface 153 altsetting 155 has a duplicate endpoint with address 0x9, skipping
[  281.517127][ T1026] usb 11-1: config 7 interface 153 altsetting 155 has a duplicate endpoint with address 0x6, skipping
[  281.520761][ T1026] usb 11-1: config 7 interface 153 altsetting 155 has a duplicate endpoint with address 0x4, skipping
[  281.524562][ T1026] usb 11-1: config 7 interface 153 altsetting 155 has a duplicate endpoint with address 0x8, skipping
[  281.528419][ T1026] usb 11-1: config 7 interface 153 altsetting 155 has a duplicate endpoint with address 0x3, skipping
[  281.533047][ T1026] usb 11-1: config 7 interface 153 altsetting 155 has a duplicate endpoint with address 0x5, skipping
[  281.536493][ T1026] usb 11-1: config 7 interface 83 has no altsetting 0
[  281.538881][ T1026] usb 11-1: config 7 interface 38 has no altsetting 0
[  281.541138][ T1026] usb 11-1: config 7 interface 90 has no altsetting 0
[  281.543376][ T1026] usb 11-1: config 7 interface 153 has no altsetting 0
[  281.557360][   T34] usb 7-1: Using ep0 maxpacket: 8
[  281.567377][   T34] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  281.570044][   T34] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  281.573107][   T34] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  281.587239][   T34] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  281.590409][   T34] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  281.597324][   T34] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  281.600513][   T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.367088][ T9238] usbtmc 7-1:16.0: simple usb_control_msg returned 0
[  282.568668][ T6021] usb 7-1: USB disconnect, device number 11
[  282.848259][ T9246] comedi comedi0: Minor 48 is invalid!
[  283.307290][ T8952] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  283.797372][  T958] usb 42-1: device descriptor read/8, error -110
[  283.879348][   T53] usb 50-1: device descriptor read/8, error -110
[  284.013876][ T1026] usb 11-1: New USB device found, idVendor=2b73, idProduct=0023, bcdDevice=49.3b
[  284.016779][ T1026] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.032681][ T1026] usb 11-1: Product: 砙꺵෫忣숴폎댔뷧啹ൃ扺錤왎璚鴮㌂䞧邃筒笓䄂ﺣ킯픀ჟᶸ鈈둷㊱༒Ⴐ웈諪咟솮訴㏌萙ᚘ뤀ࢤ먊Ȯᬃ豛䢋滞遻ః娥풨驑䝏匿褱
[  284.187785][  T958] usb usb42-port1: attempt power cycle
[  284.239253][ T8952] usb 8-1: config 0 has no interfaces?
[  284.241259][ T8952] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  284.244292][ T8952] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.255353][ T8952] usb 8-1: config 0 descriptor??
[  284.289068][ T1026] usb 11-1: Manufacturer: 
[  284.293242][ T1026] usb 11-1: can't set config #7, error -71
[  284.298251][ T1026] usb 11-1: USB disconnect, device number 3
[  284.335063][ T9268] loop8: detected capacity change from 0 to 7
[  284.343474][ T6606]  loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[  284.346648][ T6606] loop8: partition table partially beyond EOD, truncated
[  284.351209][ T6606] loop8: p1 size 3651402975 extends beyond EOD, truncated
[  284.356222][ T6606] loop8: p2 start 956478 is beyond EOD, truncated
[  284.363803][ T9268]  loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[  284.366193][ T9268] loop8: partition table partially beyond EOD, truncated
[  284.369189][ T9268] loop8: p1 size 3651402975 extends beyond EOD, truncated
[  284.372477][ T9268] loop8: p2 start 956478 is beyond EOD, truncated
[  284.512411][ T6021] usb 8-1: USB disconnect, device number 4
[  284.580888][   T53] usb usb50-port1: attempt power cycle
[  284.767943][  T958] usb usb42-port1: unable to enumerate USB device
[  285.098255][ T9305] netlink: 'syz.3.851': attribute type 1 has an invalid length.
[  285.138109][   T53] usb usb50-port1: unable to enumerate USB device
[  285.347314][  T958] usb 8-1: new low-speed USB device number 5 using dummy_hcd
[  285.477277][  T958] usb 8-1: device descriptor read/64, error -71
[  285.729773][ T9308] netlink: 28 bytes leftover after parsing attributes in process `syz.2.850'.
[  285.737280][  T958] usb 8-1: new low-speed USB device number 6 using dummy_hcd
[  285.867275][  T958] usb 8-1: device descriptor read/64, error -71
[  285.989515][  T958] usb usb8-port1: attempt power cycle
[  286.207427][ T9322] misc userio: Invalid payload size
[  286.327339][  T958] usb 8-1: new low-speed USB device number 7 using dummy_hcd
[  286.347983][  T958] usb 8-1: device descriptor read/8, error -71
[  286.357537][ T8952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.443914][ T9330] loop8: detected capacity change from 0 to 7
[  286.446696][ T6606]  loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[  286.457222][ T6606] loop8: partition table partially beyond EOD, truncated
[  286.459730][ T6606] loop8: p1 size 3651402975 extends beyond EOD, truncated
[  286.482104][ T9332] 9p: Could not find request transport: xen
[  286.483254][ T6606] loop8: p2 start 956478 is beyond EOD, truncated
[  286.494280][ T9330]  loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[  286.497803][ T9330] loop8: partition table partially beyond EOD, truncated
[  286.500983][ T9330] loop8: p1 size 3651402975 extends beyond EOD, truncated
[  286.517799][ T9330] loop8: p2 start 956478 is beyond EOD, truncated
[  286.607294][  T958] usb 8-1: new low-speed USB device number 8 using dummy_hcd
[  286.627592][  T958] usb 8-1: device descriptor read/8, error -71
[  286.737741][  T958] usb usb8-port1: unable to enumerate USB device
[  286.781257][  T736] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  286.784127][  T736] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  286.808802][  T736] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  286.811648][  T736] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  287.636182][ T9373] loop8: detected capacity change from 0 to 7
[  287.641114][ T6606]  loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[  287.644224][ T6606] loop8: partition table partially beyond EOD, truncated
[  287.659782][ T6606] loop8: p1 size 3651402975 extends beyond EOD, truncated
[  287.667278][ T6606] loop8: p2 start 956478 is beyond EOD, truncated
[  287.745568][ T9373]  loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[  287.748263][ T9373] loop8: partition table partially beyond EOD, truncated
[  287.757661][ T9373] loop8: p1 size 3651402975 extends beyond EOD, truncated
[  287.767702][ T9373] loop8: p2 start 956478 is beyond EOD, truncated
[  288.164515][ T9393] syzkaller0: entered promiscuous mode
[  288.166389][ T9393] syzkaller0: entered allmulticast mode
[  288.502309][   T40] kauditd_printk_skb: 34 callbacks suppressed
[  288.502322][   T40] audit: type=1326 audit(1770107450.307:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.3.889" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[  288.511610][   T40] audit: type=1326 audit(1770107450.307:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.3.889" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[  288.518551][   T40] audit: type=1326 audit(1770107450.307:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.3.889" exe="/syz-executor" sig=0 arch=40000003 syscall=23 compat=1 ip=0xf746d579 code=0x7ffc0000
[  288.525436][   T40] audit: type=1326 audit(1770107450.307:2494): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.3.889" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[  288.532624][   T40] audit: type=1326 audit(1770107450.307:2495): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.3.889" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[  288.539822][   T40] audit: type=1326 audit(1770107450.307:2496): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.3.889" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf746d579 code=0x7ffc0000
[  288.546866][   T40] audit: type=1326 audit(1770107450.307:2497): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.3.889" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[  288.553670][   T40] audit: type=1326 audit(1770107450.307:2498): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.3.889" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[  288.560436][   T40] audit: type=1326 audit(1770107450.307:2499): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.3.889" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf746d579 code=0x7ffc0000
[  288.567370][   T40] audit: type=1326 audit(1770107450.307:2500): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.3.889" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[  289.209452][ T9426] lo speed is unknown, defaulting to 1000
[  289.212427][ T9426] lo speed is unknown, defaulting to 1000
[  289.214610][ T9426] lo speed is unknown, defaulting to 1000
[  289.223527][ T9426] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  289.240067][ T9426] lo speed is unknown, defaulting to 1000
[  289.244849][ T9426] lo speed is unknown, defaulting to 1000
[  289.248430][ T9426] lo speed is unknown, defaulting to 1000
[  289.251013][ T9426] lo speed is unknown, defaulting to 1000
[  289.882080][ T9446] overlay: Unknown parameter '//file0'
[  289.885041][ T9446] cgroup: release_agent respecified
[  289.918001][ T9449] fuse: Bad value for 'fd'
[  290.321288][ T9469] 9p: Could not find request transport: xen
[  291.107274][   T53] usb 11-1: new high-speed USB device number 4 using dummy_hcd
[  291.257790][   T53] usb 11-1: Using ep0 maxpacket: 8
[  291.260836][   T53] usb 11-1: config index 0 descriptor too short (expected 301, got 45)
[  291.263499][   T53] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  291.266678][   T53] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  291.270429][   T53] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  291.273592][   T53] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  291.277976][   T53] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  291.281002][   T53] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.386098][ T9487] netlink: 4 bytes leftover after parsing attributes in process `syz.5.916'.
[  292.057334][ T8952] hid-generic 0005:10CF:0000.0004: item fetching failed at offset 0/1
[  292.060179][ T8952] hid-generic 0005:10CF:0000.0004: probe with driver hid-generic failed with error -22
[  292.248282][  T958] usb 11-1: USB disconnect, device number 4
[  292.547229][ T9508] 9p: Could not find request transport: xen
[  293.378873][ T9524] siw: device registration error -23
[  293.416463][ T9526] netlink: 36 bytes leftover after parsing attributes in process `syz.5.928'.
[  293.916989][ T9540] lo speed is unknown, defaulting to 1000
[  294.053190][ T9554] FAULT_INJECTION: forcing a failure.
[  294.053190][ T9554] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  294.057373][ T9554] CPU: 3 UID: 0 PID: 9554 Comm: syz.5.938 Not tainted syzkaller #0 PREEMPT(full) 
[  294.057388][ T9554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  294.057394][ T9554] Call Trace:
[  294.057398][ T9554]  <TASK>
[  294.057402][ T9554]  dump_stack_lvl+0x100/0x190
[  294.057419][ T9554]  should_fail_ex.cold+0x5/0xa
[  294.057438][ T9554]  _copy_to_user+0x32/0xd0
[  294.057456][ T9554]  simple_read_from_buffer+0xcb/0x170
[  294.057469][ T9554]  proc_fail_nth_read+0x1af/0x230
[  294.057483][ T9554]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  294.057497][ T9554]  ? rw_verify_area+0xce/0x6d0
[  294.057509][ T9554]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  294.057522][ T9554]  vfs_read+0x1e4/0xb30
[  294.057535][ T9554]  ? __pfx_vfs_read+0x10/0x10
[  294.057546][ T9554]  ? find_held_lock+0x2b/0x80
[  294.057557][ T9554]  ? __fget_files+0x215/0x3d0
[  294.057571][ T9554]  ? __fget_files+0x21f/0x3d0
[  294.057587][ T9554]  ksys_read+0x12a/0x250
[  294.057599][ T9554]  ? __pfx_ksys_read+0x10/0x10
[  294.057615][ T9554]  do_int80_emulation+0x101/0x470
[  294.057631][ T9554]  asm_int80_emulation+0x1a/0x20
[  294.057642][ T9554] RIP: 0023:0xf713572b
[  294.057650][ T9554] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  294.057661][ T9554] RSP: 002b:00000000f53f64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  294.057672][ T9554] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53f65d0
[  294.057679][ T9554] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  294.057685][ T9554] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  294.057690][ T9554] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  294.057697][ T9554] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  294.057710][ T9554]  </TASK>
[  294.877414][ T9562] netlink: 36 bytes leftover after parsing attributes in process `syz.6.940'.
[  295.331831][ T9583] siw: device registration error -23
[  295.567340][ T9496] ------------[ cut here ]------------
[  295.569779][ T9496] DEBUG_LOCKS_WARN_ON(lock->magic != lock)
[  295.569791][ T9496] WARNING: kernel/locking/mutex.c:593 at __mutex_lock+0x93d/0x1b90, CPU#2: khidpd_10cf0000/9496
[  295.576748][ T9496] Modules linked in:
[  295.578828][ T9496] CPU: 2 UID: 0 PID: 9496 Comm: khidpd_10cf0000 Not tainted syzkaller #0 PREEMPT(full) 
[  295.582862][ T9496] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  295.587107][ T9496] RIP: 0010:__mutex_lock+0x944/0x1b90
[  295.589777][ T9496] Code: c0 03 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 77 10 00 00 8b 35 7e db 41 05 85 f6 75 13 48 8d 3d 83 ed 44 05 48 c7 c6 c0 a9 8f 8b <67> 48 0f b9 3a 90 e9 20 f8 ff ff 31 c9 31 d2 48 89 df e8 a5 cd 6b
[  295.598022][ T9496] RSP: 0000:ffffc9000e757b00 EFLAGS: 00010246
[  295.600621][ T9496] RAX: 0000000000000003 RBX: ffff88805f444058 RCX: 1ffffffff216f456
[  295.603995][ T9496] RDX: 0000000000000000 RSI: ffffffff8b8fa9c0 RDI: ffffffff90bab4c0
[  295.607420][ T9496] RBP: ffffc9000e757c80 R08: 0000000000000001 R09: 0000000000000000
[  295.610768][ T9496] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  295.614135][ T9496] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffc9000e757cf8
[  295.617619][ T9496] FS:  0000000000000000(0000) GS:ffff8880975e3000(0000) knlGS:0000000000000000
[  295.621433][ T9496] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  295.624276][ T9496] CR2: 00000000f7f3a190 CR3: 00000000648b1000 CR4: 0000000000352ef0
[  295.627800][ T9496] Call Trace:
[  295.629300][ T9496]  <TASK>
[  295.630610][ T9496]  ? __pfx_debug_object_deactivate+0x10/0x10
[  295.633216][ T9496]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  295.635544][ T9496]  ? l2cap_unregister_user+0x71/0x240
[  295.638262][ T9496]  ? __pfx___mutex_lock+0x10/0x10
[  295.640468][ T9496]  ? __try_to_del_timer_sync+0x107/0x160
[  295.642923][ T9496]  ? __try_to_del_timer_sync+0x107/0x160
[  295.645372][ T9496]  ? rcu_is_watching+0x12/0xc0
[  295.647695][ T9496]  ? lockdep_hardirqs_on+0x78/0x100
[  295.649976][ T9496]  ? __try_to_del_timer_sync+0x107/0x160
[  295.652387][ T9496]  ? __pfx___try_to_del_timer_sync+0x10/0x10
[  295.654997][ T9496]  ? __timer_delete_sync+0x151/0x1c0
[  295.657363][ T9496]  ? l2cap_unregister_user+0x71/0x240
[  295.659796][ T9496]  l2cap_unregister_user+0x71/0x240
[  295.662091][ T9496]  hidp_session_thread+0x459/0x680
[  295.664294][ T9496]  ? __pfx_hidp_session_thread+0x10/0x10
[  295.666714][ T9496]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  295.669566][ T9496]  ? __kthread_parkme+0xbb/0x230
[  295.671724][ T9496]  ? rcu_is_watching+0x12/0xc0
[  295.673823][ T9496]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  295.676502][ T9496]  ? __kthread_parkme+0x18c/0x230
[  295.678792][ T9496]  ? __pfx_hidp_session_thread+0x10/0x10
[  295.681216][ T9496]  kthread+0x3b3/0x730
[  295.682999][ T9496]  ? __pfx_kthread+0x10/0x10
[  295.685013][ T9496]  ? ret_from_fork+0x79/0xaf0
[  295.687080][ T9496]  ? ret_from_fork+0x79/0xaf0
[  295.689255][ T9496]  ? rcu_is_watching+0x12/0xc0
[  295.691338][ T9496]  ? __pfx_kthread+0x10/0x10
[  295.693368][ T9496]  ret_from_fork+0x754/0xaf0
[  295.695376][ T9496]  ? __pfx_ret_from_fork+0x10/0x10
[  295.697675][ T9496]  ? __switch_to+0x7b9/0x10c0
[  295.699727][ T9496]  ? __pfx_kthread+0x10/0x10
[  295.701728][ T9496]  ret_from_fork_asm+0x1a/0x30
[  295.703301][ T9496]  </TASK>
[  295.704321][ T9496] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  295.706670][ T9496] CPU: 2 UID: 0 PID: 9496 Comm: khidpd_10cf0000 Not tainted syzkaller #0 PREEMPT(full) 
[  295.709809][ T9496] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  295.712990][ T9496] Call Trace:
[  295.714089][ T9496]  <TASK>
[  295.715058][ T9496]  dump_stack_lvl+0x100/0x190
[  295.716593][ T9496]  vpanic+0x20d/0x630
[  295.717890][ T9496]  panic+0xd1/0xd1
[  295.719122][ T9496]  ? __pfx_panic+0x10/0x10
[  295.720570][ T9496]  ? check_panic_on_warn+0x1f/0x90
[  295.722233][ T9496]  check_panic_on_warn.cold+0x19/0x34
[  295.723974][ T9496]  ? __mutex_lock+0x93d/0x1b90
[  295.725536][ T9496]  __warn.cold+0x191/0x2f8
[  295.726987][ T9496]  __report_bug+0x296/0x3d0
[  295.728466][ T9496]  ? __mutex_lock+0x93d/0x1b90
[  295.730049][ T9496]  ? __pfx___report_bug+0x10/0x10
[  295.731682][ T9496]  ? __lock_acquire+0x4a5/0x2630
[  295.733295][ T9496]  ? __lock_acquire+0x4a5/0x2630
[  295.734890][ T9496]  report_bug_entry+0xe1/0x290
[  295.736440][ T9496]  ? __mutex_lock+0x944/0x1b90
[  295.738008][ T9496]  handle_bug+0x1c9/0x2a0
[  295.739434][ T9496]  exc_invalid_op+0x17/0x50
[  295.740915][ T9496]  asm_exc_invalid_op+0x1a/0x20
[  295.742492][ T9496] RIP: 0010:__mutex_lock+0x944/0x1b90
[  295.744227][ T9496] Code: c0 03 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 77 10 00 00 8b 35 7e db 41 05 85 f6 75 13 48 8d 3d 83 ed 44 05 48 c7 c6 c0 a9 8f 8b <67> 48 0f b9 3a 90 e9 20 f8 ff ff 31 c9 31 d2 48 89 df e8 a5 cd 6b
[  295.750376][ T9496] RSP: 0000:ffffc9000e757b00 EFLAGS: 00010246
[  295.752332][ T9496] RAX: 0000000000000003 RBX: ffff88805f444058 RCX: 1ffffffff216f456
[  295.754859][ T9496] RDX: 0000000000000000 RSI: ffffffff8b8fa9c0 RDI: ffffffff90bab4c0
[  295.757391][ T9496] RBP: ffffc9000e757c80 R08: 0000000000000001 R09: 0000000000000000
[  295.759930][ T9496] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  295.762465][ T9496] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffc9000e757cf8
[  295.765001][ T9496]  ? __pfx_debug_object_deactivate+0x10/0x10
[  295.766938][ T9496]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  295.768673][ T9496]  ? l2cap_unregister_user+0x71/0x240
[  295.770419][ T9496]  ? __pfx___mutex_lock+0x10/0x10
[  295.772044][ T9496]  ? __try_to_del_timer_sync+0x107/0x160
[  295.773853][ T9496]  ? __try_to_del_timer_sync+0x107/0x160
[  295.775635][ T9496]  ? rcu_is_watching+0x12/0xc0
[  295.777187][ T9496]  ? lockdep_hardirqs_on+0x78/0x100
[  295.778871][ T9496]  ? __try_to_del_timer_sync+0x107/0x160
[  295.780671][ T9496]  ? __pfx___try_to_del_timer_sync+0x10/0x10
[  295.782588][ T9496]  ? __timer_delete_sync+0x151/0x1c0
[  295.784274][ T9496]  ? l2cap_unregister_user+0x71/0x240
[  295.786016][ T9496]  l2cap_unregister_user+0x71/0x240
[  295.787691][ T9496]  hidp_session_thread+0x459/0x680
[  295.789358][ T9496]  ? __pfx_hidp_session_thread+0x10/0x10
[  295.791141][ T9496]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  295.793141][ T9496]  ? __kthread_parkme+0xbb/0x230
[  295.794753][ T9496]  ? rcu_is_watching+0x12/0xc0
[  295.796309][ T9496]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  295.798309][ T9496]  ? __kthread_parkme+0x18c/0x230
[  295.799939][ T9496]  ? __pfx_hidp_session_thread+0x10/0x10
[  295.801738][ T9496]  kthread+0x3b3/0x730
[  295.803058][ T9496]  ? __pfx_kthread+0x10/0x10
[  295.804547][ T9496]  ? ret_from_fork+0x79/0xaf0
[  295.806070][ T9496]  ? ret_from_fork+0x79/0xaf0
[  295.807585][ T9496]  ? rcu_is_watching+0x12/0xc0
[  295.809151][ T9496]  ? __pfx_kthread+0x10/0x10
[  295.810650][ T9496]  ret_from_fork+0x754/0xaf0
[  295.812134][ T9496]  ? __pfx_ret_from_fork+0x10/0x10
[  295.813777][ T9496]  ? __switch_to+0x7b9/0x10c0
[  295.815293][ T9496]  ? __pfx_kthread+0x10/0x10
[  295.816791][ T9496]  ret_from_fork_asm+0x1a/0x30
[  295.818343][ T9496]  </TASK>
[  295.820063][ T9496] Kernel Offset: disabled
[  295.821460][ T9496] Rebooting in 86400 seconds..