last executing test programs:

4m3.232316635s ago: executing program 2 (id=903):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r1 = socket$kcm(0x11, 0x2, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2e0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f008004000000e00001100630277", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)={0xdc, 0x26, 0x101, 0x70bd26, 0xfffffffc, {0x1d}, [@nested={0xc8, 0xe, 0x0, 0x1, [@nested={0xc4, 0x52, 0x0, 0x1, [@generic="0292d09be5b9cb3573c6304d27c86d472d5cdfd86bce68f3aca5759cbb27b6a4d6c69442ba5f713c077b760f5d1542b594abced5536a9493fe60c588e31445d9a07c5c3c183573a05f25364683202c44041ce65e3455e90f4fc676049edf19394ff63167378a8f4210ff9f091be6366865195f8c0fe2ffe6ad22c086528df110143e5f50ee67db7ebe4aff468295aa2f9d288ebb19655d07c11578224505e6352a85693ec7c0f9a47dda3965e11549269335ad046b99b53457951a1c63f03a9c"]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x1}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
close_range(r6, 0xffffffffffffffff, 0x0)

4m2.885617796s ago: executing program 2 (id=904):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000140))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23)
ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f00000003c0)={0x2, 0x1, [0x6, 0x6, 0x8, 0x2, 0x3, 0x3c35306e, 0x8, 0x2]})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0x1, [0x0, 0xf7df]}, {0x80000000, 0x0, 0x4, [0x6]}, 0x1, [0x8, 0x3df]})
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000000)='./bus\x00', 0x12)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000402000000b00000bc26100000000000bf6720000000000016020000000000016702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)

4m0.778427017s ago: executing program 2 (id=908):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000140))
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r1, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r2, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc0008000500"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f00000003c0)={0x2, 0x1, [0x6, 0x6, 0x8, 0x2, 0x3, 0x3c35306e, 0x8, 0x2]})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0x1, [0x0, 0xf7df]}, {0x80000000, 0x0, 0x4, [0x6]}, 0x1, [0x8, 0x3df]})
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, 0x0, 0x0)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r6, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x1409, 0x4, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x800)
mkdir(&(0x7f0000000000)='./bus\x00', 0x12)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000402000000b00000bc26100000000000bf6720000000000016020000000000016702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)

4m0.552692965s ago: executing program 2 (id=913):
mkdir(&(0x7f0000000300)='./bus\x00', 0x63)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5)
r0 = inotify_init1(0x80000)
inotify_add_watch(r0, &(0x7f0000000100)='./bus\x00', 0x60000726)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x1, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800, 0x0, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000740)={&(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x7, 0x6})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000780)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[{}, {}], &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x7, 0x0, r3})
ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000180)={0x0, 0xffff, 0x0, 0x0, <r4=>0xffffffffffffffff})
fcntl$lock(r2, 0x7, &(0x7f0000000240)={0x2, 0x1, 0x7d, 0x2, r4})
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080), 0x3)
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)

3m59.600843683s ago: executing program 2 (id=916):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0xe, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x28080)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x38, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xd, 0xd}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)

3m58.861538452s ago: executing program 2 (id=919):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b72040150000000000010902120001010080320904000000ff"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x70, 0x1b1c, 0x1b09, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0xf0, 0x1, "", [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0x5, 0x29, 0x1, {0x22, 0xdc3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x1, 0xf}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x211, 0x5, 0x10, 0x3e, 0x8, 0x3}, 0x36, &(0x7f00000000c0)={0x5, 0xf, 0x36, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0xff, 0xf000, 0x4, [0xff0f, 0x3f00, 0xff3fff, 0xffc0, 0xcf, 0xfff0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x4, 0x7, 0x5}]}, 0x2, [{0xee, &(0x7f0000000540)=@string={0xee, 0x3, "99f2b5fe51baa0995b6b8b025f55372978353e464513b8978106b3977ead92314849b99824df5af438ef4ddf140c881902f049de23550411fb06de2f01330d2a0df82a1a9a78df723af55811d9c4dfb37f168c8ea362d8df6abce497fe7a3a96fbaa64827c64f196216dc3758fa7be25c3618197556bdce3f2f762e7ffa34619b96e24bed0affb16faedd98c87396bd5b152d5e6462cabc6da2d532dcb88d39a6bf8d48df2545690f4b6e96da2a295e73627b14b78d2c750d04401647b2bfdf59349ab4ffb0d75b81caf22b106687f6065a2f9bb04b55ab738f5e0e8236fcdea5d3711b1243d75e43da1f0c6"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1009}}]})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x21, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000e3e9f2d286a5944de26c6368b4520442074e6f75d443bff64504c2fb43f6e855348a10fa9b710174cb24fa8e67b9306958917ed0f623cb73e0d5652876b300d1b0df293df1bcaea9da1b651dfdeaaa149f1f6f2d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="c0500f94935440214e3fbe6559a99d5469d6f4fc59d9df850e600f0003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="c021011400002169b17405d9639c7978e7e94410dd16d7f9539ed955803fcd7d103a345222962e239f1cd2a925d04aff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x0, 0x3, "000202"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r1, &(0x7f00000004c0), 0x48, 0x820b, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x13c, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d4, 0x6c}, @in=@multicast1, {0x0, 0x192, 0x6, 0xffff, 0x8251a, 0x1, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xffffffbc}, 0x70bd2a, 0x0, 0xa, 0x1, 0x0, 0x60}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80800, 0x0, <r5=>0xffffffffffffffff})
ioctl$TIOCCONS(r5, 0x541d)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c)
syz_usb_control_io$printer(r0, &(0x7f0000000280)={0xc, &(0x7f00000001c0)={0x0, 0x23, 0x7, {0x7, 0x22, "bf0787a9fc"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}}, &(0x7f0000000b80)={0x1c, &(0x7f0000000980)={0x40, 0x15, 0x86, "869dd47404fcda56623a85467656c7871387d0845ce51f889738f12eb7accb82dbd518c9c8b8dbfaa76b0b1b6d6f326e10a379406353cf59e946a05d1e659a0517acf76d1a9d8e669619f59c8334038ccaf12a88ab32ce1c4e5fcd6097fde26dc68eb45c8b9725ba1833ecffadc3217844706271a9c96d1d58debf07cb950b729aa10ebb0662"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x64}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000ac0)={0x20, 0x0, 0x3, {0x1, 'H'}}, &(0x7f0000000b00)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000b40)={0x20, 0x0, 0x1, 0xff}})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000940)={0x24, &(0x7f00000006c0)={0x0, 0x1, 0x1, "91"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r6)

3m58.803424545s ago: executing program 32 (id=919):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b72040150000000000010902120001010080320904000000ff"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x70, 0x1b1c, 0x1b09, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0xf0, 0x1, "", [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0x5, 0x29, 0x1, {0x22, 0xdc3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x1, 0xf}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x211, 0x5, 0x10, 0x3e, 0x8, 0x3}, 0x36, &(0x7f00000000c0)={0x5, 0xf, 0x36, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0xff, 0xf000, 0x4, [0xff0f, 0x3f00, 0xff3fff, 0xffc0, 0xcf, 0xfff0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x4, 0x7, 0x5}]}, 0x2, [{0xee, &(0x7f0000000540)=@string={0xee, 0x3, "99f2b5fe51baa0995b6b8b025f55372978353e464513b8978106b3977ead92314849b99824df5af438ef4ddf140c881902f049de23550411fb06de2f01330d2a0df82a1a9a78df723af55811d9c4dfb37f168c8ea362d8df6abce497fe7a3a96fbaa64827c64f196216dc3758fa7be25c3618197556bdce3f2f762e7ffa34619b96e24bed0affb16faedd98c87396bd5b152d5e6462cabc6da2d532dcb88d39a6bf8d48df2545690f4b6e96da2a295e73627b14b78d2c750d04401647b2bfdf59349ab4ffb0d75b81caf22b106687f6065a2f9bb04b55ab738f5e0e8236fcdea5d3711b1243d75e43da1f0c6"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1009}}]})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x21, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000e3e9f2d286a5944de26c6368b4520442074e6f75d443bff64504c2fb43f6e855348a10fa9b710174cb24fa8e67b9306958917ed0f623cb73e0d5652876b300d1b0df293df1bcaea9da1b651dfdeaaa149f1f6f2d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="c0500f94935440214e3fbe6559a99d5469d6f4fc59d9df850e600f0003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="c021011400002169b17405d9639c7978e7e94410dd16d7f9539ed955803fcd7d103a345222962e239f1cd2a925d04aff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x0, 0x3, "000202"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r1, &(0x7f00000004c0), 0x48, 0x820b, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x13c, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d4, 0x6c}, @in=@multicast1, {0x0, 0x192, 0x6, 0xffff, 0x8251a, 0x1, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xffffffbc}, 0x70bd2a, 0x0, 0xa, 0x1, 0x0, 0x60}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80800, 0x0, <r5=>0xffffffffffffffff})
ioctl$TIOCCONS(r5, 0x541d)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c)
syz_usb_control_io$printer(r0, &(0x7f0000000280)={0xc, &(0x7f00000001c0)={0x0, 0x23, 0x7, {0x7, 0x22, "bf0787a9fc"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}}, &(0x7f0000000b80)={0x1c, &(0x7f0000000980)={0x40, 0x15, 0x86, "869dd47404fcda56623a85467656c7871387d0845ce51f889738f12eb7accb82dbd518c9c8b8dbfaa76b0b1b6d6f326e10a379406353cf59e946a05d1e659a0517acf76d1a9d8e669619f59c8334038ccaf12a88ab32ce1c4e5fcd6097fde26dc68eb45c8b9725ba1833ecffadc3217844706271a9c96d1d58debf07cb950b729aa10ebb0662"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x64}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000ac0)={0x20, 0x0, 0x3, {0x1, 'H'}}, &(0x7f0000000b00)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000b40)={0x20, 0x0, 0x1, 0xff}})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000940)={0x24, &(0x7f00000006c0)={0x0, 0x1, 0x1, "91"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r6)

23.919293437s ago: executing program 4 (id=2053):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r1 = gettid()
r2 = io_uring_setup(0x180d, &(0x7f0000000140)={0x0, 0x4178, 0x400, 0x8001002, 0x3d7})
r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2840, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})
madvise(&(0x7f00002f4000/0x3000)=nil, 0x3000, 0x9)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x7)
close_range(r4, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000e80)=[{&(0x7f0000000500)=""/232, 0xe8}], 0x1)
landlock_restrict_self(0xffffffffffffffff, 0xc)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000600)=ANY=[@ANYRES64=r1, @ANYRES64=r2, @ANYRESHEX, @ANYRES64=r5, @ANYRES8=r1, @ANYRES8=r2, @ANYRES32=r1, @ANYBLOB="55798d2fa07b9ef627c9af4294a55f77b3ebe14f08cf5e61c3103a170532e2ba96992feb0f29f7318df07fad2899f62bdc1d82fef0a565d07ea5079c845fe4882e6dc8cc8e485f0209173d0983054e0911de21b1e04203ae64dd88e2181d2c1136c01658a09c953ca48f0d72f823ced1bda18d3858145d00308e06104271ae1b5746014db69d71da5f45"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket(0x10, 0x80002, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89ff, &(0x7f0000000480)={'ip6gre0\x00', 0x0})
mknod$loop(0x0, 0x8, 0x1)

19.41976764s ago: executing program 4 (id=2067):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$peekuser(0x3, 0x0, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_sctp(0x2, 0x1, 0x84)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x53b, 0x0, 0x25dfdbfc, {0x9}, [{0x64, 0x1, [@m_sample={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x6, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9c}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000810}, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7, {0x0, 0x0, 0x3f}}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x7fc8, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, <r5=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)=<r6=>0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47)
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000480)={0x0, 0x18ee, 0x1000, 0x3, 0x2fe}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x20, 0x2, 0x92, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x842d, 0x40, 0x2, 0x6d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x200, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x400eaff, 0x8, 0xfffffffb, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0xb, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r5, '\x00', {0x2003, 0xb66, 0x0, 0x0}}, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="140040002300090425bd7000ffd3df2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410)
r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r9, &(0x7f0000000580)='1\x00', 0x2)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)="3d183e767f00214c2e5c07799ae108914ae4c2cd24a1470432a3917ac4932ba9e1c6f129861f13f430ca8eeac0f55b39cef14cc9b705b9")
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58)

17.716640431s ago: executing program 4 (id=2089):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0)

17.482062278s ago: executing program 4 (id=2091):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r1 = gettid()
r2 = io_uring_setup(0x180d, &(0x7f0000000140)={0x0, 0x4178, 0x400, 0x8001002, 0x3d7})
r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2840, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})
madvise(&(0x7f00002f4000/0x3000)=nil, 0x3000, 0x9)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x7)
close_range(r4, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000e80)=[{&(0x7f0000000500)=""/232, 0xe8}], 0x1)
landlock_restrict_self(0xffffffffffffffff, 0xc)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000600)=ANY=[@ANYRES64=r1, @ANYRES64=r2, @ANYRESHEX, @ANYRES64=r5, @ANYRES8=r1, @ANYRES8=r2, @ANYRES32=r1, @ANYBLOB="55798d2fa07b9ef627c9af4294a55f77b3ebe14f08cf5e61c3103a170532e2ba96992feb0f29f7318df07fad2899f62bdc1d82fef0a565d07ea5079c845fe4882e6dc8cc8e485f0209173d0983054e0911de21b1e04203ae64dd88e2181d2c1136c01658a09c953ca48f0d72f823ced1bda18d3858145d00308e06104271ae1b5746014db69d71da5f451dc221417f2b201085d8"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket(0x10, 0x80002, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89ff, &(0x7f0000000480)={'ip6gre0\x00', 0x0})
mknod$loop(0x0, 0x8, 0x1)

16.957744671s ago: executing program 4 (id=2092):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, 0x0, 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_pid(r3, &(0x7f0000000240), 0x12)

16.900632255s ago: executing program 4 (id=2093):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='status\x00')
readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/140, 0x8c}], 0x100000000000002a)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd2a, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0)
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000001480)={0x0, 0x2, &(0x7f0000000480)="97ec"})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
shmctl$SHM_STAT_ANY(0x0, 0x1f, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x20044841}, 0x802)
sendmsg$NFT_BATCH(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

9.780655193s ago: executing program 3 (id=2113):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$peekuser(0x3, 0x0, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_sctp(0x2, 0x1, 0x84)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x53b, 0x0, 0x25dfdbfc, {0x9}, [{0x64, 0x1, [@m_sample={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x6, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9c}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000810}, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7, {0x0, 0x0, 0x3f}}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x7fc8, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, <r5=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)=<r6=>0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47)
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000480)={0x0, 0x18ee, 0x1000, 0x3, 0x2fe}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x20, 0x2, 0x92, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x842d, 0x40, 0x2, 0x6d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x200, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x400eaff, 0x8, 0xfffffffb, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0xb, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r5, '\x00', {0x2003, 0xb66, 0x0, 0x0}}, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
socket$nl_generic(0x10, 0x3, 0x10)
syz_clone(0x280000, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r8, &(0x7f0000000580)='1\x00', 0x2)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)="3d183e767f00214c2e5c07799ae108914ae4c2cd24a1470432a3917ac4932ba9e1c6f129861f13f430ca8eeac0f55b39cef14cc9b705b9")
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58)

7.358745169s ago: executing program 3 (id=2119):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000140))
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r2, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d0000009700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7ec6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492aba0883783d2831210e00d2bfea3bf97ff8836d000000000000946bdb747e416b3064edb4f5aea06eba207ddab9f9baf98bc5192f23d95d33357fc55f92e5937e10995059f3348f69667b9260d504ba96446e1437af6fa875d9d32fdaaae01e6c74f192a23572ef582b7dd867c163c8cedaa2a2c5baceb37d4a40244c9bdca541cc7e65e20f5b5b735e2f33df9bd0614431d7dc5e47bb31c5b827d51733b64ddad4de1cdadce076d19d62e821b435619fb89fc07f81938200b4ebce83db57a6f5e9b1c2cf4b6ee90772d4865bf448d200e5c4e1e044d3587498128273b65670c02ff5c3c3ca633c41324fdc09e0b2621087db26bb0553612f2be27579ede2344a809e6b27d0044f2337895323357caddb54642dac82ae25deb08e111e0b9fa133c9da85dc50c3454ee0ff915331bd7f32f96fb55c7990334b1a1bc4d5d817b82f9fc278cc4858fbfa4d0f32a863c1ce050caddc5ca3b10c3e63daebba039e9f80fdef113a145ace522e8379474aa8849dcc2501df3ffcb02d29d55a1a2cbe00e836db0e6b0a7ffd680dbcf7b982a956998df3dce0e9091a4d736db69038061e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23)
ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f00000003c0)={0x2, 0x1, [0x6, 0x6, 0x8, 0x2, 0x3, 0x3c35306e, 0x8, 0x2]})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0x1, [0x0, 0xf7df]}, {0x80000000, 0x0, 0x4, [0x6]}, 0x1, [0x8, 0x3df]})
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000000)='./bus\x00', 0x12)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000402000000b00000bc26100000000000bf6720000000000016020000000000016702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)

5.862454346s ago: executing program 3 (id=2120):
r0 = memfd_create(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='0000:00:1d.7', 0x41)
write(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000080)="240000004e0025000307f4f9002304", 0xf)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000f00)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc82200005"], 0x66)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40804)

5.81075864s ago: executing program 1 (id=2121):
r0 = memfd_create(&(0x7f0000000540)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r2)
socket$key(0xf, 0x3, 0x2)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x0)
write(r3, &(0x7f0000000240)='0000:00:1d.7', 0x41)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0)
write(r4, &(0x7f00000002c0)='0000:00:1d.7', 0xc)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000080)="240000004e0025000307f4f9002304", 0xf)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100007000000000000000000ff02000000000000000000000000000100000000000000000000000000000000ffff000000000000", @ANYRES32=0x0, @ANYRES32=0xee00], 0x104}}, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000f00)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc82200005"], 0x66)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40804)

4.618504138s ago: executing program 0 (id=2123):
r0 = memfd_create(&(0x7f0000000540)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r2)
socket$key(0xf, 0x3, 0x2)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x0)
write(r3, &(0x7f0000000240)='0000:00:1d.7', 0x41)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0)
write(r4, &(0x7f00000002c0)='0000:00:1d.7', 0xc)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000080)="240000004e0025000307f4f9002304", 0xf)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100007000000000000000000ff02000000000000000000000000000100000000000000000000000000000000ffff000000000000", @ANYRES32=0x0, @ANYRES32=0xee00], 0x104}}, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000f00)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc82200005"], 0x66)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40804)

3.978097231s ago: executing program 1 (id=2124):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000140))
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e400", @ANYRES16=r1, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r2, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23)
ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f00000003c0)={0x2, 0x1, [0x6, 0x6, 0x8, 0x2, 0x3, 0x3c35306e, 0x8, 0x2]})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0x1, [0x0, 0xf7df]}, {0x80000000, 0x0, 0x4, [0x6]}, 0x1, [0x8, 0x3df]})
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000000)='./bus\x00', 0x12)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000402000000b00000bc26100000000000bf6720000000000016020000000000016702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)

3.596796117s ago: executing program 3 (id=2125):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r1 = gettid()
r2 = io_uring_setup(0x180d, &(0x7f0000000140)={0x0, 0x4178, 0x400, 0x8001002, 0x3d7})
r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2840, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})
madvise(&(0x7f00002f4000/0x3000)=nil, 0x3000, 0x9)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x7)
close_range(r4, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000e80)=[{&(0x7f0000000500)=""/232, 0xe8}], 0x1)
landlock_restrict_self(0xffffffffffffffff, 0xc)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000600)=ANY=[@ANYRES64=r1, @ANYRES64=r2, @ANYRESHEX, @ANYRES64=r5, @ANYRES8=r1, @ANYRES8=r2, @ANYRES32=r1, @ANYBLOB="55798d2fa07b9ef627c9af4294a55f77b3ebe14f08cf5e61c3103a170532e2ba96992feb0f29f7318df07fad2899f62bdc1d82fef0a565d07ea5079c845fe4882e6dc8cc8e485f0209173d0983054e0911de21b1e04203ae64dd88e2181d2c1136c01658a09c953ca48f0d72f823ced1bda18d3858145d00308e06104271ae1b5746014db69d71da5f45"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket(0x10, 0x80002, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89ff, &(0x7f0000000480)={'ip6gre0\x00', 0x0})
mknod$loop(0x0, 0x8, 0x1)

3.175816433s ago: executing program 3 (id=2126):
mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./mysys/bus/pci/drivers/amd5536udc-pci/bind\x00', 0x1, 0x0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, 0x0, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r3, 0x0, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r4, &(0x7f0000000980)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x68, 0x0, 0x7f, 0x6, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x23}}, {{0x4e21, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x9, 0x0, 0x4}}}}}}}, 0x3a)
write$char_usb(r3, 0x0, 0x0)
syz_usb_disconnect(r1)
write(r0, &(0x7f0000001000)='0000:00:04.0', 0xc)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r6)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2404c004}, 0x4000080)

3.031481964s ago: executing program 1 (id=2127):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10)
setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4)

2.81547343s ago: executing program 0 (id=2128):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB], 0x6f4}}, 0x0)

2.627207672s ago: executing program 0 (id=2129):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000140))
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r1, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r2, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc0008000500"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0x85, 0xe, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a23", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x4c)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f00000003c0)={0x2, 0x1, [0x6, 0x6, 0x8, 0x2, 0x3, 0x3c35306e, 0x8, 0x2]})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0x1, [0x0, 0xf7df]}, {0x80000000, 0x0, 0x4, [0x6]}, 0x1, [0x8, 0x3df]})
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, 0x0, 0x0)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r6, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x1409, 0x4, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x800)
mkdir(&(0x7f0000000000)='./bus\x00', 0x12)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000402000000b00000bc26100000000000bf6720000000000016020000000000016702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)

2.046986852s ago: executing program 1 (id=2130):
r0 = memfd_create(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='0000:00:1d.7', 0x41)
write(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000080)="240000004e0025000307f4f9002304", 0xf)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x104}}, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000f00)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc82200005"], 0x66)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40804)

1.534135491s ago: executing program 33 (id=2093):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='status\x00')
readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/140, 0x8c}], 0x100000000000002a)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd2a, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0)
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000001480)={0x0, 0x2, &(0x7f0000000480)="97ec"})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
shmctl$SHM_STAT_ANY(0x0, 0x1f, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000018000480140003235f4bca6d5f736c6176655f31000000001400000009000000000aff201f28bd2f93611f661a8400a38d8706e298bac0e0478a12af0000f745f96f9eba4c27b3dca3594b30128febfb32b269c6658006b88730ee6f7bcd16c824ea4ea407c2b8b5737bf307f1f5dcb6eb542c923a3c94840a4274fd755f65d74d85511ee362ae845c5bf5998f3720b0eaf92a494ee12d2d6a7b3201cde5e563b30db49c175c9a58b6f65da19077e0f8bcabdabd8b9d7f0dd4a882b627cf84ee957183bb239e3a3e12fc74589b1a6aa7faf2229d4ebaa309a100000000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x20044841}, 0x802)
sendmsg$NFT_BATCH(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

1.504709471s ago: executing program 0 (id=2132):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB], 0x6f4}}, 0x0)

1.221361169s ago: executing program 0 (id=2133):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000140))
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e400", @ANYRES16=r1, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r2, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d0000009700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7ec6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492aba0883783d2831210e00d2bfea3bf97ff8836d000000000000946bdb747e416b3064edb4f5aea06eba207ddab9f9baf98bc5192f23d95d33357fc55f92e5937e10995059f3348f69667b9260d504ba96446e1437af6fa875d9d32fdaaae01e6c74f192a23572ef582b7dd867c163c8cedaa2a2c5baceb37d4a40244c9bdca541cc7e65e20f5b5b735e2f33df9bd0614431d7dc5e47bb31c5b827d51733b64ddad4de1cdadce076d19d62e821b435619fb89fc07f81938200b4ebce83db57a6f5e9b1c2cf4b6ee90772d4865bf448d200e5c4e1e044d3587498128273b65670c02ff5c3c3ca633c41324fdc09e0b2621087db26bb0553612f2be27579ede2344a809e6b27d0044f2337895323357caddb54642dac82ae25deb08e111e0b9fa133c9da85dc50c3454ee0ff915331bd7f32f96fb55c7990334b1a1bc4d5d817b82f9fc278cc4858fbfa4d0f32a863c1ce050caddc5ca3b10c3e63daebba039e9f80fdef113a145ace522e8379474aa8849dcc2501df3ffcb02d29d55a1a2cbe00e836db0e6b0a7ffd680dbcf7b982a956998df3dce0e9091a4d736db69038061e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23)
ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f00000003c0)={0x2, 0x1, [0x6, 0x6, 0x8, 0x2, 0x3, 0x3c35306e, 0x8, 0x2]})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0x1, [0x0, 0xf7df]}, {0x80000000, 0x0, 0x4, [0x6]}, 0x1, [0x8, 0x3df]})
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000000)='./bus\x00', 0x12)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000402000000b00000bc26100000000000bf6720000000000016020000000000016702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)

554.699825ms ago: executing program 1 (id=2134):
r0 = socket$packet(0x11, 0x3, 0x300)
epoll_create1(0x80000)
r1 = syz_open_procfs(0x0, &(0x7f00000020c0)='fdinfo/3\x00')
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x5, @loopback}, 0x1c)
read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0x2020)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[], 0x40}}, 0x0)
sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @local}, 0x14)
write$P9_RSETATTR(r1, &(0x7f0000002040)={0x7, 0x1b, 0x1}, 0x7)

381.26359ms ago: executing program 1 (id=2135):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000140))
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e400", @ANYRES16=r1, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r2, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23)
ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f00000003c0)={0x2, 0x1, [0x6, 0x6, 0x8, 0x2, 0x3, 0x3c35306e, 0x8, 0x2]})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0x1, [0x0, 0xf7df]}, {0x80000000, 0x0, 0x4, [0x6]}, 0x1, [0x8, 0x3df]})
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000000)='./bus\x00', 0x12)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000402000000b00000bc26100000000000bf6720000000000016020000000000016702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)

354.625µs ago: executing program 0 (id=2136):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$SNDCTL_SEQ_GETTIME(r1, 0x80045113, &(0x7f0000000140))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1f00, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xac, 0xe, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb4206", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x4c)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f00000003c0)={0x2, 0x1, [0x6, 0x6, 0x8, 0x2, 0x3, 0x3c35306e, 0x8, 0x2]})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0x1, [0x0, 0xf7df]}, {0x80000000, 0x0, 0x4, [0x6]}, 0x1, [0x8, 0x3df]})
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x1409, 0x4, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x800)
mkdir(&(0x7f0000000000)='./bus\x00', 0x12)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000402000000b00000bc26100000000000bf6720000000000016020000000000016702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)

0s ago: executing program 3 (id=2137):
r0 = socket(0x2, 0x3, 0x100000001)
setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000000)={@rand_addr=0x64010100, @multicast1}, 0x8)
setsockopt(r0, 0xff, 0x1, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1)
write$tun(r1, &(0x7f0000000380)=ANY=[], 0xfdef)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r2, 0x0, 0x2)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r5, r5)
setpgid(0x0, r5)
fchdir(r4)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="f80000001900674c0000000000000000fe880000000000000000000000000001e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000010000004400050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000400"/176], 0xf8}}, 0x880)

kernel console output (not intermixed with test programs):

89 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  575.442870][T12732] Tainted: [L]=SOFTLOCKUP
[  575.442874][T12732] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  575.442881][T12732] Call Trace:
[  575.442886][T12732]  <TASK>
[  575.442891][T12732]  dump_stack_lvl+0x100/0x190
[  575.442908][T12732]  should_fail_ex.cold+0x5/0xa
[  575.442918][T12732]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  575.442931][T12732]  should_failslab+0xc2/0x120
[  575.442947][T12732]  kmem_cache_alloc_noprof+0x91/0x6a0
[  575.442962][T12732]  ? skb_clone+0x190/0x400
[  575.442979][T12732]  skb_clone+0x190/0x400
[  575.442994][T12732]  netlink_deliver_tap+0xaed/0xcc0
[  575.443009][T12732]  netlink_unicast+0x6a5/0x850
[  575.443023][T12732]  ? __pfx_netlink_unicast+0x10/0x10
[  575.443038][T12732]  netlink_ack+0x655/0xb80
[  575.443054][T12732]  netlink_rcv_skb+0x333/0x420
[  575.443066][T12732]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  575.443083][T12732]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  575.443100][T12732]  ? netlink_deliver_tap+0x1ae/0xcc0
[  575.443114][T12732]  netlink_unicast+0x585/0x850
[  575.443128][T12732]  ? __pfx_netlink_unicast+0x10/0x10
[  575.443143][T12732]  netlink_sendmsg+0x8b0/0xda0
[  575.443157][T12732]  ? __pfx_netlink_sendmsg+0x10/0x10
[  575.443171][T12732]  ? apparmor_socket_sendmsg+0x15b/0x270
[  575.443186][T12732]  __sys_sendto+0x48b/0x4e0
[  575.443199][T12732]  ? __pfx_netlink_sendmsg+0x10/0x10
[  575.443211][T12732]  ? __pfx___sys_sendto+0x10/0x10
[  575.443239][T12732]  __ia32_compat_sys_socketcall+0x59a/0x770
[  575.443264][T12732]  ? __fget_files+0x21f/0x3d0
[  575.443274][T12732]  ? __pfx___ia32_compat_sys_socketcall+0x10/0x10
[  575.443295][T12732]  ? fput+0x79/0x100
[  575.443313][T12732]  do_int80_emulation+0x14b/0x720
[  575.443329][T12732]  asm_int80_emulation+0x1a/0x20
[  575.443341][T12732] RIP: 0023:0xf71172eb
[  575.443350][T12732] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  575.443361][T12732] RSP: 002b:00000000f53cc34c EFLAGS: 00000246 ORIG_RAX: 0000000000000066
[  575.443372][T12732] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f53cc3f4
[  575.443378][T12732] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  575.443385][T12732] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  575.443391][T12732] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  575.443398][T12732] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  575.443411][T12732]  </TASK>
[  575.456426][  T847] usb 2-1: new full-speed USB device number 5 using uhci_hcd
[  575.458526][ T5117] usb 6-1: config 0 has no interface number 0
[  575.536130][ T5117] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  575.539918][ T5117] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  575.544270][ T5117] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  575.547909][ T5117] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  575.552047][ T5117] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  575.555130][ T5117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  575.559925][ T5117] usb 6-1: config 0 descriptor??
[  575.570258][ T5117] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  575.612577][  T847] usb 2-1: not running at top speed; connect to a high speed hub
[  575.633346][  T847] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  575.637147][  T847] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  575.640309][  T847] usb 2-1: Product: QEMU USB Tablet
[  575.642377][  T847] usb 2-1: Manufacturer: QEMU
[  575.644301][  T847] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1
[  575.660693][  T847] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.00B1/input/input181
[  575.728861][  T847] hid-generic 0003:0627:0001.00B1: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0
[  575.737665][T12723] usb 2-1: USB disconnect, device number 5
[  575.911510][T12723] ehci-pci 0000:00:1d.7: EHCI Host Controller
[  575.924966][T12723] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1
[  575.930060][ T7120] usb 6-1: USB disconnect, device number 58
[  575.942131][T12723] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000
[  575.953086][T12739] fido_id[12739]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb2/report_descriptor': No such file or directory
[  575.961988][T12723] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00
[  575.970570][T12723] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02
[  575.974644][ T7120] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  575.980395][T12723] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[  575.985977][T12723] usb usb1: Product: EHCI Host Controller
[  575.989434][T12723] usb usb1: Manufacturer: Linux syzkaller ehci_hcd
[  575.992797][T12723] usb usb1: SerialNumber: 0000:00:1d.7
[  576.025517][T12723] hub 1-0:1.0: USB hub found
[  576.028596][T12723] hub 1-0:1.0: 6 ports detected
[  576.108997][T12723] hub 2-0:1.0: USB hub found
[  576.110908][T12723] hub 2-0:1.0: 2 ports detected
[  576.147211][T12723] hub 3-0:1.0: USB hub found
[  576.150389][T12723] hub 3-0:1.0: 2 ports detected
[  576.178340][T12723] hub 4-0:1.0: USB hub found
[  576.181657][T12723] hub 4-0:1.0: 2 ports detected
[  576.326895][  T847] usb 1-1: new high-speed USB device number 2 using ehci-pci
[  576.508845][T12751] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1795'.
[  576.512448][  T847] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  576.519268][  T847] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  576.728231][  T847] usb 1-1: Product: QEMU USB Tablet
[  577.081889][  T847] usb 1-1: Manufacturer: QEMU
[  577.374883][  T847] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1
[  577.399917][  T847] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.00B2/input/input182
[  577.413158][  T847] hid-generic 0003:0627:0001.00B2: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0
[  577.581167][ T7074] libceph: connect (1)[c::]:6789 error -101
[  577.583753][ T7074] libceph: mon0 (1)[c::]:6789 connect error
[  577.629543][T12762] ceph: No mds server is up or the cluster is laggy
[  577.763101][T12771] ehci-pci 0000:00:1d.7: remove, state 1
[  577.765691][T12771] usb usb1: USB disconnect, device number 1
[  577.768760][T12771] usb 1-1: USB disconnect, device number 2
[  578.011398][T12771] ehci-pci 0000:00:1d.7: USB bus 1 deregistered
[  578.282379][T12773] fido_id[12773]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.7/report_descriptor': No such file or directory
[  578.646421][  T847] usb 2-1: new full-speed USB device number 6 using uhci_hcd
[  578.803708][  T847] usb 2-1: not running at top speed; connect to a high speed hub
[  578.890684][T12787] FAULT_INJECTION: forcing a failure.
[  578.890684][T12787] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  578.897103][T12787] CPU: 0 UID: 0 PID: 12787 Comm: syz.0.1805 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  578.897146][T12787] Tainted: [L]=SOFTLOCKUP
[  578.897153][T12787] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  578.897165][T12787] Call Trace:
[  578.897173][T12787]  <TASK>
[  578.897181][T12787]  dump_stack_lvl+0x100/0x190
[  578.897207][T12787]  should_fail_ex.cold+0x5/0xa
[  578.897229][T12787]  strncpy_from_user+0x3b/0x2d0
[  578.897258][T12787]  do_getname+0x78/0x390
[  578.897285][T12787]  user_path_at+0x26/0x60
[  578.897312][T12787]  __ia32_sys_mount+0x1fb/0x310
[  578.897334][T12787]  ? __pfx___ia32_sys_mount+0x10/0x10
[  578.897358][T12787]  ? rcu_is_watching+0x12/0xc0
[  578.897384][T12787]  __do_fast_syscall_32+0xe7/0x970
[  578.897408][T12787]  ? lockdep_hardirqs_on+0x78/0x100
[  578.897431][T12787]  do_fast_syscall_32+0x32/0x70
[  578.897455][T12787]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  578.897478][T12787] RIP: 0023:0xf6fdefec
[  578.897564][T12787] Code: Unable to access opcode bytes at 0xf6fdefc2.
[  578.897579][T12787] RSP: 002b:00000000f53ac50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015
[  578.897597][T12787] RAX: ffffffffffffffda RBX: 0000000080000240 RCX: 0000000080000280
[  578.897607][T12787] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000080000100
[  578.897618][T12787] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  578.897628][T12787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  578.897637][T12787] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  578.897664][T12787]  </TASK>
[  578.945799][  T847] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  578.957453][T12788] siw: device registration error -23
[  579.649524][  T847] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  579.652945][  T847] usb 2-1: Product: QEMU USB Tablet
[  579.655025][  T847] usb 2-1: Manufacturer: QEMU
[  579.656631][  T847] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1
[  579.678220][  T847] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.00B3/input/input183
[  579.738719][  T847] hid-generic 0003:0627:0001.00B3: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0
[  579.747103][T12772] usb 2-1: USB disconnect, device number 6
[  579.892346][T12796] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1810'.
[  579.906183][T12798] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1809'.
[  579.982686][T12772] ehci-pci 0000:00:1d.7: EHCI Host Controller
[  579.993019][T12799] fido_id[12799]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb2/report_descriptor': No such file or directory
[  580.006032][T12772] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1
[  580.026968][T12772] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000
[  580.057812][T12772] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00
[  580.065258][T12772] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02
[  580.069455][T12772] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[  580.072882][T12772] usb usb1: Product: EHCI Host Controller
[  580.075281][T12772] usb usb1: Manufacturer: Linux syzkaller ehci_hcd
[  580.079449][T12772] usb usb1: SerialNumber: 0000:00:1d.7
[  580.089894][T12772] hub 1-0:1.0: USB hub found
[  580.092058][T12772] hub 1-0:1.0: 6 ports detected
[  580.128358][T12772] hub 2-0:1.0: USB hub found
[  580.133387][T12772] hub 2-0:1.0: 2 ports detected
[  580.168674][T12772] hub 3-0:1.0: USB hub found
[  580.172398][T12772] hub 3-0:1.0: 2 ports detected
[  580.219989][T12772] hub 4-0:1.0: USB hub found
[  580.224828][T12772] hub 4-0:1.0: 2 ports detected
[  580.376438][  T847] usb 1-1: new high-speed USB device number 2 using ehci-pci
[  580.571323][  T847] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  580.575303][  T847] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  580.579449][  T847] usb 1-1: Product: QEMU USB Tablet
[  580.581779][  T847] usb 1-1: Manufacturer: QEMU
[  580.584148][  T847] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1
[  580.614134][  T847] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.00B4/input/input184
[  580.679866][  T847] hid-generic 0003:0627:0001.00B4: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0
[  581.185730][T12817] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1815'.
[  581.632185][T12822] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1817'.
[  582.310194][T12827] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1819'.
[  582.654187][T12829] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1820'.
[  582.826371][ T1350] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  583.348862][T12869] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1826'.
[  583.396577][ T1350] usb 9-1: Using ep0 maxpacket: 8
[  583.401049][ T1350] usb 9-1: config 0 has an invalid interface number: 55 but max is 0
[  583.404693][ T1350] usb 9-1: config 0 has no interface number 0
[  583.407356][ T1350] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  583.411840][ T1350] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  583.417502][ T1350] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  583.422341][ T1350] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  583.428155][ T1350] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  583.432291][ T1350] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  583.438538][ T1350] usb 9-1: config 0 descriptor??
[  583.446696][ T1350] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  583.498627][ T5117] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[  583.611759][T12875] fuse: Unknown parameter 'group_id00000000000000000000'
[  583.629053][ T5117] usb 6-1: device descriptor read/64, error -71
[  583.775804][T12881] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1830'.
[  583.859082][   T29] usb 9-1: USB disconnect, device number 17
[  584.058416][ T5117] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[  584.161201][   T29] ldusb 9-1:0.55: LD USB Device #0 now disconnected
[  584.686409][ T5117] usb 6-1: device descriptor read/64, error -71
[  584.799154][ T5117] usb usb6-port1: attempt power cycle
[  584.839331][T12893] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1833'.
[  585.146426][ T5117] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[  585.729249][ T5117] usb 6-1: device descriptor read/8, error -71
[  585.746490][T12901] fuse: Unknown parameter 'group_id00000000000000000000'
[  585.893957][T12910] ehci-pci 0000:00:1d.7: remove, state 1
[  585.896114][T12910] usb usb1: USB disconnect, device number 1
[  585.898390][T12910] usb 1-1: USB disconnect, device number 2
[  585.966609][ T5117] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[  585.988863][ T5117] usb 6-1: device descriptor read/8, error -71
[  586.101727][ T5117] usb usb6-port1: unable to enumerate USB device
[  586.192510][T12910] ehci-pci 0000:00:1d.7: USB bus 1 deregistered
[  586.456556][  T847] usb 2-1: new full-speed USB device number 7 using uhci_hcd
[  586.623535][  T847] usb 2-1: not running at top speed; connect to a high speed hub
[  586.645165][  T847] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  586.648566][  T847] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  586.651396][  T847] usb 2-1: Product: QEMU USB Tablet
[  586.653068][  T847] usb 2-1: Manufacturer: QEMU
[  586.655305][  T847] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1
[  586.674679][  T847] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.00B5/input/input185
[  586.739207][  T847] hid-generic 0003:0627:0001.00B5: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0
[  586.758964][T12911] usb 2-1: USB disconnect, device number 7
[  586.776699][ T5117] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[  586.810026][T12917] fido_id[12917]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb2/2-1/report_descriptor': No such file or directory
[  586.948260][ T5117] usb 6-1: Using ep0 maxpacket: 8
[  586.967030][ T5117] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  586.981814][ T5117] usb 6-1: config 0 has no interface number 0
[  586.991382][ T5117] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  587.007288][ T5117] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  587.015815][ T5117] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  587.035242][ T5117] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  587.054744][ T5117] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  587.072102][ T5117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.087189][T12911] ehci-pci 0000:00:1d.7: EHCI Host Controller
[  587.099093][T12911] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1
[  587.110574][T12911] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000
[  587.127718][ T5117] usb 6-1: config 0 descriptor??
[  587.139194][T12911] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00
[  587.148045][ T5117] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  587.154754][T12911] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02
[  587.158252][T12911] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[  587.160892][T12911] usb usb1: Product: EHCI Host Controller
[  587.163216][T12911] usb usb1: Manufacturer: Linux syzkaller ehci_hcd
[  587.165519][T12911] usb usb1: SerialNumber: 0000:00:1d.7
[  587.210655][T12911] hub 1-0:1.0: USB hub found
[  587.213775][T12911] hub 1-0:1.0: 6 ports detected
[  587.313281][T12911] hub 2-0:1.0: USB hub found
[  587.316011][T12911] hub 2-0:1.0: 2 ports detected
[  587.375905][T12911] hub 3-0:1.0: USB hub found
[  587.379397][T12911] hub 3-0:1.0: 2 ports detected
[  587.441648][T12911] hub 4-0:1.0: USB hub found
[  587.445186][T12911] hub 4-0:1.0: 2 ports detected
[  587.483087][  T847] usb 6-1: USB disconnect, device number 63
[  587.517868][ T5117] usb 1-1: new high-speed USB device number 2 using ehci-pci
[  587.663625][  T847] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  587.711017][ T5117] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  587.729655][ T5117] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  587.732243][ T5117] usb 1-1: Product: QEMU USB Tablet
[  587.733880][ T5117] usb 1-1: Manufacturer: QEMU
[  587.735329][ T5117] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1
[  587.784793][ T5117] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.00B6/input/input186
[  587.867853][ T5117] hid-generic 0003:0627:0001.00B6: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0
[  588.402748][T12925] tipc: Enabled bearer <eth:syzkaller0>, priority 1
[  588.407054][T12924] tipc: Resetting bearer <eth:syzkaller0>
[  588.430799][T12924] tipc: Disabling bearer <eth:syzkaller0>
[  588.708486][T12938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  588.714372][T12938] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  588.776944][T12940] fuse: Bad value for 'user_id'
[  588.779169][T12940] fuse: Bad value for 'user_id'
[  589.385911][ T7120] libceph: connect (1)[c::]:6789 error -101
[  589.389023][ T7120] libceph: mon0 (1)[c::]:6789 connect error
[  589.446860][T12945] ceph: No mds server is up or the cluster is laggy
[  589.456050][T12952] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1851'.
[  589.740251][T12955] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1852'.
[  590.443608][T12961] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1854'.
[  590.448512][T12962] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1853'.
[  590.472929][T12962] fuse: Invalid rootmode
[  591.289660][T12962] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  591.523140][   T42] audit: type=1800 audit(1785223889.073:120): pid=12973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1857" name="/" dev="fuse" ino=1 res=0 errno=0
[  591.645260][T12985] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1861'.
[  592.321119][  T149] libceph: connect (1)[c::]:6789 error -101
[  592.330568][  T149] libceph: mon0 (1)[c::]:6789 connect error
[  592.406897][T12992] ceph: No mds server is up or the cluster is laggy
[  592.578207][T12999] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  592.582645][T12999] xt_TPROXY: Can be used only with -p tcp or -p udp
[  592.588378][T12999] binder: 12998:12999 ioctl 40046210 0 returned -14
[  592.589115][T10895] Bluetooth: hci2: unexpected event for opcode 0x0c26
[  593.006410][ T5117] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  593.092836][T13023] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1873'.
[  593.156339][ T5117] usb 9-1: device descriptor read/64, error -71
[  593.205543][T13028] fuse: Bad value for 'fd'
[  593.526401][ T1350] libceph: connect (1)[c::]:6789 error -101
[  593.529144][ T1350] libceph: mon0 (1)[c::]:6789 connect error
[  593.579080][ T5117] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  593.621417][T13030] ceph: No mds server is up or the cluster is laggy
[  594.038364][T13043] ehci-pci 0000:00:1d.7: remove, state 1
[  594.040417][T13043] usb usb1: USB disconnect, device number 1
[  594.042370][T13043] usb 1-1: USB disconnect, device number 2
[  594.078031][ T5117] usb 9-1: device descriptor read/64, error -71
[  594.198318][ T5117] usb usb9-port1: attempt power cycle
[  594.205222][T13043] ehci-pci 0000:00:1d.7: USB bus 1 deregistered
[  594.456736][  T847] usb 2-1: new full-speed USB device number 8 using uhci_hcd
[  594.536365][ T5117] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  594.558769][ T5117] usb 9-1: device descriptor read/8, error -71
[  594.614144][  T847] usb 2-1: not running at top speed; connect to a high speed hub
[  594.644702][  T847] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  594.647688][  T847] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  594.650393][  T847] usb 2-1: Product: QEMU USB Tablet
[  594.652175][  T847] usb 2-1: Manufacturer: QEMU
[  594.653776][  T847] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1
[  594.796343][ T5117] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[  594.817955][ T5117] usb 9-1: device descriptor read/8, error -71
[  594.927694][ T5117] usb usb9-port1: unable to enumerate USB device
[  595.038784][  T847] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.00B7/input/input187
[  595.131877][  T847] hid-generic 0003:0627:0001.00B7: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0
[  595.176164][T13044] usb 2-1: USB disconnect, device number 8
[  595.229877][T13058] fido_id[13058]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb2/2-1/report_descriptor': No such file or directory
[  595.345059][T13044] ehci-pci 0000:00:1d.7: EHCI Host Controller
[  595.350790][T13044] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1
[  595.357123][T13044] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000
[  595.377585][T13044] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00
[  595.382680][T13044] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02
[  595.386172][T13044] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[  595.389420][T13044] usb usb1: Product: EHCI Host Controller
[  595.391281][T13044] usb usb1: Manufacturer: Linux syzkaller ehci_hcd
[  595.393305][T13044] usb usb1: SerialNumber: 0000:00:1d.7
[  595.402048][T13044] hub 1-0:1.0: USB hub found
[  595.405460][T13044] hub 1-0:1.0: 6 ports detected
[  595.451520][T13044] hub 2-0:1.0: USB hub found
[  595.453421][T13044] hub 2-0:1.0: 2 ports detected
[  595.488375][T13044] hub 3-0:1.0: USB hub found
[  595.494116][T13044] hub 3-0:1.0: 2 ports detected
[  595.528393][T13044] hub 4-0:1.0: USB hub found
[  595.534573][T13044] hub 4-0:1.0: 2 ports detected
[  595.549761][T13054] ehci-pci 0000:00:1d.7: remove, state 1
[  595.552065][T13054] usb usb1: USB disconnect, device number 1
[  595.600386][T13060] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1883'.
[  595.611062][T13062] fuse: Bad value for 'fd'
[  595.617045][ T7120] usb usb1-port1: attempt power cycle
[  595.921583][T13054] ehci-pci 0000:00:1d.7: USB bus 1 deregistered
[  596.396397][  T847] usb 2-1: new full-speed USB device number 9 using uhci_hcd
[  596.942841][  T847] usb 2-1: not running at top speed; connect to a high speed hub
[  596.962530][  T847] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  596.965658][  T847] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  596.968423][  T847] usb 2-1: Product: QEMU USB Tablet
[  596.970150][  T847] usb 2-1: Manufacturer: QEMU
[  596.971717][  T847] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1
[  596.989379][  T847] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.00B8/input/input188
[  597.060063][  T847] hid-generic 0003:0627:0001.00B8: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0
[  597.071098][T13055] usb 2-1: USB disconnect, device number 9
[  597.186040][T13077] fido_id[13077]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb2/report_descriptor': No such file or directory
[  597.220134][T13055] ehci-pci 0000:00:1d.7: EHCI Host Controller
[  597.238130][T13055] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1
[  597.248240][T13055] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000
[  597.266585][T13055] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00
[  597.273711][T13055] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02
[  597.277705][T13055] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[  597.281240][T13055] usb usb1: Product: EHCI Host Controller
[  597.283618][T13055] usb usb1: Manufacturer: Linux syzkaller ehci_hcd
[  597.286481][T13055] usb usb1: SerialNumber: 0000:00:1d.7
[  597.298296][T13055] hub 1-0:1.0: USB hub found
[  597.302701][T13055] hub 1-0:1.0: 6 ports detected
[  597.349357][T13055] hub 2-0:1.0: USB hub found
[  597.355119][T13055] hub 2-0:1.0: 2 ports detected
[  597.391335][T13055] hub 3-0:1.0: USB hub found
[  597.394273][T13055] hub 3-0:1.0: 2 ports detected
[  597.432630][T13055] hub 4-0:1.0: USB hub found
[  597.435093][T13055] hub 4-0:1.0: 2 ports detected
[  597.445120][T13073] ehci-pci 0000:00:1d.7: remove, state 1
[  597.447078][T13073] usb usb1: USB disconnect, device number 1
[  597.476529][T13073] ehci-pci 0000:00:1d.7: USB bus 1 deregistered
[  597.897219][  T149] usb 2-1: new full-speed USB device number 10 using uhci_hcd
[  598.063216][  T149] usb 2-1: not running at top speed; connect to a high speed hub
[  598.084018][  T149] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  598.087016][  T149] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  598.095830][  T149] usb 2-1: Product: QEMU USB Tablet
[  598.098573][  T149] usb 2-1: Manufacturer: QEMU
[  598.100491][  T149] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1
[  598.122315][  T149] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.00B9/input/input189
[  598.136841][  T149] hid-generic 0003:0627:0001.00B9: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0
[  598.152386][T13065] usb 2-1: USB disconnect, device number 10
[  598.373063][T13065] ehci-pci 0000:00:1d.7: EHCI Host Controller
[  598.389403][T13065] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1
[  598.419954][T13065] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000
[  598.486508][T13065] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00
[  598.531279][T13065] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02
[  598.535683][T13093] fido_id[13093]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb2/report_descriptor': No such file or directory
[  598.540817][T13065] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[  598.548531][T13065] usb usb1: Product: EHCI Host Controller
[  598.550561][T13065] usb usb1: Manufacturer: Linux syzkaller ehci_hcd
[  598.563614][T13065] usb usb1: SerialNumber: 0000:00:1d.7
[  598.591336][T13065] hub 1-0:1.0: USB hub found
[  598.605759][T13065] hub 1-0:1.0: 6 ports detected
[  598.719908][T13065] hub 2-0:1.0: USB hub found
[  598.742132][T13065] hub 2-0:1.0: 2 ports detected
[  598.820829][T13065] hub 3-0:1.0: USB hub found
[  598.832099][T13065] hub 3-0:1.0: 2 ports detected
[  598.889084][T13065] hub 4-0:1.0: USB hub found
[  598.898758][T13065] hub 4-0:1.0: 2 ports detected
[  598.930154][T13088] ehci-pci 0000:00:1d.7: remove, state 1
[  598.932339][T13088] usb usb1: USB disconnect, device number 1
[  598.946701][ T7120] usb 1-1: new high-speed USB device number 2 using ehci-pci
[  598.955490][ T7120] usb usb1-port1: attempt power cycle
[  599.097101][T13088] ehci-pci 0000:00:1d.7: USB bus 1 deregistered
[  599.227929][T13105] fuse: Bad value for 'fd'
[  599.232166][T13106] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1895'.
[  599.386533][  T847] usb 2-1: new full-speed USB device number 11 using uhci_hcd
[  599.968471][  T847] usb 2-1: not running at top speed; connect to a high speed hub
[  600.158871][  T847] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  600.162282][  T847] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  600.165151][  T847] usb 2-1: Product: QEMU USB Tablet
[  600.167182][  T847] usb 2-1: Manufacturer: QEMU
[  600.168733][  T847] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1
[  600.186684][  T847] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.00BA/input/input190
[  600.258509][  T847] hid-generic 0003:0627:0001.00BA: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0
[  600.268295][T13089] usb 2-1: USB disconnect, device number 11
[  600.469685][T13118] fido_id[13118]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb2/report_descriptor': No such file or directory
[  600.605375][T13089] ehci-pci 0000:00:1d.7: EHCI Host Controller
[  600.623149][T13089] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1
[  600.630673][T13089] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000
[  600.646530][T13089] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00
[  600.651563][T13089] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02
[  600.654542][T13089] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[  600.657232][T13089] usb usb1: Product: EHCI Host Controller
[  600.659048][T13089] usb usb1: Manufacturer: Linux syzkaller ehci_hcd
[  600.661279][T13089] usb usb1: SerialNumber: 0000:00:1d.7
[  600.671150][T13089] hub 1-0:1.0: USB hub found
[  600.674586][T13089] hub 1-0:1.0: 6 ports detected
[  600.729412][T13089] hub 2-0:1.0: USB hub found
[  600.731723][T13089] hub 2-0:1.0: 2 ports detected
[  600.771228][T13089] hub 3-0:1.0: USB hub found
[  600.773073][T13089] hub 3-0:1.0: 2 ports detected
[  600.813883][T13089] hub 4-0:1.0: USB hub found
[  600.816705][T13089] hub 4-0:1.0: 2 ports detected
[  600.860127][T13096] ehci-pci 0000:00:1d.7: remove, state 1
[  600.861958][T13096] usb usb1: USB disconnect, device number 1
[  600.909854][ T7074] usb usb1-port1: attempt power cycle
[  601.003179][T13096] ehci-pci 0000:00:1d.7: USB bus 1 deregistered
[  601.255028][T13129] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1901'.
[  601.286591][  T847] usb 2-1: new full-speed USB device number 12 using uhci_hcd
[  602.302543][  T847] usb 2-1: not running at top speed; connect to a high speed hub
[  602.324436][  T847] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  602.328364][  T847] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  602.331524][  T847] usb 2-1: Product: QEMU USB Tablet
[  602.333778][  T847] usb 2-1: Manufacturer: QEMU
[  602.335485][  T847] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1
[  602.358450][  T847] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.00BB/input/input191
[  602.429380][  T847] hid-generic 0003:0627:0001.00BB: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0
[  602.440258][T13097] usb 2-1: USB disconnect, device number 12
[  602.547979][T13135] fido_id[13135]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb2/report_descriptor': No such file or directory
[  602.590258][T13097] ehci-pci 0000:00:1d.7: EHCI Host Controller
[  602.593329][T13097] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1
[  602.597840][T13097] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000
[  602.616831][T13097] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00
[  602.620266][T13097] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02
[  602.623452][T13097] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[  602.626186][T13097] usb usb1: Product: EHCI Host Controller
[  602.629552][T13097] usb usb1: Manufacturer: Linux syzkaller ehci_hcd
[  602.631705][T13097] usb usb1: SerialNumber: 0000:00:1d.7
[  602.636931][T13097] hub 1-0:1.0: USB hub found
[  602.639304][T13097] hub 1-0:1.0: 6 ports detected
[  602.678159][T13097] hub 2-0:1.0: USB hub found
[  602.680063][T13097] hub 2-0:1.0: 2 ports detected
[  602.708250][T13097] hub 3-0:1.0: USB hub found
[  602.710650][T13097] hub 3-0:1.0: 2 ports detected
[  602.748141][T13097] hub 4-0:1.0: USB hub found
[  602.751203][T13097] hub 4-0:1.0: 2 ports detected
[  602.758792][T13110] ehci-pci 0000:00:1d.7: remove, state 1
[  602.762002][T13110] usb usb1: USB disconnect, device number 1
[  602.785377][T13110] ehci-pci 0000:00:1d.7: USB bus 1 deregistered
[  602.885052][T13142] fuse: Bad value for 'fd'
[  602.921803][T13141] syzkaller0: entered promiscuous mode
[  602.925145][T13141] syzkaller0: entered allmulticast mode
[  602.952311][T13145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1903'.
[  602.998343][T13145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1903'.
[  603.082022][T13145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1903'.
[  603.090113][T13154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  603.099094][ T5860] usb 2-1: new full-speed USB device number 13 using uhci_hcd
[  603.106475][T13154] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  603.274430][ T5860] usb 2-1: not running at top speed; connect to a high speed hub
[  603.313707][ T5860] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  603.318286][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  603.394101][ T5860] usb 2-1: Product: QEMU USB Tablet
[  603.403544][ T5860] usb 2-1: Manufacturer: QEMU
[  603.405777][ T5860] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1
[  603.467129][ T5860] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.00BC/input/input192
[  603.555887][ T5860] hid-generic 0003:0627:0001.00BC: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0
[  603.907132][T13162] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1909'.
[  605.946817][T13154] lo speed is unknown, defaulting to 1000
[  605.982516][T13170] FAULT_INJECTION: forcing a failure.
[  605.982516][T13170] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  605.988363][T13170] CPU: 3 UID: 0 PID: 13170 Comm: syz.3.1912 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  605.988386][T13170] Tainted: [L]=SOFTLOCKUP
[  605.988392][T13170] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  605.988402][T13170] Call Trace:
[  605.988409][T13170]  <TASK>
[  605.988416][T13170]  dump_stack_lvl+0x100/0x190
[  605.988454][T13170]  should_fail_ex.cold+0x5/0xa
[  605.988469][T13170]  ? prepare_alloc_pages+0x16d/0x5f0
[  605.988495][T13170]  should_fail_alloc_page+0xeb/0x140
[  605.988520][T13170]  prepare_alloc_pages+0x1f0/0x5f0
[  605.988548][T13170]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  605.988567][T13170]  ? __lock_acquire+0x49f/0x1a40
[  605.988590][T13170]  ? __css_rstat_updated+0x1ce/0x5a0
[  605.988615][T13170]  ? __pfx___handle_mm_fault+0x10/0x10
[  605.988632][T13170]  ? __pfx___css_rstat_updated+0x10/0x10
[  605.988658][T13170]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  605.988678][T13170]  ? find_held_lock+0x2b/0x80
[  605.988697][T13170]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  605.988719][T13170]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  605.988741][T13170]  ? rcu_is_watching+0x12/0xc0
[  605.988757][T13170]  ? __up_read+0x333/0x980
[  605.988775][T13170]  ? __pfx___up_read+0x10/0x10
[  605.988791][T13170]  ? do_user_addr_fault+0x7de/0x12f0
[  605.988812][T13170]  ? do_user_addr_fault+0x7de/0x12f0
[  605.988838][T13170]  ? irqentry_exit+0x24d/0xa00
[  605.988857][T13170]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  605.988882][T13170]  ? policy_nodemask+0xed/0x4f0
[  605.988908][T13170]  alloc_pages_mpol+0x1fb/0x540
[  605.988932][T13170]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  605.988956][T13170]  alloc_pages_noprof+0x1a/0x160
[  605.988974][T13170]  bpf_prog_test_run_skb+0x2887/0x3540
[  605.989008][T13170]  ? __fget_files+0x1d1/0x3d0
[  605.989030][T13170]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  605.989051][T13170]  ? fput+0x79/0x100
[  605.989067][T13170]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  605.989086][T13170]  __sys_bpf+0x2a12/0x4e80
[  605.989111][T13170]  ? __pfx___sys_bpf+0x10/0x10
[  605.989130][T13170]  ? find_held_lock+0x2b/0x80
[  605.989149][T13170]  ? get_pid_task+0xfc/0x250
[  605.989166][T13170]  ? get_pid_task+0xfc/0x250
[  605.989191][T13170]  ? proc_fail_nth_write+0x9f/0x220
[  605.989214][T13170]  ? find_held_lock+0x2b/0x80
[  605.989239][T13170]  ? rcu_read_lock_any_held+0x6a/0xa0
[  605.989255][T13170]  ? find_held_lock+0x2b/0x80
[  605.989274][T13170]  ? ksys_write+0x190/0x250
[  605.989288][T13170]  ? ksys_write+0x190/0x250
[  605.989320][T13170]  ? fput+0x79/0x100
[  605.989342][T13170]  ? __ia32_sys_bpf+0xcc/0x170
[  605.989359][T13170]  __ia32_sys_bpf+0xcc/0x170
[  605.989377][T13170]  ? __do_fast_syscall_32+0x98/0x970
[  605.989396][T13170]  __do_fast_syscall_32+0xe7/0x970
[  605.989416][T13170]  ? lockdep_hardirqs_on+0x78/0x100
[  605.989437][T13170]  do_fast_syscall_32+0x32/0x70
[  605.989458][T13170]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  605.989476][T13170] RIP: 0023:0xf6feefec
[  605.989495][T13170] Code: Unable to access opcode bytes at 0xf6feefc2.
[  605.989503][T13170] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  605.989520][T13170] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080001a00
[  605.989530][T13170] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000
[  605.989540][T13170] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  605.989550][T13170] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  605.989560][T13170] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  605.989582][T13170]  </TASK>
[  606.077230][T13171] usb 2-1: USB disconnect, device number 13
[  606.150995][T13175] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1913'.
[  606.500559][T13171] ehci-pci 0000:00:1d.7: EHCI Host Controller
[  606.509513][T13171] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1
[  606.518900][T13171] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000
[  606.536614][T13171] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00
[  606.552494][T13171] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02
[  606.555475][T13171] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[  606.558581][T13171] usb usb1: Product: EHCI Host Controller
[  606.561011][T13171] usb usb1: Manufacturer: Linux syzkaller ehci_hcd
[  606.563352][T13171] usb usb1: SerialNumber: 0000:00:1d.7
[  606.597703][T13171] hub 1-0:1.0: USB hub found
[  606.601358][T13171] hub 1-0:1.0: 6 ports detected
[  606.678433][T13171] hub 2-0:1.0: USB hub found
[  606.681601][T13171] hub 2-0:1.0: 2 ports detected
[  606.740741][T13171] hub 3-0:1.0: USB hub found
[  606.743130][T13171] hub 3-0:1.0: 2 ports detected
[  606.820577][T13171] hub 4-0:1.0: USB hub found
[  606.827926][T13171] hub 4-0:1.0: 2 ports detected
[  606.916636][ T1350] usb 1-1: new high-speed USB device number 2 using ehci-pci
[  606.930945][T13180] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1915'.
[  607.040079][T13185] fuse: Invalid rootmode
[  607.106497][ T1350] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  607.132618][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.134829][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.138653][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.141012][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.143189][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.145450][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.148103][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.150552][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.152706][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.154956][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.157385][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.159738][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.161923][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.164110][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.166430][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.168611][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.170764][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.172885][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.174996][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.177239][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.179262][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.181450][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.183477][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.186135][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.188677][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.190762][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.192883][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.195093][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.197347][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.199312][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.201501][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.203478][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.205669][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.208180][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.210575][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.212933][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.215267][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.217571][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.219781][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.221943][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.224255][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.226503][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.228654][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.230768][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.232906][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.235060][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.237357][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.239619][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.241757][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.243766][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.245923][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.248305][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.250439][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.252569][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.254749][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.257308][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.259509][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.261671][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.263788][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.266427][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.268754][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.270913][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.273052][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.275460][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.277995][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.280262][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.282495][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.284913][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.287292][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.289528][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.291692][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.293795][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.295931][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.298375][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.300966][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.303186][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.305351][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.307622][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.310270][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.312410][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.314575][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.316889][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.319080][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.321252][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.323385][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.325556][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.328843][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.330951][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.333090][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.335206][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.337529][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.340440][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.342626][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.344873][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.347217][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.349324][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.351536][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.355150][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.357452][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.359761][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.361912][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.364110][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.366767][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.369403][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.371552][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.373709][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.375904][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.378310][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.380785][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.383072][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.386954][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.389243][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.391463][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.393609][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.394382][ T1350] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  607.396011][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.400996][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.403431][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.405681][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.407974][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.410081][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.412191][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.414384][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.416831][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.418991][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.421444][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.423957][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.426431][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.428540][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  607.430641][T10895] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9
[  607.432728][T10895] Bluetooth: hci3: unexpected event for opcode 0x1407
[  608.207991][ T1350] usb 1-1: Product: QEMU USB Tablet
[  608.209670][ T1350] usb 1-1: Manufacturer: QEMU
[  608.211203][ T1350] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1
[  608.242108][ T1350] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.00BD/input/input193
[  608.276035][T13204] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1925'.
[  608.276216][ T1350] hid-generic 0003:0627:0001.00BD: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0
[  608.400580][T13208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  608.410855][T13208] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  608.512544][T13212] ehci-pci 0000:00:1d.7: remove, state 1
[  608.515132][T13212] usb usb1: USB disconnect, device number 1
[  608.518796][T13212] usb 1-1: USB disconnect, device number 2
[  608.710135][T13212] ehci-pci 0000:00:1d.7: USB bus 1 deregistered
[  609.406612][ T5860] usb 2-1: new full-speed USB device number 14 using uhci_hcd
[  609.564533][ T5860] usb 2-1: not running at top speed; connect to a high speed hub
[  609.585536][ T5860] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  609.590270][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  609.594749][ T5860] usb 2-1: Product: QEMU USB Tablet
[  609.598055][ T5860] usb 2-1: Manufacturer: QEMU
[  609.600431][ T5860] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1
[  609.654133][ T5860] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.00BE/input/input195
[  609.722917][ T5860] hid-generic 0003:0627:0001.00BE: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0
[  610.324585][T13244] FAULT_INJECTION: forcing a failure.
[  610.324585][T13244] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  610.330578][T13244] CPU: 1 UID: 0 PID: 13244 Comm: syz.4.1934 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  610.330608][T13244] Tainted: [L]=SOFTLOCKUP
[  610.330617][T13244] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  610.330628][T13244] Call Trace:
[  610.330635][T13244]  <TASK>
[  610.330643][T13244]  dump_stack_lvl+0x100/0x190
[  610.330670][T13244]  should_fail_ex.cold+0x5/0xa
[  610.330699][T13244]  _copy_from_user+0x2e/0xd0
[  610.330730][T13244]  get_compat_msghdr+0xb3/0x480
[  610.330756][T13244]  ? __pfx_get_compat_msghdr+0x10/0x10
[  610.330782][T13244]  ? rcu_is_watching+0x12/0xc0
[  610.330807][T13244]  ? ___sys_recvmsg+0x177/0x1a0
[  610.330825][T13244]  ? kfree+0x1e5/0x6c0
[  610.330842][T13244]  ? __lock_acquire+0x49f/0x1a40
[  610.330873][T13244]  ___sys_recvmsg+0x193/0x1a0
[  610.330894][T13244]  ? __pfx____sys_recvmsg+0x10/0x10
[  610.330927][T13244]  ? __pfx___might_resched+0x10/0x10
[  610.330959][T13244]  do_recvmmsg+0x54d/0x740
[  610.330984][T13244]  ? __pfx_do_recvmmsg+0x10/0x10
[  610.331005][T13244]  ? find_held_lock+0x2b/0x80
[  610.331028][T13244]  ? ksys_write+0x190/0x250
[  610.331044][T13244]  ? ksys_write+0x190/0x250
[  610.331071][T13244]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  610.331098][T13244]  __sys_recvmmsg+0x21f/0x270
[  610.331125][T13244]  ? __pfx___sys_recvmmsg+0x10/0x10
[  610.331152][T13244]  ? ksys_write+0x1ac/0x250
[  610.331172][T13244]  __ia32_compat_sys_recvmmsg_time32+0xc4/0x160
[  610.331205][T13244]  ? __do_fast_syscall_32+0x98/0x970
[  610.331228][T13244]  ? lockdep_hardirqs_on+0x78/0x100
[  610.331248][T13244]  __do_fast_syscall_32+0xe7/0x970
[  610.331270][T13244]  ? lockdep_hardirqs_on+0x78/0x100
[  610.331293][T13244]  do_fast_syscall_32+0x32/0x70
[  610.331317][T13244]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  610.331339][T13244] RIP: 0023:0xf7f02fec
[  610.331362][T13244] Code: Unable to access opcode bytes at 0xf7f02fc2.
[  610.331370][T13244] RSP: 002b:00000000f53a550c EFLAGS: 00000292 ORIG_RAX: 0000000000000151
[  610.331389][T13244] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0
[  610.331402][T13244] RDX: 0000000000000220 RSI: 0000000000000100 RDI: 0000000000000000
[  610.331413][T13244] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  610.331424][T13244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  610.331434][T13244] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  610.331458][T13244]  </TASK>
[  610.519318][T13249] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1936'.
[  610.978890][T13253] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1937'.
[  611.988418][ T7074] libceph: connect (1)[c::]:6789 error -101
[  611.990543][ T7074] libceph: mon0 (1)[c::]:6789 connect error
[  612.037880][T13271] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1943'.
[  612.079488][T13259] ceph: No mds server is up or the cluster is laggy
[  612.253875][T13282] FAULT_INJECTION: forcing a failure.
[  612.253875][T13282] name failslab, interval 1, probability 0, space 0, times 0
[  612.258295][T13282] CPU: 0 UID: 0 PID: 13282 Comm: syz.4.1945 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  612.258319][T13282] Tainted: [L]=SOFTLOCKUP
[  612.258326][T13282] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  612.258336][T13282] Call Trace:
[  612.258342][T13282]  <TASK>
[  612.258348][T13282]  dump_stack_lvl+0x100/0x190
[  612.258374][T13282]  should_fail_ex.cold+0x5/0xa
[  612.258391][T13282]  should_failslab+0xc2/0x120
[  612.258414][T13282]  kmem_cache_alloc_noprof+0x91/0x6a0
[  612.258429][T13282]  ? d_instantiate+0x8a/0xb0
[  612.258442][T13282]  ? d_instantiate+0x8a/0xb0
[  612.258454][T13282]  ? alloc_empty_file+0x5b/0x1c0
[  612.258470][T13282]  alloc_empty_file+0x5b/0x1c0
[  612.258485][T13282]  alloc_file_pseudo+0x183/0x290
[  612.258499][T13282]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  612.258512][T13282]  ? inode_init_always_gfp+0xc98/0xfb0
[  612.258528][T13282]  sock_alloc_file+0x50/0x210
[  612.258545][T13282]  do_accept+0x242/0x530
[  612.258558][T13282]  ? do_raw_spin_lock+0x128/0x260
[  612.258571][T13282]  ? __pfx_do_accept+0x10/0x10
[  612.258592][T13282]  __sys_accept4+0x108/0x200
[  612.258605][T13282]  ? __pfx___sys_accept4+0x10/0x10
[  612.258618][T13282]  ? ksys_write+0x1ac/0x250
[  612.258631][T13282]  __ia32_sys_accept4+0x94/0x100
[  612.258644][T13282]  ? lockdep_hardirqs_on+0x78/0x100
[  612.258658][T13282]  __do_fast_syscall_32+0xe7/0x970
[  612.258673][T13282]  ? lockdep_hardirqs_on+0x78/0x100
[  612.258686][T13282]  do_fast_syscall_32+0x32/0x70
[  612.258701][T13282]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  612.258716][T13282] RIP: 0023:0xf7f02fec
[  612.258733][T13282] Code: Unable to access opcode bytes at 0xf7f02fc2.
[  612.258738][T13282] RSP: 002b:00000000f53a550c EFLAGS: 00000292 ORIG_RAX: 000000000000016c
[  612.258750][T13282] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[  612.258756][T13282] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000
[  612.258763][T13282] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  612.258769][T13282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  612.258776][T13282] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  612.258789][T13282]  </TASK>
[  612.596528][T13275] usb 2-1: USB disconnect, device number 14
[  612.861534][T13275] ehci-pci 0000:00:1d.7: EHCI Host Controller
[  612.869721][T13275] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1
[  612.874496][T13275] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000
[  612.906811][T13275] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00
[  612.911363][T13275] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02
[  612.914544][T13275] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[  612.918353][T13275] usb usb1: Product: EHCI Host Controller
[  612.920407][T13275] usb usb1: Manufacturer: Linux syzkaller ehci_hcd
[  612.922709][T13275] usb usb1: SerialNumber: 0000:00:1d.7
[  612.930988][T13275] hub 1-0:1.0: USB hub found
[  612.933360][T13275] hub 1-0:1.0: 6 ports detected
[  613.001339][T13275] hub 2-0:1.0: USB hub found
[  613.092510][T13275] hub 2-0:1.0: 2 ports detected
[  613.230716][T13291] FAULT_INJECTION: forcing a failure.
[  613.230716][T13291] name failslab, interval 1, probability 0, space 0, times 0
[  613.235189][T13291] CPU: 0 UID: 0 PID: 13291 Comm: syz.4.1947 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  613.235208][T13291] Tainted: [L]=SOFTLOCKUP
[  613.235212][T13291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  613.235219][T13291] Call Trace:
[  613.235224][T13291]  <TASK>
[  613.235229][T13291]  dump_stack_lvl+0x100/0x190
[  613.235247][T13291]  should_fail_ex.cold+0x5/0xa
[  613.235258][T13291]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  613.235271][T13291]  should_failslab+0xc2/0x120
[  613.235287][T13291]  kmem_cache_alloc_noprof+0x91/0x6a0
[  613.235303][T13291]  ? skb_clone+0x190/0x400
[  613.235320][T13291]  skb_clone+0x190/0x400
[  613.235335][T13291]  netlink_deliver_tap+0xaed/0xcc0
[  613.235350][T13291]  netlink_unicast+0x6a5/0x850
[  613.235364][T13291]  ? __pfx_netlink_unicast+0x10/0x10
[  613.235379][T13291]  netlink_ack+0x655/0xb80
[  613.235395][T13291]  netlink_rcv_skb+0x333/0x420
[  613.235407][T13291]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  613.235423][T13291]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  613.235441][T13291]  ? ns_capable+0xd2/0xf0
[  613.235455][T13291]  nfnetlink_rcv+0x1b3/0x440
[  613.235469][T13291]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  613.235484][T13291]  ? netlink_deliver_tap+0x1ae/0xcc0
[  613.235498][T13291]  netlink_unicast+0x585/0x850
[  613.235511][T13291]  ? __pfx_netlink_unicast+0x10/0x10
[  613.235529][T13291]  netlink_sendmsg+0x8b0/0xda0
[  613.235543][T13291]  ? __pfx_netlink_sendmsg+0x10/0x10
[  613.235557][T13291]  ? apparmor_socket_sendmsg+0x15b/0x270
[  613.235571][T13291]  ____sys_sendmsg+0xa4d/0xbe0
[  613.235582][T13291]  ? __pfx_netlink_sendmsg+0x10/0x10
[  613.235595][T13291]  ? __pfx_____sys_sendmsg+0x10/0x10
[  613.235612][T13291]  ___sys_sendmsg+0x190/0x1e0
[  613.235625][T13291]  ? __pfx____sys_sendmsg+0x10/0x10
[  613.235643][T13291]  ? find_held_lock+0x2b/0x80
[  613.235665][T13291]  __sys_sendmsg+0x160/0x210
[  613.235681][T13291]  ? __pfx___sys_sendmsg+0x10/0x10
[  613.235699][T13291]  ? __pfx_ksys_write+0x10/0x10
[  613.235713][T13291]  __do_fast_syscall_32+0xe7/0x970
[  613.235729][T13291]  ? lockdep_hardirqs_on+0x78/0x100
[  613.235743][T13291]  do_fast_syscall_32+0x32/0x70
[  613.235757][T13291]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  613.235771][T13291] RIP: 0023:0xf7f02fec
[  613.235809][T13291] Code: Unable to access opcode bytes at 0xf7f02fc2.
[  613.235814][T13291] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  613.235825][T13291] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000
[  613.235832][T13291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  613.235838][T13291] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  613.235844][T13291] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  613.235851][T13291] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  613.235864][T13291]  </TASK>
[  613.386741][   T10] usb 1-1: new high-speed USB device number 2 using ehci-pci
[  613.413412][T13292] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  613.415763][T13292] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  613.424276][T13292] vhci_hcd vhci_hcd.0: Device attached
[  613.586796][   T10] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  613.586826][   T10] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  613.586847][   T10] usb 1-1: Product: QEMU USB Tablet
[  613.586862][   T10] usb 1-1: Manufacturer: QEMU
[  613.586875][   T10] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1
[  613.623819][T13297] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1948'.
[  613.625499][T13297] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1948'.
[  613.708079][   T10] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.00BF/input/input196
[  613.726474][ T5860] usb 38-1: SetAddress Request (2) to port 0
[  613.726566][ T5860] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd
[  613.731800][   T10] hid-generic 0003:0627:0001.00BF: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0
[  613.748779][T13300] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1949'.
[  613.767621][T13275] hub 3-0:1.0: USB hub found
[  613.780313][T13275] hub 3-0:1.0: 2 ports detected
[  613.823366][T13275] hub 4-0:1.0: USB hub found
[  613.823835][T13275] hub 4-0:1.0: 2 ports detected
[  614.185322][T13295] rdma_rxe: rxe_newlink: failed to add wg2
[  614.208556][T13293] vhci_hcd: connection reset by peer
[  614.210759][ T9234] vhci_hcd vhci_hcd.0: stop threads
[  614.210796][ T9234] vhci_hcd vhci_hcd.0: release socket
[  614.218303][ T9234] vhci_hcd vhci_hcd.0: disconnect device
[  614.567756][T13308] fuse: Unknown parameter 'grou00000000000000000000'
[  614.638977][T13312] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1954'.
[  614.809526][ T7318] libceph: connect (1)[c::]:6789 error -101
[  614.811612][ T7318] libceph: mon0 (1)[c::]:6789 connect error
[  614.902072][T13317] ceph: No mds server is up or the cluster is laggy
[  615.153386][T13323] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1955'.
[  615.816998][T13328] fuse: Unknown parameter 'use00000000000000000000'
[  615.869125][T13330] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1956'.
[  616.259350][T13338] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1961'.
[  617.415541][ T1350] libceph: connect (1)[c::]:6789 error -101
[  617.418458][ T1350] libceph: mon0 (1)[c::]:6789 connect error
[  617.514673][T13351] ceph: No mds server is up or the cluster is laggy
[  617.684603][T13360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1966'.
[  617.687847][T13360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1966'.
[  617.725398][T13362] fuse: Unknown parameter 'user_i00000000000000000000'
[  617.953722][T13372] ehci-pci 0000:00:1d.7: remove, state 1
[  617.956111][T13372] usb usb1: USB disconnect, device number 1
[  617.959204][T13372] usb 1-1: USB disconnect, device number 2
[  618.404963][T13372] ehci-pci 0000:00:1d.7: USB bus 1 deregistered
[  618.675196][ T7318] libceph: connect (1)[c::]:6789 error -101
[  618.677595][ T7318] libceph: mon0 (1)[c::]:6789 connect error
[  618.686408][  T847] usb 2-1: new full-speed USB device number 15 using uhci_hcd
[  618.731479][T13390] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  618.733773][T13390] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  618.745631][T13390] vhci_hcd vhci_hcd.0: Device attached
[  618.773507][T13382] ceph: No mds server is up or the cluster is laggy
[  618.777099][ T5860] usb 38-1: device descriptor read/8, error -110
[  618.862252][  T847] usb 2-1: not running at top speed; connect to a high speed hub
[  618.882764][  T847] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  618.885848][  T847] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  618.891849][  T847] usb 2-1: Product: QEMU USB Tablet
[  618.895196][  T847] usb 2-1: Manufacturer: QEMU
[  618.898274][  T847] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1
[  618.929000][  T847] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.00C0/input/input197
[  618.964178][T13399] FAULT_INJECTION: forcing a failure.
[  618.964178][T13399] name failslab, interval 1, probability 0, space 0, times 0
[  618.970210][T13399] CPU: 2 UID: 0 PID: 13399 Comm: syz.0.1975 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  618.970240][T13399] Tainted: [L]=SOFTLOCKUP
[  618.970247][T13399] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  618.970257][T13399] Call Trace:
[  618.970264][T13399]  <TASK>
[  618.970272][T13399]  dump_stack_lvl+0x100/0x190
[  618.970298][T13399]  should_fail_ex.cold+0x5/0xa
[  618.970320][T13399]  ? __pfx_filemap_map_pages+0x10/0x10
[  618.970336][T13399]  should_failslab+0xc2/0x120
[  618.970361][T13399]  kmem_cache_alloc_noprof+0x91/0x6a0
[  618.970384][T13399]  ? ptlock_alloc+0x1f/0x70
[  618.970405][T13399]  ? __pfx_filemap_map_pages+0x10/0x10
[  618.970421][T13399]  ptlock_alloc+0x1f/0x70
[  618.970438][T13399]  pte_alloc_one+0x82/0x3d0
[  618.970465][T13399]  __do_fault+0x26c/0x440
[  618.970489][T13399]  do_fault+0x2db/0x1750
[  618.970517][T13399]  __handle_mm_fault+0x187d/0x2a00
[  618.970544][T13399]  ? __pfx___handle_mm_fault+0x10/0x10
[  618.970560][T13399]  ? find_held_lock+0x2b/0x80
[  618.970593][T13399]  ? __lock_acquire+0x49f/0x1a40
[  618.970627][T13399]  ? pmdp_set_access_flags+0x12d/0x1a0
[  618.970660][T13399]  handle_mm_fault+0x37b/0xa30
[  618.970682][T13399]  __get_user_pages+0x1178/0x32a0
[  618.970717][T13399]  ? __pfx___get_user_pages+0x10/0x10
[  618.970748][T13399]  faultin_page_range+0x1f1/0x9e0
[  618.970778][T13399]  madvise_do_behavior+0x354/0x510
[  618.970807][T13399]  ? __pfx_madvise_do_behavior+0x10/0x10
[  618.970835][T13399]  ? down_read+0x13b/0x4c0
[  618.970870][T13399]  do_madvise+0x238/0x290
[  618.970896][T13399]  ? __pfx_do_madvise+0x10/0x10
[  618.970940][T13399]  ? fput+0x79/0x100
[  618.970960][T13399]  ? ksys_write+0x1ac/0x250
[  618.970981][T13399]  __ia32_sys_madvise+0xa7/0x110
[  618.971007][T13399]  ? lockdep_hardirqs_on+0x78/0x100
[  618.971027][T13399]  __do_fast_syscall_32+0xe7/0x970
[  618.971050][T13399]  ? lockdep_hardirqs_on+0x78/0x100
[  618.971072][T13399]  do_fast_syscall_32+0x32/0x70
[  618.971094][T13399]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  618.971117][T13399] RIP: 0023:0xf6fdefec
[  618.971139][T13399] Code: Unable to access opcode bytes at 0xf6fdefc2.
[  618.971146][T13399] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 00000000000000db
[  618.971163][T13399] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000c00000
[  618.971175][T13399] RDX: 0000000000000017 RSI: 0000000000000000 RDI: 0000000000000000
[  618.971186][T13399] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  618.971197][T13399] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  618.971206][T13399] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  618.971230][T13399]  </TASK>
[  618.991222][  T847] hid-generic 0003:0627:0001.00C0: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0
[  619.115741][T13391] vhci_hcd: connection closed
[  619.128609][ T5796] vhci_hcd vhci_hcd.3: stop threads
[  619.132162][T13375] usb 2-1: USB disconnect, device number 15
[  619.136457][   T29] usb 44-1: SetAddress Request (2) to port 0
[  619.138610][   T29] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd
[  619.141132][ T5796] vhci_hcd vhci_hcd.3: release socket
[  619.146250][ T5796] vhci_hcd vhci_hcd.3: disconnect device
[  619.156796][   T29] usb 44-1: enqueue for inactive port 0
[  619.166992][ T5860] usb usb38-port1: attempt power cycle
[  619.239247][T13406] fido_id[13406]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb2/report_descriptor': No such file or directory
[  619.303516][T13375] ehci-pci 0000:00:1d.7: EHCI Host Controller
[  619.314418][T13375] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1
[  619.329470][T13410] loop2: detected capacity change from 0 to 3
[  619.335007][T13410] ldm_validate_privheads(): Disk read failed.
[  619.336461][T13375] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000
[  619.337139][T13410] Dev loop2: unable to read RDB block 3
[  619.341601][T13410]  loop2: unable to read partition table
[  619.343664][T13410] loop2: partition table beyond EOD, truncated
[  619.346024][T13410] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  619.356673][T13375] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00
[  619.373096][T13375] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02
[  619.377410][T13375] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[  619.381009][T13375] usb usb1: Product: EHCI Host Controller
[  619.383472][T13375] usb usb1: Manufacturer: Linux syzkaller ehci_hcd
[  619.385712][T13375] usb usb1: SerialNumber: 0000:00:1d.7
[  619.393856][T13375] hub 1-0:1.0: USB hub found
[  619.396527][T13375] hub 1-0:1.0: 6 ports detected
[  619.398200][T13417] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1981'.
[  619.441150][T13375] hub 2-0:1.0: USB hub found
[  619.443944][T13375] hub 2-0:1.0: 2 ports detected
[  619.480153][T13375] hub 3-0:1.0: USB hub found
[  619.482644][T13375] hub 3-0:1.0: 2 ports detected
[  619.533358][T13375] hub 4-0:1.0: USB hub found
[  619.537659][T13375] hub 4-0:1.0: 2 ports detected
[  619.563470][   T29] usb usb44-port1: attempt power cycle
[  619.623605][T13421] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1982'.
[  619.666406][  T149] usb 1-1: new high-speed USB device number 2 using ehci-pci
[  619.753371][ T5860] usb usb38-port1: unable to enumerate USB device
[  620.141319][   T29] usb usb44-port1: unable to enumerate USB device
[  620.571720][T13430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  620.578838][T13430] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  620.668056][  T149] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  620.674734][  T149] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  620.685414][  T149] usb 1-1: Product: QEMU USB Tablet
[  620.696787][  T149] usb 1-1: Manufacturer: QEMU
[  620.698488][  T149] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1
[  620.725885][  T149] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.00C1/input/input198
[  620.791569][  T149] hid-generic 0003:0627:0001.00C1: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0
[  622.135069][T13443] netlink: 'syz.1.1988': attribute type 29 has an invalid length.
[  622.139467][T13443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1988'.
[  622.254957][T13454] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1991'.
[  622.292940][T13456] fuse: Unknown parameter 'group_i00000000000000000000'
[  622.333386][T13458] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1993'.
[  623.262789][T13471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1999'.
[  623.266165][T13471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1999'.
[  623.319605][T13473] netlink: 'syz.1.2000': attribute type 12 has an invalid length.
[  623.491324][T13483] FAULT_INJECTION: forcing a failure.
[  623.491324][T13483] name failslab, interval 1, probability 0, space 0, times 0
[  623.495789][T13483] CPU: 0 UID: 0 PID: 13483 Comm: syz.1.2005 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  623.495819][T13483] Tainted: [L]=SOFTLOCKUP
[  623.495826][T13483] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  623.495836][T13483] Call Trace:
[  623.495845][T13483]  <TASK>
[  623.495854][T13483]  dump_stack_lvl+0x100/0x190
[  623.495879][T13483]  should_fail_ex.cold+0x5/0xa
[  623.495896][T13483]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  623.495917][T13483]  should_failslab+0xc2/0x120
[  623.495941][T13483]  kmem_cache_alloc_noprof+0x91/0x6a0
[  623.495960][T13483]  ? skb_clone+0x190/0x400
[  623.495989][T13483]  skb_clone+0x190/0x400
[  623.496012][T13483]  netlink_deliver_tap+0xaed/0xcc0
[  623.496033][T13483]  netlink_unicast+0x62b/0x850
[  623.496054][T13483]  ? __pfx_netlink_unicast+0x10/0x10
[  623.496079][T13483]  netlink_sendmsg+0x8b0/0xda0
[  623.496101][T13483]  ? __pfx_netlink_sendmsg+0x10/0x10
[  623.496119][T13483]  ? apparmor_socket_sendmsg+0x15b/0x270
[  623.496142][T13483]  ____sys_sendmsg+0xa4d/0xbe0
[  623.496159][T13483]  ? __pfx_netlink_sendmsg+0x10/0x10
[  623.496179][T13483]  ? __pfx_____sys_sendmsg+0x10/0x10
[  623.496202][T13483]  ___sys_sendmsg+0x190/0x1e0
[  623.496221][T13483]  ? __pfx____sys_sendmsg+0x10/0x10
[  623.496251][T13483]  ? find_held_lock+0x2b/0x80
[  623.496303][T13483]  __sys_sendmsg+0x160/0x210
[  623.496328][T13483]  ? __pfx___sys_sendmsg+0x10/0x10
[  623.496357][T13483]  ? __pfx_ksys_write+0x10/0x10
[  623.496376][T13483]  __do_fast_syscall_32+0xe7/0x970
[  623.496398][T13483]  ? lockdep_hardirqs_on+0x78/0x100
[  623.496420][T13483]  do_fast_syscall_32+0x32/0x70
[  623.496441][T13483]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  623.496461][T13483] RIP: 0023:0xf709efec
[  623.496485][T13483] Code: Unable to access opcode bytes at 0xf709efc2.
[  623.496493][T13483] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  623.496511][T13483] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180
[  623.496522][T13483] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  623.496532][T13483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  623.496540][T13483] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  623.496547][T13483] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  623.496571][T13483]  </TASK>
[  623.652096][T13489] FAULT_INJECTION: forcing a failure.
[  623.652096][T13489] name failslab, interval 1, probability 0, space 0, times 0
[  623.657487][T13489] CPU: 1 UID: 0 PID: 13489 Comm: syz.1.2007 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  623.657506][T13489] Tainted: [L]=SOFTLOCKUP
[  623.657510][T13489] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  623.657517][T13489] Call Trace:
[  623.657522][T13489]  <TASK>
[  623.657527][T13489]  dump_stack_lvl+0x100/0x190
[  623.657544][T13489]  should_fail_ex.cold+0x5/0xa
[  623.657558][T13489]  should_failslab+0xc2/0x120
[  623.657573][T13489]  __kmalloc_noprof+0xfc/0x820
[  623.657591][T13489]  ? ethnl_default_notify+0x1c3/0x9f0
[  623.657607][T13489]  ethnl_default_notify+0x1c3/0x9f0
[  623.657620][T13489]  ? __pfx_ethnl_default_notify+0x10/0x10
[  623.657631][T13489]  ? ethnl_set_linkinfo+0x313/0x780
[  623.657650][T13489]  ? ethnl_default_set_doit+0x473/0x1050
[  623.657663][T13489]  ? __pfx_ethnl_default_notify+0x10/0x10
[  623.657674][T13489]  ethnl_notify+0x17c/0x360
[  623.657686][T13489]  ethnl_default_set_doit+0x5aa/0x1050
[  623.657700][T13489]  genl_family_rcv_msg_doit+0x214/0x300
[  623.657716][T13489]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  623.657730][T13489]  ? genl_get_cmd+0x3e7/0x760
[  623.657746][T13489]  ? bpf_lsm_capable+0x9/0x10
[  623.657757][T13489]  ? security_capable+0x80/0x260
[  623.657769][T13489]  ? ns_capable+0xd2/0xf0
[  623.657782][T13489]  genl_rcv_msg+0x560/0x800
[  623.657797][T13489]  ? __pfx_genl_rcv_msg+0x10/0x10
[  623.657811][T13489]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[  623.657828][T13489]  netlink_rcv_skb+0x159/0x420
[  623.657840][T13489]  ? __pfx_genl_rcv_msg+0x10/0x10
[  623.657854][T13489]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  623.657871][T13489]  ? netlink_deliver_tap+0x1ae/0xcc0
[  623.657885][T13489]  genl_rcv+0x28/0x40
[  623.657897][T13489]  netlink_unicast+0x585/0x850
[  623.657911][T13489]  ? __pfx_netlink_unicast+0x10/0x10
[  623.657926][T13489]  netlink_sendmsg+0x8b0/0xda0
[  623.657940][T13489]  ? __pfx_netlink_sendmsg+0x10/0x10
[  623.657954][T13489]  ? apparmor_socket_sendmsg+0x15b/0x270
[  623.657969][T13489]  ____sys_sendmsg+0xa4d/0xbe0
[  623.657980][T13489]  ? __pfx_netlink_sendmsg+0x10/0x10
[  623.657993][T13489]  ? __pfx_____sys_sendmsg+0x10/0x10
[  623.658010][T13489]  ___sys_sendmsg+0x190/0x1e0
[  623.658023][T13489]  ? __pfx____sys_sendmsg+0x10/0x10
[  623.658041][T13489]  ? find_held_lock+0x2b/0x80
[  623.658067][T13489]  __sys_sendmsg+0x160/0x210
[  623.658089][T13489]  ? __pfx___sys_sendmsg+0x10/0x10
[  623.658107][T13489]  ? __pfx_ksys_write+0x10/0x10
[  623.658121][T13489]  __do_fast_syscall_32+0xe7/0x970
[  623.658136][T13489]  ? lockdep_hardirqs_on+0x78/0x100
[  623.658151][T13489]  do_fast_syscall_32+0x32/0x70
[  623.658165][T13489]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  623.658180][T13489] RIP: 0023:0xf709efec
[  623.658195][T13489] Code: Unable to access opcode bytes at 0xf709efc2.
[  623.658200][T13489] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  623.658210][T13489] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200
[  623.658217][T13489] RDX: 00000000040040c4 RSI: 0000000000000000 RDI: 0000000000000000
[  623.658223][T13489] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  623.658230][T13489] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  623.658236][T13489] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  623.658250][T13489]  </TASK>
[  623.700126][T13491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2008'.
[  623.790948][T13491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2008'.
[  623.799952][T13493] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2009'.
[  623.828279][ T1442] ieee802154 phy0 wpan0: encryption failed: -22
[  623.830937][ T1442] ieee802154 phy1 wpan1: encryption failed: -22
[  623.843859][T13501] ntfs3(nullb0): Primary boot signature is not NTFS.
[  623.847071][T13501] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  623.856193][T13501] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2011'.
[  624.039543][T13510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2014'.
[  624.386475][  T149] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[  624.538844][  T149] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  624.542011][  T149] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  624.545571][  T149] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  624.548740][  T149] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  624.552500][  T149] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  624.556240][  T149] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  624.561549][  T149] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  624.564450][  T149] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  624.567408][  T149] usb 6-1: Product: syz
[  624.568929][  T149] usb 6-1: Manufacturer: syz
[  624.572635][T13514] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  624.576564][  T149] cdc_wdm 6-1:1.0: skipping garbage
[  624.578333][  T149] cdc_wdm 6-1:1.0: skipping garbage
[  624.581110][  T149] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  624.583009][  T149] cdc_wdm 6-1:1.0: Unknown control protocol
[  624.781858][    C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  624.784722][    C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  624.788473][    C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  624.790768][    C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  624.795110][    C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  624.797611][    C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  624.799891][    C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  624.802549][    C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  624.805322][    C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  624.808228][    C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  624.810874][    C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  624.813464][    C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  624.816104][    C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  624.818892][    C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  624.821408][    C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  624.824035][    C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  624.826817][    C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  624.829541][    C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  624.832175][    C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  624.834789][    C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  624.868885][T13514] lo speed is unknown, defaulting to 1000
[  625.101902][ T7318] usb 6-1: USB disconnect, device number 64
[  625.103188][    C2] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  625.108738][T13514] cdc_wdm 6-1:1.0: Tx URB error: -19
[  625.319663][T13514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2015'.
[  626.011606][T13545] ehci-pci 0000:00:1d.7: remove, state 1
[  626.013563][T13545] usb usb1: USB disconnect, device number 1
[  626.015474][T13545] usb 1-1: USB disconnect, device number 2
[  626.338341][T13545] ehci-pci 0000:00:1d.7: USB bus 1 deregistered
[  626.626763][  T847] usb 2-1: new full-speed USB device number 16 using uhci_hcd
[  626.803183][  T847] usb 2-1: not running at top speed; connect to a high speed hub
[  626.897932][  T847] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  626.919014][  T847] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  626.937788][  T847] usb 2-1: Product: QEMU USB Tablet
[  626.965830][  T847] usb 2-1: Manufacturer: QEMU
[  626.983742][  T847] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1
[  627.195654][  T847] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.00C2/input/input200
[  627.268447][  T847] hid-generic 0003:0627:0001.00C2: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0
[  627.321641][T13548] usb 2-1: USB disconnect, device number 16
[  627.471887][T13548] ehci-pci 0000:00:1d.7: EHCI Host Controller
[  627.477632][T13548] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1
[  627.486686][T13548] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000
[  627.507144][T13548] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00
[  627.514162][T13548] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02
[  627.520455][T13548] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[  627.525867][T13548] usb usb1: Product: EHCI Host Controller
[  627.529487][T13548] usb usb1: Manufacturer: Linux syzkaller ehci_hcd
[  627.532520][T13548] usb usb1: SerialNumber: 0000:00:1d.7
[  627.546145][T13548] hub 1-0:1.0: USB hub found
[  627.549159][T13548] hub 1-0:1.0: 6 ports detected
[  627.608372][T13548] hub 2-0:1.0: USB hub found
[  627.610597][T13548] hub 2-0:1.0: 2 ports detected
[  627.616692][T13560] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2025'.
[  627.647299][T13548] hub 3-0:1.0: USB hub found
[  627.649129][T13548] hub 3-0:1.0: 2 ports detected
[  627.688119][T13548] hub 4-0:1.0: USB hub found
[  627.693253][T13548] hub 4-0:1.0: 2 ports detected
[  627.707645][T13549] ehci-pci 0000:00:1d.7: remove, state 1
[  627.715600][T13549] usb usb1: USB disconnect, device number 1
[  627.720489][ T5860] hub 1-0:1.0: activate --> -19
[  627.756200][T13549] ehci-pci 0000:00:1d.7: USB bus 1 deregistered
[  628.016512][ T5860] usb 2-1: new full-speed USB device number 17 using uhci_hcd
[  628.036862][T13565] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2027'.
[  628.340969][ T5860] usb 2-1: not running at top speed; connect to a high speed hub
[  629.217371][ T5860] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  629.221715][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  629.225562][ T5860] usb 2-1: Product: QEMU USB Tablet
[  629.228733][ T5860] usb 2-1: Manufacturer: QEMU
[  629.230828][ T5860] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1
[  629.268158][T13578] fuse: Unknown parameter 'group_id00000000000000000000'
[  629.273937][ T5860] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.00C3/input/input201
[  629.365652][ T5860] hid-generic 0003:0627:0001.00C3: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0
[  629.394096][T13589] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2034'.
[  629.428069][T13551] usb 2-1: USB disconnect, device number 17
[  629.793933][T13551] ehci-pci 0000:00:1d.7: EHCI Host Controller
[  629.827469][T13551] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1
[  629.853429][T13551] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000
[  629.915558][T13551] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00
[  629.950561][T13551] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02
[  629.971143][T13551] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[  629.991753][T13551] usb usb1: Product: EHCI Host Controller
[  629.993813][T13551] usb usb1: Manufacturer: Linux syzkaller ehci_hcd
[  630.015062][T13551] usb usb1: SerialNumber: 0000:00:1d.7
[  630.045942][T13551] hub 1-0:1.0: USB hub found
[  630.063640][T13551] hub 1-0:1.0: 6 ports detected
[  630.161434][T13551] hub 2-0:1.0: USB hub found
[  630.170814][T13592] fido_id[13592]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb2/report_descriptor': No such file or directory
[  630.180984][T13551] hub 2-0:1.0: 2 ports detected
[  630.235616][T13551] hub 3-0:1.0: USB hub found
[  630.250157][T13551] hub 3-0:1.0: 2 ports detected
[  630.319788][T13551] hub 4-0:1.0: USB hub found
[  630.325202][T13551] hub 4-0:1.0: 2 ports detected
[  630.341687][T13587] ehci-pci 0000:00:1d.7: remove, state 1
[  630.343572][T13587] usb usb1: USB disconnect, device number 1
[  630.386604][ T5837] usb 1-1: new high-speed USB device number 2 using ehci-pci
[  630.393996][ T5837] usb usb1-port1: attempt power cycle
[  630.446565][T13598] usb usb8: usbfs: process 13598 (syz.4.2037) did not claim interface 0 before use
[  630.457613][T13598] netlink: 'syz.4.2037': attribute type 2 has an invalid length.
[  630.492640][T13602] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2038'.
[  631.470549][T13587] ehci-pci 0000:00:1d.7: USB bus 1 deregistered
[  631.614231][T13618] fuse: Unknown parameter 'group_id00000000000000000000'
[  631.748002][ T5860] usb 2-1: new full-speed USB device number 18 using uhci_hcd
[  631.839985][  T149] libceph: connect (1)[c::]:6789 error -101
[  631.843612][  T149] libceph: mon0 (1)[c::]:6789 connect error
[  631.886456][ T5837] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[  631.932738][ T5860] usb 2-1: not running at top speed; connect to a high speed hub
[  631.955902][ T5860] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  631.960450][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  631.963924][ T5860] usb 2-1: Product: QEMU USB Tablet
[  631.966220][ T5860] usb 2-1: Manufacturer: QEMU
[  631.968454][ T5860] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1
[  631.982706][T13625] ceph: No mds server is up or the cluster is laggy
[  631.996661][ T5860] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.00C4/input/input202
[  632.026227][ T5860] hid-generic 0003:0627:0001.00C4: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0
[  632.044713][T13606] usb 2-1: USB disconnect, device number 18
[  632.068591][ T5837] usb 6-1: Using ep0 maxpacket: 8
[  632.075286][ T5837] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  632.083887][ T5837] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  632.092090][ T5837] usb 6-1: config 0 has no interface number 0
[  632.102745][ T5837] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  632.107123][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  632.121688][ T5837] usb 6-1: config 0 descriptor??
[  632.135377][ T5837] ldusb 6-1:0.55: Interrupt in endpoint not found
[  632.181187][T13638] fido_id[13638]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb2/report_descriptor': No such file or directory
[  632.234259][T13606] ehci-pci 0000:00:1d.7: EHCI Host Controller
[  632.239720][T13606] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1
[  632.258606][T13606] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000
[  632.287585][T13606] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00
[  632.293961][T13606] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02
[  632.298201][T13606] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[  632.305126][T13606] usb usb1: Product: EHCI Host Controller
[  632.310644][T13606] usb usb1: Manufacturer: Linux syzkaller ehci_hcd
[  632.313350][T13606] usb usb1: SerialNumber: 0000:00:1d.7
[  632.357361][T13606] hub 1-0:1.0: USB hub found
[  632.362011][T13606] hub 1-0:1.0: 6 ports detected
[  632.371358][T13647] FAT-fs (nbd4): unable to read boot sector
[  632.429874][T13606] hub 2-0:1.0: USB hub found
[  632.433122][T13606] hub 2-0:1.0: 2 ports detected
[  632.469978][T13606] hub 3-0:1.0: USB hub found
[  632.472167][T13606] hub 3-0:1.0: 2 ports detected
[  632.507909][T13606] hub 4-0:1.0: USB hub found
[  632.513867][T13606] hub 4-0:1.0: 2 ports detected
[  632.525727][ T5860] usb 6-1: USB disconnect, device number 65
[  632.525988][T13628] ehci-pci 0000:00:1d.7: remove, state 1
[  632.540239][T13628] usb usb1: USB disconnect, device number 1
[  632.596830][  T149] usb usb1-port1: attempt power cycle
[  632.617704][T13651] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2048'.
[  632.730664][T13628] ehci-pci 0000:00:1d.7: USB bus 1 deregistered
[  632.997373][  T847] usb 2-1: new full-speed USB device number 19 using uhci_hcd
[  633.174415][  T847] usb 2-1: not running at top speed; connect to a high speed hub
[  633.223312][  T847] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  633.238937][  T847] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  633.250793][  T847] usb 2-1: Product: QEMU USB Tablet
[  633.259923][  T847] usb 2-1: Manufacturer: QEMU
[  633.267104][  T847] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1
[  633.422966][  T847] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.00C5/input/input203
[  633.603180][  T847] hid-generic 0003:0627:0001.00C5: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0
[  633.672749][T13660] fuse: Bad value for 'user_id'
[  633.675426][T13660] fuse: Bad value for 'user_id'
[  633.947125][T13666] usb 2-1: USB disconnect, device number 19
[  634.678591][ T7074] libceph: connect (1)[c::]:6789 error -101
[  634.681096][ T7074] libceph: mon0 (1)[c::]:6789 connect error
[  634.734733][T13669] fido_id[13669]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb2/report_descriptor': No such file or directory
[  634.938376][T13666] ehci-pci 0000:00:1d.7: EHCI Host Controller
[  634.938444][ T7074] libceph: connect (1)[c::]:6789 error -101
[  634.950465][T13664] ceph: No mds server is up or the cluster is laggy
[  634.954099][ T7074] libceph: mon0 (1)[c::]:6789 connect error
[  634.983230][T13682] syzkaller0: entered promiscuous mode
[  634.985016][T13682] syzkaller0: entered allmulticast mode
[  635.222611][T13666] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1
[  635.230955][T13666] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000
[  635.256799][T13666] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00
[  635.263269][T13666] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02
[  635.274823][T13666] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[  635.283564][T13666] usb usb1: Product: EHCI Host Controller
[  635.285384][T13666] usb usb1: Manufacturer: Linux syzkaller ehci_hcd
[  635.291020][T13666] usb usb1: SerialNumber: 0000:00:1d.7
[  635.324848][T13666] hub 1-0:1.0: USB hub found
[  635.329079][T13666] hub 1-0:1.0: 6 ports detected
[  635.421470][T13666] hub 2-0:1.0: USB hub found
[  635.424631][T13666] hub 2-0:1.0: 2 ports detected
[  635.491656][T13666] hub 3-0:1.0: USB hub found
[  635.498817][T13666] hub 3-0:1.0: 2 ports detected
[  635.552051][T13666] hub 4-0:1.0: USB hub found
[  635.560308][T13666] hub 4-0:1.0: 2 ports detected
[  635.580681][T13677] ehci-pci 0000:00:1d.7: remove, state 1
[  635.583452][T13677] usb usb1: USB disconnect, device number 1
[  635.617569][ T5893] usb usb1-port1: attempt power cycle
[  635.763889][T13689] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2060'.
[  635.815118][T13677] ehci-pci 0000:00:1d.7: USB bus 1 deregistered
[  636.088811][  T847] usb 2-1: new full-speed USB device number 20 using uhci_hcd
[  636.242200][  T847] usb 2-1: not running at top speed; connect to a high speed hub
[  636.263024][  T847] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  636.267705][  T847] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  636.271183][  T847] usb 2-1: Product: QEMU USB Tablet
[  636.273408][  T847] usb 2-1: Manufacturer: QEMU
[  636.275460][  T847] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1
[  636.322660][  T847] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.00C6/input/input204
[  636.338305][  T847] hid-generic 0003:0627:0001.00C6: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0
[  636.371157][T13680] usb 2-1: USB disconnect, device number 20
[  636.613994][T13680] ehci-pci 0000:00:1d.7: EHCI Host Controller
[  636.618334][T13680] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1
[  636.632145][T13692] fido_id[13692]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb2/report_descriptor': No such file or directory
[  636.636680][T13680] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000
[  636.660231][T13680] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00
[  636.665239][T13680] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02
[  636.669353][T13680] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[  636.672802][T13680] usb usb1: Product: EHCI Host Controller
[  636.674741][T13680] usb usb1: Manufacturer: Linux syzkaller ehci_hcd
[  636.677653][T13680] usb usb1: SerialNumber: 0000:00:1d.7
[  636.683172][T13680] hub 1-0:1.0: USB hub found
[  636.685184][T13680] hub 1-0:1.0: 6 ports detected
[  636.719732][T13680] hub 2-0:1.0: USB hub found
[  636.721780][T13680] hub 2-0:1.0: 2 ports detected
[  636.778208][T13680] hub 3-0:1.0: USB hub found
[  636.780765][T13680] hub 3-0:1.0: 2 ports detected
[  636.835415][T13680] hub 4-0:1.0: USB hub found
[  636.837540][T13680] hub 4-0:1.0: 2 ports detected
[  636.956549][  T847] usb 1-1: new high-speed USB device number 2 using ehci-pci
[  637.048452][T13696] fuse: Bad value for 'user_id'
[  637.050062][T13696] fuse: Bad value for 'user_id'
[  637.195776][  T847] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  637.202254][  T847] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  637.204892][  T847] usb 1-1: Product: QEMU USB Tablet
[  637.206865][  T847] usb 1-1: Manufacturer: QEMU
[  637.208906][  T847] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1
[  637.284376][  T847] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.00C7/input/input205
[  637.350274][  T847] hid-generic 0003:0627:0001.00C7: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0
[  638.049349][T13708] dummy_hcd dummy_hcd.0: remove, state 1
[  638.055200][T13708] usb usb5: USB disconnect, device number 1
[  638.057683][T13708] usb 5-1: USB disconnect, device number 49
[  638.100017][T13708] cdc_ether 5-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device
[  638.118914][    C3] dummy_hcd dummy_hcd.0: timer fired with no URBs pending?
[  638.178689][T13721] usb usb8: usbfs: process 13721 (syz.3.2068) did not claim interface 0 before use
[  638.184469][T13721] netlink: 'syz.3.2068': attribute type 2 has an invalid length.
[  638.202524][T13716] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2067'.
[  638.300570][T13733] fuse: Bad value for 'user_id'
[  638.302247][T13733] fuse: Bad value for 'user_id'
[  638.366097][T13708] dummy_hcd dummy_hcd.0: stopped
[  638.368982][T13708] dummy_hcd dummy_hcd.0: USB bus 5 deregistered
[  638.585892][T13750] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2073'.
[  638.739502][ T5117] libceph: connect (1)[c::]:6789 error -101
[  638.742093][ T5117] libceph: mon0 (1)[c::]:6789 connect error
[  638.832466][T13756] ceph: No mds server is up or the cluster is laggy
[  639.004032][T13788] FAULT_INJECTION: forcing a failure.
[  639.004032][T13788] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  639.009787][T13788] CPU: 0 UID: 0 PID: 13788 Comm: syz.0.2082 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  639.009808][T13788] Tainted: [L]=SOFTLOCKUP
[  639.009812][T13788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  639.009819][T13788] Call Trace:
[  639.009823][T13788]  <TASK>
[  639.009828][T13788]  dump_stack_lvl+0x100/0x190
[  639.009846][T13788]  should_fail_ex.cold+0x5/0xa
[  639.009860][T13788]  _copy_from_user+0x2e/0xd0
[  639.009879][T13788]  get_compat_msghdr+0xb3/0x480
[  639.009898][T13788]  ? __pfx_get_compat_msghdr+0x10/0x10
[  639.009921][T13788]  ___sys_sendmsg+0x1b6/0x1e0
[  639.009935][T13788]  ? __pfx____sys_sendmsg+0x10/0x10
[  639.009954][T13788]  ? find_held_lock+0x2b/0x80
[  639.009977][T13788]  __sys_sendmsg+0x160/0x210
[  639.009993][T13788]  ? __pfx___sys_sendmsg+0x10/0x10
[  639.010012][T13788]  ? __pfx_ksys_write+0x10/0x10
[  639.010027][T13788]  __do_fast_syscall_32+0xe7/0x970
[  639.010042][T13788]  ? lockdep_hardirqs_on+0x78/0x100
[  639.010062][T13788]  do_fast_syscall_32+0x32/0x70
[  639.010077][T13788]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  639.010092][T13788] RIP: 0023:0xf6fdefec
[  639.010106][T13788] Code: Unable to access opcode bytes at 0xf6fdefc2.
[  639.010111][T13788] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  639.010123][T13788] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000b40
[  639.010130][T13788] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000
[  639.010137][T13788] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  639.010144][T13788] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  639.010150][T13788] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  639.010165][T13788]  </TASK>
[  639.256192][T13807] syzkaller0: entered promiscuous mode
[  639.258121][T13807] syzkaller0: entered allmulticast mode
[  639.718684][ T1350] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[  639.891901][ T1350] usb 6-1: Using ep0 maxpacket: 8
[  639.908367][ T1350] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  639.911955][ T1350] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  639.916375][ T1350] usb 6-1: config 0 has no interface number 0
[  639.918995][ T1350] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  639.923642][ T1350] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  639.927536][ T1350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  639.932887][ T1350] usb 6-1: config 0 descriptor??
[  639.941049][ T1350] ldusb 6-1:0.55: Interrupt in endpoint not found
[  640.320366][  T149] libceph: connect (1)[c::]:6789 error -101
[  640.322952][  T149] libceph: mon0 (1)[c::]:6789 connect error
[  640.357514][ T1350] usb 6-1: USB disconnect, device number 66
[  640.359606][T13829] ceph: No mds server is up or the cluster is laggy
[  642.313259][T13845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2094'.
[  642.442849][T13854] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2098'.
[  642.525409][T13858] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2100'.
[  643.136814][ T7074] libceph: connect (1)[c::]:6789 error -101
[  643.141231][ T7074] libceph: mon0 (1)[c::]:6789 connect error
[  643.153204][ T7074] libceph: connect (1)[c::]:6789 error -101
[  643.163728][ T7074] libceph: mon0 (1)[c::]:6789 connect error
[  643.210801][T13867] ceph: No mds server is up or the cluster is laggy
[  643.416069][T13874] usb usb8: usbfs: process 13874 (syz.1.2102) did not claim interface 0 before use
[  643.420682][T13876] usb usb8: usbfs: process 13876 (syz.3.2103) did not claim interface 0 before use
[  643.420695][T13874] netlink: 'syz.1.2102': attribute type 2 has an invalid length.
[  643.424493][T13876] netlink: 'syz.3.2103': attribute type 2 has an invalid length.
[  644.292385][T13880] FAULT_INJECTION: forcing a failure.
[  644.292385][T13880] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  644.306522][T13880] CPU: 3 UID: 0 PID: 13880 Comm: syz.1.2105 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  644.306554][T13880] Tainted: [L]=SOFTLOCKUP
[  644.306560][T13880] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  644.306571][T13880] Call Trace:
[  644.306578][T13880]  <TASK>
[  644.306586][T13880]  dump_stack_lvl+0x100/0x190
[  644.306612][T13880]  should_fail_ex.cold+0x5/0xa
[  644.306625][T13880]  ? prepare_alloc_pages+0x16d/0x5f0
[  644.306655][T13880]  should_fail_alloc_page+0xeb/0x140
[  644.306682][T13880]  prepare_alloc_pages+0x1f0/0x5f0
[  644.306712][T13880]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  644.306738][T13880]  ? rcu_is_watching+0x12/0xc0
[  644.306761][T13880]  ? trace_mm_page_alloc+0x164/0x1c0
[  644.306787][T13880]  ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0
[  644.306810][T13880]  ? find_held_lock+0x2b/0x80
[  644.306833][T13880]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  644.306862][T13880]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  644.306884][T13880]  ? lockdep_hardirqs_on+0x78/0x100
[  644.306906][T13880]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  644.306926][T13880]  ? stack_depot_save_flags+0x479/0x9d0
[  644.306957][T13880]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  644.306996][T13880]  ? __kasan_slab_alloc+0x89/0x90
[  644.307019][T13880]  ? kmem_cache_alloc_node_noprof+0x27d/0x6b0
[  644.307041][T13880]  ? alloc_vmap_area+0x182f/0x2bb0
[  644.307064][T13880]  ? __get_vm_area_node+0x1ca/0x330
[  644.307088][T13880]  ? __vmalloc_node_range_noprof+0x228/0x1630
[  644.307114][T13880]  ? __vmalloc_node_noprof+0xad/0xf0
[  644.307138][T13880]  ? compat_do_replace+0x1b1/0x7a0
[  644.307158][T13880]  ? do_ebt_set_ctl+0x3f4/0x4a0
[  644.307178][T13880]  ? nf_setsockopt+0x8d/0xf0
[  644.307199][T13880]  ? ip_setsockopt+0xcb/0xf0
[  644.307220][T13880]  ? raw_setsockopt+0x60/0x1b0
[  644.307243][T13880]  ? do_sock_setsockopt+0xf3/0x1d0
[  644.307270][T13880]  ? __sys_setsockopt+0x119/0x190
[  644.307292][T13880]  ? __ia32_sys_setsockopt+0xbc/0x160
[  644.307314][T13880]  ? __do_fast_syscall_32+0xe7/0x970
[  644.307344][T13880]  alloc_pages_bulk_noprof+0x5de/0x13c0
[  644.307369][T13880]  ? policy_nodemask+0xed/0x4f0
[  644.307396][T13880]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[  644.307431][T13880]  __kasan_populate_vmalloc+0xf0/0x210
[  644.307457][T13880]  alloc_vmap_area+0x95d/0x2bb0
[  644.307481][T13880]  ? kasan_save_track+0x14/0x30
[  644.307498][T13880]  ? __kasan_kmalloc+0xaa/0xb0
[  644.307514][T13880]  ? __pfx_alloc_vmap_area+0x10/0x10
[  644.307534][T13880]  ? __get_vm_area_node+0x101/0x330
[  644.307558][T13880]  __get_vm_area_node+0x1ca/0x330
[  644.307580][T13880]  __vmalloc_node_range_noprof+0x228/0x1630
[  644.307601][T13880]  ? compat_do_replace+0x1b1/0x7a0
[  644.307619][T13880]  ? find_held_lock+0x2b/0x80
[  644.307659][T13880]  ? __might_fault+0xc5/0x140
[  644.307677][T13880]  ? compat_do_replace+0x1b1/0x7a0
[  644.307698][T13880]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  644.307718][T13880]  ? compat_copy_ebt_replace_from_user+0x2c8/0x3f0
[  644.307736][T13880]  ? __pfx_compat_copy_ebt_replace_from_user+0x10/0x10
[  644.307758][T13880]  ? compat_do_replace+0x1b1/0x7a0
[  644.307773][T13880]  __vmalloc_node_noprof+0xad/0xf0
[  644.307793][T13880]  ? compat_do_replace+0x1b1/0x7a0
[  644.307810][T13880]  compat_do_replace+0x1b1/0x7a0
[  644.307828][T13880]  ? __pfx_compat_do_replace+0x10/0x10
[  644.307858][T13880]  ? bpf_lsm_capable+0x9/0x10
[  644.307873][T13880]  ? security_capable+0x80/0x260
[  644.307890][T13880]  do_ebt_set_ctl+0x3f4/0x4a0
[  644.307908][T13880]  ? __pfx_do_ebt_set_ctl+0x10/0x10
[  644.307926][T13880]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  644.307948][T13880]  ? nf_sockopt_find.isra.0+0x222/0x290
[  644.307967][T13880]  nf_setsockopt+0x8d/0xf0
[  644.307985][T13880]  ip_setsockopt+0xcb/0xf0
[  644.308005][T13880]  raw_setsockopt+0x60/0x1b0
[  644.308023][T13880]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  644.308045][T13880]  do_sock_setsockopt+0xf3/0x1d0
[  644.308068][T13880]  __sys_setsockopt+0x119/0x190
[  644.308089][T13880]  __ia32_sys_setsockopt+0xbc/0x160
[  644.308109][T13880]  ? __do_fast_syscall_32+0x98/0x970
[  644.308129][T13880]  ? lockdep_hardirqs_on+0x78/0x100
[  644.308145][T13880]  __do_fast_syscall_32+0xe7/0x970
[  644.308158][T13880]  ? lockdep_hardirqs_on+0x78/0x100
[  644.308171][T13880]  do_fast_syscall_32+0x32/0x70
[  644.308186][T13880]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  644.308200][T13880] RIP: 0023:0xf709efec
[  644.308213][T13880] Code: Unable to access opcode bytes at 0xf709efc2.
[  644.308218][T13880] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e
[  644.308230][T13880] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000
[  644.308237][T13880] RDX: 0000000000000080 RSI: 0000000080000080 RDI: 00000000000000e0
[  644.308243][T13880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  644.308249][T13880] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  644.308255][T13880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  644.308268][T13880]  </TASK>
[  644.308944][T13880] syz.1.2105: vmalloc error: size 8355968, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null)
[  644.387787][T13884] syzkaller0: entered promiscuous mode
[  644.388567][T13880] ,cpuset=
[  644.390393][T13884] syzkaller0: entered allmulticast mode
[  644.392565][T13880] /,mems_allowed=0-1
[  644.527934][T13880] CPU: 3 UID: 0 PID: 13880 Comm: syz.1.2105 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  644.527962][T13880] Tainted: [L]=SOFTLOCKUP
[  644.527968][T13880] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  644.527979][T13880] Call Trace:
[  644.528000][T13880]  <TASK>
[  644.528008][T13880]  dump_stack_lvl+0x100/0x190
[  644.528034][T13880]  warn_alloc.cold+0x94/0xa8
[  644.528054][T13880]  ? __pfx_warn_alloc+0x10/0x10
[  644.528075][T13880]  ? lockdep_hardirqs_on+0x78/0x100
[  644.528097][T13880]  ? __get_vm_area_node+0x2cd/0x330
[  644.528128][T13880]  ? __get_vm_area_node+0x208/0x330
[  644.528158][T13880]  __vmalloc_node_range_noprof+0xccd/0x1630
[  644.528191][T13880]  ? find_held_lock+0x2b/0x80
[  644.528213][T13880]  ? __might_fault+0xc5/0x140
[  644.528234][T13880]  ? compat_do_replace+0x1b1/0x7a0
[  644.528263][T13880]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  644.528290][T13880]  ? compat_copy_ebt_replace_from_user+0x2c8/0x3f0
[  644.528313][T13880]  ? __pfx_compat_copy_ebt_replace_from_user+0x10/0x10
[  644.528356][T13880]  ? compat_do_replace+0x1b1/0x7a0
[  644.528378][T13880]  __vmalloc_node_noprof+0xad/0xf0
[  644.528404][T13880]  ? compat_do_replace+0x1b1/0x7a0
[  644.528429][T13880]  compat_do_replace+0x1b1/0x7a0
[  644.528452][T13880]  ? __pfx_compat_do_replace+0x10/0x10
[  644.528489][T13880]  ? bpf_lsm_capable+0x9/0x10
[  644.528516][T13880]  ? security_capable+0x80/0x260
[  644.528539][T13880]  do_ebt_set_ctl+0x3f4/0x4a0
[  644.528562][T13880]  ? __pfx_do_ebt_set_ctl+0x10/0x10
[  644.528586][T13880]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  644.528617][T13880]  ? nf_sockopt_find.isra.0+0x222/0x290
[  644.528639][T13880]  nf_setsockopt+0x8d/0xf0
[  644.528664][T13880]  ip_setsockopt+0xcb/0xf0
[  644.528691][T13880]  raw_setsockopt+0x60/0x1b0
[  644.528715][T13880]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  644.528745][T13880]  do_sock_setsockopt+0xf3/0x1d0
[  644.528776][T13880]  __sys_setsockopt+0x119/0x190
[  644.528799][T13880]  __ia32_sys_setsockopt+0xbc/0x160
[  644.528822][T13880]  ? __do_fast_syscall_32+0x98/0x970
[  644.528845][T13880]  ? lockdep_hardirqs_on+0x78/0x100
[  644.528865][T13880]  __do_fast_syscall_32+0xe7/0x970
[  644.528887][T13880]  ? lockdep_hardirqs_on+0x78/0x100
[  644.528910][T13880]  do_fast_syscall_32+0x32/0x70
[  644.528931][T13880]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  644.528955][T13880] RIP: 0023:0xf709efec
[  644.528976][T13880] Code: Unable to access opcode bytes at 0xf709efc2.
[  644.528985][T13880] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e
[  644.529002][T13880] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000
[  644.529012][T13880] RDX: 0000000000000080 RSI: 0000000080000080 RDI: 00000000000000e0
[  644.529024][T13880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  644.529034][T13880] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  644.529045][T13880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  644.529070][T13880]  </TASK>
[  644.529271][T13880] Mem-Info:
[  644.656483][T13880] active_anon:7121 inactive_anon:289 isolated_anon:0
[  644.656483][T13880]  active_file:673 inactive_file:47986 isolated_file:0
[  644.656483][T13880]  unevictable:1768 dirty:394 writeback:0
[  644.656483][T13880]  slab_reclaimable:7490 slab_unreclaimable:55333
[  644.656483][T13880]  mapped:24808 shmem:2285 pagetables:1451
[  644.656483][T13880]  sec_pagetables:307 bounce:0
[  644.656483][T13880]  kernel_misc_reclaimable:0
[  644.656483][T13880]  free:38499 free_pcp:14090 free_cma:0
[  644.674569][T13880] Node 0 active_anon:244kB inactive_anon:80kB active_file:72kB inactive_file:48kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:3564kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8736kB pagetables:1972kB sec_pagetables:1128kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  644.688273][T13880] Node 1 active_anon:28240kB inactive_anon:1076kB active_file:2620kB inactive_file:191896kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:99204kB dirty:1576kB writeback:0kB shmem:5576kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6844kB pagetables:3832kB sec_pagetables:100kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  644.702953][T13880] Node 0 DMA free:2316kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:608kB local_pcp:196kB free_cma:0kB
[  644.712476][T13880] lowmem_reserve[]: 0 280 280 280 280
[  644.714187][T13880] Node 0 DMA32 free:15344kB boost:0kB min:12772kB low:15964kB high:19156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:244kB inactive_anon:80kB active_file:72kB inactive_file:44kB unevictable:3536kB writepending:0kB zspages:0kB present:1032196kB managed:286948kB mlocked:0kB bounce:0kB free_pcp:10872kB local_pcp:1064kB free_cma:0kB
[  644.724618][T13880] lowmem_reserve[]: 0 0 0 0 0
[  644.726154][T13880] Node 1 DMA32 free:136336kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28240kB inactive_anon:1076kB active_file:2620kB inactive_file:191896kB unevictable:3536kB writepending:1576kB zspages:1900kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:44944kB local_pcp:22180kB free_cma:0kB
[  644.736231][T13880] lowmem_reserve[]: 0 0 0 0 0
[  644.737756][T13880] Node 0 DMA: 67*4kB (UE) 8*8kB (UE) 6*16kB (UE) 11*32kB (UE) 2*64kB (U) 3*128kB (UE) 0*256kB 0*512kB 1*1024kB (E) 0*2048kB 0*4096kB = 2316kB
[  644.742115][T13880] Node 0 DMA32: 186*4kB (UME) 129*8kB (UME) 60*16kB (UME) 116*32kB (UME) 49*64kB (UME) 15*128kB (UME) 3*256kB (UM) 0*512kB 1*1024kB (M) 1*2048kB (U) 0*4096kB = 15344kB
[  644.747453][T13880] Node 1 DMA32: 524*4kB (UME) 484*8kB (UME) 102*16kB (UME) 345*32kB (UME) 307*64kB (UME) 104*128kB (UME) 75*256kB (UME) 34*512kB (UME) 17*1024kB (UME) 9*2048kB (UM) 3*4096kB (UM) = 136336kB
[  644.753442][T13880] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  644.756587][T13880] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  644.759458][T13880] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  644.762365][T13880] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  644.765179][T13880] 51893 total pagecache pages
[  644.766820][T13880] 953 pages in swap cache
[  644.768169][T13880] Free swap  = 118080kB
[  644.769533][T13880] Total swap = 124996kB
[  644.770837][T13880] 524155 pages RAM
[  644.772032][T13880] 0 pages HighMem/MovableOnly
[  644.773490][T13880] 211525 pages reserved
[  644.774773][T13880] 0 pages cma reserved
[  647.142330][T13886] netlink: 'syz.1.2108': attribute type 29 has an invalid length.
[  647.145322][T13886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2108'.
[  647.324041][T13893] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2111'.
[  647.523975][T13896] fuse: Bad value for 'fd'
[  648.012967][T13898] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2113'.
[  649.309414][T13908] usb usb8: usbfs: process 13908 (syz.1.2116) did not claim interface 0 before use
[  649.313975][T13908] netlink: 'syz.1.2116': attribute type 2 has an invalid length.
[  649.950901][T13911] ehci-pci 0000:00:1d.7: remove, state 1
[  649.953647][T13911] usb usb1: USB disconnect, device number 1
[  649.956025][T13911] usb 1-1: USB disconnect, device number 2
[  650.464832][T13917] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2118'.
[  650.688863][T13911] ehci-pci 0000:00:1d.7: USB bus 1 deregistered
[  651.577203][ T5860] usb 2-1: new full-speed USB device number 21 using uhci_hcd
[  651.805946][ T5860] usb 2-1: not running at top speed; connect to a high speed hub
[  652.781470][ T5860] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  652.784526][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  652.792805][ T5860] usb 2-1: Product: QEMU USB Tablet
[  652.798009][ T5860] usb 2-1: Manufacturer: QEMU
[  652.806381][ T5860] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1
[  652.836528][ T5860] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.00C8/input/input206
[  652.908507][ T5860] hid-generic 0003:0627:0001.00C8: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0
[  652.942505][T13924] usb 2-1: USB disconnect, device number 21
[  652.998763][T13934] fido_id[13934]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb2/2-1/report_descriptor': No such file or directory
[  653.191704][T13924] ehci-pci 0000:00:1d.7: EHCI Host Controller
[  653.199092][T13924] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1
[  653.215859][T13924] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000
[  653.239534][T13924] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00
[  653.257071][T13924] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02
[  653.260430][T13924] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[  653.266610][T13924] usb usb1: Product: EHCI Host Controller
[  653.270004][T13924] usb usb1: Manufacturer: Linux syzkaller ehci_hcd
[  653.274813][T13924] usb usb1: SerialNumber: 0000:00:1d.7
[  653.304396][T13924] hub 1-0:1.0: USB hub found
[  653.314440][T13924] hub 1-0:1.0: 6 ports detected
[  653.402435][T13924] hub 2-0:1.0: USB hub found
[  653.431171][T13924] hub 2-0:1.0: 2 ports detected
[  653.488969][T13924] hub 3-0:1.0: USB hub found
[  653.497468][T13924] hub 3-0:1.0: 2 ports detected
[  653.558047][T13924] hub 4-0:1.0: USB hub found
[  653.561148][T13924] hub 4-0:1.0: 2 ports detected
[  653.566897][T13928] ehci-pci 0000:00:1d.7: remove, state 1
[  653.573381][T13928] usb usb1: USB disconnect, device number 1
[  653.612950][   T10] usb usb1-port1: attempt power cycle
[  653.752731][T13928] ehci-pci 0000:00:1d.7: USB bus 1 deregistered
[  654.036378][   T29] usb 2-1: new full-speed USB device number 22 using uhci_hcd
[  654.192770][   T29] usb 2-1: not running at top speed; connect to a high speed hub
[  654.213772][   T29] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  654.217099][   T29] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  654.219656][   T29] usb 2-1: Product: QEMU USB Tablet
[  654.221766][   T29] usb 2-1: Manufacturer: QEMU
[  654.223407][   T29] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1
[  654.237246][   T10] libceph: connect (1)[c::]:6789 error -101
[  654.241002][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  654.241591][   T29] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.00C9/input/input207
[  654.310888][   T29] hid-generic 0003:0627:0001.00C9: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0
[  654.321017][T13938] usb 2-1: USB disconnect, device number 22
[  654.337396][T13944] ceph: No mds server is up or the cluster is laggy
[  654.480653][T13952] fido_id[13952]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb2/report_descriptor': No such file or directory
[  654.521906][T13938] ehci-pci 0000:00:1d.7: EHCI Host Controller
[  654.527646][T13938] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1
[  654.532003][T13938] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000
[  654.558340][T13938] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00
[  654.561569][T13938] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02
[  654.564439][T13938] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[  654.567629][T13938] usb usb1: Product: EHCI Host Controller
[  654.569502][T13938] usb usb1: Manufacturer: Linux syzkaller ehci_hcd
[  654.571663][T13938] usb usb1: SerialNumber: 0000:00:1d.7
[  654.578922][T13938] hub 1-0:1.0: USB hub found
[  654.580968][T13938] hub 1-0:1.0: 6 ports detected
[  654.618353][T13938] hub 2-0:1.0: USB hub found
[  654.621998][T13938] hub 2-0:1.0: 2 ports detected
[  654.668901][T13938] hub 3-0:1.0: USB hub found
[  654.670849][T13938] hub 3-0:1.0: 2 ports detected
[  654.712092][T13938] hub 4-0:1.0: USB hub found
[  654.719090][T13938] hub 4-0:1.0: 2 ports detected
[  654.866616][ T5117] usb 1-1: new high-speed USB device number 2 using ehci-pci
[  654.905993][T13965] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2128'.
[  654.971233][T13973] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2129'.
[  655.061015][ T5117] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  655.064815][ T5117] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  655.068859][ T5117] usb 1-1: Product: QEMU USB Tablet
[  655.070990][ T5117] usb 1-1: Manufacturer: QEMU
[  655.072754][ T5117] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1
[  655.097940][ T5117] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.00CA/input/input208
[  655.158544][ T5117] hid-generic 0003:0627:0001.00CA: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0
[  655.641480][T13987] ehci-pci 0000:00:1d.7: remove, state 1
[  655.643437][T13987] usb usb1: USB disconnect, device number 1
[  655.645428][T13987] usb 1-1: USB disconnect, device number 2
[  655.881277][T13987] ehci-pci 0000:00:1d.7: USB bus 1 deregistered
[  656.191272][ T5749] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  656.200589][ T5749] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  656.207279][ T5749] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  656.211400][ T5749] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  656.214595][ T5749] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  656.249959][T13992] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2132'.
[  656.278613][   T29] usb 2-1: new full-speed USB device number 23 using uhci_hcd
[  656.424597][T13993] lo speed is unknown, defaulting to 1000
[  656.463305][   T29] usb 2-1: not running at top speed; connect to a high speed hub
[  656.497820][   T29] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  656.501126][   T29] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  656.503673][   T29] usb 2-1: Product: QEMU USB Tablet
[  656.505339][   T29] usb 2-1: Manufacturer: QEMU
[  656.516409][   T29] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1
[  656.539196][   T29] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.00CB/input/input209
[  656.601492][   T29] hid-generic 0003:0627:0001.00CB: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0
[  656.654442][T13993] bridge0: port 1(bridge_slave_0) entered blocking state
[  656.660516][T13993] bridge0: port 1(bridge_slave_0) entered disabled state
[  656.672027][T13993] bridge_slave_0: entered allmulticast mode
[  656.678940][T13993] bridge_slave_0: entered promiscuous mode
[  656.684572][T13993] bridge0: port 2(bridge_slave_1) entered blocking state
[  656.689245][T13993] bridge0: port 2(bridge_slave_1) entered disabled state
[  656.691637][T13993] bridge_slave_1: entered allmulticast mode
[  656.694313][T13993] bridge_slave_1: entered promiscuous mode
[  656.714389][T13993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  656.718944][T13993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  656.735188][T13993] team0: Port device team_slave_0 added
[  656.738479][T13993] team0: Port device team_slave_1 added
[  656.751866][T13993] batman_adv: batadv0: Adding interface: batadv_slave_0
[  656.754082][T13993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  656.762270][T13993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  656.766780][T13993] batman_adv: batadv0: Adding interface: batadv_slave_1
[  656.769066][T13993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  656.778290][T13993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  656.802980][T13993] hsr_slave_0: entered promiscuous mode
[  656.805376][T13993] hsr_slave_1: entered promiscuous mode
[  656.808089][T13993] debugfs: 'hsr0' already exists in 'hsr'
[  656.809810][T13993] Cannot create hsr debugfs directory
[  657.020203][T13993] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  657.065063][T13993] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  657.084049][T13993] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  657.187849][T13993] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  657.190747][T13993] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  657.235012][T13993] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  657.241805][T13993] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  657.485439][T13993] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  657.605705][T14032] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2136'.
[  657.731290][T10608] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN NOPTI
[  657.735231][T10608] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067]
[  657.738309][T10608] CPU: 0 UID: 101 PID: 10608 Comm: dhcpcd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  657.741928][T10608] Tainted: [L]=SOFTLOCKUP
[  657.743360][T10608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  657.746407][T10608] RIP: 0010:dummy_queue+0x1ba/0xb00
[  657.748146][T10608] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a6 07 00 00 e8 ab ef 3a fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 4f 07 00 00 45 8b 7f 60 31 ff
[  657.754529][T10608] RSP: 0018:ffffc9000e25f310 EFLAGS: 00010206
[  657.756477][T10608] RAX: dffffc0000000000 RBX: ffff88802aaefc10 RCX: ffffffff87cebc3f
[  657.759092][T10608] RDX: 000000000000000c RSI: ffffffff87cebcb5 RDI: 0000000000000060
[  657.761647][T10608] RBP: ffff8880218c00e0 R08: 0000000000000005 R09: 0000000000000005
[  657.764542][T10608] R10: 0000000000000003 R11: 0000000000000000 R12: ffff8880218c0c00
[  657.766542][T13993] 8021q: adding VLAN 0 to HW filter on device bond0
[  657.767728][T10608] R13: ffff88802aaefc00 R14: ffff8880218c00d8 R15: 0000000000000000
[  657.767745][T10608] FS:  00007fed11046780(0000) GS:ffff888096be3000(0000) knlGS:0000000000000000
[  657.767778][T10608] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  657.779045][T10608] CR2: 0000000080010000 CR3: 000000006aba8000 CR4: 0000000000352ef0
[  657.781766][T10608] Call Trace:
[  657.783028][T10608]  <TASK>
[  657.784044][T10608]  usb_ep_queue+0xfa/0x3c0
[  657.785494][T10608]  eth_start_xmit+0x684/0x1390
[  657.787028][T10608]  dev_hard_start_xmit+0x121/0x760
[  657.788648][T10608]  sch_direct_xmit+0x1b2/0xc70
[  657.790215][T10608]  ? lock_acquire+0x1b9/0x370
[  657.791801][T10608]  ? __pfx_sch_direct_xmit+0x10/0x10
[  657.794224][T10608]  ? do_raw_spin_lock+0x240/0x260
[  657.795959][T10608]  __dev_queue_xmit+0x27ac/0x4970
[  657.797911][T10608]  ? find_held_lock+0x2b/0x80
[  657.799803][T10608]  ? __might_fault+0xc5/0x140
[  657.801461][T10608]  ? __pfx___dev_queue_xmit+0x10/0x10
[  657.803513][T10608]  ? __pfx__copy_from_iter+0x10/0x10
[  657.805203][T10608]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  657.806899][T10608]  ? packet_parse_headers+0x205/0x800
[  657.808572][T10608]  ? __pfx_packet_parse_headers+0x10/0x10
[  657.810319][T10608]  packet_xmit+0x243/0x310
[  657.811799][T10608]  packet_sendmsg+0x319a/0x5100
[  657.813872][T10608]  ? aa_sk_perm+0x309/0xaa0
[  657.815395][T10608]  ? __pfx_aa_sk_perm+0x10/0x10
[  657.817140][T10608]  ? __pfx_packet_sendmsg+0x10/0x10
[  657.819010][T10608]  ? apparmor_socket_sendmsg+0x15b/0x270
[  657.820934][T10608]  sock_write_iter+0x53a/0x5b0
[  657.822551][T10608]  ? __pfx_packet_sendmsg+0x10/0x10
[  657.824517][T10608]  ? __pfx_sock_write_iter+0x10/0x10
[  657.826377][T10608]  do_iter_readv_writev+0x6f7/0x930
[  657.827991][T10608]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  657.829758][T10608]  ? bpf_lsm_file_permission+0x9/0x10
[  657.831432][T10608]  ? security_file_permission+0x76/0x210
[  657.833430][T10608]  ? rw_verify_area+0xce/0x6d0
[  657.834957][T10608]  vfs_writev+0x360/0xdd0
[  657.836348][T10608]  ? finish_task_switch.isra.0+0x2c0/0x10c0
[  657.838194][T10608]  ? __pfx_vfs_writev+0x10/0x10
[  657.838971][T13993] 8021q: adding VLAN 0 to HW filter on device team0
[  657.839638][T10608]  ? finish_task_switch.isra.0+0x3b6/0x10c0
[  657.839654][T10608]  ? rcu_is_watching+0x12/0xc0
[  657.839668][T10608]  ? __schedule+0x126e/0x6730
[  657.839685][T10608]  ? do_writev+0x28a/0x340
[  657.839700][T10608]  do_writev+0x28a/0x340
[  657.849502][T10608]  ? __pfx_do_writev+0x10/0x10
[  657.851002][T10608]  do_syscall_64+0x115/0x840
[  657.852705][T10608]  ? clear_bhb_loop+0x40/0x90
[  657.854383][T10608]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  657.856399][T10608] RIP: 0033:0x7fed110d0407
[  657.857819][T10608] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  657.864772][T10608] RSP: 002b:00007ffe03a27730 EFLAGS: 00000202 ORIG_RAX: 0000000000000014
[  657.868281][T10608] RAX: ffffffffffffffda RBX: 00007fed11046780 RCX: 00007fed110d0407
[  657.871703][T10608] RDX: 0000000000000002 RSI: 00007ffe03a27790 RDI: 0000000000000003
[  657.874995][T10608] RBP: 0000000000000188 R08: 0000000000000000 R09: 0000000000000000
[  657.878192][T10608] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe03a277d0
[  657.881321][T10608] R13: 0000563e552198f0 R14: 00007ffe03a27820 R15: 00007ffe03a379f0
[  657.884832][T10608]  </TASK>
[  657.886155][T10608] Modules linked in:
[  657.887902][T10608] ---[ end trace 0000000000000000 ]---
[  657.889979][T10608] RIP: 0010:dummy_queue+0x1ba/0xb00
[  657.892173][T10608] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a6 07 00 00 e8 ab ef 3a fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 4f 07 00 00 45 8b 7f 60 31 ff
[  657.900107][T10608] RSP: 0018:ffffc9000e25f310 EFLAGS: 00010206
[  657.902299][T10608] RAX: dffffc0000000000 RBX: ffff88802aaefc10 RCX: ffffffff87cebc3f
[  657.904860][T10608] RDX: 000000000000000c RSI: ffffffff87cebcb5 RDI: 0000000000000060
[  657.908124][T10608] RBP: ffff8880218c00e0 R08: 0000000000000005 R09: 0000000000000005
[  657.910731][T10608] R10: 0000000000000003 R11: 0000000000000000 R12: ffff8880218c0c00
[  657.913239][T10608] R13: ffff88802aaefc00 R14: ffff8880218c00d8 R15: 0000000000000000
[  657.915876][T10608] FS:  00007fed11046780(0000) GS:ffff888096be3000(0000) knlGS:0000000000000000
[  657.919623][T10608] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  657.922728][T10608] CR2: 0000000080010000 CR3: 000000006aba8000 CR4: 0000000000352ef0
[  657.926107][T10608] Kernel panic - not syncing: Fatal exception in interrupt
[  657.929768][T10608] Kernel Offset: disabled
[  657.931537][T10608] Rebooting in 86400 seconds..