last executing test programs:

12m52.105307855s ago: executing program 0 (id=2102):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4)
setsockopt(r0, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt(r1, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8)
bind(r0, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
connect(r1, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10)

12m51.245272577s ago: executing program 0 (id=2113):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x64, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)

12m51.24431203s ago: executing program 0 (id=2115):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40102, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x1, 0x1, 0x0, &(0x7f0000001600)=""/102, 0x0, 0xa000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000))
r2 = dup(r1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x1, r2})
write$P9_RCREATE(r2, &(0x7f0000000000)={0x18, 0x73, 0x2, {{0x20, 0x4, 0x4}, 0x6}}, 0x18)

12m51.185392653s ago: executing program 0 (id=2117):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='1', 0x1)
syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301)

12m51.184887239s ago: executing program 0 (id=2119):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199)
syz_open_dev$usbfs(&(0x7f0000000280), 0xf15, 0x422000)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8)
io_submit(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0)
sendmsg$inet(r4, 0x0, 0x0)

12m50.774934336s ago: executing program 0 (id=2121):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9, 0x70a0af8c93042c75}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x4, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x5, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xa, 0x10}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0xc3f, 0x8, 0x1, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20000000)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r7)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}], 0x1}, 0x4)

12m50.701720328s ago: executing program 32 (id=2121):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9, 0x70a0af8c93042c75}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x4, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x5, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xa, 0x10}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0xc3f, 0x8, 0x1, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20000000)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r7)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}], 0x1}, 0x4)

4m8.752712165s ago: executing program 2 (id=6541):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0x40015b19, &(0x7f0000000040))

4m5.662639358s ago: executing program 2 (id=6563):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0xaa7, 0x2000, 0x1, 0xfffe}, 'syz1\x00', 0x4})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$input_event(r0, &(0x7f0000000180)={{}, 0x12, 0x81, 0x1000}, 0x18)

4m5.406964461s ago: executing program 2 (id=6565):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x10, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0})
getdents64(r2, &(0x7f0000000100)=""/134, 0x86)
getdents64(r2, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f000000a3c0)="428a6ce66c433e7d6473d37a71716ae84216bc67277f3e9626c032a88a7acfd09ce24f4255f37078d380c6723d7aacdc3e0220c069b0e3a64d5f03936770166422985d1b36eaea3166a4f1403dceba822af78c5c09a45e2174bb51f6e9f11deea936b040d91598d4aa373bf4c5765a17e6c33ddad61487bdd32e3e58af5741f560b4b08b02d3254eef9fe9b2f0bdbddffe42ca87595f21dd7ff6c3d5754346b6414d2d7dbb41f5de3181ef343faa894a332cfc895ad40b048dc597478a761ef691d4bad54af2c711334532ad94c6017b49990e1f01bedefed1eea35deff92249b09a7a5d762d4fef1fd20bd95c3fa810d6d99cc5b8c2dd70a8a62ddd217e069cb29c9e7ef5bec625b3a303188d8cad4f423eb71a4aee6bf69c9cf73f0884a277a9d2d39449053d13952eea2b4de2e61715f0b878bb42d48642399e4e5ff2ea4daf9bf21c73ce7d767db0171cb6d436bd0c3ea93920700e0cf64731f7cafb172b0866fbbfaacc940639d6741bb7e4c7ce69dd1a815387838b081b1d9a04bf6192bc0e8d4e16a8da6ff83df1bead9f6218e4684b78026a0b49a2a89d3f05549b12e8b07734ab867c41a9401abc9c3fc6cab66e57eaa9513fd491384a2c65715abadf29aa1036a4b78e47ecb95d76884b23fe89a251626e1c5d827dc1d96f83d6e524a93561fc1d43ceb28b9dc5b476cd0c6ee51f4f37b7792f9b5d862d69184830ab80a5fb6a53729cbef25d612640b688b72c9d77c83538ae181d2065250858adc72786027103a8e1a2d098a33f1a130db154925a8aef6c4752d6262932dc3cd957a9a91ba1021c726b8b16b0027ebf48e9f2f19bc82ac3f6743d584a5f3d3679487925157d5fee7280cac2a26934e35942c4ce233fe962bbc76b7efe9587b564b0b91f6f75c4ff570ccf8e5b15b09ca095ddcff7fef94e28cefbd1592fc30484b142838263ed9b72ee93e9db0dc0d7c60a750d80d90aa7f0fdfa3603aeb92e6f0166ae30ff4225e90ccd2d0fa3bf89407e1c038124bd628bbd864469b5b77eacd7af14a42487bd0bfd6b2fb1962d63d427ef318fc01dfac3c476611209fb2c0e599c62da902c96abb18b91c6d7f2637c5da80900d07557ff62563ae8d84537485d7102e86990476cf34acbb42b2683a247d64788c0500179d0452e879c6263c4a82bb10987dade8c195eaf8368daed13b2f46e62de7e72c5189868372f081b72e48871e6598e5076997755e6d70c8c78b8ff937003e9558b0e7809ca260bac8d2c165818287cfdf7eab197cbe17b9ecb556931dbb2494b4290ab1eed4d00fd4c3c88f942c57b70ccd9e618872d658111c25a7ca4f271fa92ba1f8bb3d625ebdf2c0635b74c6d10e1c67116eee87687974d1be802b883ce2e05296831cf0552454f0b6a1a29ff2d5ac9af44f10817d063142327170f30d15fb49baa3506313f4c859e23dd153d5fa303df32fd52d0c6e27db0860c2cd00128e3fcb7f63832ac42a507b83fa587049fec1cb4b171236835d1ffc2645686edc9e9b5233a38020ba84c7d3744a5041eb4056d0be3fe6a6ed2a9c87ae8c1010a7ae9a08b189cb10b989358f0d9b5501b31b876fa8e78e591d29e82ff391c913c6894b9dc7aee2fba54a03f020473abcaf75ca71b48e43a195de1be70e30895c34fce11dbcaa81d55f674fe84d2ddcfbcb6cda65c206c0d48e73e2d23c16d8871e409313177c564dfc98ae86ff903e1e37a5c7cc1f5e8ba7f2ea4fb2974a1af29d84d4470ab769eda38506d8a5dc6b7dadafd94847ee26ca5e8221e0269147828fb569a0873b50d9b82a698a58b04aaa3c0f39e76b8f5def74ac1921ffce7bd2d5c9e3ae3e1b78040c7492be0854e52ba0df6100c5bb6c1732a5fa989ddfd0713c12531856969f0cf40e4e6a3e7ec1491eb351967b9679cd733977d0cf8629fc7e32a668015de2a79c76e0ba30b1557acbc067a66630aff2d68409d59c04e0d507e88f35fd2d3af2eee43a06a69c963fd30b3606e08a172d2012ae8c7c25475249a3d8a2fb7aa48fec18893c8f8bde721ddae7d9444a5963007ebe36063515094d54f36de8b29877f2d6faf147d50beff0b5b5f17088452dd97c91d5872e3596cf2f26546e8009448ab45fd1351f09ea7138ae510512715692fa181483da711fa6a861c81d27ee0b8e2701c61c8e4844401e26e2136d9371e5edd223c98fcfe3d5ddf7e514ddde1be2450f64a6c6af79ff4ceb529cc573f178de2322d98091d81c0375e42dc600907c236cac3b3dd2a61dc706a228e803a54e4640cfdb318be734686e04e6deba7e85cd2bb5a2135c143cbc25d64d2e5a50df677f518cfdb178090b8be719e96b742d370f9ddfe4852ac3c9a3ca4d0f63ce5ffed0605c1efb72de7e5d79aa70aac1b1e7e622c6cc7732a2a08496d2d22191aa78a037c89f9c7620a7d3a9530f5b02fc460dbbc16b46d814d4c49c55771ba591daf6fe9300e8c2694c438da06383ea67ed6cb22cc1ead51c89a0eae2b221af22969b5e01be6b4ee752465b0b96e7c0bde2e2654260c63c7c711e23ceedfc7c8f60f94ddce5056684e3213e6e79ab800a9464d1c407ae07999d9a1733a075d10621f796aec1b93cfec393e609f6a317768fa6d90f450e3f77f54bbdc254806f22ae03933d72b0526b77679ddd89b1bbcfa7c0a97025dbc7f66e4fc99444ce2f1a9eff1b741de631ee206a53e1b53256c5722587b6722962576a0c519285f09e1a17df9d7da065b14d26d1fa50ec0c67dcae691eef2d581a262004c900243e1dfb39b8a5a8e0c8f565491895e4c589be089b32d0e92e0a6846885e39da03023197061b99c0b2304eb0a41ab1c99079fa99dbe1ad9b3930cbddaf433407b790a40d1669d8e764243488f53c9c5597320dc7abd32ae9e0207919cf2b9a955509f84f6c18e8aa676a13917fef06d65755ef538a624112d8c4f62c4ad4a1c6a39774fcac69fc0ff99e6d36bff208974ce4f08556032cb5b8ac3a75ad24a8f87b5d36119ea43aa37054b4e7d9bd68d5b0500e863464101185c7006082698afb70fba7a9a1db9a294019b195ee5364a77250a0742a0395d22397d57ec972f71955a6ab34f894ff08484a3565cd5e3a1793267cb186b40adb4056837843c90ad254814aae1d6e44406b148c829434fba7caa2c3db16ef5ac904f505a18b1f55c43f16591577ecbfdeaa960363c26f782335772f78a693fb8e45ed0418646e57b12d5ec9f96a4c4dbc96bc0f3a2b18eda4a279428bf34920a55e96c6d50d8c0f7e7728ec8667e39bba86664120fd688ea9f067f64e4d27ea53e14f8ee8560c347df20cf7ca4a7905420bab3e327fc875154a9e0f52596e86bdeadebaf6e79ad4bab8ec079720a414eb20f7938ccbf8204fe04c1b18f3f3e69b79bcd135f60d7c46c22cef7f8f72410516fc4be391c0c7f4a6f1063c0e739f91c757a34f3ff587051d4356c26bb0b2579b6096a912bf8cfdbc7d1d2adbc194441677c22ab17b108ea7f2491ab519f18d8ba2b20aefe1a694941050f27ec6ee6a2c230afac26dc93065f9cd52ca326378bf36e3260bdf011af695ebdb3b0fa321f80ced7d7024020e23d381474844019bf3f72a2afa6ebf43cd853b7852792b7b14a0e23f4ef42911e2c0748c44a8f2117e440c0ffda360d4f8252187b938dcc9b4eeacd97f374281ac31fefc69e6e8ac84300022f307c5c4e7fc96d3bbf8044e72c778ed85a3d02ca5fe9b15cc3245fae21f57a02383f06bfcc6a3b37a4b9df50baa1162b8669d7549e88b8731ec9e5e058d4e41150ce3d3acb17069d1c08519ca1d1896b843877b9c2beda2a5fa839930349e6331488cd3fa1dc8acd598767b03c5e633cdbbb7f84ae29ebbdf16751498cb6fabe81a50d0eea6887d8ed52b77448c1344647aed17903bb9f2ce08e03e73ddc8f94e27053b81066de7666004870094a5bc9902f866b191cad4603a17eb7c3d62bacbaa4ba524908517fb431f51f2777f7de4053113c5083358e696b9969f912376643aabe3b4a6ab9b6baf71f71673f5872f4367afeb514aa9647907776fc8527f48f75a87f8dbaaa59055753e89985864915ab8f323b1e6012009b49afa8201a3f6634882a5f88a9e6eece7a491a8f4652c32f27784d94d1ba715f6146b5ccb0ecb37109ddd4026d8af2c308f9d8475945d497ad5e0a47bcad2e70290c5085f886f3d58d2099b8e47012cb86e67eb3b760e15f345c001b4f950ea739762a752a22bfe0b9844660b92afb5a1fec179f155a95461230dce2607ffcfda4263907fa5053c6f84089677b8766daab786271d08eed53c228ee7d8c9a818c7aff7973dc86c1600a4e3decca6a6047e2e633e682425ec28e3a77dbb3a21fcd0aaf4b4826f5f9a99d52415faa21fc500d5c99a9bf5e43d7b11dd820975cddf18212df99a0166306e5e45d72c75a917ab0f844d35c2934af58e5b8a12e2e9a1f16925a3b342c3509e86885f3a487a5b74c94bdcb150a81f853b431a74cf47510e55f89da8e2089d07faacb650f64473dfbaf308264a361db8cccfdc4c80bf97c8c4bf9db7789c231e62c2878837c2e72585584de5d52c3f59fed0a4a14a8957279a8dcf8b6efa0e81f00c73b52f34eedf8f31840a0b18c9634570cfed3d7f4e13b78c0fcb16628d380de48e2807d884e9a46f7c2737e89cb7fbbff6491db2f9f6dafc248a5e417ba926304784be621e83db65dddb0b84141e5b97728a9bcd1b1916f9c2da403e86bd178a2ffb3a1f5d64253707f8f6da3ca22a00de18c8bb000384a38293da2ce968fc184b696fd5d26618b5d3b633145e971ff010ab9cbfb0f3173cf6f8016cdef01a2ed0921e3608f3e3e0a511a7480464638ecba810df33e2146a7f53258b440339d1eeb5e06eb94814d9fe24d835704cf34be75fc56f4bfb3f8355776f319095b1987a81dce624c6425d080258d355263224b888a8317782101769e1ec4874c20ff75b430037710bc9437234a791fc7606d9498f6c353af33adc0c92c53229574095a7988c59bfcda13bf1a4185fdd6318b250590aeedb15aeaccf049665316eb1873e4d5a4a7b686ec6279a987444c17927e530e598d5b5f672b88ff6f98fbc52b193053a516f19da80fb2873a49fb9cad5b037eaf9e9afd7c5a6bd0e3349c0aac078968f2655b789abc08b82af590bf7e3f1051188ad725dbff39c124915037afeccc741912def5645951b2ded95b29797da1ac40b16a3f89863047131e1d99879896db7d5e019bbbef6753752f665e0cbdb6473bf86da661e63ff8b0893de82ca786d08dd0a4b7f8cb9181aba271ef13bbb6d6b7ed79debf6105ac5a971dbae815ef10303b630cdfcd8ba9a0bcda0052a6c2a8a6135c6f466fc543d44a9e722bd2a3fc3d004e5f6430246c8e2fae6272cd238581412748d4ef37a404b7e4035a03a981be204606dec92a430c5cf303f663878c6b16215e63e41869496f634cdeced1475c47864e78a7cc398c06cd53d229ec08488651695ea5c018b00dcad9e48fdb8006fd38e1f53fcdea59aeb3570a1098659892d20b3be362edd0e587f4c3f78af67301c78e83b8aff103667709afd8968846caa34d9291fd549b4aaad4cc783042a117f3bdb009169eebde40bea76925218c7e964cd3e42c09220cbf27e2c253b3a4615af8039c4a713e9afb3dea376152cc9d011886674ca84f9aa413dc1ddc9936472bb7e9107c792da1dd56a7a396fd036f5caab4d4ffe35ee1f0771f3d04c9933a94aa0f28bc489bd81ad331a1cffaf1fcb44694bca71886978ac7ea1aeaf1e8cda64d195414c4da561a074ee28e2c983742477d7de8eeca587cf279aa948a037bd3b596862f928910d0d0e077c4949a0c7b340e41d41f5b217bd6ae4cb2b2a34561652978e64616863f56ffe91f896eb85823ade588333e6f9acccaeee63d0d4f19bf6eb58ce9311cfc1a731705e484ce612eba0bb81f89fe2ca223df2c3b9f37684c5d4419379e96e65830cff6e0e03c146f171cd9f9d287e8edc631d21887e7f63109dc9c57feb3cb3e67f3146c3d7c8735f73d5d6f038ed2ab29b6ab7a64aa936671d71a2a82abc41d907ec91d4aa187b53e1a5790974b3a65ef3e7f145b040a17991b287513c43ffc35d58440c200e1f5914f216dd2d8c1477bb7715dcb96b4ac12263e52bbf7869e82a0f1a2de61ac65af1e016f5cf811031c3ef2be67fc442114082688aba559ce993c523a9d60eb19245bca03dc2783fba384740295e86cdf6433ae624f0a84eea3d1d133f3cb8d3655601debfdfb89995aa86bdeaab4bf37ecd728958f32739030527b51532fad7ca3861ed5599568dbe9445f622b0a1cd9d5864544265752fecc10e874c2f1a0c6f11d5dc945696fcae70b50fdde191d0aafe50632a786dff3fd5f976aaa5af332156bc96c3c86a88f35f2ea876d050a0aeea72e61d57a988183bf3ff14508f825f86f2cb6742c809096c1c16a343e5e38be54b8426ed809e1ce15600b92f251ddfbc6244b82d3ec22bf888929a11cf9e591dbc06007cd15ab7edc093dfbcdae3a145ece8ded5f0b63bb5f3928ea0a1996762b982e10394fb8a6b33bf62dc4a6f8f614ec856a9b1d790b9d06e675320afa41e1a465dcf6fbb49d737f66ff492f019b0c4b34f9dad26e088ec3b9019a19a78a6a25f7421702d87ce9d50415ecfb3cb4d5c6f3ed0c24ed3bc5dc7fcc26e54403d319a7e629664953aed9f96fa63f2b1aa9a6a066a12d004b7ec28bb92457ca3fd863745085bf6eb40794beb5363ccaf0371844a24252aae1e49ca4bac41961e7a155fb8938a01ba73ad66f55ce33c415a6c6b860021dbc61b0fbde29ad55556a11a7ca4c5a85b0608ca2a2a649ae7654974e8aca57c5d013a02de7f389245aba981d23fe4e115415d3f5c7a52951f122ef4ac3efd9783f6229576ee88e3320112e885038b17d9ce1847c84c972bf57b0cdbc30794b9f3ef626c897fb38db40141f8a0049a998524f90dec8e657289c49634e773e9d3e776b0fd14afcb3f54127d95f062c8078540efa31a11aaeffc8c68cd981ef531a1f166ea73c00590e1044db5e719947dabe2a8dff7ae0b8400a9fcdd6f5cf69250acec7b06ee2db86a45fc90bf5abeb90d1d11cb2b657475bac2a5cc4606fda1f19171fe63f72746d29a218cca87616d283fc5d35f0d36840bde80577ae91f1148960079d027a72a8084b5aebed10b201eacc4924bed0ca734772c8dbec33bc256cbbb08a80bbc4545d5b5ac9f610aa4ac32faa0bd741e6bc39c5840559a9a6de4646ff5b62ccaf3340985151203e885bfcffa11b9c77e0b42b903de4fd7db842135ea3efb1c227aa7eac69102b09832c6d5456315b894c15d706386a0cd336cb57dbd8b97fe4e03cba770ac356445449bc53754dcc18abee099ff5674c6637e433b448221bac334475f45ebaeabb3e0cc1d35164d501a75205253060c80db6c0e65b307375adeab281eb4433b3eccb1dc27d4e2db0b712dc21b0aafd05d07d59995f94d6b45070eee5174f54067871b29b02ec23fc2c6eb122fe690cbab49b040d48d9dc0217b9ac439001ad5ed7f73b673739010ca8b99ec3b2f1fb528e3db34c698fd5dee32794b31fd63c2b72f32bda74506e40b6f88e4495739f6c3863542ca7cb4ec69b5b48a3da1b808e9249c285811d6eb031ff7449e75f0ab1235c44bdadfb7f4549cc361f3d370831580269a2a0004596fb719dfe15faf4db82cf533f0e813e25e5ada6d06f235c695be58ae02bd0a05ea836d15faac2ceb330bd93abe5abe4355a4bcc00382845a0fee4d4c5b831cceb8d6c8bf543b18f34355a7d03e89be95f0ddce76625af30aa71a5090f7639f85accd686fce53abc71512a4289d14e992a64ad5303fb0fb1298648d268939136f1625039b472f0d144599290c909aa2924563a7ff5fd5cdaa5018e592e9b4853bcba57c34c1167f77dc7fc010a2fe8a8e3e82e5dfd8cbde7a73d1f0f84691b452c263ed4bf0fe336ab05910d42f95b8fe1b52421315d611b16820ae75089ddbc222edc1830a952c91180a6d3228d1e1fe823d908bfa4d24c1a6424461007d1b94f0fbc13a9e718243ced7e6f24522a80005a4fcff858dff00585cd9283ea1a597f0ca1e76c54747d050f392cd0e086326d0ddc766ab1fbe30c3b8cba924c01475b160e775c3d1d26c35840f83269a7e28f1338ea375e53dc98b862c8d15a19f772ac23b3ee9f90bb04e03dfde4e82fb9dd3a0890fe06a99101c59ae696ff1e1bb1d652b6f3f9635c18616a7c86b1b6ace325a6c62d132cda8d826654641b6e802acba840a4265e24e85cc274b55e0fbd01a76dd9af91441ae349e5bf7f585c9860f5c4500da889c3b72497b86f193fcf969d1424eb0f64e9ae1db82c102e1d57bb4f6646209a691cd0b286182f2a66dfd3dbda20a83156b0a108bb0e0a5c8e2bc7a2c19cbab09f25db581771af9fdcb09d77a46f337f2443962f1858e374c16b37f8e993646cf84b2869d9f93a4e38e0f4db5444c287d4030f4ed1bfaded4f37646d81255ec9bbad06687f49678dcb4690284c2db493464e7fc5c2e39832ae3ede01b136ff32532f5e670ba2d753983fdd2052f42311fbf917e96a1e29b4898d62130c683bc0d45cc2be5945cc41e35475fda252ee1c3f035afc352f34b77ea13a4fb09c09dea26110e700693cff04ce8e06b30f66535608968e65d2ebef57698ad72e69beea4db56b0e8c6f91cdf187fd0d49c84c1d5ab34900f6004b00503131e7d6c996dce0a84341ae8236bb5741adf6cf5b447d750f1e5f0cb5b3787e22992a9f26310f28d4789d09c53df3057113f6ffbf2978984762fa679cdacbe509d6dc4b637f17b6cf49283d5a523e04a2205b1a1af1c6880fce33502a83170a5b0ed1f384ed1451e683b622f44ccc0d385b3d7540ca3116d6112aaf905039471b564d3cf615ccb8823cfd34e635c3b2af982ed0a98fdf2358b42cfa8e8cf2ac184b7e08bf48988f000850163bffafe7f69b3f8a761936a3e1974e79ec92ce893f6a8474fe900b42025c9bf56799dc9a0db57239e8fa5dbb3b1972b0d2c456f7777ab2baa1aef60f5be9d48b4aba1aa934a493682c70687b4e7b05f5226eafe9a25d4fc33cc2af7a7315b37c7db101ad3456d8ad04ddc3b76d2baa96129da53c810d55377382a2a25d6ce0d4c113c3367fc906034eb775290c1d5e5c881d9a8c6567d8470d68b33b506bfab2d6b61a9a7ca6eb003772e30165ed01544d896f96c0f286a23ab55ae258c1554b8054e9f6de37e9f29bb644c4f2ee3ec42d51daf7d4da1cda30f16a56f12e299b5e302deae593fbbd6f75390f4eb25555185bf62eeaa882c23416872a4cc18d2534ddc4d2a1f3a0c3ca461d9b9e4fda10c3294ee74c631c65e840d5e4a94a1798e07a5e151968b7b22892d65ac2c81e7e8d9a471a790f66a9391b4e8c19a2251488255c96d498cda6ddb3aaef264454f2b4ff43a70c48b1fba3ed45c43d0dd44bc26452045e9fffa2b25901b3d5704ae3b0352fa3e8830774b6e38025c7552c13d312a273cb88c1649dc6d8ab38ebd1b2bfb16b2cc056f870c138052b951baacdee560e218972b1a0932bc266855062fafed6064bcc637db59713538c45a69c838b09e1b143b7c1e2e6b72a6a00b7cd0afff8d20b9008d61023aadf193d8ff8040220564c0bcbd9dc03a98ab1b8eb96c576291636c0c1de5e3d872c095876efafa7575f994f45c29cb3fa9e96f98012b7a84ce820e172e625b1de98031e5471cf5c9036864289d95d2f1956abf5d4f9a7e81ac2796c67a4aec8f54a5896bffd05b4514df6b2a7df1038183ea740459db4a07ad275e153a08cef7542abf7775a8ff164e73a424bd22815da91265c8c86c1dd90ed926fe313fe32be9c040f7065b27c8cd03d585bbdef6f149ebb3e3906fed7290a19ee7d42621393d634940c771c6dd95a9fd153bf25e029b453a69b10cd3c9d3fb17fd936ee6243a5357b38ccdfacff843aa2a51081925acac1b7ef3dae20304562be99ee3464885988d6e08b8f1ec22e51d5960b25c799d4ec379bec80219cacbcb4e312e744b6e5da1cb39e6d7b90c492ddacc215d1218891f65acb3d3917ed208bd6e8fd520eddf7584ecc920c9243c657cb6482dbf6a38af25d199f2137880b605f640a4f996f48da1f7058d81604a70c672414230105990aeb151560ab80379e346a1326c0438b68ce6bd291654d736881176ad30d11e1fad2871eb83f4b339e5fb0bb68eabe3b707324673b3ba607fa27953c9109185ecc2eeff24cc3a7494cbf04f70bbda0b85e644d8e2434bfdeb2bb242016bd82fc78e8ff2b1bb18167e7834f621225eef2607be6d2318ea29e507f7be94764f67aa5c61c7d15dba36cbea919c665137f9216e30310c1c3a410eb7ffd8bfb3d339273a8934b4089efeea8ce06cd5dcdc46907e169dad730be362e6583a512071d6a2b7ead9c4482dc91f55a62592925adcd3892dd57461ac830d74cb8ceb47c78ddaf2558cb8bde9dd3ce2edb882cbb0fe019ea611bbf778493d63a3b68b3d94a283470e4e682ee4cc569ebc6629b4f0a5e10fa9bbd6dc044cf7d61d11d0ec5563c0b7b86141e7a852fe64fa7c8496b112f366ca2e4afefc68ebd78bddfd5bf95b40f691b0d81fdb5126e9ed55e32db62af1dca33a3449aba59f12bd03c0f4a64e1fefb18ed08f6a9a1325248139659687a73d378f09002ebc4b2baab643ca44b4a7ee63dc4631f211181647daea7e36806eb0a79980ae519fbc77c9988db03cebecc1ce2db3acbdc928e2de2111fd171c89feac400249b28c14267f3e6f711206b0517aea57817e13d0f6553e6e9b73d99a3f85e5a9cc8bd7e3605dbf5b4f4e665bc7541fe888c7d86cac5811d560e044ebe3bb4768eb9307369da53a32201a7467c066b83b86c333876e821801f98b466dcd2dd6077468029722b01988324e101b8dc37d5d45be0cfa5655e232bebbdae8bd70e92a66140ddfa4bd182beecf5038d4f0bc31b37fa26ed21820c78450770d380c2f42386a5c27a93b2f85f37756d9b32df934ec4d1598e5b3ff6fc53d5cdaf6acdaa53566a122349bd1c21a73b634dfaf23130db368a236376144efbdfbcbea34e78000a261b3817a10eb7c0413534dafdc55cb12f65bbcb73a4467bbc2c2319ab070ffaaa8e4eb24ef9cfa2cdeab19e16e0b1a502104492ca060ce50381e7ebeae0341ab532bc8a4e9a4bdf31e25fbf7674353f347c274fcc40083486fd48c08602c12c9c6806c7517c5b8aa178f65286f5007ea8d94170a7b070e66bae28e5e143b477a2629efa8e33883c03e0e58a6f21e253d87683d4852abd31f1199496337eef9c8bb81c5e3313a0a4c96cd4e4a3997144340f0bd5d3fe3ecdcd0feeee6bcb3ba0cbd160298936e6c26e3be0b86644e2704b0ead40f64e486a95856736f04d5493944eba60794ebc538fe149367eec24d8855061ca11078832d771d0efdfa221f66af302e1424bd3e4afef26dab0cf76b51d95b90d75d4ea196f5eff677e4260170b21918b0882eeab5dba283b07b4feb99bdce197c6e453371c41be2a8fa6e29d6ab5cbeff6", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x10, 0x0, 0x4000000000200}, 0x0, 0x0, 0x0, 0x0})
getdents(r2, &(0x7f0000000340)=""/151, 0x97)
getdents64(r2, 0x0, 0x48)
syz_fuse_handle_req(r0, &(0x7f0000010ec0)="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", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x10, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0})

4m4.370275649s ago: executing program 2 (id=6572):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
connect$inet6(r4, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc58e}, 0x1c)
writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
syz_open_dev$sg(0x0, 0x0, 0x40100)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x4)
preadv(r6, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=""/13, 0x2}, 0x20)
r8 = socket$netlink(0x10, 0x3, 0x0)
writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
sendto$inet(r3, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440606769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb", 0xffe3, 0x6000000000000000, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

3m53.141343794s ago: executing program 2 (id=6576):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x4]}, 0x8, 0x80000)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x5, &(0x7f00000000c0)=[{0x0, 0xb, 0x1, 0x9}, {0x9, 0xf8, 0x7, 0x2}, {0xe, 0x9, 0xff, 0x7}, {0x9, 0xc, 0xa, 0xb3}, {0x2, 0x80, 0x5, 0x5}]}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0)
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x88042, 0x0)
write$P9_RSTATu(r2, &(0x7f0000000880)={0x2c2, 0x7d, 0x0, {{0x500, 0xfa, 0x0, 0x6a, {0x40}, 0x10000000, 0x2000000, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00'/31, 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xfb\xe1a\xe9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x5e, '\xf8\xf6~\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x9d,;\x9e\x1dR\xc3\xd6\xda\x9b\xf1\x99V\x88\xda\xcel\xde{\xa4\xa4\x00\xb4\xb0\xb4\xdb\xe6Od\xb1\xd6?&ym\xcb\xecI\x86#\xd6\xa88\xc6\x9ai\xdf\xcc\x9c\xddY\x06\xf1t\xa6f\xa8R\x9aEw4\a\xdb\xda\xb2\x88[\xaf\x05\x00\x00\x00\x00\x00'}, 0x1b3, 'odev-n\xb1{#\x00\xf9\xda\xa1\xee#&n\xcf\x85\xfe\xa6^\xb2\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\xbd\x7f=\x7f)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x01\x00\x00\x00\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\xcf>\xe3\x88@\x02\xa9\x1cTR\x8b\x80z\x89\xca\x18M\x16d_\x06\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f)\x9f\x06\x1fu\xb7y|\xe1\xe4\x11\xea\x91\x8e\xbd\x88\x8c\x1e\x15k\x84V\x93\x1d.\xa7&\xba\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9G\x8f}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00\x00\x00\x00\x00\x00\x00ta\xb0\xcc\xaa\xa1\x93:\x0e\x8a\x82k\x14\xd4\xfc\xb2\x98\x9f\xfa\xaa\x1a\xcf\xfa\x80T\xe9U\x9d\xfa\xe4iz\xa0\v\x03\xb3\xd8\x0eU$\xf8I_\xee~\x8d\x88\xcbZ\x04\x03\x02\xac\xb0\xd1&\x0f%\x84\xdbH\xe8\xd9\x06N\x8c\xe1x\xce9n\x85\xb9~H\x86D@I\x81\x0f%\xf1\xce\xca\x97]\xebI\x1a\x12[\xf0\xd7/\x87\xcc\x10\xb0\x15N\b\x93m\xaa\xdd\x8b\x1e\x97'}}, 0x2c2)
move_pages(0x0, 0x2000025a, &(0x7f00000003c0)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000540)=[0x1, 0x1], &(0x7f0000001680), 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='M'], 0x8)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f022})
listns(0x0, 0xfffffffffffffffe, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000540)={0x1, @vbi={0x0, 0x6, 0x64a, 0x3032344d, [0x2, 0x6], [0xfffffffd, 0x5], 0x2}})
dup3(r1, r6, 0x0)
preadv(r3, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/139, 0x8b}, {0x0}], 0x2, 0x9, 0x0)
timer_create(0x0, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r8, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x14}]}]}]}, 0x38}}, 0x0)
r9 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x27, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x639cdb56b2dcc733, 0x0, {0x9, 0x21, 0x5, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x85, 0x2}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r9, 0x0, 0x0)

3m50.03895722s ago: executing program 2 (id=6587):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x10, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x10000, 0x0, 0x20000005, 0x3, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x30008014}, 0x4004810)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31ac", 0x25}], 0x1}, 0x0)

3m35.021315167s ago: executing program 33 (id=6587):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x10, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x10000, 0x0, 0x20000005, 0x3, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x30008014}, 0x4004810)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31ac", 0x25}], 0x1}, 0x0)

2m23.519504754s ago: executing program 3 (id=6798):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12)

2m23.106909247s ago: executing program 3 (id=6799):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x4000)
getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000002000000108001b00000000001c001a80180002801400018008000f000100000008001c"], 0x44}}, 0x0)
socket(0xa, 0x2, 0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004098)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=@newlink={0x4c, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0xa20, 0x1114}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x100, 0x80bc}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000680)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x2404000a)

2m22.387936385s ago: executing program 3 (id=6801):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000140)=0x6, 0x4)
sendmsg$nl_route(r0, 0x0, 0x0)

2m22.08525123s ago: executing program 3 (id=6802):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @local, 0xb}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60fa050000081100fe8000000000000000000100000000aafe8000000000000000000000000000aa4e200e22"], 0x0)

2m21.903375752s ago: executing program 3 (id=6803):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0)
write(r0, &(0x7f0000000900)='* \x00', 0x3)

2m21.678050538s ago: executing program 3 (id=6805):
socket$nl_route(0x10, 0x3, 0x0)
r0 = epoll_create1(0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20)

2m6.177929234s ago: executing program 34 (id=6805):
socket$nl_route(0x10, 0x3, 0x0)
r0 = epoll_create1(0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20)

15.168008086s ago: executing program 1 (id=7325):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$USERFAULTFD_IOC_NEW(r2, 0xaa00)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000240))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x3})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x9, 0x8001], 0xfec00000, 0x3c4210})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r5, 0x9)
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1)
open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0)
syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x40a}}]})
r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2000000000000, 0xc81c0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r7, 0xc0045540, &(0x7f0000000080)=0x2)
syz_usb_control_io(r6, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x1a140, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}}}, &(0x7f0000000200)=0x84)
syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r6, 0x81, 0x1e, &(0x7f0000000040)='a')

13.739045988s ago: executing program 4 (id=7338):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = getpid()
syz_pidfd_open(r0, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x68)
r1 = syz_pidfd_open(0x0, 0x0)
setns(r1, 0x24020000)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x210011, 0x0)
pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00')

13.553986513s ago: executing program 4 (id=7340):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x2, 0x7fff, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'})
sendto$packet(r5, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0x12, 0x4, 0x0, 0x0)

13.544215229s ago: executing program 6 (id=7342):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000)
getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000002000000108001b00000000001c001a80180002801400018008000f000100000008"], 0x44}}, 0x0)
socket(0xa, 0x2, 0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004098)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=@newlink={0x4c, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0xa20, 0x1114}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x100, 0x80bc}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000680)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x2404000a)

13.432799235s ago: executing program 1 (id=7343):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x15, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0)
mount(&(0x7f0000000300)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f0000000000)='binder\x00', 0x840008, &(0x7f0000000400)='usrquota')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x92e5e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='rt1719 0x49', 0xb)
write(r1, &(0x7f0000000400), 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040)
r2 = socket$netlink(0x10, 0x3, 0xc)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8}, 0x94)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0x80681, 0x0)
pwrite64(r5, &(0x7f0000000080)="625430c10d", 0xff3c, 0x100000001)
ioctl$VT_ACTIVATE(r4, 0x5606, 0x4)
dup3(r3, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

13.329648016s ago: executing program 5 (id=7344):
socket$key(0xf, 0x3, 0x2)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'lo\x00'})
syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d33b16266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0)

13.323146894s ago: executing program 6 (id=7345):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3}}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='3\n', 0x2)

13.277092188s ago: executing program 1 (id=7346):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='1', 0x1)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

12.878388452s ago: executing program 6 (id=7347):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000200)}, 0x41)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="3a653dd76fb3", 0x6, 0xfffffffffffffffc)
add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_open_dev$sndctrl(0x0, 0xfffffffffffbfffe, 0x2)
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000140))
ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f0000000180)={0x10, 0x0, "0b674abe8c0a14d75ac39bce3877f0fe"})
r4 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x2, @remote, 0x3}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e22, 0x6, @mcast1, 0x2}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e24, 0xf72, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e24, 0x8001, @loopback, 0x27ca}], 0xb0)
syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="0404040000000000000057c801"], 0xd)
syz_emit_ethernet(0x2c7, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x25, 0x4, @val=@tracing={0x0, 0xfffffffffffffffc}}, 0x20)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x801, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
nanosleep(&(0x7f00000001c0)={0x77359400}, &(0x7f0000000280))
syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58)
write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1, 0x10}, 0x8)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x24}}, 0x0)
mq_timedreceive(r2, &(0x7f0000000200)=""/65, 0x41, 0x200, &(0x7f0000000380)={0x0, 0x3938700})
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

2.716260132s ago: executing program 4 (id=7348):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
getpid()
setns(0xffffffffffffffff, 0x24020000)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x68)
r0 = syz_pidfd_open(0x0, 0x0)
setns(r0, 0x24020000)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x210011, 0x0)
pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00')

2.715802489s ago: executing program 6 (id=7349):
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1301"], 0x16)
syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e0c06"], 0xf)

2.709051208s ago: executing program 1 (id=7350):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f00000005c0)={'fscrypt:', @desc3}, &(0x7f0000000600)={0x0, "af90151a5dd598c6a6f07a701cc150dd4f2639568ea6baa1edc5b8c720c51d5c438f08f1377c60f83d32830646581c116f58f00751fea1d8862e29ad015b0985", 0x28}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(0x0, &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0)

2.661432561s ago: executing program 5 (id=7351):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$USERFAULTFD_IOC_NEW(r2, 0xaa00)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000240))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x3})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x9, 0x8001], 0xfec00000, 0x3c4210})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r5, 0x9)
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1)
open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0)
syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x40a}}]})
r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2000000000000, 0xc81c0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r7, 0xc0045540, &(0x7f0000000080)=0x2)
syz_usb_control_io(r6, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x1a140, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}}}, &(0x7f0000000200)=0x84)
syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r6, 0x81, 0x1e, &(0x7f0000000040)='a')

2.55912931s ago: executing program 4 (id=7352):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0)
r1 = openat(r0, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0)
r2 = openat(r1, &(0x7f00000001c0)='idVendor\x00', 0x2, 0x0)
preadv(r2, 0x0, 0x0, 0xe, 0x81)

2.558907553s ago: executing program 6 (id=7353):
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="00940ac9", 0x4)
sendto$unix(0xffffffffffffffff, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x9)

2.558278827s ago: executing program 1 (id=7354):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000)
getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000002000000108001b00000000001c001a80180002801400018008000f000100000008"], 0x44}}, 0x0)
socket(0xa, 0x2, 0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004098)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=@newlink={0x4c, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0xa20, 0x1114}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x100, 0x80bc}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000680)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x2404000a)

2.456935084s ago: executing program 4 (id=7355):
mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./my_dbroot\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)='./my_dbroot', 0xb)
close(r0)
mkdir(&(0x7f0000000500)='./my_dbroot/alua\x00', 0x1ff)
mkdir(&(0x7f0000000600)='./my_dbroot/alua/usb_gadget\x00', 0x1ff)
mkdir(&(0x7f0000000700)='./my_dbroot/alua/usb_gadget/naa.1234567890abcdef+1\x00', 0x1ff)
mkdir(&(0x7f0000000800)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff)
mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff)
mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff)
mkdir(&(0x7f0000000d00)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff)
mkdir(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0)
write(r1, &(0x7f0000001000)='rd_pages=', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000001200)='1', 0x1)
close(r2)
mkdir(&(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff)
symlink(&(0x7f0000001400)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00')
mkdir(0x0, 0x1ff)
write(0xffffffffffffffff, &(0x7f0000001700)='1', 0x1)

2.373288212s ago: executing program 6 (id=7356):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x2, 0x7fff, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'})
sendto$packet(r5, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0x12, 0x4, 0x0, 0x0)

2.188600898s ago: executing program 4 (id=7357):
r0 = io_uring_setup(0x383a, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x3, 0x3d6})
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2.149658678s ago: executing program 1 (id=7358):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000200)}, 0x41)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="3a653dd76fb3", 0x6, 0xfffffffffffffffc)
add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_open_dev$sndctrl(0x0, 0xfffffffffffbfffe, 0x2)
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000140))
ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f0000000180)={0x10, 0x0, "0b674abe8c0a14d75ac39bce3877f0fe"})
r4 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x2, @remote, 0x3}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e22, 0x6, @mcast1, 0x2}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e24, 0xf72, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e24, 0x8001, @loopback, 0x27ca}], 0xb0)
syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="0404040000000000000057c801"], 0xd)
syz_emit_ethernet(0x2c7, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x25, 0x4, @val=@tracing={0x0, 0xfffffffffffffffc}}, 0x20)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x801, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
nanosleep(&(0x7f00000001c0)={0x77359400}, &(0x7f0000000280))
syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58)
write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1, 0x10}, 0x8)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x24}}, 0x0)
mq_timedreceive(r2, &(0x7f0000000200)=""/65, 0x41, 0x200, &(0x7f0000000380)={0x0, 0x3938700})
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

1.269631075s ago: executing program 5 (id=7359):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e)
r1 = gettid()
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="1e", 0x1}], 0x1)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)

281.302608ms ago: executing program 5 (id=7360):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
getpid()
setns(0xffffffffffffffff, 0x24020000)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x68)
r0 = syz_pidfd_open(0x0, 0x0)
setns(r0, 0x24020000)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x210011, 0x0)
pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00')

163.445752ms ago: executing program 5 (id=7361):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='1', 0x1)

0s ago: executing program 5 (id=7362):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='streaming/uncompressed/u\x00', 0x1ff)
symlink(&(0x7f0000001400)='streaming/uncompressed/u\x00', &(0x7f0000001500)='streaming/header/h/u\x00')
symlink(&(0x7f0000001600)='streaming/header/h\x00', &(0x7f0000001700)='streaming/class/fs/h\x00')
symlink(0x0, 0x0)

kernel console output (not intermixed with test programs):

7 ioctl c0306201 0 returned -14
[  735.284169][T24447] binder: 24446:24447 ioctl c0905664 80000180 returned -22
[  735.407444][T24449] netlink: 'syz.3.6386': attribute type 4 has an invalid length.
[  735.462905][T12032] usb 9-1: USB disconnect, device number 58
[  735.596837][    T9] usb 6-1: new full-speed USB device number 108 using dummy_hcd
[  735.748536][    T9] usb 6-1: config index 0 descriptor too short (expected 6427, got 27)
[  735.751273][    T9] usb 6-1: config 0 has an invalid interface number: 21 but max is 0
[  735.753865][    T9] usb 6-1: config 0 has no interface number 0
[  735.756432][    T9] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  735.760094][    T9] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  735.764020][    T9] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  735.767686][    T9] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  735.770561][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  735.774472][    T9] usb 6-1: config 0 descriptor??
[  735.777395][T24453] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  736.147573][T24465] netlink: 'syz.4.6396': attribute type 1 has an invalid length.
[  736.165338][T24465] 8021q: adding VLAN 0 to HW filter on device bond9
[  736.182406][T24465] macvlan5: entered promiscuous mode
[  736.184446][T24465] macvlan5: entered allmulticast mode
[  736.215265][T24470] syzkaller0: entered promiscuous mode
[  736.217125][T24470] syzkaller0: entered allmulticast mode
[  736.388999][    T9] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.21/input/input26
[  736.592695][T24453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  736.595761][T24453] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  736.601675][T21511] usb 6-1: USB disconnect, device number 108
[  736.601784][    C0] keyspan_remote 6-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[  737.474206][    C2] vxcan1: j1939_tp_rxtimer: 0xffff88806122e400: rx timeout, send abort
[  737.944333][T24485] netlink: 'syz.1.6403': attribute type 4 has an invalid length.
[  737.980598][    C2] vxcan1: j1939_tp_rxtimer: 0xffff88806122e400: abort rx timeout. Force session deactivation
[  738.167573][T24496] netlink: 'syz.4.6407': attribute type 11 has an invalid length.
[  738.217182][T24498] netlink: 'syz.4.6408': attribute type 1 has an invalid length.
[  738.249278][T24498] 8021q: adding VLAN 0 to HW filter on device bond10
[  738.265908][T24498] macvlan6: entered promiscuous mode
[  738.268357][T24498] macvlan6: entered allmulticast mode
[  738.393932][T24505] binder: 24504:24505 ioctl 8030942b 80000240 returned -22
[  738.398901][T24505] binder: 24504:24505 ioctl ae41 0 returned -22
[  738.402194][T24505] binder: 24504:24505 ioctl c0905664 80000180 returned -22
[  738.688857][T24523] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  738.692207][T24523] TCP: tcp_parse_options: Illegal window scaling value 251 > 14 received
[  738.914490][T24533] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x1)
[  738.987186][   T10] usb 6-1: new high-speed USB device number 109 using dummy_hcd
[  739.137699][   T10] usb 6-1: Using ep0 maxpacket: 8
[  739.141179][   T10] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  739.146296][   T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  739.149927][   T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  739.153679][   T10] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  739.158340][   T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  739.161153][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  739.166174][   T10] usbtmc 6-1:16.0: bulk endpoints not found
[  739.394582][T24547] syzkaller0: entered promiscuous mode
[  739.396402][T24547] syzkaller0: entered allmulticast mode
[  739.485477][T24549] netlink: 'syz.4.6426': attribute type 4 has an invalid length.
[  739.593810][T24553] syzkaller0: entered promiscuous mode
[  739.595739][T24553] syzkaller0: entered allmulticast mode
[  739.748059][T24556] netlink: 'syz.3.6429': attribute type 1 has an invalid length.
[  739.766251][T24556] 8021q: adding VLAN 0 to HW filter on device bond11
[  739.780272][T24556] macvlan5: entered promiscuous mode
[  739.782206][T24556] macvlan5: entered allmulticast mode
[  740.268504][T24574] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  740.957000][T24586] binder: 24585:24586 ioctl 8030942b 80000240 returned -22
[  740.962176][T24586] binder: 24585:24586 ioctl ae41 0 returned -22
[  740.965546][T24586] binder: 24585:24586 ioctl c0905664 80000180 returned -22
[  740.988960][T24588] syzkaller0: entered promiscuous mode
[  740.990747][T24588] syzkaller0: entered allmulticast mode
[  741.306583][T24605] netlink: 'syz.4.6443': attribute type 4 has an invalid length.
[  741.785305][   T10] usb 6-1: USB disconnect, device number 109
[  741.810639][T24618] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6452'.
[  741.826700][T24617] syzkaller0: entered promiscuous mode
[  741.828480][T24617] syzkaller0: entered allmulticast mode
[  742.297000][   T10] usb 6-1: new high-speed USB device number 110 using dummy_hcd
[  742.458146][   T10] usb 6-1: Using ep0 maxpacket: 8
[  742.461913][   T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  742.465828][   T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  742.469940][   T10] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  742.474472][   T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  742.479975][   T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  742.485953][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  742.486943][T12032] usb 9-1: new high-speed USB device number 59 using dummy_hcd
[  742.498191][   T10] usbtmc 6-1:16.0: bulk endpoints not found
[  742.636891][T12032] usb 9-1: device descriptor read/64, error -71
[  742.876945][T12032] usb 9-1: new high-speed USB device number 60 using dummy_hcd
[  743.006975][T12032] usb 9-1: device descriptor read/64, error -71
[  743.117827][T12032] usb usb9-port1: attempt power cycle
[  743.146283][T24641] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6462'.
[  743.192974][T24643] syzkaller0: entered promiscuous mode
[  743.194809][T24643] syzkaller0: entered allmulticast mode
[  743.456849][T12032] usb 9-1: new high-speed USB device number 61 using dummy_hcd
[  743.477505][T12032] usb 9-1: device descriptor read/8, error -71
[  743.558460][T24651] netlink: 'syz.2.6466': attribute type 4 has an invalid length.
[  743.716820][T12032] usb 9-1: new high-speed USB device number 62 using dummy_hcd
[  743.737469][T12032] usb 9-1: device descriptor read/8, error -71
[  743.847450][T12032] usb usb9-port1: unable to enumerate USB device
[  744.529451][   T41] audit: type=1804 audit(1785272069.137:213): pid=24662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.6470" name="/newroot/325/file1" dev="fuse" ino=1 res=1 errno=0
[  744.536157][   T41] audit: type=1800 audit(1785272069.137:214): pid=24662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6470" name="/" dev="fuse" ino=1 res=0 errno=0
[  744.995931][T24667] netlink: 'syz.3.6472': attribute type 1 has an invalid length.
[  745.015004][T24667] 8021q: adding VLAN 0 to HW filter on device bond12
[  745.032037][T24667] macvlan6: entered promiscuous mode
[  745.033921][T24667] macvlan6: entered allmulticast mode
[  745.079902][  T847] usb 6-1: USB disconnect, device number 110
[  745.114222][T24672] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6474'.
[  745.299177][T24687] netlink: 'syz.4.6481': attribute type 1 has an invalid length.
[  745.334128][T24687] 8021q: adding VLAN 0 to HW filter on device bond11
[  745.347843][T24687] macvlan7: entered promiscuous mode
[  745.350063][T24687] macvlan7: entered allmulticast mode
[  745.437420][T24696] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6485'.
[  745.570667][   T41] audit: type=1804 audit(1785272070.177:215): pid=24699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.6486" name="/newroot/330/file1" dev="fuse" ino=1 res=1 errno=0
[  745.579216][   T41] audit: type=1800 audit(1785272070.177:216): pid=24699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6486" name="/" dev="fuse" ino=1 res=0 errno=0
[  745.656905][    T9] usb 9-1: new high-speed USB device number 63 using dummy_hcd
[  745.816869][    T9] usb 9-1: Using ep0 maxpacket: 8
[  745.820022][    T9] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  745.823150][    T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  745.826093][    T9] usb 9-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  745.829607][    T9] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  745.833901][    T9] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  745.836924][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  745.845097][    T9] usbtmc 9-1:16.0: bulk endpoints not found
[  746.710312][ T1443] ieee802154 phy0 wpan0: encryption failed: -22
[  746.712678][ T1443] ieee802154 phy1 wpan1: encryption failed: -22
[  747.601402][T24721] netlink: 'syz.1.6493': attribute type 1 has an invalid length.
[  747.619718][T24721] 8021q: adding VLAN 0 to HW filter on device bond3
[  747.638510][T24721] macvlan3: entered promiscuous mode
[  747.640842][T24721] macvlan3: entered allmulticast mode
[  748.410404][   T34] usb 9-1: USB disconnect, device number 63
[  748.836934][   T34] usb 6-1: new high-speed USB device number 111 using dummy_hcd
[  748.986984][   T34] usb 6-1: Using ep0 maxpacket: 16
[  748.993092][   T34] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  748.999167][   T34] usb 6-1: config 0 interface 0 has no altsetting 0
[  749.004606][   T34] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  749.012205][   T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  749.019855][   T34] usb 6-1: config 0 descriptor??
[  749.419297][T24777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6510'.
[  749.465287][   T34] nzxt-smart2 0003:1E71:2009.0016: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[  749.857222][T24751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  749.860244][T24751] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  749.866192][T12032] usb 6-1: USB disconnect, device number 111
[  750.514809][   T41] audit: type=1804 audit(1785272075.117:217): pid=24800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.6520" name="/newroot/501/file1" dev="fuse" ino=1 res=1 errno=0
[  750.521496][   T41] audit: type=1800 audit(1785272075.117:218): pid=24800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6520" name="/" dev="fuse" ino=1 res=0 errno=0
[  751.556928][T21511] usb 6-1: new high-speed USB device number 112 using dummy_hcd
[  751.716999][T21511] usb 6-1: Using ep0 maxpacket: 16
[  751.720291][T21511] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  751.723951][T21511] usb 6-1: config 0 interface 0 has no altsetting 0
[  751.726283][T21511] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  751.729380][T21511] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  751.733526][T21511] usb 6-1: config 0 descriptor??
[  752.159058][T21511] nzxt-smart2 0003:1E71:2009.0017: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[  752.556465][T24819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  752.568756][T24819] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  752.620073][T21511] usb 6-1: USB disconnect, device number 112
[  752.800068][T24835] binder: 24834:24835 ioctl 8030942b 80000240 returned -22
[  752.832116][T24835] binder: 24834:24835 ioctl ae41 0 returned -22
[  752.851331][T24835] binder: 24834:24835 ioctl c0905664 80000180 returned -22
[  753.672443][T24858] binder: 24857:24858 ioctl 8030942b 80000240 returned -22
[  753.690249][T24858] binder: 24857:24858 ioctl ae41 0 returned -22
[  753.694690][T24858] binder: 24857:24858 ioctl c0905664 80000180 returned -22
[  754.309100][ T5748] usb 6-1: new high-speed USB device number 113 using dummy_hcd
[  754.347830][T24878] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  754.516923][ T5748] usb 6-1: Using ep0 maxpacket: 16
[  754.522353][ T5748] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  754.545014][ T5748] usb 6-1: config 0 interface 0 has no altsetting 0
[  754.548975][ T5748] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  754.558294][ T5748] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  754.599584][ T5748] usb 6-1: config 0 descriptor??
[  754.777853][T24883] syzkaller0: entered promiscuous mode
[  754.787268][T24883] syzkaller0: entered allmulticast mode
[  755.152959][ T5748] nzxt-smart2 0003:1E71:2009.0018: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[  755.413527][T24895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  755.418217][T24895] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  755.647103][T12032] usb 9-1: new high-speed USB device number 64 using dummy_hcd
[  755.796924][T12032] usb 9-1: Using ep0 maxpacket: 32
[  755.801587][T12032] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  755.807533][T12032] usb 9-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  755.822823][T12032] usb 9-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice= 0.40
[  755.831952][T12032] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  755.843203][T12032] usb 9-1: Product: syz
[  755.847120][T12032] usb 9-1: Manufacturer: syz
[  755.851174][T12032] usb 9-1: SerialNumber: syz
[  756.504422][T24905] input: syz1 as /devices/virtual/input/input29
[  756.757365][T24908] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  757.160441][ T6615] usb 6-1: USB disconnect, device number 113
[  757.740382][ T6615] usb 6-1: new high-speed USB device number 114 using dummy_hcd
[  757.926897][ T6615] usb 6-1: Using ep0 maxpacket: 8
[  757.932378][ T6615] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  757.939732][ T6615] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  757.946686][ T6615] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  757.966854][ T6615] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  757.981064][ T6615] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  757.997705][ T6615] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  758.025736][ T6615] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  758.070351][ T6615] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22
[  758.342779][T24928] netlink: 'syz.2.6572': attribute type 4 has an invalid length.
[  758.382968][T12032] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  758.416443][T12032] usb 9-1: unit 5 not found!
[  758.510951][T12032] usb 9-1: USB disconnect, device number 64
[  758.550624][T24933] syzkaller0: entered promiscuous mode
[  758.595549][T24933] syzkaller0: entered allmulticast mode
[  758.639589][T20875] udevd[20875]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  760.448072][ T6615] usb 6-1: USB disconnect, device number 114
[  769.345881][T24968] syzkaller0: entered promiscuous mode
[  769.358245][T24968] syzkaller0: entered allmulticast mode
[  769.566448][   T41] audit: type=1804 audit(1785272094.167:219): pid=24973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.6583" name="/newroot/516/file1" dev="fuse" ino=1 res=1 errno=0
[  769.591341][   T41] audit: type=1800 audit(1785272094.167:220): pid=24973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6583" name="/" dev="fuse" ino=1 res=0 errno=0
[  770.045258][T24980] netlink: 'syz.3.6584': attribute type 4 has an invalid length.
[  770.692309][ T5103] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  770.744512][ T5103] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  770.755242][ T5103] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  770.767255][ T5103] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  770.774488][ T5103] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  770.843013][   T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  770.878168][   T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  770.884334][   T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  770.922250][   T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  770.928380][   T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  771.714179][ T5555] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  771.826000][T24995] syzkaller0: entered promiscuous mode
[  771.832218][T24995] syzkaller0: entered allmulticast mode
[  771.955924][ T5555] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  772.970165][ T5103] Bluetooth: hci2: command tx timeout
[  775.027388][ T5103] Bluetooth: hci2: command tx timeout
[  777.117708][ T5103] Bluetooth: hci2: command tx timeout
[  779.214119][ T5103] Bluetooth: hci2: command tx timeout
[  782.249332][T25006] syzkaller0: entered promiscuous mode
[  782.260165][T25006] syzkaller0: entered allmulticast mode
[  782.408555][ T5555] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  783.250157][   T41] audit: type=1804 audit(1785272107.857:221): pid=25035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.6595" name="/newroot/428/file1" dev="fuse" ino=1 res=1 errno=0
[  783.292321][   T41] audit: type=1800 audit(1785272107.857:222): pid=25035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6595" name="/" dev="fuse" ino=1 res=0 errno=0
[  783.346887][T12032] usb 6-1: new high-speed USB device number 115 using dummy_hcd
[  783.545242][T12032] usb 6-1: Using ep0 maxpacket: 8
[  783.576372][T12032] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  783.583203][T12032] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  783.590369][T12032] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  783.596556][T12032] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  783.606709][T12032] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  783.611645][T12032] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  783.841746][T12032] usb 6-1: usb_control_msg returned -32
[  783.845312][T12032] usbtmc 6-1:16.0: can't read capabilities
[  783.956009][T12032] usb 6-1: USB disconnect, device number 115
[  787.485286][   T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  787.513438][   T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  787.590790][   T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  787.593558][   T41] audit: type=1804 audit(1785272112.167:223): pid=25067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6608" name="/newroot/532/file0" dev="fuse" ino=1 res=1 errno=0
[  787.654510][   T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  787.660142][   T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  789.827165][   T64] Bluetooth: hci1: command tx timeout
[  789.995246][   T41] audit: type=1804 audit(1785272114.597:224): pid=25085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.6611" name="/newroot/430/file1" dev="fuse" ino=1 res=1 errno=0
[  790.009821][   T41] audit: type=1800 audit(1785272114.607:225): pid=25085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6611" name="/" dev="fuse" ino=1 res=0 errno=0
[  791.917147][   T64] Bluetooth: hci1: command tx timeout
[  793.997495][   T64] Bluetooth: hci1: command tx timeout
[  794.851218][ T5555] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  795.620911][ T5555] bridge_slave_1: left allmulticast mode
[  795.624233][ T5555] bridge_slave_1: left promiscuous mode
[  795.628537][ T5555] bridge0: port 2(bridge_slave_1) entered disabled state
[  795.639712][ T5555] bridge_slave_0: left allmulticast mode
[  795.643187][ T5555] bridge_slave_0: left promiscuous mode
[  795.649794][ T5555] bridge0: port 1(bridge_slave_0) entered disabled state
[  795.894619][ T5555] bond3 (unregistering): (slave ip6gretap1): Releasing active interface
[  796.087309][   T64] Bluetooth: hci1: command tx timeout
[  796.103688][ T5555] bond1 (unregistering): (slave geneve2): Releasing active interface
[  796.183546][ T5555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  796.215416][ T5555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  796.236477][ T5555] bond0 (unregistering): Released all slaves
[  796.246068][ T5555] bond1 (unregistering): Released all slaves
[  796.273791][ T5555] bond2 (unregistering): Released all slaves
[  796.315344][ T5555] bond3 (unregistering): Released all slaves
[  796.364843][ T5555] bond4 (unregistering): Released all slaves
[  796.447170][ T5555] bond5 (unregistering): Released all slaves
[  796.508164][ T5555] bond6 (unregistering): Released all slaves
[  796.534780][ T5555] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface
[  796.554707][ T5555] bond7 (unregistering): Released all slaves
[  796.590092][ T5555] bond8 (unregistering): Released all slaves
[  796.663020][ T5555] bond9 (unregistering): Released all slaves
[  796.776688][ T5555] bond10 (unregistering): Released all slaves
[  796.870938][ T5555] bond11 (unregistering): Released all slaves
[  797.626082][ T5555] tipc: Disabling bearer <udp:syz2>
[  797.666201][ T5555] tipc: Left network mode
[  797.804022][ T5456] 8021q: adding VLAN 0 to HW filter on device eth6
[  797.996573][T24983] bridge0: port 1(bridge_slave_0) entered blocking state
[  798.000542][T24983] bridge0: port 1(bridge_slave_0) entered disabled state
[  798.005628][T24983] bridge_slave_0: entered allmulticast mode
[  798.010745][T24983] bridge_slave_0: entered promiscuous mode
[  798.054948][T24983] bridge0: port 2(bridge_slave_1) entered blocking state
[  798.058408][T24983] bridge0: port 2(bridge_slave_1) entered disabled state
[  798.062252][T24983] bridge_slave_1: entered allmulticast mode
[  798.117521][T24983] bridge_slave_1: entered promiscuous mode
[  798.625617][T24983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  798.662223][T24983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  798.788053][T25068] bridge0: port 1(bridge_slave_0) entered blocking state
[  798.791368][T25068] bridge0: port 1(bridge_slave_0) entered disabled state
[  798.809020][T25068] bridge_slave_0: entered allmulticast mode
[  798.812856][T25068] bridge_slave_0: entered promiscuous mode
[  798.825506][ T5456] 8021q: adding VLAN 0 to HW filter on device eth7
[  798.897998][T24983] team0: Port device team_slave_0 added
[  798.905091][T24983] team0: Port device team_slave_1 added
[  798.934594][T25068] bridge0: port 2(bridge_slave_1) entered blocking state
[  798.937296][T25068] bridge0: port 2(bridge_slave_1) entered disabled state
[  798.939918][T25068] bridge_slave_1: entered allmulticast mode
[  798.943807][T25068] bridge_slave_1: entered promiscuous mode
[  798.983831][T25166] syzkaller0: entered promiscuous mode
[  798.986128][T25166] syzkaller0: entered allmulticast mode
[  799.210064][T25068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  799.446152][T24983] batman_adv: batadv0: Adding interface: batadv_slave_0
[  799.457888][T24983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  799.494775][T24983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  799.502137][T24983] batman_adv: batadv0: Adding interface: batadv_slave_1
[  799.523585][T24983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  799.554275][T24983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  799.567644][T25068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  799.798656][ T5456] 8021q: adding VLAN 0 to HW filter on device eth8
[  799.846106][ T5555] hsr_slave_0: left promiscuous mode
[  799.860766][ T5555] hsr_slave_1: left promiscuous mode
[  799.891520][ T5555] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  799.914209][ T5555] batman_adv: batadv0: Removing interface: batadv_slave_0
[  799.933558][ T5555] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  799.936914][ T5555] batman_adv: batadv0: Removing interface: batadv_slave_1
[  799.990892][ T5555] veth1_macvtap: left promiscuous mode
[  799.993851][ T5555] veth0_macvtap: left promiscuous mode
[  799.996394][ T5555] veth1_vlan: left promiscuous mode
[  799.998775][ T5555] veth0_vlan: left promiscuous mode
[  800.381125][ T5748] usb 6-1: new high-speed USB device number 116 using dummy_hcd
[  800.559263][ T5748] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  800.564933][ T5748] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  800.584603][ T5748] usb 6-1: config 1 interface 0 has no altsetting 0
[  800.590385][ T5748] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  800.596079][ T5748] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  800.608948][ T5748] usb 6-1: Product: syz
[  800.611033][ T5748] usb 6-1: Manufacturer: syz
[  800.624089][ T5748] usb 6-1: SerialNumber: syz
[  800.633883][T25195] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  800.642669][T25195] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  800.659261][ T5555] team_slave_1 (unregistering): left promiscuous mode
[  800.663846][ T5555] team0 (unregistering): Port device team_slave_1 removed
[  800.680952][ T5555] team_slave_0 (unregistering): left promiscuous mode
[  800.690963][ T5555] team0 (unregistering): Port device team_slave_0 removed
[  801.034576][T25181] syzkaller0: entered promiscuous mode
[  801.038542][T25181] syzkaller0: entered allmulticast mode
[  801.147491][T25068] team0: Port device team_slave_0 added
[  801.160195][T25068] team0: Port device team_slave_1 added
[  801.179872][T24983] hsr_slave_0: entered promiscuous mode
[  801.183611][T24983] hsr_slave_1: entered promiscuous mode
[  801.412305][T25068] batman_adv: batadv0: Adding interface: batadv_slave_0
[  801.426286][T25068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  801.442078][T25068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  801.472496][T25068] batman_adv: batadv0: Adding interface: batadv_slave_1
[  801.496321][T25068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  801.529774][T25068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  801.628696][ T5748] rtl8150 6-1:1.0: couldn't reset the device
[  801.634534][ T5748] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5
[  801.657076][ T5748] usb 6-1: USB disconnect, device number 116
[  801.792756][T25202] vlan2: entered promiscuous mode
[  801.802356][T25204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6626'.
[  801.805494][T25202] hsr0: entered promiscuous mode
[  801.821502][T25202] vlan2: entered allmulticast mode
[  801.837180][T25202] hsr0: entered allmulticast mode
[  801.839783][T25202] hsr_slave_0: entered allmulticast mode
[  801.842411][T25202] hsr_slave_1: entered allmulticast mode
[  801.891302][T25068] hsr_slave_0: entered promiscuous mode
[  801.894900][T25068] hsr_slave_1: entered promiscuous mode
[  801.900664][T25068] debugfs: 'hsr0' already exists in 'hsr'
[  801.918519][T25068] Cannot create hsr debugfs directory
[  801.952951][T25204] hsr_slave_0: left promiscuous mode
[  801.965000][T25204] hsr_slave_1: left promiscuous mode
[  802.160551][ T5456] 8021q: adding VLAN 0 to HW filter on device eth9
[  802.436148][T25208] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x1)
[  803.511380][ T5555] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  803.850899][T25218] syzkaller0: entered promiscuous mode
[  803.876958][T25218] syzkaller0: entered allmulticast mode
[  807.407703][T25240] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  808.154328][ T1443] ieee802154 phy0 wpan0: encryption failed: -22
[  808.165342][ T1443] ieee802154 phy1 wpan1: encryption failed: -22
[  813.919499][ T5555] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  814.379480][ T5555] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  814.714994][ T5555] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  815.437446][ T5555] bridge_slave_1: left allmulticast mode
[  815.440137][ T5555] bridge_slave_1: left promiscuous mode
[  815.444920][ T5555] bridge0: port 2(bridge_slave_1) entered disabled state
[  815.511694][ T5555] bridge_slave_0: left allmulticast mode
[  815.513871][ T5555] bridge_slave_0: left promiscuous mode
[  815.528673][ T5555] bridge0: port 1(bridge_slave_0) entered disabled state
[  816.871680][ T5555] bond1 (unregistering): (slave ip6gretap1): Releasing active interface
[  817.291593][ T5555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  817.325852][ T5555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  817.340016][ T5555] bond0 (unregistering): Released all slaves
[  817.349384][ T5555] bond1 (unregistering): Released all slaves
[  817.383692][ T5555] bond2 (unregistering): Released all slaves
[  818.054935][T24983] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  818.124909][T24983] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  818.129144][T24983] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  818.162642][T24983] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  818.218908][ T5555] tipc: Left network mode
[  818.228097][T24983] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  818.358074][T25291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6643'.
[  818.372979][T24983] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  818.408042][T24983] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  818.635534][T25291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6643'.
[  818.692618][T24983] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  819.316019][T25068] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  819.366467][T25068] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  819.438692][T25068] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  819.460455][T25068] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  819.537492][T24983] 8021q: adding VLAN 0 to HW filter on device bond0
[  819.580926][T25068] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  819.590656][T25068] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  819.604095][T25068] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  819.646312][T25068] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  819.768929][T24983] 8021q: adding VLAN 0 to HW filter on device team0
[  819.855827][   T74] bridge0: port 1(bridge_slave_0) entered blocking state
[  819.860013][   T74] bridge0: port 1(bridge_slave_0) entered forwarding state
[  819.867546][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[  819.876373][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[  820.087872][ T5555] hsr_slave_0: left promiscuous mode
[  820.098185][ T5555] hsr_slave_1: left promiscuous mode
[  820.102650][ T5555] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  820.131511][ T5555] batman_adv: batadv0: Removing interface: batadv_slave_0
[  820.141499][ T5555] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  820.147669][ T5555] batman_adv: batadv0: Removing interface: batadv_slave_1
[  820.159815][ T5555] veth1_macvtap: left promiscuous mode
[  820.166688][ T5555] veth0_macvtap: left promiscuous mode
[  820.189170][ T5555] veth1_vlan: left promiscuous mode
[  820.202049][ T5555] veth0_vlan: left promiscuous mode
[  820.702484][ T5555] team0 (unregistering): Port device team_slave_1 removed
[  820.719882][ T5555] team0 (unregistering): Port device team_slave_0 removed
[  820.975708][T24983] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  821.007308][ T5456] 8021q: adding VLAN 0 to HW filter on device eth6
[  821.043022][T25068] 8021q: adding VLAN 0 to HW filter on device bond0
[  821.244695][T25068] 8021q: adding VLAN 0 to HW filter on device team0
[  821.363342][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state
[  821.381745][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state
[  821.433530][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state
[  821.439043][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state
[  822.152564][ T5456] 8021q: adding VLAN 0 to HW filter on device eth7
[  822.291365][T24983] 8021q: adding VLAN 0 to HW filter on device batadv0
[  823.173638][T25068] 8021q: adding VLAN 0 to HW filter on device batadv0
[  823.196242][ T5456] 8021q: adding VLAN 0 to HW filter on device eth8
[  823.317139][T24983] veth0_vlan: entered promiscuous mode
[  823.356416][T24983] veth1_vlan: entered promiscuous mode
[  823.525850][T24983] veth0_macvtap: entered promiscuous mode
[  823.545655][T24983] veth1_macvtap: entered promiscuous mode
[  823.681789][T24983] batman_adv: batadv0: Interface activated: batadv_slave_0
[  823.739064][T24983] batman_adv: batadv0: Interface activated: batadv_slave_1
[  823.778470][T18258] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  823.790531][T18258] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  823.822396][T18258] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  823.866041][T18258] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  824.001076][T25383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6653'.
[  824.294981][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  824.300551][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  824.442965][ T6615] usb 6-1: new high-speed USB device number 117 using dummy_hcd
[  824.455821][T25068] veth0_vlan: entered promiscuous mode
[  824.475260][ T5456] 8021q: adding VLAN 0 to HW filter on device eth9
[  824.504067][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  824.519150][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  824.544012][T25068] veth1_vlan: entered promiscuous mode
[  824.589097][T25068] veth0_macvtap: entered promiscuous mode
[  824.621497][T25068] veth1_macvtap: entered promiscuous mode
[  824.663559][ T6615] usb 6-1: unable to get BOS descriptor or descriptor too short
[  824.714699][ T6615] usb 6-1: New USB device found, idVendor=1c9e, idProduct=9603, bcdDevice=f3.0a
[  824.718288][ T6615] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  824.749956][ T6615] usb 6-1: Product: syz
[  824.751867][ T6615] usb 6-1: Manufacturer: syz
[  824.767011][ T6615] usb 6-1: SerialNumber: syz
[  824.785785][T25068] batman_adv: batadv0: Interface activated: batadv_slave_0
[  824.801561][T25068] batman_adv: batadv0: Interface activated: batadv_slave_1
[  824.819949][T18258] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  824.882766][T18258] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  824.895067][T18258] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  824.932202][T18258] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  825.065777][ T6615] option 6-1:4.0: GSM modem (1-port) converter detected
[  825.094350][ T6615] usb 6-1: USB disconnect, device number 117
[  825.111257][ T6615] option 6-1:4.0: device disconnected
[  825.239505][T25128] usb 9-1: new high-speed USB device number 65 using dummy_hcd
[  825.345509][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  825.351211][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  825.384140][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  825.388141][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  825.438409][T25128] usb 9-1: Using ep0 maxpacket: 8
[  825.459185][T25128] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  825.467360][T25128] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  825.474621][T25128] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  825.481604][T25128] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  825.916502][T25402] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  826.888435][T25427] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  826.898471][T25427] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  826.963903][T25427] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  826.969675][T25427] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  827.902067][ T9720] usb 9-1: USB disconnect, device number 65
[  828.048793][T25440] fuse: Bad value for 'rootmode'
[  828.234276][T25444] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  829.214723][T25466] fuse: Bad value for 'rootmode'
[  829.300395][T25470] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6676'.
[  830.314975][T25490] fuse: Unknown parameter 'use00000000000000000000'
[  830.453441][T25492] tipc: Enabled bearer <udp:syz0>, priority 10
[  832.686944][ T6615] usb 6-1: new high-speed USB device number 118 using dummy_hcd
[  832.848845][ T6615] usb 6-1: Using ep0 maxpacket: 16
[  832.868801][ T6615] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  832.890253][ T6615] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  832.898858][ T6615] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  832.905410][ T6615] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  832.918119][ T6615] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  832.932355][ T6615] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  832.948474][ T6615] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  832.964516][ T6615] usb 6-1: Manufacturer: syz
[  833.000533][ T6615] usb 6-1: config 0 descriptor??
[  833.477942][ T6615] rc_core: IR keymap rc-hauppauge not found
[  833.483491][ T6615] Registered IR keymap rc-empty
[  833.492804][ T6615] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  833.510365][ T6615] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  833.529183][ T6615] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0
[  833.541101][ T6615] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input30
[  833.587826][ T6615] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  833.635312][ T6615] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  833.697038][ T6615] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  833.702007][T25524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  833.743723][T25524] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  833.820071][ T6615] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  833.846994][ T6615] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  833.893619][ T6615] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  833.937062][ T6615] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  833.977132][ T6615] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  834.011680][ T6615] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  834.050318][ T6615] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  834.093709][ T6615] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  834.093740][ T6615] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  834.098109][ T6615] usb 6-1: USB disconnect, device number 118
[  834.482799][T25276] usb 9-1: new high-speed USB device number 66 using dummy_hcd
[  834.705962][T25276] usb 9-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  834.710287][T25276] usb 9-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  834.714193][T25276] usb 9-1: config 1 interface 0 has no altsetting 0
[  834.720599][T25276] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  834.724528][T25276] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  834.728289][T25276] usb 9-1: Product: syz
[  834.730164][T25276] usb 9-1: Manufacturer: syz
[  834.731992][T25276] usb 9-1: SerialNumber: syz
[  834.776825][T25541] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  834.781158][T25541] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  835.080280][   T10] usb 6-1: new high-speed USB device number 119 using dummy_hcd
[  835.228269][   T10] usb 6-1: Using ep0 maxpacket: 8
[  835.245663][   T10] usb 6-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config
[  835.249647][   T10] usb 6-1: config 64 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0
[  835.253520][   T10] usb 6-1: config 64 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  835.261859][   T10] usb 6-1: config 64 interface 0 has no altsetting 0
[  835.281061][   T10] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  835.285169][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  835.289529][   T10] usb 6-1: Product: syz
[  835.291572][   T10] usb 6-1: Manufacturer: syz
[  835.293974][   T10] usb 6-1: SerialNumber: syz
[  835.328187][   T10] snd_usb_toneport 6-1:64.0: Line 6 TonePort UX2 found
[  835.380067][    C2] raw-gadget.0 gadget.4: ignoring, device is not running
[  835.522239][   T10] snd_usb_toneport 6-1:64.0: cannot get proper max packet size
[  835.548182][   T10] snd_usb_toneport 6-1:64.0: Line 6 TonePort UX2 now disconnected
[  835.561384][   T10] snd_usb_toneport 6-1:64.0: probe with driver snd_usb_toneport failed with error -22
[  835.700147][T25569] fuse: Unknown parameter 'user_i00000000000000000000'
[  835.706841][T25276] rtl8150 9-1:1.0: couldn't reset the device
[  835.712137][T25276] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5
[  835.740082][T25276] usb 9-1: USB disconnect, device number 66
[  835.753790][   T10] usb 6-1: USB disconnect, device number 119
[  836.236301][T25585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6709'.
[  836.246867][T25585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6709'.
[  836.510736][ T6615] usb 9-1: new high-speed USB device number 67 using dummy_hcd
[  836.588404][T25598] fuse: Unknown parameter 'user_i00000000000000000000'
[  836.716999][ T6615] usb 9-1: Using ep0 maxpacket: 8
[  836.732837][ T6615] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 7
[  836.745242][ T6615] usb 9-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  836.751316][ T6615] usb 9-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  836.773255][ T6615] usb 9-1: Product: syz
[  836.799398][ T6615] usb 9-1: Manufacturer: syz
[  836.801433][ T6615] usb 9-1: SerialNumber: syz
[  836.820252][T25606] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6715'.
[  837.142122][ T6615] usb 9-1: palm_os_3_probe - error -71 getting connection information
[  837.146930][ T6615] visor 9-1:1.0: probe with driver visor failed with error -71
[  837.172949][ T6615] usb 9-1: USB disconnect, device number 67
[  837.546389][T25628] syzkaller0: entered promiscuous mode
[  837.551594][T25628] syzkaller0: entered allmulticast mode
[  838.171364][T25636] fuse: Unknown parameter 'user_i00000000000000000000'
[  838.391577][T25640] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6726'.
[  838.529053][T25643] fuse: Bad value for 'fd'
[  838.793981][T25651] syzkaller0: entered promiscuous mode
[  838.798557][T25651] syzkaller0: entered allmulticast mode
[  851.221936][T25695] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  851.624326][T25697] bridge0: port 2(bridge_slave_1) entered disabled state
[  851.631756][T25697] bridge0: port 1(bridge_slave_0) entered disabled state
[  851.775511][T25707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6752'.
[  851.988341][T25697] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  851.999183][T25697] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  852.319412][T25697] macvlan2: left promiscuous mode
[  852.337327][T25697] macvlan2: left allmulticast mode
[  852.357426][T25697] macvlan3: left promiscuous mode
[  852.360358][T25697] macvlan3: left allmulticast mode
[  852.386208][ T5824] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  852.415860][ T5824] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  852.457044][ T5824] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  852.461355][ T5824] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  852.529651][   T10] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[  852.717996][   T10] usb 10-1: config index 0 descriptor too short (expected 6427, got 27)
[  852.746843][   T10] usb 10-1: config 0 has an invalid interface number: 21 but max is 0
[  852.805830][   T10] usb 10-1: config 0 has no interface number 0
[  852.810202][   T10] usb 10-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  852.819674][   T10] usb 10-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  852.822163][T25724] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x1)
[  852.841250][   T10] usb 10-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  852.841296][   T10] usb 10-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  852.841314][   T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  852.845060][   T10] usb 10-1: config 0 descriptor??
[  852.927628][T25716] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  853.433999][   T10] usb 10-1: USB disconnect, device number 2
[  853.652461][T25742] ucma_write: process 1237 (syz.3.6762) changed security contexts after opening file descriptor, this is not allowed.
[  853.836203][T25746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6766'.
[  854.744424][T25768] syz_tun: entered allmulticast mode
[  854.751059][T25767] syz_tun: left allmulticast mode
[  855.126988][  T847] usb 9-1: new high-speed USB device number 68 using dummy_hcd
[  855.176974][ T6615] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  855.321709][  T847] usb 9-1: Using ep0 maxpacket: 16
[  855.353911][  T847] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  855.368527][  T847] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  855.415362][  T847] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  855.422263][  T847] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  855.454982][ T6615] usb 10-1: config 0 has no interfaces?
[  855.461732][  T847] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  855.524182][ T6615] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  855.533150][ T6615] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  855.536473][  T847] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  855.596525][  T847] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  855.600825][  T847] usb 9-1: Manufacturer: syz
[  855.606211][  T847] usb 9-1: config 0 descriptor??
[  855.634144][ T6615] usb 10-1: Product: syz
[  855.637602][ T6615] usb 10-1: Manufacturer: syz
[  855.640951][ T6615] usb 10-1: SerialNumber: syz
[  855.677589][ T6615] usb 10-1: config 0 descriptor??
[  855.877043][  T847] rc_core: IR keymap rc-hauppauge not found
[  855.879630][  T847] Registered IR keymap rc-empty
[  855.882071][  T847] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  855.899509][  T847] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  855.918428][  T847] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0
[  855.926150][  T847] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input32
[  855.926255][ T6615] usb 10-1: USB disconnect, device number 3
[  855.994439][  T847] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  856.018841][  T847] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  856.037338][  T847] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  856.058203][  T847] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  856.077960][  T847] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  856.117549][  T847] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  856.137160][  T847] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  856.160111][  T847] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  856.176921][  T847] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  856.197284][  T847] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  856.220633][  T847] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  856.225396][  T847] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  856.305911][  T847] usb 9-1: USB disconnect, device number 68
[  857.302777][T12032] usb 9-1: new high-speed USB device number 69 using dummy_hcd
[  857.374556][T25798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6787'.
[  857.466006][T25802] fuse: Unknown parameter 'use00000000000000000000'
[  857.499087][T12032] usb 9-1: Using ep0 maxpacket: 8
[  857.507735][T12032] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  857.526524][T12032] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  857.541756][T12032] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  857.548002][T12032] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  857.553822][T12032] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  857.563099][T12032] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  857.569411][T12032] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  857.802551][T12032] usb 9-1: usb_control_msg returned -32
[  857.804702][T12032] usbtmc 9-1:16.0: can't read capabilities
[  857.979969][T25810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6791'.
[  858.783208][T25826] syzkaller0: entered promiscuous mode
[  858.792104][T25826] syzkaller0: entered allmulticast mode
[  860.165968][ T5853] usb 9-1: USB disconnect, device number 69
[  860.571266][T25851] fuse: Unknown parameter 'fd0x0000000000000003'
[  860.920108][T25855] fuse: Unknown parameter 'user_i00000000000000000000'
[  869.642722][ T1443] ieee802154 phy0 wpan0: encryption failed: -22
[  869.651755][ T1443] ieee802154 phy1 wpan1: encryption failed: -22
[  873.600628][T25881] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49
[  874.370001][T25894] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  874.418505][T25894] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  874.448380][T25894] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  874.473599][T25894] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  874.489081][T25894] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  874.601621][   T64] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  874.698540][   T64] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  874.874550][   T64] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  874.964521][   T64] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  874.977588][   T64] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  875.550855][T25897] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  875.556300][T25897] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  875.939082][T25897] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  876.580438][T25894] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  876.646275][T25894] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  876.689162][T25894] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  876.812005][T25894] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  876.889482][T25894] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  877.113987][T25927] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0)
[  877.598555][T25894] Bluetooth: hci4: command 0x041b tx timeout
[  878.553038][T25018] bridge_slave_1: left allmulticast mode
[  878.588180][T25018] bridge_slave_1: left promiscuous mode
[  878.592055][T25018] bridge0: port 2(bridge_slave_1) entered disabled state
[  878.624718][T25018] bridge_slave_0: left allmulticast mode
[  878.642977][T25018] bridge_slave_0: left promiscuous mode
[  878.645859][T25018] bridge0: port 1(bridge_slave_0) entered disabled state
[  879.337970][T25894] Bluetooth: hci3: command tx timeout
[  879.369624][ T5748] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  879.482732][T25018] bond1 (unregistering): (slave ip6gretap1): Releasing active interface
[  879.544013][ T5748] usb 10-1: Using ep0 maxpacket: 16
[  879.548847][ T5748] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  879.563112][ T5748] usb 10-1: config 0 interface 0 has no altsetting 0
[  879.567438][ T5748] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  879.587585][ T5748] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  879.603803][ T5748] usb 10-1: config 0 descriptor??
[  879.667670][T25894] Bluetooth: hci4: command 0x041b tx timeout
[  879.920706][T25018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  879.966029][T25018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  879.975497][T25018] bond0 (unregistering): Released all slaves
[  880.010294][T25018] bond1 (unregistering): Released all slaves
[  880.034757][T25018] bond2 (unregistering): Released all slaves
[  880.098487][ T5748] nzxt-smart2 0003:1E71:2009.0019: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0
[  880.142752][T25018] bond3 (unregistering): Released all slaves
[  880.313483][T25892] bridge0: port 1(bridge_slave_0) entered blocking state
[  880.324970][T25892] bridge0: port 1(bridge_slave_0) entered disabled state
[  880.367261][T25892] bridge_slave_0: entered allmulticast mode
[  880.382173][T25892] bridge_slave_0: entered promiscuous mode
[  880.395519][T25892] bridge0: port 2(bridge_slave_1) entered blocking state
[  880.409624][T25892] bridge0: port 2(bridge_slave_1) entered disabled state
[  880.417804][T25892] bridge_slave_1: entered allmulticast mode
[  880.429884][T25892] bridge_slave_1: entered promiscuous mode
[  880.529882][T25991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  880.531618][T25018] tipc: Left network mode
[  880.587268][T25991] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  880.707271][ T5748] usb 10-1: USB disconnect, device number 4
[  880.817829][T25999] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  880.824987][T25999] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  880.851582][T25999] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  881.076390][T25892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  881.094399][T25892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  881.458445][T25894] Bluetooth: hci3: command tx timeout
[  881.750103][T25894] Bluetooth: hci4: command 0x041b tx timeout
[  881.959438][T25892] team0: Port device team_slave_0 added
[  881.982602][T25892] team0: Port device team_slave_1 added
[  882.001249][ T5456] 8021q: adding VLAN 0 to HW filter on device eth10
[  882.104328][T25018] hsr_slave_0: left promiscuous mode
[  882.108501][T25018] hsr_slave_1: left promiscuous mode
[  882.111528][T25018] batman_adv: batadv0: Removing interface: batadv_slave_0
[  882.115338][T25018] batman_adv: batadv0: Removing interface: batadv_slave_1
[  882.438133][T25018] team0 (unregistering): Port device team_slave_1 removed
[  882.453260][T25018] team0 (unregistering): Port device team_slave_0 removed
[  882.781494][T25892] batman_adv: batadv0: Adding interface: batadv_slave_0
[  882.795372][T25892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  882.837376][T25892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  882.847768][T25892] batman_adv: batadv0: Adding interface: batadv_slave_1
[  882.872955][T25892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  882.927066][T25892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  883.149031][T25892] hsr_slave_0: entered promiscuous mode
[  883.160447][T25892] hsr_slave_1: entered promiscuous mode
[  883.163921][T25892] debugfs: 'hsr0' already exists in 'hsr'
[  883.167099][T25892] Cannot create hsr debugfs directory
[  883.349656][T25911] bridge0: port 1(bridge_slave_0) entered blocking state
[  883.353304][T25911] bridge0: port 1(bridge_slave_0) entered disabled state
[  883.397490][T25911] bridge_slave_0: entered allmulticast mode
[  883.401860][T25911] bridge_slave_0: entered promiscuous mode
[  883.530026][T25894] Bluetooth: hci3: command tx timeout
[  883.760505][T26038] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x1)
[  883.851414][T25894] Bluetooth: hci4: command 0x041b tx timeout
[  883.925996][T25911] bridge0: port 2(bridge_slave_1) entered blocking state
[  883.945605][T25911] bridge0: port 2(bridge_slave_1) entered disabled state
[  883.950384][T25911] bridge_slave_1: entered allmulticast mode
[  883.956348][T25911] bridge_slave_1: entered promiscuous mode
[  884.069207][ T5456] 8021q: adding VLAN 0 to HW filter on device eth11
[  884.268947][T25911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  884.299420][T25911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  884.483352][T25911] team0: Port device team_slave_0 added
[  884.522452][T25911] team0: Port device team_slave_1 added
[  884.868942][T25911] batman_adv: batadv0: Adding interface: batadv_slave_0
[  884.875289][T25911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  884.891569][T25911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  884.901555][T25911] batman_adv: batadv0: Adding interface: batadv_slave_1
[  884.906435][T25911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  884.945939][T25911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  884.999901][ T5456] 8021q: adding VLAN 0 to HW filter on device eth12
[  885.308661][T25911] hsr_slave_0: entered promiscuous mode
[  885.329105][T25911] hsr_slave_1: entered promiscuous mode
[  885.340344][T25911] debugfs: 'hsr0' already exists in 'hsr'
[  885.343127][T25911] Cannot create hsr debugfs directory
[  885.462126][T25018] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  885.631610][T25894] Bluetooth: hci3: command tx timeout
[  885.921509][T25894] Bluetooth: hci4: command 0x041b tx timeout
[  886.351536][T25018] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  887.171051][T25018] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  887.386044][T26099] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x1)
[  887.813573][T25018] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  887.934139][T26111] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  887.988005][T25894] Bluetooth: hci4: command 0x041b tx timeout
[  888.157586][T26111] netlink: 'syz.5.6874': attribute type 10 has an invalid length.
[  888.244284][T26111] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6874'.
[  888.383311][T26111] bridge0: port 3(dummy0) entered blocking state
[  888.396337][T26111] bridge0: port 3(dummy0) entered disabled state
[  888.403736][T26111] dummy0: entered allmulticast mode
[  888.415956][T26111] dummy0: entered promiscuous mode
[  888.422292][T26111] bridge0: port 3(dummy0) entered blocking state
[  888.426679][T26111] bridge0: port 3(dummy0) entered forwarding state
[  888.449080][T25892] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  888.458112][T25892] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  888.465742][T25892] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  888.501361][T25892] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  888.635263][T25892] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  888.704468][T25892] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  888.708290][T25892] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  888.721852][T25892] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  889.007462][T25018] bridge_slave_1: left allmulticast mode
[  889.009854][T25018] bridge_slave_1: left promiscuous mode
[  889.012120][T25018] bridge0: port 2(bridge_slave_1) entered disabled state
[  889.020190][T26125] random: crng reseeded on system resumption
[  889.034330][T25018] bridge_slave_0: left allmulticast mode
[  889.037270][T25018] bridge_slave_0: left promiscuous mode
[  889.040037][T25018] bridge0: port 1(bridge_slave_0) entered disabled state
[  890.109345][T25894] Bluetooth: hci4: command 0x041b tx timeout
[  890.219376][T25018] bond1 (unregistering): (slave geneve2): Releasing active interface
[  890.315673][T25018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  890.334285][T25018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  890.354809][T25018] bond0 (unregistering): Released all slaves
[  890.365780][T25018] bond1 (unregistering): Released all slaves
[  890.393815][T25018] bond2 (unregistering): Released all slaves
[  890.408703][T25018] bond3 (unregistering): Released all slaves
[  890.432302][T25018] bond4 (unregistering): Released all slaves
[  890.459871][T25018] bond5 (unregistering): Released all slaves
[  890.503115][T25018] bond6 (unregistering): Released all slaves
[  890.542335][T25018] bond7 (unregistering): Released all slaves
[  890.587683][T25018] bond8 (unregistering): Released all slaves
[  890.644024][T25018] bond9 (unregistering): Released all slaves
[  890.758375][T25018] bond10 (unregistering): Released all slaves
[  890.786551][T25018] bond11 (unregistering): Released all slaves
[  890.820241][T25018] bond12 (unregistering): Released all slaves
[  891.329615][T25018] tipc: Disabling bearer <udp:syz2>
[  891.340549][T25018] tipc: Disabling bearer <udp:syz0>
[  891.412229][T25018] tipc: Left network mode
[  891.486473][T25911] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  891.571989][T25911] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  891.576680][T25911] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  891.685663][T25911] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  891.702200][T25911] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  891.712184][T25911] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  891.885819][T25911] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  892.054810][T25911] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  892.162335][ T5456] 8021q: adding VLAN 0 to HW filter on device eth10
[  892.220250][T25892] 8021q: adding VLAN 0 to HW filter on device bond0
[  892.405694][T25892] 8021q: adding VLAN 0 to HW filter on device team0
[  892.427903][   T74] bridge0: port 1(bridge_slave_0) entered blocking state
[  892.431437][   T74] bridge0: port 1(bridge_slave_0) entered forwarding state
[  892.493994][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[  892.503160][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[  892.888857][T25018] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  892.896590][T25018] batman_adv: batadv0: Removing interface: batadv_slave_0
[  892.911407][T25018] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  892.916281][T25018] batman_adv: batadv0: Removing interface: batadv_slave_1
[  892.954810][T25018] veth1_macvtap: left promiscuous mode
[  892.959970][T25018] veth0_macvtap: left promiscuous mode
[  892.963592][T25018] veth1_vlan: left promiscuous mode
[  892.966154][T25018] veth0_vlan: left promiscuous mode
[  893.599903][T25018] team0 (unregistering): Port device team_slave_1 removed
[  893.614986][T25018] team0 (unregistering): Port device team_slave_0 removed
[  893.821750][ T5456] 8021q: adding VLAN 0 to HW filter on device eth11
[  893.901314][T25911] 8021q: adding VLAN 0 to HW filter on device bond0
[  894.003898][T25911] 8021q: adding VLAN 0 to HW filter on device team0
[  894.031653][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state
[  894.039814][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state
[  894.149977][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state
[  894.152999][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state
[  894.284756][T25128] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  894.491649][T25128] usb 10-1: config 0 has an invalid interface number: 64 but max is 0
[  894.497446][T25128] usb 10-1: config 0 has no interface number 0
[  894.500956][T25128] usb 10-1: config 0 interface 64 has no altsetting 0
[  894.529853][T25128] usb 10-1: string descriptor 0 read error: -22
[  894.532726][T25128] usb 10-1: New USB device found, idVendor=0bda, idProduct=0139, bcdDevice=9a.53
[  894.573755][T25128] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  894.600455][T25128] usb 10-1: config 0 descriptor??
[  894.961868][T25128] rtsx_usb 10-1:0.64: probe with driver rtsx_usb failed with error -22
[  895.072499][T25128] usb 10-1: USB disconnect, device number 5
[  895.413453][ T5456] 8021q: adding VLAN 0 to HW filter on device eth12
[  895.506284][T25892] 8021q: adding VLAN 0 to HW filter on device batadv0
[  895.820680][T25911] 8021q: adding VLAN 0 to HW filter on device batadv0
[  895.900726][T25892] veth0_vlan: entered promiscuous mode
[  895.920509][T25892] veth1_vlan: entered promiscuous mode
[  896.012634][T25018] IPVS: stop unused estimator thread 0...
[  896.213890][T25892] veth0_macvtap: entered promiscuous mode
[  896.260043][T25892] veth1_macvtap: entered promiscuous mode
[  896.277570][T25892] batman_adv: batadv0: Interface activated: batadv_slave_0
[  896.293271][ T5456] 8021q: adding VLAN 0 to HW filter on device eth13
[  896.362777][T25892] batman_adv: batadv0: Interface activated: batadv_slave_1
[  896.563047][T22520] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  896.566468][T22520] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  896.610819][T22520] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  896.615445][T22520] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  896.807527][T25911] veth0_vlan: entered promiscuous mode
[  896.984072][T25911] veth1_vlan: entered promiscuous mode
[  897.041834][T25911] veth0_macvtap: entered promiscuous mode
[  897.053406][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  897.056648][T25911] veth1_macvtap: entered promiscuous mode
[  897.086497][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  897.107222][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  897.111149][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  897.151565][T25911] batman_adv: batadv0: Interface activated: batadv_slave_0
[  897.174847][T25911] batman_adv: batadv0: Interface activated: batadv_slave_1
[  897.210885][ T5832] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  897.215522][ T5832] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  897.231697][ T5832] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  897.301231][T25018] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  897.370888][ T1164] FAULT_INJECTION: forcing a failure.
[  897.370888][ T1164] name failslab, interval 1, probability 1, space 0, times 10
[  897.382009][   T42] FAULT_INJECTION: forcing a failure.
[  897.382009][   T42] name failslab, interval 1, probability 1, space 0, times 9
[  897.384110][ T1164] CPU: 0 UID: 0 PID: 1164 Comm: kworker/u33:8 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  897.384138][ T1164] Tainted: [L]=SOFTLOCKUP
[  897.384144][ T1164] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  897.384157][ T1164] Workqueue: events_unbound nsim_dev_trap_report_work
[  897.384192][ T1164] Call Trace:
[  897.384199][ T1164]  <TASK>
[  897.384206][ T1164]  dump_stack_lvl+0x100/0x190
[  897.384235][ T1164]  should_fail_ex.cold+0x5/0xa
[  897.384258][ T1164]  should_failslab+0xc2/0x120
[  897.384370][ T1164]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  897.384394][ T1164]  ? __alloc_skb+0x140/0x710
[  897.384497][ T1164]  __alloc_skb+0x140/0x710
[  897.384519][ T1164]  ? __alloc_skb+0x5b7/0x710
[  897.384539][ T1164]  ? __pfx___alloc_skb+0x10/0x10
[  897.384636][ T1164]  ? kfree_skbmem+0x19f/0x210
[  897.384656][ T1164]  nsim_dev_trap_report_work+0x2af/0xd20
[  897.384853][ T1164]  process_one_work+0xa23/0x1940
[  897.384929][ T1164]  ? __pfx_process_one_work+0x10/0x10
[  897.385026][ T1164]  ? __pfx_nsim_dev_trap_report_work+0x10/0x10
[  897.385091][ T1164]  worker_thread+0x5ef/0xe50
[  897.385163][ T1164]  ? kthread+0x13a/0x450
[  897.385220][ T1164]  ? __pfx_worker_thread+0x10/0x10
[  897.385240][ T1164]  kthread+0x370/0x450
[  897.385340][ T1164]  ? __pfx_kthread+0x10/0x10
[  897.385365][ T1164]  ret_from_fork+0x72b/0xd50
[  897.385448][ T1164]  ? __pfx_ret_from_fork+0x10/0x10
[  897.385468][ T1164]  ? __switch_to+0x800/0x10f0
[  897.385533][ T1164]  ? __pfx_kthread+0x10/0x10
[  897.385554][ T1164]  ret_from_fork_asm+0x1a/0x30
[  897.385628][ T1164]  </TASK>
[  897.390637][ T5832] FAULT_INJECTION: forcing a failure.
[  897.390637][ T5832] name failslab, interval 1, probability 1, space 0, times 8
[  897.406872][T26250] FAULT_INJECTION: forcing a failure.
[  897.406872][T26250] name failslab, interval 1, probability 1, space 0, times 8
[  897.406943][T26250] CPU: 0 UID: 0 PID: 26250 Comm: syz.1.6820 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  897.406971][T26250] Tainted: [L]=SOFTLOCKUP
[  897.406978][T26250] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  897.406989][T26250] Call Trace:
[  897.406996][T26250]  <TASK>
[  897.407003][T26250]  dump_stack_lvl+0x100/0x190
[  897.407030][T26250]  should_fail_ex.cold+0x5/0xa
[  897.407054][T26250]  should_failslab+0xc2/0x120
[  897.407084][T26250]  kmem_cache_alloc_noprof+0x91/0x6a0
[  897.407108][T26250]  ? alloc_vfsmnt+0x23/0x710
[  897.407136][T26250]  alloc_vfsmnt+0x23/0x710
[  897.407159][T26250]  clone_mnt+0x4b/0x930
[  897.407186][T26250]  copy_tree+0x329/0xbf0
[  897.407211][T26250]  copy_mnt_ns+0x3fa/0x1180
[  897.407237][T26250]  ? __pfx_copy_mnt_ns+0x10/0x10
[  897.407258][T26250]  ? kmem_cache_alloc_noprof+0x2d7/0x6a0
[  897.407281][T26250]  ? create_new_namespaces+0x30/0xac0
[  897.407318][T26250]  create_new_namespaces+0xd3/0xac0
[  897.407338][T26250]  ? bpf_lsm_capable+0x9/0x10
[  897.407363][T26250]  ? security_capable+0x80/0x260
[  897.407392][T26250]  unshare_nsproxy_namespaces+0xf2/0x220
[  897.407413][T26250]  ksys_unshare+0x438/0xab0
[  897.407439][T26250]  ? __pfx_ksys_unshare+0x10/0x10
[  897.407474][T26250]  __ia32_sys_unshare+0x30/0x40
[  897.407499][T26250]  __do_fast_syscall_32+0xe7/0x970
[  897.407526][T26250]  ? lockdep_hardirqs_on+0x78/0x100
[  897.407551][T26250]  do_fast_syscall_32+0x32/0x70
[  897.407576][T26250]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  897.407604][T26250] RIP: 0023:0xf701efec
[  897.407631][T26250] Code: Unable to access opcode bytes at 0xf701efc2.
[  897.407640][T26250] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136
[  897.407662][T26250] RAX: ffffffffffffffda RBX: 0000000022020400 RCX: 0000000000000000
[  897.407676][T26250] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  897.407688][T26250] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  897.407700][T26250] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  897.407712][T26250] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  897.407737][T26250]  </TASK>
[  897.415109][   T42] CPU: 2 UID: 0 PID: 42 Comm: kworker/u33:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  897.415146][   T42] Tainted: [L]=SOFTLOCKUP
[  897.415153][   T42] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  897.415166][   T42] Workqueue: events_unbound nsim_dev_trap_report_work
[  897.415203][   T42] Call Trace:
[  897.415214][   T42]  <TASK>
[  897.415225][   T42]  dump_stack_lvl+0x100/0x190
[  897.415253][   T42]  should_fail_ex.cold+0x5/0xa
[  897.415278][   T42]  should_failslab+0xc2/0x120
[  897.415307][   T42]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  897.415334][   T42]  ? __alloc_skb+0x140/0x710
[  897.415364][   T42]  __alloc_skb+0x140/0x710
[  897.415386][   T42]  ? __alloc_skb+0x5b7/0x710
[  897.415409][   T42]  ? __pfx___alloc_skb+0x10/0x10
[  897.415436][   T42]  ? kfree_skbmem+0x19f/0x210
[  897.415458][   T42]  nsim_dev_trap_report_work+0x2af/0xd20
[  897.415498][   T42]  process_one_work+0xa23/0x1940
[  897.415539][   T42]  ? __pfx_process_one_work+0x10/0x10
[  897.415575][   T42]  ? __pfx_nsim_dev_trap_report_work+0x10/0x10
[  897.415607][   T42]  worker_thread+0x5ef/0xe50
[  897.415644][   T42]  ? kthread+0x13a/0x450
[  897.415667][   T42]  ? __pfx_worker_thread+0x10/0x10
[  897.415692][   T42]  kthread+0x370/0x450
[  897.415724][   T42]  ? __pfx_kthread+0x10/0x10
[  897.415749][   T42]  ret_from_fork+0x72b/0xd50
[  897.415775][   T42]  ? __pfx_ret_from_fork+0x10/0x10
[  897.415799][   T42]  ? __switch_to+0x800/0x10f0
[  897.415828][   T42]  ? __pfx_kthread+0x10/0x10
[  897.415855][   T42]  ret_from_fork_asm+0x1a/0x30
[  897.415896][   T42]  </TASK>
[  897.510466][T25911] FAULT_INJECTION: forcing a failure.
[  897.510466][T25911] name failslab, interval 1, probability 1, space 0, times 6
[  897.517895][ T5832] CPU: 3 UID: 0 PID: 5832 Comm: kworker/u32:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  897.517928][ T5832] Tainted: [L]=SOFTLOCKUP
[  897.517934][ T5832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  897.517945][ T5832] Workqueue: ipv6_addrconf addrconf_dad_work
[  897.517999][ T5832] Call Trace:
[  897.518006][ T5832]  <TASK>
[  897.518017][ T5832]  dump_stack_lvl+0x100/0x190
[  897.518041][ T5832]  should_fail_ex.cold+0x5/0xa
[  897.518061][ T5832]  should_failslab+0xc2/0x120
[  897.518084][ T5832]  kmem_cache_alloc_noprof+0x91/0x6a0
[  897.518106][ T5832]  ? dst_alloc+0x99/0x1a0
[  897.518127][ T5832]  ? __pfx_ip6_dst_gc+0x10/0x10
[  897.518150][ T5832]  dst_alloc+0x99/0x1a0
[  897.518171][ T5832]  icmp6_dst_alloc+0x79/0x4f0
[  897.518195][ T5832]  ndisc_send_skb+0x133f/0x1bf0
[  897.518215][ T5832]  ? skb_orphan_partial+0x3bd/0x5b0
[  897.518239][ T5832]  ? __pfx_ndisc_send_skb+0x10/0x10
[  897.518259][ T5832]  ? ndisc_alloc_skb+0x319/0x530
[  897.518283][ T5832]  ? __asan_memcpy+0x3c/0x60
[  897.518307][ T5832]  ? mark_held_locks+0x40/0x70
[  897.518449][ T5832]  ndisc_send_ns+0xc6/0x140
[  897.518472][ T5832]  ? __pfx_mod_delayed_work_on+0x10/0x10
[  897.518498][ T5832]  ? __pfx_ndisc_send_ns+0x10/0x10
[  897.518527][ T5832]  addrconf_dad_work+0xca1/0x1360
[  897.518550][ T5832]  ? __pfx_addrconf_dad_work+0x10/0x10
[  897.518574][ T5832]  ? rcu_is_watching+0x12/0xc0
[  897.518599][ T5832]  process_one_work+0xa23/0x1940
[  897.518631][ T5832]  ? __pfx_process_one_work+0x10/0x10
[  897.518661][ T5832]  ? __pfx_addrconf_dad_work+0x10/0x10
[  897.518684][ T5832]  worker_thread+0x5ef/0xe50
[  897.518716][ T5832]  ? kthread+0x13a/0x450
[  897.518735][ T5832]  ? __pfx_worker_thread+0x10/0x10
[  897.518761][ T5832]  kthread+0x370/0x450
[  897.518780][ T5832]  ? __pfx_kthread+0x10/0x10
[  897.518801][ T5832]  ret_from_fork+0x72b/0xd50
[  897.518822][ T5832]  ? __pfx_ret_from_fork+0x10/0x10
[  897.518842][ T5832]  ? __switch_to+0x800/0x10f0
[  897.518867][ T5832]  ? __pfx_kthread+0x10/0x10
[  897.518906][ T5832]  ret_from_fork_asm+0x1a/0x30
[  897.518952][ T5832]  </TASK>
[  897.569049][   T74] FAULT_INJECTION: forcing a failure.
[  897.569049][   T74] name failslab, interval 1, probability 1, space 0, times 4
[  897.592808][ T5143] FAULT_INJECTION: forcing a failure.
[  897.592808][ T5143] name failslab, interval 1, probability 1, space 0, times 4
[  897.597124][   T74] CPU: 3 UID: 0 PID: 74 Comm: kworker/u33:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  897.597152][   T74] Tainted: [L]=SOFTLOCKUP
[  897.597157][   T74] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  897.597168][   T74] Workqueue: events_unbound nsim_dev_trap_report_work
[  897.597196][   T74] Call Trace:
[  897.597203][   T74]  <TASK>
[  897.597209][   T74]  dump_stack_lvl+0x100/0x190
[  897.597229][   T74]  should_fail_ex.cold+0x5/0xa
[  897.597247][   T74]  should_failslab+0xc2/0x120
[  897.597268][   T74]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  897.597288][   T74]  ? __alloc_skb+0x140/0x710
[  897.597311][   T74]  __alloc_skb+0x140/0x710
[  897.597327][   T74]  ? __alloc_skb+0x5b7/0x710
[  897.597344][   T74]  ? __pfx___alloc_skb+0x10/0x10
[  897.597364][   T74]  ? kfree_skbmem+0x19f/0x210
[  897.597380][   T74]  nsim_dev_trap_report_work+0x2af/0xd20
[  897.597409][   T74]  process_one_work+0xa23/0x1940
[  897.597440][   T74]  ? __pfx_process_one_work+0x10/0x10
[  897.597467][   T74]  ? __pfx_nsim_dev_trap_report_work+0x10/0x10
[  897.597488][   T74]  worker_thread+0x5ef/0xe50
[  897.597614][   T74]  ? kthread+0x13a/0x450
[  897.597632][   T74]  ? __pfx_worker_thread+0x10/0x10
[  897.597651][   T74]  kthread+0x370/0x450
[  897.597668][   T74]  ? __pfx_kthread+0x10/0x10
[  897.597688][   T74]  ret_from_fork+0x72b/0xd50
[  897.597707][   T74]  ? __pfx_ret_from_fork+0x10/0x10
[  897.597725][   T74]  ? __switch_to+0x800/0x10f0
[  897.597747][   T74]  ? __pfx_kthread+0x10/0x10
[  897.597772][   T74]  ret_from_fork_asm+0x1a/0x30
[  897.597801][   T74]  </TASK>
[  897.600152][ T5832] FAULT_INJECTION: forcing a failure.
[  897.600152][ T5832] name failslab, interval 1, probability 1, space 0, times 3
[  897.601028][ T5832] CPU: 3 UID: 0 PID: 5832 Comm: kworker/u32:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  897.601052][ T5832] Tainted: [L]=SOFTLOCKUP
[  897.601058][ T5832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  897.601068][ T5832] Workqueue: ipv6_addrconf addrconf_dad_work
[  897.601091][ T5832] Call Trace:
[  897.601097][ T5832]  <TASK>
[  897.601104][ T5832]  dump_stack_lvl+0x100/0x190
[  897.601125][ T5832]  should_fail_ex.cold+0x5/0xa
[  897.601143][ T5832]  should_failslab+0xc2/0x120
[  897.601163][ T5832]  kmem_cache_alloc_noprof+0x91/0x6a0
[  897.601198][ T5832]  ? dst_alloc+0x99/0x1a0
[  897.601217][ T5832]  ? __pfx_ip6_dst_gc+0x10/0x10
[  897.601239][ T5832]  dst_alloc+0x99/0x1a0
[  897.601259][ T5832]  icmp6_dst_alloc+0x79/0x4f0
[  897.601281][ T5832]  mld_sendpack+0x5ae/0xec0
[  897.601304][ T5832]  ? __pfx_mld_sendpack+0x10/0x10
[  897.601335][ T5832]  mld_send_initial_cr+0x219/0x320
[  897.601356][ T5832]  ipv6_mc_dad_complete+0xa7/0x1d0
[  897.601379][ T5832]  addrconf_dad_completed+0xd91/0xff0
[  897.601400][ T5832]  ? __pfx_addrconf_dad_completed+0x10/0x10
[  897.601425][ T5832]  ? addrconf_dad_work+0x83c/0x1360
[  897.601442][ T5832]  addrconf_dad_work+0x83c/0x1360
[  897.601462][ T5832]  ? __pfx_addrconf_dad_work+0x10/0x10
[  897.601483][ T5832]  ? rcu_is_watching+0x12/0xc0
[  897.601504][ T5832]  process_one_work+0xa23/0x1940
[  897.601534][ T5832]  ? __pfx_process_one_work+0x10/0x10
[  897.601560][ T5832]  ? __pfx_addrconf_dad_work+0x10/0x10
[  897.601580][ T5832]  worker_thread+0x5ef/0xe50
[  897.601608][ T5832]  ? kthread+0x13a/0x450
[  897.601626][ T5832]  ? __pfx_worker_thread+0x10/0x10
[  897.601645][ T5832]  kthread+0x370/0x450
[  897.601764][ T5832]  ? __pfx_kthread+0x10/0x10
[  897.601785][ T5832]  ret_from_fork+0x72b/0xd50
[  897.601804][ T5832]  ? __pfx_ret_from_fork+0x10/0x10
[  897.601822][ T5832]  ? __switch_to+0x800/0x10f0
[  897.601844][ T5832]  ? __pfx_kthread+0x10/0x10
[  897.601864][ T5832]  ret_from_fork_asm+0x1a/0x30
[  897.601894][ T5832]  </TASK>
[  897.607567][ T5456] FAULT_INJECTION: forcing a failure.
[  897.607567][ T5456] name failslab, interval 1, probability 1, space 0, times 2
[  897.645253][ T5143] CPU: 2 UID: 0 PID: 5143 Comm: klogd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  897.645283][ T5143] Tainted: [L]=SOFTLOCKUP
[  897.645296][ T5143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  897.645306][ T5143] Call Trace:
[  897.645312][ T5143]  <TASK>
[  897.645320][ T5143]  dump_stack_lvl+0x100/0x190
[  897.645347][ T5143]  should_fail_ex.cold+0x5/0xa
[  897.645366][ T5143]  should_failslab+0xc2/0x120
[  897.645390][ T5143]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  897.645411][ T5143]  ? __alloc_skb+0x5b7/0x710
[  897.645431][ T5143]  ? __alloc_skb+0x140/0x710
[  897.645454][ T5143]  __alloc_skb+0x140/0x710
[  897.645472][ T5143]  ? __alloc_skb+0x5b7/0x710
[  897.645491][ T5143]  ? __pfx___alloc_skb+0x10/0x10
[  897.645517][ T5143]  alloc_skb_with_frags+0xdd/0x760
[  897.645547][ T5143]  sock_alloc_send_pskb+0x801/0x980
[  897.645575][ T5143]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  897.645595][ T5143]  ? find_held_lock+0x2b/0x80
[  897.645616][ T5143]  ? sock_def_readable+0x1d2/0x600
[  897.645635][ T5143]  ? sock_def_readable+0x1d2/0x600
[  897.645661][ T5143]  unix_dgram_sendmsg+0x3c7/0x1810
[  897.645686][ T5143]  ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0
[  897.645718][ T5143]  ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10
[  897.645742][ T5143]  ? __pfx_syslog_print+0x10/0x10
[  897.645768][ T5143]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  897.645794][ T5143]  ? apparmor_socket_sendmsg+0x15b/0x270
[  897.645816][ T5143]  __sys_sendto+0x48b/0x4e0
[  897.645836][ T5143]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  897.645859][ T5143]  ? __pfx___sys_sendto+0x10/0x10
[  897.645886][ T5143]  ? do_syslog+0x18c/0x6d0
[  897.645912][ T5143]  ? xfd_validate_state+0x129/0x190
[  897.645932][ T5143]  ? exit_to_user_mode_loop+0x166/0x6f0
[  897.645975][ T5143]  __x64_sys_sendto+0xe0/0x1c0
[  897.645997][ T5143]  ? do_syscall_64+0x90/0x840
[  897.646019][ T5143]  ? lockdep_hardirqs_on+0x78/0x100
[  897.646039][ T5143]  do_syscall_64+0x115/0x840
[  897.646057][ T5143]  ? clear_bhb_loop+0x40/0x90
[  897.646077][ T5143]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  897.646094][ T5143] RIP: 0033:0x7f73c51df407
[  897.646110][ T5143] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  897.646125][ T5143] RSP: 002b:00007ffe2fe259e0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[  897.646142][ T5143] RAX: ffffffffffffffda RBX: 00007f73c508fc80 RCX: 00007f73c51df407
[  897.646153][ T5143] RDX: 000000000000004e RSI: 00007ffe2fe25b20 RDI: 0000000000000003
[  897.646166][ T5143] RBP: 00007ffe2fe25f50 R08: 0000000000000000 R09: 0000000000000000
[  897.646176][ T5143] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffe2fe25f68
[  897.646185][ T5143] R13: 00007ffe2fe25b20 R14: 0000000000000033 R15: 00007ffe2fe25b20
[  897.646206][ T5143]  </TASK>
[  897.687483][T25018] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  897.746236][ T5456] CPU: 3 UID: 0 PID: 5456 Comm: dhcpcd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  897.746271][ T5456] Tainted: [L]=SOFTLOCKUP
[  897.746278][ T5456] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  897.746290][ T5456] Call Trace:
[  897.746298][ T5456]  <TASK>
[  897.746308][ T5456]  dump_stack_lvl+0x100/0x190
[  897.746340][ T5456]  should_fail_ex.cold+0x5/0xa
[  897.746364][ T5456]  should_failslab+0xc2/0x120
[  897.746392][ T5456]  kmem_cache_alloc_noprof+0x91/0x6a0
[  897.746418][ T5456]  ? anon_vma_fork+0x19a/0x6b0
[  897.746443][ T5456]  anon_vma_fork+0x19a/0x6b0
[  897.746467][ T5456]  dup_mmap+0x143e/0x21b0
[  897.746508][ T5456]  ? __pfx_dup_mmap+0x10/0x10
[  897.746535][ T5456]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  897.746565][ T5456]  ? __lock_acquire+0x49f/0x1a40
[  897.746596][ T5456]  ? find_held_lock+0x2b/0x80
[  897.746619][ T5456]  ? __percpu_counter_init_many+0x2bc/0x3b0
[  897.746673][ T5456]  copy_process+0x4588/0x8030
[  897.746696][ T5456]  ? __lock_acquire+0x49f/0x1a40
[  897.746765][ T5456]  ? __pfx_copy_process+0x10/0x10
[  897.746790][ T5456]  ? sk_setsockopt+0x46b/0x5d80
[  897.746821][ T5456]  ? sk_setsockopt+0x46b/0x5d80
[  897.746847][ T5456]  ? sk_setsockopt+0x46b/0x5d80
[  897.746875][ T5456]  ? __local_bh_enable_ip+0x9e/0x120
[  897.746902][ T5456]  kernel_clone+0x176/0x9d0
[  897.746928][ T5456]  ? __pfx_kernel_clone+0x10/0x10
[  897.746959][ T5456]  ? find_held_lock+0x2b/0x80
[  897.746981][ T5456]  ? __might_fault+0xc5/0x140
[  897.747005][ T5456]  __do_sys_clone+0xd9/0x120
[  897.747030][ T5456]  ? __pfx___do_sys_clone+0x10/0x10
[  897.747066][ T5456]  ? __sys_setsockopt+0x139/0x190
[  897.747100][ T5456]  do_syscall_64+0x115/0x840
[  897.747123][ T5456]  ? clear_bhb_loop+0x40/0x90
[  897.747147][ T5456]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  897.747166][ T5456] RIP: 0033:0x7f4971b63636
[  897.747185][ T5456] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00
[  897.747204][ T5456] RSP: 002b:00007ffcf9e33f60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  897.747224][ T5456] RAX: ffffffffffffffda RBX: 00007ffcf9e33f68 RCX: 00007f4971b63636
[  897.747236][ T5456] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  897.747248][ T5456] RBP: 00007ffcf9e544b0 R08: 0000000000000000 R09: 0000000000000001
[  897.747258][ T5456] R10: 00007f4971a8fa50 R11: 0000000000000246 R12: 00007ffcf9e340a0
[  897.747269][ T5456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000564034c07ac0
[  897.747294][ T5456]  </TASK>
[  897.792149][T25911] CPU: 3 UID: 0 PID: 25911 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  897.792181][T25911] Tainted: [L]=SOFTLOCKUP
[  897.792186][T25911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  897.792196][T25911] Call Trace:
[  897.792203][T25911]  <TASK>
[  897.792211][T25911]  dump_stack_lvl+0x100/0x190
[  897.792240][T25911]  should_fail_ex.cold+0x5/0xa
[  897.792260][T25911]  should_failslab+0xc2/0x120
[  897.792285][T25911]  kmem_cache_alloc_noprof+0x91/0x6a0
[  897.792306][T25911]  ? trace_kmem_cache_alloc+0xdd/0x100
[  897.792330][T25911]  ? security_file_alloc+0x34/0x2c0
[  897.792359][T25911]  security_file_alloc+0x34/0x2c0
[  897.792382][T25911]  init_file+0x95/0x480
[  897.792403][T25911]  alloc_empty_file+0x79/0x1c0
[  897.792424][T25911]  alloc_file_pseudo+0x183/0x290
[  897.792446][T25911]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  897.792467][T25911]  ? alloc_fd+0x471/0x7a0
[  897.792488][T25911]  sock_alloc_file+0x50/0x210
[  897.792514][T25911]  __sys_socket+0x1c0/0x260
[  897.792533][T25911]  ? __pfx___sys_socket+0x10/0x10
[  897.792558][T25911]  __ia32_compat_sys_socketcall+0x65b/0x770
[  897.792589][T25911]  ? __pfx___ia32_compat_sys_socketcall+0x10/0x10
[  897.792624][T25911]  ? __pfx_fput_close_sync+0x10/0x10
[  897.792661][T25911]  __do_fast_syscall_32+0xe7/0x970
[  897.792684][T25911]  ? lockdep_hardirqs_on+0x78/0x100
[  897.792706][T25911]  do_fast_syscall_32+0x32/0x70
[  897.792727][T25911]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  897.792750][T25911] RIP: 0023:0xf7f46fec
[  897.792777][T25911] Code: Unable to access opcode bytes at 0xf7f46fc2.
[  897.792785][T25911] RSP: 002b:00000000fff51070 EFLAGS: 00000282 ORIG_RAX: 0000000000000066
[  897.792801][T25911] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000fff51080
[  897.792810][T25911] RDX: 00000000f73d6ff4 RSI: 0000000000000000 RDI: 00000000f74054a8
[  897.792819][T25911] RBP: 00000000fff51248 R08: 0000000000000000 R09: 0000000000000000
[  897.792828][T25911] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  897.792837][T25911] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  897.792857][T25911]  </TASK>
[  900.920204][ T5832] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  901.246555][   T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  901.260192][ T5832] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  901.330225][   T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  901.340063][   T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  901.389096][   T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  901.470164][   T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  901.966571][T26306] fuse: Unknown parameter 'fd0x0000000000000003'
[  901.989540][ T5832] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  902.220991][ T5832] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  902.657971][ T5832] bridge_slave_1: left allmulticast mode
[  902.660202][ T5832] bridge_slave_1: left promiscuous mode
[  902.666797][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[  902.700889][ T5832] bridge_slave_0: left allmulticast mode
[  902.737874][ T5832] bridge_slave_0: left promiscuous mode
[  902.740708][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[  903.316076][ T5832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  903.321210][ T5832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  903.340548][ T5832] bond0 (unregistering): Released all slaves
[  903.677529][   T64] Bluetooth: hci0: command tx timeout
[  903.747795][ T5832] hsr_slave_0: left promiscuous mode
[  903.777010][ T5832] hsr_slave_1: left promiscuous mode
[  903.779825][ T5832] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  903.782917][ T5832] batman_adv: batadv0: Removing interface: batadv_slave_0
[  903.801818][ T5832] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  903.811641][ T5832] batman_adv: batadv0: Removing interface: batadv_slave_1
[  903.931189][ T5832] veth1_macvtap: left promiscuous mode
[  903.940822][ T5832] veth0_macvtap: left promiscuous mode
[  903.947811][ T5832] veth1_vlan: left promiscuous mode
[  903.979316][ T5832] veth0_vlan: left promiscuous mode
[  904.247745][T26344] fuse: Unknown parameter 'fd0x0000000000000003'
[  904.765296][ T5832] team0 (unregistering): Port device team_slave_1 removed
[  904.833851][ T5832] team0 (unregistering): Port device team_slave_0 removed
[  905.122979][T26358] db_root: cannot be changed because it's in use
[  905.162901][T26358] se_dev->se_dev_ptr already set for storage object
[  905.404004][ T5456] 8021q: adding VLAN 0 to HW filter on device eth14
[  905.747509][   T64] Bluetooth: hci0: command tx timeout
[  906.242927][   T60] IPVS: starting estimator thread 0...
[  906.428041][T26384] IPVS: using max 26 ests per chain, 62400 per kthread
[  906.588243][T26296] bridge0: port 1(bridge_slave_0) entered blocking state
[  906.606185][T26296] bridge0: port 1(bridge_slave_0) entered disabled state
[  906.609567][T26296] bridge_slave_0: entered allmulticast mode
[  906.616287][T26296] bridge_slave_0: entered promiscuous mode
[  906.621809][T26296] bridge0: port 2(bridge_slave_1) entered blocking state
[  906.625617][T26296] bridge0: port 2(bridge_slave_1) entered disabled state
[  906.628918][T26296] bridge_slave_1: entered allmulticast mode
[  906.638230][T26296] bridge_slave_1: entered promiscuous mode
[  906.753959][T26296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  906.815334][T26296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  906.857826][T26404] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6935'.
[  906.873188][ T5456] 8021q: adding VLAN 0 to HW filter on device eth15
[  906.897973][T26296] team0: Port device team_slave_0 added
[  906.903841][T26296] team0: Port device team_slave_1 added
[  906.974850][T26296] batman_adv: batadv0: Adding interface: batadv_slave_0
[  906.991517][T26296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  907.009285][T26296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  907.020091][T26296] batman_adv: batadv0: Adding interface: batadv_slave_1
[  907.022570][T26296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  907.058016][T26296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  907.300663][T26296] hsr_slave_0: entered promiscuous mode
[  907.326560][T26296] hsr_slave_1: entered promiscuous mode
[  907.348582][T26296] debugfs: 'hsr0' already exists in 'hsr'
[  907.387675][T26296] Cannot create hsr debugfs directory
[  907.827637][   T64] Bluetooth: hci0: command tx timeout
[  908.094051][ T5456] 8021q: adding VLAN 0 to HW filter on device eth16
[  908.579095][T26443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6945'.
[  909.939893][   T64] Bluetooth: hci0: command tx timeout
[  910.095993][T26486] netlink: 'syz.4.6950': attribute type 4 has an invalid length.
[  910.596044][T26497] Bluetooth: MGMT ver 1.23
[  911.073339][T26296] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  911.086408][   T41] audit: type=1800 audit(1785272235.677:226): pid=26504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6956" name="idVendor" dev="configfs" ino=109549 res=0 errno=0
[  911.205239][T26296] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  911.237481][T26296] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  911.552495][T26296] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  911.570450][T26296] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  911.681118][T26296] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  911.707931][T26296] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  911.723315][T26296] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  912.000175][T26526] usb3503 0-0008: unknown mode is requested
[  912.022513][T26526] usb3503 0-0008: usb3503_probe: probed in standby mode
[  912.112030][T26526] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08
[  912.449973][T26296] 8021q: adding VLAN 0 to HW filter on device bond0
[  912.463694][T26296] 8021q: adding VLAN 0 to HW filter on device team0
[  912.515380][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[  912.521968][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[  912.611382][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[  912.626283][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[  912.702150][T26296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  912.713233][T26296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  912.937586][ T5853] usb 9-1: new high-speed USB device number 70 using dummy_hcd
[  913.112406][ T5853] usb 9-1: Using ep0 maxpacket: 32
[  913.113643][T26246] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  913.129496][ T5853] usb 9-1: config index 0 descriptor too short (expected 29220, got 36)
[  913.207665][ T5853] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  913.248630][ T5853] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81
[  913.285945][ T5853] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  913.305942][ T5853] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  913.310607][ T5853] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  913.341552][ T5853] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  913.353969][ T5853] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  913.370397][ T5853] usb 9-1: config 0 descriptor??
[  913.370752][T26246] usb 10-1: Using ep0 maxpacket: 32
[  913.422306][T26246] usb 10-1: config index 0 descriptor too short (expected 29220, got 36)
[  913.436813][T26246] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  913.455558][T26246] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81
[  913.464838][T26246] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  913.475009][T26246] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  913.487485][T26246] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  913.495547][T26246] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  913.501653][T26246] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  913.508736][T26246] usb 10-1: config 0 descriptor??
[  913.595221][ T5853] usblp 9-1:0.0: usblp1: USB Bidirectional printer dev 70 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  913.786606][T26246] usblp 10-1:0.0: usblp2: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  913.832334][T25128] usb 9-1: USB disconnect, device number 70
[  913.878223][T25128] usblp1: removed
[  913.909888][T26296] 8021q: adding VLAN 0 to HW filter on device batadv0
[  913.988025][ T5853] usb 10-1: USB disconnect, device number 6
[  914.018294][ T5853] usblp2: removed
[  914.729884][T26296] veth0_vlan: entered promiscuous mode
[  914.759048][T26296] veth1_vlan: entered promiscuous mode
[  914.920016][T26296] veth0_macvtap: entered promiscuous mode
[  914.960090][T26296] veth1_macvtap: entered promiscuous mode
[  915.104722][T26296] batman_adv: batadv0: Interface activated: batadv_slave_0
[  915.174297][T26296] batman_adv: batadv0: Interface activated: batadv_slave_1
[  915.266536][ T5832] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  915.273281][ T5832] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  915.325772][ T5832] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  915.372891][ T5832] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  915.464262][T26613] netlink: 'syz.5.6972': attribute type 4 has an invalid length.
[  916.264280][T26627] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  916.991676][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  916.996159][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  917.553823][  T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  917.572993][  T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  917.999935][T26636] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x1)
[  918.328071][T26641] fuse: Bad value for 'fd'
[  919.501253][T26657] syzkaller0: entered promiscuous mode
[  919.510231][T26657] syzkaller0: entered allmulticast mode
[  919.998479][T26673] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x1)
[  924.104489][T26699] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6998'.
[  931.043850][ T1443] ieee802154 phy0 wpan0: encryption failed: -22
[  931.046513][ T1443] ieee802154 phy1 wpan1: encryption failed: -22
[  932.402002][T26685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  933.058300][T26721] usbip-vudc usbip-vudc.0: gadget not bound
[  933.471225][   T10] usb 9-1: new full-speed USB device number 71 using dummy_hcd
[  933.628538][   T10] usb 9-1: not running at top speed; connect to a high speed hub
[  933.634104][   T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  933.641903][   T10] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  933.659634][   T10] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  933.685527][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  933.722511][   T10] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected
[  933.731843][   T10] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84
[  933.762678][   T10] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2
[  933.773132][   T10] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0
qemu-system-x86_64: vtd_iova_to_slpte: detected slpte permission error (iova=0xbe140000, level=0x1, slpte=0x66190001, write=1, pasid=0xffffffff)
qemu-system-x86_64: vtd_iommu_translate: detected translation failure (dev=00:1f:02, iova=0xbe140000)
qemu-system-x86_64: New fault is not recorded due to compression of faults
[  933.988923][    C2] DMAR: DRHD: handling fault status reg 2
[  933.993229][    C2] DMAR: [DMA Write NO_PASID] Request device [0000:00:1f.2] fault addr 0xbe140000 [fault reason 0x05] PTE Write access is not set
[  934.007128][    C2] DMAR: [DMA Write NO_PASID] Request device [0000:00:1f.2] fault addr 0xbe156000 [fault reason 0x05] PTE Write access is not set
[  934.575316][   T10] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88
[  934.579512][   T10] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6
[  934.595158][   T10] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  934.630509][   T10] usb 9-1: USB disconnect, device number 71
[  934.644156][   T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  934.699592][   T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  934.715436][   T10] keyspan 9-1:1.0: device disconnected
[  934.970850][T26747] FAULT_INJECTION: forcing a failure.
[  934.970850][T26747] name fail_page_alloc, interval 1, probability 1, space 0, times 1
[  934.982249][T26747] CPU: 3 UID: 0 PID: 26747 Comm: syz.1.7014 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  934.982289][T26747] Tainted: [L]=SOFTLOCKUP
[  934.982297][T26747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  934.982309][T26747] Call Trace:
[  934.982317][T26747]  <TASK>
[  934.982327][T26747]  dump_stack_lvl+0x100/0x190
[  934.982359][T26747]  should_fail_ex.cold+0x5/0xa
[  934.982381][T26747]  ? prepare_alloc_pages+0x16d/0x5f0
[  934.982418][T26747]  should_fail_alloc_page+0xeb/0x140
[  934.982452][T26747]  prepare_alloc_pages+0x1f0/0x5f0
[  934.982488][T26747]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  934.982514][T26747]  ? __asan_memset+0x23/0x50
[  934.982541][T26747]  ? folios_put_refs+0x58a/0xaa0
[  934.982567][T26747]  ? __lock_acquire+0x49f/0x1a40
[  934.982600][T26747]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  934.982622][T26747]  ? __css_rstat_updated+0x1ce/0x5a0
[  934.982656][T26747]  ? do_raw_spin_lock+0x128/0x260
[  934.982676][T26747]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  934.982696][T26747]  ? find_held_lock+0x2b/0x80
[  934.982727][T26747]  ? __lock_acquire+0x49f/0x1a40
[  934.982755][T26747]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  934.984228][T26747]  ? policy_nodemask+0xed/0x4f0
[  934.984273][T26747]  alloc_pages_mpol+0x1fb/0x540
[  934.984303][T26747]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  934.984336][T26747]  folio_alloc_mpol_noprof+0x36/0x260
[  934.984363][T26747]  shmem_alloc_folio+0x135/0x160
[  934.984389][T26747]  shmem_alloc_and_add_folio+0x371/0xd40
[  934.984414][T26747]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  934.984459][T26747]  ? shmem_allowable_huge_orders+0x2bd/0x400
[  934.984487][T26747]  shmem_get_folio_gfp+0x6ad/0x1910
[  934.984510][T26747]  ? filemap_map_pages+0x112d/0x1fe0
[  934.984536][T26747]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  934.984559][T26747]  ? filemap_map_pages+0x1137/0x1fe0
[  934.984583][T26747]  shmem_fault+0x1f9/0xa20
[  934.984607][T26747]  ? __pfx_shmem_fault+0x10/0x10
[  934.984631][T26747]  ? __pfx_filemap_map_pages+0x10/0x10
[  934.984652][T26747]  ? find_held_lock+0x2b/0x80
[  934.984678][T26747]  __do_fault+0x10b/0x440
[  934.984703][T26747]  do_fault+0xa99/0x1750
[  934.984729][T26747]  __handle_mm_fault+0x187d/0x2a00
[  934.984750][T26747]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  934.984772][T26747]  ? __pfx___handle_mm_fault+0x10/0x10
[  934.984792][T26747]  ? pte_offset_map_lock+0x174/0x320
[  934.984866][T26747]  ? find_held_lock+0x2b/0x80
[  934.984902][T26747]  ? follow_page_pte+0x4d0/0x13f0
[  934.984937][T26747]  handle_mm_fault+0x37b/0xa30
[  934.984966][T26747]  __get_user_pages+0x1178/0x32a0
[  934.985006][T26747]  ? __pfx___get_user_pages+0x10/0x10
[  934.985041][T26747]  populate_vma_page_range+0x267/0x3f0
[  934.985067][T26747]  ? __pfx_populate_vma_page_range+0x10/0x10
[  934.985092][T26747]  ? __pfx_find_vma_intersection+0x10/0x10
[  934.985117][T26747]  ? do_mmap+0x93f/0x12f0
[  934.985146][T26747]  __mm_populate+0x107/0x3a0
[  934.985289][T26747]  ? __pfx___mm_populate+0x10/0x10
[  934.985323][T26747]  ? up_write+0x2e5/0x5c0
[  934.985345][T26747]  vm_mmap_pgoff+0x37f/0x470
[  934.985372][T26747]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  934.985397][T26747]  ? __pfx_do_futex+0x10/0x10
[  934.985418][T26747]  ? __pfx_do_sys_openat2+0x10/0x10
[  934.985455][T26747]  ksys_mmap_pgoff+0xe4/0x610
[  934.985485][T26747]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  934.985519][T26747]  __do_fast_syscall_32+0xe7/0x970
[  934.985559][T26747]  do_fast_syscall_32+0x32/0x70
[  934.985589][T26747]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  934.985617][T26747] RIP: 0023:0xf701efec
[  934.985643][T26747] Code: Unable to access opcode bytes at 0xf701efc2.
[  934.985653][T26747] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0
[  934.985673][T26747] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000b36000
[  934.985687][T26747] RDX: 0000000006ebbeef RSI: 0000000000008031 RDI: 00000000ffffffff
[  934.985699][T26747] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  934.985712][T26747] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  934.985724][T26747] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  934.985750][T26747]  </TASK>
[  935.557104][ T5853] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  935.745347][ T5853] usb 10-1: Using ep0 maxpacket: 16
[  935.749431][ T5853] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[  935.754902][ T5853] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  935.762866][ T5853] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  935.769920][ T5853] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  935.792263][ T5853] usb 10-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[  935.792295][ T5853] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  935.826601][ T5853] usb 10-1: config 0 descriptor??
[  936.142281][ T5853] usbhid 10-1:0.0: can't add hid device: -71
[  936.147168][ T5853] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  936.158650][ T5853] usb 10-1: USB disconnect, device number 7
[  936.936345][T26774] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x1)
[  938.160715][   T10] usb 11-1: new high-speed USB device number 2 using dummy_hcd
[  938.337224][   T10] usb 11-1: Using ep0 maxpacket: 8
[  938.348460][   T10] usb 11-1: config index 0 descriptor too short (expected 301, got 45)
[  938.352449][   T10] usb 11-1: config 16 has an invalid descriptor of length 52, skipping remainder of the config
[  938.361653][   T10] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 52, changing to 7
[  938.386240][   T10] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 9272, setting to 1024
[  938.391967][   T10] usb 11-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  938.429577][   T10] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  938.446359][   T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  938.554861][   T10] usbtmc 11-1:16.0: bulk endpoints not found
[  938.677244][   T10] usb 11-1: USB disconnect, device number 2
[  938.742564][T25276] libceph: connect (1)[c::]:6789 error -101
[  938.751952][T25276] libceph: mon0 (1)[c::]:6789 connect error
[  938.837899][    T9] libceph: connect (1)[c::]:6789 error -101
[  938.841413][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  938.936125][T25276] libceph: connect (1)[c::]:6789 error -101
[  938.949096][T25276] libceph: mon0 (1)[c::]:6789 connect error
[  939.109847][    T9] libceph: connect (1)[c::]:6789 error -101
[  939.115840][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  939.173436][   T41] audit: type=1804 audit(1785272263.777:227): pid=26820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.7038" name="/newroot/42/file1" dev="fuse" ino=1 res=1 errno=0
[  939.188341][   T41] audit: type=1800 audit(1785272263.777:228): pid=26820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7038" name="/" dev="fuse" ino=1 res=0 errno=0
[  939.230979][T25276] libceph: connect (1)[c::]:6789 error -101
[  939.239770][T25276] libceph: mon0 (1)[c::]:6789 connect error
[  939.451968][T26811] ceph: No mds server is up or the cluster is laggy
[  939.452119][T26808] ceph: No mds server is up or the cluster is laggy
[  940.774929][T26837] usb_phy_generic usb_phy_generic.2.auto: dummy supplies not allowed for exclusive requests (id=vbus)
[  940.825730][T26835] usb_phy_generic usb_phy_generic.3.auto: dummy supplies not allowed for exclusive requests (id=vbus)
[  940.915201][T26837] dwc2 dwc2.4.auto: error -EBUSY: can't request region for resource [mem 0x0000c0c0-0x0000c0df]
[  940.921303][T26835] dwc2 dwc2.5.auto: error -EBUSY: can't request region for resource [mem 0x0000c0a0-0x0000c0bf]
[  940.980830][T26835] dwc2 dwc2.5.auto: probe with driver dwc2 failed with error -16
[  941.000013][T26837] dwc2 dwc2.4.auto: probe with driver dwc2 failed with error -16
[  942.929319][ T6615] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  942.955341][T26881] netlink: 'syz.1.7056': attribute type 4 has an invalid length.
[  943.098750][ T6615] usb 10-1: Using ep0 maxpacket: 32
[  943.120331][ T6615] usb 10-1: unable to get BOS descriptor or descriptor too short
[  943.166549][ T6615] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  943.171517][ T6615] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  943.222446][ T6615] usb 10-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice= 0.40
[  943.228949][ T6615] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  943.255259][ T6615] usb 10-1: Product: syz
[  943.258013][ T6615] usb 10-1: Manufacturer: syz
[  943.260714][ T6615] usb 10-1: SerialNumber: syz
[  943.654040][ T6615] usb 10-1: USB disconnect, device number 8
[  943.767656][   T41] audit: type=1804 audit(1785272268.347:229): pid=26893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.7064" name="/newroot/44/file1" dev="fuse" ino=1 res=1 errno=0
[  943.824230][   T41] audit: type=1800 audit(1785272268.347:230): pid=26893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7064" name="/" dev="fuse" ino=1 res=0 errno=0
[  945.343826][T26928] 8021q: adding VLAN 0 to HW filter on device bond1
[  945.408439][T26930] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode
[  945.456561][T26930] bond1: (slave wlan0): Enslaving as an active interface with an up link
[  945.860643][T26943] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7079'.
[  946.028335][T26943] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7079'.
[  946.335633][T26965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7084'.
[  947.266092][T26979] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x1)
[  948.211138][T26998] coredump: 113(syz.6.7093): Core dump to core aborted: cannot preserve file permissions
[  948.366947][   T41] audit: type=1804 audit(1785272272.947:231): pid=27000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.7094" name="/newroot/128/file1" dev="fuse" ino=1 res=1 errno=0
[  948.453751][   T41] audit: type=1800 audit(1785272272.947:232): pid=27000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7094" name="/" dev="fuse" ino=1 res=0 errno=0
[  949.702223][T27014] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  949.711343][T27014] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  949.770430][T27014] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  949.784583][T27014] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  950.397226][T27028] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  953.199407][T27079] netlink: 'syz.4.7118': attribute type 4 has an invalid length.
[  955.779643][T27120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  956.145388][T27125] syzkaller0: entered promiscuous mode
[  956.147822][T27125] syzkaller0: entered allmulticast mode
[  956.798164][ T6615] usb 9-1: new high-speed USB device number 72 using dummy_hcd
[  956.903923][T27143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7140'.
[  956.991966][ T6615] usb 9-1: Using ep0 maxpacket: 16
[  957.017107][ T6615] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  957.027461][ T6615] usb 9-1: config 0 interface 0 has no altsetting 0
[  957.034761][ T6615] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  957.046939][ T6615] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  957.079463][ T6615] usb 9-1: config 0 descriptor??
[  957.539372][ T6615] nzxt-smart2 0003:1E71:2009.001A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0
[  957.971899][T27132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  957.978508][T27132] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  957.991744][ T6615] usb 9-1: USB disconnect, device number 72
[  958.735094][T27164] syzkaller0: entered promiscuous mode
[  958.740703][T27164] syzkaller0: entered allmulticast mode
[  959.338417][T27178] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  959.687936][T25276] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  959.788237][T27191] syzkaller0: entered promiscuous mode
[  959.797579][T27191] syzkaller0: entered allmulticast mode
[  959.893627][T25276] usb 10-1: Using ep0 maxpacket: 16
[  959.925592][T25276] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  959.934284][T25276] usb 10-1: config 0 interface 0 has no altsetting 0
[  959.956938][T25276] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  959.977956][T25276] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  960.003017][T25276] usb 10-1: config 0 descriptor??
[  960.469786][T25276] nzxt-smart2 0003:1E71:2009.001B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0
[  960.564326][T27210] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  960.907848][T27182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  960.912294][T27182] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  960.921854][T25128] usb 10-1: USB disconnect, device number 9
[  960.928607][   T41] audit: type=1804 audit(1785272285.537:233): pid=27216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.7167" name="/newroot/60/file1" dev="fuse" ino=1 res=1 errno=0
[  960.940461][   T41] audit: type=1800 audit(1785272285.537:234): pid=27216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.7167" name="/" dev="fuse" ino=1 res=0 errno=0
[  964.352507][T27300] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  965.064601][T27336] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  966.156989][T27370] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  967.087219][ T6615] usb 9-1: new high-speed USB device number 73 using dummy_hcd
[  967.201472][T27397] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  967.282899][ T6615] usb 9-1: Using ep0 maxpacket: 32
[  967.299040][ T6615] usb 9-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  967.316038][ T6615] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  967.402535][ T6615] usb 9-1: config 0 descriptor??
[  967.458462][ T6615] as10x_usb: device has been detected
[  967.463750][ T6615] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  967.591267][ T6615] usb 9-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  967.906170][ T6615] as10x_usb: error during firmware upload part1
[  967.915904][ T6615] Registered device nBox DVB-T Dongle
[  967.921071][ T6615] usb 9-1: USB disconnect, device number 73
[  968.094819][ T6615] Unregistered device nBox DVB-T Dongle
[  968.096401][ T6615] as10x_usb: device has been disconnected
[  969.108022][T12032] usb 11-1: new high-speed USB device number 3 using dummy_hcd
[  969.257447][T12032] usb 11-1: Using ep0 maxpacket: 16
[  969.271347][T12032] usb 11-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  969.293679][T12032] usb 11-1: config 0 interface 0 has no altsetting 0
[  969.304295][T12032] usb 11-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  969.315305][T12032] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  969.338165][T12032] usb 11-1: config 0 descriptor??
[  970.089684][T27433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  970.102073][T27433] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  970.127987][T12032] usbhid 11-1:0.0: can't add hid device: -71
[  970.131621][T12032] usbhid 11-1:0.0: probe with driver usbhid failed with error -71
[  970.157887][T12032] usb 11-1: USB disconnect, device number 3
[  971.273333][T27469] binder: 27468:27469 ioctl c0306201 80000240 returned -11
[  971.463061][T27476] file system registered
[  971.477592][T27476] ffs_data_put(): freeing
[  971.795846][T27492] VFS: file-max limit 0 reached
[  971.870855][T27494] binder: 27493:27494 ioctl c0306201 80000240 returned -11
[  972.064551][T27502] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7281'.
[  972.073893][T27502] netlink: 144 bytes leftover after parsing attributes in process `syz.5.7281'.
[  972.577259][T27518] binder: 27517:27518 ioctl c0306201 80000240 returned -11
[  972.682463][T27522] xt_hashlimit: Unknown mode mask 2020, kernel too old?
[  974.249613][T27551] binder: 27549:27551 ioctl c0306201 80000240 returned -11
[  974.528580][T27555] syzkaller0: entered promiscuous mode
[  974.545558][T27555] syzkaller0: entered allmulticast mode
[  974.629642][T27560] random: crng reseeded on system resumption
[  978.454679][T27582] binder: BINDER_SET_CONTEXT_MGR already set
[  978.472240][T27582] binder: 27581:27582 ioctl 4018620d 800002c0 returned -16
[  978.476248][T27582] binder: 27581:27582 ioctl c0306201 80000240 returned -11
[  978.800812][T27588] fuse: Unknown parameter 'grou00000000000000000000'
[  986.217026][T27579] bridge0: port 3(syz_tun) entered blocking state
[  986.222532][T27579] bridge0: port 3(syz_tun) entered disabled state
[  986.262523][T27579] syz_tun: entered allmulticast mode
[  986.276446][T27579] syz_tun: entered promiscuous mode
[  986.284248][T27579] bridge0: port 3(syz_tun) entered blocking state
[  986.302311][T27579] bridge0: port 3(syz_tun) entered forwarding state
[  986.816058][T27607] svc: failed to register nfsdv3 RPC service (errno 101).
[  986.820657][T27612] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  986.837384][T27607] svc: failed to register nfsaclv3 RPC service (errno 101).
[  988.075792][T27642] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  988.283120][T27645] svc: failed to register nfsdv3 RPC service (errno 101).
[  988.291203][T27645] svc: failed to register nfsaclv3 RPC service (errno 101).
[  988.702409][   T41] audit: type=1800 audit(1785272313.287:235): pid=27660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7341" name="idVendor" dev="configfs" ino=117861 res=0 errno=0
[  988.747518][T27664] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  988.756865][T27655] syzkaller0: entered promiscuous mode
[  988.760355][T27655] syzkaller0: entered allmulticast mode
[  988.964316][T27673] netlink: 'syz.1.7346': attribute type 4 has an invalid length.
[  989.029110][T27670] svc: failed to register nfsdv3 RPC service (errno 111).
[  989.106385][T27670] svc: failed to register nfsaclv3 RPC service (errno 111).
[  992.470387][ T1443] ieee802154 phy0 wpan0: encryption failed: -22
[  992.473044][ T1443] ieee802154 phy1 wpan1: encryption failed: -22
[  992.476971][ T1443] aoe: packet could not be sent on bond1.  consider increasing tx_queue_len
[  999.588640][   T41] audit: type=1800 audit(1785272324.177:236): pid=27695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7352" name="idVendor" dev="configfs" ino=117209 res=0 errno=0
[  999.808728][T27705] db_root: cannot be changed because it's in use
[  999.865494][T27705] se_dev->se_dev_ptr already set for storage object
[  999.919046][T27706] syzkaller0: entered promiscuous mode
[  999.923285][T27706] syzkaller0: entered allmulticast mode
[ 1002.235935][T27729] 
[ 1002.244239][T27729] ======================================================
[ 1002.247152][T27729] WARNING: possible circular locking dependency detected
[ 1002.250272][T27729] syzkaller #0 Tainted: G             L     
[ 1002.252786][T27729] ------------------------------------------------------
[ 1002.255506][T27729] syz.5.7362/27729 is trying to acquire lock:
[ 1002.258133][T27729] ffffffff901d3308 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x7c/0x650
[ 1002.263132][T27729] 
[ 1002.263132][T27729] but task is already holding lock:
[ 1002.267069][T27729] ffff88802ac69440 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0
[ 1002.272311][T27729] 
[ 1002.272311][T27729] which lock already depends on the new lock.
[ 1002.272311][T27729] 
[ 1002.276158][T27729] 
[ 1002.276158][T27729] the existing dependency chain (in reverse order) is:
[ 1002.280199][T27729] 
[ 1002.280199][T27729] -> #2 (&sb->s_type->i_mutex_key#24){++++}-{4:4}:
[ 1002.283449][T27729]        lock_acquire+0x1b9/0x370
[ 1002.286194][T27729]        down_write+0x8b/0x1f0
[ 1002.288190][T27729]        configfs_depend_item_unlocked+0xf3/0x6a0
[ 1002.290776][T27729]        usbg_make_tpg+0x261/0x620
[ 1002.294012][T27729]        target_fabric_make_tpg+0xab/0x8c0
[ 1002.297348][T27729]        configfs_mkdir+0x51e/0xb70
[ 1002.299532][T27729]        vfs_mkdir+0x361/0x850
[ 1002.301905][T27729]        filename_mkdirat+0x48b/0x5e0
[ 1002.306420][T27729]        __ia32_sys_mkdir+0x6a/0x90
[ 1002.308999][T27729]        __do_fast_syscall_32+0xe7/0x970
[ 1002.311748][T27729]        do_fast_syscall_32+0x32/0x70
[ 1002.315631][T27729]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1002.319701][T27729] 
[ 1002.319701][T27729] -> #1 (&opts->dep_lock){+.+.}-{4:4}:
[ 1002.324217][T27729]        lock_acquire+0x1b9/0x370
[ 1002.328300][T27729]        __mutex_lock+0x1a4/0x1bd0
[ 1002.330934][T27729]        tcm_set_name+0x29/0xb0
[ 1002.332807][T27729]        function_make+0x21c/0x3f0
[ 1002.335081][T27729]        configfs_mkdir+0x51e/0xb70
[ 1002.337781][T27729]        vfs_mkdir+0x361/0x850
[ 1002.340385][T27729]        filename_mkdirat+0x48b/0x5e0
[ 1002.342521][T27729]        __ia32_sys_mkdir+0x6a/0x90
[ 1002.344665][T27729]        __do_fast_syscall_32+0xe7/0x970
[ 1002.346904][T27729]        do_fast_syscall_32+0x32/0x70
[ 1002.350165][T27729]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1002.354515][T27729] 
[ 1002.354515][T27729] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}:
[ 1002.359300][T27729]        check_prev_add+0xeb/0xe60
[ 1002.362219][T27729]        __lock_acquire+0x136c/0x1a40
[ 1002.364663][T27729]        lock_acquire+0x1b9/0x370
[ 1002.366837][T27729]        __mutex_lock+0x1a4/0x1bd0
[ 1002.368900][T27729]        uvcg_streaming_header_allow_link+0x7c/0x650
[ 1002.371682][T27729]        configfs_symlink+0x540/0x11f0
[ 1002.374523][T27729]        vfs_symlink+0x178/0x4d0
[ 1002.376682][T27729]        filename_symlinkat+0x2a6/0x560
[ 1002.379798][T27729]        __ia32_sys_symlink+0x78/0xb0
[ 1002.382725][T27729]        __do_fast_syscall_32+0xe7/0x970
[ 1002.385327][T27729]        do_fast_syscall_32+0x32/0x70
[ 1002.387716][T27729]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1002.390808][T27729] 
[ 1002.390808][T27729] other info that might help us debug this:
[ 1002.390808][T27729] 
[ 1002.395637][T27729] Chain exists of:
[ 1002.395637][T27729]   gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#24
[ 1002.395637][T27729] 
[ 1002.402868][T27729]  Possible unsafe locking scenario:
[ 1002.402868][T27729] 
[ 1002.406563][T27729]        CPU0                    CPU1
[ 1002.409202][T27729]        ----                    ----
[ 1002.413925][T27729]   lock(&sb->s_type->i_mutex_key#24);
[ 1002.416335][T27729]                                lock(&opts->dep_lock);
[ 1002.419288][T27729]                                lock(&sb->s_type->i_mutex_key#24);
[ 1002.422428][T27729]   lock(gadget_subsys.su_mutex);
[ 1002.424781][T27729] 
[ 1002.424781][T27729]  *** DEADLOCK ***
[ 1002.424781][T27729] 
[ 1002.428185][T27729] 2 locks held by syz.5.7362/27729:
[ 1002.430052][T27729]  #0: ffff8880223d0450 (sb_writers#12){.+.+}-{0:0}, at: filename_create+0x10d/0x400
[ 1002.434107][T27729]  #1: ffff88802ac69440 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0
[ 1002.439892][T27729] 
[ 1002.439892][T27729] stack backtrace:
[ 1002.443030][T27729] CPU: 0 UID: 0 PID: 27729 Comm: syz.5.7362 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1002.443070][T27729] Tainted: [L]=SOFTLOCKUP
[ 1002.443079][T27729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1002.443099][T27729] Call Trace:
[ 1002.443111][T27729]  <TASK>
[ 1002.443123][T27729]  dump_stack_lvl+0x100/0x190
[ 1002.443157][T27729]  print_circular_bug.cold+0x178/0x1c7
[ 1002.443206][T27729]  check_noncircular+0x146/0x160
[ 1002.443243][T27729]  check_prev_add+0xeb/0xe60
[ 1002.443275][T27729]  ? __pfx_stack_trace_save+0x10/0x10
[ 1002.443301][T27729]  __lock_acquire+0x136c/0x1a40
[ 1002.443330][T27729]  ? kmem_cache_free+0x127/0x6b0
[ 1002.443352][T27729]  lock_acquire+0x1b9/0x370
[ 1002.443375][T27729]  ? uvcg_streaming_header_allow_link+0x7c/0x650
[ 1002.443401][T27729]  ? __pfx___might_resched+0x10/0x10
[ 1002.443433][T27729]  __mutex_lock+0x1a4/0x1bd0
[ 1002.443455][T27729]  ? uvcg_streaming_header_allow_link+0x7c/0x650
[ 1002.443477][T27729]  ? uvcg_streaming_header_allow_link+0x7c/0x650
[ 1002.443499][T27729]  ? __lock_acquire+0x49f/0x1a40
[ 1002.443526][T27729]  ? __pfx___mutex_lock+0x10/0x10
[ 1002.443552][T27729]  ? __pfx___might_resched+0x10/0x10
[ 1002.443580][T27729]  ? make_vfsgid+0xf1/0x140
[ 1002.443610][T27729]  ? uvcg_streaming_header_allow_link+0x7c/0x650
[ 1002.443647][T27729]  uvcg_streaming_header_allow_link+0x7c/0x650
[ 1002.443674][T27729]  ? inode_permission+0x374/0x620
[ 1002.443701][T27729]  ? mntput_no_expire+0xe7/0x220
[ 1002.443733][T27729]  configfs_symlink+0x540/0x11f0
[ 1002.443759][T27729]  ? bpf_lsm_inode_permission+0x9/0x10
[ 1002.443787][T27729]  ? security_inode_permission+0xbf/0x250
[ 1002.443817][T27729]  ? __pfx_configfs_symlink+0x10/0x10
[ 1002.443844][T27729]  vfs_symlink+0x178/0x4d0
[ 1002.443875][T27729]  filename_symlinkat+0x2a6/0x560
[ 1002.443898][T27729]  ? __pfx_filename_symlinkat+0x10/0x10
[ 1002.443919][T27729]  ? strncpy_from_user+0x19d/0x2d0
[ 1002.443950][T27729]  ? do_getname+0x191/0x390
[ 1002.443973][T27729]  __ia32_sys_symlink+0x78/0xb0
[ 1002.443995][T27729]  __do_fast_syscall_32+0xe7/0x970
[ 1002.444026][T27729]  do_fast_syscall_32+0x32/0x70
[ 1002.444053][T27729]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1002.444077][T27729] RIP: 0023:0xf704efec
[ 1002.444107][T27729] Code: Unable to access opcode bytes at 0xf704efc2.
[ 1002.444117][T27729] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000053
[ 1002.444139][T27729] RAX: ffffffffffffffda RBX: 0000000080001400 RCX: 0000000080001500
[ 1002.444152][T27729] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1002.444167][T27729] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1002.444190][T27729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1002.444203][T27729] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1002.444222][T27729]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1011.004709][T27712] tipc: Started in network mode
[ 1011.007605][T27712] tipc: Node identity 4, cluster identity 4711
[ 1011.010319][T27712] tipc: Node number set to 4
[ 1011.192879][T24983] bridge0: port 3(syz_tun) entered disabled state
[ 1011.497494][T24983] syz_tun (unregistering): left allmulticast mode
[ 1011.500056][T24983] syz_tun (unregistering): left promiscuous mode
[ 1011.502588][T24983] bridge0: port 3(syz_tun) entered disabled state