last executing test programs:

2m43.815262769s ago: executing program 2 (id=439):
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x5, 0x20000)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000300)={0x2, 0x0, 0x94, &(0x7f0000000240)={0x7, 0x0, 0x9}}) (async)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000300)={0x2, 0x0, 0x94, &(0x7f0000000240)={0x7, 0x0, 0x9}})
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) (async)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x5)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f00000000c0))

2m43.511258333s ago: executing program 2 (id=441):
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) (async)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x1, &(0x7f0000000140)) (async)
io_setup(0x1, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) (async)
io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}])
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x0, 0x70bd25}, 0x14}, 0x1, 0x0, 0x0, 0x4000015}, 0xc844)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/custom0\x00', 0x3, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/custom0\x00', 0x3, 0x0)
r2 = openat$nci(0xffffff9c, 0x0, 0x2, 0x0)
write$nci(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="e87d1120c34370074c8c3159e585e1e7d9d64a51aed756c6943ef9fd32f2845cbdf2adf9b97e6be3d8dea2bee1471e88037c2ffb589116b46549ed728fa80200000000000000565d0879d80203c98a72320180f58b97c9e7006bc20e6abd9264e308eca7ef78d98a2d6b410d2b15e6e085cca6a169fd5801b79b5e5dd5ca55277a42df43f04fb6a3bcc1a6632b89f49f93df860cfc"], 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0)
prlimit64(0x0, 0x1, &(0x7f0000000380)={0x9, 0xf}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r4 = inotify_init()
inotify_add_watch(r4, 0x0, 0x850003d1)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000880)=""/246) (async)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000880)=""/246)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000200), 0x1002081, &(0x7f0000000540)={[{@uuid_auto}, {@xino_auto}, {@index_off}, {@uuid_null}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}, {@redirect_dir_off}, {@redirect_dir_on}, {@default_permissions}], [], 0x2f}) (async)
mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000200), 0x1002081, &(0x7f0000000540)={[{@uuid_auto}, {@xino_auto}, {@index_off}, {@uuid_null}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}, {@redirect_dir_off}, {@redirect_dir_on}, {@default_permissions}], [], 0x2f})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)

2m42.804225179s ago: executing program 2 (id=443):
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x15)
ioctl(r1, 0x40204706, &(0x7f0000000200))
ioctl(r1, 0x404c4701, &(0x7f00000001c0)="0100000000000000010000000100000001000000010000000000000020000000200000000100000001")
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
preadv(r2, 0x0, 0x0, 0xf1f, 0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="09000000040020004000000002"], 0x50)
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000001080)={r3, 0x97b7f86bb53d5b91, &(0x7f00000010c0)}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400f2000000000009000000850000000f000000850000000700000095"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

2m41.503911167s ago: executing program 2 (id=447):
r0 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502)
ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000019340)=[{}, {0x0, <r4=>0x80000000, 0x0, {<r5=>0x0}}, {}], 0x0, 0x0, 0x0})
r6 = socket(0x15, 0x3, 0x1006)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x41c, 0x208, 0x2d0, 0xfeffffff, 0x2d0, 0x208, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe4, 0x0, {}, [@common=@inet=@tcp={{0x2c}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @common=@inet=@socket2={{0x24}}]}, @common=@inet=@TCPMSS={0x24}}, {{@ip={@multicast1, @rand_addr=0x64010100, 0xffffff00, 0xff, 'tunl0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x84, 0x1, 0x9}, 0x0, 0xf0, 0x124, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x1, 0x7]}}}, @common=@set={{0x40}, {{0x0, [], 0x5}}}]}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@ttl={{0x24}}]}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id=0x64}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x478)
ioctl$SIOCGETSGCNT(r6, 0x89a0, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010125})
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0)
close(0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = syz_open_dev$sg(&(0x7f0000000480), 0x0, 0x2040)
ioctl$SG_IO(r10, 0x2285, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(r8, 0x9362, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xd}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000000)={{0x80000000, 0x0, 0x7, [0xfffffffc, 0x10000]}, {r4, r5, 0x4, [0xff, 0xfc000000]}, 0x4, [0x4, 0x8]})
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRES16=r0, @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRESDEC=r2, @ANYRESOCT=r5, @ANYRES16=r10, @ANYRES8=r2, @ANYBLOB="b1f033d8e11474bf739f94741717023d6581a64daa212c408453f7f2455bf6e86cbd1d1d81706153045ef60d550304800e5f44d0cfc556cc29132441d883a6666c7562aec4fca36ee03784f39cf4ebc0721ec4ac4167535e82899b792ddf3a7209263eca3878095e2e72735c3380379e12b56bc563264f2ac862d38cf6dd1406648a610e3ce51e42833adab318", @ANYBLOB="db158d0024fbdae6b85ca98b1bf22b6a248b27126477ac981388c681dd1ad66683f90778f10e6980f0cc7ab5c7733e89fae780505873c9ab1f7c7f05c14543a987368da57979f6419fc8b17dae9bd274686e6325c2f60a1d", @ANYRES16=r2, @ANYRES64=0x0, @ANYBLOB="1e20e88e67186eb04c520c3ee46bec8c8a85a2556c1a3948767c3226a7ebbb80ee21582d8b7c7baf89433586b942cb696cfef8bc794c8105e3e2810863a34fd4338b1d2ec304df86e976048c4e43465f74ba07d58306a46fb2a6ed018d0a5faf", @ANYBLOB="697058f527dd7117dd0a0a4a05e761e475853c0ee839c2b0d8261a4cbcab540d94e17ecabdfa2854c025f80ea923859c4c0679e2d5514df88b3ede1fa9698f9a1d9ab65a1084e6f4a35e1efd53983e6291e3e36b460f406ee58be4b1195652da96f4783cd8013d00d2c0fbdefbff552ca86ae86a0058d69c49bdfef7cfa93f58b4dce3f63d290ffd4d779633edd73780f49a0732ee06"], 0x50)
socket(0x21, 0x6, 0x20000000)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r11 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r11, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x41, &(0x7f0000000000)=0x659f, 0x4)

2m40.904731619s ago: executing program 2 (id=451):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100))
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nfs/parameters/callback_tcpport\x00', 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x34, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x4a}, @nested={0x15, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @generic="05"]}, @nested={0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40815}, 0xc000)
r5 = dup2(r3, r3)
write(r5, &(0x7f0000000140)='20c', 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)
r6 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000000)={0x1b0000019})
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0)
preadv(r8, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x1, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$cont(0x21, r7, 0x5, 0x4)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x28, 0x10, 0x437, 0x100000, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1040}, [@IFLA_LINKMODE={0x5, 0x11, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0)

2m40.361187648s ago: executing program 2 (id=453):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@multicast2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0xfd}, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, {0xffffffffffffffff, 0x400}, {}, 0x0, 0x3, 0xa}, [@algo_auth_trunc={0x6d, 0x14, {{'cmac(aes)\x00'}, 0x108, 0x0, "7a23f30d01000000cc69321d46a591ff9a3f3c8518649703abd99afcbafc84338d"}}]}, 0x15c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0xac}}, 0x0)
r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf64(r2, &(0x7f0000000400)=ANY=[], 0x78)
close(r2)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, r1)
openat$tun(0xffffff9c, &(0x7f0000000000), 0x80, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x2, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x10}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x29}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x101}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000880}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8000)
ioctl$FIONREAD(r5, 0x541b, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$kcm(0x11, 0x3, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a201, 0x0)
close(r10)
socket$tipc(0x1e, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x4, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r11, 0x36}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000640)="442ea407603a16ff", 0x8}], 0x2}, 0x20000085)

2m25.250496235s ago: executing program 32 (id=453):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@multicast2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0xfd}, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, {0xffffffffffffffff, 0x400}, {}, 0x0, 0x3, 0xa}, [@algo_auth_trunc={0x6d, 0x14, {{'cmac(aes)\x00'}, 0x108, 0x0, "7a23f30d01000000cc69321d46a591ff9a3f3c8518649703abd99afcbafc84338d"}}]}, 0x15c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0xac}}, 0x0)
r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf64(r2, &(0x7f0000000400)=ANY=[], 0x78)
close(r2)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, r1)
openat$tun(0xffffff9c, &(0x7f0000000000), 0x80, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x2, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x10}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x29}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x101}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000880}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8000)
ioctl$FIONREAD(r5, 0x541b, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$kcm(0x11, 0x3, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a201, 0x0)
close(r10)
socket$tipc(0x1e, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x4, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r11, 0x36}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000640)="442ea407603a16ff", 0x8}], 0x2}, 0x20000085)

13.615012843s ago: executing program 4 (id=1114):
syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00')
semctl$SETVAL(0x0, 0x1, 0x10, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000300)})
close_range(r0, r0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x208200, 0x0)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB='max=00000000000000000000004,stats=global,max=00000000p00000000000007,stats=global,subj_role=xfrm0\x00,dont_hash,subj_role=!,obj_user=$,$}+%\\!,fsname=$,,rootcontext=unconfined_u,obj_user=,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',fsuuid=2]024d91-66f3-4e0c-8fb6-bae1dd59,\x00', @ANYRES64=r0]) (async)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB='max=00000000000000000000004,stats=global,max=00000000p00000000000007,stats=global,subj_role=xfrm0\x00,dont_hash,subj_role=!,obj_user=$,$}+%\\!,fsname=$,,rootcontext=unconfined_u,obj_user=,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',fsuuid=2]024d91-66f3-4e0c-8fb6-bae1dd59,\x00', @ANYRES64=r0])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid() (async)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) (async)
mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x5}, 0x1c) (async)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x5}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r4, &(0x7f0000000240)="b6", 0x1, 0x200080c1, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x1000008}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005", 0xb}], 0x1}, 0x4005)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f0000010800"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3)
shutdown(r4, 0x1) (async)
shutdown(r4, 0x1)
fanotify_init(0x200, 0x0)

11.083516453s ago: executing program 4 (id=1119):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f00000002c0), 0x2, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r3, 0x0, 0x0, 0xa, 0x0)
mmap(&(0x7f0000534000/0xd000)=nil, 0xd000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x7c1})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x4})
ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, 0x0)
mq_timedreceive(r3, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0)
sendfile(r1, r1, 0x0, 0x8000002)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/acpi/parameters/ec_event_clearing\x00', 0x1, 0x0)
write$tcp_congestion(r7, &(0x7f0000000180)='bic\x00', 0x4)
ioctl$USBDEVFS_GETDRIVER(r7, 0x41045508, &(0x7f0000000440)={0x1a, "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"})
sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9500ffb6", @ANYRES16=r6, @ANYBLOB="000125bd7000fedbdf25030000000900030073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000040)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC=r2, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYRESOCT=r4, @ANYRESOCT])
read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, <r8=>0x0}, 0x2020)
fchown(r4, 0x0, r8)

9.687255904s ago: executing program 3 (id=1122):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = socket(0x200000000000011, 0x2, 0x8001)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r4=>0x0})
bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_emit_ethernet(0x3e, &(0x7f0000000380)=ANY=[@ANYBLOB="00000003000000bbbbbbbbbb080045000030fffd0b0000bef9e0c3bdd7756b0000010b1093ca4c00000045000000fffc0000001100000017b000e0000002c84fde5006a4032791375fd6ec19be2be300aff467f76abb97cfb67abf5957526a6a4108991b0bb0ec7c5b8d613b6b469765f17bc412e97e633bb1c57f82e7dff22fd3375a9f29d6db219bee02a2742cee3ef8ae245b4bc1a3d0be0699aa61cd3101a8caa510f66db24019ffa938f414a668fd47bf518c10cf8d02f4feec3197"], 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d")
socket$nl_route(0x10, 0x3, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r5=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x40, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000100)='./file1\x00', 0x2000, 0x1)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1)
openat$sndseq(0xffffff9c, &(0x7f0000000180), 0x40)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0)
r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, 0x0)
r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001600), 0x20000, 0x0)
r8 = userfaultfd(0x801)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_CONTINUE(r8, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
ioctl$PTP_CLOCK_GETCAPS(r7, 0x43403d0e, &(0x7f0000000140))
syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0x1118, 0x2, 0x3, 0x800000c5}, &(0x7f0000000240), &(0x7f0000000540), &(0x7f0000000f40))

9.482728363s ago: executing program 1 (id=1123):
r0 = socket$inet(0x2, 0x2, 0x1)
r1 = openat$autofs(0xffffff9c, &(0x7f0000000080), 0x900, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00001a0000)={0x0, 0x0, &(0x7f00001a0040)={&(0x7f00001a0080)=@newqdisc={0x34, 0x24, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x20, 0x4000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xc}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0)
r6 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f00000000c0)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0, &(0x7f0000000080)=<r9=>0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703"], 0x0)
r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
syz_io_uring_submit(r7, r8, r9, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10, 0x0, 0x0, 0x1, {0x2011}})
io_uring_enter(r6, 0x1000001, 0xfffffffe, 0x4b, 0x0, 0x0)
r11 = open(&(0x7f00000001c0)='./file0\x00', 0x40900, 0x189)
getdents(r11, &(0x7f0000001fc0)=""/184, 0xb8)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x40032, 0x0, 0x0)
r12 = gettid()
r13 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0)
read(r13, &(0x7f0000000200)=""/209, 0xd1)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r13, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0xe, 0x52})
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r13, 0xc0105303, &(0x7f0000000300)={0x58, 0x0, 0x68})
tkill(r12, 0x7)

8.436480946s ago: executing program 4 (id=1127):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat$sequencer(0xffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/filehandle\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)="2a1f2e2f6578706f72745f6469722033320a", 0x12)
ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0xc0046d00, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:05.0/remove\x00', 0x1, 0x0)
r3 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
symlinkat(0x0, r4, &(0x7f0000000000)='./file0\x00')
mkdir(0x0, 0x1ff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000240)={'wg1\x00'})
sendmsg$nl_route(r5, 0x0, 0x0)
sendmsg$nl_route(r5, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
socket(0x10, 0x4, 0x0)
socket$unix(0x1, 0x2, 0x0)
msgctl$IPC_SET(0x0, 0x1, 0x0)
write(r2, &(0x7f00000002c0)='9', 0x1)
openat$yama_ptrace_scope(0xffffff9c, 0x0, 0x2, 0x0)
epoll_create1(0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)

7.89581766s ago: executing program 0 (id=1128):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x2, 0x1, 0x1000b0a7}, 0x1c)
ppoll(&(0x7f0000000040)=[{r2, 0x1380}], 0x1, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f00000030c0), 0x400000000000181, 0x20004050)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', <r3=>0x0})
r4 = gettid()
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x14, r6, 0x701, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x10044880)
syz_open_procfs$namespace(r4, &(0x7f0000000080)='ns/pid_for_children\x00')
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000600)={0x0, 0x12, &(0x7f0000000000)={&(0x7f00000003c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x0, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x0, 0x3, r3}]}, 0x24}}, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005040100000000000000000000000000000001000000010000000f00030073797a6b616c6c657230000008000500", @ANYRES32=r3, @ANYBLOB="100012800b0001006c6f7770616e0000"], 0x48}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="20000000130005000200"/20, @ANYRES32=r3, @ANYBLOB="0100000001000000"], 0x20}}, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000800)='syzkaller0\x00', 0xb)
sendto$inet6(r8, &(0x7f0000000900)="0102030405060708", 0x8, 0x0, &(0x7f0000000a00)={0xa, 0x1234, 0x0, @mcast2}, 0x1c)

7.610772868s ago: executing program 3 (id=1129):
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = msgget$private(0x0, 0x1c0)
msgctl$IPC_SET(r1, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x20000010000, 0x0, 0x0, 0x0, 0xffffffffffffffff}) (async)
msgctl$IPC_SET(r1, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x20000010000, 0x0, 0x0, 0x0, 0xffffffffffffffff})
msgsnd(r1, &(0x7f0000000200)={0x2}, 0x8, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
close(0x3)
ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x10003, 0x0, &(0x7f0000ffd000/0x2000)=nil}) (async)
ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x10003, 0x0, &(0x7f0000ffd000/0x2000)=nil})
r3 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async)
connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[], 0x254fe)
shutdown(r3, 0x1)
fchdir(r2)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff1100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001011404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x702, 0x36, 0x0, &(0x7f0000001080)="e460334470b8d480eb00c15286dd08d8829f5fb5e2eb3b56fddaa2b27da9d81c20bfde92a3cd98f29389530882794568195b29c77653", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

7.282125169s ago: executing program 3 (id=1130):
r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501)
ioctl$USBDEVFS_REAPURB(r0, 0x4004550d, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x418001, 0x0)
write(r2, &(0x7f0000000140)='1\x00', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r3, &(0x7f0000000140)='1\x00', 0x2)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x200002, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x33, @rand_addr=0x64010102, 0x4e1f, 0x3, 'rr\x00', 0x3e, 0x83, 0x5d}, {@rand_addr=0x64090102, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
write(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1)
memfd_secret(0x0)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan0\x00'})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5], 0x14}, 0x4, 0x700000000000000, 0x0, 0x8041}, 0x44000)
close_range(r1, r2, 0x2)
r7 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x8}, 0x1c)
socket(0x10, 0x803, 0x4)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3)
sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x98, r8, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfe5, 0x56}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}], @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x1, 0x2, 0x0, {0x100, 0x269, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x1, 0x9652, 0x6}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8, 0x3, 0x1, 0x0, {0x0, 0x9, 0x0, 0x7, 0x0, 0x1, 0x1}, 0x6, 0x1000}}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ed84af6b2fee"}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044880)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000050000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYRESHEX=r8], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x60058884)

7.132576558s ago: executing program 1 (id=1131):
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000240)={&(0x7f000058f000/0x1000)=nil, &(0x7f000012a000/0x3000)=nil, 0x1000, 0x3})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000882000/0x3000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x3000, 0x2, 0x2})

7.042486032s ago: executing program 1 (id=1132):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]})
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000740)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @parameter_prob={0xc, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x1, 0x39, 0x9, 0x66, 0x1e, 0x6, 0x89, 0x1, @remote, @broadcast}}}}}}, 0x0) (async, rerun: 32)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000001a00)=0x72b, 0x4) (async)
getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, 0x0) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

6.797282649s ago: executing program 0 (id=1133):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b704000000000e006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f204754d1d4a93f24215dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2aee792482ced58af4140cc4ce3efef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c2431b97906f00000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd153390b16d1d41ee433e3aee000000000009e106d6b5289f0000000000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e441eb69869844152ba9da0588e42cdbc5fcd245ce5e3ef0dca64931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006d6c38db117fb1115221a66169172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e0f9d21f4a3ebbd3fabf6da9a1a1f869a339fab465d8322b7280b0734fd115a19b33c8644fff71b3c62f2e1b827e2663e06a751182e968c8ab05fb1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac000058ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a83456647191ba1953d320f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213216cd4ecfd30efe137641471987289b7e23482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745725d44c77d097f69d19fe86f71c38a0226d44ebe0ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cfa2081e430680950b7d7c377726b557ad31fdee17ba7057741f39d29d8ab295222f96297a777bb235416e72c84afef2bdb08fb375147b028b89f15af45bc8976b91158c13c9876daa71e7db0f5a17376be39ea79ce1246c547c740e31c64e5d293e0e5a544dd166010061d6ccae46c173b8e11721e4bce22c16af00000021f80ac6c3971006db853e3c40a5417d6eac09eb0e01ac6bd4c6dacdcb1d6d2ef9c8bdea91c984022821e961236d08f8b9072ec6cb5d5a68833fd5b4e80a5ac2bc6ff323f5ce612b59ce8177956c1affcc8baf4c8b59ab959aff9a7bd81f7c7c1f1bb92ddbeed6bce8041c7f0c1c584e6ae027678ce3cfbfea938aecc3c5119c5875b7fb35dc20f5c7aaae1e276104f607a73fe501c1045873a2b1eb80e95c87f099d98028dc82bdc7ef08c871fb3061c3c5ebd613e6e5e8cf099bb6e8c0441a133c85138b36a02c47fbedf7ed1d3ce74c9ec2c676c0b2d4b5eca61dbf5769b483c2a9f6bec666dae4e81960e9bad7f17cfc3d5bcc7b7f437110ca8ffa908c12086b2227eb202a8d56e0925ba994b05c98c39de44d25932449ddf08e5377814a40877eab4440ca01b3f50d2014a61a7d32105254b424238122386424efa3a7041254f686a5faac120942287f75e8e3db569ce47b120059d774a37e11d013be50cd2cbb00f6d2a23af61ec7d30bb7dc33a92f900b6ff1d29dc61cc40b846040dbafd00c6bcfbcf700"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0xfffffeeb, 0xffffffffffffffe3, &(0x7f0000000380)="eb00000000000010000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$FUSE_NOTIFY_STORE(r2, &(0x7f0000002c80)={0x28, 0x4, 0x0, {0x0, 0xffffffff80000000}}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x14, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a80a3888a82f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

6.532813481s ago: executing program 1 (id=1134):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000047300fe88a43de1a400000000000000027d01ff020000000000000000000000000001"], 0xfdef)
r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x101200)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000008c0), 0xffa4})
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600080000000c00030008000c00040006"]}, 0x58}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r5, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e)
r6 = userfaultfd(0x80001)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r7, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002")
ioctl(r7, 0x40140921, &(0x7f0000000420)="0100000001")
ioctl(r7, 0x932, &(0x7f0000000440)="020000000100")
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60})
iopl(0x3)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r8=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r8, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000180)={{0x77f39800, 0x8000000, 0xf, 0x7, 0x80, 0x4, 0x6, 0x0, 0x0, 0x1, 0x7, 0xa4}, {0xeeee8000, 0xeeee0000, 0x9, 0xf, 0x7, 0x10, 0x8, 0x6, 0x2, 0xf4, 0x40, 0x11}, {0x1, 0x40000, 0x4, 0x7, 0x5, 0x95, 0xa0, 0xbb, 0x9f, 0x3, 0x7, 0x9}, {0x8000000, 0x8080000, 0xe, 0x7, 0x7, 0x7, 0x9, 0xf, 0x2, 0x10, 0x3, 0xa}, {0xdddd1000, 0xb000, 0xe, 0x10, 0x0, 0x6b, 0x91, 0xd7, 0x1, 0x3, 0x5, 0xff}, {0xdddd0000, 0xf000, 0x9, 0x1, 0x0, 0x7, 0x7, 0xd, 0x0, 0x5, 0xe, 0x9}, {0x60000, 0x200000, 0x3, 0x8, 0x6, 0x1, 0x7f, 0x4, 0xec, 0x2, 0x4, 0x55}, {0x2000, 0x1, 0xb, 0x1, 0x0, 0x0, 0x4b, 0x2, 0x2, 0xd, 0x2, 0x6}, {0x2000, 0x7d}, {0x200000, 0x5}, 0x20040006, 0x0, 0x70000, 0x54600, 0xc, 0xdf637cdd9d82b98b, 0xa937ccc39e61fde2, [0x100000000, 0x1, 0x8001, 0x9]})
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f00009a7000/0x3000)=nil, 0x3000}})

6.175264394s ago: executing program 0 (id=1135):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000680)={0xeb, "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"}) (async)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) (async)
recvfrom$inet(r2, &(0x7f0000000780)=""/123, 0x7b, 0x10000, &(0x7f0000000800)={0x2, 0x4e23, @loopback}, 0x10) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) (async)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/binder1\x00', 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async)
prlimit64(0x0, 0x3, &(0x7f0000000380)={0x8, 0x100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async)
fsopen(&(0x7f0000000140)='cifs\x00', 0x0) (async)
sched_setattr(0x0, 0x0, 0x0) (async)
r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
unshare(0x800) (async)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81802) (async)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2e, 0x0, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=<r5=>0x0)
r6 = dup(0xffffffffffffffff)
syz_ublk_setup_queues(r1, r5, &(0x7f0000000180)={0x0, 0x1, 0x40000, 0x3, 0x317}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800000, 0x8, 0x80002000, 0x10000005, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc464, 0x2000, 0x3, 0x111, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2d37, 0x8000, 0x0, 0x367}}], 0x1, &(0x7f0000000880)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x4, 0x0, 0x0}}, 0x0) (async)
shutdown(r2, 0x1)

6.160074956s ago: executing program 4 (id=1136):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000e5ff80000000001000000000"], 0x48)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00')
socket(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
ioctl$MEMWRITEOOB(r1, 0xc00c4d03, &(0x7f0000000480)={0x7, 0xa5, &(0x7f00000003c0)="f337384f590ff95adcfb6dd8f1b2183b30cfbfa48fa32ed0546151d98213014c2e05f8586adac30068dd30fa8091c0a8840c4d2165f0189a819ac16beae86f72e2f34b0e4fe00df1f11885825d32e3a3b4a2ec930c1e6ae54326bacafa038cef8ac5979c15150b166b231392242d425488af701e08ddc58239b38f27860661b0e34e6abae52a1d3b3e6ba382bca1a51aa7d876592674965fb377394b2603a86059797ffd9e"})
r3 = userfaultfd(0x801)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
getsockname$netlink(r1, &(0x7f0000000100), &(0x7f0000000180)=0xc)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
munlock(&(0x7f0000280000/0x8000)=nil, 0x8000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
r4 = getpid()
process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = syz_io_uring_setup(0x27c8, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x3, 0x14b}, &(0x7f0000000140)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0, &(0x7f00000000c0)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_NOP128={0x3f, 0xe, 0x0, r0, 0x6, 0x7ff, 0x9, 0x10, 0x1, {0xce}})
io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0)
r9 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x1001}})
read$FUSE(r1, &(0x7f00000040c0)={0x2020}, 0x2020)

5.670664893s ago: executing program 3 (id=1137):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_sock_diag(0x10, 0x3, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_open_dev$ptys(0xc, 0x3, 0x1)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x2)
fchdir(r6)
r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
r8 = syz_clone(0x300, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r8, r8)
setpgid(0x0, r8)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0)
write$cgroup_int(r9, &(0x7f0000000040)=0x4000921, 0x12)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0x9362, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@file={0xe0ff42a362c85180, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix={0xb, 0x9, 0x32315258, 0x7, 0xe, 0x8, 0x5, 0xa, 0x0, 0x2, 0x0, 0x3}})

4.679981669s ago: executing program 0 (id=1138):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2a}]}, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10)
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
read$FUSE(0xffffffffffffffff, &(0x7f0000002380)={0x2020}, 0x2020)
socket$inet6_tcp(0xa, 0x1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0xf4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002f0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = gettid()
syz_pidfd_open(r4, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

4.451560611s ago: executing program 3 (id=1139):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xde5)
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x100, 0x0)
connect$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fsmount(r3, 0x0, 0x2)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
close(0x3)

2.623398376s ago: executing program 3 (id=1140):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000005a80), 0xce5, 0x2400)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000005ac0)=""/114)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000000280)='GPL\x00')
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r5, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, 0x0}}], 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', <r8=>0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r8, 0x0, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x31, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r8, 0x1, 0x7800, 0xffff, 0x8004, {{0x5, 0x4, 0x0, 0x28, 0x59, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @remote}}}})
ioctl$KVM_KVMCLOCK_CTRL(r4, 0xaead)
mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
getpriority(0x0, r1)
syz_open_dev$video(&(0x7f0000000080), 0x8003, 0x105580)

2.376808845s ago: executing program 1 (id=1141):
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
epoll_create1(0x80000)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/custom0\x00', 0x800, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
pselect6(0x40, &(0x7f00000001c0)={0x8, 0x43a, 0x5, 0xfffffffffffffffd, 0x0, 0x6, 0x7, 0x800}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8000000000000001, 0xfffffffffffffffd, 0x20000000009, 0x8, 0x0, 0x7f, 0x7}, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r1, 0xffffffffffffffff, 0x100000000000000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001})
sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="28010000ff468ef996dccd174d9766567108758c4dcfe231261c5617e3836765608e6de572a1cafeef373e04034348101d00ba7d183ed87941caa054bda43b4ad195a092e1068a3cd666", @ANYRES16=0x0, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x5}, 0x400c001) (async)
sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="28010000ff468ef996dccd174d9766567108758c4dcfe231261c5617e3836765608e6de572a1cafeef373e04034348101d00ba7d183ed87941caa054bda43b4ad195a092e1068a3cd666", @ANYRES16=0x0, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x5}, 0x400c001)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) (async)
r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0)
writev(r3, &(0x7f0000000400)=[{&(0x7f0000000040)="01bb", 0x2}, {&(0x7f00000003c0)="bd", 0x1}], 0x2) (async)
writev(r3, &(0x7f0000000400)=[{&(0x7f0000000040)="01bb", 0x2}, {&(0x7f00000003c0)="bd", 0x1}], 0x2)
socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c"], 0x48}}, 0x8001)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a300000000040000000030a01010000000000000000050000000900010073797a300000797a300000000014000480080001400000000008000240521deb0b44000000060a0104000008043db8ee160000000000000500000008000b55000000001c0004801800018008ff01006f7366000c0002800800014000b64efd9a6384b111797a3000000000140000001100010000000000000000000000000a00000000000000e7eb7721c2174236ae195f1ac36a"], 0xcc}}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}})
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'vlan0\x00', 0x1000})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x7, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x4, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0x10, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff41, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x5, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x1, 0x7fff, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x6, 0x7, 0x10, 0x5, 0x6, 0xf, 0xff, 0x11, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000b, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x400000, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x2, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x3, 0x2ffe, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'ipvlan1\x00'})
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r7, 0x0, 0x0)

2.372755132s ago: executing program 0 (id=1142):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001300050026bd7000ffdbdf2507000000", @ANYRES32=r4, @ANYBLOB="000000000000000014001a80100004800c000880080001"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x20000000)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x2, 0x100000000, 0x0, 0x7f, 0x100000, 0x10000000000, 0x2004c8, 0x8000000, 0x0, 0x0, 0x1000000000007, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000080)="f3980f2207bad104b000ee660f38826a060f10eb0f07d9d8bad00466b8463d000066ef66b9800000c00f326635000400000f300f005600", 0x37}], 0x1, 0x71, 0x0, 0x0)
r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0xf)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x645, 0x9, 0xffffffffffffffff, 0x10000000, 0x10000, 0x3, 0x400004002004c2, 0x7ff, 0x1, 0x0, 0x404, 0x82, 0x3, 0xfffffffffffffff8, 0x6, 0x9], 0xeeee8000, 0x240456})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000580)=[@text16={0x10, &(0x7f0000000500)="0f01b3003066b91f09000066b8ca550ee466ba387d66440f300f009b32003665262e0fae730bea0c7af500673665660ff54276f3a5f20fd6c00fc79af4ff66b8010000000f01c1", 0x47}], 0x1, 0x10, &(0x7f00000005c0)=[@cr0={0x0, 0xc0000008}, @flags={0x3, 0x1080}], 0x2)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x103)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x1000}})
statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0)
read$FUSE(r8, &(0x7f0000006300)={0x2020, 0x0, <r9=>0x0, <r10=>0x0, <r11=>0x0}, 0x2020)
syz_fuse_handle_req(r8, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0xfffffffffffffff5, 0x2, {0x0, 0x3, 0x0, '\x00', {0x4000, 0x4, 0x401, 0x13, r10, r11, 0x1000, '\x00', 0x6, 0x7, 0x0, 0x2, {0x3f, 0x9}, {0x4000000000006, 0xfffffffa}, {0x5, 0xc}, {0x29, 0x9fc}, 0x1, 0x6, 0x1, 0x7}}}})
write$FUSE_INIT(r8, &(0x7f0000000080)={0x50, 0xfffffffffffffff5, r9, {0x7, 0x29, 0x0, 0x2810901, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc07}}, 0x50)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$FS_IOC_GETVERSION(r2, 0x80047601, &(0x7f0000000000))
r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
write(r12, &(0x7f0000000400)='wusb3801 0x4a\x00', 0xe)
bind$nfc_llcp(r12, &(0x7f00000002c0)={0x27, 0x0, 0x1, 0x3, 0x6, 0x9, "974adc460bc31ecd2f8b2d0756e8f9c4fd05f9089265feb9f60e9fa15e0910a55ea457ec0b65e3427da28e91b8c442033716ad214e8f3aee40080644a84764", 0x13}, 0x58)

2.33827564s ago: executing program 4 (id=1143):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c0000002f00090827bd7000fddbdf250400000007000b000530"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) (async)
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xf8b821d340f05747)

2.041255298s ago: executing program 4 (id=1144):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ef) (async)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)='comm', 0x4) (async)
set_thread_area(&(0x7f0000000080)={0xe, 0x20000000, 0x4000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800e6ff040000000100005c965ce1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{0xa, 0x3}]}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x30, 0x0, 0x1}, 0x28)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$getregset(0x4204, r2, 0x200, &(0x7f0000000280)={0x0}) (async)
fstat(r1, &(0x7f0000002e80)={0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0})
sendmsg$unix(r0, &(0x7f0000002f40)={&(0x7f0000000380)=@file={0x1, './tracing/events/sched/filter\x00'}, 0x6e, &(0x7f0000002e40)=[{&(0x7f0000000480)="ce23b8131434a292b05e98983e0c764a1d56fb801130cd9200576eb337d6cce49dc77512725a5f0aac6619ac0add23529ee1bf9899af05d4cabd3505ee842d13cf99014a3f7ad6cefe76da3188728f81ba16d0b67a300dbea0a6c009cfb5b17a70a3e6c3eefe2b989f658ac85bdd851d0d80372e30e3ba5b43f1f28d5ac522a386f3b352af58578c42c34346f7e818f32808d5c1460f8e77eecd287a85cd3910633e602a2b7bc5fe246fd2b0d89ad42f7a439fa096d48c1fd8665b269ed94e064e4671c30fde196ac56e50e3eabe1771", 0xd0}, {&(0x7f00000006c0)="503b52b2082be8a269da3a76f79ae419c9fd6da13417d43d61d3885b10ecc73ed108e796bf3d6c55efcf59c4934af764119d3633cd2f45d94314b8814f31c5baae908bf07b7ae2c5049ce460869a0b2653bf5649c6543f84c697e699c9bd90a36e5a78fbb71771c54402c9ed9ca9070658c8ba7b4f918d2025830e000d79c6690b35fda4df3e72bba346d2e688bf48", 0x8f}, {&(0x7f0000001cc0)="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", 0x1000}, {&(0x7f0000002cc0)="6741aba5756a7346289d0a3e651524accf358bd98b7fcfb0909e4c88458ee1ea597352e7b1d2620323ef58fac5571bae8631ff0109bfc4de910394f84b0974667a35ce8232fa73e2d1b24f27b51b09d5a6f5114723c7f5c99d62772e559594b9703ea8bfdf09b46907735b3f52ff5ba7b6d589a90d08fc0d30cbfc83460bd07683ab3e575b04a77fa5981028d679fbbf16365ce6913e41b67a27ebcc1fb59b3e1f2865244b24f5eae2fe3426f166d7e2b1566f5a24546a207d04b5820eb4246325445c36145cf6ba312eb8cc6a0586233cc39893ad659c94b3b36bdaadcfb4", 0xdf}, {&(0x7f0000002dc0)="4a5b977ab220a2507a2f89ffeb7249b713f3abe955b89b860c49d8c7c789048e9cb3f1e4f063a1cbdb6ba6e1843460c04e36adfa8dba0b444e0990030e00d622f680dd2dbefba270a982a19d96b7f3f046578aadf17cf788b50ae11f6638f359d1", 0x61}], 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32=0xee00, @ANYRES32=r4, @ANYBLOB="200000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRESDEC=r3, @ANYRES32=r1, @ANYRES32=r0], 0x38, 0x40000}, 0x20040010) (async)
r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x2c, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40) (async)
r8 = socket$inet(0x2, 0x3, 0x1)
ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='vcan0\x00'}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x3, 0xfffffffffffffffe, 0x1, 0x1, 0x52, 0xffffffffffffffff, 0x4002004c2, 0x3, 0x45c1, 0x6, 0x4, 0x4, 0x3, 0xfa23, 0xfffffffffffffffe, 0x1], 0xeeee0000, 0x12d7}) (async)
listns(&(0x7f0000000000)={0x20, 0x0, 0x3, 0x8000000}, &(0x7f0000000040)=[0x0], 0x1, 0x0) (async)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x32}, 0x3}, 0x1c)
setsockopt(r9, 0x0, 0x4, 0x0, 0x0)
setpgid(0x0, 0x0)
lstat(0x0, 0x0) (async)
r10 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r10, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

947.844µs ago: executing program 0 (id=1145):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r0=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@newqdisc={0x378, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x348, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x3, 0x284, 0x7, 0x5, 0x16, 0x4, 0x7}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x800, 0x2, 0x544, 0x1, 0x13, 0x5, 0x8}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x7f}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x378}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./dev\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r1, &(0x7f0000000740)='dummy_udc.0', 0xb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0)
write(r2, &(0x7f0000000a00)='t', 0x1)
close(r2)
r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0)
r4 = landlock_create_ruleset(&(0x7f0000000080)={0xf4da, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r4, 0x0)
landlock_restrict_self(r3, 0x0)
r5 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="02c95014001000050017cb0c002b0700040700efff49000400"], 0x19)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={<r6=>0x0, 0x7}, &(0x7f0000000180)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000001c0)={r6, 0x3}, 0x8)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xc58)
tkill(r5, 0x34)
futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f0000000200), 0x14fffffd)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)
socket$inet6_tcp(0xa, 0x1, 0x0)

0s ago: executing program 1 (id=1146):
r0 = userfaultfd(0x801) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, 0x0, 0x0) (async)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@local, @private, <r3=>0x0}, &(0x7f0000000280)=0xc) (async)
r4 = syz_open_dev$vcsu(&(0x7f0000000400), 0x2, 0x414500)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0x1, <r5=>0xffffffffffffffff}, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x3, 0x6f6, 0x4, 0x800, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3, 0x9}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffa}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x5e, &(0x7f0000000140)=""/94, 0x41000, 0x9, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000440)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x4, 0x2b21, 0x9}, 0x10, 0x28a37, 0xffffffffffffffff, 0x0, &(0x7f0000000640)=[r5, r6], 0x0, 0x10, 0x9}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async)
r7 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) (async)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})

kernel console output (not intermixed with test programs):

tlink: Flow actions may not be safe on all matching packets.
[  225.805043][ T9333] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  227.044080][ T9348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.743'.
[  227.085131][ T9348] 8021q: adding VLAN 0 to HW filter on device bond2
[  227.092985][ T9348] 8021q: adding VLAN 0 to HW filter on device batadv1
[  227.094801][ T9348] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  227.133819][ T9349] 8021q: adding VLAN 0 to HW filter on device batadv2
[  227.138687][ T9349] bond2: (slave batadv2): Enslaving as an active interface with an up link
[  227.183373][ T9348] bond2 (unregistering): (slave batadv1): Releasing backup interface
[  227.187946][ T9348] bond2 (unregistering): (slave batadv2): Releasing backup interface
[  227.200210][ T9348] bond2 (unregistering): Released all slaves
[  227.240365][ T7138] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  227.304588][ T9355] overlayfs: failed to resolve './file1': -2
[  227.401587][ T7138] usb 8-1: device descriptor read/64, error -71
[  227.504756][ T9364] netlink: 'syz.1.748': attribute type 21 has an invalid length.
[  227.505377][ T9364] netlink: 'syz.1.748': attribute type 1 has an invalid length.
[  227.505396][ T9364] netlink: 144 bytes leftover after parsing attributes in process `syz.1.748'.
[  227.542095][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.547010][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.553287][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.558445][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.564362][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.568609][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.572523][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.578365][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.587478][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.605342][ T5092] usb 5-1: USB disconnect, device number 25
[  227.614559][ T5092] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  227.628270][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.648894][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.654590][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.659833][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.660205][ T7138] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  227.672331][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.691234][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.701995][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.706215][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.709592][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.719437][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.729545][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.737258][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.745779][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.749203][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.754135][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.757277][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.760179][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.763579][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.767042][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.772971][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.775960][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.778710][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.782154][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.787225][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.790334][ T7138] usb 8-1: device descriptor read/64, error -71
[  227.858097][ T9368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.750'.
[  227.879631][ T9368] batadv0: entered promiscuous mode
[  227.884507][ T9368] macsec2: entered promiscuous mode
[  227.884724][ T9368] macsec2: entered allmulticast mode
[  227.884738][ T9368] batadv0: entered allmulticast mode
[  227.886112][ T9368] 8021q: adding VLAN 0 to HW filter on device macsec2
[  227.887891][ T9368] batadv0: left allmulticast mode
[  227.888246][ T9368] batadv0: left promiscuous mode
[  227.901346][ T7138] usb usb8-port1: attempt power cycle
[  227.954227][ T9371] dlm: plock device version mismatch: kernel (1.2.0), user (1.1792.14)
[  228.191387][ T9374] netlink: 'syz.0.751': attribute type 10 has an invalid length.
[  228.208065][ T9374] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  228.214860][ T9374] team0: Port device netdevsim1 added
[  228.240041][ T7138] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  228.263359][ T7138] usb 8-1: device descriptor read/8, error -71
[  228.511656][ T7138] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  228.540804][ T7138] usb 8-1: device descriptor read/8, error -71
[  228.665470][ T7138] usb usb8-port1: unable to enumerate USB device
[  229.063508][ T9383] tmpfs: Bad value for 'mpol'
[  229.373012][ T5098] Bluetooth: hci4: unexpected event for opcode 0x0402
[  229.497129][ T9408] veth0_to_bridge: entered promiscuous mode
[  229.701392][ T7138] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  229.870910][ T7138] usb 5-1: Using ep0 maxpacket: 32
[  229.871795][ T7138] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  229.873061][ T7138] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  229.873094][ T7138] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  229.873130][ T7138] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10
[  229.873157][ T7138] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024
[  229.873183][ T7138] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  229.873209][ T7138] usb 5-1: config 0 interface 0 has no altsetting 0
[  229.875382][ T7138] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  229.875402][ T7138] usb 5-1: Product: syz
[  229.875415][ T7138] usb 5-1: Manufacturer: syz
[  229.875427][ T7138] usb 5-1: SerialNumber: syz
[  229.877762][ T7138] usb 5-1: config 0 descriptor??
[  229.878419][ T9405] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  229.890357][ T7138] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  229.895549][ T7138] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  229.941615][ T9423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.762'.
[  230.088059][ T9405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.759'.
[  230.103990][ T9403] veth0_to_bridge: left promiscuous mode
[  230.644043][ T7138] usb 5-1: USB disconnect, device number 26
[  230.670544][ T7138] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  230.809595][ T9432] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead
[  230.809619][ T9432] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead
[  230.809637][ T9432] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead
[  230.809650][ T9432] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead
[  230.809662][ T9432] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead
[  230.809685][ T9432] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead
[  230.809697][ T9432] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead
[  230.809711][ T9432] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead
[  230.809728][ T9432] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000140: 0x0002 instead
[  230.809741][ T9432] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000144: 0x00e0 instead
[  230.809754][ T9432] jffs2: Further such events for this erase block will not be printed
[  230.809795][ T9432] jffs2: Empty flash at 0x00000308 ends at 0x0000030c
[  230.809809][ T9432] jffs2: Empty flash at 0x00000330 ends at 0x00000334
[  230.809819][ T9432] jffs2: Empty flash at 0x0000034c ends at 0x00000350
[  230.900738][ T9432] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  230.900754][ T9432] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[  230.958569][ T9436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.765'.
[  230.990211][ T5848] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  231.141386][ T5848] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  231.142690][ T5848] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  231.142715][ T5848] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  231.142730][ T5848] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[  231.142768][ T5848] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  231.144559][ T5848] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  231.144582][ T5848] usb 8-1: Product: syz
[  231.144594][ T5848] usb 8-1: Manufacturer: syz
[  231.172757][ T5848] cdc_wdm 8-1:1.0: skipping garbage
[  231.172775][ T5848] cdc_wdm 8-1:1.0: skipping garbage
[  231.193455][ T5848] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[  231.193475][ T5848] cdc_wdm 8-1:1.0: Unknown control protocol
[  231.212724][ T9405] Process accounting paused
[  231.362017][ T9430] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  231.523269][ T9452] net_ratelimit: 12 callbacks suppressed
[  231.523285][ T9452] Set syz0 is full, maxelem 0 reached
[  231.540019][ T9446] netlink: 20 bytes leftover after parsing attributes in process `syz.1.767'.
[  231.846492][ T1165] IPVS: starting estimator thread 0...
[  231.899441][ T9455] blktrace: Concurrent blktraces are not allowed on sg0
[  231.950106][ T9461] IPVS: using max 27 ests per chain, 64800 per kthread
[  232.822116][ T9485] netlink: 'syz.0.776': attribute type 2 has an invalid length.
[  232.939999][ T5848] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  233.090019][ T5848] usb 9-1: Using ep0 maxpacket: 32
[  233.090859][ T5848] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  233.091859][ T5848] usb 9-1: config index 0 descriptor too short (expected 156, got 27)
[  233.091890][ T5848] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  233.091917][ T5848] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10
[  233.091939][ T5848] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024
[  233.091960][ T5848] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  233.091980][ T5848] usb 9-1: config 0 interface 0 has no altsetting 0
[  233.094092][ T5848] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  233.094108][ T5848] usb 9-1: Product: syz
[  233.094118][ T5848] usb 9-1: Manufacturer: syz
[  233.094127][ T5848] usb 9-1: SerialNumber: syz
[  233.145048][ T5848] usb 9-1: config 0 descriptor??
[  233.145976][ T9481] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  233.157123][ T5848] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  233.165596][ T5848] ldusb 9-1:0.0: LD USB Device #1 now attached to major 180 minor 1
[  233.358054][ T9481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.774'.
[  233.537432][ T5848] usb 9-1: USB disconnect, device number 8
[  233.544040][ T5848] ldusb 9-1:0.0: LD USB Device #1 now disconnected
[  233.817834][    T9] usb 8-1: USB disconnect, device number 25
[  234.017192][ T9496] sctp: [Deprecated]: syz.3.778 (pid 9496) Use of int in max_burst socket option.
[  234.017192][ T9496] Use struct sctp_assoc_value instead
[  234.210877][   T43] kauditd_printk_skb: 355 callbacks suppressed
[  234.210895][   T43] audit: type=1804 audit(1789325233.157:1445): pid=9497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.775" name="bus" dev="ramfs" ino=31392 res=1 errno=0
[  234.242798][   T43] audit: type=1804 audit(1789325233.187:1446): pid=9497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.775" name="bus" dev="ramfs" ino=31392 res=1 errno=0
[  234.342903][ T9504] overlayfs: failed to resolve './file1': -2
[  234.385889][ T9512] netlink: 'syz.4.782': attribute type 10 has an invalid length.
[  234.385912][ T9512] netlink: 40 bytes leftover after parsing attributes in process `syz.4.782'.
[  234.386325][ T9512] dummy0: entered promiscuous mode
[  234.404002][ T9512] bridge0: port 4(dummy0) entered blocking state
[  234.404125][ T9512] bridge0: port 4(dummy0) entered disabled state
[  234.404266][ T9512] dummy0: entered allmulticast mode
[  235.000016][ T9534] input: syz0 as /devices/virtual/input/input21
[  235.568376][ T9548] netlink: 68 bytes leftover after parsing attributes in process `syz.4.789'.
[  235.568400][ T9548] netlink: 68 bytes leftover after parsing attributes in process `syz.4.789'.
[  235.790016][    T9] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  235.826482][ T9560] netlink: 232 bytes leftover after parsing attributes in process `syz.3.793'.
[  235.826500][ T9560] netlink: 232 bytes leftover after parsing attributes in process `syz.3.793'.
[  235.826628][ T9560] netlink: 232 bytes leftover after parsing attributes in process `syz.3.793'.
[  235.826641][ T9560] netlink: 232 bytes leftover after parsing attributes in process `syz.3.793'.
[  235.939971][    T9] usb 6-1: Using ep0 maxpacket: 32
[  235.940511][    T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  235.941420][    T9] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  235.941446][    T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  235.941463][    T9] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10
[  235.941476][    T9] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024
[  235.941489][    T9] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  235.941502][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  235.943579][    T9] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  235.943593][    T9] usb 6-1: Product: syz
[  235.943600][    T9] usb 6-1: Manufacturer: syz
[  235.943607][    T9] usb 6-1: SerialNumber: syz
[  235.945551][    T9] usb 6-1: config 0 descriptor??
[  235.947477][ T9546] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  235.948710][    T9] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  235.994906][    T9] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  236.116921][ T9571] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  236.116952][ T9571] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  236.127899][ T9571] vhci_hcd vhci_hcd.0: Device attached
[  236.163044][ T9546] __nla_validate_parse: 62 callbacks suppressed
[  236.163062][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.790'.
[  236.283964][ T5850] usb 6-1: USB disconnect, device number 27
[  236.286480][ T5850] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  236.390037][    T9] usb 46-1: SetAddress Request (2) to port 0
[  236.390090][    T9] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd
[  236.664083][ T9574] wg2 speed is unknown, defaulting to 1000
[  236.693125][ T9572] vhci_hcd: connection reset by peer
[  236.693409][ T5820] vhci_hcd vhci_hcd.4: stop threads
[  236.693426][ T5820] vhci_hcd vhci_hcd.4: release socket
[  236.693453][ T5820] vhci_hcd vhci_hcd.4: disconnect device
[  236.765579][ T9574] wg2 speed is unknown, defaulting to 1000
[  236.802504][   T43] audit: type=1326 audit(1789325235.747:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.0.797" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000
[  236.802549][   T43] audit: type=1326 audit(1789325235.747:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.0.797" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000
[  236.816724][   T43] audit: type=1326 audit(1789325235.747:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.0.797" exe="/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf6fdefec code=0x7ffc0000
[  236.820361][   T43] audit: type=1326 audit(1789325235.757:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.0.797" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000
[  236.820574][   T43] audit: type=1326 audit(1789325235.767:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.0.797" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fdefec code=0x7ffc0000
[  236.820933][   T43] audit: type=1326 audit(1789325235.767:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.0.797" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000
[  236.822081][ T9574] wg2 speed is unknown, defaulting to 1000
[  236.822532][   T43] audit: type=1326 audit(1789325235.767:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.0.797" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000
[  236.884476][ T9584] sctp: [Deprecated]: syz.3.798 (pid 9584) Use of int in max_burst socket option.
[  236.884476][ T9584] Use struct sctp_assoc_value instead
[  237.067941][ T5848] wg2 speed is unknown, defaulting to 1000
[  237.068047][ T9574] infiniband syz2: set active
[  237.068063][ T9574] infiniband syz2: added wg2
[  237.116394][ T9574] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  237.116432][ T9574] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  237.116471][ T9574] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  237.141432][ T5850] usb 8-1: new full-speed USB device number 26 using dummy_hcd
[  237.188854][ T9574] RDS/IB: syz2: added
[  237.193907][ T9574] smc: adding ib device syz2 with port count 1
[  237.194046][ T9574] smc:    ib device syz2 port 1 has no pnetid
[  237.195959][ T5848] wg2 speed is unknown, defaulting to 1000
[  237.228139][ T9574] wg2 speed is unknown, defaulting to 1000
[  237.286258][ T9595] macsec2: entered promiscuous mode
[  237.286274][ T9595] macsec2: entered allmulticast mode
[  237.299838][ T5850] usb 8-1: not running at top speed; connect to a high speed hub
[  237.299857][ T5850] usb 8-1: New USB device found, idVendor=03f0, idProduct=2a76, bcdDevice=b8.a5
[  237.308783][ T5850] usb 8-1: config 11 has an invalid interface number: 31 but max is 2
[  237.308801][ T5850] usb 8-1: config 11 contains an unexpected descriptor of type 0x1, skipping
[  237.308811][ T5850] usb 8-1: config 11 has an invalid interface number: 188 but max is 2
[  237.308821][ T5850] usb 8-1: config 11 contains an unexpected descriptor of type 0x2, skipping
[  237.308830][ T5850] usb 8-1: config 11 contains an unexpected descriptor of type 0x2, skipping
[  237.308839][ T5850] usb 8-1: config 11 contains an unexpected descriptor of type 0x2, skipping
[  237.308848][ T5850] usb 8-1: config 11 has an invalid descriptor of length 1, skipping remainder of the config
[  237.308857][ T5850] usb 8-1: config 11 has 2 interfaces, different from the descriptor's value: 3
[  237.308867][ T5850] usb 8-1: config 11 has no interface number 0
[  237.308875][ T5850] usb 8-1: config 11 has no interface number 1
[  237.308898][ T5850] usb 8-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x1, skipping
[  237.308910][ T5850] usb 8-1: config 11 interface 31 altsetting 10 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  237.308923][ T5850] usb 8-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x5, skipping
[  237.308935][ T5850] usb 8-1: config 11 interface 31 altsetting 10 endpoint 0xB has invalid maxpacket 512, setting to 64
[  237.308948][ T5850] usb 8-1: config 11 interface 31 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  237.308959][ T5850] usb 8-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xB, skipping
[  237.308970][ T5850] usb 8-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xE, skipping
[  237.308988][ T5850] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x1, skipping
[  237.309000][ T5850] usb 8-1: config 11 interface 188 altsetting 27 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  237.309013][ T5850] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x5, skipping
[  237.309026][ T5850] usb 8-1: config 11 interface 188 altsetting 27 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  237.309039][ T5850] usb 8-1: config 11 interface 188 altsetting 27 has an invalid descriptor for endpoint zero, skipping
[  237.309049][ T5850] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xA, skipping
[  237.309060][ T5850] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xB, skipping
[  237.309072][ T5850] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping
[  237.309083][ T5850] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xC, skipping
[  237.309094][ T5850] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping
[  237.309105][ T5850] usb 8-1: config 11 interface 31 has no altsetting 0
[  237.309114][ T5850] usb 8-1: config 11 interface 188 has no altsetting 0
[  237.417976][ T5850] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.417992][ T5850] usb 8-1: Product: ã°�
[  237.417999][ T5850] usb 8-1: Manufacturer: Ч
[  237.418007][ T5850] usb 8-1: SerialNumber: ÐŽ
[  237.577233][ T9574] wg2 speed is unknown, defaulting to 1000
[  237.645423][ T9584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.798'.
[  237.645518][ T9584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.798'.
[  237.680201][   T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  237.680227][   T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  237.680248][   T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  237.680265][   T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  237.680383][ T9584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.798'.
[  237.680401][ T9584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.798'.
[  237.733342][ T5850] usb 8-1: USB disconnect, device number 26
[  237.946296][ T9574] wg2 speed is unknown, defaulting to 1000
[  238.120000][ T7138] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  238.168924][ T9574] wg2 speed is unknown, defaulting to 1000
[  238.262756][ T7138] usb 6-1: device descriptor read/64, error -71
[  238.388074][ T9621] 9p: Bad value for 'wfdno'
[  238.454121][ T9626] netlink: 20 bytes leftover after parsing attributes in process `syz.3.811'.
[  238.525803][ T7138] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  238.766179][ T9626] team0 (unregistering): Port device team_slave_0 removed
[  238.781613][ T9626] team0 (unregistering): Port device team_slave_1 removed
[  238.849986][ T7138] usb 6-1: device descriptor read/64, error -71
[  239.028256][ T7138] usb usb6-port1: attempt power cycle
[  239.130053][ T8404] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  239.280075][ T8404] usb 5-1: Using ep0 maxpacket: 32
[  239.281801][ T8404] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  239.284795][ T8404] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  239.284833][ T8404] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  239.284897][ T8404] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10
[  239.284922][ T8404] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024
[  239.284948][ T8404] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  239.284973][ T8404] usb 5-1: config 0 interface 0 has no altsetting 0
[  239.307576][ T8404] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  239.307602][ T8404] usb 5-1: Product: syz
[  239.307616][ T8404] usb 5-1: Manufacturer: syz
[  239.307629][ T8404] usb 5-1: SerialNumber: syz
[  239.343292][ T8404] usb 5-1: config 0 descriptor??
[  239.347070][ T9637] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  239.365231][ T8404] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  239.375177][ T8404] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  239.418901][ T9639] netlink: 68 bytes leftover after parsing attributes in process `syz.3.814'.
[  239.419008][ T9639] netlink: 68 bytes leftover after parsing attributes in process `syz.3.814'.
[  239.531762][ T9645] syz.3.816: vmalloc error: size 12288, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  239.531827][ T9645] CPU: 2 UID: 0 PID: 9645 Comm: syz.3.816 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  239.531850][ T9645] Tainted: [L]=SOFTLOCKUP
[  239.531856][ T9645] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  239.531865][ T9645] Call Trace:
[  239.531870][ T9645]  <TASK>
[  239.531877][ T9645]  dump_stack_lvl+0x100/0x190
[  239.531903][ T9645]  warn_alloc.cold+0x9e/0xb2
[  239.531921][ T9645]  ? __pfx_warn_alloc+0x10/0x10
[  239.531936][ T9645]  ? policy_nodemask+0xed/0x4f0
[  239.531960][ T9645]  ? alloc_pages_mpol+0x260/0x550
[  239.531982][ T9645]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  239.532002][ T9645]  ? find_held_lock+0x2b/0x80
[  239.532039][ T9645]  ? rcu_read_unlock+0x17/0x60
[  239.532068][ T9645]  __vmalloc_node_range_noprof+0x111c/0x1420
[  239.532097][ T9645]  ? kvm_dev_ioctl+0x154/0x1b50
[  239.532115][ T9645]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  239.532136][ T9645]  ? __pfx_vsnprintf+0x10/0x10
[  239.532158][ T9645]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  239.532179][ T9645]  ? lock_acquire+0x1d1/0x380
[  239.532200][ T9645]  ? rcu_is_watching+0x13/0xc0
[  239.532227][ T9645]  __kvmalloc_node_noprof+0x3da/0x9b0
[  239.532246][ T9645]  ? kvm_dev_ioctl+0x154/0x1b50
[  239.532260][ T9645]  ? alloc_fd+0x471/0x7a0
[  239.532278][ T9645]  ? kvm_dev_ioctl+0x154/0x1b50
[  239.532296][ T9645]  kvm_dev_ioctl+0x154/0x1b50
[  239.532312][ T9645]  ? __fget_files+0x34/0x3d0
[  239.532328][ T9645]  ? find_held_lock+0x2b/0x80
[  239.532343][ T9645]  ? hook_file_ioctl_common+0x140/0x440
[  239.532365][ T9645]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  239.532383][ T9645]  ? __fget_files+0x21f/0x3d0
[  239.532433][ T9645]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  239.532450][ T9645]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  239.532476][ T9645]  __do_fast_syscall_32+0x13a/0x8b0
[  239.532502][ T9645]  do_fast_syscall_32+0x32/0x70
[  239.532525][ T9645]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  239.532544][ T9645] RIP: 0023:0xf707efec
[  239.532564][ T9645] Code: Unable to access opcode bytes at 0xf707efc2.
[  239.532573][ T9645] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  239.532589][ T9645] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000ae01
[  239.532600][ T9645] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  239.532609][ T9645] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  239.532617][ T9645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  239.532626][ T9645] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  239.532645][ T9645]  </TASK>
[  239.534207][ T9645] Mem-Info:
[  239.534225][ T9645] active_anon:6202 inactive_anon:17766 isolated_anon:0
[  239.534225][ T9645]  active_file:3171 inactive_file:25835 isolated_file:0
[  239.534225][ T9645]  unevictable:1012 dirty:160 writeback:0
[  239.534225][ T9645]  slab_reclaimable:7557 slab_unreclaimable:60721
[  239.534225][ T9645]  mapped:24466 shmem:17869 pagetables:1400
[  239.534225][ T9645]  sec_pagetables:295 bounce:0
[  239.534225][ T9645]  kernel_misc_reclaimable:0
[  239.534225][ T9645]  free:28047 free_pcp:12992 free_cma:0
[  239.534266][ T9645] Node 0 active_anon:68kB inactive_anon:104kB active_file:0kB inactive_file:0kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9184kB pagetables:1376kB sec_pagetables:1128kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  239.534305][ T9645] Node 1 active_anon:24740kB inactive_anon:70960kB active_file:12684kB inactive_file:103340kB unevictable:4044kB isolated(anon):0kB isolated(file):0kB mapped:97828kB dirty:640kB writeback:0kB shmem:71476kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5868kB pagetables:4224kB sec_pagetables:52kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  239.534343][ T9645] Node 0 DMA free:1916kB boost:0kB min:744kB low:928kB high:1112kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:252kB local_pcp:252kB free_cma:0kB
[  239.534383][ T9645] lowmem_reserve[]: 0 277 277 277 277
[  239.534408][ T9645] Node 0 DMA32 free:19188kB boost:2048kB min:15848kB low:19296kB high:22744kB reserved_highatomic:0kB free_highatomic:0kB active_anon:68kB inactive_anon:104kB active_file:0kB inactive_file:0kB unevictable:4kB writepending:0kB zspages:8kB present:1032196kB managed:284568kB mlocked:4kB bounce:0kB free_pcp:12120kB local_pcp:8508kB free_cma:0kB
[  239.534449][ T9645] lowmem_reserve[]: 0 0 0 0 0
[  239.534473][ T9645] Node 1 DMA32 free:91084kB boost:0kB min:45988kB low:57484kB high:68980kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24740kB inactive_anon:70960kB active_file:12684kB inactive_file:103340kB unevictable:4044kB writepending:640kB zspages:1868kB present:1048432kB managed:948208kB mlocked:40kB bounce:0kB free_pcp:39596kB local_pcp:28408kB free_cma:0kB
[  239.534515][ T9645] lowmem_reserve[]: 0 0 0 0 0
[  239.534539][ T9645] Node 0 DMA: 13*4kB (UM) 1*8kB (M) 2*16kB (UM) 7*32kB (UM) 1*64kB (U) 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 1916kB
[  239.534723][ T9645] Node 0 DMA32: 5*4kB (E) 118*8kB (UME) 25*16kB (UE) 113*32kB (UME) 54*64kB (UME) 16*128kB (UME) 12*256kB (UM) 9*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 19188kB
[  239.534833][ T9645] Node 1 DMA32: 653*4kB (ME) 375*8kB (ME) 244*16kB (UM) 219*32kB (UME) 185*64kB (UME) 92*128kB (UME) 45*256kB (UME) 35*512kB (UME) 13*1024kB (UM) 2*2048kB (UM) 1*4096kB (U) = 91084kB
[  239.534956][ T9645] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  239.534967][ T9645] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  239.534978][ T9645] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  239.534990][ T9645] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=1 hugepages_size=2048kB
[  239.535000][ T9645] 47099 total pagecache pages
[  239.535006][ T9645] 221 pages in swap cache
[  239.535010][ T9645] Free swap  = 121476kB
[  239.535015][ T9645] Total swap = 124996kB
[  239.535021][ T9645] 524155 pages RAM
[  239.535025][ T9645] 0 pages HighMem/MovableOnly
[  239.535030][ T9645] 212121 pages reserved
[  239.535035][ T9645] 0 pages cma reserved
[  239.569966][ T7138] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  239.580876][ T7138] usb 6-1: device descriptor read/8, error -71
[  239.771937][ T9637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.813'.
[  239.842303][ T7138] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  239.843131][ T6636] usb 5-1: USB disconnect, device number 27
[  239.854527][ T6636] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  239.860963][ T7138] usb 6-1: device descriptor read/8, error -71
[  239.970343][ T7138] usb usb6-port1: unable to enumerate USB device
[  240.362714][ T9649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.817'.
[  241.450236][    T9] usb 46-1: device descriptor read/8, error -110
[  241.840435][    T9] usb usb46-port1: attempt power cycle
[  242.018215][ T9672] syz.1.822 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  242.401999][    T9] usb usb46-port1: unable to enumerate USB device
[  242.650091][ T6636] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  242.799986][ T6636] usb 5-1: Using ep0 maxpacket: 32
[  242.804926][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.829'.
[  242.811719][ T9691] vlan2: entered allmulticast mode
[  242.812037][ T9691] bridge0: port 5(vlan2) entered blocking state
[  242.812107][ T9691] bridge0: port 5(vlan2) entered disabled state
[  242.813417][ T9691] vlan2: entered promiscuous mode
[  242.821560][ T6636] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  242.837116][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.829'.
[  242.866464][ T6636] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  242.866492][ T6636] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  242.866511][ T6636] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10
[  242.866525][ T6636] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024
[  242.866539][ T6636] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  242.866573][ T6636] usb 5-1: config 0 interface 0 has no altsetting 0
[  242.922364][ T6636] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  242.922391][ T6636] usb 5-1: Product: syz
[  242.922405][ T6636] usb 5-1: Manufacturer: syz
[  242.922417][ T6636] usb 5-1: SerialNumber: syz
[  242.930201][ T6636] usb 5-1: config 0 descriptor??
[  242.930994][ T9676] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  242.936141][ T6636] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  242.954305][ T6636] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  243.146790][ T9676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.826'.
[  243.222946][ T6636] usb 5-1: USB disconnect, device number 28
[  243.224320][ T6636] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  243.614323][ T9711] sctp: [Deprecated]: syz.3.833 (pid 9711) Use of int in max_burst socket option.
[  243.614323][ T9711] Use struct sctp_assoc_value instead
[  243.643909][ T9712] wg2 speed is unknown, defaulting to 1000
[  243.798721][ T9714] fuse: Bad value for 'rootmode'
[  243.804626][ T9714] Invalid source name
[  243.804636][ T9714] UBIFS error (pid: 9714): cannot open "./file0", error -22
[  243.870396][ T9714] XFS (nullb0): Invalid superblock magic number
[  244.876238][ T9731] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  245.343457][ T9744] netlink: 56 bytes leftover after parsing attributes in process `syz.3.842'.
[  245.656345][ T9747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.840'.
[  245.956150][ T9747] netlink: 'syz.0.840': attribute type 2 has an invalid length.
[  246.199947][ T8404] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  246.300023][   T58] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  246.353118][ T9755] netlink: 20 bytes leftover after parsing attributes in process `syz.0.845'.
[  246.353152][ T9755] netlink: 20 bytes leftover after parsing attributes in process `syz.0.845'.
[  246.360750][ T9755] geneve2: entered promiscuous mode
[  246.367220][ T8404] usb 6-1: Using ep0 maxpacket: 32
[  246.368003][ T8404] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  246.368909][ T8404] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  246.368927][ T8404] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  246.368946][ T8404] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10
[  246.368959][ T8404] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024
[  246.368972][ T8404] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  246.368986][ T8404] usb 6-1: config 0 interface 0 has no altsetting 0
[  246.401812][ T8404] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  246.401826][ T8404] usb 6-1: Product: syz
[  246.401834][ T8404] usb 6-1: Manufacturer: syz
[  246.401841][ T8404] usb 6-1: SerialNumber: syz
[  246.403111][ T8404] usb 6-1: config 0 descriptor??
[  246.404079][ T9751] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  246.407279][ T8404] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  246.408379][ T8404] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  246.452095][   T58] usb 9-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  246.452950][   T58] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  246.452970][   T58] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  246.452996][   T58] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.460179][   T58] spcp8x5 9-1:1.0: SPCP8x5 converter detected
[  246.467837][   T58] usb 9-1: SPCP8x5 converter now attached to ttyUSB0
[  246.628270][ T9750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.843'.
[  246.739202][ T9771] Invalid ELF header magic: != ELF
[  246.967499][   T58] usb 6-1: USB disconnect, device number 32
[  246.975282][   T58] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  247.022301][ T9775] Set syz0 is full, maxelem 0 reached
[  247.656297][ T9787] netlink: 20 bytes leftover after parsing attributes in process `syz.1.850'.
[  247.811951][ T9792] netlink: 260 bytes leftover after parsing attributes in process `syz.3.852'.
[  247.830253][ T9794] kAFS: unparsable volume name
[  247.965136][ T9789] null_blk: disk my_zoned_dev created
[  249.060134][ T6636] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  249.100068][   T58] usb 9-1: USB disconnect, device number 9
[  249.132068][   T58] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  249.132349][   T58] spcp8x5 9-1:1.0: device disconnected
[  249.210243][ T6636] usb 6-1: Using ep0 maxpacket: 32
[  249.211490][ T6636] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  249.212470][ T6636] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  249.212489][ T6636] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  249.212508][ T6636] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10
[  249.212521][ T6636] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024
[  249.212534][ T6636] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  249.212547][ T6636] usb 6-1: config 0 interface 0 has no altsetting 0
[  249.213436][ T9820] bridge1: entered promiscuous mode
[  249.213452][ T9820] bridge1: entered allmulticast mode
[  249.215232][ T6636] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  249.215246][ T6636] usb 6-1: Product: syz
[  249.215253][ T6636] usb 6-1: Manufacturer: syz
[  249.215260][ T6636] usb 6-1: SerialNumber: syz
[  249.219156][ T6636] usb 6-1: config 0 descriptor??
[  249.219776][ T9811] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  249.224819][ T6636] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  249.234007][ T6636] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  249.426338][ T9811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.858'.
[  249.440849][ T8404] usb 6-1: USB disconnect, device number 33
[  249.444151][ T8404] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  249.846996][ T6636] Process accounting resumed
[  249.936057][ T9831] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  250.441876][ T9842] gadgetfs: bound to dummy_udc driver
[  250.734810][ T9848] netlink: 'syz.1.870': attribute type 1 has an invalid length.
[  250.773177][ T9848] bond2: entered promiscuous mode
[  250.775197][ T9848] 8021q: adding VLAN 0 to HW filter on device bond2
[  250.793634][ T9848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.870'.
[  250.797170][ T9848] bond2: entered allmulticast mode
[  250.811800][ T9848] block nbd1: server does not support multiple connections per device.
[  250.812012][ T9848] block nbd1: shutting down sockets
[  250.825891][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory
[  250.858897][ T9848] bond2: (slave bridge3): making interface the new active one
[  250.858912][ T9848] bridge3: entered promiscuous mode
[  250.859031][ T9848] bridge3: entered allmulticast mode
[  250.884188][ T9848] bond2: (slave bridge3): Enslaving as an active interface with an up link
[  251.360119][ T8404] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  251.418636][ T9864] netlink: 44 bytes leftover after parsing attributes in process `syz.3.875'.
[  251.419008][ T9864] netlink: 44 bytes leftover after parsing attributes in process `syz.3.875'.
[  251.419290][ T9864] netlink: 44 bytes leftover after parsing attributes in process `syz.3.875'.
[  251.432781][ T9864] netlink: 44 bytes leftover after parsing attributes in process `syz.3.875'.
[  251.433082][ T9864] netlink: 44 bytes leftover after parsing attributes in process `syz.3.875'.
[  251.433348][ T9864] netlink: 44 bytes leftover after parsing attributes in process `syz.3.875'.
[  251.433598][ T9864] netlink: 44 bytes leftover after parsing attributes in process `syz.3.875'.
[  251.519971][ T8404] usb 6-1: Using ep0 maxpacket: 32
[  251.520699][ T8404] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  251.524302][ T8404] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  251.524332][ T8404] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  251.524359][ T8404] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10
[  251.524381][ T8404] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024
[  251.524405][ T8404] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  251.524426][ T8404] usb 6-1: config 0 interface 0 has no altsetting 0
[  251.528055][ T8404] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  251.528082][ T8404] usb 6-1: Product: syz
[  251.528094][ T8404] usb 6-1: Manufacturer: syz
[  251.528106][ T8404] usb 6-1: SerialNumber: syz
[  251.531699][ T8404] usb 6-1: config 0 descriptor??
[  251.532399][ T9858] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  251.534112][ T8404] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  251.565067][ T8404] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  251.765126][ T8404] usb 6-1: USB disconnect, device number 34
[  251.767842][ T8404] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  252.311187][ T9888] Invalid ELF header magic: != ELF
[  252.577345][ T5745] udevd[5745]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory
[  252.625911][ T5745] udevd[5745]: inotify_add_watch(7, /dev/pmem0, 10) failed: No such file or directory
[  252.835181][ T9904] __nla_validate_parse: 28 callbacks suppressed
[  252.835194][ T9904] netlink: 3 bytes leftover after parsing attributes in process `syz.4.887'.
[  252.876642][ T9906] netlink: 32 bytes leftover after parsing attributes in process `syz.4.888'.
[  252.975800][ T9907] input: syz0 as /devices/virtual/input/input23
[  253.131953][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.890'.
[  253.137949][ T9913] nvmet: failed to open file ./file0: (-2)
[  253.257504][ T9920] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  253.324572][ T9927] netlink: 'syz.1.893': attribute type 1 has an invalid length.
[  253.530471][ T8404] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  253.560904][ T5850] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  253.690152][ T8404] usb 5-1: Using ep0 maxpacket: 32
[  253.690613][ T8404] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  253.691428][ T8404] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  253.691447][ T8404] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  253.691466][ T8404] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10
[  253.691480][ T8404] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024
[  253.691494][ T8404] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  253.691508][ T8404] usb 5-1: config 0 interface 0 has no altsetting 0
[  253.693151][ T8404] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  253.693166][ T8404] usb 5-1: Product: syz
[  253.693173][ T8404] usb 5-1: Manufacturer: syz
[  253.693182][ T8404] usb 5-1: SerialNumber: syz
[  253.694514][ T8404] usb 5-1: config 0 descriptor??
[  253.695333][ T9918] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  253.697763][ T8404] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  253.698830][ T8404] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  253.709947][ T5850] usb 8-1: device descriptor read/64, error -71
[  253.905216][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.891'.
[  253.925119][ T8404] usb 5-1: USB disconnect, device number 29
[  253.928518][ T8404] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  253.960788][ T5850] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[  254.100006][ T5850] usb 8-1: device descriptor read/64, error -71
[  254.156452][ T9935] wg2 speed is unknown, defaulting to 1000
[  254.220521][ T5850] usb usb8-port1: attempt power cycle
[  254.473659][ T9940] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead
[  254.473675][ T9940] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead
[  254.473687][ T9940] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead
[  254.473697][ T9940] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead
[  254.473707][ T9940] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead
[  254.473719][ T9940] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0140 instead
[  254.473728][ T9940] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000084: 0x0010 instead
[  254.473742][ T9940] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead
[  254.473751][ T9940] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead
[  254.473760][ T9940] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead
[  254.473768][ T9940] jffs2: Further such events for this erase block will not be printed
[  254.473802][ T9940] jffs2: Empty flash at 0x00000308 ends at 0x0000030c
[  254.473810][ T9940] jffs2: Empty flash at 0x00000330 ends at 0x00000334
[  254.473818][ T9940] jffs2: Empty flash at 0x0000034c ends at 0x00000350
[  254.473897][ T9940] jffs2: Empty flash at 0x00000950 ends at 0x00000954
[  254.493964][ T9940] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  254.493979][ T9940] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[  254.560072][ T5850] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[  254.569123][ T9941] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  254.590963][ T5850] usb 8-1: device descriptor read/8, error -71
[  254.625029][ T9941] FAULT_INJECTION: forcing a failure.
[  254.625029][ T9941] name failslab, interval 1, probability 0, space 0, times 0
[  254.625054][ T9941] CPU: 0 UID: 0 PID: 9941 Comm: syz.1.898 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  254.625072][ T9941] Tainted: [L]=SOFTLOCKUP
[  254.625077][ T9941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  254.625084][ T9941] Call Trace:
[  254.625089][ T9941]  <TASK>
[  254.625093][ T9941]  dump_stack_lvl+0x100/0x190
[  254.625113][ T9941]  should_fail_ex.cold+0x5/0xa
[  254.625132][ T9941]  should_failslab+0xc2/0x120
[  254.625148][ T9941]  __kvmalloc_node_noprof+0x113/0x9b0
[  254.625161][ T9941]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  254.625180][ T9941]  ? bpf_int_jit_compile+0xd20/0x1820
[  254.625197][ T9941]  bpf_int_jit_compile+0xd20/0x1820
[  254.625214][ T9941]  ? __pfx_bpf_int_jit_compile+0x10/0x10
[  254.625235][ T9941]  __bpf_prog_select_runtime+0x3dc/0x970
[  254.625248][ T9941]  ? __asan_memcpy+0x3c/0x60
[  254.625260][ T9941]  bpf_prepare_filter+0xd32/0x11e0
[  254.625279][ T9941]  ? __might_fault+0xc5/0x140
[  254.625295][ T9941]  ? __pfx_bpf_prepare_filter+0x10/0x10
[  254.625316][ T9941]  bpf_prog_create_from_user+0x1df/0x2e0
[  254.625335][ T9941]  packet_setsockopt+0x13be/0x2380
[  254.625348][ T9941]  ? __lock_acquire+0x5c0/0x1f40
[  254.625365][ T9941]  ? __pfx_packet_setsockopt+0x10/0x10
[  254.625379][ T9941]  ? aa_sk_perm+0x389/0xab0
[  254.625397][ T9941]  ? __pfx_aa_sk_perm+0x10/0x10
[  254.625412][ T9941]  ? lock_acquire+0x1d1/0x380
[  254.625426][ T9941]  ? __fget_files+0x34/0x3d0
[  254.625438][ T9941]  ? find_held_lock+0x2b/0x80
[  254.625451][ T9941]  ? aa_sock_opt_perm+0x114/0x1e0
[  254.625464][ T9941]  ? __pfx_packet_setsockopt+0x10/0x10
[  254.625479][ T9941]  do_sock_setsockopt+0xf3/0x1d0
[  254.625497][ T9941]  __sys_setsockopt+0x119/0x190
[  254.625514][ T9941]  __ia32_sys_setsockopt+0xbc/0x160
[  254.625529][ T9941]  ? __do_fast_syscall_32+0xb3/0x8b0
[  254.625546][ T9941]  ? lockdep_hardirqs_on+0x7d/0x110
[  254.625560][ T9941]  __do_fast_syscall_32+0x13a/0x8b0
[  254.625576][ T9941]  ? lockdep_hardirqs_on+0x7d/0x110
[  254.625592][ T9941]  do_fast_syscall_32+0x32/0x70
[  254.625612][ T9941]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  254.625628][ T9941] RIP: 0023:0xf708efec
[  254.625642][ T9941] Code: Unable to access opcode bytes at 0xf708efc2.
[  254.625647][ T9941] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e
[  254.625658][ T9941] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000107
[  254.625664][ T9941] RDX: 0000000000000016 RSI: 00000000800000c0 RDI: 0000000000000008
[  254.625671][ T9941] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  254.625677][ T9941] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  254.625683][ T9941] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  254.625696][ T9941]  </TASK>
[  254.728504][ T9944] raw_sendmsg: syz.0.899 forgot to set AF_INET. Fix it!
[  254.841457][ T5850] usb 8-1: new high-speed USB device number 30 using dummy_hcd
[  254.860442][ T5850] usb 8-1: device descriptor read/8, error -71
[  254.970182][ T5850] usb usb8-port1: unable to enumerate USB device
[  255.096271][ T5850] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  255.096290][ T5850] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  255.107746][ T5850] hid-generic 0000:0000:0000.0004: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  255.121558][ T9963] udevd[9963]: open /dev/null failed: No such file or directory
[  255.149460][ T9964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.903'.
[  255.149483][ T9964] netlink: 136 bytes leftover after parsing attributes in process `syz.0.903'.
[  255.532210][ T1439] ieee802154 phy0 wpan0: encryption failed: -22
[  255.583141][ T9981] sg_write: data in/out 25419/217 bytes for SCSI command 0x0-- guessing data in;
[  255.583141][ T9981]    program syz.4.909 not setting count and/or reply_len properly
[  255.644141][ T9983] binder: 9982:9983 ioctl c0306201 80000080 returned -14
[  255.644488][ T9983] binder: 9982:9983 ioctl c0306201 80000000 returned -22
[  255.696802][ T9985] netlink: 'syz.4.911': attribute type 10 has an invalid length.
[  255.706054][ T9985] team0: Device wg2 is of different type
[  255.717388][ T8404] wg2 speed is unknown, defaulting to 1000
[  255.725874][ T5850] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  255.726893][ T5848] wg2 speed is unknown, defaulting to 1000
[  255.726917][ T5848] syz2: Port: 1 Link DOWN
[  255.726962][    T9] wg2 speed is unknown, defaulting to 1000
[  255.732712][ T8404] wg2 speed is unknown, defaulting to 1000
[  255.789394][ T9988] netlink: 60 bytes leftover after parsing attributes in process `syz.4.912'.
[  255.795566][ T9989] netlink: 60 bytes leftover after parsing attributes in process `syz.4.912'.
[  255.803929][ T9988] IPVS: sed: TCP 127.0.0.1:21 - no destination available
[  255.870408][ T5850] usb 6-1: Using ep0 maxpacket: 32
[  255.871309][ T5850] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  255.872211][ T5850] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  255.872231][ T5850] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  255.872248][ T5850] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10
[  255.872261][ T5850] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024
[  255.872274][ T5850] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  255.872416][ T5850] usb 6-1: config 0 interface 0 has no altsetting 0
[  255.873903][ T5850] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  255.873915][ T5850] usb 6-1: Product: syz
[  255.873923][ T5850] usb 6-1: Manufacturer: syz
[  255.873930][ T5850] usb 6-1: SerialNumber: syz
[  255.877189][ T5850] usb 6-1: config 0 descriptor??
[  255.877631][ T9977] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  255.881425][ T5850] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  255.883156][ T5850] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  256.082379][ T9977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.907'.
[  257.068381][T10014] bond4: (slave syz_tun): Removing an active aggregator
[  257.076704][T10014] bond4: (slave syz_tun): Releasing backup interface
[  257.085268][T10014] bridge_slave_0: left allmulticast mode
[  257.085284][T10014] bridge_slave_0: left promiscuous mode
[  257.085393][T10014] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.087815][T10014] bridge_slave_1: left allmulticast mode
[  257.087830][T10014] bridge_slave_1: left promiscuous mode
[  257.087923][T10014] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.113166][T10014] bond0: (slave bond_slave_0): Releasing backup interface
[  257.115459][T10015] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  257.127891][T10014] bond0: (slave bond_slave_1): Releasing backup interface
[  257.129291][T10015] VFS: Can't find a romfs filesystem on dev nullb0.
[  257.129291][T10015] 
[  257.140826][T10014] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  257.140840][T10014] batman_adv: batadv0: Removing interface: batadv_slave_0
[  257.142759][T10014] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  257.142769][T10014] batman_adv: batadv0: Removing interface: batadv_slave_1
[  257.145615][T10014] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  257.296318][   T43] audit: type=1804 audit(1789325256.237:1454): pid=10019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.920" name="bus" dev="ramfs" ino=35856 res=1 errno=0
[  257.297002][   T43] audit: type=1804 audit(1789325256.237:1455): pid=10019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.920" name="bus" dev="ramfs" ino=35856 res=1 errno=0
[  258.212369][T10035] IPVS: sed: TCP 127.0.0.1:21 - no destination available
[  258.212563][    C0] IPVS: sed: TCP 127.0.0.1:21 - no destination available
[  258.519222][   T58] usb 6-1: USB disconnect, device number 35
[  258.524886][   T58] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  258.620788][ T6636] usb 5-1: new low-speed USB device number 30 using dummy_hcd
[  258.653298][T10052] netlink: del zone limit has 4 unknown bytes
[  258.660919][T10052] bridge2: entered promiscuous mode
[  258.660932][T10052] bridge2: entered allmulticast mode
[  258.771320][ T6636] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  258.772160][ T6636] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  258.772179][ T6636] usb 5-1: config 0 has no interface number 0
[  258.772214][ T6636] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  258.772238][ T6636] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  258.772272][ T6636] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.776055][ T6636] usb 5-1: config 0 descriptor??
[  258.776502][T10038] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  258.779125][ T6636] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  258.839371][T10063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  258.892999][T10070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  258.908550][T10072] netlink: 28 bytes leftover after parsing attributes in process `syz.1.937'.
[  258.945263][T10063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  258.946323][   T43] audit: type=1400 audit(1789325257.887:1456): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=10062 comm="syz.3.934"
[  258.969353][T10063] wg2 speed is unknown, defaulting to 1000
[  258.995835][    T9] usb 5-1: USB disconnect, device number 30
[  259.051245][ T5850] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  259.199976][ T5850] usb 9-1: Using ep0 maxpacket: 32
[  259.200519][ T5850] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  259.201368][ T5850] usb 9-1: config index 0 descriptor too short (expected 156, got 27)
[  259.201386][ T5850] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  259.201403][ T5850] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10
[  259.201416][ T5850] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024
[  259.201429][ T5850] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  259.201441][ T5850] usb 9-1: config 0 interface 0 has no altsetting 0
[  259.203117][ T5850] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  259.203130][ T5850] usb 9-1: Product: syz
[  259.203137][ T5850] usb 9-1: Manufacturer: syz
[  259.203144][ T5850] usb 9-1: SerialNumber: syz
[  259.207346][ T5850] usb 9-1: config 0 descriptor??
[  259.208038][T10067] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  259.211223][ T5850] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  259.214134][ T5850] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  259.423374][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.935'.
[  260.162602][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.944'.
[  261.792785][T10156] ufs: failed to set blocksize
[  261.842268][ T6636] usb 9-1: USB disconnect, device number 10
[  261.854379][ T6636] ldusb 9-1:0.0: LD USB Device #0 now disconnected
[  261.933916][ T5745] udevd[5745]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory
[  262.477676][T10173] netlink: 40 bytes leftover after parsing attributes in process `syz.4.957'.
[  262.639795][T10163] Invalid logical block size (948)
[  262.661573][ T5745] udevd[5745]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory
[  262.672923][ T5745] udevd[5745]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory
[  262.861953][T10177] ptrace attach of "/syz-executor exec"[5754] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               
[  262.967527][T10181] netlink: 'syz.1.959': attribute type 13 has an invalid length.
[  263.009527][T10186] fuse: Unknown parameter '0x00000000000000030x0000000000000005'
[  264.109576][T10218] netlink: 28 bytes leftover after parsing attributes in process `syz.4.966'.
[  264.110768][T10211] netlink: 28 bytes leftover after parsing attributes in process `syz.4.966'.
[  264.151042][T10214] netlink: 'syz.3.967': attribute type 10 has an invalid length.
[  264.187027][T10214] syz_tun: entered promiscuous mode
[  264.198142][T10214] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  264.223515][T10214] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  264.648646][T10124] syz.3.943 (10124) used greatest stack depth: 18288 bytes left
[  264.905433][T10232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.972'.
[  264.957481][T10234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.972'.
[  265.074285][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.973'.
[  265.335216][T10248] gadgetfs: bound to dummy_udc driver
[  265.570124][    T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  265.570335][    C0] gadgetfs: connected
[  265.571752][    T9] gadgetfs: disconnected
[  265.710127][ T5850] usb 9-1: new low-speed USB device number 11 using dummy_hcd
[  265.839974][ T5850] usb 9-1: device descriptor read/64, error -71
[  265.955724][T10253] syzkaller0: entered promiscuous mode
[  265.955740][T10253] syzkaller0: entered allmulticast mode
[  266.079977][ T5850] usb 9-1: new low-speed USB device number 12 using dummy_hcd
[  266.210084][ T5850] usb 9-1: device descriptor read/64, error -71
[  266.321697][ T5850] usb usb9-port1: attempt power cycle
[  266.377660][T10260] Set syz0 is full, maxelem 0 reached
[  266.660008][ T5850] usb 9-1: new low-speed USB device number 13 using dummy_hcd
[  266.682236][ T5850] usb 9-1: device descriptor read/8, error -71
[  266.920186][ T5850] usb 9-1: new low-speed USB device number 14 using dummy_hcd
[  266.943089][ T5850] usb 9-1: device descriptor read/8, error -71
[  267.056259][ T5850] usb usb9-port1: unable to enumerate USB device
[  268.713055][T10273] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  270.197571][   T43] audit: type=1326 audit(1789325269.137:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.0.989" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000
[  270.197602][   T43] audit: type=1326 audit(1789325269.137:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.0.989" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000
[  270.197623][   T43] audit: type=1326 audit(1789325269.137:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.0.989" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71175ab code=0x7ffc0000
[  270.197643][   T43] audit: type=1326 audit(1789325269.137:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.0.989" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000
[  270.197701][   T43] audit: type=1326 audit(1789325269.137:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.0.989" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000
[  270.197723][   T43] audit: type=1326 audit(1789325269.137:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.0.989" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdefec code=0x7ffc0000
[  270.197742][   T43] audit: type=1326 audit(1789325269.137:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.0.989" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000
[  270.197761][   T43] audit: type=1326 audit(1789325269.137:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.0.989" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000
[  270.197782][   T43] audit: type=1326 audit(1789325269.137:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.0.989" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf6fdefec code=0x7ffc0000
[  270.198806][   T43] audit: type=1326 audit(1789325269.137:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.0.989" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000
[  270.199156][T10291] IPVS: ip_vs_add_dest(): server weight less than zero
[  270.744783][T10320] overlayfs: failed to resolve './file1': -2
[  270.767666][T10321] futex_wake_op: syz.4.998 tries to shift op by 144; fix this program
[  270.820027][ T5850] usb 8-1: new high-speed USB device number 31 using dummy_hcd
[  270.843999][T10320] »»»»»»: renamed from vlan0
[  270.970434][ T5850] usb 8-1: Using ep0 maxpacket: 32
[  270.971005][ T5850] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  270.972002][ T5850] usb 8-1: config index 0 descriptor too short (expected 156, got 27)
[  270.972021][ T5850] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  270.972038][ T5850] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10
[  270.972051][ T5850] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024
[  270.972064][ T5850] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  270.972076][ T5850] usb 8-1: config 0 interface 0 has no altsetting 0
[  270.974021][ T5850] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  270.974033][ T5850] usb 8-1: Product: syz
[  270.974040][ T5850] usb 8-1: Manufacturer: syz
[  270.974048][ T5850] usb 8-1: SerialNumber: syz
[  270.975620][ T5850] usb 8-1: config 0 descriptor??
[  270.978197][T10307] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  270.979356][ T5850] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  271.031895][ T5850] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  271.167731][T10333] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size
[  271.181716][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.994'.
[  271.269966][ T5842] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  271.415578][   T58] usb 8-1: USB disconnect, device number 31
[  271.418025][   T58] ldusb 8-1:0.0: LD USB Device #0 now disconnected
[  271.441379][ T5842] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  271.442451][ T5842] usb 6-1: config index 0 descriptor too short (expected 39, got 27)
[  271.442485][ T5842] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  271.442500][ T5842] usb 6-1: config 0 interface 0 has no altsetting 0
[  271.444462][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  271.444479][ T5842] usb 6-1: Product: syz
[  271.444488][ T5842] usb 6-1: Manufacturer: syz
[  271.444497][ T5842] usb 6-1: SerialNumber: syz
[  271.469430][ T5842] usb 6-1: config 0 descriptor??
[  271.474622][ T5842] hub 6-1:0.0: bad descriptor, ignoring hub
[  271.474645][ T5842] hub 6-1:0.0: probe with driver hub failed with error -5
[  271.483942][ T5842] usb 6-1: selecting invalid altsetting 0
[  271.551006][T10357] wg2 speed is unknown, defaulting to 1000
[  271.787638][T10326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'.
[  271.789030][T10326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.789405][T10326] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  271.808808][T10360] wg2 speed is unknown, defaulting to 1000
[  272.195983][T10371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1009'.
[  272.209215][T10371] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  272.351679][ T6636] usb 6-1: USB disconnect, device number 36
[  272.586484][T10375] null_blk: disk nullb1 created
[  272.955329][T10386] pim6reg: entered allmulticast mode
[  272.955662][T10386] pim6reg: left allmulticast mode
[  273.007350][T10387] 9pnet_virtio: no channels available for device syz
[  273.135850][T10390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1012'.
[  273.760802][T10406] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  273.760820][T10406] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  273.764580][T10406] vhci_hcd vhci_hcd.0: Device attached
[  273.776789][ T5850] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  273.790627][T10408] vhci_hcd: connection closed
[  273.791416][ T5797] vhci_hcd vhci_hcd.3: stop threads
[  273.791430][ T5797] vhci_hcd vhci_hcd.3: release socket
[  273.791447][ T5797] vhci_hcd vhci_hcd.3: disconnect device
[  273.863830][T10411] wg2 speed is unknown, defaulting to 1000
[  273.930001][ T5850] usb 6-1: Using ep0 maxpacket: 32
[  273.930531][ T5850] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  273.931344][ T5850] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  273.931363][ T5850] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  273.931381][ T5850] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10
[  273.931394][ T5850] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024
[  273.931407][ T5850] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  273.931420][ T5850] usb 6-1: config 0 interface 0 has no altsetting 0
[  273.933044][ T5850] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  273.933057][ T5850] usb 6-1: Product: syz
[  273.933064][ T5850] usb 6-1: Manufacturer: syz
[  273.933071][ T5850] usb 6-1: SerialNumber: syz
[  273.934579][ T5850] usb 6-1: config 0 descriptor??
[  273.935018][T10398] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  273.935998][ T5850] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  273.936876][ T5850] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  274.138883][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1015'.
[  274.311541][ T5850] usb 6-1: USB disconnect, device number 37
[  274.314683][ T5850] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  274.317779][T10423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1020'.
[  274.982634][T10435] vlan0: entered promiscuous mode
[  274.982649][T10435] hsr0: entered promiscuous mode
[  274.982808][T10435] vlan0: entered allmulticast mode
[  274.982816][T10435] hsr0: entered allmulticast mode
[  274.982823][T10435] hsr_slave_0: entered allmulticast mode
[  274.982894][T10435] hsr_slave_1: entered allmulticast mode
[  275.181523][T10438] nvme nvme0: failed to connect socket: -111
[  276.011998][T10483] netlink: 'syz.1.1032': attribute type 5 has an invalid length.
[  276.222807][    T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  276.280357][ T8404] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  276.370318][    T9] usb 5-1: Using ep0 maxpacket: 32
[  276.370919][    T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  276.371846][    T9] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  276.371865][    T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  276.371885][    T9] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10
[  276.371900][    T9] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024
[  276.371914][    T9] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  276.371929][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  276.373866][    T9] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  276.373886][    T9] usb 5-1: Product: syz
[  276.373898][    T9] usb 5-1: Manufacturer: syz
[  276.373909][    T9] usb 5-1: SerialNumber: syz
[  276.376654][    T9] usb 5-1: config 0 descriptor??
[  276.378821][T10481] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  276.422778][T10491] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1035'.
[  276.423202][    T9] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  276.423935][T10491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1035'.
[  276.427150][    T9] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  276.444000][ T8404] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  276.445085][ T8404] usb 6-1: config 0 interface 0 altsetting 255 has an invalid descriptor for endpoint zero, skipping
[  276.445105][ T8404] usb 6-1: config 0 interface 0 has no altsetting 0
[  276.460511][ T8404] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  276.460532][ T8404] usb 6-1: Product: syz
[  276.460542][ T8404] usb 6-1: Manufacturer: syz
[  276.460559][ T8404] usb 6-1: SerialNumber: syz
[  276.466934][ T8404] usb 6-1: config 0 descriptor??
[  276.517989][ T8404] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22
[  276.563044][T10495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1035'.
[  276.565110][ T5745] udevd[5745]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  276.567142][T10495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1035'.
[  276.595612][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'.
[  276.792814][    T9] usb 5-1: USB disconnect, device number 32
[  276.794170][    T9] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  277.082615][   T58] usb 6-1: USB disconnect, device number 38
[  277.264436][T10524] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  277.265026][T10527] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  277.323441][T10524] binder: 10522:10524 ioctl c0306201 80000180 returned -14
[  277.323781][T10524] binder: 10522:10524 ioctl c0306201 80000180 returned -14
[  277.992372][T10538] hub 1-0:1.0: USB hub found
[  277.996054][T10538] hub 1-0:1.0: 2 ports detected
[  278.197063][T10566] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1045'.
[  278.338939][T10570] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1045'.
[  279.242125][T10593] wg2 speed is unknown, defaulting to 1000
[  279.402340][T10605] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead
[  279.402364][T10605] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead
[  279.402407][T10605] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead
[  279.402421][T10605] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead
[  279.402435][T10605] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead
[  279.402452][T10605] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0140 instead
[  279.402465][T10605] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000084: 0x0010 instead
[  279.402488][T10605] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead
[  279.402501][T10605] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead
[  279.402521][T10605] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead
[  279.402533][T10605] jffs2: Further such events for this erase block will not be printed
[  279.402579][T10605] jffs2: Empty flash at 0x00000308 ends at 0x0000030c
[  279.402593][T10605] jffs2: Empty flash at 0x00000330 ends at 0x00000334
[  279.402604][T10605] jffs2: Empty flash at 0x0000034c ends at 0x00000350
[  279.402769][T10605] jffs2: Empty flash at 0x00000950 ends at 0x00000954
[  279.418016][T10605] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  279.418031][T10605] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[  279.571528][T10607] 8021q: adding VLAN 0 to HW filter on device bond5
[  279.597608][T10607] sctp: [Deprecated]: syz.3.1051 (pid 10607) Use of struct sctp_assoc_value in delayed_ack socket option.
[  279.597608][T10607] Use struct sctp_sack_info instead
[  279.597648][T10614] sctp: [Deprecated]: syz.3.1051 (pid 10614) Use of struct sctp_assoc_value in delayed_ack socket option.
[  279.597648][T10614] Use struct sctp_sack_info instead
[  279.637369][T10607] bond5: (slave bridge1): making interface the new active one
[  279.638212][T10607] bond5: (slave bridge1): Enslaving as an active interface with an up link
[  279.646487][ T5098] Bluetooth: hci4: unexpected event for opcode 0x0c6d
[  279.657731][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1051'.
[  279.657750][T10607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1051'.
[  279.673317][T10607] 8021q: adding VLAN 0 to HW filter on device bond0
[  279.676191][T10607] bond5: (slave bond0): making interface the new active one
[  279.685965][T10607] bond0: entered promiscuous mode
[  279.686458][T10607] bond5: (slave bond0): Enslaving as an active interface with an up link
[  279.722919][T10607] bond5 (unregistering): (slave bridge1): Releasing active interface
[  279.735414][T10607] bond5 (unregistering): (slave bond0): Releasing active interface
[  279.735431][T10607] bond0: left promiscuous mode
[  279.746453][T10607] bond5 (unregistering): Released all slaves
[  280.361099][T10628] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  281.126386][T10658] wg2 speed is unknown, defaulting to 1000
[  281.686905][T10682] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1059'.
[  281.698424][T10682] netlink: 'syz.4.1059': attribute type 11 has an invalid length.
[  281.944345][T10692] FAULT_INJECTION: forcing a failure.
[  281.944345][T10692] name failslab, interval 1, probability 0, space 0, times 0
[  281.944367][T10692] CPU: 0 UID: 0 PID: 10692 Comm: syz.1.1062 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  281.944383][T10692] Tainted: [L]=SOFTLOCKUP
[  281.944387][T10692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  281.944393][T10692] Call Trace:
[  281.944398][T10692]  <TASK>
[  281.944403][T10692]  dump_stack_lvl+0x100/0x190
[  281.944422][T10692]  should_fail_ex.cold+0x5/0xa
[  281.944437][T10692]  should_failslab+0xc2/0x120
[  281.944455][T10692]  __kmalloc_cache_node_noprof+0x94/0x720
[  281.944471][T10692]  ? __get_vm_area_node+0x124/0x350
[  281.944488][T10692]  __get_vm_area_node+0x124/0x350
[  281.944516][T10692]  __vmalloc_node_range_noprof+0x268/0x1420
[  281.944534][T10692]  ? __vcalloc_noprof+0x4d/0x80
[  281.944551][T10692]  ? __vcalloc_noprof+0x4d/0x80
[  281.944565][T10692]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  281.944580][T10692]  ? trace_contention_end+0x126/0x160
[  281.944601][T10692]  ? __mutex_lock+0x26c/0x1bd0
[  281.944619][T10692]  ? kvm_set_memslot+0x34/0x1740
[  281.944636][T10692]  ? __vcalloc_noprof+0x4d/0x80
[  281.944649][T10692]  __vmalloc_node_noprof+0xad/0xf0
[  281.944664][T10692]  ? __vcalloc_noprof+0x4d/0x80
[  281.944678][T10692]  __vmalloc_noprof+0xa3/0x120
[  281.944693][T10692]  ? __pfx___vmalloc_noprof+0x10/0x10
[  281.944714][T10692]  __vcalloc_noprof+0x4d/0x80
[  281.944727][T10692]  kvm_set_memslot+0xf8a/0x1740
[  281.944741][T10692]  ? kvm_set_memory_region+0xc43/0x15e0
[  281.944757][T10692]  kvm_set_memory_region+0xe78/0x15e0
[  281.944777][T10692]  kvm_vm_ioctl+0x1f21/0x42d0
[  281.944789][T10692]  ? tomoyo_path_number_perm+0x46d/0x580
[  281.944806][T10692]  ? stack_trace_save+0x8e/0xc0
[  281.944820][T10692]  ? __pfx_stack_trace_save+0x10/0x10
[  281.944834][T10692]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  281.944843][T10692]  ? __lock_acquire+0x5c0/0x1f40
[  281.944858][T10692]  ? tomoyo_path_number_perm+0x46d/0x580
[  281.944873][T10692]  ? kasan_save_stack+0x3f/0x50
[  281.944886][T10692]  ? kasan_save_stack+0x30/0x50
[  281.944897][T10692]  ? kasan_save_track+0x14/0x30
[  281.944909][T10692]  ? kasan_save_free_info+0x3b/0x70
[  281.944924][T10692]  ? __kasan_slab_free+0x5f/0x80
[  281.944937][T10692]  ? kfree+0x22b/0x6d0
[  281.944951][T10692]  ? tomoyo_path_number_perm+0x46d/0x580
[  281.944966][T10692]  ? security_file_ioctl_compat+0xd3/0x230
[  281.944981][T10692]  ? __ia32_compat_sys_ioctl+0xc2/0x360
[  281.944998][T10692]  ? __do_fast_syscall_32+0x13a/0x8b0
[  281.945013][T10692]  ? kvm_arch_vm_compat_ioctl+0x2d0/0x470
[  281.945031][T10692]  ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10
[  281.945061][T10692]  ? kasan_quarantine_put+0x104/0x240
[  281.945073][T10692]  ? lockdep_hardirqs_on+0x7d/0x110
[  281.945088][T10692]  ? find_held_lock+0x2b/0x80
[  281.945101][T10692]  ? tomoyo_path_number_perm+0x28f/0x580
[  281.945129][T10692]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  281.945144][T10692]  ? do_vfs_ioctl+0x226/0x13e0
[  281.945161][T10692]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  281.945179][T10692]  kvm_vm_compat_ioctl+0x2f7/0x3f0
[  281.945190][T10692]  ? __pfx_kvm_vm_compat_ioctl+0x10/0x10
[  281.945202][T10692]  ? __fget_files+0x34/0x3d0
[  281.945215][T10692]  ? find_held_lock+0x2b/0x80
[  281.945225][T10692]  ? __fget_files+0x215/0x3d0
[  281.945236][T10692]  ? hook_file_ioctl_common+0x140/0x440
[  281.945256][T10692]  ? __fget_files+0x21f/0x3d0
[  281.945270][T10692]  ? __pfx_kvm_vm_compat_ioctl+0x10/0x10
[  281.945281][T10692]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  281.945300][T10692]  __do_fast_syscall_32+0x13a/0x8b0
[  281.945318][T10692]  do_fast_syscall_32+0x32/0x70
[  281.945335][T10692]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  281.945349][T10692] RIP: 0023:0xf708efec
[  281.945363][T10692] Code: Unable to access opcode bytes at 0xf708efc2.
[  281.945368][T10692] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  281.945379][T10692] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004020ae46
[  281.945386][T10692] RDX: 0000000080000400 RSI: 0000000000000000 RDI: 0000000000000000
[  281.945394][T10692] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  281.945401][T10692] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  281.945408][T10692] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  281.945424][T10692]  </TASK>
[  281.945476][T10692] syz.1.1062: vmalloc error: size 16, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  281.945532][T10692] CPU: 0 UID: 0 PID: 10692 Comm: syz.1.1062 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  281.945548][T10692] Tainted: [L]=SOFTLOCKUP
[  281.945553][T10692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  281.945559][T10692] Call Trace:
[  281.945563][T10692]  <TASK>
[  281.945568][T10692]  dump_stack_lvl+0x100/0x190
[  281.945584][T10692]  warn_alloc.cold+0x9e/0xb2
[  281.945603][T10692]  ? __pfx_warn_alloc+0x10/0x10
[  281.945614][T10692]  ? __kasan_kmalloc+0x8a/0xb0
[  281.945633][T10692]  ? __get_vm_area_node+0x22b/0x350
[  281.945650][T10692]  __vmalloc_node_range_noprof+0xfa2/0x1420
[  281.945673][T10692]  ? __vcalloc_noprof+0x4d/0x80
[  281.945687][T10692]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  281.945704][T10692]  ? trace_contention_end+0x126/0x160
[  281.945722][T10692]  ? __mutex_lock+0x26c/0x1bd0
[  281.945740][T10692]  ? kvm_set_memslot+0x34/0x1740
[  281.945754][T10692]  ? __vcalloc_noprof+0x4d/0x80
[  281.945764][T10692]  __vmalloc_node_noprof+0xad/0xf0
[  281.945779][T10692]  ? __vcalloc_noprof+0x4d/0x80
[  281.945791][T10692]  __vmalloc_noprof+0xa3/0x120
[  281.945806][T10692]  ? __pfx___vmalloc_noprof+0x10/0x10
[  281.945825][T10692]  __vcalloc_noprof+0x4d/0x80
[  281.945851][T10692]  kvm_set_memslot+0xf8a/0x1740
[  281.945864][T10692]  ? kvm_set_memory_region+0xc43/0x15e0
[  281.945880][T10692]  kvm_set_memory_region+0xe78/0x15e0
[  281.945916][T10692]  kvm_vm_ioctl+0x1f21/0x42d0
[  281.945929][T10692]  ? tomoyo_path_number_perm+0x46d/0x580
[  281.945946][T10692]  ? stack_trace_save+0x8e/0xc0
[  281.945960][T10692]  ? __pfx_stack_trace_save+0x10/0x10
[  281.945974][T10692]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  281.945985][T10692]  ? __lock_acquire+0x5c0/0x1f40
[  281.946002][T10692]  ? tomoyo_path_number_perm+0x46d/0x580
[  281.946019][T10692]  ? kasan_save_stack+0x3f/0x50
[  281.946032][T10692]  ? kasan_save_stack+0x30/0x50
[  281.946045][T10692]  ? kasan_save_track+0x14/0x30
[  281.946057][T10692]  ? kasan_save_free_info+0x3b/0x70
[  281.946072][T10692]  ? __kasan_slab_free+0x5f/0x80
[  281.946085][T10692]  ? kfree+0x22b/0x6d0
[  281.946100][T10692]  ? tomoyo_path_number_perm+0x46d/0x580
[  281.946117][T10692]  ? security_file_ioctl_compat+0xd3/0x230
[  281.946132][T10692]  ? __ia32_compat_sys_ioctl+0xc2/0x360
[  281.946148][T10692]  ? __do_fast_syscall_32+0x13a/0x8b0
[  281.946165][T10692]  ? kvm_arch_vm_compat_ioctl+0x2d0/0x470
[  281.946182][T10692]  ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10
[  281.946211][T10692]  ? kasan_quarantine_put+0x104/0x240
[  281.946223][T10692]  ? lockdep_hardirqs_on+0x7d/0x110
[  281.946239][T10692]  ? find_held_lock+0x2b/0x80
[  281.946250][T10692]  ? tomoyo_path_number_perm+0x28f/0x580
[  281.946276][T10692]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  281.946292][T10692]  ? do_vfs_ioctl+0x226/0x13e0
[  281.946309][T10692]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  281.946327][T10692]  kvm_vm_compat_ioctl+0x2f7/0x3f0
[  281.946338][T10692]  ? __pfx_kvm_vm_compat_ioctl+0x10/0x10
[  281.946348][T10692]  ? __fget_files+0x34/0x3d0
[  281.946383][T10692]  ? find_held_lock+0x2b/0x80
[  281.946397][T10692]  ? __fget_files+0x215/0x3d0
[  281.946409][T10692]  ? hook_file_ioctl_common+0x140/0x440
[  281.946429][T10692]  ? __fget_files+0x21f/0x3d0
[  281.946445][T10692]  ? __pfx_kvm_vm_compat_ioctl+0x10/0x10
[  281.946457][T10692]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  281.946477][T10692]  __do_fast_syscall_32+0x13a/0x8b0
[  281.946498][T10692]  do_fast_syscall_32+0x32/0x70
[  281.946515][T10692]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  281.946529][T10692] RIP: 0023:0xf708efec
[  281.946541][T10692] Code: Unable to access opcode bytes at 0xf708efc2.
[  281.946546][T10692] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  281.946557][T10692] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004020ae46
[  281.946563][T10692] RDX: 0000000080000400 RSI: 0000000000000000 RDI: 0000000000000000
[  281.946569][T10692] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  281.946576][T10692] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  281.946582][T10692] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  281.946601][T10692]  </TASK>
[  281.953067][T10692] Mem-Info:
[  281.953081][T10692] active_anon:8090 inactive_anon:7939 isolated_anon:0
[  281.953081][T10692]  active_file:4901 inactive_file:18154 isolated_file:0
[  281.953081][T10692]  unevictable:1000 dirty:77 writeback:0
[  281.953081][T10692]  slab_reclaimable:6655 slab_unreclaimable:63564
[  281.953081][T10692]  mapped:22983 shmem:10407 pagetables:1697
[  281.953081][T10692]  sec_pagetables:296 bounce:0
[  281.953081][T10692]  kernel_misc_reclaimable:0
[  281.953081][T10692]  free:27269 free_pcp:16302 free_cma:0
[  281.953706][T10692] Node 0 active_anon:20kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9280kB pagetables:1488kB sec_pagetables:1128kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  281.953756][T10692] Node 1 active_anon:32340kB inactive_anon:31656kB active_file:19604kB inactive_file:72616kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:91904kB dirty:308kB writeback:0kB shmem:41628kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6476kB pagetables:5300kB sec_pagetables:56kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  281.953799][T10692] Node 0 DMA free:2172kB boost:2048kB min:2792kB low:2976kB high:3160kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  281.953845][T10692] lowmem_reserve[]: 0 277 277 277 277
[  281.953873][T10692] Node 0 DMA32 free:23268kB boost:6144kB min:19944kB low:23392kB high:26840kB reserved_highatomic:2048kB free_highatomic:196kB active_anon:20kB inactive_anon:100kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:2108kB present:1032196kB managed:284568kB mlocked:0kB bounce:0kB free_pcp:8440kB local_pcp:8172kB free_cma:0kB
[  281.953920][T10692] lowmem_reserve[]: 0 0 0 0 0
[  281.953948][T10692] Node 1 DMA32 free:83636kB boost:0kB min:45988kB low:57484kB high:68980kB reserved_highatomic:0kB free_highatomic:0kB active_anon:32340kB inactive_anon:31656kB active_file:19604kB inactive_file:72616kB unevictable:4000kB writepending:308kB zspages:4956kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:56768kB local_pcp:28240kB free_cma:0kB
[  281.953995][T10692] lowmem_reserve[]: 0 0 0 0 0
[  281.954022][T10692] Node 0 DMA: 13*4kB (U) 1*8kB (U) 2*16kB (U) 7*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 2172kB
[  281.954161][T10692] Node 0 DMA32: 11*4kB (MEH) 51*8kB (UEH) 32*16kB (U) 137*32kB (UMEH) 106*64kB (UME) 25*128kB (UME) 11*256kB (UM) 6*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 23268kB
[  281.955557][T10692] Node 1 DMA32: 1*4kB (U) 42*8kB (UE) 59*16kB (UME) 109*32kB (UME) 123*64kB (UME) 129*128kB (UME) 73*256kB (UME) 32*512kB (UM) 19*1024kB (UM) 0*2048kB 0*4096kB = 83684kB
[  281.955648][T10692] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  281.955656][T10692] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  281.955664][T10692] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  281.955672][T10692] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  281.955680][T10692] 33981 total pagecache pages
[  281.955684][T10692] 520 pages in swap cache
[  281.955688][T10692] Free swap  = 85568kB
[  281.955692][T10692] Total swap = 124996kB
[  281.955697][T10692] 524155 pages RAM
[  281.955733][T10692] 0 pages HighMem/MovableOnly
[  281.955738][T10692] 212121 pages reserved
[  281.955742][T10692] 0 pages cma reserved
[  281.990031][T10691] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1063'.
[  282.041458][T10692] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  282.191485][   T58] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  282.309021][T10702] CIFS: Witness protocol support is experimental
[  282.309042][T10702] CIFS mount error: No usable UNC path provided in device string!
[  282.309042][T10702] 
[  282.309052][T10702] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  282.442940][   T58] usb 9-1: Using ep0 maxpacket: 8
[  282.443482][   T58] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  282.445366][   T58] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  282.445391][   T58] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  282.445402][   T58] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  282.445414][   T58] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  282.445425][   T58] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  282.445445][   T58] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.679036][   T58] usb 9-1: usb_control_msg returned -32
[  282.679077][   T58] usbtmc 9-1:16.0: can't read capabilities
[  282.823288][T10711] geneve2: entered allmulticast mode
[  283.141681][ T8404] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  283.213957][T10719] Set syz0 is full, maxelem 0 reached
[  283.290141][ T8404] usb 6-1: Using ep0 maxpacket: 16
[  283.292441][ T8404] usb 6-1: unable to get BOS descriptor or descriptor too short
[  283.292466][ T8404] usb 6-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2
[  283.293575][ T8404] usb 6-1: config 1 has an invalid interface number: 232 but max is 0
[  283.293595][ T8404] usb 6-1: config 1 has no interface number 0
[  283.293625][ T8404] usb 6-1: config 1 interface 232 has no altsetting 0
[  283.295753][ T8404] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.295771][ T8404] usb 6-1: Product: syz
[  283.295781][ T8404] usb 6-1: Manufacturer: syz
[  283.295791][ T8404] usb 6-1: SerialNumber: syz
[  283.436216][T10720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.437310][T10720] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.690066][ T5098] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  283.690120][ T5098] Bluetooth: hci4: Injecting HCI hardware error event
[  283.694802][ T5757] Bluetooth: hci4: hardware error 0x00
[  283.717991][ T8404] hub 6-1:1.232: bad descriptor, ignoring hub
[  283.718014][ T8404] hub 6-1:1.232: probe with driver hub failed with error -5
[  283.722890][ T8404] option 6-1:1.232: GSM modem (1-port) converter detected
[  283.756023][ T8404] usb 6-1: USB disconnect, device number 39
[  283.761871][ T8404] option 6-1:1.232: device disconnected
[  283.968635][T10732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1074'.
[  284.945661][ T5848] usb 9-1: USB disconnect, device number 15
[  285.770250][ T5757] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  287.161868][   T58] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  287.340592][   T58] usb 5-1: Using ep0 maxpacket: 8
[  287.352153][   T58] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  287.356011][   T58] usb 5-1: config 0 has an invalid interface number: 31 but max is 0
[  287.356027][   T58] usb 5-1: config 0 has no interface number 0
[  287.373829][   T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.373845][   T58] usb 5-1: Product: syz
[  287.373854][   T58] usb 5-1: Manufacturer: syz
[  287.373862][   T58] usb 5-1: SerialNumber: syz
[  287.377478][   T58] usb 5-1: config 0 descriptor??
[  287.721509][T10793] bridge0: port 4(dummy0) entered blocking state
[  287.721562][T10793] bridge0: port 4(dummy0) entered listening state
[  287.723474][T10793] bridge0: port 3(syz_tun) entered blocking state
[  287.723530][T10793] bridge0: port 3(syz_tun) entered listening state
[  287.723622][T10793] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.724463][T10793] bridge0: port 2(bridge_slave_1) entered listening state
[  287.724565][T10793] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.724622][T10793] bridge0: port 1(bridge_slave_0) entered listening state
[  288.492912][T10791] file system registered
[  288.513629][T10791] ffs_data_put(): freeing
[  288.764292][T10793] 8021q: adding VLAN 0 to HW filter on device bond1
[  288.833957][T10793] bridge0: port 5(vlan2) entered blocking state
[  288.834015][T10793] bridge0: port 5(vlan2) entered listening state
[  288.898767][ T5842] wg2 speed is unknown, defaulting to 1000
[  288.898828][ T5842] syz2: Port: 1 Link ACTIVE
[  289.835588][ T6636] wg2 speed is unknown, defaulting to 1000
[  291.160447][   T43] kauditd_printk_skb: 29 callbacks suppressed
[  291.160495][   T43] audit: type=1326 audit(1789325290.097:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10808 comm="syz.4.1092" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fec code=0x7ffc0000
[  291.160573][   T43] audit: type=1326 audit(1789325290.097:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10808 comm="syz.4.1092" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fec code=0x7ffc0000
[  291.207798][   T43] audit: type=1326 audit(1789325290.147:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10808 comm="syz.4.1092" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f66fec code=0x7ffc0000
[  291.225408][   T43] audit: type=1326 audit(1789325290.157:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10808 comm="syz.4.1092" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fec code=0x7ffc0000
[  291.225492][   T43] audit: type=1326 audit(1789325290.157:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10808 comm="syz.4.1092" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fec code=0x7ffc0000
[  291.598076][T10809] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter
[  291.605570][T10809] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95
[  291.611048][T10809] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22
[  291.710876][ T8817] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  291.877693][ T8817] usb 9-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00
[  291.886438][ T8817] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.886453][ T8817] usb 9-1: Product: syz
[  291.886460][ T8817] usb 9-1: Manufacturer: syz
[  291.886467][ T8817] usb 9-1: SerialNumber: syz
[  291.915084][ T8817] usb 9-1: USB2VGA dongle found at address 16
[  291.958260][ T8817] usb 9-1: Allocated 8 output buffers
[  292.077123][T10804] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28
[  292.174479][T10826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1094'.
[  292.196362][T10825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1094'.
[  292.229751][T10818] netlink: 'syz.4.1092': attribute type 30 has an invalid length.
[  292.301200][   T43] audit: type=1326 audit(1789325291.247:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10808 comm="syz.4.1092" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf7f66fec code=0x7ffc0000
[  292.357053][   T43] audit: type=1326 audit(1789325291.297:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10808 comm="syz.4.1092" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fec code=0x7ffc0000
[  292.357756][   T43] audit: type=1326 audit(1789325291.297:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10808 comm="syz.4.1092" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fec code=0x7ffc0000
[  292.416385][   T58] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  292.416430][   T58] uvcvideo 5-1:0.31: No valid video chain found.
[  292.457579][ T8817] usb 9-1: Failed to early initialize device
[  292.465280][ T8817] usb 9-1: USB disconnect, device number 16
[  292.681923][T10834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  292.688818][T10834] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  293.044037][T10804] i2c i2c-0: new_device: Instantiated device tcpci at 0x02
[  293.378739][T10842] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1099'.
[  293.420749][T10842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1099'.
[  293.737990][T10851] fuse: Bad value for 'rootmode'
[  294.479151][T10855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  294.479356][T10855] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  294.897414][T10857] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  294.897438][T10857] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  294.897497][T10857] vhci_hcd vhci_hcd.0: Device attached
[  295.141022][T10863] vhci_hcd: connection closed
[  295.142476][ T5797] vhci_hcd vhci_hcd.1: stop threads
[  295.142492][ T5797] vhci_hcd vhci_hcd.1: release socket
[  295.142519][ T5797] vhci_hcd vhci_hcd.1: disconnect device
[  295.160191][ T8817] usb 40-1: enqueue for inactive port 0
[  295.196154][T10870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1105'.
[  295.196224][T10870] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  295.207804][ T5848] usb 5-1: USB disconnect, device number 33
[  295.321285][T10870] batman_adv: batadv0: Removing interface: batadv_slave_1
[  295.561329][ T6636] usb 8-1: new high-speed USB device number 33 using dummy_hcd
[  295.651149][ T8817] usb usb40-port1: attempt power cycle
[  295.889237][T10879] overlayfs: missing 'workdir'
[  296.130076][ T6636] usb 8-1: device descriptor read/64, error -71
[  296.210623][ T8817] usb usb40-port1: unable to enumerate USB device
[  296.239203][T10886] futex_wake_op: syz.1.1109 tries to shift op by 144; fix this program
[  296.427048][ T6636] usb 8-1: new high-speed USB device number 34 using dummy_hcd
[  296.749996][ T6636] usb 8-1: device descriptor read/64, error -71
[  296.870167][ T6636] usb usb8-port1: attempt power cycle
[  297.277564][ T6636] usb 8-1: new high-speed USB device number 35 using dummy_hcd
[  297.295049][ T6636] usb 8-1: device descriptor read/8, error -71
[  297.530701][ T6636] usb 8-1: new high-speed USB device number 36 using dummy_hcd
[  297.565773][ T6636] usb 8-1: device descriptor read/8, error -71
[  297.647179][T10892] erofs (device loop4): cannot find valid erofs superblock
[  297.670206][ T6636] usb usb8-port1: unable to enumerate USB device
[  297.975912][T10896] lo: Caught tx_queue_len zero misconfig
[  297.975940][T10896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1111'.
[  298.574096][   T43] audit: type=1807 audit(1789325297.517:1504): action=measure res=1
[  298.579596][T10907] ima: policy update completed
[  298.580589][   T43] audit: type=1802 audit(1789325297.517:1505): pid=10907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.1.1113" res=1 errno=0
[  298.581468][T10888] FAULT_INJECTION: forcing a failure.
[  298.581468][T10888] name fail_futex, interval 1, probability 0, space 0, times 0
[  298.581554][T10888] CPU: 0 UID: 0 PID: 10888 Comm: syz.0.1108 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  298.581571][T10888] Tainted: [L]=SOFTLOCKUP
[  298.581575][T10888] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  298.581581][T10888] Call Trace:
[  298.581585][T10888]  <TASK>
[  298.581589][T10888]  dump_stack_lvl+0x100/0x190
[  298.581620][T10888]  should_fail_ex.cold+0x5/0xa
[  298.581634][T10888]  get_futex_key+0xf72/0x14f0
[  298.581653][T10888]  ? __pfx_get_futex_key+0x10/0x10
[  298.581671][T10888]  ? __mutex_unlock_slowpath+0x35d/0x930
[  298.581695][T10888]  futex_wake+0xf4/0x5e0
[  298.581709][T10888]  ? __pfx_futex_wake+0x10/0x10
[  298.581724][T10888]  ? irqentry_exit+0x24d/0xa10
[  298.581739][T10888]  ? lockdep_hardirqs_on+0x7d/0x110
[  298.581757][T10888]  do_futex+0x2b2/0x440
[  298.581768][T10888]  ? __pfx_do_futex+0x10/0x10
[  298.581778][T10888]  ? __might_fault+0xc5/0x140
[  298.581802][T10888]  mm_exit_exec_release+0x256/0x2f0
[  298.581820][T10888]  do_exit+0x707/0x2ae0
[  298.581835][T10888]  ? __pfx_do_exit+0x10/0x10
[  298.581849][T10888]  ? do_raw_spin_lock+0x128/0x260
[  298.581866][T10888]  ? find_held_lock+0x2b/0x80
[  298.581877][T10888]  ? get_signal+0x7e0/0x21e0
[  298.581896][T10888]  do_group_exit+0xd5/0x2a0
[  298.581909][T10888]  get_signal+0x1ec7/0x21e0
[  298.581930][T10888]  ? __pfx_get_signal+0x10/0x10
[  298.581947][T10888]  ? do_futex+0x190/0x440
[  298.581960][T10888]  arch_do_signal_or_restart+0x91/0x7a0
[  298.581975][T10888]  ? __pfx_sched_clock_cpu+0x10/0x10
[  298.581989][T10888]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  298.582011][T10888]  exit_to_user_mode_loop+0x139/0x700
[  298.582029][T10888]  ? rcu_is_watching+0x13/0xc0
[  298.582041][T10888]  __do_fast_syscall_32+0x59f/0x8b0
[  298.582061][T10888]  do_fast_syscall_32+0x32/0x70
[  298.582078][T10888]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  298.582092][T10888] RIP: 0023:0xf6fdefec
[  298.582102][T10888] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  298.582112][T10888] RSP: 002b:00000000f534b5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0
[  298.582124][T10888] RAX: fffffffffffffe00 RBX: 00000000f73d5020 RCX: 0000000000000080
[  298.582131][T10888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73d5024
[  298.582137][T10888] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000
[  298.582143][T10888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  298.582149][T10888] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  298.582163][T10888]  </TASK>
[  298.696854][T10908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1113'.
[  298.911553][   T43] audit: type=1800 audit(1789325297.827:1506): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=4812 res=0 errno=0
[  298.945767][   T43] audit: type=1800 audit(1789325297.887:1507): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34640 res=0 errno=0
[  298.994836][   T43] audit: type=1800 audit(1789325297.937:1508): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34663 res=0 errno=0
[  299.294246][   T43] audit: type=1800 audit(1789325298.237:1509): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34490 res=0 errno=0
[  299.314493][   T43] audit: type=1800 audit(1789325298.257:1510): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34513 res=0 errno=0
[  299.387554][T10915] binder: 10913:10915 ioctl c00c6211 0 returned -14
[  299.730024][ T6636] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  299.862707][T10921] netlink: 'syz.4.1114': attribute type 5 has an invalid length.
[  299.880218][ T6636] usb 5-1: Using ep0 maxpacket: 32
[  299.887739][ T6636] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  299.901084][ T6636] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  299.901120][ T6636] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  299.901150][ T6636] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10
[  299.901170][ T6636] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024
[  299.901190][ T6636] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  299.901210][ T6636] usb 5-1: config 0 interface 0 has no altsetting 0
[  299.944582][ T6636] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  299.944610][ T6636] usb 5-1: Product: syz
[  299.944624][ T6636] usb 5-1: Manufacturer: syz
[  299.944637][ T6636] usb 5-1: SerialNumber: syz
[  299.949732][ T6636] usb 5-1: config 0 descriptor??
[  299.965491][T10914] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  299.965531][   T43] audit: type=1800 audit(1789325298.907:1511): pid=10586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=231510 res=0 errno=0
[  299.983223][ T6636] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  299.987819][ T6636] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  300.002048][   T43] audit: type=1800 audit(1789325298.947:1512): pid=10586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=231549 res=0 errno=0
[  300.002968][   T43] audit: type=1800 audit(1789325298.947:1513): pid=10586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=231518 res=0 errno=0
[  300.632457][ T6636] usb 5-1: USB disconnect, device number 34
[  300.645190][ T6636] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  300.820649][   T58] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  302.861922][ T5850] kernel read not supported for file /rfkill (pid: 5850 comm: kworker/0:5)
[  303.130854][ T5092] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  303.280771][ T5092] usb 6-1: Using ep0 maxpacket: 32
[  303.285037][ T5092] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  303.289336][ T5092] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  303.289365][ T5092] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  303.289392][ T5092] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10
[  303.289413][ T5092] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024
[  303.289432][ T5092] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  303.289452][ T5092] usb 6-1: config 0 interface 0 has no altsetting 0
[  303.329060][ T5092] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  303.329081][ T5092] usb 6-1: Product: syz
[  303.329091][ T5092] usb 6-1: Manufacturer: syz
[  303.329100][ T5092] usb 6-1: SerialNumber: syz
[  303.341046][ T5092] usb 6-1: config 0 descriptor??
[  303.348430][T10957] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  303.355032][ T5092] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  303.358511][ T5092] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  303.880639][T10976] FAULT_INJECTION: forcing a failure.
[  303.880639][T10976] name failslab, interval 1, probability 0, space 0, times 0
[  303.880699][T10976] CPU: 2 UID: 0 PID: 10976 Comm: syz.0.1126 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  303.880716][T10976] Tainted: [L]=SOFTLOCKUP
[  303.880721][T10976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  303.880728][T10976] Call Trace:
[  303.880732][T10976]  <TASK>
[  303.880737][T10976]  dump_stack_lvl+0x100/0x190
[  303.880756][T10976]  should_fail_ex.cold+0x5/0xa
[  303.880771][T10976]  should_failslab+0xc2/0x120
[  303.880788][T10976]  __kmalloc_node_track_caller_noprof+0xfa/0x870
[  303.880802][T10976]  ? shmem_huge_global_enabled.isra.0+0x6c/0x210
[  303.880819][T10976]  ? ima_collect_measurement+0x531/0xb30
[  303.880847][T10976]  krealloc_node_align_noprof+0x321/0x3e0
[  303.880862][T10976]  ima_collect_measurement+0x531/0xb30
[  303.880882][T10976]  ? __pfx_ima_collect_measurement+0x10/0x10
[  303.880898][T10976]  ? jhash+0x50c/0x610
[  303.880918][T10976]  ? process_measurement+0x5ab/0x2350
[  303.880936][T10976]  ? vfs_getxattr_alloc+0x1ba/0x350
[  303.880951][T10976]  ? vfs_getxattr_alloc+0xec/0x350
[  303.880968][T10976]  ? ima_get_hash_algo+0x241/0x400
[  303.880981][T10976]  ? __pfx_ima_get_hash_algo+0x10/0x10
[  303.880997][T10976]  ? process_measurement+0xdfe/0x2350
[  303.881011][T10976]  process_measurement+0xdfe/0x2350
[  303.881029][T10976]  ? __pfx_process_measurement+0x10/0x10
[  303.881043][T10976]  ? tomoyo_check_open_permission+0x211/0x3c0
[  303.881060][T10976]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  303.881076][T10976]  ? __pfx_timestamp_truncate+0x10/0x10
[  303.881092][T10976]  ? hook_file_open+0x248/0x8e0
[  303.881117][T10976]  ? __pfx_apparmor_file_open+0x10/0x10
[  303.881135][T10976]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  303.881153][T10976]  ima_file_check+0xcc/0x120
[  303.881167][T10976]  ? __pfx_ima_file_check+0x10/0x10
[  303.881184][T10976]  security_file_post_open+0xc4/0x210
[  303.881201][T10976]  path_openat+0x5cd/0x2440
[  303.881216][T10976]  ? __pfx_path_openat+0x10/0x10
[  303.881232][T10976]  do_file_open+0x20e/0x430
[  303.881246][T10976]  ? __pfx_do_file_open+0x10/0x10
[  303.881269][T10976]  ? _raw_spin_unlock+0x28/0x50
[  303.881282][T10976]  ? alloc_fd+0x471/0x7a0
[  303.881298][T10976]  do_sys_openat2+0x10f/0x1e0
[  303.881313][T10976]  ? __pfx_do_sys_openat2+0x10/0x10
[  303.881329][T10976]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  303.881341][T10976]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  303.881357][T10976]  __ia32_compat_sys_openat+0x12d/0x210
[  303.881373][T10976]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  303.881394][T10976]  __do_fast_syscall_32+0x13a/0x8b0
[  303.881413][T10976]  do_fast_syscall_32+0x32/0x70
[  303.881430][T10976]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  303.881444][T10976] RIP: 0023:0xf6fdefec
[  303.881457][T10976] Code: Unable to access opcode bytes at 0xf6fdefc2.
[  303.881462][T10976] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127
[  303.881473][T10976] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800002c0
[  303.881481][T10976] RDX: 000000000000275a RSI: 0000000000000000 RDI: 0000000000000000
[  303.881488][T10976] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  303.881495][T10976] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  303.881502][T10976] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  303.881516][T10976]  </TASK>
[  303.881608][   T43] kauditd_printk_skb: 23 callbacks suppressed
[  303.881616][   T43] audit: type=1800 audit(1789325302.827:1537): pid=10976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1126" name="freezer.state" dev="tmpfs" ino=1652 res=0 errno=0
[  304.053273][ T5848] usb 6-1: USB disconnect, device number 40
[  304.144141][ T5848] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  304.452469][   T43] audit: type=1800 audit(1789325303.397:1538): pid=10984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1127" name="remove" dev="sysfs" ino=2331 res=0 errno=0
[  304.689196][T10990] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1128'.
[  304.937993][   T43] audit: type=1800 audit(1789325303.877:1539): pid=11001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1130" name="rescan" dev="sysfs" ino=820 res=0 errno=0
[  304.993218][T10984]   extrace-0138 ex_trace_point        : Method Begin [\_SB.PCI0._PRT] execution.
[  305.284436][   T43] audit: type=1326 audit(1789325304.227:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11009 comm="syz.1.1132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000
[  305.285161][   T43] audit: type=1326 audit(1789325304.227:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11009 comm="syz.1.1132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000
[  305.289793][   T43] audit: type=1326 audit(1789325304.227:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11009 comm="syz.1.1132" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf708efec code=0x7ffc0000
[  305.319462][   T43] audit: type=1326 audit(1789325304.257:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11009 comm="syz.1.1132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000
[  305.329714][   T43] audit: type=1326 audit(1789325304.267:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11009 comm="syz.1.1132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000
[  305.347771][   T43] audit: type=1326 audit(1789325304.287:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11009 comm="syz.1.1132" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf708efec code=0x7ffc0000
[  305.349772][   T43] audit: type=1326 audit(1789325304.287:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11009 comm="syz.1.1132" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf708efec code=0x7ffc0000
[  305.781380][T10984]   extrace-0138 ex_trace_point        : Method End [\_SB.PCI0._PRT] execution.
[  306.008186][T11001] pci 0000:00:05.0: [1af4:1009] type 00 class 0x000200 conventional PCI endpoint
[  306.038840][T11001] pci 0000:00:05.0: BAR 0 [io  0xc0c0-0xc0df]
[  306.038900][T11001] pci 0000:00:05.0: BAR 1 [mem 0xfeaf6000-0xfeaf6fff]
[  306.039074][T11001] pci 0000:00:05.0: BAR 4 [mem 0xfe204000-0xfe207fff 64bit pref]
[  306.118980][T11001] pci 0000:00:05.0: Adding to iommu group 5
[  306.211385][T11001] pci 0000:00:05.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned
[  306.225373][T11001] pci 0000:00:05.0: BAR 1 [mem 0x81001000-0x81001fff]: assigned
[  306.227993][T11001] pci 0000:00:05.0: BAR 0 [io  0x2000-0x201f]: assigned
[  306.244912][T11001]   extrace-0138 ex_trace_point        : Method Begin [\_SB.PCI0._PRT] execution.
[  306.314246][T11001]   extrace-0138 ex_trace_point        : Method End [\_SB.PCI0._PRT] execution.
[  309.021998][T11043] No control pipe specified
[  309.963260][   T43] kauditd_printk_skb: 37 callbacks suppressed
[  309.963271][   T43] audit: type=1800 audit(1789325308.907:1584): pid=11054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=232114 res=0 errno=0
[  309.981635][T11055] Invalid ELF header magic: != ELF
[  310.057093][   T43] audit: type=1800 audit(1789325308.997:1585): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=4638 res=0 errno=0
[  310.271871][   T43] audit: type=1800 audit(1789325309.217:1586): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=232314 res=0 errno=0
[  310.406552][   T43] audit: type=1800 audit(1789325309.347:1587): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34690 res=0 errno=0
[  310.426726][   T43] audit: type=1800 audit(1789325309.367:1588): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34713 res=0 errno=0
[  310.640238][ T8817] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  310.662464][T11077] misc userio: Invalid payload size
[  310.662507][T11078] misc userio: Invalid payload size
[  310.709198][T11077] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1141'.
[  310.792009][ T8817] usb 9-1: Using ep0 maxpacket: 8
[  310.795507][ T8817] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  310.798385][ T8817] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  310.798415][ T8817] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  310.798436][ T8817] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  310.798457][ T8817] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  310.798493][ T8817] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.876768][T11066] bond0: Error: CAN devices cannot be enslaved
[  310.916599][   T43] audit: type=1800 audit(1789325309.857:1589): pid=11072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=232341 res=0 errno=0
[  310.945737][   T43] audit: type=1800 audit(1789325309.887:1590): pid=11072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=232370 res=0 errno=0
[  310.962441][   T43] audit: type=1800 audit(1789325309.907:1591): pid=11072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=232348 res=0 errno=0
[  310.988463][   T43] audit: type=1800 audit(1789325309.927:1592): pid=11072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=232349 res=0 errno=0
[  311.004136][   T43] audit: type=1800 audit(1789325309.947:1593): pid=11072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=232350 res=0 errno=0
[  312.511012][T11091] loop2: detected capacity change from 0 to 7
[  312.518781][T11091] Dev loop2: unable to read RDB block 7
[  312.518803][T11091]  loop2: unable to read partition table
[  312.518937][T11091] loop2: partition table beyond EOD, truncated
[  312.518946][T11091] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  312.566970][T11072] udevd[11072]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory
[  312.600961][T11072] udevd[11072]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory
[  312.609012][T11072] udevd[11072]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory
[  312.624945][T11072] udevd[11072]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory
[  312.636264][T11089] 
[  312.637119][T11089] ======================================================
[  312.639202][T11089] WARNING: possible circular locking dependency detected
[  312.641300][T11089] syzkaller #0 Tainted: G             L     
[  312.643660][T11089] ------------------------------------------------------
[  312.646327][T11089] syz.0.1145/11089 is trying to acquire lock:
[  312.648648][T11089] ffff888022564570 (&p->frag_sem){.+.+}-{4:4}, at: __configfs_open_file+0xe8/0x9c0
[  312.651586][T11089] 
[  312.651586][T11089] but task is already holding lock:
[  312.654437][T11089] ffff8880560d8168 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350
[  312.658034][T11089] 
[  312.658034][T11089] which lock already depends on the new lock.
[  312.658034][T11089] 
[  312.661002][T11089] 
[  312.661002][T11089] the existing dependency chain (in reverse order) is:
[  312.663839][T11089] 
[  312.663839][T11089] -> #3 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}:
[  312.666513][T11089]        lock_acquire+0x1d1/0x380
[  312.668148][T11089]        __mutex_lock+0x1a4/0x1bd0
[  312.669740][T11089]        process_measurement+0x5ab/0x2350
[  312.671459][T11089]        ima_file_check+0xcc/0x120
[  312.673049][T11089]        security_file_post_open+0xc4/0x210
[  312.674897][T11089]        path_openat+0x5cd/0x2440
[  312.676448][T11089]        do_file_open+0x20e/0x430
[  312.678024][T11089]        do_sys_openat2+0x10f/0x1e0
[  312.679611][T11089]        __x64_sys_openat+0x12d/0x210
[  312.681261][T11089]        do_syscall_64+0x121/0x770
[  312.682881][T11089]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.684860][T11089] 
[  312.684860][T11089] -> #2 (sb_writers#5){.+.+}-{0:0}:
[  312.687167][T11089]        lock_acquire+0x1d1/0x380
[  312.689017][T11089]        mnt_want_write+0x6f/0x420
[  312.690537][T11089]        lookup_open+0x150/0x1990
[  312.691991][T11089]        path_openat+0xa2c/0x2440
[  312.693419][T11089]        do_file_open+0x20e/0x430
[  312.694903][T11089]        file_open_name+0x1c3/0x3e0
[  312.696449][T11089]        filp_open+0x2e/0x50
[  312.697808][T11089]        nvmet_file_ns_enable+0x95/0x420
[  312.699459][T11089]        nvmet_ns_enable+0x43b/0x650
[  312.701035][T11089]        nvmet_ns_enable_store+0x11e/0x160
[  312.702735][T11089]        configfs_write_iter+0x302/0x4e0
[  312.704455][T11089]        vfs_write+0x6af/0x1050
[  312.705886][T11089]        ksys_write+0x12a/0x250
[  312.707319][T11089]        __do_fast_syscall_32+0x13a/0x8b0
[  312.708982][T11089]        do_fast_syscall_32+0x32/0x70
[  312.710580][T11089]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  312.712526][T11089] 
[  312.712526][T11089] -> #1 (&subsys->lock){+.+.}-{4:4}:
[  312.714723][T11089]        lock_acquire+0x1d1/0x380
[  312.716197][T11089]        __mutex_lock+0x1a4/0x1bd0
[  312.717769][T11089]        nvmet_ns_buffered_io_store+0xc0/0x1e0
[  312.719608][T11089]        configfs_write_iter+0x302/0x4e0
[  312.721262][T11089]        vfs_write+0x6af/0x1050
[  312.722708][T11089]        ksys_write+0x12a/0x250
[  312.724121][T11089]        __do_fast_syscall_32+0x13a/0x8b0
[  312.725805][T11089]        do_fast_syscall_32+0x32/0x70
[  312.727380][T11089]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  312.729349][T11089] 
[  312.729349][T11089] -> #0 (&p->frag_sem){.+.+}-{4:4}:
[  312.731492][T11089]        check_prev_add+0xeb/0xe60
[  312.732994][T11089]        __lock_acquire+0x1528/0x1f40
[  312.734564][T11089]        lock_acquire+0x1d1/0x380
[  312.736049][T11089]        down_read+0x99/0x4c0
[  312.737433][T11089]        __configfs_open_file+0xe8/0x9c0
[  312.739109][T11089]        do_dentry_open+0x6ab/0x14d0
[  312.740643][T11089]        vfs_open+0x82/0x3f0
[  312.742023][T11089]        dentry_open+0x71/0xd0
[  312.743441][T11089]        ima_calc_file_hash+0xe1/0x380
[  312.745061][T11089]        ima_collect_measurement+0x94f/0xb30
[  312.746852][T11089]        process_measurement+0xdfe/0x2350
[  312.748511][T11089]        ima_file_check+0xcc/0x120
[  312.750019][T11089]        security_file_post_open+0xc4/0x210
[  312.751809][T11089]        path_openat+0x5cd/0x2440
[  312.753294][T11089]        do_file_open+0x20e/0x430
[  312.754786][T11089]        do_sys_openat2+0x10f/0x1e0
[  312.756227][T11089]        __ia32_compat_sys_openat+0x12d/0x210
[  312.757995][T11089]        __do_fast_syscall_32+0x13a/0x8b0
[  312.759692][T11089]        do_fast_syscall_32+0x32/0x70
[  312.761256][T11089]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  312.763258][T11089] 
[  312.763258][T11089] other info that might help us debug this:
[  312.763258][T11089] 
[  312.766201][T11089] Chain exists of:
[  312.766201][T11089]   &p->frag_sem --> sb_writers#5 --> &ima_iint_mutex_key[depth]
[  312.766201][T11089] 
[  312.770177][T11089]  Possible unsafe locking scenario:
[  312.770177][T11089] 
[  312.772540][T11089]        CPU0                    CPU1
[  312.774116][T11089]        ----                    ----
[  312.775691][T11089]   lock(&ima_iint_mutex_key[depth]);
[  312.777274][T11089]                                lock(sb_writers#5);
[  312.779218][T11089]                                lock(&ima_iint_mutex_key[depth]);
[  312.781528][T11089]   rlock(&p->frag_sem);
[  312.782802][T11089] 
[  312.782802][T11089]  *** DEADLOCK ***
[  312.782802][T11089] 
[  312.785114][T11089] locks held by syz.0.1145/11089: 1, last CPU#2:
[  312.786935][T11089]  #0: ffff8880560d8168 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350
[  312.790128][T11089] 
[  312.790128][T11089] stack backtrace:
[  312.791906][T11089] CPU: 2 UID: 0 PID: 11089 Comm: syz.0.1145 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  312.795076][T11089] Tainted: [L]=SOFTLOCKUP
[  312.796348][T11089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  312.799268][T11089] Call Trace:
[  312.800265][T11089]  <TASK>
[  312.801101][T11089]  dump_stack_lvl+0x100/0x190
[  312.802497][T11089]  print_circular_bug.cold+0x178/0x1be
[  312.804084][T11089]  check_noncircular+0x146/0x160
[  312.805934][T11089]  ? kasan_save_stack+0x30/0x50
[  312.807414][T11089]  ? process_measurement+0xdfe/0x2350
[  312.808895][T11089]  check_prev_add+0xeb/0xe60
[  312.810460][T11089]  ? do_fast_syscall_32+0x32/0x70
[  312.812273][T11089]  __lock_acquire+0x1528/0x1f40
[  312.813883][T11089]  lock_acquire+0x1d1/0x380
[  312.815589][T11089]  ? __configfs_open_file+0xe8/0x9c0
[  312.817541][T11089]  ? __pfx___might_resched+0x10/0x10
[  312.819107][T11089]  down_read+0x99/0x4c0
[  312.820360][T11089]  ? __configfs_open_file+0xe8/0x9c0
[  312.821933][T11089]  ? __pfx_down_read+0x10/0x10
[  312.823354][T11089]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  312.825015][T11089]  ? __configfs_open_file+0xcb/0x9c0
[  312.826597][T11089]  __configfs_open_file+0xe8/0x9c0
[  312.828224][T11089]  do_dentry_open+0x6ab/0x14d0
[  312.829648][T11089]  ? __pfx_configfs_open_file+0x10/0x10
[  312.831298][T11089]  vfs_open+0x82/0x3f0
[  312.832539][T11089]  dentry_open+0x71/0xd0
[  312.833801][T11089]  ima_calc_file_hash+0xe1/0x380
[  312.835280][T11089]  ima_collect_measurement+0x94f/0xb30
[  312.836896][T11089]  ? __pfx_ima_collect_measurement+0x10/0x10
[  312.838681][T11089]  ? process_measurement+0x5ab/0x2350
[  312.840259][T11089]  ? is_bad_inode+0xd/0x40
[  312.841605][T11089]  ? xattr_resolve_name+0x27d/0x3f0
[  312.843142][T11089]  ? vfs_getxattr_alloc+0xec/0x350
[  312.844662][T11089]  ? ima_get_hash_algo+0x241/0x400
[  312.846196][T11089]  ? __pfx_ima_get_hash_algo+0x10/0x10
[  312.847832][T11089]  ? process_measurement+0xdfe/0x2350
[  312.849440][T11089]  process_measurement+0xdfe/0x2350
[  312.851026][T11089]  ? __pfx_process_measurement+0x10/0x10
[  312.852722][T11089]  ? lock_acquire+0x1d1/0x380
[  312.854139][T11089]  ? __configfs_open_file+0x6ca/0x9c0
[  312.855807][T11089]  ima_file_check+0xcc/0x120
[  312.857209][T11089]  ? __pfx_ima_file_check+0x10/0x10
[  312.858790][T11089]  security_file_post_open+0xc4/0x210
[  312.860398][T11089]  path_openat+0x5cd/0x2440
[  312.861805][T11089]  ? __pfx_path_openat+0x10/0x10
[  312.863329][T11089]  do_file_open+0x20e/0x430
[  312.864744][T11089]  ? __pfx_do_file_open+0x10/0x10
[  312.866279][T11089]  ? _raw_spin_unlock+0x28/0x50
[  312.867749][T11089]  ? alloc_fd+0x471/0x7a0
[  312.869053][T11089]  do_sys_openat2+0x10f/0x1e0
[  312.870483][T11089]  ? __pfx_do_sys_openat2+0x10/0x10
[  312.872101][T11089]  __ia32_compat_sys_openat+0x12d/0x210
[  312.873727][T11089]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  312.875561][T11089]  __do_fast_syscall_32+0x13a/0x8b0
[  312.877109][T11089]  ? lockdep_hardirqs_on+0x7d/0x110
[  312.878675][T11089]  do_fast_syscall_32+0x32/0x70
[  312.880174][T11089]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  312.882073][T11089] RIP: 0023:0xf6fdefec
[  312.883333][T11089] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  312.889102][T11089] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127
[  312.891740][T11089] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000700
[  312.894099][T11089] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  312.896479][T11089] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  312.898855][T11089] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  312.901231][T11089] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  312.903619][T11089]  </TASK>
[  312.996741][T11095] ip6tnl0: Caught tx_queue_len zero misconfig
[  313.035920][T11072] udevd[11072]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory
[  313.249101][ T8817] usb 9-1: usb_control_msg returned -71
[  313.249122][ T8817] usbtmc 9-1:16.0: can't read capabilities
[  313.255246][ T8817] usb 9-1: USB disconnect, device number 17
[  316.984835][ T1439] ieee802154 phy0 wpan0: encryption failed: -22
[  318.249962][    C2] bridge0: port 1(bridge_slave_0) entered learning state
[  318.250034][    C2] bridge0: port 2(bridge_slave_1) entered learning state
[  318.250109][    C2] bridge0: port 3(syz_tun) entered learning state
[  318.250183][    C2] bridge0: port 4(dummy0) entered learning state
[  318.890229][    C2] bridge0: port 5(vlan2) entered learning state