last executing test programs:

5m4.790528757s ago: executing program 1 (id=506):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @broadcast, 0xff000000, 0xff, 0x9, 0x12, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x0, 0x3, 0x3, 0xa90a, 0x6, 0x3ff, 'veth0_vlan\x00', 'wg2\x00', {0xff}, {0xff}, 0x0, 0x71}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@empty, @loopback, 0x0, 0xffffffff, 0xe, 0x2, {@mac=@local, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@random="8e932bc3db22", {[0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x400, 0x4fd9, 0x0, 0x98dc, 'team_slave_1\x00', 'macsec0\x00', {0xff}, {0xff}, 0x0, 0x280}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @loopback, 0xf, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @loopback, @multicast1, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000002300)=0x8)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x60, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x14, [{{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x11)
sendto$inet(r7, &(0x7f0000000200)='hel', 0x3, 0x0, &(0x7f0000000300)={0x2, 0x1234, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x11, 0xffffffffffffffff, 0xc10c3000)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010028bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="da430100000000000800168044003f8014000300776c616e3000000000000000000000002f1fd83910391dbf09d07ba1bce2b34be682aef6b014dc9d619e3be2b5e5780c5046f1a456494097aac21aa67b15676aafc6d81a8cae76f37fb367f50276c1687f1a4dfb536ae3a26e1c0e1092352950b124dee4d9519d95de12e4cc9a57fd74399a39d9f2bb543b254d98d16df753848fe7f54f70cbdf40f4"], 0x3c}, 0x1, 0x0, 0x0, 0x4000880}, 0xc0d0)

5m3.780786055s ago: executing program 1 (id=511):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSRS485(r0, 0x5437, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
r2 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
r6 = accept4(r4, 0x0, 0x0, 0x800)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r8, 0x400448cb, 0x0)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc4", 0x94}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmmsg$unix(r6, &(0x7f0000003900), 0x0, 0x41, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000081b000002000000ffff000005"], 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)

5m3.665808953s ago: executing program 1 (id=512):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40440, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0xa9, 0x2e, 0xc, 0x10, 0x11ba, 0x1003, 0x14c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x7, 0xe0, 0x40, "", [{{0x9, 0x4, 0x3, 0x7, 0x0, 0x41, 0x0, 0xba, 0x4}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000e80))
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r6)
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)

5m0.856939131s ago: executing program 1 (id=522):
socket$inet(0x2, 0x3, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$cont(0x19, r1, 0x7effffffffffffff, 0x7)
write(r0, &(0x7f0000000240)='3', 0x1)

5m0.594226178s ago: executing program 1 (id=525):
timer_create(0x1, &(0x7f0000000480)={0x0, 0x24, 0x4, @thr={&(0x7f00000002c0)="31b4925481ba24dac70e1c6c177655e5bbeec89f9285b3187792779ea67d3d831d9b2582dadb97d8c3bba4d649e0982e8bf884ed1ddec065915ad23420765114b6463df16c3a50fec1de0ff48ac5ea2482b4b3961224a2bb407738495a6763e7e2e2a85634087edcadd62937e8db7e5d280633fb560e7fa7a6cc3cfc7ba2971adbbfa70a5d50755f3d1b21b909b31a8bc811f234a8e98e227a4abca6bda0458690b055b3ecb4f6acce75865f78c64462a526cb302f7af4171fc21a7543ffbfdd2495f18db251", &(0x7f00000003c0)="c71b791d0865daf990c30b45f204f15473b46aba09fa6368917a0657d8a965e399dc948aeed8a0d3ba02af62f057918f6501650dcf643838179dc558044b25268255db8cc6721d2b8b710ed6d57fe667df0d84e80f3cf82ba81ed5edf07d2beebc22d6c1e15d75cfcb942979f867cfa13ea142b1e95bcc4ab0ee0ab5ddd9ae5c26613f769af923cf2f0516d15fb9fb71e48145848da73034669fc8ec01b869eed497ee7c2cd93bf755"}}, &(0x7f00000004c0)=<r0=>0x0)
clock_gettime(0x0, &(0x7f0000000000))
timer_settime(r0, 0x1, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002800)=@nat={'nat\x00', 0x670, 0x5, 0x430, 0x230, 0x0, 0xffffffff, 0x2d4, 0x0, 0x39c, 0x39c, 0xffffffff, 0x39c, 0x39c, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x18c, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1d, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x1b, @multicast1, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'team_slave_0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xffffff00, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x0, 0x20}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@icmp={{0x24}, {0xc, "1542", 0x1}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x48c)
timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @thr={&(0x7f00000005c0)="d8557073a45bd3578b9c4716d6dda68fe03762bbae10e342f215f9e8eba26b9d05ef801f4989f180a421135975fc93b5549cc8033000448f43ed4186219d2cf7bc96fc9da50cd790f364fca7747163159794a4b8b193faa415055cceae29a812367697adcfbb04b9f409e1753681dbe6c086c7ba34f4390a9b8dc066f1405be9a200c38e645d2099e0f0ee7541f9d60fca70bf51e925e46f10b5c875a9f344577dfc38d2449f65670a4feb0d881f00d1ef831f79e23b1efb207c8c7d55a0d99e2d211136a3cf300f4e38ef6105a85f7529625cd9144f035d43eb6246f124b975b6e6e031ad131672c928bbddc4d6963e089ab7cca1", &(0x7f00000006c0)="bb745eee38ec52bfc7ef7bc387bdbe15b351c6815f603f493695ad"}}, &(0x7f00000000c0))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}}, 0x28)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{0x18, 0x11a, 0x1, "15"}], 0x18}, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_GET_EXTENDED_ERROR(r4, 0xc00c6211, 0x0)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x93ca)
pipe2(&(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
vmsplice(r6, &(0x7f0000000100)=[{&(0x7f0000000080)='\f', 0x1}], 0x1, 0xb)
r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
ioctl$LOOP_CONFIGURE(r7, 0x80041270, &(0x7f0000001ac0)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r8, 0x0, r6, 0x0, 0x6, 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_UNISCRNMAP(r10, 0x5410, 0x0)
tee(r5, r9, 0x4e, 0x5)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0], 0x0, 0x16, &(0x7f0000000240)=[{}], 0x8, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0x11, 0x8, 0x8, &(0x7f0000000a40)}}, 0x96272de3cc6bfc5a)

5m0.270960094s ago: executing program 1 (id=527):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @broadcast, 0xff000000, 0xff, 0x9, 0x12, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x0, 0x3, 0x3, 0xa90a, 0x6, 0x3ff, 'veth0_vlan\x00', 'wg2\x00', {0xff}, {0xff}, 0x0, 0x71}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@empty, @loopback, 0x0, 0xffffffff, 0xe, 0x2, {@mac=@local, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@random="8e932bc3db22", {[0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x400, 0x4fd9, 0x0, 0x98dc, 'team_slave_1\x00', 'macsec0\x00', {0xff}, {0xff}, 0x0, 0x280}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @loopback, 0xf, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @loopback, @multicast1, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000002300)=0x8)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x60, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x14, [{{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x11)
sendto$inet(r6, &(0x7f0000000200)='hello', 0x5, 0x0, &(0x7f0000000300)={0x2, 0x1234, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x11, 0xffffffffffffffff, 0xc10c3000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cf", 0xe2}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010028bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="da430100000000000800168044003f8014000300776c616e3000000000000000000000002f1fd83910391dbf09d07ba1bce2b34be682aef6b014dc9d619e3be2b5e5780c5046f1a456494097aac21aa67b15676aafc6d81a8cae76f37fb367f50276c1687f1a4dfb536ae3a26e1c0e1092352950b124dee4d9519d95de12e4cc9a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000880}, 0xc0d0)

5m0.188164798s ago: executing program 32 (id=527):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @broadcast, 0xff000000, 0xff, 0x9, 0x12, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x0, 0x3, 0x3, 0xa90a, 0x6, 0x3ff, 'veth0_vlan\x00', 'wg2\x00', {0xff}, {0xff}, 0x0, 0x71}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@empty, @loopback, 0x0, 0xffffffff, 0xe, 0x2, {@mac=@local, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@random="8e932bc3db22", {[0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x400, 0x4fd9, 0x0, 0x98dc, 'team_slave_1\x00', 'macsec0\x00', {0xff}, {0xff}, 0x0, 0x280}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @loopback, 0xf, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @loopback, @multicast1, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000002300)=0x8)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x60, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x14, [{{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x11)
sendto$inet(r6, &(0x7f0000000200)='hello', 0x5, 0x0, &(0x7f0000000300)={0x2, 0x1234, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x11, 0xffffffffffffffff, 0xc10c3000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cf", 0xe2}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010028bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="da430100000000000800168044003f8014000300776c616e3000000000000000000000002f1fd83910391dbf09d07ba1bce2b34be682aef6b014dc9d619e3be2b5e5780c5046f1a456494097aac21aa67b15676aafc6d81a8cae76f37fb367f50276c1687f1a4dfb536ae3a26e1c0e1092352950b124dee4d9519d95de12e4cc9a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000880}, 0xc0d0)

6.112501766s ago: executing program 4 (id=2204):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c)
recvmmsg$unix(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)}}], 0x2, 0x40000000, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
sendto$packet(r0, &(0x7f00000002c0)="22fc8d73ce2f6e5d8b7ec4549dc4c7d192ce214859b331851b3c0d40261ecd71e9237f537d02780a09da1bb401f97bb4a1514194fd501053489b6e67ea77f2a46fcd3cb87826aa79716afdd006287fca62912185f9aec9814e9dc31f8bb25de154bb3a32027c8494603c34e3126ace10d78f58c339c273b2c3844915ae5b27d9b2cd0a0d8f1f83d7ac0c712ecd84ade453bd337de3a090fd0e94b1c8da9da110c9d134d416678e8cf5399f4536", 0xad, 0x40080, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(&(0x7f00000001c0)=@md0, &(0x7f0000000180)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x1001, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='1', 0x1)
r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x0, 0x1}, 0xfffffff7, 0x40, &(0x7f0000000000)={0x40, 0x1, 0x3ff, 0x2}, 0x8, 0x203ffffd, 0x300, 0x0, 0x3, 0x2, 0x0})
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x4000000, 0x60, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffa4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0)
write(r3, &(0x7f0000000240)='10', 0x2)
close(r1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x22004002}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
write(0xffffffffffffffff, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x260d60, 0xaa)
unshare(0x22020400)

5.788843154s ago: executing program 4 (id=2205):
r0 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13500}, &(0x7f0000000240), &(0x7f0000000480), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, 0x0, 0x1)

5.746382467s ago: executing program 4 (id=2206):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
fsopen(&(0x7f00000003c0)='befs\x00', 0x1)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, &(0x7f00000002c0)={@void, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x88a8, 0x0, 0x0, 0xfff}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x26, 0x18, 0x67, 0x0, 0x9, 0x32, 0x0, @local, @initdev={0xac, 0x1e, 0x3, 0x0}}, "0f453e47"}}}}}, 0x2e)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x12)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4000002d)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000540)=0xe4)
setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600)={r5, r6}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x84, @empty, 0x4e1c, 0x3, 'rr\x00', 0x39, 0x80, 0x2}, 0x2c)
r7 = socket$kcm(0xa, 0x2, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
lseek(r8, 0x1, 0x1)
getdents(r8, 0x0, 0x48)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004)

4.960652535s ago: executing program 4 (id=2208):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
iopl(0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
fchdir(0xffffffffffffffff)
gettid()
timer_create(0x0, 0x0, &(0x7f0000000340)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000200), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000)
ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000200))
openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0xb00, 0x0)

4.622805588s ago: executing program 2 (id=2209):
syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x4)
r0 = syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r2=>0x0)
pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000140)="37bae02adb08336ed0eb8ab34e31758fabe1", 0x12}], 0x1, 0x9, 0x6893, 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write(r3, &(0x7f0000000100)='0 1 1\x00', 0x6)
ioctl$UBLK_U_CMD_ADD_DEV(r3, 0xc0207504, &(0x7f0000000300)={0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@new_dev={0x3, 0x1b3, 0x0, 0x0, 0x1000, 0xffffffff, r0, 0x0, 0xc3}})
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5)
getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r6, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
sendto$packet(r4, &(0x7f0000000640)="e96698c1c48086c7ce75af994616dc04d5c1840a9189dbd5b35d3df486b21fcb17c35174335d99e7", 0x28, 0x28004825, &(0x7f0000000200)={0x11, 0x86dd, r7, 0x1, 0x8, 0x6, @random="842c4c45bc33"}, 0x14)
io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}])
openat(r3, &(0x7f0000000280)='./sys/bus/netdevsim/new_device\x00', 0x488100, 0x19c)

4.079381363s ago: executing program 2 (id=2211):
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r3 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0185648, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f905, 0x0, '\x00', @ptr=0xa}})
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
io_uring_setup(0x3fa5, &(0x7f0000000000)={0x0, 0x6cae, 0x100, 0x1, 0x5a})
epoll_create1(0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000c8c0)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xb}, {0x5, 0xfff3}, {0xc, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x40090)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'ip6tnl0\x00', <r4=>0x0, 0x4, 0x7, 0x6, 0x7fff, 0x51, @mcast2, @private2, 0x800e, 0x40, 0x0, 0x1}})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0xb0, r2, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x2}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xfff}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x309}, @ETHTOOL_A_LINKMODES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$cgroup_devices(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='n\x00'], 0xa)
pipe2(&(0x7f0000000040), 0x800)
r6 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
syz_io_uring_submit(r7, r8, r9, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r6, 0x1, 0x1, 0x1, 0x0, 0x0)

4.069782345s ago: executing program 4 (id=2212):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="00007f00000009009197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0xfffffffe, 0x8, 0x4000004, 0x80500a}) (fail_nth: 1)

3.70227162s ago: executing program 2 (id=2213):
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f00000009c0)='ufs\x00', 0x820482, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp6\x00')
preadv(r3, &(0x7f0000000100)=[{&(0x7f0000002140)=""/4089, 0xff9}], 0x1, 0x10145, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000a00), 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
r4 = getpid()
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000ac0)={r3, r3, 0x22, 0x0, @val=@kprobe_multi=@syms={0x1, 0x1, &(0x7f0000000a80)=[&(0x7f0000000980)='GPL\x00'], 0x0, 0x7}}, 0x30)
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x0, 0x10, 0x9}, 0x18)
r7 = open_tree(r6, &(0x7f0000000940)='./file0\x00', 0x9901)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
write$UHID_INPUT2(0xffffffffffffffff, &(0x7f00000001c0), 0x6)

2.591359401s ago: executing program 0 (id=2215):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000083c0)="7c60933a88d76a2979d19b1a47363b838482a15ae1ca46df7c8f814e6f323fe97147d94c37aa14d23af92584e955bf5ea604da1371ebeaabf79f6229a064fddfd40bb55b6fc2ecccd91b7d7be714f4937db04551c462bff3ec4a191aca744d2792a717c814a88fe5e7127c330d2ce063c5ace17455db94d1096bdbaba282ab0eec92a2fbe9939807c200405341a0f8ff71dad41cb475531f48647a876cb61cd4897cec082383e4f465d2788597503edf9ed5ffb2113a2aead5ca76451f88699d46132a2cb30f1144d25c248f45c91f8fc4ae359f80d83af6966ccfe642a6581d3e3d66d5acbf1cf57ede53788786821526175b67c0f43de5058211ec7c59fc7f1684d816d84649915d1f9ef40edd517e32ae9e20f1d82065111ff318badea5b9af137f4d15eb2cd861525a297df3a048a5e17536212fd5648c76048f2490597ab08f79f003ef52a34cd37fb72922757188de4e1883695c8a600c88c3173fda0799439ef7f8f3ff30d26c60c528bb5b14018179e0290fa0bc5510697b07ef514bce316a1f101286472fc464c24eae6a265b63b98472f5d669bbb5dd82925f45246c453e5f66184f69047af37a12733117e6b7dc663a8aa2e2fdec59dee998f1794aafa4a56d312b3f7820d43c78cac7b3fee7312e028fa571ecea92d3db79b185c697833e18ebdeb1a1b7d48633dc6ea78cefd74a1399d8a8362879c2416e6850b483057807d080d9ad61cd1b3d3eedfcae780315c1b5c0735f4655f732b4dd8ba55cf84d29c9c6d06f3020e7042b209de37e51a7d17a930b834f98a4805e4ee18db264a63dd0c0949d6ad332ee9ec915a1e5d1dd649ad09022023792a7a59ff1d21c18d6efed92d65cfc27d0f953c35e8a3b9d7fc23ed37bc054bbd0f867a5cc5cdacdb08b3ee2dab67b9552d0c64df74fa945db0afabd7de792ee04264c8d3f3210be29465fc2af853830c59687f3c2d5b29602c1260b3cb31e95beee609ac3bffd7ff00fc97089f5791f670bc9fbb7252c24f981010235aa54cb77be24d9b345a1e21ac19b9667712d3dd474d478235f9ab438b36b0b27151c3f403c50b0f82379f8fbcef88e3d7bafad1112804d0726b43617b332bb55a323a6eda3a7db340fd9a5b625d2f992d084d59bc05144a239dafb782663bf5d3d3f17628e5c495fdb4953fe67ed7011ead6c7202b037374f8e819259a7ab5c617ae57508ceb1ee09a79fca924ae2c2db0c1f64570f823d29f703d09af1053a3f55014e1af9f0c72710a88b26bee1735cd1b7d38c499b04aadd211efdf60a26e51bb0ab9e22a40fe86c99a48cb5c9e0a50664917279bbe161e80294192a3ea22bc0dfb4804708e8d0573a98ef6c056dea914e3bd7a49759b4438dda9ffaf86c6995ef526565c15cae88f4b340c074932fa0f161a25294b3417ff2555109705521c4fafd034b9f9e5689efa1a5003d510a1099652b46e6797af00e0328670db8b29d48e96a904f998b7ca59a348de713476785f1fb76b5ad91b4107a745ca43e67c6257b11571d70a39bd1913640514611511c54a3efc03d54fb29467973f95a7396498088e935428f8fe6021f61b536227e4c9958e7ae8cc599d8fbe5fe4218c7405b828fa4e84c92e98be66d375e1c3d31537180cd03cf0f0c3b1592dfefa9b8466bffe96127a3dfc12784ebf9ff440d824eef957ac3fe1e457a6fee39cedc00c87f9f1bcc68c91333656192f2479461ee3def59bc7cf19c8a2f36bcdca3c173264e5dc251f15d27612e869e8e18a3c412fb1c6eda45364732e6b552fca8530c4e8143d67b3697d45d5286cb5d2478a8a4d144657277bce97fea1bc405c40892e37c785b24e3126942ff0effcf6fad105493b9960a5bb1fc4dbc4dba44b141c8841ef1e44901f9f7bfe5cc942dc31b514ba36cb858d9537a5eef5cd7f6f2c2a7e5452029aeff5274f47ad6360257d1156e776ab89dc9a7adc2e151454b171f785ced26d3c69aef8a6fe53b4915977f11049a1787a3ef0bda32a10e4ca92d31e02eb77c575562f173943c119479d10e4714b86ea0209877326163813c974650cee30757ae5758dd95be001cbad0fca9d8102cd6aeae0982c017040052983c76e9733c58e94a739402451555e59e5ff0932b09ca975d66ac3a48701c7c98b4fdbf84ce894f02da3da2e0d7737b2cdd4d5970e003bd925c987fd6e17ba109ff50398869519b6e6b48141408d977d973ae99e12f541ce28ea765f72d9f09e82bd9430fa7092f67570a4af1010d0e2ed7d0e2c9f5c15488fc5369fa1546c61472e4e05c38b6a857e73fdd59f0946d0547fce3415a606700286a5272f7933d33bb1a7e5e57e20af8374524436d25df2c6e5e76fe5ee89d89643c939ada6997fd53ff45368fab6e952482a7bbc3e75e9dff4e830c836b6c2792b7ecaceab5959dd454a490a54147e56327f7187382e2e1cd78df1b7c603f4cd42e776eb9f60b0ce9c3ea3392bc7b86ea9c7c4bfd7137b0a469b83ce4cd25ed1972904d5ab825d5380846ff1ae33bbf01366d61cd6c067becb2800e6463f40300f8731d50c5ad39f8de05d9100bc0265b6fcbe548747df89e614e7767b30e086007c2435ac5b62b9ae6d4d83ee1a61e4fa608848dbc1d229bfffc3e1c05d364adae3d21b653f9a671e42f740dcc3c8b10c0a0bc70d093fa8d2b99b1a09e391004c0afc765b4aa210dead05fb9a5955a2291bd4181e752ace0db6f1217fdfc56aa2392d081176a907e26d295f03321af736bec89577e975b18b53af8a3480447e8aed18718abde41609723d82cad1a5b7a17ac578310b7fd6ee9c31bfb5def019d00eae869b8ddf9f135c5cc325026da2c6e8e5ca9f30b928c0ac884409f7b8502c4df1d5a4a1a64f294987fb94c2288de8d16dc6eef3206d38f2d0f5dcb13d43633a7d0e2f9f35cdcab95975602cb5ce0a6b6833a0b96a9d3c0fe32afbea9d9a92b86dfe5ab1caa7f77d47ac0410d81ac624ce7993054061c2e01dea2c64f0cba89ee88a0fa54c2204b74cab75b08bd92409f14952170c6e3db551f77bb5e892380a7923821da934ac6a3f3133c0ca45828e4b890ed8e1ddfa7cc0fa3d69823f18888dae08bdf8e7633db061b47555360f51493ed9f46426150e0d85744cc1df2dd55f1c02d831a4ff90173af5b9feb77c5f8d21b75a1264e53d87e3893bd32c5cc8aa3fac0547307ed481b0df6561656b144580e48e53c58783424a4cfe99b06cff968c641f05f91c141483fa9bf94ed2a70a2f4a8e809a375a11bdb1563b540bb3a0181f48d165b781fc250a5a076fc2d4c1b63d5ebc0c5bbb711f7955faf7b581560793508806dbdf490ef1b358476157784412d6bb11427b4c937e63e17044cbfa79fcf159c1e632d2cc1de85404327ebbbf4b7763184a059d92ebb6e19a6156defea425b79a4f9a4651b47d1b9f8ff65e016b62a78f4893e0bb621446cac2a6c3f7e57092904a47ffae159e4d7ca0a0d06970dae6b7e7261f70beeac02f19e26caf7e745c82690c4fe9483dfdceea399d6d254181035d9baa211e87b94bc178d6e86b5a6bf012ea39223ddeddfc4731e0c8b5d6d454e76ff6018fa5d0039f991d56f78d953633b0e2457c67f5d06f35940d75dad0904dcb9e48033f1a833beb1994ed2fa58a0d75dddc8e570eddcfd12bd2239f1ec001e940b203fa73d87e715a5d431dfed069b77f9722e6f8c0df9b4bf6374c7848b26424fbb5f75c8494532c1ce6b825e55aca77e056a7f0ca42b291e96d1d5e92b3b628ae7d5a2bb73eaf8deb5f80452ed1a47afebfa084eb06c9897eb70ec3f4aa32c5413b5118ae57fcf5b9b236099f0d8f3fe5cb3a2f0def902057fd26d2557168322c13066af51b882be00ebcfdeb6e33d294214ac4e4390b2bbec78be29938ba03ca9f31cf36d8645d1f8bcf752d6d9ccddde2e8cd3bd90d01e5c14d37666dd2e5768bbf1df585d5e0e986adbe379197d1aa77e4dbdf55e9d7f64a5bb4ab44403657913e4723a6ce5196e5a67ed0206406940202f697e2c80dd0efff938ac79458661761846ba57911d7d86bd09d94839920176460deedc3f13feb96e28554ab01cc95bc9764bf7527b0153c45955cc7e71f97ae452f2c9e8277ab66535d3f6c87283791fbfc7de2cab1313e821613b0db320985c9ee8b0066ca4a1b8da0ea43c3f453b9983a6d5cd01dcf40149fd4f441b7f593987a05cf41088f6e474c1a5a23be48adaa73d8e90a1c4857e7b88743345014670a9c74d748765872d447f00cc6be4b03e5253b1709d0e47e2532347e0bb748bbd05f2d3765c881325fbdc04d582ff128b38fe29c04e75554dd82ae6c81fb15d93cbe96563e50c46d65a65eb00890953714f5c1c198566ba6de1db794297f948f0c315d433b77d867a9db6cca86241cbb4db80fb9b1782b5bf0a57401b79644f45ecb9d8642c6aeacbfb70d8b8429c5e867ff780a19e8cd80cc153636f17e338b8c069a54829c8ae6cd9361fb10ea5eb231811a45336fa650f060d21c481580456ecacea8b5ee5050fe84ff5463df2d7d5d475fe65da9e848ecf65769dae6da4b7977d5b95307694889c703f8eff6ae51182dcd32ec27c1b453a216913a79653977ec256ad37739a6e99b6fb0f2b2aa3f1f494c01c2a7f79da0a6ec6a0a855fd0efebeec595c1dea772d064f9c046096069285c22f117ff8bd16c4d003323692036a22002f3020d28a94eeae09894017fce5747c1374c0dc158d4d930452ada5a1c4d00ed805fe14d4016d7bb5ec9b064c5e595bb63c6474d94167839a8680de9f726c5119e73c563c15d775a78425562eae4a07d70c8746de4514fde36fc0ea1c7bce94f016444812c11556d8d82bc7aae33d4eceb684208b6eef7679012ec5549144a2716226f3adab8f52b835f7704b11443df808d5921ee920899757b438d5c4a0b50264840cace40a159356fa271b039edfc696844afdde58fea1787a5f38044cc50a9978d1412930f9dba720b6036f4cff01b04b5bcbcfd4b4be2fc37742eaa4ab2cc0dc3843d8beaaf5f5e3ef70a5c48bfe26502f34647c4a6b0b6daa2db6ef89d2b808647d7ecc671be7cd014940e8c2b1e3b59f4e031921f30adfc0c1b432e8f388fbee20948e19fee912dbf7f57650abd65de07807495e273a78481c3f21dfb83e5f8a60b5564d0699a90c079dac2caf8f4c8a3e56fcaf9568d1b9120803adecd3435d9134201576ecb332296897e81a56c0b229ee3a57fec2212c9ac0c771064c3cfece323b97e8cacce390d58cefca0417d5fdf4eb9acc1c754d5d04e9b85a62e3a19d8fb1e8dc23b63ab8dd4552439f3c90ce0047792d769fa2e784a8d7098f34f11423ee1a0d47639d7759b8affbf50e77e74e4af57b33ab87a2b049c84de6c55b341bc51ae2a107995bc8d91a75cb455af7b95f5c49539aab76fdf159bc64bad8bba493fb49c5e08f2cfa8a0e4c5ec35dae9ed7e01eb24b54701ba7960a258e2428f50e185d1dbed1b566845f136302d5f88f5b3eb244e611caa6e1cfacc9b0c51d7e56d56297c08edaa1f150e138370ca12595598f4d2bbc7639adcb6cc051c71f2d04f638d570deae96842712bdbf68daeec73478148254f709776ffe187ba4b38769f04489d87d7af42c7dad6ab1064035c5c61e69a95c660d3696c6f66a43fbd57a931ee172a3eba71cc0b4d1a9c1f6a28d95489d0dc2a67772457897d74f51e3672051593e3a9624c3778d9dbfb05ff3aa672b3c1cb83ebbfc3a0212f8bc1366a0f32b62a3f698f6ee31d12388d43464955c72a6e9ed5dfc7deb7f09c7f23f01dee2b3437ab5af05ddc7f030afb8b714a34573b425288379bf84a7b5200476df88b3874f785ec3cd1aa946558159f3fdb9cc481094f1bc6a01a11fef9b56bea73a5124a62456b79f22dfe60ce8e53989c8b1d0c031ee35ba2bd408f99ca48b6d9ca1414c5e750d5efc5fbf225fafda284ef80118964292d18f77a01eabdffd68f8c62d8af07a5a6d5a23464c08e3bbfce5912abcc1f4acacc3d4bc0cf511cb9682dc5fc775a0fa0229d6260370989ae8850ffbf0aa94bbef450994083f4b0616c7f481fbcf373b4e6f8cac4949f13d9c3b55e27275c8fb6d95d9b3ca9c7df28b8b8331e81fbd8dbb9bb63e19f8f6a10ef16d1fa0b000fb72af4894b4d51663e65d717028d192ca935ec17aabaa8602867afc5942f6624a57ecd7572521c3eca53ea09cd7519c724c19ab89b63d1752c1c503e732c72b0f0d8558900ba0c575b918ac6d4fa9e0ca8584876c654a83000df383a4cf41ab54b8f8df44a0e59499dd850277c14f6ee8bfc86822dc473b33634dbb638ca0de90a4e506854d468894d8409c15bfea5ba91720a2daa2e4946f5897bb0b03accb214c3d06ecf711166202d24828fb4b9c96ae0db50ce319a64750e002198b73ebda97dd96a677da9fb59feecde57ccf492b300667b743611a29dd4b30190450c640b2ae5da517edfd88a78c8fdfbaeff0bd17eb334464c0dcb3b851a9fcdb4485bac45262bc985de4cc2ba2005e82549ba80833641a4e86cbb8e18b960e8deb880a3cd8c75941fb0c6969a6cc55977d9c970dcf7a7506e581c795fc59dca99f80486e761bce7262407df3b4f0769b295011fd4f568c18efe53a1b058b43472d07ed4860f38124678994def0a6c72f84f0b12280e91ff4699ca93d12f8c6ace9d2e89844602d52d0ce1acc16d4faebeb649bab4e3b5c16973a765e9488acaab196b5aac840826609934b99a9cc513f6a546a542c2313c5ec5a902ab4a3186ae97156b27216aea9879503d402314e7800714ad6e78cb8f627a4c80497efd68bbf522aaab7b68653236e73229378cb198ebb33aae5e4a9adfb99fa6e38b74ca1af9cad80ec974039769c633694b161628c3e97e49a78762d30f8cd513b9df0f917107afd11d77c59898ce270e60d91ddb526c679b98500934338a8a4bf994ecb6078fa2ce773350184d81d431a5e31fc672d4be414b435b779135f7f60d4a1269c24d2c135d41b613f43db878c85a414e9e79b4c09ebaf3bba6a000fdb59f9cd91cf589e09d81e41b84641d7edafd018396c2f0243de265a6a238fdfd00e07c206ea6220f3de46fcdc1ce39efb01c8569b8c1c3a3224b5dcf909a13f1d5e8ba2eabf1d533360c3f96a8628152d3c7467c9c2312f2aa4e2f5e4cb08519f75cdff4691263fed7cca0f8ebc7d0890adafb0d758794b4d82696ae782b70addae7c67d4bff760a1c2ebbab45dacccb651b2883e464aab45f98a69efbded5338ae4ce54e66c6657b40f040ccf698bc1f111ac04242508164c92add63b35a3db0ff11f29405d964c76e9cfe90dbd035249f443ecc2d80d5602bd805de38907efd1729767211e19e56c15c939c353ef18fbf56f5b2443d16354022a22ce835572d8b039face4147403633daa3823c3b6dc20f1675a28dd28187edef3d38fdd5e21ba596fa881daa52e024088aae82744d04699311228d7b1878ff726e21627f91a3e58f55e88c48d3db3592d568de891e5e48e00a39be19e4c43553d9613c34b1df3d96e3ab26a759f57f7b3c3ff971f269a51a953e23c646b39836149f50b11914d5861479d03319bdff8630e331c60c73eddd6cc3f041383b598d8055488517fcecc9bf99508bcb1e4a3120ee391ef8487265d66994dade2343717e584fb30abe59cca126ced0847eb2c4e4bd6d5fda67c18a0adc7a0bf59610c98988b3a08ec7130f3cb69be7d7ca0555e92417f25306e79b5a509f68c16ccfe8d8c69967a9f80b87e163d414efda1a9bc2f0f691b64cf58c8b6636dddf9140670d2d0d883401afc51d05445b49b4d7063dbe0c2f7ac63a6b09ce465ef5953b9b99bfa578819716d3565e4fa0d95a2e1266abdada47ece5332dcf9c4ce68ecff1397669db3fbdfa22fdffc39eb665a951d73d7fba0fafe0c02ca69b4ae43b5a251e743df672d3e5c6893c7701042a2366f7e3d9406235993f3ed63c7356651acf17cbf6229bf52d1c895d992378457bf035e3d79b58de436966e2ab4236194ea87ed0745216542866cee8cc92b1abc43b5d4628d9bde4ba674229bb83a9aa15613d102e1b39c12e3ed6095284282452bc0f63557f06aaef97f3a0604f467070a350c8f94a7d37d43c81c6b6f71cd170dcb742515a58baa40fab685a79ea8188f0d6f893d1a1a86b1fcce9fd8353c9602974ca315fd129459b88f6129b5d073435eac7c6fc00ed5da18d27e72ccb0b5e755fedafbd74770772f79930b2f5db8451e1ea004db3f826df026f16dd831a68737476b1d69d4ed46fc48ad14425a455e689d51362d5b445da484950ed2b0943e5d3a1e88afadb66f7e817b778ac049c91875a626ae347c5ef28ca1e104f8cf7f038f5551581e3d6375647777de8ae9854517217887a957527148d8a0438b5958ae7774267bcbb6ebda5f2af12454ae2d8dbaef741ed936bcee0135cd440a83146446ed63b8e279f9a02c64b8bc082b1d31157e86c7cf374af30442c2c6e91a1909289e7f193ef9caaa516a1951b6042ef3407f55b19b28646357ad6f06913466cad44576d39623376fb47f5f21a6492e9b2286bbf26e539815223ddea65635d1e5901b91902e888b8f22d8fa9989bf3373bf95458b57fffe8d5cbae020000004742d77bb799a985b245384cf66ec38175a081fee6d84d13f27409e51bf9fdaa92a596058d280f204ea98fa8468266a5dda479196a2111aebd5638b890d3da16033c6135aa57c97bf3bec417059e1e7d3066a1d094d37b05d33719e62ee392ff7091d02c26375b56a2cdb0d76e3f93dbb4ff256eb43aa281f7fa0525b33d68b0d9bcb4ee5a7787d3a9a51d87b2395b7848113b917230bc4329f89beac3d03b72e7b6e9f2404bbf5cda91dc876246bc391f6107dcfd46bb566b9371a85341e09ba0355de0b340d319c96ff0fd7f9b7e75847ddc5f902f67a109804ecc1e176c20a14d07a8726a167c2d22b272245ad607ade6524b3751d6240a7fa924ab7a0977ab7a8d53ad12598eaaee42b60fa115004d3fd5a81d5f05c8529c43bba0bfceecf640d2e1d00f1de89be887a443232d32945a6b93067b86b1ad7690bb7451e1dc05cb54368de12883a65686eaae6c572cf7ee3cafe8a37da87d62d5a19b1f0691f1a617786ee2a8ebca5e085e0bd239798946a43302da7d369feb1e9d02788378af55e7af698fa1996a0eb27ed1b7daf937331f1fd2a23d77fb74c32dd73e314bb03d6651125606f499706f19d3716990c359cd726dd6c1e670671ce0bf18db472197a36e99b8b579fb5d4284ee9d23b9774e2d9fcd47aba2faddcbc53e28cdc4b9f25417eeb8cf01a3d0cbd98ca0c83f32f935742465dec5ac714fdfe0b5fb679937cd44df27ed81ca21203e400cbcf8abb36fe86d5f99a0c425c4321f23e882ae919743e17f927bc4999135d50452b89f1fac9107b5499f3bbec5710aa6804c8b95138595ef043ea4da063a540f451917fe1facec0de011597104a577bee29e6ecf69f44892282feeb6afcb0f5ea17c3272a5fe51bbf69a60d4432358087dcc1e204c325b12fbccdf2e946420691d611d286f51d17a3e5eefa3c74351accede359968ca779b1d3035c08cc9ccf5bc62b1520efa248e5cda2bb3569dfd6571d9219486f3aac82c63b4213f8b2052f39046460557a83b3aac740182f5c1574efc752c3d8717551a554717647eff9aa015d6f484c647aafbf8f93fba8faac812b0f51beb76c0e4c1b85789f8b1259dee1bc8a013ca8b9b7e59143cc9748020a75d2d099323294179630fb42344ce9e986cff8af1287348219cfb1265b04c4225f305a6c81efc1e3176c2ed31eacbe1ad2d32dee14bd66c140ebe4dffb2b45d87f093a452cdbe459b8bff9b2814478dbe2fde437887534d5b7acb3172508bde4a98bd0453750e6ea49283e7798646863b11268ab352ade2c3a84370ea08b50245232c715efd33fafee4b5768d75afa9d8c5cc7248516df5449b930a6127e9d287ad09c9cb7cddcd7926383312627037defb1fc6c788ce27ffcb4fd2be4203a3caa2e52ef66fe74ad5a5bb268054ad9c518630944c0f2954cc16ca0b443bbc30e551533c45961c4e9e946969598e011358d60ac38e594d81cb32207369b7ca01e410b36b0ead8340147ab656c0b811a3d91fab5ba8616bd4e37340db79616d9b62525f53a2dfe0424ac56cc7ebf150158257ec3b1bec84dae3dee711cd119fc7484664ff23c173c4edde30de8c3fbe715532a3038dbf2c58e660b1c4ce47382f0f6dc175875a06e6c81f135d674854dd97e9b869965b2b570edf514959832cc6d2c6a73a0f4942b221688349aa3e18fa1b5d214c1d4a0a130b5856ba1c053392474695366691e49524335143d671858b4fba20afc81c38d367d9fb7c576a6bed03fd1b6bf8239acaf4defae336dfac2105e8cb557fc7e925a8c448836ad2007b7a861f995fc3ab468502d656d51031799397a361376a257829c948c00756f472ed7a6b90b738217ae47f5360fe8a0abd912a57b9c3b7e8bded887b394c820f5fa04f4ce9e2bfb686292a8aa55a78fb0db03947e31ae98adb3b4404275696ba63c67873d8b2dbd146933a67e0c3f2ae8ee310e778c9ae5cf11d021af9530c6066ce833c3726b600a5bbf614d4099ce5d09c0ff8b29dfba32882c431780eb48b7ad19c90808892795ccdd0cd82332564daf404a58986e6b556c1dfb582fb5e9c9febae027319dc90a69f0bf37ece6392f2c1268a0dbdbade3f10f065c4936250d0230cbf7425d68bdc65ebc174039df0a6ff2988cfbea6055e73384ee5ecece1f14431592a52b3c2e80a5d3ad6f8197bd94146f968ebccb8f0e2180d387ebee3b9269c616ede15389e9f61fd5a23778dd26e0c40321986602046335112a2022ed46077594d28aa01bd63a9affc8df91e60e5d1e498f80c14839cf335cfe017a9e15e04768d7a36382970a5ad5db557a9133ad03b0131005c9c78b3aed1978df4939f967cf6254dee706bd459dab264af3a857adfe498928be418fbd28e3576384823fb629a927e3dededee8b1d6a5fca0dd1bdd8ab6d0c6d5d3bb5e29a93d2edad215903c94af9aaa334f1be42c2b9cff2d28fb18f334534770650cfc2c60693a25f829b1167c4a1a75e244ecd0ce73fe7badb7556d0502d99bcb6341bf82f64c36da7649718005826c6f681f92304e6fc4f667d77755cc6cd40611756dc2bacc31fd67d60facf62dd23345be3aa04493274474c298b16e8a0789add54c58e6591d089783956b45055ff401788f14e2333bd2bccd81412d0aa82ab2c19ce8e7499e7056b435ca4539985734a0ae012903d790265adf79faf61f3b865b4b4a9ca968da561f23a537a411ccc13ac5ba14a85bef64f3fae0e0bdcf9e70da55dc2c44f89d263c1a44f18b50ea3a02c073183e9816adf7d841d597931f116e2b325c2908545968b863e520098a295a58d4261d0bd08d1cd77a7eac8a64feb114f231f9e760ec6d84634ebef6d1b24d85fabd72fb15735390c0aec246c909d5c82976110844b5bfde94aadfa6a89396709000a59c71331ea7ece5719057c797d57c0a4d2aa51", 0x2000, &(0x7f000000af80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)={0x140, 0x0, 0x3, [{{0x1, 0x3, 0x1, 0x0, 0x2, 0x0, {0x1, 0x1000, 0x8, 0x2, 0x8, 0xfffffffffffffffe, 0x2, 0x3, 0x81, 0x1000, 0x20000001, r4, r5, 0x1}}, {0x6, 0x6, 0x96, 0x4, '..\x19v\xc2\xd7\x8d\xf0A\x92\x96\x1c\x05\xc2\x9b\xfdxEY\xb0\xb5O<\xb0\x86x\a\x82S\xecn\xc2\x0fb\x02\xb5\xe6\x18\xef\xdf\xd0\x19\xa5\xc4\xca\xf9\x00x\xdb1\x12\x98N\xa3\vxR9b\x89vC\x12\xd7\xc9\xecr(\x14\xca\x80\x97\x9e\xc1\x11X\x9ecN\x0e\x92REM<\xc27|\xba\x9f\xb6\f8\xff\xae<\x02<<q\xf3`D\xea\xd5g\xb7\xc3\xe4\x81RX\xa9\xbf\x10\xa3J\xe7Y\x88$r\xdc\x0f\x90 \x84\xfe\xe3\xe64s\xa3\xde\xfe#%2\xc53\xe7\xc70\xf5\x1c\xbc>\xaa\x02\xbc'}}]}, 0x0, 0x0, 0x0})
mount$nfs(&(0x7f0000000040)='user\x00', &(0x7f0000000380)='./cgroup\x00', &(0x7f0000000400), 0x40000, &(0x7f0000000540)=ANY=[@ANYBLOB="002c5b2c242d292c292ca6056f74636f6e746578743d057365725f753d402b2c61756469742c657569643c00000000000000", @ANYRESDEC=r4, @ANYBLOB=',measure,\x00'])
r6 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135a56412a20d4363f5df408fc6441639e75c7470bb11", 0x30, 0xfffffffffffffffe)
r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10)
listen(r0, 0x0)
r8 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4)
close(r8)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xd8}}, 0x0)
accept4(r0, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0x80, 0x80800)
epoll_create(0x4)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)

2.067875111s ago: executing program 4 (id=2216):
socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="00007f00000009009197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0xfffffffe, 0x8, 0x4000004, 0x80500a})

1.861078306s ago: executing program 2 (id=2217):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
symlink(0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020)
rename(0x0, 0x0)
symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000680)=0xe4)
mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x80000, &(0x7f0000000400)={[{}, {'erspan0\x00'}, {'GPL\x00'}, {'\\@'}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@smackfshat={'smackfshat', 0x3d, 'erspan0\x00'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r4}}]})
r5 = accept4(r2, 0x0, 0x0, 0x80000)
r6 = getpid()
ioprio_set$pid(0x3, r6, 0x2004)
sendmmsg$alg(r5, 0x0, 0x0, 0x8040)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

1.71960795s ago: executing program 3 (id=2218):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSRS485(r0, 0x5437, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
r2 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
r6 = accept4(r4, 0x0, 0x0, 0x800)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r8, 0x400448cb, 0x0)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc4", 0x94}], 0x3, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800)
recvmmsg$unix(r6, &(0x7f0000003900), 0x0, 0x41, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000081b000002000000ffff000005"], 0x48)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940), &(0x7f00000009c0), 0x5b0, r9}, 0x38)

1.684221646s ago: executing program 3 (id=2219):
mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000140)={0x80000001, 0x0, <r1=>r0})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@private2}, 0x0, @in=@local}}, &(0x7f0000000600)=0xe4)
quotactl_fd$Q_GETQUOTA(r1, 0x3f13b2fce8b4b17d, r2, &(0x7f0000000640))
shmget(0x3, 0x2000, 0x800, &(0x7f0000ffb000/0x2000)=nil)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = getpgrp(0x0)
sendmsg$netlink(r3, &(0x7f0000002cc0)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfe, 0x40000}, 0xc, &(0x7f0000002c80)=[{&(0x7f0000002d00)=ANY=[@ANYBLOB="742200002100000028bd7000fedbdf2508004d00", @ANYRES32, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="dfefa04c9c7426b0327c37871a04b70a86d5cb17820104b193bfecf76907001d7364d5527149d9fffe8a62a80c004900d3920000000000000400608000000000"], 0x2274}, {&(0x7f0000002bc0)={0x3c, 0x18, 0x10, 0x70bd2b, 0x25dfdbfd, "", [@generic="62e261aa60b19bfd3bf503899fce784fc4a3cc169af540cf5a95b02dede3201d6add8e98b30d147cac6c"]}, 0x3c}, {&(0x7f0000002c00)={0x70, 0x22, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@generic="60e19c29cc5e72756dd6db26f06ba7eab74af12fa4d4f646cf1abaeabb257c3d", @generic="795a36aa9506bc695651587e33968fba5be0bedc32e6bc25791ac947f381cd6451eb85143707c1b3b8d73e8d3a9a9293825b83f79c0acc07d8e948091f095bc6"]}, 0x70}], 0x3, 0x0, 0x0, 0x810}, 0x11)
ioctl$NBD_DO_IT(r1, 0xab03)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000006c0)={0x0, @in6={{0xa, 0x4e22, 0xd, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x32f8, 0x1, 0x10, 0xfffffffb, 0x20, 0xfffffffb, 0x3}, 0x9c)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {}, {0x0, 0x4000000000000}}}, 0xb8}}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000019"], 0x188}}, 0xc0)
mount(0x0, &(0x7f0000000200)='mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='mysys/bus/platform/drivers/oxu210hp-hcd/bind\x00', 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffff8, 0x80, {0x0, 0x0, 0x0, 0x0, 0x8612, 0x201feff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x2}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f0000000000), 0x400000000000235, 0x0)
write(r6, &(0x7f0000000900)='QEMU0002:00', 0xb)

1.42859213s ago: executing program 0 (id=2220):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc01c5869, &(0x7f00000011c0)={<r1=>r0, &(0x7f0000000000)='syzkaller\x00', 0x80003, &(0x7f0000001100)={@_ha_fsid={[0x2, 0x80]}, {0x2, 0xfff, 0x4000400, 0x6}}, 0x2, &(0x7f0000001140)={@_ha_fsid}, &(0x7f0000001180)=0x2})
ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000001200))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000001480)={0x0, 0x1, [0x3, 0x1, 0x2, 0x6, 0x2, 0x400, 0x200, 0x5]})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r4, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
sendmmsg$inet(r5, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="8b", 0x1}], 0x1}}], 0x2, 0x4001)
r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
preadv(r6, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/225, 0xe1}], 0x1, 0x4007, 0x20000400)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x12000000)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001380)={0x14, r3, 0x300, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4041}, 0x4000020)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$nci(r1, &(0x7f0000001440)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x0, 0x2, 0x1, 0x8}, 0x4)
ioctl$KDFONTOP_GET(r7, 0x560f, &(0x7f0000000180)={0x1, 0x4002, 0x3f, 0x2, 0x0, 0x0})
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x2000019c, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)

1.424132035s ago: executing program 3 (id=2221):
r0 = openat$sequencer(0xffffff9c, &(0x7f0000008200), 0x2000, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
futex(0x0, 0x9, 0x0, 0x0, 0x0, 0x40000002)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB="94000000", @ANYRES16=r3, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="760033008000e100ffffffffffff0802110000005050505050500000000000000000000064000140010003010e"], 0x94}, 0x1, 0x0, 0x0, 0x880}, 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x4, 0x100003, {{}, {}, {0x14, 0x19, {0x9, 0x2, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008044}, 0x1004)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc10020}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000800)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
read$FUSE(r5, &(0x7f0000000880)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x6, 0xa68d7c51df802ff5, 0xffbc, 0x6, 0x1d46, 0x0, 0x0, 0x0, 0x40}}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mysys/bus/usb-serial/drivers/sierra/new_id\x00', 0x1, 0x102)
write(r7, &(0x7f0000000300)='1199 0017\x00', 0x9)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r8, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r9=>r8}, './file0\x00'})
io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x3, 0x0, r9, &(0x7f0000000280)="994993d6ad0093031eaffcf1590efabf0a55d7d2408d803a94e51e7b9b", 0x0, 0x8, 0x3, 0x1, {0x0, 0x0, r5, 0xd}}, 0x1)
ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, &(0x7f0000008240))
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)

1.371944263s ago: executing program 0 (id=2222):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000a80)="683f0057954e8374745129caea99bc67", 0x10}, {&(0x7f0000000380)="a4921aaf3ffd", 0x6}], 0x2)

1.045796341s ago: executing program 0 (id=2223):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0}) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c209000000b40200005908060001080006040002aaaaaaaeaa13ac1414bbc95f00000002ac1414bb"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) (async, rerun: 64)
r2 = userfaultfd(0x80001) (rerun: 64)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000100)={{&(0x7f00002f2000/0x1000)=nil, 0x1000}, 0x3})
sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x200008d1, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r5, 0x1, 0x2000000, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x91, 0x8}, {0xffffffffffffff79, 0x16, 0x36b}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_NG_DREG={0x8}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x84}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

909.742567ms ago: executing program 0 (id=2224):
r0 = socket(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
sendmsg$nl_route(r1, 0x0, 0x1)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$phonet_pipe(0x23, 0x5, 0x2)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f00000006c0)={0x9, {{0x2, 0x4e24, @multicast2}}, 0x1, 0x84}, 0x1fffc)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000003e40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003e00)={&(0x7f0000000880)={0x288c, 0x12, 0x800, 0x70bd2a, 0x25dfdbfe, {0xf, 0x80, 0x10, 0x7, {0x4e22, 0x4e21, [0x54, 0x3, 0x4, 0x1ff], [0x0, 0x3, 0x3, 0x2c], 0x0, [0x7, 0x8]}, 0xfffffff7, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "288decc7ccd6cddf19c12bb5891694314c40f9d147c58eee0824ab28e0fe15a45059a2eeed8c77ebf8455cb7a565127004516e2a3c3d5722ef13dbb7c9e85d7e1bc72fac1e5c877e9755a6bfb7e41122370975fe159e674285ba02e3b0eec963fc822a213773951043da805a5bef319fabc4a8044bedd6fab11af1de5aa53b76f44bc756272d83554af315ee9b0bc5b6b57f688084388f6bfdaa59e0c3e0b751464186bee4c5298a4587f917239651d2d4eff29c839026bef39dd959b75d58d5925eb781c5f46ed59fd77e3a232c3db8188f2fcdd6d6249164157fe821d976257bcd10cccd12db8f2de6588727893ff76fa28d9bc9f4a3f5"}, @INET_DIAG_REQ_BYTECODE={0xe9, 0x1, "a6d1cccd4b2a7ed403e55b517f64edc23f87f0c7e39e1f27fcd0e5381326ebdda81d960404a3e6f9be3537c85ad1d01033f52af2398401120362b31ecec198fde51f861eca74a3204b1cf1e83948c21f17354479b71e524c6c135e3911b838b713019645dac48075e3c3ffa91d61682487eec70b8d32569feaa395deb939b69d7c197aab91458263fdfef219505d512e00d990c9aa55dfd5075446cd5d58766b42fb7515a58009642a9fa7a8e6dbea35c09d2f6bed8656cb4f106e20de13a6694cc75a577df3afe3c12edc69e0212dbbd88c7443d878a3e5a90ce7ef2a32f6c72ba5944b19"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "dfd30d5eb3671e321397e6e3ac9f872aeb0949b039aae5eefe7836d04db0350bbb052297f74ffe325dafc3a4a45f637503a87e05f66e8021ef55a2c7441e16ad48a5e3d69295eb204547f732c75461fcf4d856bb8c270f8eb4ebdf391b2c3f88d3231a844d698ddd342d47f360481dfadedf56e81e1840c3314083f51f2b85d58aee9acecde95f41901621890f64ece7abd1fd5f7ec8d84769fa7bbece8ae2e9f2965e9ec90e806ae8d6cd82da85ec12cdd11a45afad1ca0bf76c8b166539eaaec8c143d888d7a04eb14bb1e71a7af5aaa8b97cab398bd205a8d24f9ecdc93eaee7a3a03d809f88b025bc8e085dd7349cd473bc76931cdd83b99ffa6273af4fffdddc63dbc7ee025fdcb9e7ea7d15b2935bf96ed1504ae5fb8d17cac0d36e40f23032ddf010b7ed4e09bfcc6f70ca3d3e515bc7ff0cce25ce9df74b8137aff3bf33eccaa43af870f51bc2c78ecd6822c2d30c7bc4cb710b83112150a0d568148557cffdffb8397b11b4fb5d3dd110453ae82e4ff2b1e355a295fac1cf746a46e7a42cc1827a60807a7cf5faaf2ef10bde8b1da7777ea7f634634fd1b47449bb4427ca20e9273f2ca81edfb8ec1303e01b7b32e5c83e8949f355d7aedcef677d54b1594395de5f19557dec8141e7ab2d8bba4c5cc508924c0deb094300234a658770bf4bb52a25fc9ae8de4c3e38f7271a42731d77ff183a31d47dd2bde84cf8d992a996ac742c196829078d5ae7b80c25c55543180b7f4f6ca7dd503a84679031011a9cbadb3341a4d3e2847fb1ea504ed37aa972cc865d551d44adf8825e80db4064377587d40253562825a611f61ee66263494d6e844d22996d492d66ab361ff3a8f7a246be9235017f5c2a994816d529f2c3889e071952a511f0384131cc059d119db4f2951930aed04507b5bbba716f847c387a7c7f75d4996a4c9089d5963cc876c0c630bc5ab3e66c56fa9418f8d98382e36a101a6b6612717ba01b91124d2387bc511c6c9cd7c51da36ebf055b4a2fdb2519da822d5dad3e83fa34f3cc6557392b5afcbb5d70039a494ee1c522a756b72842aeac8c3294cb24dc678640702c6fae5005c6b7aeacab8b1cb969d5eb36f4817e3e3800d4a42df284c256d4e7193dcbffabcdf0a869c47aa58a1238fa7dc5d646ad38fa7713814248e09947f273a82a0245468311ab5d0bcfc6eb654efcdaca925557bbf3509a994561f5ecc2d64f012b70d419ec7157b633194e9219528a47fd2cba2f5ccc303f88ea3a5717f7f2d4408b552312618160f27e601d516510aa731853b727fa518ca7b97afe5e3a38b720eb718b389c2837b4b34cb8a2a88d3231d1c3cd7c048731cf1f1970c8c7733b1cd531df56b340428bf55689308d1639afb6cf02979984820da596b9780bb255859a54ff23585c5d8506138eea1cdeb7c351311e9d41b81e830a35fcecc84fee676f56bb6bfb70ee38cc73018365f4ae37aa092c9f4d898ae28a0e2b2f2edcc2d09793b5ed65e6059db25e112143ee366e4ba9b8f9fb79e7c51b0182f83622e00c334811c8b351ca49700adbcb0feba7423c871af0e4693558c8908e0ed5995ef6abcd80c370ab72515187cb4205ee4a806aed8bf73cabdc2dc35a4facb60d557b4ed18e01d14bf219e9390dc1b16abf6a9de07267b05a03cf8349a07188ea987e757ba9df4d907372c69fdd51a777a73b6e1e0af871b99ed2ead330619a5ad3e0d406c53cd82f2089d5e433638c5011423637d6f156eb917447fae39ade3218ceb8e76dd2ec914a3dc817064df4442cd1f51029989da4ece75aac504750dda4e87fabe504f9a8b2b2abf30f707fabaa0e71dabccddd7720f9d9dec0250b1245baa446d0e1ace0e849f7e5485b0a53f6ad62c4f1632be9e04a918ec3786a6f4933199929cc9434b8c98a3db8d9bf6e659ea8cf8aa683e83e21dfc08af82abe4bbd18f425c7ac7f75fec29e8bc4f367179d3ebc9224e1733044b8267ee48fd1edf65e6b85e5bba75156300c44bd629c4402b43948a1932394d2a3212b8169eb6cf4a110f21db4cc29cabae898ad5c537cedd6316f0a69e6e5d578b362b390b893181f87fa7c4037fcb8118cec92ebe258009af363917d07b80ac42d0c3b566090ac97595a3872c7ee0fd4655c58bb78b52112601f6834694903a8b6754076ab6518438058c5b0c559a024134f08c4931f76ac3d27f98c3b67d1cc1cbbc6f3aac88f405131701e1ff31640531f4d4b44c20c79a6de7a762efe8de0b15d540d6fd990f261e849cf796ee65e1068d04712329a7438266b84b2c7c2ff872a71199dc5d4e5643b76276220faa4d143e0fcd8e5f5b63583735137520ffcedcdba91c647af20e4a9f81ae710e292c957b2c2b63029a01755815fa36c6c67b3048ad05298874ac5f20bf35d7d04ed7eec2b7d113da97bcc11e676fa14e26b38f77e46ab4a18bb66f4efa5dc48475d440578a1eb390df59b7f37182c55b00261399290416d96d2290544dd6f219143d1febd9605cb3e9d09b10a928697715984d6e53343f72a9ccc4f5d08a7dc1fa386081cb82de6d3364e88da8f5fa844736474d953a873f38d7179f018bcc53dc60f70482714fcfec72742986baf944b0133fded8f54038af3e789bb0bc05cb6a4f6ff51a83a31dea12bfa75feac60b982be57b9bdec0ab246593d2004476563c5ff079a2cc3ac47bf923208fd585c0ad965065f0332838a3c97273064497159e54548c80e8873ba641247c5d20b21a2615631b2120bf949b2c9d3f9c6186cf6aa109cb3e945e14156c57c85e4318f4cc5687716e9b8ce469da193be55fce8e780e70dead55e4888c54d9bd652d610f07dcc28854a8fe197698b813aee698285cc471eac2ee45411c02aca98686241c4c26f5368a8f30a7c4f8f2775d6bc414269e2323338a031dd6c0bd6b943fe8d54c30639a8c55b45f66b30cac9027c07c9c1600750cbbba91ef6e102e707d0c7996ac23ad6a8b7c19448115fc55049bf78a06d8ca956347525fb035fbe1454d4056d1a37760d0d42856ef9e1bb4b585c94ccd1b72c4ccd62a6ff6e52c96b7c19317071c60b44e552eca8e1125028e06eac6de8b24193c54f0d311b01ad5f52d7520b42a94637d819661c5c6c074f40f18fc2da2688d454a66d71e93558ac8deb6c8dd491a651bf1ad6a5824ba3e8153c342e095963efcfbe748c2114e4f5b7fce5d54e919fb12d0d696d7f45a6bd73c8b3c9c58efb3b7ab981aebf1ce0de5ad5ea38c0c1fefec76b9ed7c226cdf5d5772f43ae9ac079d6ac764861759e7ffb9eac8b516078ee82c8ed3450fb7c859c35eaa8c87edb940e593b91ea67e2e5583c0a2afb02979229428b480c35d04629620b6b597fd0dc73e65eae092bf24bf7cb18fd8742bffd5d6f11f23a605865f064778b7536ef93e3e078d3e7c4610ae39cd00941bb1ac4c0c0f028696e7b8630a9df30f0c9ed1041e42a03fb797e0fbd2b7fd05bc64195974042f4bac61d7dbc197c48fa94417069a6ca9216d25ab3affa843e1a83d474df06fcc6bf19499001f1a15b857ece79fe06ca68e78b38fc441005a924685ca67359fb1bb351793e6711e22b1e16902824d7717ba53527b1ef163a0a0b87a10734c46c5b72a8d3094b51800ac574bb34e008b26454481aff85223c97cab57489382d3a27dc2fcb8b58d32f83894c45d7270b9e3ac0274e52a68cb3b6d14dc96b7595b2c72315564c67ddf8513997318be63b02a602a49e4297fe247acec228c3e6e035edc58f02ae9d3a250b2fba7b602f3acb2dc8e3a446f355277db52e0c4ad9ea4ba99ea0c6ed12bd6e30009276c67defb7e12b50664c4dca14917bc762a4e1d63c4b63b0d9c7cf25dbdd6d052c761abd3b464478ea7241b186968060a15ec2ff05b473c21da31034c755e546d0a1d786065b198874b5b93372232180b3a3dceaafbb7b37a4295af07dee5b75fc21f5708b061d60b0dc05c91d24d4544e78319af3dde7bc8468a36ed90430945bf5bd92465580db4550e4a7df64ac7bd66a5fb6be44bff830202bb94045f12ea54437bcb96b3cc11583883ea87e25290d62e480690d8076e4b21b6a567935cc893415073471d413f3a1225216b9232895f8f78512d4ccd09a73b9b731d3058f3bff705d28975363fefe4d39c5866ba8a90e391c6f1c193579408cddfdfffc90b20a94158c361171962f191cd86942a8349008f927b4170ba69fbe49257e114ca3e69b3084356755fcc182d82353102cf289d53cbf75b69ceedad6b94cfbcd6004954f4bc2fd88e4dd014fe03e0900f01ba162d7ae7fc9850eb56f887462ed0ea10597f6fe9b24f9476154dad0d9b49d1b9372386545dc3ade7ce5721217b915d4b81efc2d0aa032602463279cf38815092b0caa58f56eda7b5742860354d36af5c4612a1f95cff8e48440315274ae4dd5189e22c86cccb5ff8c956a69b684b541324a560c1e42b828c3d8456461f0d6d3be088152a72aa71d3f02b26cec3dde6d7601b9f9671cd7d01f95f65efc988a18742caa7504b72eef57d16ccd5ec2a17fc009c7573f4367982fcd3084cf4dc60c379056ecaf4b67ce0dfd117e120074241acb1b9f3a58a54e3e8de2c3e4303a108ac6c11e49c47a049a0bb7d3531d9b9d21b4a06a78596ae3d2300e370229c9bade7f9af5519e5fc1efbebe204eab87b699812ab8c9c03fc14c7f7429e03a5fb382dbc432525c0eb1069720a83dded1133650ad8eb9beb6ad203e6c0892885a7497a724b0a0dcbde570693a8d824a68b6e0a10305728de380248ab4a924e5871ec2bf10d59add74124f74be1fbdfaaa7fda892938e5dd7d81f545b28f3e1ad32d82cd3e33e3cac710dc32b149a4f64ccc81504ed6e382700801d6d21709680448bd2cbffeb95f5d080bd8d63c402b3dce4020d615b1c5dca2778679dae277d014545062c4e7b63829a38a23b9ba9bd70a113ed4d8b0c34f18f06013ca914a967d1bafede06c1af31907f5bfb5d9736c3980e7ef6871bdc36841c3c14e4efbb699c63e13bc73bdd2ab70a02e0e3392ebd44ef40bc106c3347eeb0c871762e6d017cf82b8decfd576cf7f95a4e23b2cee364ec36009a9b858c033deba73c85ac15af87300233556ad9173e97b67d6028cffb3e37a124995a9cf2560a7438e82560a29b84f82cef78c98efbcff279633869ca6c9adac0a9424e5771a4587c45b063de202fe6f0510bbfa777767da4853ff9b4c8efa38d4263afb8403dfb4d1ba0f77d93bb94445bdfdc75a97da36ea645dd8b9d74c55cea243d1483d3b5aea9df0466c72e942d267c55947d1f0306fa7c9025eba6c81179fdefbf1f8fe95ba816f8502a2918bf367d07e1ba2ccf0087fa81c7ec5a944fd33eb12aefe44bc4e538bd0663b6cf42f90ad1b39ae912010e06b76a38d95530fdb45f278b134ed4bf99f1364a5d0bb1c7e91427bfc8aa927d70afae2db21f3377513a54d52599912753d78fd1fe1b9ce23bce2dbfbb20d8163e7f30f98dd788c903a7fc182208d81afbd6b6f4ed8cbb09967997dd380e5ef1638ef9b44611942fec8c90863d6ef61e5e719786b0bfff809452b7c97c28366a56e4c8e9f91b82dbbbddc38d3800a52a2c89742713fab05921bab54be8151ff3a70e018ec312bc2393e22521f310f1c71732087dabce73342c48356065cf945850dcadf95abdf105ff9caaefa513e4b42d54bdf8cee504bdeb0bb2eb342939c075df0e54189750e737fe254fdc9c6581cc865393eb452944a4be6eb853a84d78c21dc013c411ec9fc4314a1b3797397e0f"}, @INET_DIAG_REQ_BYTECODE={0xd4, 0x1, "93804f98cac6aff8912f3b052497e917e5b9781a28fc72be3ce5416aac0bb8e0e3a9e2b9b0d18330c8eaece50ec785367818bfea69d39f0f9380dbe21235541365f4bbb2fef8054206d740c5f7b0fef9ee51842a604fae3cccf2df872442330eeb9ce386ebd46020c401c25dcd864b5b840d9890a270b8aee37f066bf8eb2d70ecb4d31c5b43b660cef927c7abc838930bf51310c0c021fd455449a98686ef0134ec22ddf5136d732930e19ea3576b77b58283badab9e11445bc2ffddce04a0efcc4a614206d4a9824ade21dac9b5b27"}, @INET_DIAG_REQ_BYTECODE={0x7fa, 0x1, "394d3602ef4c6b298418f7f76326cada88344c201274c4ad220931a74cb5492222ef34050576ece7b98136dba57f8612e9cd9bb2e31259dd68d5cf96cc7c5d96b718a711025aa20a29223fac99f738059f49547c03f2bf0bcb2c06883e348bd9362ba451ece2cdee98d57dc68c3e579311ea0fe25e7ec63f113f1a0a6a9f30dd038d24474a0e2b86460414adcaaa447294e8926bb552bd62485b79e338f9d2185de50d75455ef517fe32220c1a467f5a1da14064c81d11efe54e18f224595442e0a28a2fb52f726180a05be11f9c45563da42bead3dc4fc845c3344ce3d9eb2f47b0e444a523a89c6aa7ccb2317393adafed41f70cea05415b714024a706bbd148687d7b84cd8d94f895ef99bedcf9a397dcbdefb0d2cc71947d0424684fdb9df6e3780281e16eec74ced2693a58ab5c33e3af55034aca3591400725ddda6ca9f0dfe108260d433b7b0b2d3a0d81fee15192d189264716d10806038abb96bcde19c0b69f1527a0a22878c862b0a6a02f2526112696c59ac06162bedab9bd02043bb4dc5a2509de1e64d998623ab822e81f45fb2699788a556b35ac06e6329f9d21fd06d0fe6c61f29aec94f084067c128784982fcd54e8757d2d6e7a2caf331a8d639a3d5e81dbbe1daa8f737f42ed29147e9e20981eb663b01c7e65615fe612b01120ff98e92839db012b9a9fab9e06760dfdb109811cb6278daa2d7814760cf1a1f72224b966a64e95b5b7cf082dac8bf4ece403f9691f28547d13c7552f34fbe39f06be9d357d718d4d781bdce48c89344694d3dd861e08290656ab64dd384e7db2ce68651e173381d92245cb9ce9520b43eb94f7a70ba4ca6e84261989382e8794c1d592719beafffe66b18570441265e0c913d9d4c3ab591f1517f9c9c31e592b169c82ad5342973e645a3fcfecd2d667bf6c7fe646f3337065de984fda01c757fd803b83b478abe246fd1e373ee6767a0ac3be772c1fa175d2240fe0b33d2bd685129a43814afbf3fbb8834344049c46f8bb24c1ecfe38b4f913af20f0b639c5e82ec3a5fd68c4ca480fa6d27afa427dd652554c719455e5649371c4fbec83824310ff991ae94a99c474f76f93ae3106bf4036a94bf46788d910244b0d4e1623a214765beac083369caf0dac6dd826cd72e30d657a40a5da3151060b2b3c6e79ecb87b79f1c5d4dc38c93e128c258f75beb86da67a8974a68029009de452cf87c8b9218ca0a093642d6120bd2114ec764594a1030618ef2366b68c2367278a6862aa81c649917dc25a6dc256fda6ceaf2f6167b83e944abc1b3fc6e9c0cbb3de8dccb0ba6152206e7ee7dd79a06cd3507d45970d8bba7b369dddb9fd51ff9c158f3164609fa4e7032579c53e06d94e526d4bac5ba4e308d6adb8bb887ef9e0f66c019a4225c6969aefb235983f36b15f5e61b919113315cab17baf44f37801137b42b347e75d2945696b10834b8084b34f98f874164758c4c573a711fcf7486e64411bf4c6f684da071cfe4d5f8bed37bbc0cad90b063ee998fc961f5d7ef926665c0c46417b6c4079ddef0d82383a20826dd432a17e7001544d404a032e1cb299781e14f5103f2b758857ad28d83fb48ac22241b4f51da62b829154b804b3f334e3c91e759366673f429a18ac9b6e1f3b3f31a0ce7398d36dbe4afaa47a589c1794807eecc06d6d02e7dbb03bcb0f9f728574bb5f2cc0a594977115a7280094260fb632f88bb9e1e7224efe10b6e066286906270bf8c4fc1a1f42885d5f0565eeeff8009e3b216d30ed88a75a5461a063ebe7e1365936fc7987020f99078dafdf99e46d91bc155cc8d0b3ee2a69f30bd73ab9e06688d2fc6a794bc3c177560ac5eadb7abf123b537d49b6ec16993e412a890308f2ffaa7eeeb73dee049850d6667f66c742d0d187f93ece101aa0fccf78bba87ddb9760d0d3eaa1ebf906ba7d308206ee1ceb1834764cbcd3f93534dcf2cf216a095d98193b9ad364fc3efce1c8001d0c01372bba56382ffe2cdfd226d74149435f1b6d97b9454ec5541b145bd7b7b92266a24fd19dabd0d72034ef1754843bfa086066ed960284bf020b52d7589411155bf290ee06b4559229949e4629c813bc4ae7af1f977345b5269b1f4210aa3050b989bb1e69dd753f2e2b0e34c756a83794e8f83dacf7d648730e33ee6c13a6493356c7b4e35600a37c6d570bf477a76f280cf3b23982cd04edc77e833d3b9a59844e8bf8752fb8519c10c9c3557146805ec7e8e80c38d135e5f690aa42c4cb28ce89999a31234f7d25b6f8ae371f9877fa579b8303a882c1891bb377122c038fdb04ddca3be36eed6b7eb90a1629f61d3674b0dea81d5eb8cb41a4991d0ec4e8608d37a03639e833efe976b7a292da28134021c4b7ec588c7d25053882e3888abfcc5be675a852d1fe8e3b97c8abe95ba1d6a4a31eddf6d4053ce6898f7398300a488bdc76eeb0ad9841bfdd997ad5c50a7999bb7098090d97dd87d329f2e7884fb14eee62318cf25194ba5a81424bfec3515d28dcb4d81ab986c725c847d594f70155fa2487a7111482ada574e1ce0575f4fc5c4b546ca8cc7d027d1baba99ffbe1eedad58780ddbbcd2da7ed4362a651494ba618b7b715b1a176b8b34e71e4bb803518d694e02c894696f4952aa50181048513213333e984b365d8481b8d2a340fb36453b796ad2b7d278ab2cb0c6a17ae00474387a63064c2887ff4f1a3b62f71c82d285f0974520983ce222016b6e70b0b25577328edcc40bfdc37085a1df9e4c71a0385fd722c79f57ef42a616322209d2ed116944bd7b90c6b1acf9a0646ba0a1af0dab1ef093a18d958b1dea18da361c7774a52acec942387deb687d6fd3633f0f39f9636ed6a035e157236"}, @INET_DIAG_REQ_BYTECODE={0x82, 0x1, "97837cc70fa7ee7c0035e998eb3caeb50712bfbb9e78310f5fd4cc7dfb9c1df9420ee2a72a2b4956db66e170660e45f4b0ac81094bb2439ef6ca9d90bd6d71e06c6c36fa5c75a0edcd4b703eec934394475f98edff38d49b5daf23cfe093ad1996b53c38beca7baab5796e12836f1fb1329209bae4fd860135626c1e8ac7"}, @INET_DIAG_REQ_BYTECODE={0x18, 0x1, "75a52aa4205e9797f17897cc7868456e0bbb4181"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0xce4, 0x1, "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"}]}, 0x288c}, 0x1, 0x0, 0x0, 0x40000}, 0x2)
bind$phonet(r3, &(0x7f0000000000)={0x23, 0x4, 0x0, 0x48}, 0x10)
r5 = socket$phonet_pipe(0x23, 0x5, 0x2)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040)
bind$phonet(r5, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r8 = syz_io_uring_setup(0x27c8, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x3, 0x14b}, &(0x7f0000000140)=<r9=>0x0, &(0x7f0000000080)=<r10=>0x0, &(0x7f00000000c0)=<r11=>0x0)
syz_io_uring_submit(r9, r10, r11, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x8, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r8, 0x1, 0x1, 0x1, 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)

851.154725ms ago: executing program 2 (id=2225):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc01c5869, &(0x7f00000011c0)={<r1=>r0, &(0x7f0000000000)='syzkaller\x00', 0x80003, &(0x7f0000001100)={@_ha_fsid={[0x2, 0x80]}, {0x2, 0xfff, 0x4000400, 0x6}}, 0x2, &(0x7f0000001140)={@_ha_fsid}, &(0x7f0000001180)=0x2})
ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000001200))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000001480)={0x0, 0x1, [0x3, 0x1, 0x2, 0x6, 0x2, 0x400, 0x200, 0x5]})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r4, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
sendmmsg$inet(r5, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="8b", 0x1}], 0x1}}], 0x2, 0x4001)
r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
preadv(r6, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/225, 0xe1}], 0x1, 0x4007, 0x20000400)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x12000000)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001380)={0x14, r3, 0x300, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4041}, 0x4000020)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$nci(r1, &(0x7f0000001440)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x0, 0x2, 0x1, 0x8}, 0x4)
ioctl$KDFONTOP_GET(r7, 0x560f, &(0x7f0000000180)={0x1, 0x4002, 0x3f, 0x2, 0x0, 0x0})
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x2000019c, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)

825.464493ms ago: executing program 3 (id=2226):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3, 0x59032, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, 0x0, 0x0}, 0x20)

769.401063ms ago: executing program 3 (id=2227):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSRS485(r0, 0x5437, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
r2 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
r6 = accept4(r4, 0x0, 0x0, 0x800)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r8, 0x400448cb, 0x0)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc4", 0x94}], 0x3, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800)
recvmmsg$unix(r6, &(0x7f0000003900), 0x0, 0x41, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000081b000002000000ffff000005"], 0x48)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940), &(0x7f00000009c0), 0x5b0, r9}, 0x38)

659.500336ms ago: executing program 3 (id=2228):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0)
recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x34000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459ba", 0x54}], 0x3}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/92, 0x5c}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)

9.960582ms ago: executing program 0 (id=2229):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48)
syz_clone3(&(0x7f00000002c0)={0x114110000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000140)=<r1=>0x0, {0x36}, &(0x7f00000001c0)=""/43, 0x2b, &(0x7f0000000200)=""/85, &(0x7f0000000280)=[0x0, 0x0], 0x2}, 0x58)
sched_setscheduler(r1, 0x5, &(0x7f0000000340)=0xf007)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/slabinfo\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000002e00)={0x2020}, 0x2020)
lseek(r2, 0xfffffffffffffff5, 0x1)
openat$vnet(0xffffff9c, &(0x7f0000000380), 0x2, 0x0)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1c0000007ea60864160af3653c000cc00800040081000200300001c00c000000000000001240d69a6a818c99f8ffffffffffff", 0x47}, {&(0x7f0000000180)="a8068408f2ada5f74100"/21, 0x15}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x20004054)

0s ago: executing program 2 (id=2230):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc01c5869, &(0x7f00000011c0)={<r1=>r0, &(0x7f0000000000)='syzkaller\x00', 0x80003, &(0x7f0000001100)={@_ha_fsid={[0x2, 0x80]}, {0x2, 0xfff, 0x4000400, 0x6}}, 0x2, &(0x7f0000001140)={@_ha_fsid}, &(0x7f0000001180)=0x2})
ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000001200))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000001480)={0x0, 0x1, [0x3, 0x1, 0x2, 0x6, 0x2, 0x400, 0x200, 0x5]})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r4, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
sendmmsg$inet(r5, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="8b", 0x1}], 0x1}}], 0x2, 0x4001)
r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
preadv(r6, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/225, 0xe1}], 0x1, 0x4007, 0x20000400)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x12000000)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001380)={0x14, r3, 0x300, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4041}, 0x4000020)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$nci(r1, &(0x7f0000001440)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x0, 0x2, 0x1, 0x8}, 0x4)
ioctl$KDFONTOP_GET(r7, 0x560f, &(0x7f0000000180)={0x1, 0x4002, 0x3f, 0x2, 0x0, 0x0})
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x2000019c, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)

0s ago: executing program 0 (id=2231):
mkdirat(0xffffffffffffff9c, &(0x7f0000005a00)='./gadget\x00', 0x930aa59063c1a109)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0)
r1 = syz_open_dev$I2C(&(0x7f00000003c0), 0x1, 0x2603)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000000)={&(0x7f0000000840)=[{0x63, 0x1000, 0x0, 0x0}, {0x4, 0x2200, 0x0, 0x0}], 0x2})
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x810000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})
r2 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r2, &(0x7f00000003c0)="bf000000d2f2e2bd2196b42ac337cf384e6da4f75a6135071155d01b129ba8269417f7031869c7fd2b626c7778356f9ec7dd14fa01d3fe9a6be50ac940e2036803811f4ea472fe0bce3d1bfca817c19ad633d21589aacd21e2a60208463df0ea44924413c9695a4556a00203d0d7eff6e2d815e53ce839d2ea17929148551b242d398b17e1f4cce8c14a423dd29243c8f2389b9aa26006a2e79bce3300c15a4b1dea95bd27", 0xa5)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='8\x00', 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd)
close_range(r2, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

ave_1): Releasing backup interface
[  462.976002][T13437] team0: Port device team_slave_0 removed
[  462.992882][T13437] team0: Port device team_slave_1 removed
[  462.995887][T13437] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  462.999012][T13437] batman_adv: batadv0: Removing interface: batadv_slave_0
[  463.003797][T13437] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  463.007177][T13437] batman_adv: batadv0: Removing interface: batadv_slave_1
[  463.021613][T13437] bond1: (slave bridge1): Releasing backup interface
[  463.079949][ T2329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.547655][ T2329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.712457][ T7197] usb 9-1: USB disconnect, device number 20
[  464.020409][T13476] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.1928'.
[  464.050023][T13477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1929'.
[  464.063543][T13477] netlink: 177 bytes leftover after parsing attributes in process `syz.4.1929'.
[  464.102193][T13477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1929'.
[  464.105022][T13477] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1929'.
[  464.107824][T13477] netlink: 'syz.4.1929': attribute type 20 has an invalid length.
[  464.927920][    T9] usb 8-1: new high-speed USB device number 48 using dummy_hcd
[  465.076526][    T9] usb 8-1: Using ep0 maxpacket: 32
[  465.147795][    T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  465.153770][    T9] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  465.157062][    T9] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  465.159722][    T9] usb 8-1: Product: syz
[  465.161074][    T9] usb 8-1: Manufacturer: syz
[  465.162628][    T9] usb 8-1: SerialNumber: syz
[  465.168628][    T9] usb 8-1: config 0 descriptor??
[  465.172058][T13481] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  465.177161][    T9] hub 8-1:0.0: bad descriptor, ignoring hub
[  465.179253][    T9] hub 8-1:0.0: probe with driver hub failed with error -5
[  465.258765][T13497] FAULT_INJECTION: forcing a failure.
[  465.258765][T13497] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  465.263044][T13497] CPU: 1 UID: 0 PID: 13497 Comm: syz.4.1936 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  465.263075][T13497] Tainted: [L]=SOFTLOCKUP
[  465.263079][T13497] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  465.263087][T13497] Call Trace:
[  465.263095][T13497]  <TASK>
[  465.263101][T13497]  dump_stack_lvl+0x100/0x190
[  465.263121][T13497]  should_fail_ex.cold+0x5/0xa
[  465.263137][T13497]  _copy_from_user+0x2e/0xd0
[  465.263159][T13497]  get_compat_msghdr+0xb3/0x480
[  465.263179][T13497]  ? __pfx_get_compat_msghdr+0x10/0x10
[  465.263197][T13497]  ? find_held_lock+0x2b/0x80
[  465.263212][T13497]  ? finish_task_switch.isra.0+0x2c0/0x10c0
[  465.263226][T13497]  ? finish_task_switch.isra.0+0x2c0/0x10c0
[  465.263240][T13497]  ___sys_sendmsg+0x1b6/0x1e0
[  465.263254][T13497]  ? __pfx____sys_sendmsg+0x10/0x10
[  465.263266][T13497]  ? rcu_is_watching+0x12/0xc0
[  465.263286][T13497]  ? find_held_lock+0x2b/0x80
[  465.263307][T13497]  __sys_sendmsg+0x160/0x210
[  465.263323][T13497]  ? __pfx___sys_sendmsg+0x10/0x10
[  465.263342][T13497]  ? __pfx_ksys_write+0x10/0x10
[  465.263356][T13497]  __do_fast_syscall_32+0xe7/0x970
[  465.263372][T13497]  ? lockdep_hardirqs_on+0x78/0x100
[  465.263387][T13497]  do_fast_syscall_32+0x32/0x70
[  465.263420][T13497]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  465.263436][T13497] RIP: 0023:0xf7f66fec
[  465.263451][T13497] Code: Unable to access opcode bytes at 0xf7f66fc2.
[  465.263457][T13497] RSP: 002b:00000000f53e450c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  465.263468][T13497] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000080
[  465.263475][T13497] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  465.263482][T13497] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  465.263488][T13497] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  465.263494][T13497] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  465.263508][T13497]  </TASK>
[  465.265990][T13497] Invalid ELF header magic: != ELF
[  465.340834][T13496] overlayfs: overlapping lowerdir path
[  465.392668][T13481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  465.401674][T13481] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  466.174467][ T7382] raw-gadget.0 gadget.3: failed to queue suspend event
[  466.247015][T13481] raw-gadget.0 gadget.3: failed to queue resume event
[  466.267637][ T7382] raw-gadget.0 gadget.3: failed to queue suspend event
[  466.346672][T13481] raw-gadget.0 gadget.3: failed to queue resume event
[  466.367926][ T7382] raw-gadget.0 gadget.3: failed to queue suspend event
[  466.427589][T13515] trusted_key: encrypted_key: insufficient parameters specified
[  466.446773][T13481] raw-gadget.0 gadget.3: failed to queue resume event
[  466.470333][T10021] raw-gadget.0 gadget.3: failed to queue suspend event
[  466.546617][T13481] raw-gadget.0 gadget.3: failed to queue resume event
[  466.590791][T10021] raw-gadget.0 gadget.3: failed to queue suspend event
[  466.671916][T13481] raw-gadget.0 gadget.3: failed to queue resume event
[  466.701494][  T231] raw-gadget.0 gadget.3: failed to queue suspend event
[  466.766596][T13481] raw-gadget.0 gadget.3: failed to queue resume event
[  466.798283][T10021] raw-gadget.0 gadget.3: failed to queue suspend event
[  466.986768][T13481] raw-gadget.0 gadget.3: failed to queue resume event
[  467.007645][T10021] raw-gadget.0 gadget.3: failed to queue suspend event
[  467.086604][T13481] raw-gadget.0 gadget.3: failed to queue resume event
[  467.119113][  T231] raw-gadget.0 gadget.3: failed to queue suspend event
[  467.197373][T13481] raw-gadget.0 gadget.3: failed to queue resume event
[  467.229256][T10021] raw-gadget.0 gadget.3: failed to queue suspend event
[  467.296986][T13481] raw-gadget.0 gadget.3: failed to queue resume event
[  467.340233][ T7382] raw-gadget.0 gadget.3: failed to queue suspend event
[  467.406592][T13481] raw-gadget.0 gadget.3: failed to queue resume event
[  467.428477][  T231] raw-gadget.0 gadget.3: failed to queue suspend event
[  467.506757][T13481] raw-gadget.0 gadget.3: failed to queue resume event
[  467.528082][  T222] raw-gadget.0 gadget.3: failed to queue suspend event
[  467.587234][T13549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1951'.
[  467.590484][T13552] FAULT_INJECTION: forcing a failure.
[  467.590484][T13552] name failslab, interval 1, probability 10, space 0, times 0
[  467.595643][T13552] CPU: 1 UID: 0 PID: 13552 Comm: syz.2.1952 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  467.595672][T13552] Tainted: [L]=SOFTLOCKUP
[  467.595679][T13552] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  467.595692][T13552] Call Trace:
[  467.595701][T13552]  <TASK>
[  467.595710][T13552]  dump_stack_lvl+0x100/0x190
[  467.595742][T13552]  should_fail_ex.cold+0x5/0xa
[  467.595765][T13552]  should_failslab+0xc2/0x120
[  467.595792][T13552]  __kmalloc_noprof+0xfc/0x820
[  467.595815][T13552]  ? tomoyo_encode2+0xfb/0x3c0
[  467.595846][T13552]  tomoyo_encode2+0xfb/0x3c0
[  467.595876][T13552]  tomoyo_encode+0x29/0x50
[  467.595900][T13552]  tomoyo_realpath_from_path+0x18c/0x690
[  467.595932][T13552]  tomoyo_path_number_perm+0x23c/0x580
[  467.595955][T13552]  ? tomoyo_path_number_perm+0x22e/0x580
[  467.595980][T13552]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  467.596004][T13552]  ? get_pid_task+0x106/0x250
[  467.596052][T13552]  ? find_held_lock+0x2b/0x80
[  467.596074][T13552]  ? __fget_files+0x215/0x3d0
[  467.596096][T13552]  ? hook_file_ioctl_common+0x140/0x440
[  467.596120][T13552]  ? __fget_files+0x215/0x3d0
[  467.596141][T13552]  ? __fget_files+0x21f/0x3d0
[  467.596162][T13552]  security_file_ioctl_compat+0xd3/0x230
[  467.596190][T13552]  __ia32_compat_sys_ioctl+0xc2/0x360
[  467.596221][T13552]  __do_fast_syscall_32+0xe7/0x970
[  467.596245][T13552]  ? lockdep_hardirqs_on+0x78/0x100
[  467.596266][T13552]  do_fast_syscall_32+0x32/0x70
[  467.596286][T13552]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  467.596338][T13552] RIP: 0023:0xf7fb6fec
[  467.596359][T13552] Code: Unable to access opcode bytes at 0xf7fb6fc2.
[  467.596367][T13552] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  467.596398][T13552] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040087446
[  467.596408][T13552] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000
[  467.596418][T13552] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  467.596429][T13552] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  467.596440][T13552] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  467.596462][T13552]  </TASK>
[  467.606519][T13481] raw-gadget.0 gadget.3: failed to queue resume event
[  467.606948][T13552] ERROR: Out of memory at tomoyo_realpath_from_path.
[  467.631697][  T231] raw-gadget.0 gadget.3: failed to queue suspend event
[  467.767552][T13481] raw-gadget.0 gadget.3: failed to queue resume event
[  467.789345][  T231] raw-gadget.0 gadget.3: failed to queue suspend event
[  467.798575][T13481] raw-gadget.0 gadget.3: failed to queue disconnect event
[  467.819160][ T2329] usb 8-1: USB disconnect, device number 48
[  467.925430][T13567] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1957'.
[  468.232409][T13583] FAULT_INJECTION: forcing a failure.
[  468.232409][T13583] name failslab, interval 1, probability 10, space 0, times 0
[  468.238208][T13583] CPU: 1 UID: 0 PID: 13583 Comm: syz.3.1959 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  468.238239][T13583] Tainted: [L]=SOFTLOCKUP
[  468.238246][T13583] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  468.238257][T13583] Call Trace:
[  468.238264][T13583]  <TASK>
[  468.238272][T13583]  dump_stack_lvl+0x100/0x190
[  468.238301][T13583]  should_fail_ex.cold+0x5/0xa
[  468.238323][T13583]  should_failslab+0xc2/0x120
[  468.238350][T13583]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  468.238375][T13583]  ? __alloc_skb+0x5b7/0x710
[  468.238399][T13583]  ? __alloc_skb+0x140/0x710
[  468.238426][T13583]  __alloc_skb+0x140/0x710
[  468.238447][T13583]  ? __alloc_skb+0x5b7/0x710
[  468.238469][T13583]  ? __pfx___alloc_skb+0x10/0x10
[  468.238499][T13583]  netlink_alloc_large_skb+0x69/0x150
[  468.238520][T13583]  netlink_sendmsg+0x680/0xda0
[  468.238542][T13583]  ? __pfx_netlink_sendmsg+0x10/0x10
[  468.238565][T13583]  ? apparmor_socket_sendmsg+0x15b/0x270
[  468.238592][T13583]  ____sys_sendmsg+0xa4d/0xbe0
[  468.238611][T13583]  ? __pfx_netlink_sendmsg+0x10/0x10
[  468.238631][T13583]  ? __pfx_____sys_sendmsg+0x10/0x10
[  468.238658][T13583]  ___sys_sendmsg+0x190/0x1e0
[  468.238680][T13583]  ? __pfx____sys_sendmsg+0x10/0x10
[  468.238727][T13583]  ? find_held_lock+0x2b/0x80
[  468.238769][T13583]  __sys_sendmsg+0x160/0x210
[  468.238794][T13583]  ? __pfx___sys_sendmsg+0x10/0x10
[  468.238822][T13583]  ? __pfx_ksys_write+0x10/0x10
[  468.238845][T13583]  __do_fast_syscall_32+0xe7/0x970
[  468.238867][T13583]  ? lockdep_hardirqs_on+0x78/0x100
[  468.238890][T13583]  do_fast_syscall_32+0x32/0x70
[  468.238912][T13583]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  468.238935][T13583] RIP: 0023:0xf6fcefec
[  468.238958][T13583] Code: Unable to access opcode bytes at 0xf6fcefc2.
[  468.238967][T13583] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  468.238985][T13583] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800004c0
[  468.238996][T13583] RDX: 0000000000000110 RSI: 0000000000000000 RDI: 0000000000000000
[  468.239006][T13583] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  468.239017][T13583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  468.239027][T13583] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  468.239048][T13583]  </TASK>
[  468.424533][T13587] bridge0: port 3(syz_tun) entered blocking state
[  468.427223][T13587] bridge0: port 3(syz_tun) entered listening state
[  468.435011][T13587] 8021q: adding VLAN 0 to HW filter on device bond0
[  468.439443][T13587] 8021q: adding VLAN 0 to HW filter on device team0
[  468.454139][T13587] 8021q: adding VLAN 0 to HW filter on device batadv0
[  468.494817][T13587] batman_adv: batadv0: Interface activated: batadv_slave_0
[  468.500776][T13587] batman_adv: batadv0: Interface activated: batadv_slave_1
[  468.508932][T13587] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  468.513297][T13587] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  468.521432][T13587] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  468.537859][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state
[  468.540065][ T1177] bridge0: port 1(bridge_slave_0) entered listening state
[  468.549305][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state
[  468.551558][ T1177] bridge0: port 2(bridge_slave_1) entered listening state
[  468.976656][ T2329] usb 8-1: new high-speed USB device number 49 using dummy_hcd
[  469.127309][ T2329] usb 8-1: Using ep0 maxpacket: 32
[  469.135340][ T2329] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  469.144244][ T2329] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  469.148652][ T2329] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  469.151911][ T2329] usb 8-1: Product: syz
[  469.153565][ T2329] usb 8-1: Manufacturer: syz
[  469.155437][ T2329] usb 8-1: SerialNumber: syz
[  469.160154][ T2329] usb 8-1: config 0 descriptor??
[  469.165700][T13592] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  469.171471][ T2329] hub 8-1:0.0: bad descriptor, ignoring hub
[  469.173748][ T2329] hub 8-1:0.0: probe with driver hub failed with error -5
[  469.381021][T13592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  469.385063][T13592] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  470.110403][  T125] raw-gadget.0 gadget.3: failed to queue suspend event
[  470.176588][T13592] raw-gadget.0 gadget.3: failed to queue resume event
[  470.200530][T13597] raw-gadget.0 gadget.3: failed to queue suspend event
[  470.267323][T13592] raw-gadget.0 gadget.3: failed to queue resume event
[  470.280769][T13639] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1974'.
[  470.287796][   T48] raw-gadget.0 gadget.3: failed to queue suspend event
[  470.356545][T13592] raw-gadget.0 gadget.3: failed to queue resume event
[  470.362041][T13644] FAULT_INJECTION: forcing a failure.
[  470.362041][T13644] name failslab, interval 1, probability 10, space 0, times 0
[  470.367096][T13644] CPU: 1 UID: 0 PID: 13644 Comm: syz.2.1975 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  470.367114][T13644] Tainted: [L]=SOFTLOCKUP
[  470.367118][T13644] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  470.367126][T13644] Call Trace:
[  470.367131][T13644]  <TASK>
[  470.367136][T13644]  dump_stack_lvl+0x100/0x190
[  470.367155][T13644]  should_fail_ex.cold+0x5/0xa
[  470.367169][T13644]  should_failslab+0xc2/0x120
[  470.367192][T13644]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  470.367208][T13644]  ? __alloc_skb+0x5b7/0x710
[  470.367224][T13644]  ? __alloc_skb+0x140/0x710
[  470.367240][T13644]  __alloc_skb+0x140/0x710
[  470.367252][T13644]  ? __alloc_skb+0x5b7/0x710
[  470.367266][T13644]  ? __pfx___alloc_skb+0x10/0x10
[  470.367284][T13644]  netlink_alloc_large_skb+0x69/0x150
[  470.367299][T13644]  netlink_sendmsg+0x680/0xda0
[  470.367313][T13644]  ? __pfx_netlink_sendmsg+0x10/0x10
[  470.367326][T13644]  ? apparmor_socket_sendmsg+0x15b/0x270
[  470.367342][T13644]  ____sys_sendmsg+0xa4d/0xbe0
[  470.367353][T13644]  ? __pfx_netlink_sendmsg+0x10/0x10
[  470.367365][T13644]  ? __pfx_____sys_sendmsg+0x10/0x10
[  470.367382][T13644]  ___sys_sendmsg+0x190/0x1e0
[  470.367395][T13644]  ? __pfx____sys_sendmsg+0x10/0x10
[  470.367413][T13644]  ? find_held_lock+0x2b/0x80
[  470.367436][T13644]  __sys_sendmsg+0x160/0x210
[  470.367451][T13644]  ? __pfx___sys_sendmsg+0x10/0x10
[  470.367470][T13644]  ? __pfx_ksys_write+0x10/0x10
[  470.367484][T13644]  __do_fast_syscall_32+0xe7/0x970
[  470.367500][T13644]  ? lockdep_hardirqs_on+0x78/0x100
[  470.367515][T13644]  do_fast_syscall_32+0x32/0x70
[  470.367529][T13644]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  470.367544][T13644] RIP: 0023:0xf7fb6fec
[  470.367560][T13644] Code: Unable to access opcode bytes at 0xf7fb6fc2.
[  470.367566][T13644] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  470.367578][T13644] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001080
[  470.367585][T13644] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  470.367591][T13644] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  470.367597][T13644] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  470.367603][T13644] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  470.367616][T13644]  </TASK>
[  470.465467][ T7379] raw-gadget.0 gadget.3: failed to queue suspend event
[  470.506578][ T2329] usb 9-1: new full-speed USB device number 21 using dummy_hcd
[  470.536512][T13592] raw-gadget.0 gadget.3: failed to queue resume event
[  470.566850][  T125] raw-gadget.0 gadget.3: failed to queue suspend event
[  470.573822][T13651] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off.
[  470.647167][T13592] raw-gadget.0 gadget.3: failed to queue resume event
[  470.679172][   T48] raw-gadget.0 gadget.3: failed to queue suspend event
[  470.694307][ T2329] usb 9-1: unable to get BOS descriptor or descriptor too short
[  470.703252][ T2329] usb 9-1: not running at top speed; connect to a high speed hub
[  470.708524][T13654] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay'
[  470.738505][ T2329] usb 9-1: config 10 has an invalid interface number: 3 but max is 0
[  470.741583][ T2329] usb 9-1: config 10 has no interface number 0
[  470.743755][ T2329] usb 9-1: config 10 interface 3 has no altsetting 0
[  470.753039][ T2329] usb 9-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=14.c2
[  470.764765][ T2329] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.766687][T13592] raw-gadget.0 gadget.3: failed to queue resume event
[  470.770156][ T2329] usb 9-1: Product: syz
[  470.771606][ T2329] usb 9-1: Manufacturer: syz
[  470.773078][ T2329] usb 9-1: SerialNumber: syz
[  470.798429][  T125] raw-gadget.0 gadget.3: failed to queue suspend event
[  470.841760][T13659] bond0: entered promiscuous mode
[  470.844887][T13659] bond_slave_0: entered promiscuous mode
[  470.847260][T13659] bond_slave_1: entered promiscuous mode
[  470.853320][T13659] batadv0: entered promiscuous mode
[  470.855798][T13659] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  470.863075][T13659] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  470.870782][T13659] 8021q: adding VLAN 0 to HW filter on device hsr0
[  470.875927][T13659] bond0: left promiscuous mode
[  470.877783][T13592] raw-gadget.0 gadget.3: failed to queue resume event
[  470.880457][T13659] bond_slave_0: left promiscuous mode
[  470.882340][T13659] bond_slave_1: left promiscuous mode
[  470.909011][  T125] raw-gadget.0 gadget.3: failed to queue suspend event
[  470.976511][T13592] raw-gadget.0 gadget.3: failed to queue resume event
[  470.999155][   T48] raw-gadget.0 gadget.3: failed to queue suspend event
[  471.066640][T13592] raw-gadget.0 gadget.3: failed to queue resume event
[  471.089710][ T7379] raw-gadget.0 gadget.3: failed to queue suspend event
[  471.166632][T13592] raw-gadget.0 gadget.3: failed to queue resume event
[  471.187961][ T7379] raw-gadget.0 gadget.3: failed to queue suspend event
[  471.256572][T13592] raw-gadget.0 gadget.3: failed to queue resume event
[  471.268878][T13659] batadv0: left promiscuous mode
[  471.281097][ T7379] raw-gadget.0 gadget.3: failed to queue suspend event
[  471.346596][T13592] raw-gadget.0 gadget.3: failed to queue resume event
[  471.369474][   T48] raw-gadget.0 gadget.3: failed to queue suspend event
[  471.436665][T13592] raw-gadget.0 gadget.3: failed to queue resume event
[  471.467503][   T48] raw-gadget.0 gadget.3: failed to queue suspend event
[  471.468636][ T2329] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner
[  471.477588][ T2329] usb 9-1: selecting invalid altsetting 0
[  471.483464][ T2519] pvrusb2: Invalid write control endpoint
[  471.492813][ T2329] usb 9-1: USB disconnect, device number 21
[  471.515741][ T2519] pvrusb2: Invalid write control endpoint
[  471.519747][ T2519] pvrusb2: Invalid write control endpoint
[  471.522206][ T2519] pvrusb2: Invalid write control endpoint
[  471.524717][ T2519] pvrusb2: Invalid write control endpoint
[  471.527501][ T2519] pvrusb2: Invalid write control endpoint
[  471.529883][ T2519] pvrusb2: Invalid write control endpoint
[  471.532332][ T2519] pvrusb2: Invalid write control endpoint
[  471.534894][ T2519] pvrusb2: Invalid write control endpoint
[  471.537579][T13592] raw-gadget.0 gadget.3: failed to queue resume event
[  471.540499][ T2519] pvrusb2: Invalid write control endpoint
[  471.543388][ T2519] pvrusb2: Invalid write control endpoint
[  471.546015][ T2519] pvrusb2: Invalid write control endpoint
[  471.551065][ T2519] pvrusb2: Invalid write control endpoint
[  471.553572][ T2519] pvrusb2: Invalid write control endpoint
[  471.555955][ T2519] pvrusb2: Invalid write control endpoint
[  471.558774][ T2519] pvrusb2: Invalid write control endpoint
[  471.564263][ T2519] pvrusb2: Invalid write control endpoint
[  471.566366][ T2519] pvrusb2: Invalid write control endpoint
[  471.568385][ T2519] pvrusb2: Invalid write control endpoint
[  471.570254][ T2519] pvrusb2: Invalid write control endpoint
[  471.572185][ T2519] pvrusb2: Invalid write control endpoint
[  471.574112][ T2519] pvrusb2: Invalid write control endpoint
[  471.576511][ T2519] pvrusb2: Invalid write control endpoint
[  471.577432][T13670] FAULT_INJECTION: forcing a failure.
[  471.577432][T13670] name failslab, interval 1, probability 10, space 0, times 0
[  471.578946][ T2519] pvrusb2: Invalid write control endpoint
[  471.586035][ T2519] pvrusb2: Invalid write control endpoint
[  471.588568][ T2519] pvrusb2: Invalid write control endpoint
[  471.588762][T13670] CPU: 1 UID: 0 PID: 13670 Comm: syz.2.1982 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  471.588805][T13670] Tainted: [L]=SOFTLOCKUP
[  471.588813][T13670] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  471.588824][T13670] Call Trace:
[  471.588832][T13670]  <TASK>
[  471.588841][T13670]  dump_stack_lvl+0x100/0x190
[  471.588871][T13670]  should_fail_ex.cold+0x5/0xa
[  471.588895][T13670]  should_failslab+0xc2/0x120
[  471.588923][T13670]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  471.588947][T13670]  ? __alloc_skb+0x5b7/0x710
[  471.588972][T13670]  ? __alloc_skb+0x140/0x710
[  471.588999][T13670]  __alloc_skb+0x140/0x710
[  471.589021][T13670]  ? __alloc_skb+0x5b7/0x710
[  471.589044][T13670]  ? __pfx___alloc_skb+0x10/0x10
[  471.589074][T13670]  netlink_alloc_large_skb+0x69/0x150
[  471.589099][T13670]  netlink_sendmsg+0x680/0xda0
[  471.589126][T13670]  ? __pfx_netlink_sendmsg+0x10/0x10
[  471.589151][T13670]  ? apparmor_socket_sendmsg+0x15b/0x270
[  471.589178][T13670]  ____sys_sendmsg+0xa4d/0xbe0
[  471.589199][T13670]  ? __pfx_netlink_sendmsg+0x10/0x10
[  471.589222][T13670]  ? __pfx_____sys_sendmsg+0x10/0x10
[  471.589253][T13670]  ___sys_sendmsg+0x190/0x1e0
[  471.589278][T13670]  ? __pfx____sys_sendmsg+0x10/0x10
[  471.589312][T13670]  ? find_held_lock+0x2b/0x80
[  471.589352][T13670]  __sys_sendmsg+0x160/0x210
[  471.589381][T13670]  ? __pfx___sys_sendmsg+0x10/0x10
[  471.589415][T13670]  ? __pfx_ksys_write+0x10/0x10
[  471.589440][T13670]  __do_fast_syscall_32+0xe7/0x970
[  471.589464][T13670]  ? lockdep_hardirqs_on+0x78/0x100
[  471.589492][T13670]  do_fast_syscall_32+0x32/0x70
[  471.589518][T13670]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  471.589550][T13670] RIP: 0023:0xf7fb6fec
[  471.589575][T13670] Code: Unable to access opcode bytes at 0xf7fb6fc2.
[  471.589583][T13670] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  471.589604][T13670] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000e00
[  471.589618][T13670] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000
[  471.589630][T13670] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  471.589641][T13670] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  471.589652][T13670] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  471.589676][T13670]  </TASK>
[  471.627124][ T7379] raw-gadget.0 gadget.3: failed to queue suspend event
[  471.629656][ T2519] pvrusb2: Invalid write control endpoint
[  471.675328][ T2519] pvrusb2: Invalid write control endpoint
[  471.677513][ T2519] pvrusb2: Invalid write control endpoint
[  471.679190][ T2519] pvrusb2: Invalid write control endpoint
[  471.681786][ T2519] pvrusb2: Invalid write control endpoint
[  471.685715][ T2519] pvrusb2: Invalid write control endpoint
[  471.687622][ T2519] pvrusb2: Invalid write control endpoint
[  471.689973][ T2519] pvrusb2: Module ID 3 (saa7115) for device OnAir Creator Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  471.697380][T13592] raw-gadget.0 gadget.3: failed to queue resume event
[  471.715826][ T2519] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_h)
[  471.717888][   T48] raw-gadget.0 gadget.3: failed to queue suspend event
[  471.718293][ T2519] pvrusb2: Invalid write control endpoint
[  471.723119][ T2519] pvrusb2: Invalid write control endpoint
[  471.725348][ T2519] pvrusb2: Invalid write control endpoint
[  471.727631][ T2519] pvrusb2: Invalid write control endpoint
[  471.729929][ T2519] pvrusb2: Invalid write control endpoint
[  471.732127][ T2519] pvrusb2: Invalid write control endpoint
[  471.734388][ T2519] pvrusb2: Invalid write control endpoint
[  471.737064][ T2519] pvrusb2: Invalid write control endpoint
[  471.739425][ T2519] pvrusb2: Invalid write control endpoint
[  471.741584][ T2519] pvrusb2: Invalid write control endpoint
[  471.743756][ T2519] pvrusb2: Invalid write control endpoint
[  471.745934][ T2519] pvrusb2: Invalid write control endpoint
[  471.748133][ T2519] pvrusb2: Invalid write control endpoint
[  471.750487][ T2519] pvrusb2: Invalid write control endpoint
[  471.753175][ T2519] pvrusb2: Invalid write control endpoint
[  471.755354][ T2519] pvrusb2: Invalid write control endpoint
[  471.758093][ T2519] pvrusb2: Invalid write control endpoint
[  471.760308][ T2519] pvrusb2: Invalid write control endpoint
[  471.762475][ T2519] pvrusb2: Invalid write control endpoint
[  471.764543][ T2519] pvrusb2: Invalid write control endpoint
[  471.766685][ T2519] pvrusb2: Invalid write control endpoint
[  471.769186][ T2519] pvrusb2: Attached sub-driver cs53l32a
[  471.790179][T13592] raw-gadget.0 gadget.3: failed to queue resume event
[  471.812945][ T2519] pvrusb2: Invalid write control endpoint
[  471.814785][ T2519] pvrusb2: Invalid write control endpoint
[  471.817344][ T2519] pvrusb2: Invalid write control endpoint
[  471.819239][ T2519] pvrusb2: Invalid write control endpoint
[  471.821418][ T2519] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  471.829737][   T48] raw-gadget.0 gadget.3: failed to queue suspend event
[  471.832504][ T2519] pvrusb2: Device being rendered inoperable
[  471.834507][ T2519] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  471.839416][ T2519] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[  471.852846][T13592] raw-gadget.0 gadget.3: failed to queue disconnect event
[  471.869591][ T5912] usb 8-1: USB disconnect, device number 49
[  471.982285][T13686] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  471.984649][T13686] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  471.988460][T13686] vhci_hcd vhci_hcd.0: Device attached
[  472.269534][    T9] usb 44-1: SetAddress Request (18) to port 0
[  472.273828][    T9] usb 44-1: new SuperSpeed USB device number 18 using vhci_hcd
[  472.671093][ T2329] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[  472.739399][T13687] vhci_hcd: connection reset by peer
[  472.742031][   T13] vhci_hcd vhci_hcd.3: stop threads
[  472.745862][   T13] vhci_hcd vhci_hcd.3: release socket
[  472.749377][   T13] vhci_hcd vhci_hcd.3: disconnect device
[  472.817869][ T2329] usb 9-1: too many configurations: 9, using maximum allowed: 8
[  472.823694][ T2329] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  472.831277][ T2329] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  472.837686][ T2329] usb 9-1: config 0 interface 0 has no altsetting 0
[  472.841563][ T2329] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  472.845767][ T2329] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  472.851277][ T2329] usb 9-1: config 0 interface 0 has no altsetting 0
[  472.854904][ T2329] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  472.858032][ T2329] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  472.862364][ T2329] usb 9-1: config 0 interface 0 has no altsetting 0
[  472.865385][ T2329] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  472.868803][ T2329] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  472.872195][ T2329] usb 9-1: config 0 interface 0 has no altsetting 0
[  472.875311][ T2329] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  472.878328][ T2329] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  472.881740][ T2329] usb 9-1: config 0 interface 0 has no altsetting 0
[  472.884615][ T2329] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  472.890611][ T2329] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  472.894669][ T2329] usb 9-1: config 0 interface 0 has no altsetting 0
[  472.898664][ T2329] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  472.902036][ T2329] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  472.905686][ T2329] usb 9-1: config 0 interface 0 has no altsetting 0
[  472.910136][ T2329] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  472.913613][ T2329] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  472.917452][ T2329] usb 9-1: config 0 interface 0 has no altsetting 0
[  472.921596][ T2329] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  472.924725][ T2329] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  472.927542][ T2329] usb 9-1: Product: syz
[  472.928941][ T2329] usb 9-1: Manufacturer: syz
[  472.930460][ T2329] usb 9-1: SerialNumber: syz
[  472.937934][ T2329] usb 9-1: config 0 descriptor??
[  472.945246][ T2329] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0
[  473.112892][T13715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1989'.
[  473.283416][ T2329] usb 9-1: USB disconnect, device number 22
[  473.291378][ T2329] yurex 9-1:0.0: USB YUREX #0 now disconnected
[  473.559817][ T5896] usb 8-1: new high-speed USB device number 50 using dummy_hcd
[  473.589112][T13733] netlink: 'syz.0.1994': attribute type 10 has an invalid length.
[  473.595357][T13733] dummy0: entered promiscuous mode
[  473.597962][T13733] team0: Port device dummy0 added
[  473.716726][ T5896] usb 8-1: Using ep0 maxpacket: 32
[  473.721880][ T5896] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  473.744537][ T5896] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  473.749404][ T5896] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  473.753463][ T5896] usb 8-1: Product: syz
[  473.755515][ T5896] usb 8-1: Manufacturer: syz
[  473.757910][ T5896] usb 8-1: SerialNumber: syz
[  473.764156][ T5896] usb 8-1: config 0 descriptor??
[  473.769239][T13726] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  473.859553][ T5896] hub 8-1:0.0: bad descriptor, ignoring hub
[  473.862043][ T5896] hub 8-1:0.0: probe with driver hub failed with error -5
[  473.912143][T13742] netlink: 'syz.4.1998': attribute type 6 has an invalid length.
[  473.915662][T13742] netlink: 360 bytes leftover after parsing attributes in process `syz.4.1998'.
[  474.013144][T13726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  474.041352][T13726] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  474.817475][ T7379] raw-gadget.0 gadget.3: failed to queue suspend event
[  474.897614][T13726] raw-gadget.0 gadget.3: failed to queue resume event
[  474.938628][T13597] raw-gadget.0 gadget.3: failed to queue suspend event
[  474.981619][T13761] netlink: 'syz.0.2001': attribute type 1 has an invalid length.
[  475.001795][T13761] 8021q: adding VLAN 0 to HW filter on device bond3
[  475.027168][T13726] raw-gadget.0 gadget.3: failed to queue resume event
[  475.089324][T13597] raw-gadget.0 gadget.3: failed to queue suspend event
[  475.160764][T13726] raw-gadget.0 gadget.3: failed to queue resume event
[  475.179461][T13597] raw-gadget.0 gadget.3: failed to queue suspend event
[  475.200170][T13768] netlink: 'syz.0.2003': attribute type 2 has an invalid length.
[  475.246598][T13726] raw-gadget.0 gadget.3: failed to queue resume event
[  475.267577][T13597] raw-gadget.0 gadget.3: failed to queue suspend event
[  475.340725][T13726] raw-gadget.0 gadget.3: failed to queue resume event
[  475.357759][T13597] raw-gadget.0 gadget.3: failed to queue suspend event
[  475.426729][T13726] raw-gadget.0 gadget.3: failed to queue resume event
[  475.449817][T13597] raw-gadget.0 gadget.3: failed to queue suspend event
[  475.536791][T13726] raw-gadget.0 gadget.3: failed to queue resume event
[  475.560793][  T125] raw-gadget.0 gadget.3: failed to queue suspend event
[  475.627574][T13726] raw-gadget.0 gadget.3: failed to queue resume event
[  475.654464][  T125] raw-gadget.0 gadget.3: failed to queue suspend event
[  475.730552][T13776] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2006'.
[  475.736668][T13726] raw-gadget.0 gadget.3: failed to queue resume event
[  475.757316][T13597] raw-gadget.0 gadget.3: failed to queue suspend event
[  475.786365][T13776] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2006'.
[  475.817675][T13759] ptrace attach of "/syz-executor exec"[13783] was attempted by "/syz-executor exec"[13759]
[  475.826577][T13726] raw-gadget.0 gadget.3: failed to queue resume event
[  475.937022][  T125] raw-gadget.0 gadget.3: failed to queue suspend event
[  476.007175][T13726] raw-gadget.0 gadget.3: failed to queue resume event
[  476.035312][  T125] raw-gadget.0 gadget.3: failed to queue suspend event
[  476.121187][T13726] raw-gadget.0 gadget.3: failed to queue resume event
[  476.137717][  T125] raw-gadget.0 gadget.3: failed to queue suspend event
[  476.207521][T13726] raw-gadget.0 gadget.3: failed to queue resume event
[  476.228862][  T125] raw-gadget.0 gadget.3: failed to queue suspend event
[  476.296576][T13726] raw-gadget.0 gadget.3: failed to queue resume event
[  476.317530][  T125] raw-gadget.0 gadget.3: failed to queue suspend event
[  476.331848][T13726] raw-gadget.0 gadget.3: failed to queue disconnect event
[  476.340990][   T56] usb 8-1: USB disconnect, device number 50
[  476.566507][ T5896] usb 7-1: new full-speed USB device number 55 using dummy_hcd
[  477.228604][ T5896] usb 7-1: config 0 has an invalid interface number: 205 but max is 0
[  477.232270][ T5896] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  477.236488][ T5896] usb 7-1: config 0 has no interface number 0
[  477.238832][ T5896] usb 7-1: config 0 interface 205 has no altsetting 0
[  477.243074][ T5896] usb 7-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[  477.247134][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.250304][ T5896] usb 7-1: Product: syz
[  477.252154][ T5896] usb 7-1: Manufacturer: syz
[  477.254144][ T5896] usb 7-1: SerialNumber: syz
[  477.262864][ T5896] usb 7-1: config 0 descriptor??
[  477.268899][ T5896] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state.
[  477.273665][ T5896] dvb-usb: bulk message failed: -22 (3/0)
[  477.299351][ T5896] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  477.302759][ T5896] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device)
[  477.306904][ T5896] usb 7-1: media controller created
[  477.309916][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  477.315588][ T5896] dvb-usb: bulk message failed: -22 (6/0)
[  477.319935][ T5896] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device'
[  477.325331][ T5896] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input22
[  477.330740][ T5896] dvb-usb: schedule remote query interval to 150 msecs.
[  477.333111][ T5896] dvb-usb: bulk message failed: -22 (3/0)
[  477.356557][ T5896] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected.
[  477.427513][    T9] usb 44-1: device descriptor read/8, error -110
[  477.599017][ T1044] dvb-usb: bulk message failed: -22 (1/0)
[  477.605140][ T1044] dvb-usb: error while querying for an remote control event.
[  477.764711][T13816] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2016'.
[  477.806564][ T5912] usb 8-1: new high-speed USB device number 51 using dummy_hcd
[  477.820709][T13821] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2016'.
[  477.929904][ T1044] dvb-usb: bulk message failed: -22 (1/0)
[  477.934481][ T1044] dvb-usb: error while querying for an remote control event.
[  477.958212][ T5912] usb 8-1: Using ep0 maxpacket: 32
[  477.970598][ T5912] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  477.985588][ T5912] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  477.994224][ T5912] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  478.003169][ T5912] usb 8-1: Product: syz
[  478.006493][ T5912] usb 8-1: Manufacturer: syz
[  478.010914][ T5912] usb 8-1: SerialNumber: syz
[  478.020957][ T5912] usb 8-1: config 0 descriptor??
[  478.026909][T13819] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  478.032123][ T5912] hub 8-1:0.0: bad descriptor, ignoring hub
[  478.037886][ T5912] hub 8-1:0.0: probe with driver hub failed with error -5
[  478.129385][ T1044] dvb-usb: bulk message failed: -22 (1/0)
[  478.156595][    T9] usb usb44-port1: attempt power cycle
[  478.160094][ T1044] dvb-usb: error while querying for an remote control event.
[  478.233988][T13819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  478.242034][T13819] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  478.430229][ T1044] dvb-usb: bulk message failed: -22 (1/0)
[  478.432374][ T1044] dvb-usb: error while querying for an remote control event.
[  478.765939][ T1044] dvb-usb: bulk message failed: -22 (1/0)
[  478.768561][ T1044] dvb-usb: error while querying for an remote control event.
[  478.836640][   T56] usb 7-1: USB disconnect, device number 55
[  478.893567][   T56] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected.
[  478.967482][    T9] usb usb44-port1: unable to enumerate USB device
[  478.977955][  T125] raw-gadget.0 gadget.3: failed to queue suspend event
[  479.056625][T13819] raw-gadget.0 gadget.3: failed to queue resume event
[  479.087483][  T125] raw-gadget.0 gadget.3: failed to queue suspend event
[  479.154631][T13844] netlink: 'syz.2.2023': attribute type 1 has an invalid length.
[  479.158390][T13819] raw-gadget.0 gadget.3: failed to queue resume event
[  479.200115][  T125] raw-gadget.0 gadget.3: failed to queue suspend event
[  479.336895][T13819] raw-gadget.0 gadget.3: failed to queue resume event
[  479.367489][T13597] raw-gadget.0 gadget.3: failed to queue suspend event
[  479.403919][T13849] bridge0: port 3(syz_tun) entered blocking state
[  479.407022][T13849] bridge0: port 3(syz_tun) entered disabled state
[  479.411647][T13849] syz_tun: entered promiscuous mode
[  479.414306][T13849] bridge0: port 3(syz_tun) entered blocking state
[  479.417164][T13849] bridge0: port 3(syz_tun) entered listening state
[  479.425367][T13849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2024'.
[  479.438509][    C2] bridge0: port 3(syz_tun) neighbor 0000.00:00:00:00:00:00 lost
[  479.445744][    C2] bridge0: topology change detected, propagating
[  479.450503][T13819] raw-gadget.0 gadget.3: failed to queue resume event
[  479.450787][T13846] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10)
[  479.456158][T13846] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  479.459898][T13846] vhci_hcd vhci_hcd.0: Device attached
[  479.469337][ T7379] raw-gadget.0 gadget.3: failed to queue suspend event
[  479.500398][T13846] erofs (device sr0): cannot find valid erofs superblock
[  479.536676][T13819] raw-gadget.0 gadget.3: failed to queue resume event
[  479.558957][  T125] raw-gadget.0 gadget.3: failed to queue suspend event
[  479.626584][T13819] raw-gadget.0 gadget.3: failed to queue resume event
[  479.647301][  T125] raw-gadget.0 gadget.3: failed to queue suspend event
[  479.726629][T13819] raw-gadget.0 gadget.3: failed to queue resume event
[  479.736511][ T1044] usb 42-1: SetAddress Request (2) to port 0
[  479.738522][ T1044] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd
[  479.788519][T13597] raw-gadget.0 gadget.3: failed to queue suspend event
[  479.856641][T13819] raw-gadget.0 gadget.3: failed to queue resume event
[  479.877458][T13597] raw-gadget.0 gadget.3: failed to queue suspend event
[  479.942361][T13850] vhci_hcd: connection reset by peer
[  479.944562][   T13] vhci_hcd vhci_hcd.2: stop threads
[  479.946804][T13819] raw-gadget.0 gadget.3: failed to queue resume event
[  479.946982][   T13] vhci_hcd vhci_hcd.2: release socket
[  479.951847][   T13] vhci_hcd vhci_hcd.2: disconnect device
[  479.967374][T13597] raw-gadget.0 gadget.3: failed to queue suspend event
[  480.036807][T13819] raw-gadget.0 gadget.3: failed to queue resume event
[  480.057878][T13597] raw-gadget.0 gadget.3: failed to queue suspend event
[  480.172392][T13819] raw-gadget.0 gadget.3: failed to queue resume event
[  480.197713][   T48] raw-gadget.0 gadget.3: failed to queue suspend event
[  480.276614][T13819] raw-gadget.0 gadget.3: failed to queue resume event
[  480.306489][  T125] raw-gadget.0 gadget.3: failed to queue suspend event
[  480.396586][T13819] raw-gadget.0 gadget.3: failed to queue resume event
[  480.420117][   T48] raw-gadget.0 gadget.3: failed to queue suspend event
[  480.486592][T13819] raw-gadget.0 gadget.3: failed to queue resume event
[  480.509540][   T40] raw-gadget.0 gadget.3: failed to queue suspend event
[  480.577144][T13819] raw-gadget.0 gadget.3: failed to queue resume event
[  480.607710][   T48] raw-gadget.0 gadget.3: failed to queue suspend event
[  480.624728][T13819] raw-gadget.0 gadget.3: failed to queue disconnect event
[  480.637288][  T847] usb 8-1: USB disconnect, device number 51
[  480.943733][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2034'.
[  481.968899][T13912] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  481.976732][    T9] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[  482.126520][    T9] usb 9-1: Using ep0 maxpacket: 32
[  482.130824][    T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  482.140196][    T9] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  482.143322][    T9] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  482.146152][    T9] usb 9-1: Product: syz
[  482.148023][    T9] usb 9-1: Manufacturer: syz
[  482.149776][    T9] usb 9-1: SerialNumber: syz
[  482.155822][    T9] usb 9-1: config 0 descriptor??
[  482.159465][T13904] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  482.163223][    T9] hub 9-1:0.0: bad descriptor, ignoring hub
[  482.165309][    T9] hub 9-1:0.0: probe with driver hub failed with error -5
[  482.354030][T13917] overlayfs: failed to clone upperpath
[  482.369884][T13904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  482.375585][T13904] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  482.387847][T13917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2041'.
[  482.955442][T13927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2044'.
[  483.347770][T13597] raw-gadget.0 gadget.4: failed to queue suspend event
[  483.418552][T13904] raw-gadget.0 gadget.4: failed to queue resume event
[  483.456157][ T7379] raw-gadget.0 gadget.4: failed to queue suspend event
[  483.538635][T13904] raw-gadget.0 gadget.4: failed to queue resume event
[  483.561957][T10023] raw-gadget.0 gadget.4: failed to queue suspend event
[  483.574457][T13947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2048'.
[  483.591309][T13947] lo speed is unknown, defaulting to 1000
[  483.594918][T13947] lo speed is unknown, defaulting to 1000
[  483.604595][T13947] lo speed is unknown, defaulting to 1000
[  483.656870][T13904] raw-gadget.0 gadget.4: failed to queue resume event
[  483.688091][T13597] raw-gadget.0 gadget.4: failed to queue suspend event
[  483.752919][T13950] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[  483.767665][T13947] infiniband syz0: set active
[  483.768507][T13904] raw-gadget.0 gadget.4: failed to queue resume event
[  483.769234][T13947] infiniband syz0: added lo
[  483.773869][ T5912] lo speed is unknown, defaulting to 1000
[  483.783938][T13947] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  483.789376][T13947] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  483.794694][T13947] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  483.797315][ T7379] raw-gadget.0 gadget.4: failed to queue suspend event
[  483.810781][T13947] RDS/IB: syz0: added
[  483.812258][T13947] smc: adding ib device syz0 with port count 1
[  483.814227][T13947] smc:    ib device syz0 port 1 has no pnetid
[  483.820324][ T5912] lo speed is unknown, defaulting to 1000
[  483.823401][T13947] lo speed is unknown, defaulting to 1000
[  483.889546][T13904] raw-gadget.0 gadget.4: failed to queue resume event
[  483.911857][T13947] lo speed is unknown, defaulting to 1000
[  483.917206][ T7379] raw-gadget.0 gadget.4: failed to queue suspend event
[  483.955234][T13955] FAULT_INJECTION: forcing a failure.
[  483.955234][T13955] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  483.959695][T13955] CPU: 0 UID: 0 PID: 13955 Comm: syz.2.2051 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  483.959715][T13955] Tainted: [L]=SOFTLOCKUP
[  483.959719][T13955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  483.959726][T13955] Call Trace:
[  483.959731][T13955]  <TASK>
[  483.959736][T13955]  dump_stack_lvl+0x100/0x190
[  483.959757][T13955]  should_fail_ex.cold+0x5/0xa
[  483.959772][T13955]  save_fsave_header+0x14c/0x2f0
[  483.959807][T13955]  ? __pfx_save_fsave_header+0x10/0x10
[  483.959824][T13955]  ? copy_fpstate_to_sigframe+0x2b8/0xae0
[  483.959837][T13955]  ? __local_bh_enable_ip+0x9e/0x120
[  483.959854][T13955]  copy_fpstate_to_sigframe+0x755/0xae0
[  483.959865][T13955]  ? do_raw_spin_lock+0x128/0x260
[  483.959880][T13955]  ? __pfx_copy_fpstate_to_sigframe+0x10/0x10
[  483.959895][T13955]  ? posixtimer_deliver_signal+0x19d/0x6e0
[  483.959911][T13955]  ? x86_task_fpu+0x5f/0x90
[  483.959930][T13955]  get_sigframe+0x3fb/0x940
[  483.959960][T13955]  ? __pfx_get_sigframe+0x10/0x10
[  483.959976][T13955]  ? rcu_is_watching+0x12/0xc0
[  483.959991][T13955]  ? siginfo_layout+0x156/0x290
[  483.960006][T13955]  ia32_setup_rt_frame+0xe7/0xaf0
[  483.960023][T13955]  ? __pfx_ia32_setup_rt_frame+0x10/0x10
[  483.960040][T13955]  arch_do_signal_or_restart+0x459/0x7a0
[  483.960059][T13955]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  483.960080][T13955]  ? fput+0x79/0x100
[  483.960097][T13955]  exit_to_user_mode_loop+0x139/0x6f0
[  483.960108][T13955]  ? rcu_is_watching+0x12/0xc0
[  483.960122][T13955]  do_int80_emulation+0x513/0x720
[  483.960143][T13955]  asm_int80_emulation+0x1a/0x20
[  483.960155][T13955] RIP: 0023:0xf71b72eb
[  483.960165][T13955] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  483.960177][T13955] RSP: 002b:00000000f54764bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[  483.960188][T13955] RAX: 0000000000000001 RBX: 0000000000000004 RCX: 00000000f54765c0
[  483.960195][T13955] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  483.960201][T13955] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  483.960208][T13955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  483.960215][T13955] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  483.960254][T13955]  </TASK>
[  484.000319][T13947] lo speed is unknown, defaulting to 1000
[  484.000849][T13904] raw-gadget.0 gadget.4: failed to queue resume event
[  484.078305][ T7379] raw-gadget.0 gadget.4: failed to queue suspend event
[  484.124486][T13947] lo speed is unknown, defaulting to 1000
[  484.156923][T13904] raw-gadget.0 gadget.4: failed to queue resume event
[  484.178336][ T7379] raw-gadget.0 gadget.4: failed to queue suspend event
[  484.267714][T13904] raw-gadget.0 gadget.4: failed to queue resume event
[  484.305073][ T7379] raw-gadget.0 gadget.4: failed to queue suspend event
[  484.351741][T13967] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2055'.
[  484.386881][T13904] raw-gadget.0 gadget.4: failed to queue resume event
[  484.409809][T13972] FAULT_INJECTION: forcing a failure.
[  484.409809][T13972] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  484.413570][T13972] CPU: 3 UID: 0 PID: 13972 Comm: syz.3.2057 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  484.413588][T13972] Tainted: [L]=SOFTLOCKUP
[  484.413593][T13972] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  484.413601][T13972] Call Trace:
[  484.413607][T13972]  <TASK>
[  484.413612][T13972]  dump_stack_lvl+0x100/0x190
[  484.413631][T13972]  should_fail_ex.cold+0x5/0xa
[  484.413645][T13972]  _copy_from_user+0x2e/0xd0
[  484.413665][T13972]  get_compat_msghdr+0xb3/0x480
[  484.413686][T13972]  ? __pfx_get_compat_msghdr+0x10/0x10
[  484.413708][T13972]  ___sys_sendmsg+0x1b6/0x1e0
[  484.413722][T13972]  ? __pfx____sys_sendmsg+0x10/0x10
[  484.413740][T13972]  ? find_held_lock+0x2b/0x80
[  484.413764][T13972]  __sys_sendmsg+0x160/0x210
[  484.413780][T13972]  ? __pfx___sys_sendmsg+0x10/0x10
[  484.413804][T13972]  ? __pfx_ksys_write+0x10/0x10
[  484.413825][T13972]  __do_fast_syscall_32+0xe7/0x970
[  484.413846][T13972]  ? lockdep_hardirqs_on+0x78/0x100
[  484.413861][T13972]  do_fast_syscall_32+0x32/0x70
[  484.413875][T13972]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  484.413891][T13972] RIP: 0023:0xf6fcefec
[  484.413907][T13972] Code: Unable to access opcode bytes at 0xf6fcefc2.
[  484.413913][T13972] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  484.413924][T13972] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100
[  484.413932][T13972] RDX: 0000000004000080 RSI: 0000000000000000 RDI: 0000000000000000
[  484.413938][T13972] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  484.413945][T13972] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  484.413952][T13972] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  484.413966][T13972]  </TASK>
[  484.489490][T13597] raw-gadget.0 gadget.4: failed to queue suspend event
[  484.557096][T13904] raw-gadget.0 gadget.4: failed to queue resume event
[  484.600594][T10023] raw-gadget.0 gadget.4: failed to queue suspend event
[  484.670699][T13904] raw-gadget.0 gadget.4: failed to queue resume event
[  484.748313][ T7379] raw-gadget.0 gadget.4: failed to queue suspend event
[  484.755209][T13980] FAULT_INJECTION: forcing a failure.
[  484.755209][T13980] name failslab, interval 1, probability 1, space 0, times 0
[  484.759920][T13980] CPU: 0 UID: 0 PID: 13980 Comm: syz.2.2060 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  484.759947][T13980] Tainted: [L]=SOFTLOCKUP
[  484.759955][T13980] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  484.759967][T13980] Call Trace:
[  484.759975][T13980]  <TASK>
[  484.759981][T13980]  dump_stack_lvl+0x100/0x190
[  484.760012][T13980]  should_fail_ex.cold+0x5/0xa
[  484.760042][T13980]  should_failslab+0xc2/0x120
[  484.760069][T13980]  __kmalloc_noprof+0xfc/0x820
[  484.760094][T13980]  ? rcu_is_watching+0x12/0xc0
[  484.760119][T13980]  ? tomoyo_realpath_from_path+0xb6/0x690
[  484.760152][T13980]  tomoyo_realpath_from_path+0xb6/0x690
[  484.760176][T13980]  tomoyo_path_number_perm+0x23c/0x580
[  484.760190][T13980]  ? tomoyo_path_number_perm+0x22e/0x580
[  484.760205][T13980]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  484.760248][T13980]  ? get_pid_task+0x106/0x250
[  484.760283][T13980]  ? find_held_lock+0x2b/0x80
[  484.760297][T13980]  ? __fget_files+0x215/0x3d0
[  484.760308][T13980]  ? hook_file_ioctl_common+0x140/0x440
[  484.760323][T13980]  ? __fget_files+0x215/0x3d0
[  484.760335][T13980]  ? __fget_files+0x21f/0x3d0
[  484.760347][T13980]  security_file_ioctl_compat+0xd3/0x230
[  484.760362][T13980]  __ia32_compat_sys_ioctl+0xc2/0x360
[  484.760380][T13980]  __do_fast_syscall_32+0xe7/0x970
[  484.760397][T13980]  ? lockdep_hardirqs_on+0x78/0x100
[  484.760411][T13980]  do_fast_syscall_32+0x32/0x70
[  484.760426][T13980]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  484.760441][T13980] RIP: 0023:0xf7fb6fec
[  484.760456][T13980] Code: Unable to access opcode bytes at 0xf7fb6fc2.
[  484.760461][T13980] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  484.760472][T13980] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f1
[  484.760479][T13980] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000
[  484.760486][T13980] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  484.760492][T13980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  484.760498][T13980] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  484.760512][T13980]  </TASK>
[  484.760517][T13980] ERROR: Out of memory at tomoyo_realpath_from_path.
[  484.762368][T13904] raw-gadget.0 gadget.4: failed to queue disconnect event
[  484.834235][ T1044] usb 42-1: device descriptor read/8, error -110
[  484.836857][ T2329] usb 9-1: USB disconnect, device number 23
[  484.986546][T13983] nbd2: detected capacity change from 0 to 63
[  485.005197][T13987] block nbd2: NBD_DISCONNECT
[  485.029109][T13987] block nbd2: Disconnected due to user request.
[  485.039046][T13987] block nbd2: shutting down sockets
[  485.044944][ T1307] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  485.051591][ T1307] buffer_io_error: 11 callbacks suppressed
[  485.051610][ T1307] Buffer I/O error on dev nbd2, logical block 0, async page read
[  485.057177][ T1307] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2
[  485.061026][ T1307] Buffer I/O error on dev nbd2, logical block 1, async page read
[  485.064140][ T1307] Buffer I/O error on dev nbd2, logical block 2, async page read
[  485.067446][ T1307] Buffer I/O error on dev nbd2, logical block 3, async page read
[  485.081285][   T11] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  485.085360][   T11] Buffer I/O error on dev nbd2, logical block 0, async page read
[  485.096241][   T11] Buffer I/O error on dev nbd2, logical block 1, async page read
[  485.099455][   T11] Buffer I/O error on dev nbd2, logical block 2, async page read
[  485.102748][   T11] Buffer I/O error on dev nbd2, logical block 3, async page read
[  485.110317][   T35] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  485.117492][   T35] Buffer I/O error on dev nbd2, logical block 0, async page read
[  485.126210][   T35] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  485.130719][   T35] Buffer I/O error on dev nbd2, logical block 1, async page read
[  485.136009][   T35] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  485.151149][   T35] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  485.156073][   T35] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  485.159970][   T35] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  485.164341][   T35] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  485.217057][T13132] ldm_validate_partition_table(): Disk read failed.
[  485.237994][ T1044] usb usb42-port1: attempt power cycle
[  485.242824][T13132] Dev nbd2: unable to read RDB block 0
[  485.259989][T13132]  nbd2: unable to read partition table
[  485.482721][T13132] ldm_validate_partition_table(): Disk read failed.
[  485.488889][T13132] Dev nbd2: unable to read RDB block 0
[  485.491421][T13132]  nbd2: unable to read partition table
[  485.685423][T14000] netlink: 556 bytes leftover after parsing attributes in process `syz.3.2066'.
[  485.690941][T14000] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2066'.
[  486.306689][   T29] usb 7-1: new full-speed USB device number 56 using dummy_hcd
[  486.496165][   T29] usb 7-1: unable to get BOS descriptor or descriptor too short
[  486.511612][   T29] usb 7-1: not running at top speed; connect to a high speed hub
[  486.528287][   T29] usb 7-1: config 10 has an invalid interface number: 3 but max is 0
[  486.543552][   T29] usb 7-1: config 10 has no interface number 0
[  486.555953][   T29] usb 7-1: config 10 interface 3 has no altsetting 0
[  486.570327][   T29] usb 7-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=14.c2
[  486.689017][   T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.782417][   T29] usb 7-1: Product: syz
[  486.784258][   T29] usb 7-1: Manufacturer: syz
[  486.785913][   T29] usb 7-1: SerialNumber: syz
[  486.876559][   T56] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[  487.046674][   T56] usb 9-1: Using ep0 maxpacket: 32
[  487.050413][   T56] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  487.055394][   T56] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  487.058700][   T56] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  487.061485][   T56] usb 9-1: Product: syz
[  487.062943][   T56] usb 9-1: Manufacturer: syz
[  487.064546][   T56] usb 9-1: SerialNumber: syz
[  487.069584][   T56] usb 9-1: config 0 descriptor??
[  487.074261][T14014] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  487.080077][   T56] hub 9-1:0.0: bad descriptor, ignoring hub
[  487.082337][   T56] hub 9-1:0.0: probe with driver hub failed with error -5
[  487.181487][ T1044] usb usb42-port1: unable to enumerate USB device
[  487.283886][T14014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  487.287586][T14014] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  487.325510][T14025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2074'.
[  487.327603][T14027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2074'.
[  487.327830][T14026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2074'.
[  487.327844][T14026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2074'.
[  487.327931][T14026] netlink: 'syz.0.2074': attribute type 18 has an invalid length.
[  487.340245][T14027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2074'.
[  487.343133][T14027] netlink: 'syz.0.2074': attribute type 18 has an invalid length.
[  487.345299][T14025] vlan3: entered allmulticast mode
[  487.349308][T14025] bridge_slave_0: entered allmulticast mode
[  487.357940][T14027] netlink: 'syz.0.2074': attribute type 11 has an invalid length.
[  487.363796][T14027] netlink: 448 bytes leftover after parsing attributes in process `syz.0.2074'.
[  487.372387][T14025] 9p: Bad value for 'wfdno'
[  487.663074][   T29] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner
[  487.673147][   T29] usb 7-1: selecting invalid altsetting 0
[  487.678702][ T2519] pvrusb2: Invalid write control endpoint
[  487.684968][   T29] usb 7-1: USB disconnect, device number 56
[  487.704328][ T2519] pvrusb2: Invalid write control endpoint
[  487.706275][ T2519] pvrusb2: Invalid write control endpoint
[  487.708612][ T2519] pvrusb2: Invalid write control endpoint
[  487.710623][ T2519] pvrusb2: Invalid write control endpoint
[  487.712923][ T2519] pvrusb2: Invalid write control endpoint
[  487.714980][ T2519] pvrusb2: Invalid write control endpoint
[  487.720545][ T2519] pvrusb2: Invalid write control endpoint
[  487.722626][ T2519] pvrusb2: Invalid write control endpoint
[  487.724689][ T2519] pvrusb2: Invalid write control endpoint
[  487.729071][ T2519] pvrusb2: Invalid write control endpoint
[  487.731204][ T2519] pvrusb2: Invalid write control endpoint
[  487.733134][ T2519] pvrusb2: Invalid write control endpoint
[  487.735075][ T2519] pvrusb2: Invalid write control endpoint
[  487.737131][ T2519] pvrusb2: Invalid write control endpoint
[  487.738973][ T2519] pvrusb2: Invalid write control endpoint
[  487.740868][ T2519] pvrusb2: Invalid write control endpoint
[  487.742844][ T2519] pvrusb2: Invalid write control endpoint
[  487.744870][ T2519] pvrusb2: Invalid write control endpoint
[  487.747179][ T2519] pvrusb2: Invalid write control endpoint
[  487.749194][ T2519] pvrusb2: Invalid write control endpoint
[  487.751103][ T2519] pvrusb2: Invalid write control endpoint
[  487.752835][ T2519] pvrusb2: Invalid write control endpoint
[  487.754877][ T2519] pvrusb2: Invalid write control endpoint
[  487.759432][ T2519] pvrusb2: Invalid write control endpoint
[  487.761583][ T2519] pvrusb2: Invalid write control endpoint
[  487.764673][ T2519] pvrusb2: Invalid write control endpoint
[  487.766685][ T2519] pvrusb2: Invalid write control endpoint
[  487.768825][ T2519] pvrusb2: Invalid write control endpoint
[  487.770957][ T2519] pvrusb2: Invalid write control endpoint
[  487.773072][ T2519] pvrusb2: Invalid write control endpoint
[  487.775026][ T2519] pvrusb2: Invalid write control endpoint
[  487.777113][ T2519] pvrusb2: Invalid write control endpoint
[  487.779716][ T2519] pvrusb2: Module ID 3 (saa7115) for device OnAir Creator Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  487.812562][ T2519] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_h)
[  487.826822][ T2519] pvrusb2: Invalid write control endpoint
[  487.830030][ T2519] pvrusb2: Invalid write control endpoint
[  487.832719][ T2519] pvrusb2: Invalid write control endpoint
[  487.837296][ T2519] pvrusb2: Invalid write control endpoint
[  487.841398][ T2519] pvrusb2: Invalid write control endpoint
[  487.844037][ T2519] pvrusb2: Invalid write control endpoint
[  487.847630][ T2519] pvrusb2: Invalid write control endpoint
[  487.850310][ T2519] pvrusb2: Invalid write control endpoint
[  487.852831][ T2519] pvrusb2: Invalid write control endpoint
[  487.855071][ T2519] pvrusb2: Invalid write control endpoint
[  487.857950][ T2519] pvrusb2: Invalid write control endpoint
[  487.860054][ T2519] pvrusb2: Invalid write control endpoint
[  487.862178][ T2519] pvrusb2: Invalid write control endpoint
[  487.864088][ T2519] pvrusb2: Invalid write control endpoint
[  487.866017][ T2519] pvrusb2: Invalid write control endpoint
[  487.868021][ T2519] pvrusb2: Invalid write control endpoint
[  487.870239][ T2519] pvrusb2: Invalid write control endpoint
[  487.872044][ T2519] pvrusb2: Invalid write control endpoint
[  487.873929][ T2519] pvrusb2: Invalid write control endpoint
[  487.875907][ T2519] pvrusb2: Invalid write control endpoint
[  487.877915][ T2519] pvrusb2: Invalid write control endpoint
[  487.880440][ T2519] pvrusb2: Attached sub-driver cs53l32a
[  487.902826][ T2519] pvrusb2: Invalid write control endpoint
[  487.904695][ T2519] pvrusb2: Invalid write control endpoint
[  487.906610][ T2519] pvrusb2: Invalid write control endpoint
[  487.908616][ T2519] pvrusb2: Invalid write control endpoint
[  487.910835][ T2519] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  487.916496][ T2519] pvrusb2: Device being rendered inoperable
[  487.918678][ T2519] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  487.923003][ T2519] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[  488.078372][  T125] raw-gadget.1 gadget.4: failed to queue suspend event
[  488.146610][T14014] raw-gadget.1 gadget.4: failed to queue resume event
[  488.169402][ T7379] raw-gadget.1 gadget.4: failed to queue suspend event
[  488.236660][T14014] raw-gadget.1 gadget.4: failed to queue resume event
[  488.258147][T13597] raw-gadget.1 gadget.4: failed to queue suspend event
[  488.260590][T14063] fuse: fd is not a fuse device
[  488.326530][T14014] raw-gadget.1 gadget.4: failed to queue resume event
[  488.340188][T14067] tipc: Failed to remove unknown binding: 66,0,0/0:835660975/835660976
[  488.348110][T14067] tipc: Failed to remove unknown binding: 66,0,0/0:835660975/835660976
[  488.354450][T14067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  488.359428][T13597] raw-gadget.1 gadget.4: failed to queue suspend event
[  488.361919][T14067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  488.438543][T14014] raw-gadget.1 gadget.4: failed to queue resume event
[  488.459115][  T125] raw-gadget.1 gadget.4: failed to queue suspend event
[  488.526616][T14014] raw-gadget.1 gadget.4: failed to queue resume event
[  488.548553][ T7379] raw-gadget.1 gadget.4: failed to queue suspend event
[  488.617807][T14014] raw-gadget.1 gadget.4: failed to queue resume event
[  488.641784][ T7379] raw-gadget.1 gadget.4: failed to queue suspend event
[  488.706681][T14014] raw-gadget.1 gadget.4: failed to queue resume event
[  488.729111][  T125] raw-gadget.1 gadget.4: failed to queue suspend event
[  488.796705][T14014] raw-gadget.1 gadget.4: failed to queue resume event
[  488.818056][  T125] raw-gadget.1 gadget.4: failed to queue suspend event
[  488.896536][T14014] raw-gadget.1 gadget.4: failed to queue resume event
[  488.917684][ T7379] raw-gadget.1 gadget.4: failed to queue suspend event
[  488.986689][T14014] raw-gadget.1 gadget.4: failed to queue resume event
[  489.007796][T13597] raw-gadget.1 gadget.4: failed to queue suspend event
[  489.077923][T14014] raw-gadget.1 gadget.4: failed to queue resume event
[  489.098695][T13597] raw-gadget.1 gadget.4: failed to queue suspend event
[  489.166648][T14014] raw-gadget.1 gadget.4: failed to queue resume event
[  489.190696][T13597] raw-gadget.1 gadget.4: failed to queue suspend event
[  489.257358][T14014] raw-gadget.1 gadget.4: failed to queue resume event
[  489.277906][  T125] raw-gadget.1 gadget.4: failed to queue suspend event
[  489.346715][T14014] raw-gadget.1 gadget.4: failed to queue resume event
[  489.368608][  T125] raw-gadget.1 gadget.4: failed to queue suspend event
[  489.408219][T14080] FAULT_INJECTION: forcing a failure.
[  489.408219][T14080] name failslab, interval 1, probability 1, space 0, times 0
[  489.413585][T14080] CPU: 3 UID: 0 PID: 14080 Comm: syz.3.2081 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  489.413616][T14080] Tainted: [L]=SOFTLOCKUP
[  489.413623][T14080] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  489.413635][T14080] Call Trace:
[  489.413644][T14080]  <TASK>
[  489.413654][T14080]  dump_stack_lvl+0x100/0x190
[  489.413686][T14080]  should_fail_ex.cold+0x5/0xa
[  489.413709][T14080]  should_failslab+0xc2/0x120
[  489.413737][T14080]  __kmalloc_noprof+0xfc/0x820
[  489.413759][T14080]  ? rcu_is_watching+0x12/0xc0
[  489.413782][T14080]  ? tomoyo_realpath_from_path+0xb6/0x690
[  489.413816][T14080]  tomoyo_realpath_from_path+0xb6/0x690
[  489.413850][T14080]  tomoyo_path_number_perm+0x23c/0x580
[  489.413872][T14080]  ? tomoyo_path_number_perm+0x22e/0x580
[  489.413896][T14080]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  489.413917][T14080]  ? get_pid_task+0x106/0x250
[  489.413970][T14080]  ? find_held_lock+0x2b/0x80
[  489.413992][T14080]  ? __fget_files+0x215/0x3d0
[  489.414010][T14080]  ? hook_file_ioctl_common+0x140/0x440
[  489.414035][T14080]  ? __fget_files+0x215/0x3d0
[  489.414056][T14080]  ? __fget_files+0x21f/0x3d0
[  489.414073][T14080]  security_file_ioctl_compat+0xd3/0x230
[  489.414099][T14080]  __ia32_compat_sys_ioctl+0xc2/0x360
[  489.414128][T14080]  __do_fast_syscall_32+0xe7/0x970
[  489.414154][T14080]  ? lockdep_hardirqs_on+0x78/0x100
[  489.414178][T14080]  do_fast_syscall_32+0x32/0x70
[  489.414201][T14080]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  489.414223][T14080] RIP: 0023:0xf6fcefec
[  489.414248][T14080] Code: Unable to access opcode bytes at 0xf6fcefc2.
[  489.414257][T14080] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  489.414277][T14080] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0145608
[  489.414289][T14080] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000
[  489.414300][T14080] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  489.414311][T14080] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  489.414321][T14080] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  489.414345][T14080]  </TASK>
[  489.414354][T14080] ERROR: Out of memory at tomoyo_realpath_from_path.
[  489.447504][T14014] raw-gadget.1 gadget.4: failed to queue resume event
[  489.542764][ T7379] raw-gadget.1 gadget.4: failed to queue suspend event
[  489.611039][T14096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2086'.
[  489.615976][T14096] netlink: 177 bytes leftover after parsing attributes in process `syz.3.2086'.
[  489.629698][T14014] raw-gadget.1 gadget.4: failed to queue resume event
[  489.629789][T14096] netlink: 'syz.3.2086': attribute type 20 has an invalid length.
[  489.657737][T13597] raw-gadget.1 gadget.4: failed to queue suspend event
[  489.682860][T14014] raw-gadget.1 gadget.4: failed to queue disconnect event
[  489.687733][   T29] usb 9-1: USB disconnect, device number 24
[  490.246549][   T29] usb 9-1: new full-speed USB device number 25 using dummy_hcd
[  490.408027][   T29] usb 9-1: unable to get BOS descriptor or descriptor too short
[  490.411129][   T29] usb 9-1: not running at top speed; connect to a high speed hub
[  490.415055][   T29] usb 9-1: config 10 has an invalid interface number: 3 but max is 0
[  490.417914][   T29] usb 9-1: config 10 has no interface number 0
[  490.420223][   T29] usb 9-1: config 10 interface 3 has no altsetting 0
[  490.424225][   T29] usb 9-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=14.c2
[  490.427944][   T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  490.431148][   T29] usb 9-1: Product: syz
[  490.432746][   T29] usb 9-1: Manufacturer: syz
[  490.434308][   T29] usb 9-1: SerialNumber: syz
[  490.705706][T14114] lo speed is unknown, defaulting to 1000
[  490.797091][   T29] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner
[  490.803498][   T29] usb 9-1: selecting invalid altsetting 0
[  490.805435][ T2519] pvrusb2: Invalid write control endpoint
[  490.809617][   T29] usb 9-1: USB disconnect, device number 25
[  490.839723][ T2519] pvrusb2: Invalid write control endpoint
[  490.841735][ T2519] pvrusb2: Invalid write control endpoint
[  490.843553][ T2519] pvrusb2: Invalid write control endpoint
[  490.845578][ T2519] pvrusb2: Invalid write control endpoint
[  490.847841][ T2519] pvrusb2: Invalid write control endpoint
[  490.849889][ T2519] pvrusb2: Invalid write control endpoint
[  490.851606][ T2519] pvrusb2: Invalid write control endpoint
[  490.853363][ T2519] pvrusb2: Invalid write control endpoint
[  490.855310][ T2519] pvrusb2: Invalid write control endpoint
[  490.858360][ T2519] pvrusb2: Invalid write control endpoint
[  490.860915][ T2519] pvrusb2: Invalid write control endpoint
[  490.863272][ T2519] pvrusb2: Invalid write control endpoint
[  490.865505][ T2519] pvrusb2: Invalid write control endpoint
[  490.868766][ T2519] pvrusb2: Invalid write control endpoint
[  490.871301][ T2519] pvrusb2: Invalid write control endpoint
[  490.873582][ T2519] pvrusb2: Invalid write control endpoint
[  490.875882][ T2519] pvrusb2: Invalid write control endpoint
[  490.879394][ T2519] pvrusb2: Invalid write control endpoint
[  490.881350][ T2519] pvrusb2: Invalid write control endpoint
[  490.883785][ T2519] pvrusb2: Invalid write control endpoint
[  490.886101][ T2519] pvrusb2: Invalid write control endpoint
[  490.889381][ T2519] pvrusb2: Invalid write control endpoint
[  490.891998][ T2519] pvrusb2: Invalid write control endpoint
[  490.894294][ T2519] pvrusb2: Invalid write control endpoint
[  490.897402][ T2519] pvrusb2: Invalid write control endpoint
[  490.900115][ T2519] pvrusb2: Invalid write control endpoint
[  490.901944][ T2519] pvrusb2: Invalid write control endpoint
[  490.904081][ T2519] pvrusb2: Invalid write control endpoint
[  490.906349][ T2519] pvrusb2: Invalid write control endpoint
[  490.909262][ T2519] pvrusb2: Invalid write control endpoint
[  490.911249][ T2519] pvrusb2: Invalid write control endpoint
[  490.913128][ T2519] pvrusb2: Invalid write control endpoint
[  490.915449][ T2519] pvrusb2: Module ID 3 (saa7115) for device OnAir Creator Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  490.917497][T14124] netlink: 'syz.0.2095': attribute type 2 has an invalid length.
[  490.923726][T14124] __nla_validate_parse: 2 callbacks suppressed
[  490.923737][T14124] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2095'.
[  490.939494][ T2519] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_h)
[  490.941668][ T2519] pvrusb2: Invalid write control endpoint
[  490.943586][ T2519] pvrusb2: Invalid write control endpoint
[  490.945407][ T2519] pvrusb2: Invalid write control endpoint
[  490.947777][ T2519] pvrusb2: Invalid write control endpoint
[  490.949811][ T2519] pvrusb2: Invalid write control endpoint
[  490.951597][ T2519] pvrusb2: Invalid write control endpoint
[  490.953495][ T2519] pvrusb2: Invalid write control endpoint
[  490.955659][ T2519] pvrusb2: Invalid write control endpoint
[  490.959668][ T2519] pvrusb2: Invalid write control endpoint
[  490.962036][ T2519] pvrusb2: Invalid write control endpoint
[  490.964583][ T2519] pvrusb2: Invalid write control endpoint
[  490.968863][ T2519] pvrusb2: Invalid write control endpoint
[  490.999407][ T2519] pvrusb2: Invalid write control endpoint
[  491.001899][ T2519] pvrusb2: Invalid write control endpoint
[  491.003851][ T2519] pvrusb2: Invalid write control endpoint
[  491.005919][ T2519] pvrusb2: Invalid write control endpoint
[  491.007995][ T2519] pvrusb2: Invalid write control endpoint
[  491.010086][ T2519] pvrusb2: Invalid write control endpoint
[  491.012155][ T2519] pvrusb2: Invalid write control endpoint
[  491.013996][ T2519] pvrusb2: Invalid write control endpoint
[  491.015879][ T2519] pvrusb2: Invalid write control endpoint
[  491.020479][ T2519] pvrusb2: Attached sub-driver cs53l32a
[  491.048278][ T2519] pvrusb2: Invalid write control endpoint
[  491.051628][ T2519] pvrusb2: Invalid write control endpoint
[  491.053615][ T2519] pvrusb2: Invalid write control endpoint
[  491.055802][ T2519] pvrusb2: Invalid write control endpoint
[  491.058140][ T2519] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  491.063978][ T2519] pvrusb2: Device being rendered inoperable
[  491.065989][ T2519] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  491.070753][ T2519] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[  491.611867][   T42] kauditd_printk_skb: 32 callbacks suppressed
[  491.611884][   T42] audit: type=1804 audit(1785339185.836:481): pid=14145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2101" name="/newroot/381/file1/file0" dev="9p" ino=81526881 res=1 errno=0
[  491.851169][ T1044] hid_parser_main: 3 callbacks suppressed
[  491.851198][ T1044] hid-generic 0000:0001:0005.0007: unknown main item tag 0x0
[  491.861356][ T1044] hid-generic 0000:0001:0005.0007: unknown main item tag 0x0
[  491.915053][ T1044] hid-generic 0000:0001:0005.0007: hidraw1: <UNKNOWN> HID v8.06 Device [syz1] on syz0
[  491.947305][T14159] fido_id[14159]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  492.969927][ T5854] usb 7-1: new high-speed USB device number 57 using dummy_hcd
[  492.998902][T14171] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2108'.
[  493.002513][T14171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2108'.
[  493.110124][T14174] FAULT_INJECTION: forcing a failure.
[  493.110124][T14174] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  493.115259][T14174] CPU: 3 UID: 0 PID: 14174 Comm: syz.4.2110 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  493.115281][T14174] Tainted: [L]=SOFTLOCKUP
[  493.115285][T14174] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  493.115293][T14174] Call Trace:
[  493.115298][T14174]  <TASK>
[  493.115304][T14174]  dump_stack_lvl+0x100/0x190
[  493.115323][T14174]  should_fail_ex.cold+0x5/0xa
[  493.115337][T14174]  _copy_from_user+0x2e/0xd0
[  493.115356][T14174]  get_compat_msghdr+0xb3/0x480
[  493.115377][T14174]  ? __pfx_get_compat_msghdr+0x10/0x10
[  493.115398][T14174]  ___sys_sendmsg+0x1b6/0x1e0
[  493.115413][T14174]  ? __pfx____sys_sendmsg+0x10/0x10
[  493.115431][T14174]  ? find_held_lock+0x2b/0x80
[  493.115456][T14174]  __sys_sendmsg+0x160/0x210
[  493.115471][T14174]  ? __pfx___sys_sendmsg+0x10/0x10
[  493.115490][T14174]  ? __pfx_ksys_write+0x10/0x10
[  493.115504][T14174]  __do_fast_syscall_32+0xe7/0x970
[  493.115521][T14174]  ? lockdep_hardirqs_on+0x78/0x100
[  493.115535][T14174]  do_fast_syscall_32+0x32/0x70
[  493.115550][T14174]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  493.115565][T14174] RIP: 0023:0xf7f66fec
[  493.115580][T14174] Code: Unable to access opcode bytes at 0xf7f66fc2.
[  493.115586][T14174] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  493.115597][T14174] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180
[  493.115604][T14174] RDX: 0000000024008004 RSI: 0000000000000000 RDI: 0000000000000000
[  493.115610][T14174] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  493.115617][T14174] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  493.115623][T14174] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  493.115636][T14174]  </TASK>
[  493.176712][ T5854] usb 7-1: Using ep0 maxpacket: 16
[  493.181208][ T5854] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  493.185145][ T5854] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  493.189727][ T5854] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  493.192961][ T5854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  493.197084][ T5854] usb 7-1: config 0 descriptor??
[  493.547960][   T29] usb 8-1: new high-speed USB device number 52 using dummy_hcd
[  493.555386][T14192] fuse: fd is not a fuse device
[  493.608660][T14187] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2113'.
[  493.706676][   T29] usb 8-1: Using ep0 maxpacket: 32
[  493.709724][   T29] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  493.714389][   T29] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  493.717576][   T29] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  493.720366][   T29] usb 8-1: Product: syz
[  493.721708][   T29] usb 8-1: Manufacturer: syz
[  493.723221][   T29] usb 8-1: SerialNumber: syz
[  493.726024][   T29] usb 8-1: config 0 descriptor??
[  493.729385][T14181] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  493.733222][   T29] hub 8-1:0.0: bad descriptor, ignoring hub
[  493.735143][   T29] hub 8-1:0.0: probe with driver hub failed with error -5
[  493.937983][T14181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  493.944739][T14181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  493.953487][T14196] FAULT_INJECTION: forcing a failure.
[  493.953487][T14196] name failslab, interval 1, probability 1, space 0, times 0
[  493.958340][T14196] CPU: 1 UID: 0 PID: 14196 Comm: syz.2.2106 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  493.958359][T14196] Tainted: [L]=SOFTLOCKUP
[  493.958364][T14196] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  493.958371][T14196] Call Trace:
[  493.958375][T14196]  <TASK>
[  493.958380][T14196]  dump_stack_lvl+0x100/0x190
[  493.958406][T14196]  should_fail_ex.cold+0x5/0xa
[  493.958420][T14196]  should_failslab+0xc2/0x120
[  493.958437][T14196]  __kmalloc_noprof+0xfc/0x820
[  493.958451][T14196]  ? rcu_is_watching+0x12/0xc0
[  493.958466][T14196]  ? tomoyo_realpath_from_path+0xb6/0x690
[  493.958487][T14196]  tomoyo_realpath_from_path+0xb6/0x690
[  493.958507][T14196]  tomoyo_path_number_perm+0x23c/0x580
[  493.958521][T14196]  ? tomoyo_path_number_perm+0x22e/0x580
[  493.958536][T14196]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  493.958551][T14196]  ? get_pid_task+0x106/0x250
[  493.958578][T14196]  ? find_held_lock+0x2b/0x80
[  493.958591][T14196]  ? __fget_files+0x215/0x3d0
[  493.958602][T14196]  ? hook_file_ioctl_common+0x140/0x440
[  493.958617][T14196]  ? __fget_files+0x215/0x3d0
[  493.958629][T14196]  ? __fget_files+0x21f/0x3d0
[  493.958641][T14196]  security_file_ioctl_compat+0xd3/0x230
[  493.958658][T14196]  __ia32_compat_sys_ioctl+0xc2/0x360
[  493.958677][T14196]  __do_fast_syscall_32+0xe7/0x970
[  493.958692][T14196]  ? lockdep_hardirqs_on+0x78/0x100
[  493.958707][T14196]  do_fast_syscall_32+0x32/0x70
[  493.958721][T14196]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  493.958736][T14196] RIP: 0023:0xf7fb6fec
[  493.958752][T14196] Code: Unable to access opcode bytes at 0xf7fb6fc2.
[  493.958757][T14196] RSP: 002b:00000000f54544b4 EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  493.958769][T14196] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040085507
[  493.958776][T14196] RDX: 00000000f54544f8 RSI: 00000000f7446ff4 RDI: 0000000000000000
[  493.958782][T14196] RBP: 00000000f5455518 R08: 0000000000000000 R09: 0000000000000000
[  493.958789][T14196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  493.958795][T14196] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  493.958809][T14196]  </TASK>
[  493.958814][T14196] ERROR: Out of memory at tomoyo_realpath_from_path.
[  494.738006][  T125] raw-gadget.1 gadget.3: failed to queue suspend event
[  494.807232][T14181] raw-gadget.1 gadget.3: failed to queue resume event
[  494.830619][T13597] raw-gadget.1 gadget.3: failed to queue suspend event
[  494.896770][T14181] raw-gadget.1 gadget.3: failed to queue resume event
[  494.922749][T13597] raw-gadget.1 gadget.3: failed to queue suspend event
[  494.986915][T14181] raw-gadget.1 gadget.3: failed to queue resume event
[  495.008236][  T125] raw-gadget.1 gadget.3: failed to queue suspend event
[  495.076620][T14181] raw-gadget.1 gadget.3: failed to queue resume event
[  495.099335][   T40] raw-gadget.1 gadget.3: failed to queue suspend event
[  495.176592][T14181] raw-gadget.1 gadget.3: failed to queue resume event
[  495.201537][  T125] raw-gadget.1 gadget.3: failed to queue suspend event
[  495.276548][T14181] raw-gadget.1 gadget.3: failed to queue resume event
[  495.316867][   T40] raw-gadget.1 gadget.3: failed to queue suspend event
[  495.396658][T14181] raw-gadget.1 gadget.3: failed to queue resume event
[  495.418788][   T40] raw-gadget.1 gadget.3: failed to queue suspend event
[  495.486526][T14181] raw-gadget.1 gadget.3: failed to queue resume event
[  495.521906][T13597] raw-gadget.1 gadget.3: failed to queue suspend event
[  495.596576][T14181] raw-gadget.1 gadget.3: failed to queue resume event
[  495.628066][  T125] raw-gadget.1 gadget.3: failed to queue suspend event
[  495.706711][T14181] raw-gadget.1 gadget.3: failed to queue resume event
[  495.712778][T14226] FAULT_INJECTION: forcing a failure.
[  495.712778][T14226] name failslab, interval 1, probability 1, space 0, times 0
[  495.717857][T14226] CPU: 1 UID: 0 PID: 14226 Comm: syz.4.2127 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  495.717883][T14226] Tainted: [L]=SOFTLOCKUP
[  495.717888][T14226] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  495.717898][T14226] Call Trace:
[  495.717906][T14226]  <TASK>
[  495.717915][T14226]  dump_stack_lvl+0x100/0x190
[  495.717940][T14226]  should_fail_ex.cold+0x5/0xa
[  495.717962][T14226]  should_failslab+0xc2/0x120
[  495.717985][T14226]  __kvmalloc_node_noprof+0x116/0x970
[  495.718013][T14226]  ? seq_read_iter+0x819/0x1270
[  495.718043][T14226]  seq_read_iter+0x819/0x1270
[  495.718079][T14226]  seq_read+0x344/0x4d0
[  495.718104][T14226]  ? __pfx_seq_read+0x10/0x10
[  495.718128][T14226]  ? __pfx___might_resched+0x10/0x10
[  495.718159][T14226]  ? lock_acquire+0x1b9/0x370
[  495.718200][T14226]  ? rw_verify_area+0xce/0x6d0
[  495.718227][T14226]  ? __pfx_seq_read+0x10/0x10
[  495.718254][T14226]  vfs_read+0x1e4/0xb40
[  495.718276][T14226]  ? __pfx_vfs_read+0x10/0x10
[  495.718302][T14226]  ? find_held_lock+0x2b/0x80
[  495.718327][T14226]  ? __fget_files+0x215/0x3d0
[  495.718349][T14226]  ? __fget_files+0x21f/0x3d0
[  495.718375][T14226]  ksys_read+0x12a/0x250
[  495.718393][T14226]  ? __pfx_ksys_read+0x10/0x10
[  495.718408][T14226]  ? ksys_write+0x1ac/0x250
[  495.718425][T14226]  ? __pfx_ksys_write+0x10/0x10
[  495.718449][T14226]  __do_fast_syscall_32+0xe7/0x970
[  495.718475][T14226]  ? lockdep_hardirqs_on+0x78/0x100
[  495.718498][T14226]  do_fast_syscall_32+0x32/0x70
[  495.718520][T14226]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  495.718544][T14226] RIP: 0023:0xf7f66fec
[  495.718572][T14226] Code: Unable to access opcode bytes at 0xf7f66fc2.
[  495.718582][T14226] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000003
[  495.718601][T14226] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800000c0
[  495.718613][T14226] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000
[  495.718625][T14226] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  495.718636][T14226] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  495.718647][T14226] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  495.718673][T14226]  </TASK>
[  495.727835][T13597] raw-gadget.1 gadget.3: failed to queue suspend event
[  495.801510][ T5854] usbhid 7-1:0.0: can't add hid device: -71
[  495.803486][ T5854] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  495.807229][ T5854] usb 7-1: USB disconnect, device number 57
[  495.876610][T14181] raw-gadget.1 gadget.3: failed to queue resume event
[  495.897440][  T125] raw-gadget.1 gadget.3: failed to queue suspend event
[  495.962836][T14229] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2128'.
[  495.966594][T14229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2128'.
[  495.966628][T14181] raw-gadget.1 gadget.3: failed to queue resume event
[  495.997942][T13597] raw-gadget.1 gadget.3: failed to queue suspend event
[  496.054886][T14238] netlink: 'syz.4.2132': attribute type 1 has an invalid length.
[  496.069421][T14238] bond0: entered allmulticast mode
[  496.076722][T14181] raw-gadget.1 gadget.3: failed to queue resume event
[  496.113814][T13597] raw-gadget.1 gadget.3: failed to queue suspend event
[  496.190540][T14238] bond0: (slave vti0): The slave device specified does not support setting the MAC address
[  496.193843][T14238] bond0: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  496.196574][T14181] raw-gadget.1 gadget.3: failed to queue resume event
[  496.199261][T14238] bond0: (slave vti0): making interface the new active one
[  496.201544][T14238] vti0: entered allmulticast mode
[  496.205099][T14238] vti0: left allmulticast mode
[  496.226929][T13597] raw-gadget.1 gadget.3: failed to queue suspend event
[  496.296566][T14181] raw-gadget.1 gadget.3: failed to queue resume event
[  496.332522][T10023] raw-gadget.1 gadget.3: failed to queue suspend event
[  496.345295][T14181] raw-gadget.1 gadget.3: failed to queue disconnect event
[  496.367220][   T56] usb 8-1: USB disconnect, device number 52
[  496.384026][T14248] netlink: 'syz.3.2136': attribute type 29 has an invalid length.
[  496.390776][T14248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2136'.
[  496.408917][T14248] macvlan0: entered allmulticast mode
[  496.410668][T14248] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode
[  496.536574][   T29] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[  496.686535][   T29] usb 9-1: Using ep0 maxpacket: 32
[  496.689633][   T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  496.693273][   T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  496.696985][   T29] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  496.700521][   T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.706016][   T29] usb 9-1: config 0 descriptor??
[  496.715993][   T29] hub 9-1:0.0: USB hub found
[  496.721907][T14265] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  496.922394][   T29] hub 9-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  497.333668][T14246] netlink: 'syz.4.2135': attribute type 1 has an invalid length.
[  497.337021][T14246] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2135'.
[  497.346752][   T34] usb 7-1: new high-speed USB device number 58 using dummy_hcd
[  497.498387][   T34] usb 7-1: Using ep0 maxpacket: 32
[  497.537109][   T34] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  497.557937][   T34] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  497.562670][   T29] usbhid 9-1:0.0: can't add hid device: -71
[  497.563610][   T34] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  497.564742][   T29] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  497.580551][   T34] usb 7-1: Product: syz
[  497.582591][   T34] usb 7-1: Manufacturer: syz
[  497.584391][   T34] usb 7-1: SerialNumber: syz
[  497.595214][   T34] usb 7-1: config 0 descriptor??
[  497.596746][   T29] usb 9-1: USB disconnect, device number 26
[  497.609644][T14287] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  497.628505][   T34] hub 7-1:0.0: bad descriptor, ignoring hub
[  497.630461][   T34] hub 7-1:0.0: probe with driver hub failed with error -5
[  497.845492][T14287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  497.856993][T14287] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  497.933408][   T29] IPVS: starting estimator thread 0...
[  498.036587][T14295] IPVS: using max 41 ests per chain, 98400 per kthread
[  498.658233][  T125] raw-gadget.1 gadget.2: failed to queue suspend event
[  498.666587][    C3] bridge0: port 3(syz_tun) entered learning state
[  498.676541][    C2] bridge0: port 2(bridge_slave_1) entered learning state
[  498.679724][    C2] bridge0: port 1(bridge_slave_0) entered learning state
[  498.726675][T14287] raw-gadget.1 gadget.2: failed to queue resume event
[  498.748398][  T125] raw-gadget.1 gadget.2: failed to queue suspend event
[  498.816616][T14287] raw-gadget.1 gadget.2: failed to queue resume event
[  498.837549][T10023] raw-gadget.1 gadget.2: failed to queue suspend event
[  498.872673][T14310] overlayfs: failed to clone upperpath
[  498.908265][T14287] raw-gadget.1 gadget.2: failed to queue resume event
[  498.927532][  T125] raw-gadget.1 gadget.2: failed to queue suspend event
[  498.996639][T14287] raw-gadget.1 gadget.2: failed to queue resume event
[  499.018058][T10023] raw-gadget.1 gadget.2: failed to queue suspend event
[  499.087121][T14287] raw-gadget.1 gadget.2: failed to queue resume event
[  499.109903][T10023] raw-gadget.1 gadget.2: failed to queue suspend event
[  499.208017][T14287] raw-gadget.1 gadget.2: failed to queue resume event
[  499.238205][T13597] raw-gadget.1 gadget.2: failed to queue suspend event
[  499.306535][T14287] raw-gadget.1 gadget.2: failed to queue resume event
[  499.324078][T14318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2153'.
[  499.332230][T14318] netlink: 177 bytes leftover after parsing attributes in process `syz.4.2153'.
[  499.348206][T14318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2153'.
[  499.351129][T14318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2153'.
[  499.354020][T14318] netlink: 'syz.4.2153': attribute type 20 has an invalid length.
[  499.388534][  T125] raw-gadget.1 gadget.2: failed to queue suspend event
[  499.487457][T14287] raw-gadget.1 gadget.2: failed to queue resume event
[  499.521045][T13597] raw-gadget.1 gadget.2: failed to queue suspend event
[  499.597270][T14287] raw-gadget.1 gadget.2: failed to queue resume event
[  499.647062][T13597] raw-gadget.1 gadget.2: failed to queue suspend event
[  499.688364][T14321] netlink: 'syz.4.2154': attribute type 2 has an invalid length.
[  499.693216][T14321] FAULT_INJECTION: forcing a failure.
[  499.693216][T14321] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  499.697406][T14321] CPU: 1 UID: 0 PID: 14321 Comm: syz.4.2154 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  499.697426][T14321] Tainted: [L]=SOFTLOCKUP
[  499.697430][T14321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  499.697438][T14321] Call Trace:
[  499.697443][T14321]  <TASK>
[  499.697448][T14321]  dump_stack_lvl+0x100/0x190
[  499.697469][T14321]  should_fail_ex.cold+0x5/0xa
[  499.697483][T14321]  _copy_from_user+0x2e/0xd0
[  499.697501][T14321]  move_addr_to_kernel+0x65/0x170
[  499.697517][T14321]  __sys_connect+0xb5/0x170
[  499.697530][T14321]  ? __pfx___sys_connect+0x10/0x10
[  499.697543][T14321]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  499.697565][T14321]  ? ksys_write+0x1ac/0x250
[  499.697577][T14321]  ? __pfx_ksys_write+0x10/0x10
[  499.697589][T14321]  __ia32_sys_connect+0x71/0xb0
[  499.697602][T14321]  ? lockdep_hardirqs_on+0x78/0x100
[  499.697616][T14321]  __do_fast_syscall_32+0xe7/0x970
[  499.697630][T14321]  ? lockdep_hardirqs_on+0x78/0x100
[  499.697644][T14321]  do_fast_syscall_32+0x32/0x70
[  499.697658][T14321]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  499.697673][T14321] RIP: 0023:0xf7f66fec
[  499.697689][T14321] Code: Unable to access opcode bytes at 0xf7f66fc2.
[  499.697694][T14321] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 000000000000016a
[  499.697705][T14321] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000040
[  499.697712][T14321] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000
[  499.697719][T14321] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  499.697725][T14321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  499.697731][T14321] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  499.697745][T14321]  </TASK>
[  499.763223][T14287] raw-gadget.1 gadget.2: failed to queue resume event
[  499.766009][T14322] fuse: Bad value for 'fd'
[  499.781502][T10023] raw-gadget.1 gadget.2: failed to queue suspend event
[  499.856596][T14287] raw-gadget.1 gadget.2: failed to queue resume event
[  499.927520][T13597] raw-gadget.1 gadget.2: failed to queue suspend event
[  500.006672][T14287] raw-gadget.1 gadget.2: failed to queue resume event
[  500.027832][  T125] raw-gadget.1 gadget.2: failed to queue suspend event
[  500.098514][T14287] raw-gadget.1 gadget.2: failed to queue resume event
[  500.118593][  T125] raw-gadget.1 gadget.2: failed to queue suspend event
[  500.154951][T14287] raw-gadget.1 gadget.2: failed to queue disconnect event
[  500.256860][   T56] usb 7-1: USB disconnect, device number 58
[  500.944247][T14347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2164'.
[  500.951484][T14347] netlink: 177 bytes leftover after parsing attributes in process `syz.4.2164'.
[  500.966202][T14347] netlink: 'syz.4.2164': attribute type 20 has an invalid length.
[  501.196646][   T56] usb 8-1: new low-speed USB device number 53 using dummy_hcd
[  501.228748][ T1440] ieee802154 phy1 wpan1: encryption failed: -22
[  501.236779][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  501.341896][T14357] __nla_validate_parse: 2 callbacks suppressed
[  501.341965][T14357] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2162'.
[  501.368226][   T56] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  501.372679][   T56] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  501.378080][   T56] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  501.383794][   T56] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  501.389802][   T56] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  501.397183][   T56] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  501.401573][   T56] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  501.407070][   T56] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  501.413835][   T56] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  501.423038][   T56] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  501.436277][   T56] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  501.442293][   T56] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  501.449985][   T56] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  501.459039][   T56] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  501.467066][   T56] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  501.471220][T14351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2162'.
[  501.475987][   T56] usb 8-1: string descriptor 0 read error: -22
[  501.478302][   T56] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  501.481411][   T56] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  501.495428][   T56] adutux 8-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  502.164260][T14377] Invalid ELF header magic: != ELF
[  502.167660][T14377] overlayfs: overlapping lowerdir path
[  502.417922][T14393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2173'.
[  502.422675][T14393] netlink: 177 bytes leftover after parsing attributes in process `syz.0.2173'.
[  502.442898][T14393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2173'.
[  502.445835][T14393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2173'.
[  502.448774][T14393] netlink: 'syz.0.2173': attribute type 20 has an invalid length.
[  503.206609][  T847] usb 9-1: new low-speed USB device number 27 using dummy_hcd
[  503.358989][  T847] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  503.361420][  T847] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  503.364731][  T847] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  503.369421][  T847] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  503.373342][  T847] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  503.380288][  T847] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  503.383308][  T847] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  503.387284][  T847] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  503.391077][  T847] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  503.394648][  T847] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  503.400542][  T847] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  503.405622][  T847] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  503.410853][  T847] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  503.414901][  T847] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  503.418870][  T847] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  503.425739][  T847] usb 9-1: string descriptor 0 read error: -22
[  503.428855][  T847] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  503.431809][  T847] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  503.442705][  T847] adutux 9-1:168.0: ADU100  now attached to /dev/usb/adutux1
[  504.329489][    T9] usb 9-1: USB disconnect, device number 27
[  504.348676][T14421] FAULT_INJECTION: forcing a failure.
[  504.348676][T14421] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  504.349052][ T2329] usb 8-1: USB disconnect, device number 53
[  504.353068][T14421] CPU: 2 UID: 0 PID: 14421 Comm: syz.4.2179 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  504.353099][T14421] Tainted: [L]=SOFTLOCKUP
[  504.353103][T14421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  504.353110][T14421] Call Trace:
[  504.353115][T14421]  <TASK>
[  504.353120][T14421]  dump_stack_lvl+0x100/0x190
[  504.353140][T14421]  should_fail_ex.cold+0x5/0xa
[  504.353154][T14421]  _copy_from_user+0x2e/0xd0
[  504.353173][T14421]  get_compat_msghdr+0xb3/0x480
[  504.353193][T14421]  ? __pfx_get_compat_msghdr+0x10/0x10
[  504.353215][T14421]  ___sys_sendmsg+0x1b6/0x1e0
[  504.353229][T14421]  ? __pfx____sys_sendmsg+0x10/0x10
[  504.353247][T14421]  ? find_held_lock+0x2b/0x80
[  504.353271][T14421]  __sys_sendmsg+0x160/0x210
[  504.353286][T14421]  ? __pfx___sys_sendmsg+0x10/0x10
[  504.353305][T14421]  ? __pfx_ksys_write+0x10/0x10
[  504.353319][T14421]  __do_fast_syscall_32+0xe7/0x970
[  504.353336][T14421]  ? lockdep_hardirqs_on+0x78/0x100
[  504.353350][T14421]  do_fast_syscall_32+0x32/0x70
[  504.353365][T14421]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  504.353381][T14421] RIP: 0023:0xf7f66fec
[  504.353400][T14421] Code: Unable to access opcode bytes at 0xf7f66fc2.
[  504.353406][T14421] RSP: 002b:00000000f540550c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  504.353418][T14421] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000100
[  504.353425][T14421] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000
[  504.353432][T14421] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  504.353438][T14421] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  504.353445][T14421] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  504.353458][T14421]  </TASK>
[  504.701056][T14427] netlink: 'syz.4.2181': attribute type 21 has an invalid length.
[  504.711472][T14427] netlink: 'syz.4.2181': attribute type 20 has an invalid length.
[  504.847436][T14431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2183'.
[  504.851882][T14431] netlink: 177 bytes leftover after parsing attributes in process `syz.2.2183'.
[  504.860768][T14431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2183'.
[  504.864336][T14431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2183'.
[  504.868069][T14431] netlink: 'syz.2.2183': attribute type 20 has an invalid length.
[  505.851862][T14451] FAULT_INJECTION: forcing a failure.
[  505.851862][T14451] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  505.857032][T14451] CPU: 0 UID: 0 PID: 14451 Comm: syz.4.2188 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  505.857065][T14451] Tainted: [L]=SOFTLOCKUP
[  505.857071][T14451] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  505.857081][T14451] Call Trace:
[  505.857088][T14451]  <TASK>
[  505.857095][T14451]  dump_stack_lvl+0x100/0x190
[  505.857122][T14451]  should_fail_ex.cold+0x5/0xa
[  505.857142][T14451]  _copy_from_iter+0x1f4/0x1690
[  505.857169][T14451]  ? __lock_acquire+0x49f/0x1a40
[  505.857197][T14451]  ? __pfx__copy_from_iter+0x10/0x10
[  505.857219][T14451]  ? __lock_acquire+0x49f/0x1a40
[  505.857251][T14451]  copy_page_from_iter+0x238/0x300
[  505.857278][T14451]  tun_build_skb.constprop.0+0x2ea/0x18f0
[  505.857342][T14451]  ? __pfx_tun_build_skb.constprop.0+0x10/0x10
[  505.857360][T14451]  ? unwind_get_return_address+0x59/0xa0
[  505.857393][T14451]  ? arch_stack_walk+0xa6/0xf0
[  505.857419][T14451]  ? __lock_acquire+0x49f/0x1a40
[  505.857455][T14451]  tun_get_user+0x16d6/0x3c20
[  505.857484][T14451]  ? __pfx_tun_get_user+0x10/0x10
[  505.857504][T14451]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  505.857530][T14451]  ? find_held_lock+0x2b/0x80
[  505.857549][T14451]  ? tun_get+0x191/0x370
[  505.857565][T14451]  ? tun_get+0x191/0x370
[  505.857587][T14451]  tun_chr_write_iter+0xdc/0x200
[  505.857608][T14451]  vfs_write+0x6ac/0x1050
[  505.857625][T14451]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  505.857646][T14451]  ? __pfx_vfs_write+0x10/0x10
[  505.857660][T14451]  ? find_held_lock+0x2b/0x80
[  505.857693][T14451]  ksys_write+0x12a/0x250
[  505.857708][T14451]  ? __pfx_ksys_write+0x10/0x10
[  505.857729][T14451]  do_int80_emulation+0x14b/0x720
[  505.857756][T14451]  asm_int80_emulation+0x1a/0x20
[  505.857773][T14451] RIP: 0023:0xf71672eb
[  505.857788][T14451] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  505.857803][T14451] RSP: 002b:00000000f542644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[  505.857821][T14451] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 00000000800003c0
[  505.857832][T14451] RDX: 00000000000003b6 RSI: 0000000000000000 RDI: 0000000000000000
[  505.857842][T14451] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  505.857851][T14451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  505.857862][T14451] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  505.857884][T14451]  </TASK>
[  506.354933][T14466] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  506.378968][T14466] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  506.383384][T14466] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  506.389847][T14466] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  506.393881][T14466] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  506.686220][T14464] lo speed is unknown, defaulting to 1000
[  506.869130][ T8208] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  507.664746][ T8208] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  507.779934][ T8208] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  507.837460][T14464] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.839824][T14464] bridge0: port 1(bridge_slave_0) entered disabled state
[  507.842230][T14464] bridge_slave_0: entered allmulticast mode
[  507.844999][T14464] bridge_slave_0: entered promiscuous mode
[  507.852954][T14464] bridge0: port 2(bridge_slave_1) entered blocking state
[  507.855388][T14464] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.862630][T14464] bridge_slave_1: entered allmulticast mode
[  507.882610][T14464] bridge_slave_1: entered promiscuous mode
[  508.436570][T14466] Bluetooth: hci4: command tx timeout
[  508.502520][ T8208] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.656142][T14464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  508.678150][T14464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  508.856737][  T847] usb 8-1: new high-speed USB device number 54 using dummy_hcd
[  508.905392][T14464] team0: Port device team_slave_0 added
[  508.914661][T14464] team0: Port device team_slave_1 added
[  508.955047][T14464] batman_adv: batadv0: Adding interface: batadv_slave_0
[  508.960216][T14464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  508.971129][T14464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  508.982856][T14464] batman_adv: batadv0: Adding interface: batadv_slave_1
[  508.985725][T14464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  508.996945][T14464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  509.006562][  T847] usb 8-1: Using ep0 maxpacket: 32
[  509.010165][  T847] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  509.021320][  T847] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  509.028198][  T847] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  509.036657][  T847] usb 8-1: Product: syz
[  509.038087][  T847] usb 8-1: Manufacturer: syz
[  509.041931][  T847] usb 8-1: SerialNumber: syz
[  509.047273][  T847] usb 8-1: config 0 descriptor??
[  509.050379][T14513] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  509.057220][T14464] hsr_slave_0: entered promiscuous mode
[  509.059219][  T847] hub 8-1:0.0: bad descriptor, ignoring hub
[  509.061184][  T847] hub 8-1:0.0: probe with driver hub failed with error -5
[  509.065362][T14464] hsr_slave_1: entered promiscuous mode
[  509.277294][T14513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  509.282510][T14513] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  509.430082][T14529] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 4 out of range (51000000..2150000000)
[  509.430622][ T8208] gretap1 (unregistering): left promiscuous mode
[  509.444881][ T8208] team0: Port device gretap1 removed
[  509.502522][ T8208] bond2 (unregistering): (slave geneve3): Releasing active interface
[  509.527811][ T8208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  509.532590][ T8208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  509.536484][ T8208] bond0 (unregistering): Released all slaves
[  509.541692][ T8208] bond1 (unregistering): Released all slaves
[  509.551733][    C1] bridge0: port 3(syz_tun) entered learning state
[  509.552389][ T8208] bond2 (unregistering): Released all slaves
[  509.568249][ T8208] bond3 (unregistering): Released all slaves
[  509.718201][ T8208] tipc: Left network mode
[  509.936216][ T5457] 8021q: adding VLAN 0 to HW filter on device eth5
[  509.961796][T14532] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  509.964179][T14532] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  509.974123][T14532] vhci_hcd vhci_hcd.0: Device attached
[  510.060312][T14530] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size
[  510.091684][ T7379] raw-gadget.0 gadget.3: failed to queue suspend event
[  510.141623][ T5457] 8021q: adding VLAN 0 to HW filter on device eth6
[  510.166595][T14513] raw-gadget.0 gadget.3: failed to queue resume event
[  510.245015][T13596] raw-gadget.0 gadget.3: failed to queue suspend event
[  510.277060][   T56] usb 42-1: SetAddress Request (6) to port 0
[  510.286749][   T56] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd
[  510.316538][T14513] raw-gadget.0 gadget.3: failed to queue resume event
[  510.374839][ T8208] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  510.383078][ T8208] batman_adv: batadv0: Removing interface: batadv_slave_0
[  510.383117][ T7379] raw-gadget.0 gadget.3: failed to queue suspend event
[  510.403998][ T8208] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  510.408972][ T8208] batman_adv: batadv0: Removing interface: batadv_slave_1
[  510.422263][ T8208] veth1_macvtap: left promiscuous mode
[  510.424178][ T8208] veth0_macvtap: left promiscuous mode
[  510.426024][ T8208] veth1_vlan: left promiscuous mode
[  510.428491][ T8208] veth0_vlan: left promiscuous mode
[  510.477927][T14513] raw-gadget.0 gadget.3: failed to queue resume event
[  510.516662][T14466] Bluetooth: hci4: command tx timeout
[  510.522450][T13596] raw-gadget.0 gadget.3: failed to queue suspend event
[  510.606681][T14513] raw-gadget.0 gadget.3: failed to queue resume event
[  510.645682][   T34] IPVS: starting estimator thread 0...
[  510.655838][ T7379] raw-gadget.0 gadget.3: failed to queue suspend event
[  510.726506][T14513] raw-gadget.0 gadget.3: failed to queue resume event
[  510.736575][T14574] IPVS: using max 44 ests per chain, 105600 per kthread
[  510.743566][T14543] vhci_hcd: connection reset by peer
[  510.745598][ T5798] vhci_hcd vhci_hcd.2: stop threads
[  510.747096][  T125] raw-gadget.0 gadget.3: failed to queue suspend event
[  510.755126][ T5798] vhci_hcd vhci_hcd.2: release socket
[  510.759615][ T5798] vhci_hcd vhci_hcd.2: disconnect device
[  510.773183][ T8208] team_slave_1 (unregistering): left promiscuous mode
[  510.776799][ T8208] team0 (unregistering): Port device team_slave_1 removed
[  510.784184][ T8208] team_slave_0 (unregistering): left promiscuous mode
[  510.791020][ T8208] team0 (unregistering): Port device team_slave_0 removed
[  510.816603][T14513] raw-gadget.0 gadget.3: failed to queue resume event
[  510.838331][ T7379] raw-gadget.0 gadget.3: failed to queue suspend event
[  510.875322][ T8208] dummy0 (unregistering): left promiscuous mode
[  510.883001][ T8208] team0 (unregistering): Port device dummy0 removed
[  510.904632][ T7379] smc: removing ib device syz0
[  510.920619][T14513] raw-gadget.0 gadget.3: failed to queue resume event
[  510.931460][ T5854] lo speed is unknown, defaulting to 1000
[  510.933767][ T5854] syz0: Port: 1 Link DOWN
[  510.941034][ T7379] smbdirect: ib_dev[syz0] removed
[  510.944215][T13596] raw-gadget.0 gadget.3: failed to queue suspend event
[  511.028820][T14513] raw-gadget.0 gadget.3: failed to queue resume event
[  511.069735][T13596] raw-gadget.0 gadget.3: failed to queue suspend event
[  511.145788][T14513] raw-gadget.0 gadget.3: failed to queue resume event
[  511.148269][T14587] __nla_validate_parse: 1 callbacks suppressed
[  511.148288][T14587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2207'.
[  511.181066][T13596] raw-gadget.0 gadget.3: failed to queue suspend event
[  511.267423][T14513] raw-gadget.0 gadget.3: failed to queue resume event
[  511.311187][T13596] raw-gadget.0 gadget.3: failed to queue suspend event
[  511.385545][T14513] raw-gadget.0 gadget.3: failed to queue resume event
[  511.429252][  T125] raw-gadget.0 gadget.3: failed to queue suspend event
[  511.508868][T14513] raw-gadget.0 gadget.3: failed to queue resume event
[  511.551224][  T125] raw-gadget.0 gadget.3: failed to queue suspend event
[  511.580827][T14513] raw-gadget.0 gadget.3: failed to queue disconnect event
[  511.693604][T14464] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  511.697659][ T7197] usb 8-1: USB disconnect, device number 54
[  511.709502][T14464] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  511.712582][T14464] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  511.724644][T14464] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  511.727642][T14464] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  511.731967][T14464] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  511.734991][T14464] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  511.744970][T14464] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  511.801612][T14464] 8021q: adding VLAN 0 to HW filter on device bond0
[  511.864246][T14464] 8021q: adding VLAN 0 to HW filter on device team0
[  511.918656][ T7379] bridge0: port 1(bridge_slave_0) entered blocking state
[  511.921228][ T7379] bridge0: port 1(bridge_slave_0) entered forwarding state
[  511.925195][ T7379] bridge0: port 2(bridge_slave_1) entered blocking state
[  511.927522][ T7379] bridge0: port 2(bridge_slave_1) entered forwarding state
[  511.968084][ T8208] IPVS: stop unused estimator thread 0...
[  512.262317][T14464] 8021q: adding VLAN 0 to HW filter on device batadv0
[  512.295263][T14464] veth0_vlan: entered promiscuous mode
[  512.303396][T14464] veth1_vlan: entered promiscuous mode
[  512.327780][T14464] veth0_macvtap: entered promiscuous mode
[  512.334375][T14464] veth1_macvtap: entered promiscuous mode
[  512.351805][T14464] batman_adv: batadv0: Interface activated: batadv_slave_0
[  512.366470][ T2329] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[  512.379855][T14464] batman_adv: batadv0: Interface activated: batadv_slave_1
[  512.400113][ T5798] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  512.403569][ T5798] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  512.408368][ T5798] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  512.411734][ T5798] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  512.531010][ T2329] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  512.538047][ T2329] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  512.545837][ T2329] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  512.553222][ T2329] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  512.557476][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  512.559484][ T2329] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  512.564458][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  512.570454][ T2329] usb 9-1: config 0 descriptor??
[  512.586596][T14466] Bluetooth: hci4: command tx timeout
[  512.621456][T13596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  512.623996][T13596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  512.984995][ T2329] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd
[  512.996222][ T2329] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  513.007195][ T2329] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  513.012724][ T2329] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  513.021730][ T2329] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  513.027578][ T2329] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  513.065238][ T2329] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  513.237140][T14616] FAULT_INJECTION: forcing a failure.
[  513.237140][T14616] name failslab, interval 1, probability 1, space 0, times 0
[  513.241566][T14616] CPU: 0 UID: 0 PID: 14616 Comm: syz.4.2212 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  513.241585][T14616] Tainted: [L]=SOFTLOCKUP
[  513.241590][T14616] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  513.241598][T14616] Call Trace:
[  513.241604][T14616]  <TASK>
[  513.241611][T14616]  dump_stack_lvl+0x100/0x190
[  513.241631][T14616]  should_fail_ex.cold+0x5/0xa
[  513.241645][T14616]  should_failslab+0xc2/0x120
[  513.241662][T14616]  __kmalloc_noprof+0xfc/0x820
[  513.241682][T14616]  ? rcu_is_watching+0x12/0xc0
[  513.241717][T14616]  ? tomoyo_realpath_from_path+0xb6/0x690
[  513.241753][T14616]  tomoyo_realpath_from_path+0xb6/0x690
[  513.241787][T14616]  tomoyo_path_number_perm+0x23c/0x580
[  513.241809][T14616]  ? tomoyo_path_number_perm+0x22e/0x580
[  513.241824][T14616]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  513.241839][T14616]  ? get_pid_task+0x106/0x250
[  513.241867][T14616]  ? find_held_lock+0x2b/0x80
[  513.241881][T14616]  ? __fget_files+0x215/0x3d0
[  513.241891][T14616]  ? hook_file_ioctl_common+0x140/0x440
[  513.241906][T14616]  ? __fget_files+0x215/0x3d0
[  513.241919][T14616]  ? __fget_files+0x21f/0x3d0
[  513.241935][T14616]  security_file_ioctl_compat+0xd3/0x230
[  513.241951][T14616]  __ia32_compat_sys_ioctl+0xc2/0x360
[  513.241971][T14616]  __do_fast_syscall_32+0xe7/0x970
[  513.241989][T14616]  ? lockdep_hardirqs_on+0x78/0x100
[  513.242005][T14616]  do_fast_syscall_32+0x32/0x70
[  513.242020][T14616]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  513.242049][T14616] RIP: 0023:0xf7f66fec
[  513.242065][T14616] Code: Unable to access opcode bytes at 0xf7f66fc2.
[  513.242071][T14616] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  513.242083][T14616] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000d01c4813
[  513.242090][T14616] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000
[  513.242097][T14616] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  513.242103][T14616] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  513.242110][T14616] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  513.242125][T14616]  </TASK>
[  513.242130][T14616] ERROR: Out of memory at tomoyo_realpath_from_path.
[  513.314787][ T2329] usb 9-1: USB disconnect, device number 28
[  514.526855][T14652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2219'.
[  514.530540][T14652] netlink: 177 bytes leftover after parsing attributes in process `syz.3.2219'.
[  514.536877][T14652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2219'.
[  514.539829][T14652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2219'.
[  514.666675][T14466] Bluetooth: hci4: command tx timeout
[  514.713160][ T2329] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[  514.738186][T14652] netlink: 'syz.3.2219': attribute type 20 has an invalid length.
[  514.895281][ T2329] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  514.961398][ T2329] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  514.992271][ T2329] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  515.004313][ T2329] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  515.012852][T14659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2222'.
[  515.019117][ T2329] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.029872][ T2329] usb 9-1: config 0 descriptor??
[  515.221403][T14668] tipc: Started in network mode
[  515.223086][T14668] tipc: Node identity fe800000000000000000000000000011, cluster identity 4711
[  515.226868][T14668] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  515.387499][   T56] usb 42-1: device descriptor read/8, error -110
[  515.496273][ T2329] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd
[  515.499102][ T2329] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  515.502348][ T2329] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  515.505183][ T2329] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  515.508827][ T2329] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  515.512032][ T2329] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  515.539858][ T2329] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  515.810064][   T56] usb usb42-port1: attempt power cycle
[  515.875322][ T5854] usb 9-1: USB disconnect, device number 29
[  516.206469][T14685] netlink: 'syz.0.2229': attribute type 4 has an invalid length.
[  516.209404][T14685] netlink: 'syz.0.2229': attribute type 1 has an invalid length.
[  516.244802][T14689] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI
[  516.248636][T14689] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  516.251476][T14689] CPU: 0 UID: 0 PID: 14689 Comm: syz.0.2231 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  516.254957][T14689] Tainted: [L]=SOFTLOCKUP
[  516.256344][T14689] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  516.259499][T14689] RIP: 0010:dummy_udc_start+0x91/0x1d0
[  516.261173][T14689] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 01 00 00 4c 8b ab 90 06 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 10 01 00 00 83 ed 01 bf 02 00 00 00 49 8b 5d 00
[  516.267233][T14689] RSP: 0018:ffffc90003087b28 EFLAGS: 00010246
[  516.269147][T14689] RAX: dffffc0000000000 RBX: ffff888022184c00 RCX: ffffffff87ce5c19
[  516.271703][T14689] RDX: 0000000000000000 RSI: ffffffff87ce5c27 RDI: ffff888022185290
[  516.274236][T14689] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000005
[  516.276711][T14689] R10: 0000000000000003 R11: 0000000000007c0c R12: ffff88805c452050
[  516.279169][T14689] R13: 0000000000000000 R14: ffff88802a7994f1 R15: ffff88802a799008
[  516.281637][T14689] FS:  0000000000000000(0000) GS:ffff888096be3000(0063) knlGS:00000000f53c6b40
[  516.284403][T14689] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  516.286433][T14689] CR2: 00000000f53c3edc CR3: 000000002ac05000 CR4: 0000000000352ef0
[  516.289175][T14689] Call Trace:
[  516.290451][T14689]  <TASK>
[  516.291400][T14689]  gadget_bind_driver+0x4ac/0xbf0
[  516.293056][T14689]  ? __pfx_gadget_bind_driver+0x10/0x10
[  516.294803][T14689]  really_probe+0x241/0xa60
[  516.296259][T14689]  __driver_probe_device+0x20e/0x450
[  516.297990][T14689]  driver_probe_device+0x4a/0x140
[  516.299589][T14689]  __driver_attach+0x21f/0x5b0
[  516.301001][T14689]  ? __pfx___driver_attach+0x10/0x10
[  516.302613][T14689]  bus_for_each_dev+0x13e/0x1d0
[  516.304357][T14689]  ? __pfx_bus_for_each_dev+0x10/0x10
[  516.305982][T14689]  ? bus_add_driver+0x2b5/0x5b0
[  516.307504][T14689]  bus_add_driver+0x305/0x5b0
[  516.308928][T14689]  driver_register+0x1e2/0x360
[  516.310404][T14689]  ? rcu_is_watching+0x12/0xc0
[  516.311889][T14689]  usb_gadget_register_driver_owner+0x132/0x210
[  516.313875][T14689]  raw_ioctl+0x1a85/0x2b80
[  516.315234][T14689]  ? __pfx_raw_ioctl+0x10/0x10
[  516.316727][T14689]  ? __pfx_raw_ioctl+0x10/0x10
[  516.318243][T14689]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  516.319899][T14689]  __do_fast_syscall_32+0xe7/0x970
[  516.321457][T14689]  do_fast_syscall_32+0x32/0x70
[  516.323022][T14689]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  516.325008][T14689] RIP: 0023:0xf7f05fec
[  516.326303][T14689] Code: Unable to access opcode bytes at 0xf7f05fc2.
[  516.328540][T14689] RSP: 002b:00000000f53c4424 EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  516.331247][T14689] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000005501
[  516.333694][T14689] RDX: 0000000000000000 RSI: 00000000f7396ff4 RDI: 00000000f53c54c0
[  516.336086][T14689] RBP: 00000000f7396ff4 R08: 0000000000000000 R09: 0000000000000000
[  516.338534][T14689] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  516.340946][T14689] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  516.343398][T14689]  </TASK>
[  516.344373][T14689] Modules linked in:
[  516.345922][T14689] ---[ end trace 0000000000000000 ]---
[  516.348093][T14689] RIP: 0010:dummy_udc_start+0x91/0x1d0
[  516.349756][T14689] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 01 00 00 4c 8b ab 90 06 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 10 01 00 00 83 ed 01 bf 02 00 00 00 49 8b 5d 00
[  516.355836][T14689] RSP: 0018:ffffc90003087b28 EFLAGS: 00010246
[  516.357838][T14689] RAX: dffffc0000000000 RBX: ffff888022184c00 RCX: ffffffff87ce5c19
[  516.360163][T14689] RDX: 0000000000000000 RSI: ffffffff87ce5c27 RDI: ffff888022185290
[  516.362872][T14689] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000005
[  516.365195][T14689] R10: 0000000000000003 R11: 0000000000007c0c R12: ffff88805c452050
[  516.367730][T14689] R13: 0000000000000000 R14: ffff88802a7994f1 R15: ffff88802a799008
[  516.370132][T14689] FS:  0000000000000000(0000) GS:ffff888096be3000(0063) knlGS:00000000f53c6b40
[  516.372811][T14689] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  516.374788][T14689] CR2: 00000000f7f06000 CR3: 000000002ac05000 CR4: 0000000000352ef0
[  516.377227][T14689] Kernel panic - not syncing: Fatal exception
[  516.379885][T14689] Kernel Offset: disabled
[  516.381296][T14689] Rebooting in 86400 seconds..