last executing test programs:

10m35.90567013s ago: executing program 0 (id=1757):
socket$inet6_tcp(0xa, 0x1, 0x0)
set_mempolicy(0x1, 0x0, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x85)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x800, 0x0)
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@o_path={0x0, 0x0, 0x4008}, 0x14)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
openat$apparmor_task_exec(0xffffff9c, &(0x7f0000000200), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x90, 0x0, 0x0, {0xf7ffffffffffffff, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3ebd, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x0, r3, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x14c0348, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3)
ioctl$TIOCGPTPEER(r4, 0x4004092b, 0x7)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x1b8, 0x31c, 0xa, 0x148, 0x31c, 0x60, 0x3ac, 0x2a8, 0x2a8, 0x3ac, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0x94, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFQUEUE0={0x24, 'NFQUEUE\x00', 0x0, {0x5}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x214)
setxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000280)=@ng={0x4, 0x8, "078baa5ec08adaa8"}, 0xa, 0x1)

10m34.940700674s ago: executing program 0 (id=1763):
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0x0, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x9, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x40000001, 0x1, 0x1, 0x7, 0x40, 0x7, 0xe, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x40, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0x1002, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x202, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0x9, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x6, 0x9, 0x1, 0x10cb6906}, {0x9, 0x0, 0x1, 0x100, 0x1, 0xd7}, 0x80000001, 0x2, 0x1b15}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, &(0x7f00000005c0)="24785466124cebc6c81c38c136a9", 0xe, 0x40000c0, &(0x7f00000001c0)={0x11, 0xf8, r6, 0x1, 0xd8, 0x6, @remote}, 0x14)

10m34.853380536s ago: executing program 0 (id=1764):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
io_setup(0x3, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x1, 0x0, r2, &(0x7f00000001c0)='m', 0xfffffdfc}])
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$unix(r6, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x10, 0x1, 0x1, [r5]}}], 0x10}, 0x0)
recvmmsg$unix(r5, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0xc}}], 0xb0}}, {{&(0x7f0000000340), 0x6e, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/111, 0x6f}], 0x1, &(0x7f0000000640)=[@rights={{0xc}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}], 0x118}}, {{&(0x7f0000000480), 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000800)=""/190, 0xbe}, {&(0x7f00000008c0)=""/64, 0x40}, {&(0x7f0000000900)=""/99, 0x63}, {0x0}, {&(0x7f0000000a80)=""/224, 0xe0}, {&(0x7f0000000b80)=""/4, 0x4}, {&(0x7f0000000bc0)=""/237, 0xed}, {0x0}], 0x8, &(0x7f0000000e80)=[@rights={{0xc}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x60}}], 0x3, 0x40, 0x0)

10m33.942766881s ago: executing program 0 (id=1769):
iopl(0x3)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2)
read(r1, 0x0, 0x0)

10m33.572393587s ago: executing program 0 (id=1771):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000)=0x5, 0x4) (async)
getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r1 = creat(0x0, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x8, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) (async)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0x5b, 0x0}}], 0x800000000000214, 0x20000001) (async)
close(0xffffffffffffffff)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) (async)
mount(0x0, &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000300)='nilfs2\x00', 0x1a0c000, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="cc000000210001000000000004000000fc020000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000b9eccd625e6c99983e28ac4215ba31ffa557", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ff0200000000000000000000000000010a0101000000000000000000000000000a010100000000000000000000000000000000060000000000000000000000003c000000000000000a000a002c0013007f000001000000000000000000000000e0000001000000000000000000000000000000000a000000"], 0xcc}}, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) (async)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x4, 0x200, &(0x7f0000000880)="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"})
ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000000))

10m33.342122533s ago: executing program 0 (id=1774):
syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000080)=@default_ap_ssid, 0xffffff27, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
io_setup(0xff, &(0x7f00000006c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x0, 0x0, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x4)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
io_setup(0x239f, &(0x7f0000000380)=<r6=>0x0)
r7 = eventfd2(0x5, 0x1)
io_submit(r6, 0x2, &(0x7f00000000c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r7, 0x0, 0x0, 0x800002, 0x0, 0x0, r7}, &(0x7f0000000100)={0x0, 0x0, 0x8000000, 0x3, 0xb, r7, 0x0, 0x0, 0x0, 0x0, 0x3, r7}])
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
sendmsg$AUDIT_USER(r9, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="d0000000ed0310002dbd7000fddbdf25574786abe0456ea2c392e787dcb455d9fe808abc244ff6ba894187f393a2188797c23842c4c6a09e2b0f7fc978e1806b07fdf1ea27668b4de2ba188200eb486de86caccfafe75ba61a3d48c2ac63ddfeafe4bef36496964f4dee3f65430e3cb1875a076f714f8ab22c3fb9e6649e47b5b3e3cf25ebbf96e63337e403c017c5a13d8b206c618992875ac86cb78c98a97b81cb5190681ca677f38c65d075884c3204b4ba167a50f3578ad8faa10acd8a77aa808a93b4829be5ece244961b2b9ec7"], 0xd0}, 0x1, 0x0, 0x0, 0x4000010}, 0x4004000)

10m18.329681382s ago: executing program 32 (id=1774):
syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000080)=@default_ap_ssid, 0xffffff27, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
io_setup(0xff, &(0x7f00000006c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x0, 0x0, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x4)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
io_setup(0x239f, &(0x7f0000000380)=<r6=>0x0)
r7 = eventfd2(0x5, 0x1)
io_submit(r6, 0x2, &(0x7f00000000c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r7, 0x0, 0x0, 0x800002, 0x0, 0x0, r7}, &(0x7f0000000100)={0x0, 0x0, 0x8000000, 0x3, 0xb, r7, 0x0, 0x0, 0x0, 0x0, 0x3, r7}])
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
sendmsg$AUDIT_USER(r9, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="d0000000ed0310002dbd7000fddbdf25574786abe0456ea2c392e787dcb455d9fe808abc244ff6ba894187f393a2188797c23842c4c6a09e2b0f7fc978e1806b07fdf1ea27668b4de2ba188200eb486de86caccfafe75ba61a3d48c2ac63ddfeafe4bef36496964f4dee3f65430e3cb1875a076f714f8ab22c3fb9e6649e47b5b3e3cf25ebbf96e63337e403c017c5a13d8b206c618992875ac86cb78c98a97b81cb5190681ca677f38c65d075884c3204b4ba167a50f3578ad8faa10acd8a77aa808a93b4829be5ece244961b2b9ec7"], 0xd0}, 0x1, 0x0, 0x0, 0x4000010}, 0x4004000)

3.314204107s ago: executing program 3 (id=5899):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x7000000}, 0x0)

3.256254087s ago: executing program 3 (id=5900):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000014c0), 0xffffffffffffffff)
syz_open_dev$vim2m(&(0x7f0000000280), 0x2, 0x2)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0xf7fe, 0x1000, 0x2, 0x1}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0})
io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001500)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0xfa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0)
quotactl_fd$Q_SETINFO(r2, 0xffffffff80000602, 0x0, &(0x7f0000000200)={0x81, 0x2, 0x1, 0x5})
lseek(0xffffffffffffffff, 0x0, 0x3)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
syz_io_uring_setup(0x19ff, 0x0, &(0x7f0000000240), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x150, 0x30, 0x1, 0x1000000, 0x0, {}, [{0x13c, 0x1, [@m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa}]}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x84, 0x9, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0x4}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x6140}]}, {0x47, 0x6, "83a9979a9dbc5b79e57fa52cec3f0ad7d1c3bfb0ea651c17bd5a119827e1f1762b82e2c9d9d76996ad98c9aa8de925fafb2d4f78428d4a64b3bb51349579145ca9fc37"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x7c, 0x9, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x3f5b}]}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}]}, {0x3c, 0x6, "7b416d0c7a8059715875cab12fc238c5f4de3dbd1542a03892decd7416e3c7d994af146291338175ab89ffaa2fe342858ed0031a5b22d6d3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r7 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900004004db3988eea6efe6b004000000000049", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="02000010011000"/28], 0x50)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x12)
sendfile(r6, r5, &(0x7f0000000000)=0x9, 0x3fffff)

2.810040925s ago: executing program 4 (id=5904):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0}) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r2, 0x800000000000) (async)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000000)) (async, rerun: 32)
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) (async, rerun: 32)
sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="0100000000008000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64], 0x80}, 0x1, 0x0, 0x0, 0x400c1}, 0x40000)
sendmsg$can_bcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="02"], 0x48}}, 0x10) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
r5 = socket(0x10, 0x3, 0x0) (rerun: 32)
write(r5, &(0x7f0000000000)="1b0000001a005f0414f9f40700090400810000000000342580d200", 0x1b) (async, rerun: 32)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002300)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) (async, rerun: 32)
syz_open_dev$video4linux(&(0x7f0000000040), 0x2d69959c, 0x40000) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async, rerun: 32)
chroot(&(0x7f0000000040)='./cgroup\x00') (async)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) (async)
r7 = openat$sequencer2(0xffffff9c, &(0x7f0000003900), 0x1a9000, 0x0)
ioctl$SNDCTL_SYNTH_MEMAVL(r7, 0xc004510e, &(0x7f0000003940)) (async)
sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) (async)
r8 = dup(r6)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x6, 0x10}, 0xc) (async, rerun: 64)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0}}, 0x20) (rerun: 64)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r8, &(0x7f0000000180)={0x4, 0x39, 0xfa00, {0xffffffffffffffff, 0x3}}, 0x10) (async)
shutdown(r8, 0x1)

2.732692845s ago: executing program 4 (id=5906):
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000280)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_usb_connect(0x6, 0x93, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x7f, 0xdb, 0xc9, 0x20, 0x403, 0xe80c, 0xb6a7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x61, 0x0, 0x1, 0xf3, 0xcb, 0x9b, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x8, 0x0, 0x0, 0x0, [@generic={0x66, 0x23, "cf9afddfb2d5dfa30f78c335b28052a47728eb0d90663f66a93dd9e84e6c0daf8c20e287d0400d91e8bf25737ea17e99248aba019f0ec61e99b2c1a7d3cec3bcf4bd2174586af1ab99315b7272f463dc64b637b1947dd1b17e555cd3a361962e2fa3c016"}]}}]}}]}}]}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r0 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b)
write$FUSE_CREATE_OPEN(r0, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000004, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff81, 0x3, 0x1, {0xffffffffffffffff, 0x8, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x13}}}, 0xa0)
sendfile(r0, r0, &(0x7f0000000080), 0x7f04)

2.679773596s ago: executing program 1 (id=5908):
socketpair(0x3d, 0x4, 0x1, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
syz_emit_ethernet(0x82, &(0x7f00000002c0)={@broadcast, @empty, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x48, 0x3a, 0x1, @empty, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x2, '\x00', {0x3, 0x6, "39afb8", 0xf648, 0x4, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, [@srh={0x4, 0x2, 0x4, 0x1, 0x2, 0xd8, 0x9, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}]}]}}}}}}}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="03020000008002ff", 0x8)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x10ad0e8dd9811b5d}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_OP={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x90}}, 0x10)
getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000080)={'nat\x00', 0x3c, "daebfee629c7e4ef4002d13d200ebba77a2b81de8a5295a7548937963c012bffdd2babd34f66c7565ebed465fb012205c25c3c4d136c2caf9c3be8ac"}, &(0x7f0000000100)=0x60)

2.550003965s ago: executing program 1 (id=5909):
socket(0x10, 0x803, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'})
ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2)
pread64(r1, &(0x7f00000002c0)=""/75, 0x4b, 0x0)
r2 = syz_open_dev$swradio(&(0x7f0000000f80), 0x1, 0x2)
ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000001000))
socket$nl_generic(0x10, 0x3, 0x10)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x4008, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)

2.410300682s ago: executing program 1 (id=5910):
socket$nl_netfilter(0x10, 0x3, 0xc)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x8)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000840)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}, 0x1c, 0x0}}], 0x1, 0x40010)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r2)
socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00#\f!\x00'})
recvmmsg(0xffffffffffffffff, &(0x7f0000006640)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/185, 0xb9}, {&(0x7f00000002c0)=""/255, 0xff}, {&(0x7f00000003c0)=""/53, 0x35}], 0x4}, 0x7fffffff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/158, 0x9e}, 0x9}, {{0x0, 0x0, 0x0}, 0x9}], 0x3, 0x0, 0x0)

2.300336962s ago: executing program 3 (id=5911):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002fc0)=@newtaction={0x14, 0x30, 0x501}, 0x14}}, 0x800)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r4 = openat$sysfs(0xffffff9c, &(0x7f0000000c00)='/sys/power/wakeup_count', 0x200, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c80)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@iter={&(0x7f0000000c40)=@task={r1, 0x0, r4}, 0x10}}, 0x18)
syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00')
r5 = socket$nl_route(0x10, 0x3, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x100005, &(0x7f0000000480)=ANY=[@ANYRES16, @ANYRES32=r3, @ANYBLOB="68d54391124e01bd200beea177a3cc0b8470ef413d08aea695b0efce7383f62ec91f5b9bcaf7d869fe8376e30318b5bb61969e00e413ec4b084ccf63d7adc48209c120e330e8bce0b1a823d8c0efd21e8bda7a5fc02a00c3b7067164e5ca3c3a681ce39eeec5634c4406177fe2271449a017f6446eae502b7659e90228a74838433346541e78d1303aa32ed1"])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000700)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
rmdir(&(0x7f0000000080)='./file0\x00')
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x4, {}, {0x0, 0x0, 0x8000}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x100, 0x0, 0x0, 0x24}}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xd8}}, 0x0)

2.124003919s ago: executing program 4 (id=5913):
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x1)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x400000007a641, 0x0)
io_setup(0x222, &(0x7f0000000180))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x0, 0x0, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001740)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYBLOB, @ANYRESDEC=r0, @ANYRES16, @ANYBLOB="00d04a4c5d79580b69dc9d4ac8", @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbef7, 0xb8d1a8100dfee514, r1, 0xfa707000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af", <r6=>0xffffffffffffffff})
ioctl$SYNC_IOC_FILE_INFO(r6, 0x40103e05, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r7 = openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$binfmt_register(r7, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x8, 0x3a, '', 0x3a, '[$(.[(', 0x3a, './file0'}, 0x2d)
r8 = msgget$private(0x0, 0x3ac)
msgsnd(r8, &(0x7f0000000300)={0x2}, 0x8, 0x0)
msgrcv(r8, &(0x7f0000002fc0)={0x0, ""/108}, 0x74, 0x0, 0x4800)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)

1.580461014s ago: executing program 4 (id=5914):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
r1 = fcntl$dupfd(r0, 0x406, r0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000380)=0x10, 0x1c)
sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[], 0x420}, 0x1, 0x0, 0x0, 0x4810}, 0x400c890)
sendmmsg$inet_sctp(r1, &(0x7f0000000f00), 0x0, 0x10004810)
r2 = openat$hpet(0xffffff9c, &(0x7f0000000000), 0x44281, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000140)=[@window={0x3, 0x10, 0x7917}, @sack_perm, @mss={0x2, 0x2}, @window={0x3, 0xfffa, 0x6}, @window={0x3, 0x64, 0xcafd}, @mss={0x2, 0x89d}, @sack_perm, @mss={0x2, 0xab236576}, @sack_perm, @timestamp], 0xa)
syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r1)
read$FUSE(r1, &(0x7f00000036c0)={0x2020}, 0x2020)

1.507374371s ago: executing program 1 (id=5915):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r0, &(0x7f00000000c0), 0x10)
sendto$l2tp(r0, &(0x7f0000000000)="e5786a0d000000000000c83b", 0xc, 0x4, &(0x7f0000000100)={0x2, 0x0, @remote, 0x2}, 0x10)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

1.4938094s ago: executing program 1 (id=5916):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r3, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'macvlan0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = openat$sysfs(0xffffff9c, &(0x7f0000000500)='/sys/kernel/notes', 0x0, 0x90)
fsetxattr$security_capability(r8, &(0x7f0000000200), 0x0, 0x0, 0x0)
write$rfkill(r8, &(0x7f0000000040)={0x9, 0x0, 0x1, 0x0, 0x1}, 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
copy_file_range(r9, 0x0, r9, 0x0, 0x9, 0x20)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r4, @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r6, @ANYRES8], 0x84}}, 0x20008040)

1.319630058s ago: executing program 3 (id=5917):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r0, &(0x7f00000000c0), 0x10)
sendto$l2tp(r0, &(0x7f0000000000)="e5786a0d000000000000c83b", 0xc, 0x4, &(0x7f0000000100)={0x2, 0x0, @remote, 0x2}, 0x10)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0) (fail_nth: 1)

1.240320046s ago: executing program 3 (id=5918):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x200, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x15, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x98, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xbab}}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x24008011)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x400000000001, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x4}]}, 0x68}}, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x3f00, 0x5, 0x1400}, &(0x7f0000000340)=<r7=>0x0, &(0x7f0000000300)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r5, 0x0})
quotactl_fd$Q_GETNEXTQUOTA(r2, 0x3, 0x0, &(0x7f0000000380))
io_uring_enter(r6, 0x3516, 0x3e44, 0x8, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600)
r9 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10)
listen(r9, 0x100)

750.416001ms ago: executing program 2 (id=5920):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="04002dbd7000fddbdf250c00000008003a00ff0f000008002b000900000005003500000000a772e35fa0d11ce856ba192ec0417ce902e3aa6096f144c2dd585c3c076631f310f278fd35125fa6ce00f89322921e7cce6b96855512c7718afbaf9baace44c36b7c607cd6bd5348059f5869e2000020ea8f7f136ade141bdc"], 0x34}, 0x1, 0x0, 0x0, 0x60080}, 0xc0d0)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000680)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x6, @remote, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffff81}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000180)="a6", 0x1}], 0x1}}], 0x2, 0xc0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000007c0)={r5, 0xffff, 0x1, "df"}, 0x9)
r6 = dup(r2)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xb}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='tranF,\vrfdno\x00\x00\x00', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00'])
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r6, 0x4020565b, &(0x7f0000000000)={0x3, 0x3, 0x1})
r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0cc5605, &(0x7f0000000100)={0x1, @pix={0x0, 0x401, 0x59455247, 0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}})
socket$nl_netfilter(0x10, 0x3, 0xc)

750.095771ms ago: executing program 4 (id=5921):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="6c0900000600"})

670.054224ms ago: executing program 2 (id=5922):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r1, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x17}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x50b, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x601, 0x2405c000}, 0x4000000)

669.441646ms ago: executing program 4 (id=5923):
socket$nl_netfilter(0x10, 0x3, 0xc)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x8)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000840)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}, 0x1c, 0x0}}], 0x1, 0x40010)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r2)
socket$pppl2tp(0x18, 0x1, 0x1)
recvmmsg(0xffffffffffffffff, &(0x7f0000006640)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/185, 0xb9}, {&(0x7f00000002c0)=""/255, 0xff}, {&(0x7f00000003c0)=""/53, 0x35}], 0x4}, 0x7fffffff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/158, 0x9e}, 0x9}, {{0x0, 0x0, 0x0}, 0x9}], 0x3, 0x0, 0x0)

620.370215ms ago: executing program 2 (id=5924):
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000100)={0x62, 0x29, 0x2, {0xe, [{{0x4, 0x2, 0x1}, 0xff, 0x1, 0x7, './file0'}, {{0x80, 0x0, 0x4}, 0x5, 0x2, 0x7, './file0'}, {{0x80, 0x0, 0x6}, 0x9bba, 0xa, 0x1, '.'}]}}, 0x62)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="060000000000000071111c00000000009500a5050000000057"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x101102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2)
getgid()
pipe2(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000240)={0x1, 0x0, {0x6, 0x9, 0x8, 0x10000}})
r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x40)
fcntl$dupfd(r3, 0x0, r3)
read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004180)="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", 0x2000, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f0000000900)={0x2020, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x2020)
sched_setscheduler(r6, 0x0, &(0x7f0000000000)=0x7)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x8000)
getegid()
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)

540.020257ms ago: executing program 1 (id=5925):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002fc0)=@newtaction={0x14, 0x30, 0x501}, 0x14}}, 0x800)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = openat$sysfs(0xffffff9c, &(0x7f0000000c00)='/sys/power/wakeup_count', 0x200, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c80)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@iter={&(0x7f0000000c40)=@task={r1, 0x0, r5}, 0x10}}, 0x18)
syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00')
r6 = socket$nl_route(0x10, 0x3, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x100005, &(0x7f0000000480)=ANY=[@ANYRES16, @ANYRES32=r3, @ANYBLOB="68d54391124e01bd200beea177a3cc0b8470ef413d08aea695b0efce7383f62ec91f5b9bcaf7d869fe8376e30318b5bb61969e00e413ec4b084ccf63d7adc48209c120e330e8bce0b1a823d8c0efd21e8bda7a5fc02a00c3b7067164e5ca3c3a681ce39eeec5634c4406177fe2271449a017f6446eae502b7659e90228a74838433346541e78d1303aa32ed1"])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000700)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
rmdir(&(0x7f0000000080)='./file0\x00')
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x4, {}, {0x0, 0x0, 0x8000}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x100, 0x0, 0x0, 0x24}}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xd8}}, 0x0)

409.223878ms ago: executing program 2 (id=5926):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64)
socket$netlink(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async)
listen(r1, 0x7fffffff) (async)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
process_madvise(r3, &(0x7f00000015c0)=[{0x0, 0xb3c9de750fa141ee}, {&(0x7f0000001600)="7fe370522d6af6625215f1793293827ec1fbafd2669ec71d6ec4f18aaa71edae948611d70900e80e4116a3c114041430f19bd4f37e3c7238ed6e6d46979c2220bde96ffe55c88d2e697fd133e5733e1bbb159ba81a1e8e2fb2e51596", 0x1}, {&(0x7f0000001300)="0454c96113b0da138a30557b0c026d7c7ba28c5cf82e468ed91537d279936ddcf06ef737e0943554457a28db61aea38a154bf19b456388daf4df61c9febcd9b8a2b14929c6f097f4ff11e686a8a37381b9321ae19dd77be474863e35633dec7003568e91eab8e870a93a73b6dea475547a826b25021aecd727c201c9cea0bfba0122b00573c286b821d43d0b4e38ec90b7d08565bf81862bdf5115e75886e742c51e058d0752982da309d53a7c0d320fdbd38bfaa998ff981d15928f783b2728ecc210898685dfc72398e665b7892024c0ab0dcfe9d3fc", 0xd7}, {&(0x7f0000001400)="3e519bc4eb7b0a55b33bdb22cc7ca76aba33506ebcf89e67b16583e68404bbca008b995a73322a4cc7a3c436e94da49121c4f225ccd342612b46beb2f569a7a0423c0cf79f2d94c015b7b47bc11d5fe599214dbe7f92c8a14b6d254a8daa074ece2708f10e912eb72cb22efc14a0d0cc7cea79311ead3200c7aca0e920d83c8d7b92db", 0x83}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000014c0)="6b553f4de4ed875c9fadc16852f54981bcd646a5262fc3900592194638585e3d2e79f074f796720749ddc1a2661dcb2471a47d963fb4d817dfdb5f52dc8ab642030c2c771646051d08609527b36368b80794b8cb63fe817c3379951a047c5026c2e99eae6dc05c6845529fb603666d78c0e1e5f7bca8f1d8584b7409ccaf0da598af64d7bdd2ae21ac4fb4e07dee96a92a8dddecee7ccbede2d0a7d4f2da90dc3eb4ae8895091f05db58a786519f6fc924a465cc46ae6a9b8705de0705b8bab4f10cddc7756c53eadf4aa6e2379fd85e9c5e7bfc", 0xd4}], 0x6, 0x9, 0x0) (async)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000) (async, rerun: 64)
write$vhost_msg_v2(r4, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) (rerun: 64)
write$vhost_msg_v2(r4, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) (async)
write$vhost_msg_v2(r4, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000540)=""/224, 0xe0, 0x0, 0x2, 0x2}}, 0x48) (async)
write$vhost_msg_v2(r4, &(0x7f0000000340)={0x2, 0x0, {&(0x7f0000000a00)=""/274, 0x112, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg_v2(r4, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000001a00)=""/227, 0xe3, 0x0, 0x2, 0x2}}, 0x48) (async, rerun: 32)
write$vhost_msg_v2(r4, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) (async, rerun: 32)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, 0x0, <r6=>0x0}, 0x2020)
syz_fuse_handle_req(r5, &(0x7f0000006180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x90, 0x0, 0x0, {0xf7ffffffffffffff, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3ebd, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x0, r6, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r7 = getegid()
fstat(r0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, <r8=>0x0}) (async)
r9 = getegid()
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000027c0)="6473f29ddea757b107081fd57a7c2be623f4acb32667e8988e074cb3db1d1847fce395c0f635b63c6cbbdb8cee62dfb7914c10ccfe9a65bba38d1418eec8b3d1dabcf622beb93861cb404d24f02a622222b630f4f69573c78dec92ee2aa22683f72cf736b0d8ed69d645f32ba8af73ec79cd5a01ebb8297ac32e35826fd7565915fc27f8e76421be389b4b21c8ead54830132fdbc00e48d040070b522e25064474db82948ab49cada97713444309a85723b45749a0a5e63abbf10408845b8bb0bf89efc4bc7d70b78f89a6ca7066d6d250c783bf40e6848510fef790c8d2d137925d4b830f7ef7d9f2ae2331ea0a09165c88cc35fc7301eb2ad304a01fb69bdcc8a69b42267ea2a899e6d3694f28fed679ca69cf6fe1f93d2b5b2533b7339571ccbd7471fc5bcee966e695b8ffc88214c49ee8d70748e3ac7b7c0003ba88365b6cdc2f40bd05bf2e96bf07dd11bf04e7a008dbbe2191d17b730a501c245d6a2acb33cbfec0f20105b3af2d93f8385cc77db6a97ed9b9947e2c5cafa3c9fb7ed2c41d8a12f12e1006cca44df02f45ffda60013de87e60a4363bb4220ff378c26f6eea677f2a68cc27d65bd1cba310c9df85c4a811903bf38261dc43a172fb173282151ac5b9d87eadc2b84c6f58e6efe1cd1dbbea6217d4304aa471853b69532fcea3c780641d19f22957bb032d719ea3e322ec6bdd38b05f3283a4febdff582a4842cba5f8a255899ffb09df83b630dcb5b6f27bf079d3d40efe29f95cd37c5a53a58d1d3c43d2e9fee252f981e750860b09af39151116f9e17864af4f0bbfb78f032ffd8cfc76787d40f528dd72f2a0f67a60a4da879cda463dbced585c1d685a93a5b9657943d98392e0ca9850438d1e77e7f266a98a8f0dff6308b1117f58aa13769fb48ff6013908e89d05a8b3101fd5e988ad57eab493e1bc3cb8e316da975624fca1b7c26f7789d81339559be5259fdf5e159e305a136949fb6eca94c10c7dfa59e97da4c9c75408eb50e5e790ffdc16067ee25242dcf73bbb47ae4004def415a24f84d60dcb95c53a7010b18343fe7e888eaded59fa35aae92934b6127e65b6771f79e559d745c8e80765567cde9f8b6c4bdfdd117ba4048d3a0f66f066a57aaef96131625db5c9995f33a6cd22d765cd03c1c8e3e8f6731acb521fe2e3578dbfb80dea09a805aa4eb959221b405c392b718ee7a04c81e115df784fbb4791bd86237d3035c019a60c1557329632c362149a5fb66e34a8c598fe2ec10f4a93e9e34d3593f176a2b862d1342644f793eb7de8973c717d3a0ba2253b041fec4e15a78d6d8580739bbecdfbbccab6e27214458d7332357ac7a5fd70a37f6618f19ea05016a4e40940fd4233ca911277b6fbd4127efcd12676f8d1e7cfb8acad89ef07358fe81ee62ae86b004789a0051bdd9403f4ba12c1eea5b9b33280206eab7da9f15bd4c4b4cb014dfaf3143cd6277747b212fb46361ae73ae41f98d991f9654544c98ca0cac7145c742af1340d228fddc6ce927c06cf3b0503b2637570ea57caeb1cb4f23ba4f9a18c6af50204cfc26af7686c1d8d4d03674d11836b5d0c0132cec618879c556164cb105504713a0dae00f6513f34ea1203df91b2863cc0e09f576d49b55186a2467f4eb4cd19facdfff4642f746ada51086e90ecb548269078795f10b9b17363e81517dcfa9a4cf3f02e2a47ccbd308817291825254a872b79bed04cb6c75a923e4db3319edeffe3054adba6b1e36d48af53b2233c25ed55af64087f35d90e13fd7a9bdfd78197129d5f20437bffa366a04f162120f629177f4bc563329b9a01de0f4e18a6c04d09924721b5e72dfec76f178fb421b9d18061c557dcc29b3e063820cbaf97b6a7ffe427970c689805825b0bb42ecf2822c5df619ddc5e11cc0aab15b536a773ef73e677d976ae27e58d23d6437c7467bb47e2e3ddc2446355350bcda48d610be9784d11acd8942ca0e39c733200bca9ece807103259aff4fe847137865ed55da28ee460205131abc4a16e989e309724a6b9850cdf6ed77914290a6190ac2d128152010661005d3b9388426164d3238c57d3166d5e5f08e5643c9e6e5caf57e8ac9cc6d9743e815f8df2906c0ec37c32c7e3313bddcd1d539ccf1ae47af61acf106b3e47a07afd6fe5b138397fbbcc26963ea00ae5a0b616be70615d19cd04930a6fa5f37efaddfa419771828fb430985eee5aa9ec06bf272b40fa39a9a12cd7b5a693dfc12802399310ee08d8785d21a6af357410b5f292807183a2945434eb06b6c8d31caf9e4cb686bdde96d5a553f19864414b9d2a7a29328816eb7f539bdf02f9f5df24f95e4b8f192a657e1f5a712ebd179e4ca35c40fd58c665660edf39c9afd6a2ae5f7f2f0387249bfbcfbfb56c790014128cd5a5662ed88ea13467e710b0ee78fcfb257d7c771ce4fc093913b421c81fe89cb39cf75453b768455d9a05d40dbf9d94f3f8681c3021e3ec17c94bf4332229900802d372df21dbdc76ffc6d7966a5237f7a5a43dabd02f3e416088e59e585a2c71d2cec650167a551819866dca52b15ee79fd59a7a823f188cbf842d764034c2388c7fe425b32e92307c643835509dea2c70da94ad5ce5c71a2d650b9c5ff702114c918b89e8b0f9f433430f55b78cb596f821c09ac3b54b5e0285028d374e4a384d95950bf63c95f35c84e086f632cb2841984a17cb0c38251b40c751d1a2bf386584afe5dafd34c65a5656542307e5a9df9b090cf5348f30a4182a4cb200c02c89da193d5b436ebe339be35276c33a7163c93d71550208f0afc9f48eb1bd5f505a89491baa4607f3b261c5cda1b3143d96386b875373123146a21606666e92927769a0a28ff6418ea5adab158553d555aa706c1110b900833084d3b60442cc4b21af06ce57fd41c094618f469eb595bffa152f2b243906acec30f4cc295b96c2243d44f72ada27c429865da2b5c1944f2a1decf3e82f605a13ad9f15026df186fb8abe0ea477b5d8856cadab165d67e8c385cb0b44b4d68f33d34ef4f56ea373065a7eda68c84955cda878818814488bd0bf1725c027d5f4e1b62dcc8cb55af6693cd2f3b9f7e4eecbaf1f8979d4db5349538c875d371edb7690ca660a169a651a623d9d612a1f96e76cec46fc504d77b347b8b01201965f5697dd2ef0a13d63a4ebdf28f0a89de7f2a9bed3b2aa1cabdf74b4af9ac9a079227078641a440f543befffd0ee61524bfbf678b8b5c6eec196ff8e3b9d5eb6f7fa1faec02711297bbbd849fab24421e794e1734cb3ff6749c798cceaca61375575b52aaf2f3b6832b74f68e6936996a1b2c03db36abe4e8e2b406d65da16f2f1101dba7fcc45ca96239dfc0dcfc5a65f21eb4409673a64962b39368f3ee2b915616a0a050643cf3ab68ad6e18599cdf016a09da0a554564249a1d50119805408dafb1eb8b64a4cd50bb4e4cb535357515819ec7d6a76e2cad1fee92fd980121253d64b7f807ce528e4d4dd7437562c511e85e582f2c0ac9387dbfd0153ac88221be9fa239546899a0c4952aeeda8f4f2e3371ed461bcca7ffcee03aa3529cdb928bafa8f7571e2812f8f5a8eaccf90fbcf78c59b6cffeeeff044fbf4057e92f76426422bb975f2789cb03cea7e0c1ce992dd72258362828c44f8499efdbb35d0b0886f2409134fc2d311b37630d254e9b63b83cb624379ff6a23d7bc5aa69bdd43c8c7a422fc51c6f8cbe3fc5b1ca4989fbc323fd3a29a74068fae0cc7cf48d7e4f5a2484b3485864632088d8d80a34d77f0b1a9bb9b03c94fe6b5fa1b8b46ba210a6cc7fc3c167a7f8e99ffdb41447d8f389dd37a4a9a77f2f8a8cdfbb3ae6bfef72fefea5bfddd558f0d8da68f58977f008262dce764a8aeb0df22290ee65f256c79dbf09633b3ee05b565ca9c0256ca946b8338ded2595a246e12d5c29dd5a91103aa89bcb334bbcee1bda21a1799684744736451c52bd5bb17b8c6caaa068b99dfcfb2066508512de25d1e25147963506d3f7b07eda6bf55604feb146c7380700c62c7c1c62678232139479aa228796f5c21ce25be2f3687c04e40d14b76592f9f9d107298b4ee69f3c51eadf197d3bc817c6a10bee7c68706815a11139eb74d7c5a50fc1d564c508a6051e8b6ddb857415547b37d4d1e121dd2efc4d51803a29fe0e423cdba19b8cc4964b22df97a5ebdd6864acb42baedf37316cd32559b49b86a1844e0bd14ef067792a213cf57420197294ff129178c1f4b7060a4ba028a0688a5ab211b33849264bbf7fefc00c20d1f2f46d87d55c306cfe51ea5dd51e94d21cd85b3de0e3ef0c2662d13f6ef968f6e216c868432a4fdbb3db52d6a70b3c7c4f04979aa00b2304f0ff31bc98c711bd2905e9aece44e2f350aa74730635e73028504a2faef12044df8df0750aa9e446e1e9140c2157cce56621454cbe373ffd293b1a6edbe91166c1dd0cd1aef1ecb0b9dfe6188f9ea5ef944b1a455bd16e73bf15d895b970272858d76faa57c297300bcd389614f96ef881b86b86766287b4a689775515ed2894da544ae8c53866e02245d2338ddf07527efff8f70c14102dfd3d711c40d9de94f8fba65d211ce888b0cb3b9e74dc3fccd47db79f7c5f98b4dcbafd5385b1f1aaccb14ae1caab433c124a9757101e87fadf002b11f076d8a095b46c1580beec3e1102a9c3415efbdc86b68fca6d6b60beb76149912ee1e857ac91f49dc144032a44a964dac6bf215a4ac55f2275adfd45a5df5534036064c0c68c41288f299b4f9d20cfd12c5cee1abe0585efc1e5e25da0f96b5b161ae49ce2ad2c6fb90f73971717aaebc1227e7632358dc7ba9d649dd36c8d758b4ceee7d120307b3b6dc487c1e582b08a52a556242df0348b0f8525d9af9ea7b16898c3ac182fa018570cf3623beaf31d7c24a4a7026c7abd81f20c91ff1bb07bcf3237e75bd1212a2d1b693d5e097622c43bd6df091bed74b131f4461a2591d1f8e28d88829090537d8234db5feb8324e064ed20049fcf34a78f20970a12cb1be4a9517e5f2648e2ace32e35f1dfb2c7ec444105426887b45ff61d9af437f377dce5ad60d4b251195dc2d9d8d89e4f055efb5afcabb486168338ba204ef505037717bbb4fcd7025acec4490525cf2530343257c534041674cf969991878e94ffc12efaf3094366c3a0e208b07228ca447f11c6b3ab156f8a08eb277279ee51e70daebd7ad9d02dc2ed92558d0529163cacfa17edcacf0eb02e611522365888e67192ddb67e4d9f25bb4454b3da14a941a5af7abcc02450f7e54c7324b778992a4d694ddfb1614853cef8b3d9aec0baa2687ffc17dd7450cfc01cafa447a365479147fafca79ec56d9be99acbb5c48d546938ee5ab118b589b26603fd46d651e5ac951b76a759a5bc6d4c6974d1e2e80372c4db975092b427e9ff622e3ef8ebd6e81a417e765ea95192e4ef1941415910606596689c63273d491a975790680a9eae03c805e9ff3a48083df57b6b20cfb046a33a065c53f710e2b9a3592037cf9c18e4d80c214984d5510da79c4b5acff3fb9db5b172d3a0d2245fa969fa1347ac3cd6be58a848e6a39d233fd0e744b5011867e972d9fc45dbc0234824e2393c76916db0942ee35e285b6e0e45e21784d5d48c50e33c5e0f851808e54e1f252ac436429217d92fdd506b7c638adf9339cb98b39b836d792bd5b86ccc2067245bf79150411c4848bfce8447de9527082db7fce76c18fcdc29d4f2c1b33a6a5d75e5ed3cd5067a61311c86b5c84fd849e3ce1a414c1de3121737ae69de6880826ea745aabc376881bce133533cb027a52bb012cee94a9a63c36a93873b094ed31351f2edee29092cc6a4cf8df5e733238ceaf39b33cc95a933d1d728c4ff9e363cb4699821993c9546940410efa538e30fbbe059fa2a64b90de4cb7ea8abc44ed2acd998fe8a63d3ecfe950e3871f83928969787c35a1d3e5f79dc47537ec5fc482c28c42ce659dc5704a019286de4077970b8f922e4a845581dbee50f85c487074604df8f5a26a311b06710b96776d979a9d60cf63d3d48b9e64b92eedd69217a476a563e65539b4c19781de9c1597d50f8f1a94e0beb4708de2fa96a14fdbfee9f5ada9dea668c01d51947758d4f03af2b9567f9952acb591668f9ea7fb8716431376820fd8f2b75d62052438d394b34d72731c289abc9418cfde2f784539cfcbcf80dcb90e96fd16f442e52e0cddc378c8ae138af41ceb6891ac37b4ccd851939800f01db164b65a11e30ada6e28649bf89453f722be0bd3083663f1e9e14c9e7d621d870791e1a90d9ba97e9ed2d5f330270018aed9b1136093c55d8e9f2d7c6aa6f9dad59477667a7d1c2beaf85ac8ecf62da793a40fd49be436258a5b3a3825590f5543e3d1aa92b66814ad0948af2d3ba80f23dc7754610008ab38ace85a6708455ae7613ec47097b73c6221e3282af43c90861a9771c3cb032cc0a85e3f266a24d7cff397f544c3def5c3c7295c32babbdca48760119de0e9584b279c7d57e277fc2c4f82bc492dc84ba12f24cfcf4c2fb9e76aaf13e32ec82aaa18542c627785e0ad25b97c5c4dc782e8c8154e9946426b86d0334d4210768bd3e43c224c96fe7b30072eb4d3ed3035386b153237acc1ce4ed2d73040afc993e39412d8f5a357c97f3d8c1f083c01666c3c9d4dca6cf7c62e44c88be2804b3d6cd007f5210f0990ab7a44fd0b40f2388fc76edcb51de2c33569d194d906cd160f4ec4a1626f0fc070e70d4f15aadf89b4ba56f83ec5fbb6a1d3c11d617c4025589b341649bd234f4d62ab60a44588272fca3651d3e33ee62dcd58dc89e5cfa39c26a3a5b56cc2a22e4c8ae1725652e26d38406acfb9996e5b247572e494bb3b3e343c8aaa2ab05d46d5a26783a97760c6e2c13add26464bd1b7eee776771b9eddb8d39a74333384f29c2b4694c2cbddc18028e347f75843951eb39b76f3ef165ee7b10afb4324e8d347ee85e1ba684b7c0ed6f578cb305028e699954472952cbd4eae29a9babb99c00530393665e79c2796e1854b12ccf28613555cfd37b4469f3b076ccea625065d2c5abccec7ae571a2f49cfa33599fdad97e3d5aa43f4be11e15a06dda63a9427ebc3e378e3e13b3e73e9bc36b566317f7cba1686799cc86b0058d35b5b4c0248827cceb90afbdff72d8e653d49d5d229fe750cf46aa217c75c46a0f7cdbe147ba533d35aa511ba9cf7ef909be31356463e2026c6a87cdc3da87165c3de0edc512dce07294ca8694586e469c6533ad33abe2a03688b55af0dae3d284323812dac0f7b5f7e2db47dc0c0e1fd8fb1c3ba9e890def1297ee8c8620c04f4e6bce27372c14f75e55e9b2de8743e4c4b720c87033598c66cb13b472198b2dd8f0c75ca0aba2e2c20cbe375be11e7e76d873a30470181468fe8f92b57cc344fcd0f27a173f90b2a9c5b99c0fb48aa1b31011acd690799dcc4453823b57519565a1b1ca05db4bb7c2da782c29271492b39f748967ff1c04934277c4d0514cdf5f8d7fe66f0c9bc25287df0805084e233f53227a46100d5f4f044867affe22b07447da814d6dfb814de6a232de3539fcbdda90f37d4d3a0cd927bb2109609851ffaba3843e548d36d1a532309694a1af2bbe95b0b0134b308469720004799c2d27eaa38736e51ece49f0b3847a4300100c810aaefb05ec04444ed050a46466976a5253f206296b7f46647a5cc4c68b8f08e8da2a4bac9ef88b1a9027e61a12ee0f7414679e129bdc35dd2cd996345369541e3b99138e92185adeaa9bef2f7c92b1a95d663f30b6add633dc5112de5f0a3c54148798cbdb07a698dc1783c0be85e5d7f9e5f3c5165a57358fd090124dca6096f2d9b09e708f295807357ad850bd4c6f38358f973852697bdf9f5ab2d698f12c7f06fac56899fa07ce7e440d751cc964597fa6a1cddb27fd5c6397f8cec6e50e4587183042a5c441a4b413393c16a2f86fb8df4130b2f0bb63f994f31cce0766dd2201f86b14af6d6e9d31ef67fc0b77c1dd322ce1043b7f48692e92deda76fcbccc86abf21339eb077ae1c0e3f8ddca9685542ed847aa56086d4793f4027a7da89a3027503127c240b804352c4e6e17c52b581ab4c7453384d5adca84d84149484e25c81603688b8d3988d35d968dd54ce8a88eed11450f5b6a5cd12d0b447563fcf04c20c845c5bf6272d22dae760a7c4bb3acc23a5c8f4bba9fc7a5833d05a069194d517c266ae902e91c4025ba28f292845380339ce78f63179856c696c0123da5a8aca051f80d951b1ef7d369e4a697458a77115eb4a3dd33ceae282cdb1130101f3e99207a8097bae98d346796d84b6364e705803d6dcedb27cbefb51781d6b7fb45c4f4677f334be1d37c5c864c4d2e9cbbbd9c8e7573a67f12a7502ef108ee408c300883e6f86851425321507e0a3a812d3ff9db1de6b01abda1d26ebe13d38e3bb26e657711cee0e4f4ad1e02e7efbe5d21d65af3d74ca5e5570d03c7753ea34a3931b734884f4af8abc2e4d17e3443975ff41b0f077c88e46a18988447ed9593325f165fffcec368975e97676a255bcb662cbf218428fd6235965035c7f852a54e55edb632d4b1b6b4f7516c3f7cb429875a524380363d869544f5c10521176bdb1147837f92932b0770f326516e5b5582d42d4a1f737a2833287d6c3f6221921eaa3acc279ef254940026c005f5277a95cfaf4a11aa07b3eeca5a7089e9d3f4115e8773e8a62ce4185eee4c116ef04dae3fd406dae52179c5a8dc8c47129736b6c56b0db9801b9cdc0ca9ae98a9bb1cb32e65e67ef13617286167d8963a7c26f2819e90311fed315f9a41269d5504402c6dd15f0c04ebafeb5b8b4103df5ad20d8e44f724c7b4a2f0cecfe1faa220a885b87a21621b2d246ea87fb1572a2756d04bfb96f1c86080c134ae1ed876c6dc3d896784a793c3c5e31507329791768df3296d7826b9544cd04c5c7c8de1ad19ea82d9c364fd598af7fe3fa0910892b79212e78bcb5394d3146b90dd6a940f28b1ea6db2e051c09e6f7cd4ef179e8e249a48948fbcf2a1299f3da4c91feb255befadf5f56bef44759199a18fd95246a4a000b8b1342eeb2d6d16bcedf4dc6a0790f9eeeb8a81fdf27bd9702cf1b91a919ea74c6922f8dcf4e2a94f73d2d18aa8946a694941882f44c8b71ddabeb8e8543c2daefca1677f6b7fbf3ab23bfa2282a72fef6d6b58ebdce6761c18dd999ac83594ed05aaedd7680c72a7d870a09b186e9c04b79da4da5bf31fc0d8cf3a2e51b1099f7389b45e8146bf2689ebd9576750ac69e2470c8502532ff3c2f166b2784ba30179538878b8730118ee2155ef97634d1c44c4cc9eab5ad313d1bb312ce64ba2b66113aef5044cdcd0bed5d59ff2abad22ee085437feecacf0d8cbff274288c84a6d81a4ba57fc07e43e157369f5505a6a18b7ba54d6bff0736cc2729073b0dd6327ca1da5f96ce306e00b8d7ccdfef34438e771b4817163d7c20e0c484519d77d6d7e1dad05626e00c29a4d0e9d65ccf26cdc9d210f1c60158ed6f364a853cf3690e833dcc344ef7722cfe6327d24eb78c0a7a81b6d35d92fc39c0eee34e02ea3d814973d033bd5c32d86cee74907099ac7eacc679c11e8ffeeea07d652dddaaabe38b940b6689ccd59818a57e27f16f01d64bfcb86e2ad97bdc4680049e9ef3c9a01343de59c95569017f5a7dee61d020d7e3e386413fe431cce7b28fc25a845400b796f8f7a2ab50d74dcd9b29fc5c3197d41d264adcc8d28e8fd2c703ea74413b669d4f9329bcac84f91dc64cbf04cf10144699d6d043a7bd08b005d1ebed290d10c0724231c6d004e708b7bf589a0c72423a89df8ac8497e99e450ee0e67f0f8c7b45c8ec024142561e35f92f87895dbe3ebc1d82375d17602972a9e5f95bae5f7dc6c14dc129357afb4e535548c5a2802ca86d5de57e5174168ad37edc9dadee93d58884f2c624a007167f2dce1a2d59118ab8dcac01b5e6a05f85f05473bdc0c7c14946605bd2c075b06bbc4623eb4667fd096e85778c116adf93102e139185e42b4a461c60d2b8e7eaa779d85ca8f2ec11245bb8ad3429b2bddd72d322adfb55a644d6bbd6b3bc699397982a60e3e4e5d562ae3b028448a22d8abb3e384ccddbc21824d35579013f657c1da7898b1f3c6b2729255dbb2f010a2807cc699f7a79fddd9f85f25bd1bf2264ab3a02965d70b861f837ed28327a56d71dacebb4751a28f57ac86a596c8891f0bc02d48864c4793174ddda0c427d60bdc179f50a017895b9246675738aca1fc3034f121369b35486b1c02deca70a6fff30b9708fc02625155063c689def0e488c6c215841ea21547ec5cb4d530e84c3056aa3c984b0616ed26dc6f9c02f53dc452e2c14f5ae1d7dea95bef32c5251d033bf3d70b1e222a42f8e6a8477244e8037f88eebb39a052602475e0fde1a71bcbd61cb070402ff04cf91fe5330211fbc5e70d9b0c7a62f2b82cd6aac1ba93bb717142e8989d249c3dff7c94840e9f84ada0ab5b9d0c9962a4c6bb901ae101894e6b5a418bbf5c2108bd7fb675b0d7dff1450adae7deb2dd10dce2a1c0d7f9bb480cf17b0e10cc00328bad4561050b2df59ce0c669f5487ed5c108f1525799f9cf9800168bf138bdaccc3fa5299e1ee12cad0e6bf64f6b1602bd5fe245fe8a283d81d5e0e32070d878a21ec17b5c33866588d18095b268c41ec1d5faaf2823ffc56f46d2a100636b02492d9e0bf465e17cb7e008fbd60823992484f4cfc6749e23bead9120cd20a3259fd391692d1478734c00965837c690882776371d5efc1766e01c35dc4e0f29d653eb998004f826499af0490a82cbe8cdf9fbd4ccd36197ec1a5aca5bd43bac381888a86b366aff78b7942d2fff9a2e0ac37608a5eeee3394dbb43ce08137e4a8c1278e4801cba90226c8033478d0817dc06ab4e0276eb451c467b7d63d85f7b3ccb2955d296b9154736cd460f4e52eaf6e8d328e043296e834d52d9445b760a2a81781f392bc151676228b35c75d60e7d22afbd52aa847e9f916aee66f4c48b688afbab30421efd378836c3e54d8d1d1af9047f4f6b30aa3117485f6afdb5d3ee62c2e6738b914bbc743ce36657a94e0df2339e0885522a3f6acea09746cc148ff99f77e9ae537a173d0c1fbd422a754e6cdc038749d13a92cbc90577e5ddbe1ebee00150e4285de28f5a1547f6356153208c0ca6850287cf3d688951098b80ea96898d7c11126e9cfdcaa243dab19569408ba6d90546d3b6c8e9f4c522adc26f06cbd7aead6f1b21dca6f7681d398081ea22470ef1c977f1ed7384363681d7a9ca69db6f122349b5e607432392f3d238a767450f1e5dc02975c05718590232e2b0211412d89df37949072392da85c275e393162f41b0a8170b8ae4b92e9651d67889fabac0a998cf3d4fe8c994c5d2598297091adc069fbc4f4927c0a550b5d7ff5f24cff23a9a784d8dd7a3e2eb01f46d87f86003189acbbddcfc06f2327611f854dd8ff6a81cfb161a239758a6f7fa7e1dff509c223b97653b4e16bad9a4973a7491c6cfb029c7aad5242bf437b9db6e59d28390d07f425fa97a2b7eb659f", 0x2000, &(0x7f00000010c0)={&(0x7f0000000440)={0x50, 0x0, 0x4, {0x7, 0x2b, 0x40, 0x40100001, 0x3, 0x101, 0xae, 0x5798, 0x0, 0x0, 0x40, 0xf3}}, &(0x7f0000000280)={0x18, 0x0, 0x4, {0x8}}, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x5, {0x5}}, &(0x7f0000000500)={0x18, 0x0, 0x0, {0x745}}, &(0x7f0000000640)={0x18, 0xfffffffffffffff5, 0x0, {0x7fff}}, &(0x7f0000000680)={0x28, 0x0, 0x10, {{0x1, 0x7, 0x0, r2}}}, &(0x7f00000006c0)={0x60, 0xffffffffffffffda, 0xffffffff, {{0x3, 0x4, 0x4, 0x6, 0x9, 0x3bb7, 0x800, 0x3}}}, &(0x7f0000000740)={0x18, 0x0, 0x6, {0x5}}, &(0x7f0000000780)={0x14, 0xffffffffffffffda, 0x80000001, {'nr0\x00'}}, &(0x7f00000007c0)={0x20, 0x0, 0x3, {0x0, 0x10}}, &(0x7f0000000880)={0x78, 0x0, 0x4, {0xffffffffffffff01, 0x3, 0x0, {0x4, 0xe00a, 0x1, 0x152, 0x3, 0x0, 0xe67, 0x1, 0xfffffbff, 0x1000, 0x6, 0x0, 0x0, 0x9, 0xf}}}, &(0x7f0000000bc0)={0x90, 0xfffffffffffffff5, 0x336, {0x4, 0x3, 0x80, 0x7, 0x90000000, 0x2, {0x4, 0x600000000000000, 0x3, 0x4, 0xfffffffffffffff6, 0x0, 0x81, 0x4, 0xf, 0xc000, 0x9, 0x0, 0xee01, 0x8, 0x3}}}, &(0x7f0000000c80)={0xf0, 0x0, 0x183a19bd, [{0x4, 0x8, 0x3, 0x964, ']$*'}, {0x6, 0x1ff, 0x2, 0x8, ':)'}, {0x4, 0x9, 0x4, 0x4, 'nr0\x00'}, {0x3, 0xb0c, 0x1, 0x868, ':'}, {0x5, 0x0, 0x1, 0x2, '\x00'}, {0x4, 0x8, 0x3, 0x40, '\xce+{'}, {0x3, 0xd6000000000, 0x1, 0x9, ']'}]}, &(0x7f0000000d80)={0xb0, 0x0, 0x7fffffffffffffff, [{{0x2, 0x1, 0x0, 0xcd7, 0xc, 0xf765, {0x6, 0xfffffffeffffffff, 0x7, 0x5000000000000, 0x6, 0x81, 0x3, 0x6, 0x8, 0x6000, 0x7ff, 0x0, 0x0, 0x2, 0x50}}, {0x3, 0x3ff, 0x1, 0x3, '@'}}]}, &(0x7f0000000e40)={0xa0, 0xfffffffffffffff5, 0xfaf6, {{0x6, 0x2, 0x9, 0x7, 0x832, 0x6, {0x0, 0x2, 0x6, 0x2, 0x8000000000000001, 0x50000, 0x2, 0xff, 0xffff, 0xa000, 0xff, r6, r7, 0x3, 0xc}}, {0x0, 0x16}}}, &(0x7f0000000940)={0x20, 0x0, 0x31, {0x4, 0x4, 0x9, 0x10}}, &(0x7f0000000f80)={0x130, 0x0, 0xe, {0x4, 0x0, 0x0, '\x00', {0x10, 0x0, 0x3, 0x2, r8, r9, 0x6000, '\x00', 0x8000, 0x9, 0x3, 0x946, {0x1, 0x80}, {0x5, 0x9}, {0x11c7, 0xe}, {0xd4, 0x8}, 0x81, 0x4, 0x0, 0xffffffff}}}})
r10 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)
r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f00000002c0)={'nr0\x00', 0x100})

289.842463ms ago: executing program 3 (id=5927):
r0 = io_uring_setup(0x2cee, &(0x7f0000000200)={0x0, 0x93b0, 0x3, 0x0, 0x315})
io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000000000)={0x1}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0)
ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000880)={"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"})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3, 0x1, 0x2, 0x8, 0x1ff, 0x1}, 0x20)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x10102, 0x0)
openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$cuse(0xffffff9c, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000180)=@default_ibss_ssid, 0x6, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
pipe2$watch_queue(0x0, 0x80)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r4, r4, 0x0, 0x200000)
keyctl$set_timeout(0xf, 0x0, 0x4e0)

140.320447ms ago: executing program 2 (id=5928):
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x8c900) (async)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x8c900)
ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40044146, &(0x7f0000000040)=0x9)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x51)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000080)="240000004e0025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) (async)
write(r4, &(0x7f0000000080)="240000004e0025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

0s ago: executing program 2 (id=5929):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000f14011522772406d08b2752c8f4ca705a0d002abd7000fc0d0000000000e0"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e0857f9f582f0300000000000500", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c)
r5 = socket(0x21, 0x6, 0x0)
r6 = socket$inet6(0xa, 0xa, 0xb6e2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x0, 0x0, 0x2, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@dev, 0x400, 0x0, 0xff, 0x1}, 0x20)
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000dc47b8b69e8b494e5f5b4385ccec3cbaf9ea0866b231485ba46fb9b57c60bfd695d8f021ed657b5fb66e1fdf0714d7838353beef1924f8a8511dbd9ab51f90904eab1faa9eda986f138b708b7424f1d82ace9ac067069d4b0f1a9d7f2849b19f7ab080000000000000000695059b589c2f868c307987e33890c4aa67fa341c2a45ac9f4c91128208980daaf4453bf0cd908876ab775637b85581999e08effeec161f54c28865748cf9d59f0fff23adfcc2ac5834351997fc3931c60e80e589836a4aa551e3a", @ANYRES16=0x0, @ANYBLOB="210f28bd7000fbdbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r9, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)

kernel console output (not intermixed with test programs):

 -32
[  802.715131][ T6024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  802.782809][ T6925] usb 6-1: reset high-speed USB device number 22 using dummy_hcd
[  802.803114][ T6925] usb 6-1: device descriptor read/8, error -32
[  803.052849][ T6925] usb 6-1: reset high-speed USB device number 22 using dummy_hcd
[  803.073052][ T6925] usb 6-1: device descriptor read/8, error -32
[  803.192957][ T6925] raw-gadget.1 gadget.1: failed to queue suspend event
[  803.199204][   T73] usb 6-1: USB disconnect, device number 22
[  803.219783][   T73] raw-gadget.1 gadget.1: failed to queue reset event
[  803.282894][   T73] raw-gadget.1 gadget.1: failed to queue resume event
[  803.342873][   T73] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  803.345861][    C3] raw-gadget.1 gadget.1: ignoring, device is not running
[  803.348203][   T73] raw-gadget.1 gadget.1: failed to queue reset event
[  803.422833][   T73] raw-gadget.1 gadget.1: failed to queue resume event
[  803.443188][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  803.482827][   T73] usb 6-1: device descriptor read/64, error -32
[  803.593218][   T73] raw-gadget.1 gadget.1: failed to queue suspend event
[  803.596299][   T73] raw-gadget.1 gadget.1: failed to queue reset event
[  803.662814][   T73] raw-gadget.1 gadget.1: failed to queue resume event
[  803.732807][   T73] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  803.736023][    C3] raw-gadget.1 gadget.1: ignoring, device is not running
[  803.738280][   T73] raw-gadget.1 gadget.1: failed to queue reset event
[  803.802814][   T73] raw-gadget.1 gadget.1: failed to queue resume event
[  803.862910][   T73] usb 6-1: device descriptor read/64, error -32
[  803.982935][   T73] raw-gadget.1 gadget.1: failed to queue suspend event
[  803.986026][   T73] usb usb6-port1: attempt power cycle
[  803.989005][   T73] raw-gadget.1 gadget.1: failed to queue disconnect event
[  803.992405][   T73] raw-gadget.1 gadget.1: failed to queue reset event
[  804.062879][   T73] raw-gadget.1 gadget.1: failed to queue resume event
[  804.066118][   T73] raw-gadget.1 gadget.1: failed to queue reset event
[  804.273193][   T73] raw-gadget.1 gadget.1: failed to queue resume event
[  804.335881][   T73] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  804.353334][    C3] raw-gadget.1 gadget.1: ignoring, device is not running
[  804.355832][   T73] usb 6-1: device descriptor read/8, error -32
[  804.463133][   T73] raw-gadget.1 gadget.1: failed to queue suspend event
[  804.465775][   T73] raw-gadget.1 gadget.1: failed to queue reset event
[  804.472955][T14782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  804.475736][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  804.532922][   T73] raw-gadget.1 gadget.1: failed to queue resume event
[  804.592840][   T73] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  804.613089][    C3] raw-gadget.1 gadget.1: ignoring, device is not running
[  804.615392][   T73] usb 6-1: device descriptor read/8, error -32
[  804.722915][   T73] raw-gadget.1 gadget.1: failed to queue suspend event
[  804.725216][   T73] usb usb6-port1: unable to enumerate USB device
[  805.513121][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.914368][ T6024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.553255][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.556352][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  807.512979][  T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  807.593614][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  808.633334][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.113213][T18598] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  809.673135][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  810.552999][  T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  810.611656][T18600] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  810.715304][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  811.673442][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  811.753118][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  812.677301][T23997] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  812.685964][T23983] raw-gadget.1 gadget.1: failed to queue disconnect event
[  812.793025][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  812.857320][T24016] veth1_macvtap: left promiscuous mode
[  813.053413][T18604] erspan0: left allmulticast mode
[  813.055036][T18604] erspan0: left promiscuous mode
[  813.062395][T18604] bridge0: port 3(erspan0) entered disabled state
[  813.140777][T18604] bridge_slave_1: left allmulticast mode
[  813.143626][T18604] bridge_slave_1: left promiscuous mode
[  813.146926][T18604] bridge0: port 2(bridge_slave_1) entered disabled state
[  813.159933][T24033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  813.163685][T24033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  813.170658][T24034] random: crng reseeded on system resumption
[  813.179352][T24033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  813.223433][T18604] bridge_slave_0: left allmulticast mode
[  813.225240][T18604] bridge_slave_0: left promiscuous mode
[  813.227083][T18604] bridge0: port 1(bridge_slave_0) entered disabled state
[  813.228260][T24033] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[  813.231781][T24033] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  813.235561][T24033] vhci_hcd vhci_hcd.0: Device attached
[  813.248980][T24035] usbip_core: unknown command
[  813.252250][T24035] vhci_hcd: unknown pdu 3093862358
[  813.255502][T24035] usbip_core: unknown command
[  813.259819][T18600] vhci_hcd: stop threads
[  813.261788][T18600] vhci_hcd: release socket
[  813.263529][T18600] vhci_hcd: disconnect device
[  813.685049][T18603] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  813.693872][T24019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  814.713505][T14782] net_ratelimit: 2 callbacks suppressed
[  814.713521][T14782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  814.863854][T18604] bond2 (unregistering): (slave bridge1): Releasing active interface
[  814.873118][T24006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.031876][T24068] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  815.033976][T24068] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  815.036991][T24068] vhci_hcd vhci_hcd.0: Device attached
[  815.362865][T23371] usb 42-1: SetAddress Request (112) to port 0
[  815.365542][T23371] usb 42-1: new SuperSpeed USB device number 112 using vhci_hcd
[  815.513632][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.593403][T24069] vhci_hcd: connection reset by peer
[  815.604726][T18596] vhci_hcd: stop threads
[  815.606245][T18596] vhci_hcd: release socket
[  815.607785][T18596] vhci_hcd: disconnect device
[  815.672856][T14783] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  815.704119][T24079] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  815.706180][T24079] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  815.708876][T24079] vhci_hcd vhci_hcd.0: Device attached
[  815.814146][T18604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  815.862767][T14783] usb 6-1: Using ep0 maxpacket: 32
[  815.867306][T14783] usb 6-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config
[  815.870660][T14783] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  815.903318][T18604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  815.913070][T24006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.913795][T14783] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  815.918493][T14783] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  815.921021][T14783] usb 6-1: Product: syz
[  815.922373][T14783] usb 6-1: Manufacturer: syz
[  815.932760][T14783] usb 6-1: SerialNumber: syz
[  815.935429][T14783] usb 6-1: config 0 descriptor??
[  815.946096][T18604] bond0 (unregistering): Released all slaves
[  815.972832][T14782] usb 46-1: SetAddress Request (50) to port 0
[  815.974710][T14782] usb 46-1: new SuperSpeed USB device number 50 using vhci_hcd
[  816.154535][ T6005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  816.339527][T24080] vhci_hcd: connection reset by peer
[  816.341509][T18598] vhci_hcd: stop threads
[  816.343336][T18598] vhci_hcd: release socket
[  816.344865][T18598] vhci_hcd: disconnect device
[  816.541027][T24088] No control pipe specified
[  816.683728][T18604] bond1 (unregistering): Released all slaves
[  816.952976][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  817.593635][T18604] bond2 (unregistering): Released all slaves
[  817.633202][T24032] veth1_to_bond: entered allmulticast mode
[  817.636114][T24034] veth1_to_bond: left allmulticast mode
[  817.791355][  T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  817.843334][T24074] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  817.845748][T24074] batman_adv: batadv0: Removing interface: batadv_slave_0
[  817.863726][T24074] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  817.866431][T24074] batman_adv: batadv0: Removing interface: batadv_slave_1
[  817.931771][T24092] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  817.934366][T24092] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  817.937720][T24092] vhci_hcd vhci_hcd.0: Device attached
[  818.004438][T24006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  818.053467][T18604] : left promiscuous mode
[  818.203285][T18604] tipc: Left network mode
[  818.232967][   T29] usb 43-1: new high-speed USB device number 6 using vhci_hcd
[  818.823387][T24093] vhci_hcd: connection reset by peer
[  818.825451][T18599] vhci_hcd: stop threads
[  818.826979][T18599] vhci_hcd: release socket
[  818.828912][T18599] vhci_hcd: disconnect device
[  819.035143][T24006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.170359][T24109] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  819.172727][T24109] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  819.177799][T24109] vhci_hcd vhci_hcd.0: Device attached
[  819.187645][T24006] usb 6-1: USB disconnect, device number 27
[  819.188190][T24109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.224501][T18604] hsr_slave_0: left promiscuous mode
[  819.262854][T18604] hsr_slave_1: left promiscuous mode
[  819.266895][T18604] batman_adv: batadv0: Removing interface: batadv_slave_0
[  819.305036][T24115] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  819.316894][T18604] batman_adv: batadv0: Removing interface: batadv_slave_1
[  819.796830][T24110] vhci_hcd: connection closed
[  819.797053][T18600] vhci_hcd: stop threads
[  819.800544][T18600] vhci_hcd: release socket
[  819.802481][T18600] vhci_hcd: disconnect device
[  820.073096][T24006] net_ratelimit: 1 callbacks suppressed
[  820.073113][T24006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.472864][T23371] usb 42-1: device descriptor read/8, error -110
[  820.645603][T24146] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5188'.
[  820.700134][T24147] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5188'.
[  820.802940][ T6005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.863700][T23371] usb usb42-port1: attempt power cycle
[  820.930857][T13025] Bluetooth: hci4: unexpected event for opcode 0x0000
[  821.042981][T14782] usb 46-1: device descriptor read/8, error -110
[  821.112980][T24006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.424315][T23371] usb usb42-port1: unable to enumerate USB device
[  821.443287][T14782] usb usb46-port1: attempt power cycle
[  822.014257][T14782] usb usb46-port1: unable to enumerate USB device
[  822.153111][T24006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  823.202911][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  823.343027][   T29] vhci_hcd: vhci_device speed not set
[  823.862831][T24083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  824.243342][T24006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  824.962964][T13025] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  824.974663][T13025] Bluetooth: hci4: Injecting HCI hardware error event
[  824.979321][T13025] Bluetooth: hci4: hardware error 0x00
[  825.274816][T24006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  825.762995][T20300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.313044][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.882922][T14782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  827.033283][T13025] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  827.363863][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  828.393056][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  829.434014][T24006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  829.923916][ T6005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  830.483056][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  831.525272][ T6003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  831.820002][T24166] random: crng reseeded on system resumption
[  831.833927][T24161] veth1_to_bond: entered allmulticast mode
[  831.869708][T24160] veth1_to_bond: left allmulticast mode
[  832.216934][T24174] trusted_key: encrypted_key: insufficient parameters specified
[  832.553005][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  832.623859][T18604] IPVS: stop unused estimator thread 0...
[  832.669449][T24176] FAULT_INJECTION: forcing a failure.
[  832.669449][T24176] name failslab, interval 1, probability 0, space 0, times 0
[  832.702831][T24176] CPU: 1 UID: 0 PID: 24176 Comm: syz.2.5196 Not tainted syzkaller #0 PREEMPT(full) 
[  832.702869][T24176] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  832.702882][T24176] Call Trace:
[  832.702889][T24176]  <TASK>
[  832.702897][T24176]  dump_stack_lvl+0x16c/0x1f0
[  832.702924][T24176]  should_fail_ex+0x512/0x640
[  832.702951][T24176]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[  832.702973][T24176]  should_failslab+0xc2/0x120
[  832.702997][T24176]  kmem_cache_alloc_noprof+0x75/0x6e0
[  832.703016][T24176]  ? __kernfs_new_node+0xd2/0x8e0
[  832.703045][T24176]  ? __kernfs_new_node+0xd2/0x8e0
[  832.703066][T24176]  __kernfs_new_node+0xd2/0x8e0
[  832.703092][T24176]  ? __pfx___kernfs_new_node+0x10/0x10
[  832.703124][T24176]  ? find_held_lock+0x2b/0x80
[  832.703145][T24176]  ? kernfs_root+0xee/0x2a0
[  832.703174][T24176]  kernfs_new_node+0x13c/0x1e0
[  832.703204][T24176]  __kernfs_create_file+0x53/0x350
[  832.703228][T24176]  sysfs_add_file_mode_ns+0x207/0x3c0
[  832.703251][T24176]  internal_create_group+0x578/0xf30
[  832.703271][T24176]  ? __pfx_internal_create_group+0x10/0x10
[  832.703289][T24176]  ? kernfs_create_link+0x1bd/0x240
[  832.703303][T24176]  internal_create_groups+0x9d/0x150
[  832.703320][T24176]  device_add+0xf30/0x1aa0
[  832.703338][T24176]  ? __pfx_device_add+0x10/0x10
[  832.703351][T24176]  ? device_initialize+0x29e/0x510
[  832.703365][T24176]  wakeup_source_device_create+0x243/0x2e0
[  832.703385][T24176]  wakeup_source_sysfs_add+0x1c/0x90
[  832.703396][T24176]  wakeup_source_register+0x154/0x3e0
[  832.703413][T24176]  ep_create_wakeup_source+0x1dd/0x2e0
[  832.703426][T24176]  ? __pfx_ep_create_wakeup_source+0x10/0x10
[  832.703441][T24176]  ? find_held_lock+0x2b/0x80
[  832.703453][T24176]  ? do_epoll_ctl+0x26bd/0x3790
[  832.703468][T24176]  do_epoll_ctl+0x1f60/0x3790
[  832.703487][T24176]  ? __pfx_do_epoll_ctl+0x10/0x10
[  832.703499][T24176]  ? find_held_lock+0x2b/0x80
[  832.703509][T24176]  ? __might_fault+0xe3/0x190
[  832.703528][T24176]  ? __ia32_sys_epoll_ctl+0x15b/0x1e0
[  832.703540][T24176]  __ia32_sys_epoll_ctl+0x15b/0x1e0
[  832.703554][T24176]  ? __pfx___ia32_sys_epoll_ctl+0x10/0x10
[  832.703568][T24176]  ? rcu_is_watching+0x12/0xc0
[  832.703583][T24176]  __do_fast_syscall_32+0x7c/0x300
[  832.703600][T24176]  do_fast_syscall_32+0x32/0x80
[  832.703615][T24176]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  832.703629][T24176] RIP: 0023:0xf7f22579
[  832.703640][T24176] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  832.703651][T24176] RSP: 002b:00000000f541655c EFLAGS: 00000296 ORIG_RAX: 00000000000000ff
[  832.703662][T24176] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000001
[  832.703669][T24176] RDX: 0000000000000003 RSI: 0000000080000400 RDI: 0000000000000000
[  832.703676][T24176] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  832.703683][T24176] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  832.703689][T24176] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  832.703704][T24176]  </TASK>
[  833.017955][T14782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  833.368131][T24198] random: crng reseeded on system resumption
[  833.379334][T24194] veth1_to_bond: entered allmulticast mode
[  833.385308][T24196] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  833.448076][T24201] kvm: pic: non byte read
[  833.451170][T24201] kvm: pic: level sensitive irq not supported
[  833.451477][T24201] kvm: pic: non byte read
[  833.460192][T24201] kvm: pic: level sensitive irq not supported
[  833.460460][T24201] kvm: pic: non byte read
[  833.465875][T24201] kvm: pic: level sensitive irq not supported
[  833.466226][T24201] kvm: pic: non byte read
[  833.471089][T24201] kvm: pic: level sensitive irq not supported
[  833.471436][T24201] kvm: pic: non byte read
[  833.475183][T24193] veth1_to_bond: left allmulticast mode
[  833.478702][T24201] kvm: pic: level sensitive irq not supported
[  833.479152][T24201] kvm: pic: non byte read
[  833.483357][T24201] kvm: pic: level sensitive irq not supported
[  833.483684][T24201] kvm: pic: non byte read
[  833.487951][T24201] kvm: pic: level sensitive irq not supported
[  833.488270][T24201] kvm: pic: non byte read
[  833.492922][T24201] kvm: pic: level sensitive irq not supported
[  833.493994][T24201] kvm: pic: non byte read
[  833.498461][T24201] kvm: pic: level sensitive irq not supported
[  833.498750][T24201] kvm: pic: non byte read
[  833.503267][T24201] kvm: pic: level sensitive irq not supported
[  833.593061][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  833.678142][T24211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  833.680797][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  833.691257][T24211] netlink: 'syz.4.5206': attribute type 7 has an invalid length.
[  833.697907][T24211] netlink: 'syz.4.5206': attribute type 8 has an invalid length.
[  834.127749][T24218] trusted_key: encrypted_key: insufficient parameters specified
[  834.291371][T24226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5210'.
[  834.340659][T24229] syzkaller0: entered promiscuous mode
[  834.343123][T24229] syzkaller0: entered allmulticast mode
[  834.633100][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  834.737419][T24233] random: crng reseeded on system resumption
[  834.773404][T24232] veth1_to_bond: entered allmulticast mode
[  834.840697][T24239] kAFS: No cell specified
[  834.844776][T24239] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[  834.846930][T24239] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  834.849707][T24239] vhci_hcd vhci_hcd.0: Device attached
[  834.852366][T24241] vhci_hcd: connection closed
[  834.852951][T18603] vhci_hcd: stop threads
[  834.856997][T18603] vhci_hcd: release socket
[  834.858960][T18603] vhci_hcd: disconnect device
[  834.873204][T24231] veth1_to_bond: left allmulticast mode
[  834.884643][T24244] netlink: 'syz.3.5215': attribute type 39 has an invalid length.
[  835.353628][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  835.672870][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  835.675854][ T6925] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[  835.832849][ T6925] usb 9-1: Using ep0 maxpacket: 8
[  835.835961][ T6925] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  835.839096][ T6925] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  835.842124][ T6925] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  835.845247][ T6925] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  835.849373][ T6925] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  835.852168][ T6925] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  836.002976][T24268] random: crng reseeded on system resumption
[  836.073542][ T6005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  836.188047][T24271] trusted_key: encrypted_key: insufficient parameters specified
[  836.224477][ T6925] usb 9-1: usb_control_msg returned -71
[  836.230492][ T6925] usbtmc 9-1:16.0: can't read capabilities
[  836.264597][ T6925] usb 9-1: USB disconnect, device number 21
[  836.300057][T24268] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  836.310111][T24268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5222'.
[  836.606718][T24276] veth1_to_bond: entered allmulticast mode
[  836.656924][T24275] veth1_to_bond: left allmulticast mode
[  836.713180][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  836.798662][   T40] audit: type=1326 audit(1763870289.885:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24282 comm="syz.4.5227" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000
[  836.813688][   T40] audit: type=1326 audit(1763870289.885:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24282 comm="syz.4.5227" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000
[  836.830683][   T40] audit: type=1326 audit(1763870289.895:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24282 comm="syz.4.5227" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f13579 code=0x7ffc0000
[  836.838013][   T40] audit: type=1326 audit(1763870289.895:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24282 comm="syz.4.5227" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000
[  836.845195][   T40] audit: type=1326 audit(1763870289.895:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24282 comm="syz.4.5227" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000
[  836.852060][   T40] audit: type=1326 audit(1763870289.895:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24282 comm="syz.4.5227" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f13579 code=0x7ffc0000
[  836.863132][   T40] audit: type=1326 audit(1763870289.895:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24282 comm="syz.4.5227" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000
[  836.870055][   T40] audit: type=1326 audit(1763870289.895:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24282 comm="syz.4.5227" exe="/syz-executor" sig=0 arch=40000003 syscall=320 compat=1 ip=0xf7f13579 code=0x7ffc0000
[  836.882798][   T40] audit: type=1326 audit(1763870289.895:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24282 comm="syz.4.5227" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000
[  836.889700][   T40] audit: type=1326 audit(1763870289.895:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24282 comm="syz.4.5227" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000
[  837.041617][T24289] program syz.3.5229 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  837.085913][T24290] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10)
[  837.088043][T24290] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  837.092486][T24290] vhci_hcd vhci_hcd.0: Device attached
[  837.104687][T24290] smc: net device ip6_vti0 applied user defined pnetid SYZ1
[  837.107126][T24290] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ1
[  837.135143][ T1111] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0
[  837.138519][ T1111] ata1.00: irq_stat 0x40000000
[  837.141040][ T1111] ata1.00: failed command: ZAC MANAGEMENT OUT
[  837.146118][ T1111] ata1.00: cmd 9f/02:00:00:00:00/01:00:00:00:00/40 tag 1
[  837.146118][ T1111]          res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error)
[  837.165458][ T1111] ata1.00: status: { DRDY ERR }
[  837.168921][ T1111] ata1.00: error: { ABRT }
[  837.172155][ T1111] ata1.00: device reported invalid CHS sector 0
[  837.363234][T23371] usb 46-1: SetAddress Request (54) to port 0
[  837.365997][T23371] usb 46-1: new SuperSpeed USB device number 54 using vhci_hcd
[  837.665528][T24291] vhci_hcd: connection reset by peer
[  837.729562][T18603] vhci_hcd: stop threads
[  837.731013][T18603] vhci_hcd: release socket
[  837.732463][T18603] vhci_hcd: disconnect device
[  837.754856][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.890000][T24310] random: crng reseeded on system resumption
[  837.901458][T24306] veth1_to_bond: entered allmulticast mode
[  837.935039][T24305] veth1_to_bond: left allmulticast mode
[  838.280455][T24314] netlink: 'syz.1.5236': attribute type 1 has an invalid length.
[  838.384613][T24326] "syz.1.5240" (24326) uses obsolete ecb(arc4) skcipher
[  838.544972][T24337] random: crng reseeded on system resumption
[  838.574620][T24335] veth1_to_bond: entered allmulticast mode
[  838.687350][T24340] No control pipe specified
[  838.736683][T24334] veth1_to_bond: left allmulticast mode
[  838.803018][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  839.000288][T24352] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  839.002376][T24352] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  839.006853][T24352] vhci_hcd vhci_hcd.0: Device attached
[  839.123016][T24083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  839.126427][T24351] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10)
[  839.128698][T24351] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  839.131470][T24351] vhci_hcd vhci_hcd.0: Device attached
[  839.138694][T24356] usbip_core: unknown command
[  839.143333][T24356] vhci_hcd: unknown pdu 3093862358
[  839.148835][T24356] usbip_core: unknown command
[  839.173107][T18603] vhci_hcd: stop threads
[  839.174838][T18603] vhci_hcd: release socket
[  839.176367][T18603] vhci_hcd: disconnect device
[  839.293994][T14783] usb 44-1: SetAddress Request (102) to port 0
[  839.297555][T14783] usb 44-1: new SuperSpeed USB device number 102 using vhci_hcd
[  839.438554][T24361] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5247'.
[  839.446047][T24361] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  839.449547][T24361] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  839.454375][T24361] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  839.680894][T24367] FAT-fs (sr0): bogus number of reserved sectors
[  839.683894][T24367] FAT-fs (sr0): Can't find a valid FAT filesystem
[  839.707469][T24353] vhci_hcd: connection reset by peer
[  839.709568][T18600] vhci_hcd: stop threads
[  839.711421][T18600] vhci_hcd: release socket
[  839.713517][T18600] vhci_hcd: disconnect device
[  839.842997][ T6003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  840.220861][T24385] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  840.223018][T24385] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  840.264634][T24385] vhci_hcd vhci_hcd.0: Device attached
[  840.564014][   T29] usb 40-1: SetAddress Request (115) to port 0
[  840.570836][   T29] usb 40-1: new SuperSpeed USB device number 115 using vhci_hcd
[  840.784269][T24386] vhci_hcd: connection reset by peer
[  840.787713][T18604] vhci_hcd: stop threads
[  840.789620][T18604] vhci_hcd: release socket
[  840.791840][T18604] vhci_hcd: disconnect device
[  840.807072][T24394] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  840.809315][T24394] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  840.812039][T24394] vhci_hcd vhci_hcd.0: Device attached
[  840.835633][T24394] FAULT_INJECTION: forcing a failure.
[  840.835633][T24394] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  840.842167][T24394] CPU: 1 UID: 0 PID: 24394 Comm: syz.2.5254 Not tainted syzkaller #0 PREEMPT(full) 
[  840.842198][T24394] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  840.842206][T24394] Call Trace:
[  840.842211][T24394]  <TASK>
[  840.842217][T24394]  dump_stack_lvl+0x16c/0x1f0
[  840.842236][T24394]  should_fail_ex+0x512/0x640
[  840.842257][T24394]  _copy_to_user+0x32/0xd0
[  840.842269][T24394]  simple_read_from_buffer+0xcb/0x170
[  840.842290][T24394]  proc_fail_nth_read+0x197/0x240
[  840.842304][T24394]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  840.842318][T24394]  ? rw_verify_area+0xcf/0x6c0
[  840.842329][T24394]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  840.842341][T24394]  vfs_read+0x1e4/0xcf0
[  840.842357][T24394]  ? __pfx_vfs_read+0x10/0x10
[  840.842368][T24394]  ? find_held_lock+0x2b/0x80
[  840.842385][T24394]  ? __fget_files+0x20e/0x3c0
[  840.842401][T24394]  ksys_read+0x12a/0x250
[  840.842414][T24394]  ? __pfx_ksys_read+0x10/0x10
[  840.842425][T24394]  ? syscall_trace_enter+0x1cb/0x240
[  840.842445][T24394]  ? rcu_is_watching+0x12/0xc0
[  840.842460][T24394]  __do_fast_syscall_32+0x7c/0x300
[  840.842478][T24394]  do_fast_syscall_32+0x32/0x80
[  840.842493][T24394]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  840.842508][T24394] RIP: 0023:0xf7f22579
[  840.842518][T24394] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  840.842529][T24394] RSP: 002b:00000000f53d4590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  840.842540][T24394] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00000000f53d4620
[  840.842547][T24394] RDX: 000000000000000f RSI: 00000000f73b6ff4 RDI: 0000000000000000
[  840.842553][T24394] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  840.842559][T24394] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  840.842566][T24394] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  840.842582][T24394]  </TASK>
[  840.927709][T24395] vhci_hcd: connection closed
[  840.942795][T18604] vhci_hcd: stop threads
[  840.952985][T18604] vhci_hcd: release socket
[  840.969582][T18604] vhci_hcd: disconnect device
[  841.055071][T24410] trusted_key: encrypted_key: insufficient parameters specified
[  841.177373][T18604] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  841.187981][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  841.267464][T24414] random: crng reseeded on system resumption
[  841.319795][T24409] veth1_to_bond: entered allmulticast mode
[  841.412486][T24416] No control pipe specified
[  841.635197][T24408] veth1_to_bond: left allmulticast mode
[  842.162948][T24083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.376497][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.472847][T23371] usb 46-1: device descriptor read/8, error -110
[  842.878529][T24437] netlink: 'syz.3.5272': attribute type 1 has an invalid length.
[  842.892263][T24437] bond2: entered promiscuous mode
[  842.894264][T24437] 8021q: adding VLAN 0 to HW filter on device bond2
[  842.952799][T23371] usb usb46-port1: attempt power cycle
[  842.974772][T24437] bond2: (slave bridge1): making interface the new active one
[  842.977498][T24437] bridge1: entered promiscuous mode
[  842.979913][T24437] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  843.312923][T24447] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  843.314978][T24447] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  843.317656][T24447] vhci_hcd vhci_hcd.0: Device attached
[  843.453034][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  843.565568][T24456] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  843.567773][T24456] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  843.571089][T24456] vhci_hcd vhci_hcd.0: Device attached
[  843.694714][T24451] CIFS mount error: No usable UNC path provided in device string!
[  843.694714][T24451] 
[  843.697893][T24451] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  843.773548][T23371] usb usb46-port1: unable to enumerate USB device
[  844.213512][T24448] vhci_hcd: connection closed
[  844.213807][T18603] vhci_hcd: stop threads
[  844.216515][T18603] vhci_hcd: release socket
[  844.218013][T18603] vhci_hcd: disconnect device
[  844.232857][ T1022] usb 42-1: SetAddress Request (117) to port 0
[  844.234786][ T1022] usb 42-1: new SuperSpeed USB device number 117 using vhci_hcd
[  844.332468][T24457] vhci_hcd: connection reset by peer
[  844.335991][T18603] vhci_hcd: stop threads
[  844.340007][T18603] vhci_hcd: release socket
[  844.341872][T18603] vhci_hcd: disconnect device
[  844.393339][T14783] usb 44-1: device descriptor read/8, error -110
[  844.562788][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  844.585322][T24467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5269'.
[  844.874764][T14783] usb usb44-port1: attempt power cycle
[  844.952970][ T6024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  845.019971][T24471] random: crng reseeded on system resumption
[  845.051185][T24470] veth1_to_bond: entered allmulticast mode
[  845.084843][T24469] veth1_to_bond: left allmulticast mode
[  845.193046][ T6005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  845.413094][T24483] random: crng reseeded on system resumption
[  845.424754][T24478] veth1_to_bond: entered allmulticast mode
[  845.455972][T24477] veth1_to_bond: left allmulticast mode
[  845.585144][T24486] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  845.587919][T24486] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  845.592365][T24486] vhci_hcd vhci_hcd.0: Device attached
[  845.599013][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  845.621248][T24488] usbip_core: unknown command
[  845.622886][T24488] vhci_hcd: unknown pdu 3093862358
[  845.624516][T24488] usbip_core: unknown command
[  845.649591][T18604] vhci_hcd: stop threads
[  845.650943][T18604] vhci_hcd: release socket
[  845.652488][T18604] vhci_hcd: disconnect device
[  845.767433][   T29] usb 40-1: device descriptor read/8, error -110
[  845.769902][T14783] usb usb44-port1: unable to enumerate USB device
[  845.818422][T24496] trusted_key: encrypted_key: insufficient parameters specified
[  846.173926][   T29] usb usb40-port1: attempt power cycle
[  846.242784][ T6004] vhci_hcd: vhci_device speed not set
[  846.643195][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  846.843807][T24504] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10)
[  846.846031][T24504] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  846.848705][T24504] vhci_hcd vhci_hcd.0: Device attached
[  846.852820][T24507] usbip_core: unknown command
[  846.854394][T24507] vhci_hcd: unknown pdu 0
[  846.855763][T24507] usbip_core: unknown command
[  846.858242][T18604] vhci_hcd: stop threads
[  846.860108][T18604] vhci_hcd: release socket
[  846.862615][T18604] vhci_hcd: disconnect device
[  846.942849][ T6003] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[  847.112808][ T6003] usb 9-1: Using ep0 maxpacket: 32
[  847.116063][ T6003] usb 9-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config
[  847.119327][ T6003] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  847.119807][T24509] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10)
[  847.125054][T24509] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  847.125954][ T6003] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  847.127848][T24509] vhci_hcd vhci_hcd.0: Device attached
[  847.131110][ T6003] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  847.135454][ T6003] usb 9-1: Product: syz
[  847.136763][ T6003] usb 9-1: Manufacturer: syz
[  847.138244][ T6003] usb 9-1: SerialNumber: syz
[  847.141516][ T6003] usb 9-1: config 0 descriptor??
[  847.146461][T24510] usbip_core: unknown command
[  847.148473][T24510] vhci_hcd: unknown pdu 3093862358
[  847.150613][T24510] usbip_core: unknown command
[  847.153083][T18600] vhci_hcd: stop threads
[  847.154817][T18600] vhci_hcd: release socket
[  847.156655][T18600] vhci_hcd: disconnect device
[  847.388329][T24501] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  847.390637][T24501] batman_adv: batadv0: Removing interface: batadv_slave_0
[  847.413568][T24501] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  847.416644][T24501] batman_adv: batadv0: Removing interface: batadv_slave_1
[  847.543529][   T29] usb usb40-port1: unable to enumerate USB device
[  847.673186][ T6003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  848.923705][T24083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  848.952909][ T6003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  849.041724][T24524] random: crng reseeded on system resumption
[  849.059883][T24521] veth1_to_bond: entered allmulticast mode
[  849.100127][T24520] veth1_to_bond: left allmulticast mode
[  849.273111][ T1022] usb 42-1: device descriptor read/8, error -110
[  849.469630][T24083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  849.539696][T24541] trusted_key: encrypted_key: insufficient parameters specified
[  849.751287][ T1022] usb usb42-port1: attempt power cycle
[  850.005785][   T24] usb 9-1: USB disconnect, device number 22
[  850.254789][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  850.484639][T24548] mkiss: ax0: crc mode is auto.
[  850.503361][ T1022] usb usb42-port1: unable to enumerate USB device
[  850.603882][T24549] random: crng reseeded on system resumption
[  850.674809][T24545] veth1_to_bond: entered allmulticast mode
[  850.704757][T24551] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5294'.
[  850.736440][T24544] veth1_to_bond: left allmulticast mode
[  850.832196][T24556] random: crng reseeded on system resumption
[  850.843032][   T73] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[  850.921086][ T1022] libceph: connect (1)[c::]:6789 error -101
[  850.923308][ T1022] libceph: mon0 (1)[c::]:6789 connect error
[  851.022372][   T73] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  851.035447][T24565] dlm: no local IP address has been set
[  851.037475][T24565] dlm: cannot start dlm midcomms -107
[  851.038289][   T73] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  851.047244][T24553] veth1_to_bond: entered allmulticast mode
[  851.053657][   T73] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  851.074359][   T73] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  851.087387][   T73] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  851.183001][ T1022] libceph: connect (1)[c::]:6789 error -101
[  851.185101][ T1022] libceph: mon0 (1)[c::]:6789 connect error
[  851.198657][   T73] usb 9-1: config 0 descriptor??
[  851.272942][ T6003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  851.541714][T24555] ceph: No mds server is up or the cluster is laggy
[  851.558319][T24553] veth1_to_bond: left allmulticast mode
[  851.702785][T24572] binder: 24570:24572 ioctl c0306201 800001c0 returned -14
[  851.818898][   T73] plantronics 0003:047F:FFFF.0020: reserved main item tag 0xd
[  851.869179][   T73] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  851.985321][T24582] trusted_key: encrypted_key: insufficient parameters specified
[  852.003756][ T6005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  852.313195][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  852.358752][   T24] usb 9-1: USB disconnect, device number 23
[  853.144315][T24599] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  853.352914][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  854.394779][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  854.972885][T24630] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  854.974945][T24630] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  854.978011][T24630] vhci_hcd vhci_hcd.0: Device attached
[  855.022754][T20300] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  855.042966][ T6005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  855.238092][T24631] vhci_hcd: connection closed
[  855.238341][T18603] vhci_hcd: stop threads
[  855.241122][T18603] vhci_hcd: release socket
[  855.242576][T18603] vhci_hcd: disconnect device
[  855.262826][   T29] usb 42-1: enqueue for inactive port 0
[  855.288869][T20300] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  855.297970][T20300] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  855.305081][T20300] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  855.312852][T20300] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  855.320047][T20300] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  855.412110][T20300] usb 6-1: config 0 descriptor??
[  855.472192][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  855.697536][T24642] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  855.753425][   T29] usb usb42-port1: attempt power cycle
[  855.911624][T20300] plantronics 0003:047F:FFFF.0021: reserved main item tag 0xd
[  856.347484][T20300] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  856.373415][   T29] usb usb42-port1: unable to enumerate USB device
[  856.479348][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  856.633340][T24659] FAULT_INJECTION: forcing a failure.
[  856.633340][T24659] name failslab, interval 1, probability 0, space 0, times 0
[  856.637324][T24659] CPU: 1 UID: 0 PID: 24659 Comm: syz.4.5324 Not tainted syzkaller #0 PREEMPT(full) 
[  856.637339][T24659] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  856.637346][T24659] Call Trace:
[  856.637350][T24659]  <TASK>
[  856.637355][T24659]  dump_stack_lvl+0x16c/0x1f0
[  856.637374][T24659]  should_fail_ex+0x512/0x640
[  856.637395][T24659]  should_failslab+0xc2/0x120
[  856.637411][T24659]  __kmalloc_cache_noprof+0x72/0x780
[  856.637423][T24659]  ? __hw_addr_add_ex+0x3c9/0x7c0
[  856.637441][T24659]  ? __hw_addr_add_ex+0x3c9/0x7c0
[  856.637455][T24659]  ? find_held_lock+0x2b/0x80
[  856.637466][T24659]  __hw_addr_add_ex+0x3c9/0x7c0
[  856.637484][T24659]  ? __pfx___hw_addr_add_ex+0x10/0x10
[  856.637499][T24659]  ? __mutex_unlock_slowpath+0x161/0x7b0
[  856.637518][T24659]  ? __pfx_br_dev_setup+0x10/0x10
[  856.637534][T24659]  dev_addr_init+0x161/0x250
[  856.637551][T24659]  ? __pfx_dev_addr_init+0x10/0x10
[  856.637572][T24659]  alloc_netdev_mqs+0x363/0x1550
[  856.637588][T24659]  br_add_bridge+0x33/0xf0
[  856.637615][T24659]  old_deviceless+0x62c/0x700
[  856.637628][T24659]  ? __pfx___mutex_lock+0x10/0x10
[  856.637643][T24659]  ? __pfx_old_deviceless+0x10/0x10
[  856.637656][T24659]  ? __pfx___mutex_trylock_common+0x10/0x10
[  856.637676][T24659]  ? rcu_is_watching+0x12/0xc0
[  856.637688][T24659]  ? trace_contention_end+0xdd/0x130
[  856.637707][T24659]  br_ioctl_stub+0x3e8/0x4c0
[  856.637721][T24659]  ? __pfx_br_ioctl_stub+0x10/0x10
[  856.637734][T24659]  ? __pfx___mutex_lock+0x10/0x10
[  856.637757][T24659]  ? __pfx_br_ioctl_stub+0x10/0x10
[  856.637771][T24659]  br_ioctl_call+0x53/0xa0
[  856.637793][T24659]  sock_ioctl+0x365/0x6b0
[  856.637816][T24659]  ? __pfx_sock_ioctl+0x10/0x10
[  856.637845][T24659]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  856.637878][T24659]  ? do_vfs_ioctl+0x128/0x14f0
[  856.637905][T24659]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  856.637933][T24659]  compat_sock_ioctl+0x4e3/0x730
[  856.637960][T24659]  ? __pfx_compat_sock_ioctl+0x10/0x10
[  856.637975][T24659]  ? hook_file_ioctl_common+0x145/0x410
[  856.637991][T24659]  ? __fget_files+0x20e/0x3c0
[  856.638007][T24659]  ? __pfx_compat_sock_ioctl+0x10/0x10
[  856.638022][T24659]  __ia32_compat_sys_ioctl+0x242/0x370
[  856.638041][T24659]  __do_fast_syscall_32+0x7c/0x300
[  856.638058][T24659]  do_fast_syscall_32+0x32/0x80
[  856.638073][T24659]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  856.638088][T24659] RIP: 0023:0xf7f13579
[  856.638097][T24659] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  856.638108][T24659] RSP: 002b:00000000f540655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  856.638119][T24659] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008940
[  856.638126][T24659] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000
[  856.638133][T24659] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  856.638139][T24659] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  856.638145][T24659] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  856.638160][T24659]  </TASK>
[  856.736996][ T6925] usb 6-1: USB disconnect, device number 28
[  856.812185][T24661] 9pnet: Unknown protocol version 9ÍŽ000.u'ûÚI
[  856.851932][T24663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5326'.
[  857.525470][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  858.072969][ T6005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  858.589120][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  858.704121][T24703] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  858.706682][T24703] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  858.718107][T24703] vhci_hcd vhci_hcd.0: Device attached
[  858.872843][T24150] Bluetooth: hci2: command 0x1003 tx timeout
[  858.876513][T13025] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  859.036627][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  859.047979][T24704] vhci_hcd: connection closed
[  859.050117][T18599] vhci_hcd: stop threads
[  859.053511][T18599] vhci_hcd: release socket
[  859.055503][T18599] vhci_hcd: disconnect device
[  859.512009][T24715] No control pipe specified
[  859.595208][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  860.643388][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  861.073047][T24747] FAULT_INJECTION: forcing a failure.
[  861.073047][T24747] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  861.080765][T24747] CPU: 2 UID: 0 PID: 24747 Comm: syz.1.5352 Not tainted syzkaller #0 PREEMPT(full) 
[  861.080805][T24747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  861.080812][T24747] Call Trace:
[  861.080818][T24747]  <TASK>
[  861.080823][T24747]  dump_stack_lvl+0x16c/0x1f0
[  861.080842][T24747]  should_fail_ex+0x512/0x640
[  861.080862][T24747]  _copy_to_user+0x32/0xd0
[  861.080875][T24747]  bpf_test_finish.isra.0+0x4b4/0x6e0
[  861.080895][T24747]  ? __pfx___static_call_update+0x10/0x10
[  861.080910][T24747]  ? __pfx_bpf_test_finish.isra.0+0x10/0x10
[  861.080932][T24747]  ? 0xffffffffa0205f80
[  861.080940][T24747]  ? bpf_dispatcher_change_prog+0x54d/0xa80
[  861.080960][T24747]  bpf_prog_test_run_xdp+0xb63/0x1660
[  861.080977][T24747]  ? __fget_files+0x204/0x3c0
[  861.080990][T24747]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  861.081002][T24747]  ? __might_fault+0x70/0x190
[  861.081017][T24747]  ? fput+0x9b/0xd0
[  861.081032][T24747]  ? __bpf_prog_get+0x97/0x2a0
[  861.081048][T24747]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  861.081059][T24747]  __sys_bpf+0x1035/0x4980
[  861.081074][T24747]  ? __pfx___sys_bpf+0x10/0x10
[  861.081085][T24747]  ? find_held_lock+0x2b/0x80
[  861.081106][T24747]  ? find_held_lock+0x2b/0x80
[  861.081122][T24747]  ? __mutex_unlock_slowpath+0x161/0x7b0
[  861.081146][T24747]  ? fput+0x9b/0xd0
[  861.081161][T24747]  ? ksys_write+0x1ac/0x250
[  861.081173][T24747]  ? __pfx_ksys_write+0x10/0x10
[  861.081188][T24747]  __ia32_sys_bpf+0x76/0xe0
[  861.081201][T24747]  __do_fast_syscall_32+0x7c/0x300
[  861.081219][T24747]  do_fast_syscall_32+0x32/0x80
[  861.081234][T24747]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  861.081248][T24747] RIP: 0023:0xf707d579
[  861.081256][T24747] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  861.081268][T24747] RSP: 002b:00000000f546d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165
[  861.081279][T24747] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000600
[  861.081286][T24747] RDX: 000000000000004c RSI: 0000000000000000 RDI: 0000000000000000
[  861.081292][T24747] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  861.081298][T24747] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  861.081305][T24747] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  861.081319][T24747]  </TASK>
[  861.115014][T14782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  861.171665][T24749] vlan2: entered promiscuous mode
[  861.173929][T24749] macvtap0: entered promiscuous mode
[  861.229277][T24756] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  861.231462][T24756] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  861.239226][T24756] vhci_hcd vhci_hcd.0: Device attached
[  861.254920][T24756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  861.257976][T24756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  861.261410][T24756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  861.312894][T24755] macvlan0: entered promiscuous mode
[  861.326968][T24755] netlink: 'syz.1.5354': attribute type 1 has an invalid length.
[  861.330688][T24755] netlink: 'syz.1.5354': attribute type 2 has an invalid length.
[  861.339061][T24737] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10)
[  861.341724][T24737] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  861.347713][T24737] vhci_hcd vhci_hcd.0: Device attached
[  861.359800][T24761] usbip_core: unknown command
[  861.361501][T24761] vhci_hcd: unknown pdu 0
[  861.376790][T24761] usbip_core: unknown command
[  861.383228][T18603] vhci_hcd: stop threads
[  861.384806][T18603] vhci_hcd: release socket
[  861.386422][T18603] vhci_hcd: disconnect device
[  861.502789][   T29] usb 46-1: SetAddress Request (59) to port 0
[  861.504820][   T29] usb 46-1: new SuperSpeed USB device number 59 using vhci_hcd
[  861.830565][T24757] vhci_hcd: connection reset by peer
[  861.832600][T18599] vhci_hcd: stop threads
[  861.834237][T18599] vhci_hcd: release socket
[  861.835778][T18599] vhci_hcd: disconnect device
[  862.251683][T24774] FAULT_INJECTION: forcing a failure.
[  862.251683][T24774] name failslab, interval 1, probability 0, space 0, times 0
[  862.256780][T24774] CPU: 2 UID: 0 PID: 24774 Comm: syz.1.5358 Not tainted syzkaller #0 PREEMPT(full) 
[  862.256798][T24774] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  862.256805][T24774] Call Trace:
[  862.256810][T24774]  <TASK>
[  862.256814][T24774]  dump_stack_lvl+0x16c/0x1f0
[  862.256832][T24774]  should_fail_ex+0x512/0x640
[  862.256850][T24774]  ? __kmalloc_noprof+0xca/0x880
[  862.256870][T24774]  should_failslab+0xc2/0x120
[  862.256886][T24774]  __kmalloc_noprof+0xdd/0x880
[  862.256903][T24774]  ? __might_fault+0x13b/0x190
[  862.256914][T24774]  ? sk_prot_alloc+0x1a8/0x2a0
[  862.256931][T24774]  ? sk_prot_alloc+0x1a8/0x2a0
[  862.256944][T24774]  sk_prot_alloc+0x1a8/0x2a0
[  862.256960][T24774]  sk_alloc+0x36/0xc20
[  862.256978][T24774]  bpf_prog_test_run_skb+0x34c/0x2290
[  862.256992][T24774]  ? __fget_files+0x204/0x3c0
[  862.257006][T24774]  ? __fget_files+0x20e/0x3c0
[  862.257017][T24774]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  862.257031][T24774]  ? fput+0x9b/0xd0
[  862.257048][T24774]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  862.257072][T24774]  __sys_bpf+0x1035/0x4980
[  862.257087][T24774]  ? __pfx___sys_bpf+0x10/0x10
[  862.257098][T24774]  ? find_held_lock+0x2b/0x80
[  862.257113][T24774]  ? find_held_lock+0x2b/0x80
[  862.257131][T24774]  ? __mutex_unlock_slowpath+0x161/0x7b0
[  862.257157][T24774]  ? fput+0x9b/0xd0
[  862.257172][T24774]  ? ksys_write+0x1ac/0x250
[  862.257184][T24774]  ? __pfx_ksys_write+0x10/0x10
[  862.257199][T24774]  __ia32_sys_bpf+0x76/0xe0
[  862.257212][T24774]  __do_fast_syscall_32+0x7c/0x300
[  862.257229][T24774]  do_fast_syscall_32+0x32/0x80
[  862.257244][T24774]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  862.257258][T24774] RIP: 0023:0xf707d579
[  862.257267][T24774] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  862.257278][T24774] RSP: 002b:00000000f546d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165
[  862.257290][T24774] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000600
[  862.257297][T24774] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000
[  862.257303][T24774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  862.257309][T24774] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  862.257316][T24774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  862.257330][T24774]  </TASK>
[  862.340322][T14782] IPVS: starting estimator thread 0...
[  862.453253][T24776] IPVS: using max 45 ests per chain, 108000 per kthread
[  862.713005][   T73] net_ratelimit: 3 callbacks suppressed
[  862.713019][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  863.673248][T23371] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[  863.753609][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  864.153821][T24083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  864.228674][T24835] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5377'.
[  864.232206][T24835] netlink: 8172 bytes leftover after parsing attributes in process `syz.2.5377'.
[  864.251479][T24835] netlink: 'syz.2.5377': attribute type 1 has an invalid length.
[  864.443029][T23371] usb 9-1: Using ep0 maxpacket: 8
[  864.446156][T23371] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  864.448839][T23371] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  864.452186][T23371] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  864.456637][T23371] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  864.460979][T23371] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  864.466617][T23371] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  864.469945][T23371] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  864.620409][T24844] FAULT_INJECTION: forcing a failure.
[  864.620409][T24844] name failslab, interval 1, probability 0, space 0, times 0
[  864.626045][T24844] CPU: 2 UID: 0 PID: 24844 Comm: syz.1.5380 Not tainted syzkaller #0 PREEMPT(full) 
[  864.626068][T24844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  864.626078][T24844] Call Trace:
[  864.626085][T24844]  <TASK>
[  864.626093][T24844]  dump_stack_lvl+0x16c/0x1f0
[  864.626117][T24844]  should_fail_ex+0x512/0x640
[  864.626145][T24844]  should_failslab+0xc2/0x120
[  864.626167][T24844]  kmem_cache_alloc_noprof+0x75/0x6e0
[  864.626185][T24844]  ? radix_tree_node_alloc.constprop.0+0x7c/0x350
[  864.626207][T24844]  ? radix_tree_node_alloc.constprop.0+0x7c/0x350
[  864.626222][T24844]  radix_tree_node_alloc.constprop.0+0x7c/0x350
[  864.626242][T24844]  idr_get_free+0x528/0xa30
[  864.626268][T24844]  idr_alloc_u32+0x190/0x2f0
[  864.626288][T24844]  ? __pfx_idr_alloc_u32+0x10/0x10
[  864.626309][T24844]  ? lock_acquire+0x179/0x350
[  864.626335][T24844]  idr_alloc_cyclic+0x10b/0x230
[  864.626355][T24844]  ? __pfx_idr_alloc_cyclic+0x10/0x10
[  864.626372][T24844]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  864.626402][T24844]  bpf_link_prime+0x6e/0x290
[  864.626421][T24844]  bpf_raw_tp_link_attach+0x2ad/0x630
[  864.626439][T24844]  ? __pfx_bpf_raw_tp_link_attach+0x10/0x10
[  864.626455][T24844]  ? find_held_lock+0x2b/0x80
[  864.626472][T24844]  ? __fget_files+0x204/0x3c0
[  864.626499][T24844]  ? fput+0x9b/0xd0
[  864.626521][T24844]  ? __bpf_prog_get+0x97/0x2a0
[  864.626544][T24844]  __sys_bpf+0x20c1/0x4980
[  864.626565][T24844]  ? __pfx___sys_bpf+0x10/0x10
[  864.626581][T24844]  ? find_held_lock+0x2b/0x80
[  864.626610][T24844]  ? find_held_lock+0x2b/0x80
[  864.626633][T24844]  ? __mutex_unlock_slowpath+0x161/0x7b0
[  864.626670][T24844]  ? fput+0x9b/0xd0
[  864.626691][T24844]  ? ksys_write+0x1ac/0x250
[  864.626708][T24844]  ? __pfx_ksys_write+0x10/0x10
[  864.626730][T24844]  __ia32_sys_bpf+0x76/0xe0
[  864.626749][T24844]  __do_fast_syscall_32+0x7c/0x300
[  864.626772][T24844]  do_fast_syscall_32+0x32/0x80
[  864.626792][T24844]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  864.626813][T24844] RIP: 0023:0xf707d579
[  864.626826][T24844] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  864.626841][T24844] RSP: 002b:00000000f546d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165
[  864.626858][T24844] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000080000480
[  864.626868][T24844] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000
[  864.626878][T24844] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  864.626888][T24844] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  864.626897][T24844] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  864.626920][T24844]  </TASK>
[  864.695363][T23371] usb 9-1: usb_control_msg returned -32
[  864.795290][T23371] usbtmc 9-1:16.0: can't read capabilities
[  864.797005][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  865.842995][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  866.415261][T24876] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  866.418107][T24876] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  866.423705][T24876] vhci_hcd vhci_hcd.0: Device attached
[  866.427996][T24878] usbip_core: unknown command
[  866.430049][T24878] vhci_hcd: unknown pdu 0
[  866.431970][T24878] usbip_core: unknown command
[  866.434690][T18601] vhci_hcd: stop threads
[  866.437849][T18601] vhci_hcd: release socket
[  866.441156][T18601] vhci_hcd: disconnect device
[  866.552961][   T29] usb 46-1: device descriptor read/8, error -110
[  866.610623][T24884] FAULT_INJECTION: forcing a failure.
[  866.610623][T24884] name failslab, interval 1, probability 0, space 0, times 0
[  866.615948][T24884] CPU: 0 UID: 0 PID: 24884 Comm: syz.3.5393 Not tainted syzkaller #0 PREEMPT(full) 
[  866.615973][T24884] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  866.615985][T24884] Call Trace:
[  866.615992][T24884]  <TASK>
[  866.615999][T24884]  dump_stack_lvl+0x16c/0x1f0
[  866.616026][T24884]  should_fail_ex+0x512/0x640
[  866.616051][T24884]  ? kmem_cache_alloc_node_noprof+0x65/0x770
[  866.616073][T24884]  should_failslab+0xc2/0x120
[  866.616097][T24884]  kmem_cache_alloc_node_noprof+0x78/0x770
[  866.616115][T24884]  ? __alloc_skb+0x2b2/0x380
[  866.616147][T24884]  ? __alloc_skb+0x2b2/0x380
[  866.616171][T24884]  ? __pfx_netlink_insert+0x10/0x10
[  866.616189][T24884]  __alloc_skb+0x2b2/0x380
[  866.616215][T24884]  ? __pfx___alloc_skb+0x10/0x10
[  866.616243][T24884]  ? netlink_autobind.isra.0+0x158/0x370
[  866.616268][T24884]  netlink_alloc_large_skb+0x69/0x140
[  866.616289][T24884]  netlink_sendmsg+0x698/0xdd0
[  866.616311][T24884]  ? __pfx_netlink_sendmsg+0x10/0x10
[  866.616333][T24884]  ? aa_sock_msg_perm.constprop.0+0x100/0x1d0
[  866.616363][T24884]  ____sys_sendmsg+0xa98/0xc70
[  866.616388][T24884]  ? __pfx_____sys_sendmsg+0x10/0x10
[  866.616409][T24884]  ? get_compat_msghdr+0x11a/0x170
[  866.616437][T24884]  ___sys_sendmsg+0x134/0x1d0
[  866.616456][T24884]  ? __pfx____sys_sendmsg+0x10/0x10
[  866.616485][T24884]  ? find_held_lock+0x2b/0x80
[  866.616520][T24884]  __sys_sendmsg+0x16d/0x220
[  866.616538][T24884]  ? __pfx___sys_sendmsg+0x10/0x10
[  866.616566][T24884]  ? rcu_is_watching+0x12/0xc0
[  866.616589][T24884]  __do_fast_syscall_32+0x7c/0x300
[  866.616613][T24884]  do_fast_syscall_32+0x32/0x80
[  866.616636][T24884]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  866.616658][T24884] RIP: 0023:0xf70bd579
[  866.616671][T24884] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  866.616688][T24884] RSP: 002b:00000000f54ad55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  866.616705][T24884] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040
[  866.616716][T24884] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  866.616746][T24884] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  866.616757][T24884] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  866.616767][T24884] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  866.616791][T24884]  </TASK>
[  866.703053][    C0] vkms_vblank_simulate: vblank timer overrun
[  866.873070][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  866.943722][   T29] usb usb46-port1: attempt power cycle
[  867.193167][ T6005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  867.312897][T14782] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[  867.464282][T14782] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  867.467896][T14782] usb 7-1: config 0 has no interfaces?
[  867.470952][T14782] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  867.474869][T14782] usb 7-1: config 0 has no interfaces?
[  867.477450][T14782] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  867.480739][T14782] usb 7-1: config 0 has no interfaces?
[  867.484614][T14782] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[  867.487492][T14782] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[  867.490060][T14782] usb 7-1: Product: syz
[  867.491380][T14782] usb 7-1: Manufacturer: syz
[  867.492955][T14782] usb 7-1: SerialNumber: syz
[  867.495628][T14782] usb 7-1: config 0 descriptor??
[  867.523840][   T29] usb usb46-port1: unable to enumerate USB device
[  867.881048][T20300] usb 7-1: USB disconnect, device number 31
[  867.912961][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  868.422193][T24898] FAULT_INJECTION: forcing a failure.
[  868.422193][T24898] name failslab, interval 1, probability 0, space 0, times 0
[  868.426335][T24898] CPU: 2 UID: 0 PID: 24898 Comm: syz.2.5398 Not tainted syzkaller #0 PREEMPT(full) 
[  868.426351][T24898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  868.426358][T24898] Call Trace:
[  868.426362][T24898]  <TASK>
[  868.426367][T24898]  dump_stack_lvl+0x16c/0x1f0
[  868.426397][T24898]  should_fail_ex+0x512/0x640
[  868.426427][T24898]  ? __kmalloc_noprof+0xca/0x880
[  868.426447][T24898]  should_failslab+0xc2/0x120
[  868.426464][T24898]  __kmalloc_noprof+0xdd/0x880
[  868.426481][T24898]  ? __might_fault+0x13b/0x190
[  868.426493][T24898]  ? sk_prot_alloc+0x1a8/0x2a0
[  868.426510][T24898]  ? sk_prot_alloc+0x1a8/0x2a0
[  868.426523][T24898]  sk_prot_alloc+0x1a8/0x2a0
[  868.426538][T24898]  sk_alloc+0x36/0xc20
[  868.426556][T24898]  bpf_prog_test_run_skb+0x34c/0x2290
[  868.426570][T24898]  ? __fget_files+0x204/0x3c0
[  868.426585][T24898]  ? __fget_files+0x20e/0x3c0
[  868.426595][T24898]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  868.426612][T24898]  ? fput+0x9b/0xd0
[  868.426629][T24898]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  868.426640][T24898]  __sys_bpf+0x1035/0x4980
[  868.426656][T24898]  ? __pfx___sys_bpf+0x10/0x10
[  868.426667][T24898]  ? find_held_lock+0x2b/0x80
[  868.426683][T24898]  ? find_held_lock+0x2b/0x80
[  868.426698][T24898]  ? __mutex_unlock_slowpath+0x161/0x7b0
[  868.426723][T24898]  ? fput+0x9b/0xd0
[  868.426738][T24898]  ? ksys_write+0x1ac/0x250
[  868.426750][T24898]  ? __pfx_ksys_write+0x10/0x10
[  868.426765][T24898]  __ia32_sys_bpf+0x76/0xe0
[  868.426777][T24898]  __do_fast_syscall_32+0x7c/0x300
[  868.426794][T24898]  do_fast_syscall_32+0x32/0x80
[  868.426809][T24898]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  868.426823][T24898] RIP: 0023:0xf7f22579
[  868.426832][T24898] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  868.426843][T24898] RSP: 002b:00000000f541655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165
[  868.426854][T24898] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800002c0
[  868.426861][T24898] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000
[  868.426867][T24898] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  868.426874][T24898] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  868.426880][T24898] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  868.426895][T24898]  </TASK>
[  868.643891][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  868.953040][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  869.925115][T14782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  869.993180][T24006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  870.003477][   T73] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  870.154287][T24859] usbtmc 9-1:16.0: usb_control_msg returned -110
[  870.358216][T14782] usb 9-1: USB disconnect, device number 24
[  870.385591][T24924] netlink: 'syz.4.5404': attribute type 1 has an invalid length.
[  870.404372][T24924] bond1: entered promiscuous mode
[  870.406020][T24924] bond1: entered allmulticast mode
[  870.407995][T24924] 8021q: adding VLAN 0 to HW filter on device bond1
[  870.452045][T24924] erspan1: entered allmulticast mode
[  870.457439][T24924] bond1: (slave erspan1): making interface the new active one
[  870.460577][T24924] erspan1: entered promiscuous mode
[  870.464120][T24924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  870.468278][T24924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  870.471968][T24924] bond1: (slave erspan1): Enslaving as an active interface with an up link
[  870.484433][T18597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  870.514112][ T6004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  870.665620][   T73] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  870.668646][   T73] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  870.671173][   T73] usb 7-1: Product: syz
[  870.672501][   T73] usb 7-1: Manufacturer: syz
[  870.674349][   T73] usb 7-1: SerialNumber: syz
[  870.683204][   T73] usb 7-1: config 0 descriptor??
[  870.766277][T18597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  870.876727][T24928] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  870.878811][T24928] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  870.881403][T24928] vhci_hcd vhci_hcd.0: Device attached
[  870.885636][T24929] usbip_core: unknown command
[  870.887222][T24929] vhci_hcd: unknown pdu 0
[  870.888638][T24929] usbip_core: unknown command
[  870.892074][T18601] vhci_hcd: stop threads
[  870.893893][T18601] vhci_hcd: release socket
[  870.895565][T18601] vhci_hcd: disconnect device
[  870.907212][   T73] usb 7-1: Firmware version (0.0) predates our first public release.
[  870.945292][   T73] usb 7-1: Please update to version 0.2 or newer
[  871.018776][   T73] usb 7-1: USB disconnect, device number 32
[  871.185387][T24940] 9pnet_fd: Insufficient options for proto=fd
[  871.504096][T24945] FAULT_INJECTION: forcing a failure.
[  871.504096][T24945] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  871.508316][T24945] CPU: 2 UID: 0 PID: 24945 Comm: syz.3.5410 Not tainted syzkaller #0 PREEMPT(full) 
[  871.508333][T24945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  871.508339][T24945] Call Trace:
[  871.508345][T24945]  <TASK>
[  871.508351][T24945]  dump_stack_lvl+0x16c/0x1f0
[  871.508369][T24945]  should_fail_ex+0x512/0x640
[  871.508390][T24945]  __kvm_read_guest_page+0x186/0x250
[  871.508408][T24945]  kvm_fetch_guest_virt+0x128/0x1a0
[  871.508425][T24945]  __do_insn_fetch_bytes+0x4fa/0x720
[  871.508442][T24945]  ? __pfx___do_insn_fetch_bytes+0x10/0x10
[  871.508456][T24945]  ? __lock_acquire+0xb8a/0x1c90
[  871.508473][T24945]  ? __pfx_kvm_tdp_mmu_map+0x10/0x10
[  871.508493][T24945]  x86_decode_insn+0xbbb/0x5a70
[  871.508514][T24945]  ? do_raw_read_unlock+0x44/0xe0
[  871.508536][T24945]  ? __pfx_x86_decode_insn+0x10/0x10
[  871.508552][T24945]  ? vmx_cache_reg+0x333/0x5e0
[  871.508569][T24945]  ? kvm_register_read_raw+0xe9/0x240
[  871.508581][T24945]  ? init_decode_cache+0xd/0x210
[  871.508596][T24945]  ? init_emulate_ctxt+0x337/0x510
[  871.508609][T24945]  ? __pfx_init_emulate_ctxt+0x10/0x10
[  871.508624][T24945]  ? rcu_is_watching+0x12/0xc0
[  871.508639][T24945]  x86_emulate_instruction+0xa43/0x1b00
[  871.508650][T24945]  ? kvm_mmu_page_fault+0x2d1/0x1cb0
[  871.508670][T24945]  ? is_bpf_text_address+0x94/0x1a0
[  871.508717][T24945]  handle_ud+0x103/0x280
[  871.508728][T24945]  ? __pfx_handle_ud+0x10/0x10
[  871.508737][T24945]  ? rcu_note_context_switch+0x192/0x1e00
[  871.508750][T24945]  ? __lock_acquire+0xb8a/0x1c90
[  871.508767][T24945]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  871.508788][T24945]  handle_exception_nmi+0x856/0x1750
[  871.508803][T24945]  ? __pfx_handle_exception_nmi+0x10/0x10
[  871.508815][T24945]  vmx_handle_exit+0x14bf/0x1c00
[  871.508830][T24945]  vcpu_run+0x33e1/0x54d0
[  871.508849][T24945]  ? __pfx_vcpu_run+0x10/0x10
[  871.508868][T24945]  ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1920
[  871.508879][T24945]  kvm_arch_vcpu_ioctl_run+0xfd3/0x1920
[  871.508896][T24945]  kvm_vcpu_ioctl+0x5eb/0x1690
[  871.508914][T24945]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  871.508930][T24945]  ? tomoyo_path_number_perm+0x18d/0x580
[  871.508947][T24945]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  871.508964][T24945]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  871.508984][T24945]  ? do_vfs_ioctl+0x128/0x14f0
[  871.509001][T24945]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  871.509025][T24945]  kvm_vcpu_compat_ioctl+0x20f/0x3d0
[  871.509041][T24945]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  871.509058][T24945]  ? __fget_files+0x20e/0x3c0
[  871.509072][T24945]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  871.509089][T24945]  __ia32_compat_sys_ioctl+0x242/0x370
[  871.509108][T24945]  __do_fast_syscall_32+0x7c/0x300
[  871.509125][T24945]  do_fast_syscall_32+0x32/0x80
[  871.509140][T24945]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  871.509155][T24945] RIP: 0023:0xf70bd579
[  871.509164][T24945] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  871.509176][T24945] RSP: 002b:00000000f54ad55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  871.509186][T24945] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80
[  871.509193][T24945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  871.509200][T24945] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  871.509206][T24945] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  871.509212][T24945] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  871.509228][T24945]  </TASK>
[  871.675058][T14782] IPVS: starting estimator thread 0...
[  871.762871][T24953] IPVS: using max 44 ests per chain, 105600 per kthread
[  871.950716][T24959] netlink: 'syz.3.5414': attribute type 3 has an invalid length.
[  872.061462][T24962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5412'.
[  872.064423][T24962] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5412'.
[  872.075005][T24964] sctp: [Deprecated]: syz.3.5415 (pid 24964) Use of int in maxseg socket option.
[  872.075005][T24964] Use struct sctp_assoc_value instead
[  872.080446][T24962] batadv1: entered allmulticast mode
[  872.136359][T24964] netlink: 'syz.3.5415': attribute type 1 has an invalid length.
[  872.156574][T24964] 8021q: adding VLAN 0 to HW filter on device bond4
[  872.484038][T24977] syzkaller0: entered promiscuous mode
[  872.485891][T24977] syzkaller0: entered allmulticast mode
[  873.113610][T18601] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  873.616185][T24991] No control pipe specified
[  873.633505][T24984] No control pipe specified
[  874.005140][T25017] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  874.095683][T25021] FAULT_INJECTION: forcing a failure.
[  874.095683][T25021] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  874.100014][T25021] CPU: 0 UID: 0 PID: 25021 Comm: syz.3.5429 Not tainted syzkaller #0 PREEMPT(full) 
[  874.100031][T25021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  874.100038][T25021] Call Trace:
[  874.100043][T25021]  <TASK>
[  874.100047][T25021]  dump_stack_lvl+0x16c/0x1f0
[  874.100066][T25021]  should_fail_ex+0x512/0x640
[  874.100086][T25021]  _copy_from_iter+0x29f/0x1720
[  874.100106][T25021]  ? __alloc_skb+0x200/0x380
[  874.100126][T25021]  ? __pfx__copy_from_iter+0x10/0x10
[  874.100144][T25021]  ? netlink_autobind.isra.0+0x158/0x370
[  874.100163][T25021]  netlink_sendmsg+0x820/0xdd0
[  874.100178][T25021]  ? __pfx_netlink_sendmsg+0x10/0x10
[  874.100193][T25021]  ? aa_sock_msg_perm.constprop.0+0x100/0x1d0
[  874.100213][T25021]  ____sys_sendmsg+0xa98/0xc70
[  874.100229][T25021]  ? __pfx_____sys_sendmsg+0x10/0x10
[  874.100243][T25021]  ? get_compat_msghdr+0x11a/0x170
[  874.100261][T25021]  ___sys_sendmsg+0x134/0x1d0
[  874.100273][T25021]  ? __pfx____sys_sendmsg+0x10/0x10
[  874.100292][T25021]  ? find_held_lock+0x2b/0x80
[  874.100314][T25021]  __sys_sendmsg+0x16d/0x220
[  874.100326][T25021]  ? __pfx___sys_sendmsg+0x10/0x10
[  874.100344][T25021]  ? rcu_is_watching+0x12/0xc0
[  874.100358][T25021]  __do_fast_syscall_32+0x7c/0x300
[  874.100375][T25021]  do_fast_syscall_32+0x32/0x80
[  874.100390][T25021]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  874.100404][T25021] RIP: 0023:0xf70bd579
[  874.100413][T25021] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  874.100425][T25021] RSP: 002b:00000000f54ad55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  874.100436][T25021] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100
[  874.100443][T25021] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  874.100449][T25021] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  874.100455][T25021] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  874.100461][T25021] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  874.100476][T25021]  </TASK>
[  874.172579][    C0] vkms_vblank_simulate: vblank timer overrun
[  874.786837][T25035] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  874.789276][T25035] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  874.791942][T25035] vhci_hcd vhci_hcd.0: Device attached
[  874.795546][T25036] usbip_core: unknown command
[  874.797092][T25036] vhci_hcd: unknown pdu 0
[  874.798441][T25036] usbip_core: unknown command
[  874.800458][T18603] vhci_hcd: stop threads
[  874.802290][T18603] vhci_hcd: release socket
[  874.804120][T18603] vhci_hcd: disconnect device
[  875.014064][T25046] No control pipe specified
[  875.102063][T25048] trusted_key: encrypted_key: insufficient parameters specified
[  875.576235][T25050] fuse: Unknown parameter 'fà'
[  876.202986][   T73] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  876.362872][   T73] usb 6-1: Using ep0 maxpacket: 16
[  876.370447][   T73] usb 6-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[  876.377324][   T73] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9
[  876.380859][   T73] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8256, setting to 1024
[  876.387280][   T73] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  876.401341][   T73] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  876.405345][   T73] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  876.408255][   T73] usb 6-1: SerialNumber: syz
[  876.437478][   T73] hub 6-1:1.0: bad descriptor, ignoring hub
[  876.445632][   T73] hub 6-1:1.0: probe with driver hub failed with error -5
[  876.460363][   T73] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[  876.743650][   T73] usb 6-1: USB disconnect, device number 29
[  876.755764][   T40] kauditd_printk_skb: 43 callbacks suppressed
[  876.755775][   T40] audit: type=1326 audit(1763870329.845:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25060 comm="syz.4.5437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000
[  876.764960][   T40] audit: type=1326 audit(1763870329.845:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25060 comm="syz.4.5437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000
[  876.771579][   T40] audit: type=1326 audit(1763870329.855:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25060 comm="syz.4.5437" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f13579 code=0x7ffc0000
[  876.778348][   T40] audit: type=1326 audit(1763870329.855:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25060 comm="syz.4.5437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000
[  876.785267][   T40] audit: type=1326 audit(1763870329.855:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25060 comm="syz.4.5437" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f13579 code=0x7ffc0000
[  876.791588][   T40] audit: type=1326 audit(1763870329.855:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25060 comm="syz.4.5437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000
[  876.798542][   T40] audit: type=1326 audit(1763870329.855:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25060 comm="syz.4.5437" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f13579 code=0x7ffc0000
[  876.805630][   T40] audit: type=1326 audit(1763870329.855:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25060 comm="syz.4.5437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000
[  876.812136][   T40] audit: type=1326 audit(1763870329.855:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25060 comm="syz.4.5437" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f13579 code=0x7ffc0000
[  876.832032][T25069] random: crng reseeded on system resumption
[  876.849181][T25063] veth1_to_bond: entered allmulticast mode
[  876.877544][T25062] veth1_to_bond: left allmulticast mode
[  876.882915][   T40] audit: type=1326 audit(1763870329.855:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25060 comm="syz.4.5437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000
[  877.167841][T25080] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5439'.
[  877.214097][T25080] batadv2: entered allmulticast mode
[  877.242354][T25082] input: syz1 as /devices/virtual/input/input36
[  877.424160][T25086] No control pipe specified
[  878.821237][T25111] trusted_key: encrypted_key: insufficient parameters specified
[  879.378423][T25117] random: crng reseeded on system resumption
[  879.389705][T25114] veth1_to_bond: entered allmulticast mode
[  879.459189][T25112] veth1_to_bond: left allmulticast mode
[  879.512625][T25122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5450'.
[  881.118648][T25145] No control pipe specified
[  881.511302][T25149] No control pipe specified
[  881.529110][T25150] trusted_key: encrypted_key: insufficient parameters specified
[  882.405983][T25157] 9pnet_fd: Insufficient options for proto=fd
[  883.563191][T25181] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  883.565276][T25181] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  883.567911][T25181] vhci_hcd vhci_hcd.0: Device attached
[  883.832960][ T6004] usb 40-1: SetAddress Request (119) to port 0
[  883.835201][ T6004] usb 40-1: new SuperSpeed USB device number 119 using vhci_hcd
[  883.949870][T25182] vhci_hcd: connection reset by peer
[  883.952037][T18600] vhci_hcd: stop threads
[  883.982816][T18600] vhci_hcd: release socket
[  883.984349][T18600] vhci_hcd: disconnect device
[  884.264363][T25192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5469'.
[  884.671991][T25199] trusted_key: encrypted_key: insufficient parameters specified
[  885.114181][T25204] net_ratelimit: 8 callbacks suppressed
[  885.114193][T25204] openvswitch: netlink: Missing valid actions attribute.
[  885.119059][T25204] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  885.692545][T25219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5478'.
[  885.996486][T25238] netlink: 'syz.3.5484': attribute type 13 has an invalid length.
[  886.000030][T25238] netlink: 'syz.3.5484': attribute type 17 has an invalid length.
[  886.496986][T25238] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  887.059733][T25249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5487'.
[  887.065074][T25249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5487'.
[  887.069211][T25249] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5487'.
[  887.072649][T25249] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5487'.
[  887.316596][T25246] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  887.645163][T25260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5490'.
[  887.856105][T25271] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  888.506272][T25285] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5496'.
[  888.522542][T25285] batadv1: entered allmulticast mode
[  888.598164][T25286] input: syz1 as /devices/virtual/input/input37
[  888.883424][ T6004] usb 40-1: device descriptor read/8, error -110
[  889.129355][T25289] netlink: 'syz.4.5498': attribute type 11 has an invalid length.
[  889.355479][ T6004] usb usb40-port1: attempt power cycle
[  889.669031][T25308] bridge_slave_0: left allmulticast mode
[  889.671361][T25308] bridge_slave_0: left promiscuous mode
[  889.673877][T25308] bridge0: port 1(bridge_slave_0) entered disabled state
[  889.730464][T25311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5501'.
[  889.764614][T25308] bridge_slave_1: left allmulticast mode
[  889.767353][T25308] bridge_slave_1: left promiscuous mode
[  889.770020][T25308] bridge0: port 2(bridge_slave_1) entered disabled state
[  889.873240][T25308] bond0: (slave bond_slave_0): Releasing backup interface
[  889.915262][ T6004] usb usb40-port1: unable to enumerate USB device
[  889.943321][T25308] bond0: (slave bond_slave_1): Releasing backup interface
[  890.039448][T25308] team0: Port device team_slave_0 removed
[  890.079974][T25308] team0: Port device team_slave_1 removed
[  890.083838][T25308] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  890.086229][T25308] batman_adv: batadv0: Removing interface: batadv_slave_0
[  890.114132][T25308] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  890.116553][T25308] batman_adv: batadv0: Removing interface: batadv_slave_1
[  890.163959][T25308] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  890.169547][T25310] team0: Mode changed to "broadcast"
[  890.177421][T25311] bridge_slave_1: left allmulticast mode
[  890.179411][T25311] bridge_slave_1: left promiscuous mode
[  890.181489][T25311] bridge0: port 2(bridge_slave_1) entered disabled state
[  890.284571][T25311] bridge_slave_0: left allmulticast mode
[  890.286693][T25311] bridge_slave_0: left promiscuous mode
[  890.288828][T25311] bridge0: port 1(bridge_slave_0) entered disabled state
[  890.532980][T25322] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  890.535010][T25322] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  890.537669][T25322] vhci_hcd vhci_hcd.0: Device attached
[  890.653125][T25322] netlink: 'syz.2.5506': attribute type 1 has an invalid length.
[  890.655992][T25322] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5506'.
[  890.659471][T25322] netlink: 'syz.2.5506': attribute type 1 has an invalid length.
[  890.667858][T25322] netlink: 'syz.2.5506': attribute type 2 has an invalid length.
[  890.772306][T25331] overlayfs: failed to clone upperpath
[  890.812874][ T6004] usb 42-1: SetAddress Request (125) to port 0
[  890.815623][ T6004] usb 42-1: new SuperSpeed USB device number 125 using vhci_hcd
[  890.859178][T25336] overlayfs: failed to clone upperpath
[  891.118576][T25323] vhci_hcd: connection reset by peer
[  891.120670][T18604] vhci_hcd: stop threads
[  891.122165][T18604] vhci_hcd: release socket
[  891.124475][T18604] vhci_hcd: disconnect device
[  891.597095][T25343] netlink: 'syz.4.5513': attribute type 7 has an invalid length.
[  891.600445][T25343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5513'.
[  891.625019][T25343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5513'.
[  892.201020][T25365] netlink: 'syz.3.5521': attribute type 16 has an invalid length.
[  892.203956][T25365] netlink: 'syz.3.5521': attribute type 17 has an invalid length.
[  892.253044][T25365] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  892.302326][T25368] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  892.397252][T25370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5522'.
[  893.157656][T25383] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5526'.
[  893.307464][T25392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5529'.
[  893.326778][T25394] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  893.790247][T25406] No control pipe specified
[  894.432071][T25408] kAFS: No cell specified
[  894.544906][T25414] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  895.784505][T25459] No control pipe specified
[  895.912961][ T6004] usb 42-1: device descriptor read/8, error -110
[  895.964989][T25465] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  896.308066][ T6004] usb usb42-port1: attempt power cycle
[  896.787316][T25489] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5560'.
[  896.919882][ T6004] usb usb42-port1: unable to enumerate USB device
[  897.200090][T25499] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  897.203832][T25499] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  897.459490][T25511] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  900.034057][T25551] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  900.505887][T25562] netlink: 'syz.4.5579': attribute type 1 has an invalid length.
[  900.525683][T25562] bond2: entered promiscuous mode
[  900.528235][T25562] 8021q: adding VLAN 0 to HW filter on device bond2
[  900.554792][T25562] 8021q: adding VLAN 0 to HW filter on device bond3
[  900.560055][T25562] bond2: (slave bond3): making interface the new active one
[  900.563428][T25562] bond3: entered promiscuous mode
[  900.566506][T25562] bond2: (slave bond3): Enslaving as an active interface with an up link
[  900.729055][T25573] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  901.004256][T25580] Unknown status report in ack skb
[  902.190031][T25609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5594'.
[  902.225476][T25601] /dev/sr0: Can't open blockdev
[  902.634619][T25620] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  904.790312][T25669] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  904.792930][T25669] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  904.796971][T25669] vhci_hcd vhci_hcd.0: Device attached
[  904.994048][T25674] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5608'.
[  905.064923][T25677] comedi comedi3: pcl818: I/O port conflict (0x4f23,16)
[  905.113725][T18599] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  905.377990][T25670] vhci_hcd: connection closed
[  905.378435][T18599] vhci_hcd: stop threads
[  905.382303][T18599] vhci_hcd: release socket
[  905.385569][T18599] vhci_hcd: disconnect device
[  905.433037][ T6004] usb 44-1: enqueue for inactive port 0
[  906.014706][ T6004] usb usb44-port1: attempt power cycle
[  906.679562][T25693] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5613'.
[  906.814162][ T6004] usb usb44-port1: unable to enumerate USB device
[  906.922907][   T73] usb 9-1: new full-speed USB device number 25 using dummy_hcd
[  907.077893][   T73] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  907.082394][   T73] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  907.086868][   T73] usb 9-1: config 0 interface 0 has no altsetting 0
[  907.089682][   T73] usb 9-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  907.093734][   T73] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  907.098904][   T73] usb 9-1: config 0 descriptor??
[  908.021512][   T73] usbhid 9-1:0.0: can't add hid device: -71
[  908.024607][   T73] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  908.028108][   T73] usb 9-1: USB disconnect, device number 25
[  908.103823][T25710] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  908.289312][T25722] trusted_key: encrypted_key: insufficient parameters specified
[  909.936026][T25757] netlink: 'syz.1.5632': attribute type 5 has an invalid length.
[  910.018608][T25776] Bluetooth: MGMT ver 1.23
[  910.269578][T25782] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  910.271636][T25782] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  910.274348][T25782] vhci_hcd vhci_hcd.0: Device attached
[  910.484183][T25786] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  910.562826][ T6004] usb 42-1: SetAddress Request (3) to port 0
[  910.564785][ T6004] usb 42-1: new SuperSpeed USB device number 3 using vhci_hcd
[  910.886175][T25783] vhci_hcd: connection reset by peer
[  910.888606][T18599] vhci_hcd: stop threads
[  910.890467][T18599] vhci_hcd: release socket
[  910.892018][T18599] vhci_hcd: disconnect device
[  911.728432][T25821] syz_tun: entered allmulticast mode
[  911.738180][T25821] dvmrp6: entered allmulticast mode
[  911.845015][T25817] syz_tun: left allmulticast mode
[  913.195539][T25845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5659'.
[  913.821187][T25861] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  914.235686][T25869] "syz.2.5667" (25869) uses obsolete ecb(arc4) skcipher
[  914.449302][T25874] tipc: Started in network mode
[  914.451269][T25874] tipc: Node identity 080211, cluster identity 4711
[  914.453618][T25874] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  914.457145][T25874] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode
[  914.459531][T25874] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode
[  914.466797][T25874] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  914.476317][T25874] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5669'.
[  914.515472][T25874] tipc: Resetting bearer <eth:syzkaller0>
[  914.527491][T25876] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  914.692088][T13025] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  915.199896][T25900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5678'.
[  915.504301][   T24] tipc: Node number set to 134353152
[  915.602916][ T6004] usb 42-1: device descriptor read/8, error -110
[  916.083774][ T6004] usb usb42-port1: attempt power cycle
[  916.211499][   T24] usb 9-1: new full-speed USB device number 26 using dummy_hcd
[  916.352853][   T24] usb 9-1: device descriptor read/64, error -71
[  916.504655][T25929] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  916.506998][T25929] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  916.510225][T25929] vhci_hcd vhci_hcd.0: Device attached
[  916.613591][   T24] usb 9-1: new full-speed USB device number 27 using dummy_hcd
[  916.673333][ T6004] usb usb42-port1: unable to enumerate USB device
[  916.763316][   T24] usb 9-1: device descriptor read/64, error -71
[  916.792904][T23371] usb 44-1: SetAddress Request (110) to port 0
[  916.796629][T23371] usb 44-1: new SuperSpeed USB device number 110 using vhci_hcd
[  916.873977][   T24] usb usb9-port1: attempt power cycle
[  917.154427][T25930] vhci_hcd: connection reset by peer
[  917.163084][T18599] vhci_hcd: stop threads
[  917.164477][T18599] vhci_hcd: release socket
[  917.165961][T18599] vhci_hcd: disconnect device
[  917.212839][   T24] usb 9-1: new full-speed USB device number 28 using dummy_hcd
[  917.234040][   T24] usb 9-1: device descriptor read/8, error -71
[  917.482889][   T24] usb 9-1: new full-speed USB device number 29 using dummy_hcd
[  917.503371][   T24] usb 9-1: device descriptor read/8, error -71
[  917.623276][   T24] usb usb9-port1: unable to enumerate USB device
[  918.733653][T25957] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  918.954576][T25963] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  919.292888][T24006] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  919.394579][T25971] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  919.397434][T25971] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  919.401513][T25971] vhci_hcd vhci_hcd.0: Device attached
[  919.452764][T24006] usb 7-1: Using ep0 maxpacket: 16
[  919.455856][T24006] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  919.460056][T24006] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  919.464436][T24006] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  919.469468][T24006] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  919.472260][T24006] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  919.483779][T24006] usb 7-1: config 0 descriptor??
[  919.912639][T24006] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:045E:07DA.0022/input/input39
[  919.937383][T25972] vhci_hcd: connection closed
[  919.937642][T18603] vhci_hcd: stop threads
[  919.941179][T18603] vhci_hcd: release socket
[  919.942660][T18603] vhci_hcd: disconnect device
[  919.993204][T24006] microsoft 0003:045E:07DA.0022: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  921.152831][T24006] usb 7-1: reset high-speed USB device number 33 using dummy_hcd
[  921.205192][T26012] netlink: 'syz.3.5708': attribute type 3 has an invalid length.
[  921.560768][T26021] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  921.562856][T26021] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  921.565748][T26021] vhci_hcd vhci_hcd.0: Device attached
[  922.385991][T26022] vhci_hcd: connection reset by peer
[  922.390856][T18604] vhci_hcd: stop threads
[  922.398661][T18604] vhci_hcd: release socket
[  922.400874][T23371] usb 44-1: device descriptor read/8, error -110
[  922.400950][T18604] vhci_hcd: disconnect device
[  922.752245][   T73] usb 7-1: USB disconnect, device number 33
[  922.793283][T23371] usb usb44-port1: attempt power cycle
[  923.142791][T26043] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  923.210302][T26048] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5718'.
[  923.323788][T26050] CIFS mount error: No usable UNC path provided in device string!
[  923.323788][T26050] 
[  923.328155][T26050] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  923.353842][T23371] usb usb44-port1: unable to enumerate USB device
[  924.392955][T26079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5725'.
[  925.206043][T26100] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  925.208221][T26100] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  925.213436][T26100] vhci_hcd vhci_hcd.0: Device attached
[  925.552767][T23371] usb 46-1: SetAddress Request (63) to port 0
[  925.555334][T23371] usb 46-1: new SuperSpeed USB device number 63 using vhci_hcd
[  926.055966][T26114] syzkaller1: entered promiscuous mode
[  926.057791][T26114] syzkaller1: entered allmulticast mode
[  926.102836][T26101] vhci_hcd: connection reset by peer
[  926.105842][T18600] vhci_hcd: stop threads
[  926.107594][T18600] vhci_hcd: release socket
[  926.109460][T18600] vhci_hcd: disconnect device
[  926.690020][T26134] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  926.692817][T26134] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  926.698490][T26134] vhci_hcd vhci_hcd.0: Device attached
[  926.707996][T26135] usbip_core: unknown command
[  926.709979][T26135] vhci_hcd: unknown pdu 0
[  926.711684][T26135] usbip_core: unknown command
[  926.716813][T26137] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan1, syncid = 0, id = 0
[  926.721192][T26133] IPVS: stopping backup sync thread 26137 ...
[  926.724606][T18600] vhci_hcd: stop threads
[  926.726164][T18600] vhci_hcd: release socket
[  926.727713][T18600] vhci_hcd: disconnect device
[  926.879005][T26140] dummy0: entered promiscuous mode
[  926.881375][T26140] macsec1: entered promiscuous mode
[  926.883375][T26140] macsec1: entered allmulticast mode
[  926.885596][T26140] dummy0: entered allmulticast mode
[  926.913559][T26140] dummy0: left allmulticast mode
[  926.916994][T26140] dummy0: left promiscuous mode
[  927.913831][T26166] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5751'.
[  927.936006][T26166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5751'.
[  927.992161][T26167] Bluetooth: MGMT ver 1.23
[  928.923590][T26166] team0: Port device team_slave_0 removed
[  928.943990][T26178] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  929.135769][T26189] netlink: 'syz.4.5758': attribute type 3 has an invalid length.
[  929.138588][T26189] netlink: 'syz.4.5758': attribute type 3 has an invalid length.
[  929.217247][T26196] overlayfs: failed to resolve './file1': -2
[  929.220545][T26197] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  929.227573][T26198] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  929.229655][T26198] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  929.232871][T26198] vhci_hcd vhci_hcd.0: Device attached
[  929.523210][ T6004] usb 42-1: SetAddress Request (7) to port 0
[  929.525997][ T6004] usb 42-1: new SuperSpeed USB device number 7 using vhci_hcd
[  929.623253][T26207] tipc: Enabling of bearer <wdp:s> rejected, media not registered
[  929.649111][T26206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  929.829225][T26199] vhci_hcd: connection reset by peer
[  929.831944][T18603] vhci_hcd: stop threads
[  929.833931][T18603] vhci_hcd: release socket
[  929.836453][T18603] vhci_hcd: disconnect device
[  930.633143][T23371] usb 46-1: device descriptor read/8, error -110
[  931.174959][T23371] usb usb46-port1: attempt power cycle
[  931.205651][T26235] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  931.207814][T26235] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  931.210683][T26235] vhci_hcd vhci_hcd.0: Device attached
[  931.225541][T26235] 9pnet_fd: Insufficient options for proto=fd
[  931.332836][T23371] usb 46-1: SetAddress Request (65) to port 0
[  931.335570][T23371] usb 46-1: new SuperSpeed USB device number 65 using vhci_hcd
[  931.665475][T26236] vhci_hcd: connection reset by peer
[  931.667432][T18603] vhci_hcd: stop threads
[  931.668850][T18603] vhci_hcd: release socket
[  931.670480][T18603] vhci_hcd: disconnect device
[  932.186226][T26244] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  932.188346][T26244] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  932.191371][T26244] vhci_hcd vhci_hcd.0: Device attached
[  932.249932][T26250] can: request_module (can-proto-0) failed.
[  932.553131][ T1022] usb 44-1: SetAddress Request (114) to port 0
[  932.555461][ T1022] usb 44-1: new SuperSpeed USB device number 114 using vhci_hcd
[  932.903466][T26245] vhci_hcd: connection reset by peer
[  932.906724][T18603] vhci_hcd: stop threads
[  932.908057][T18603] vhci_hcd: release socket
[  932.909663][T18603] vhci_hcd: disconnect device
[  933.392843][T26265] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  933.394926][T26265] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  933.397714][T26265] vhci_hcd vhci_hcd.0: Device attached
[  934.170269][T26266] vhci_hcd: connection closed
[  934.170558][T18603] vhci_hcd: stop threads
[  934.173690][T18603] vhci_hcd: release socket
[  934.175241][T18603] vhci_hcd: disconnect device
[  934.642843][ T6004] usb 42-1: device descriptor read/8, error -110
[  934.725991][T26279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5781'.
[  934.729234][T26279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5781'.
[  934.788043][T18600] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  934.792990][T18600] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  934.796777][T18600] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  934.801440][T18600] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  934.836516][T26285] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  934.839635][T26285] batman_adv: batadv0: Removing interface: batadv_slave_0
[  934.874831][T26285] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  934.877282][T26285] batman_adv: batadv0: Removing interface: batadv_slave_1
[  935.093704][ T6004] usb usb42-port1: attempt power cycle
[  935.103042][T26289] netem: change failed
[  935.204505][T26296] fuse: Bad value for 'fd'
[  935.332299][T26302] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  935.613282][T26311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5793'.
[  935.617341][T26311] netlink: 'syz.4.5793': attribute type 1 has an invalid length.
[  935.620068][T26311] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5793'.
[  935.626193][T26311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5793'.
[  935.663351][ T6004] usb usb42-port1: unable to enumerate USB device
[  936.161494][   T29] hid_parser_main: 8 callbacks suppressed
[  936.161507][   T29] hid-generic 0001:0000:0000.0023: unknown main item tag 0x0
[  936.165965][   T29] hid-generic 0001:0000:0000.0023: unknown main item tag 0x0
[  936.168399][   T29] hid-generic 0001:0000:0000.0023: unknown main item tag 0x0
[  936.172258][   T29] hid-generic 0001:0000:0000.0023: unknown main item tag 0x0
[  936.175975][   T29] hid-generic 0001:0000:0000.0023: unknown main item tag 0x0
[  936.178448][   T29] hid-generic 0001:0000:0000.0023: unknown main item tag 0x0
[  936.180971][   T29] hid-generic 0001:0000:0000.0023: unknown main item tag 0x0
[  936.185269][   T29] hid-generic 0001:0000:0000.0023: unknown main item tag 0x0
[  936.187724][   T29] hid-generic 0001:0000:0000.0023: unknown main item tag 0x0
[  936.190258][   T29] hid-generic 0001:0000:0000.0023: unknown main item tag 0x0
[  936.194833][   T29] hid-generic 0001:0000:0000.0023: hidraw1: <UNKNOWN> HID vffffff.ff Device [syz0] on syz0
[  936.234535][T26321] fido_id[26321]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  936.392985][T23371] usb 46-1: device descriptor read/8, error -110
[  936.534818][T26324] 9pnet_fd: p9_fd_create_tcp (26324): problem connecting socket to 127.0.0.1
[  936.596035][T26328] kAFS: unable to lookup cell '('
[  936.598707][T26328] kAFS: unable to lookup cell '(,c¾ûL'
[  936.788286][T23371] usb usb46-port1: unable to enumerate USB device
[  937.113060][T18601] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  937.603441][ T1022] usb 44-1: device descriptor read/8, error -110
[  938.033235][T26359] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  938.035379][T26359] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  938.039302][T26359] vhci_hcd vhci_hcd.0: Device attached
[  938.183650][ T1022] usb usb44-port1: attempt power cycle
[  938.346098][   T29] usb 42-1: SetAddress Request (11) to port 0
[  938.349087][   T29] usb 42-1: new SuperSpeed USB device number 11 using vhci_hcd
[  938.414999][T26365] binder: 26364:26365 ioctl c004500a 80000180 returned -22
[  938.529390][T26360] vhci_hcd: connection reset by peer
[  938.531168][T18604] vhci_hcd: stop threads
[  938.532615][T18604] vhci_hcd: release socket
[  938.534295][T18604] vhci_hcd: disconnect device
[  938.774622][ T1022] usb usb44-port1: unable to enumerate USB device
[  938.779717][T26368] loop2: detected capacity change from 0 to 7
[  938.783728][T25390] Dev loop2: unable to read RDB block 7
[  938.786094][T25390]  loop2: unable to read partition table
[  938.788808][T25390] loop2: partition table beyond EOD, truncated
[  938.792875][T26368] Dev loop2: unable to read RDB block 7
[  938.795009][T26368]  loop2: unable to read partition table
[  938.797341][T26368] loop2: partition table beyond EOD, truncated
[  938.799383][T26368] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  939.403344][ T5350] Dev loop2: unable to read RDB block 7
[  939.405303][ T5350]  loop2: unable to read partition table
[  939.407270][ T5350] loop2: partition table beyond EOD, truncated
[  940.905137][T26450] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5818'.
[  940.908091][T26450] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5818'.
[  940.910997][T26450] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5818'.
[  940.917497][T26450] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5818'.
[  940.950550][T26453] FAULT_INJECTION: forcing a failure.
[  940.950550][T26453] name failslab, interval 1, probability 0, space 0, times 0
[  940.954712][T26453] CPU: 2 UID: 0 PID: 26453 Comm: syz.4.5819 Not tainted syzkaller #0 PREEMPT(full) 
[  940.954728][T26453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  940.954735][T26453] Call Trace:
[  940.954747][T26453]  <TASK>
[  940.954752][T26453]  dump_stack_lvl+0x16c/0x1f0
[  940.954777][T26453]  should_fail_ex+0x512/0x640
[  940.954798][T26453]  ? __kmalloc_cache_noprof+0x5f/0x780
[  940.954811][T26453]  should_failslab+0xc2/0x120
[  940.954827][T26453]  __kmalloc_cache_noprof+0x72/0x780
[  940.954838][T26453]  ? do_raw_spin_lock+0x12c/0x2b0
[  940.954856][T26453]  ? alloc_fdtable+0xbd/0x2d0
[  940.954870][T26453]  ? alloc_fdtable+0xbd/0x2d0
[  940.954879][T26453]  alloc_fdtable+0xbd/0x2d0
[  940.954891][T26453]  dup_fd+0x83b/0xb90
[  940.954904][T26453]  ? apparmor_task_alloc+0x2c2/0x3b0
[  940.954924][T26453]  copy_process+0x2312/0x76a0
[  940.954945][T26453]  ? __pfx_copy_process+0x10/0x10
[  940.954963][T26453]  ? _copy_from_user+0x59/0xd0
[  940.954997][T26453]  kernel_clone+0xfc/0x930
[  940.955011][T26453]  ? get_pid_task+0xfc/0x250
[  940.955028][T26453]  ? __pfx_kernel_clone+0x10/0x10
[  940.955050][T26453]  __do_sys_clone3+0x212/0x290
[  940.955065][T26453]  ? __pfx___do_sys_clone3+0x10/0x10
[  940.955091][T26453]  ? __fget_files+0x20e/0x3c0
[  940.955101][T26453]  ? handle_mm_fault+0x250/0xd10
[  940.955126][T26453]  ? rcu_is_watching+0x12/0xc0
[  940.955141][T26453]  __do_fast_syscall_32+0x7c/0x300
[  940.955158][T26453]  do_fast_syscall_32+0x32/0x80
[  940.955173][T26453]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  940.955187][T26453] RIP: 0023:0xf7f13579
[  940.955196][T26453] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  940.955207][T26453] RSP: 002b:00000000f540642c EFLAGS: 00000286 ORIG_RAX: 00000000000001b3
[  940.955218][T26453] RAX: ffffffffffffffda RBX: 00000000f5406460 RCX: 0000000000000058
[  940.955225][T26453] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  940.955231][T26453] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  940.955238][T26453] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  940.955244][T26453] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  940.955260][T26453]  </TASK>
[  941.436351][T26457] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  941.438239][T26457] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  941.440581][T26457] vhci_hcd vhci_hcd.0: Device attached
[  941.712883][ T1022] usb 44-1: SetAddress Request (118) to port 0
[  941.721220][ T1022] usb 44-1: new SuperSpeed USB device number 118 using vhci_hcd
[  941.820517][T26464] vhci_hcd: connection reset by peer
[  941.822521][T26441] vhci_hcd: stop threads
[  941.824454][T26441] vhci_hcd: release socket
[  941.825953][T26441] vhci_hcd: disconnect device
[  943.432928][   T29] usb 42-1: device descriptor read/8, error -110
[  943.833804][   T29] usb usb42-port1: attempt power cycle
[  944.209853][T26484] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  944.403678][   T29] usb usb42-port1: unable to enumerate USB device
[  944.475087][T26488] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  944.477210][T26488] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  944.480366][T26488] vhci_hcd vhci_hcd.0: Device attached
[  945.108622][T26489] vhci_hcd: connection closed
[  945.109807][T26441] vhci_hcd: stop threads
[  945.116380][T26441] vhci_hcd: release socket
[  945.122162][T26441] vhci_hcd: disconnect device
[  945.423416][   T24] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[  945.451715][T26517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5836'.
[  945.455211][T26517] openvswitch: netlink: Flow key attr not present in new flow.
[  945.574244][   T24] usb 9-1: config 1 has an invalid interface number: 7 but max is 0
[  945.577542][   T24] usb 9-1: config 1 has no interface number 0
[  945.579511][   T24] usb 9-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  945.583430][   T24] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  945.586379][   T24] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023
[  945.589444][   T24] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 63, changing to 9
[  945.594426][   T24] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  945.597232][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  945.599814][   T24] usb 9-1: Product: syz
[  945.601126][   T24] usb 9-1: Manufacturer: syz
[  945.602601][   T24] usb 9-1: SerialNumber: syz
[  945.610684][T26497] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  945.613218][T26497] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  945.680389][T26520] rdma_rxe: rxe_newlink: failed to add ipvlan0
[  945.849209][T26497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5830'.
[  945.855587][T26497] netlink: 'syz.4.5830': attribute type 1 has an invalid length.
[  945.969707][T26523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5830'.
[  946.030277][T26497] bond4: (slave veth3): Enslaving as an active interface with a down link
[  946.542542][    C0] vkms_vblank_simulate: vblank timer overrun
[  946.569176][   T24] usb 9-1: Error in usbnet_get_endpoints (-71)
[  946.577755][   T24] usb 9-1: USB disconnect, device number 30
[  946.793024][ T1022] usb 44-1: device descriptor read/8, error -110
[  947.193855][ T1022] usb usb44-port1: attempt power cycle
[  947.207077][T26531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5838'.
[  947.308102][   T40] kauditd_printk_skb: 464 callbacks suppressed
[  947.308113][   T40] audit: type=1326 audit(1763870400.395:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26537 comm="syz.1.5841" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707d598 code=0x7ffc0000
[  947.317551][   T40] audit: type=1326 audit(1763870400.395:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26537 comm="syz.1.5841" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707d598 code=0x7ffc0000
[  947.325302][   T40] audit: type=1326 audit(1763870400.395:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26537 comm="syz.1.5841" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707d598 code=0x7ffc0000
[  947.334358][   T40] audit: type=1326 audit(1763870400.395:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26537 comm="syz.1.5841" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000
[  947.341189][   T40] audit: type=1326 audit(1763870400.395:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26537 comm="syz.1.5841" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000
[  947.348196][   T40] audit: type=1326 audit(1763870400.405:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26537 comm="syz.1.5841" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000
[  947.355775][   T40] audit: type=1326 audit(1763870400.405:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26537 comm="syz.1.5841" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707d598 code=0x7ffc0000
[  947.362203][   T40] audit: type=1326 audit(1763870400.405:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26537 comm="syz.1.5841" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707d598 code=0x7ffc0000
[  947.369239][   T40] audit: type=1326 audit(1763870400.405:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26537 comm="syz.1.5841" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000
[  947.377221][   T40] audit: type=1326 audit(1763870400.405:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26537 comm="syz.1.5841" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707d598 code=0x7ffc0000
[  947.429861][T26540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5839'.
[  947.514955][T26546] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  947.764096][ T1022] usb usb44-port1: unable to enumerate USB device
[  948.987282][T26577] 
[  949.233819][T26582] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  949.262878][T26577] FAULT_INJECTION: forcing a failure.
[  949.262878][T26577] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  949.267911][T26577] CPU: 2 UID: 0 PID: 26577 Comm: syz.4.5854 Not tainted syzkaller #0 PREEMPT(full) 
[  949.267929][T26577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  949.267937][T26577] Call Trace:
[  949.267942][T26577]  <TASK>
[  949.267946][T26577]  dump_stack_lvl+0x16c/0x1f0
[  949.267967][T26577]  should_fail_ex+0x512/0x640
[  949.268018][T26577]  _copy_to_user+0x32/0xd0
[  949.268036][T26577]  simple_read_from_buffer+0xcb/0x170
[  949.268057][T26577]  proc_fail_nth_read+0x197/0x240
[  949.268073][T26577]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  949.268088][T26577]  ? rw_verify_area+0xcf/0x6c0
[  949.268099][T26577]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  949.268112][T26577]  vfs_read+0x1e4/0xcf0
[  949.268128][T26577]  ? __pfx_vfs_read+0x10/0x10
[  949.268139][T26577]  ? find_held_lock+0x2b/0x80
[  949.268156][T26577]  ? __fget_files+0x20e/0x3c0
[  949.268168][T26577]  ? handle_mm_fault+0x250/0xd10
[  949.268191][T26577]  ksys_read+0x12a/0x250
[  949.268203][T26577]  ? __pfx_ksys_read+0x10/0x10
[  949.268217][T26577]  ? rcu_is_watching+0x12/0xc0
[  949.268233][T26577]  __do_fast_syscall_32+0x7c/0x300
[  949.268250][T26577]  do_fast_syscall_32+0x32/0x80
[  949.268265][T26577]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  949.268280][T26577] RIP: 0023:0xf7f13579
[  949.268289][T26577] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  949.268301][T26577] RSP: 002b:00000000f5406590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  949.268318][T26577] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5406620
[  949.268326][T26577] RDX: 000000000000000f RSI: 00000000f73a6ff4 RDI: 0000000000000000
[  949.268333][T26577] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  949.268340][T26577] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  949.268346][T26577] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  949.268362][T26577]  </TASK>
[  949.574357][T26585] 
[  949.695949][T26593] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  950.238784][T26597] netlink: 'syz.4.5860': attribute type 1 has an invalid length.
[  950.266894][T26597] 8021q: adding VLAN 0 to HW filter on device bond5
[  950.453924][T26597] bond5: (slave veth5): Enslaving as an active interface with a down link
[  951.303416][T26600] bond5 (unregistering): (slave veth5): Releasing active interface
[  951.416493][T26600] bond5 (unregistering): Released all slaves
[  951.455616][T26616] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  952.545965][T26631] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  952.627165][T26641] xt_CT: No such helper "snmp"
[  952.699343][T26650] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  955.609185][T26659] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  955.673012][T26441] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  955.683520][T26441] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  955.753229][T26441] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  955.757086][T26441] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  955.997030][T26689] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5884'.
[  957.134933][T26704] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  957.506307][T26730] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  957.508446][T26730] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  957.512917][T26730] vhci_hcd vhci_hcd.0: Device attached
[  957.978288][   T40] kauditd_printk_skb: 454 callbacks suppressed
[  957.978307][   T40] audit: type=1326 audit(1763870411.060:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26735 comm="syz.3.5898" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  958.042992][   T40] audit: type=1326 audit(1763870411.060:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26735 comm="syz.3.5898" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  958.049806][   T40] audit: type=1326 audit(1763870411.060:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26735 comm="syz.3.5898" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  958.063061][ T1022] usb 42-1: SetAddress Request (15) to port 0
[  958.066155][ T1022] usb 42-1: new SuperSpeed USB device number 15 using vhci_hcd
[  958.124448][   T40] audit: type=1326 audit(1763870411.210:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26735 comm="syz.3.5898" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  958.124631][T26746] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  958.132106][   T40] audit: type=1326 audit(1763870411.210:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26735 comm="syz.3.5898" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  958.135038][T26746] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  958.143287][T26746] vhci_hcd vhci_hcd.0: Device attached
[  958.333097][T14782] vhci_hcd: vhci_device speed not set
[  958.372301][T26748] vhci_hcd: connection closed
[  958.373121][T26441] vhci_hcd: stop threads
[  958.377426][T26441] vhci_hcd: release socket
[  958.379597][T26441] vhci_hcd: disconnect device
[  958.402924][T14782] usb 45-1: new low-speed USB device number 2 using vhci_hcd
[  958.406275][T14782] usb 45-1: enqueue for inactive port 0
[  958.413712][T26731] vhci_hcd: connection reset by peer
[  958.416373][T26441] vhci_hcd: stop threads
[  958.418181][T26441] vhci_hcd: release socket
[  958.420160][T26441] vhci_hcd: disconnect device
[  958.473204][T14782] vhci_hcd: vhci_device speed not set
[  959.143299][T26775] 9pnet_virtio: no channels available for device syz
[  959.558041][T26785] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  959.900462][T26790] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  959.903255][T26790] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  959.914791][T26790] vhci_hcd vhci_hcd.0: Device attached
[  959.919958][T26791] usbip_core: unknown command
[  959.922022][T26791] vhci_hcd: unknown pdu 0
[  959.925307][T26791] usbip_core: unknown command
[  959.927681][T26430] vhci_hcd: stop threads
[  959.929438][T26430] vhci_hcd: release socket
[  959.931624][T26430] vhci_hcd: disconnect device
[  960.805446][T26814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5919'.
[  961.274080][T26827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5924'.
[  961.295501][T26827] 8021q: adding VLAN 0 to HW filter on device bond2
[  961.684856][T26843] netlink: 'syz.2.5928': attribute type 3 has an invalid length.
[  961.687471][T26844] netlink: 'syz.2.5928': attribute type 3 has an invalid length.
[  962.224471][T26438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  962.228313][T26438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  962.266807][    C2] ------------[ cut here ]------------
[  962.268528][    C2] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  962.271833][    C2] WARNING: CPU: 2 PID: 26839 at net/mac80211/rate.c:401 __rate_control_send_low+0x667/0x780
[  962.275539][    C2] Modules linked in:
[  962.277756][    C2] CPU: 2 UID: 0 PID: 26839 Comm: syz.3.5927 Not tainted syzkaller #0 PREEMPT(full) 
[  962.281478][    C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  962.285328][    C2] RIP: 0010:__rate_control_send_low+0x667/0x780
[  962.287829][    C2] Code: a4 a0 d4 00 00 00 e8 78 dd e8 f6 44 8b 44 24 24 45 89 e9 89 d9 48 8b 74 24 08 44 89 e2 48 c7 c7 60 19 e3 8c e8 8a 60 a7 f6 90 <0f> 0b 90 90 e9 20 fd ff ff 48 8b 3c 24 e8 47 8a 50 f7 e9 f5 fc ff
[  962.295458][    C2] RSP: 0000:ffffc90000538930 EFLAGS: 00010282
[  962.297548][    C2] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817adc48
[  962.300595][    C2] RDX: ffff888028262480 RSI: ffffffff817adc55 RDI: 0000000000000001
[  962.303697][    C2] RBP: ffff88802411a2a8 R08: 0000000000000001 R09: 0000000000000000
[  962.306871][    C2] R10: 0000000000000000 R11: 0000000000000001 R12: 00000000ffffffff
[  962.310101][    C2] R13: 0000000000000000 R14: 000000000000000c R15: ffff88802411a2b0
[  962.313265][    C2] FS:  0000000000000000(0000) GS:ffff888097a0d000(0063) knlGS:00000000583cb440
[  962.316700][    C2] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  962.318887][    C2] CR2: 000000002f2b1ffc CR3: 0000000058f5d000 CR4: 0000000000352ef0
[  962.322031][    C2] Call Trace:
[  962.323469][    C2]  <IRQ>
[  962.324662][    C2]  rate_control_send_low+0x52a/0x810
[  962.326883][    C2]  ? kmalloc_reserve+0x18b/0x2c0
[  962.329157][    C2]  rate_control_get_rate+0x1be/0x5e0
[  962.331170][    C2]  ieee80211_beacon_get_finish+0x467/0x670
[  962.333846][    C2]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  962.336548][    C2]  __ieee80211_beacon_get+0xc56/0x1e40
[  962.338365][    C2]  ? __lock_acquire+0xb8a/0x1c90
[  962.340425][    C2]  ieee80211_beacon_get_tim+0xa6/0x280
[  962.342752][    C2]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  962.345199][    C2]  mac80211_hwsim_beacon_tx+0x4dc/0xa40
[  962.346989][    C2]  __iterate_interfaces+0x2e5/0x650
[  962.348849][    C2]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  962.351300][    C2]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  962.353426][    C2]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  962.355586][    C2]  ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0
[  962.358589][    C2]  mac80211_hwsim_beacon+0x105/0x1b0
[  962.360908][    C2]  __hrtimer_run_queues+0x202/0xad0
[  962.362655][    C2]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  962.365014][    C2]  ? read_tsc+0x9/0x20
[  962.366806][    C2]  hrtimer_run_softirq+0x17d/0x350
[  962.368651][    C2]  handle_softirqs+0x219/0x8e0
[  962.370328][    C2]  ? __pfx_handle_softirqs+0x10/0x10
[  962.372529][    C2]  __irq_exit_rcu+0x109/0x170
[  962.374794][    C2]  irq_exit_rcu+0x9/0x30
[  962.376354][    C2]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  962.378740][    C2]  </IRQ>
[  962.379715][    C2]  <TASK>
[  962.380660][    C2]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  962.382935][    C2] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[  962.385398][    C2] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 a6 f1 37 f6 48 89 df e8 8e 45 38 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 b5 4d 28 f6 65 8b 05 7e d5 40 08 85 c0 74 16 5b
[  962.392179][    C2] RSP: 0000:ffffc9000423f3f8 EFLAGS: 00000246
[  962.394462][    C2] RAX: 0000000000000006 RBX: ffff888040000208 RCX: 0000000000000007
[  962.397310][    C2] RDX: 0000000000000000 RSI: ffffffff8da29329 RDI: ffffffff8bf078c0
[  962.400080][    C2] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000001
[  962.402933][    C2] R10: ffffffff90824cd7 R11: 0000000000000002 R12: 0000000000000001
[  962.405736][    C2] R13: 0000000000000246 R14: 0000000000000000 R15: dffffc0000000000
[  962.408813][    C2]  __wake_up+0x3f/0x60
[  962.410140][    C2]  wakeup_kswapd+0x495/0x670
[  962.411891][    C2]  get_page_from_freelist+0x1060/0x3a30
[  962.414371][    C2]  ? prepare_alloc_pages+0x3c2/0x610
[  962.416324][    C2]  ? xas_start+0x153/0x790
[  962.417952][    C2]  __alloc_frozen_pages_noprof+0x25f/0x2470
[  962.420507][    C2]  ? find_held_lock+0x2b/0x80
[  962.422281][    C2]  ? filemap_get_folios_tag+0x460/0xae0
[  962.424139][    C2]  ? filemap_get_folios_tag+0x46a/0xae0
[  962.426427][    C2]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  962.428802][    C2]  ? __pfx_filemap_get_folios_tag+0x10/0x10
[  962.430696][    C2]  ? __lock_acquire+0xb8a/0x1c90
[  962.432802][    C2]  ? __lock_acquire+0x622/0x1c90
[  962.434693][    C2]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  962.436579][    C2]  ? policy_nodemask+0xea/0x4e0
[  962.438493][    C2]  alloc_pages_mpol+0x1fb/0x550
[  962.440379][    C2]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  962.442048][    C2]  ? find_held_lock+0x2b/0x80
[  962.443915][    C2]  folio_alloc_noprof+0x20/0x2d0
[  962.445855][    C2]  filemap_alloc_folio_noprof+0x3a1/0x470
[  962.447719][    C2]  ? __pfx_xa_load+0x10/0x10
[  962.449501][    C2]  ? down_read+0x13d/0x480
[  962.451311][    C2]  ? __pfx_filemap_alloc_folio_noprof+0x10/0x10
[  962.453341][    C2]  ? find_held_lock+0x2b/0x80
[  962.455102][    C2]  page_cache_ra_unbounded+0x377/0xa10
[  962.457171][    C2]  page_cache_ra_order+0xc1d/0xf20
[  962.458764][    C2]  filemap_fault+0x1583/0x29a0
[  962.460598][    C2]  ? __pfx_filemap_fault+0x10/0x10
[  962.462615][    C2]  ? rcu_is_watching+0x12/0xc0
[  962.464282][    C2]  ? __pfx_filemap_map_pages+0x10/0x10
[  962.466525][    C2]  __do_fault+0x10d/0x490
[  962.468289][    C2]  ? __pfx_filemap_map_pages+0x10/0x10
[  962.470508][    C2]  do_pte_missing+0x1a6/0x3ba0
[  962.472466][    C2]  ? find_held_lock+0x2b/0x80
[  962.474424][    C2]  ? __handle_mm_fault+0x1529/0x2aa0
[  962.476616][    C2]  __handle_mm_fault+0x1556/0x2aa0
[  962.478678][    C2]  ? __pfx___handle_mm_fault+0x10/0x10
[  962.480935][    C2]  ? lock_vma_under_rcu+0x176/0x530
[  962.483110][    C2]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  962.485319][    C2]  handle_mm_fault+0x589/0xd10
[  962.487289][    C2]  ? __pkru_allows_pkey+0x21/0xb0
[  962.489361][    C2]  do_user_addr_fault+0x60c/0x1370
[  962.491466][    C2]  ? rcu_is_watching+0x12/0xc0
[  962.493537][    C2]  exc_page_fault+0x64/0xc0
[  962.495414][    C2]  asm_exc_page_fault+0x26/0x30
[  962.497458][    C2] RIP: 0023:0xf70ff2b0
[  962.499144][    C2] Code: f0 83 c7 01 83 eb 08 e8 1e 76 fe ff 8b 46 1c 8b 4e 14 8d 50 f8 89 56 1c 8d 51 08 8b 4c 24 14 89 56 14 89 54 24 0c 8b 54 24 10 <89> 48 fc 89 50 f8 8b 44 24 18 39 c7 73 7a 8b 45 24 99 03 03 13 53
[  962.506790][    C2] RSP: 002b:00000000fff74900 EFLAGS: 00010282
[  962.509270][    C2] RAX: 000000002f2b2000 RBX: 00000000f68bd710 RCX: 00000000ffffffff
[  962.512420][    C2] RDX: 000000008acae62a RSI: 00000000f7fb5610 RDI: 00000000000002be
[  962.515639][    C2] RBP: 00000000f7485080 R08: 0000000000000000 R09: 0000000000000000
[  962.518822][    C2] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  962.521984][    C2] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  962.525238][    C2]  </TASK>
[  962.526552][    C2] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  962.529431][    C2] CPU: 2 UID: 0 PID: 26839 Comm: syz.3.5927 Not tainted syzkaller #0 PREEMPT(full) 
[  962.533257][    C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  962.537531][    C2] Call Trace:
[  962.538882][    C2]  <IRQ>
[  962.540111][    C2]  dump_stack_lvl+0x3d/0x1f0
[  962.541748][    C2]  vpanic+0x640/0x6f0
[  962.543186][    C2]  ? __rate_control_send_low+0x667/0x780
[  962.545425][    C2]  panic+0xca/0xd0
[  962.547019][    C2]  ? __pfx_panic+0x10/0x10
[  962.548846][    C2]  ? check_panic_on_warn+0x1f/0xb0
[  962.551033][    C2]  check_panic_on_warn+0xab/0xb0
[  962.553046][    C2]  __warn+0xf6/0x3c0
[  962.554623][    C2]  ? __pfx_vprintk_emit+0x10/0x10
[  962.556692][    C2]  ? __rate_control_send_low+0x667/0x780
[  962.558844][    C2]  report_bug+0x3c3/0x580
[  962.560285][    C2]  ? __rate_control_send_low+0x667/0x780
[  962.562607][    C2]  handle_bug+0x184/0x210
[  962.564365][    C2]  exc_invalid_op+0x17/0x50
[  962.566192][    C2]  asm_exc_invalid_op+0x1a/0x20
[  962.568157][    C2] RIP: 0010:__rate_control_send_low+0x667/0x780
[  962.570824][    C2] Code: a4 a0 d4 00 00 00 e8 78 dd e8 f6 44 8b 44 24 24 45 89 e9 89 d9 48 8b 74 24 08 44 89 e2 48 c7 c7 60 19 e3 8c e8 8a 60 a7 f6 90 <0f> 0b 90 90 e9 20 fd ff ff 48 8b 3c 24 e8 47 8a 50 f7 e9 f5 fc ff
[  962.577936][    C2] RSP: 0000:ffffc90000538930 EFLAGS: 00010282
[  962.580485][    C2] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817adc48
[  962.583158][    C2] RDX: ffff888028262480 RSI: ffffffff817adc55 RDI: 0000000000000001
[  962.586398][    C2] RBP: ffff88802411a2a8 R08: 0000000000000001 R09: 0000000000000000
[  962.588952][    C2] R10: 0000000000000000 R11: 0000000000000001 R12: 00000000ffffffff
[  962.592447][    C2] R13: 0000000000000000 R14: 000000000000000c R15: ffff88802411a2b0
[  962.595193][    C2]  ? __warn_printk+0x198/0x350
[  962.596955][    C2]  ? __warn_printk+0x1a5/0x350
[  962.598916][    C2]  rate_control_send_low+0x52a/0x810
[  962.600585][    C2]  ? kmalloc_reserve+0x18b/0x2c0
[  962.602287][    C2]  rate_control_get_rate+0x1be/0x5e0
[  962.604340][    C2]  ieee80211_beacon_get_finish+0x467/0x670
[  962.606145][    C2]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  962.608687][    C2]  __ieee80211_beacon_get+0xc56/0x1e40
[  962.610703][    C2]  ? __lock_acquire+0xb8a/0x1c90
[  962.612291][    C2]  ieee80211_beacon_get_tim+0xa6/0x280
[  962.614452][    C2]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  962.616695][    C2]  mac80211_hwsim_beacon_tx+0x4dc/0xa40
[  962.618510][    C2]  __iterate_interfaces+0x2e5/0x650
[  962.620597][    C2]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  962.622681][    C2]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  962.624784][    C2]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  962.627126][    C2]  ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0
[  962.629313][    C2]  mac80211_hwsim_beacon+0x105/0x1b0
[  962.631456][    C2]  __hrtimer_run_queues+0x202/0xad0
[  962.633870][    C2]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  962.635926][    C2]  ? read_tsc+0x9/0x20
[  962.637300][    C2]  hrtimer_run_softirq+0x17d/0x350
[  962.639176][    C2]  handle_softirqs+0x219/0x8e0
[  962.641158][    C2]  ? __pfx_handle_softirqs+0x10/0x10
[  962.643146][    C2]  __irq_exit_rcu+0x109/0x170
[  962.644631][    C2]  irq_exit_rcu+0x9/0x30
[  962.646220][    C2]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  962.648521][    C2]  </IRQ>
[  962.649481][    C2]  <TASK>
[  962.650405][    C2]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  962.652914][    C2] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[  962.655075][    C2] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 a6 f1 37 f6 48 89 df e8 8e 45 38 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 b5 4d 28 f6 65 8b 05 7e d5 40 08 85 c0 74 16 5b
[  962.661884][    C2] RSP: 0000:ffffc9000423f3f8 EFLAGS: 00000246
[  962.664288][    C2] RAX: 0000000000000006 RBX: ffff888040000208 RCX: 0000000000000007
[  962.667429][    C2] RDX: 0000000000000000 RSI: ffffffff8da29329 RDI: ffffffff8bf078c0
[  962.670181][    C2] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000001
[  962.673615][    C2] R10: ffffffff90824cd7 R11: 0000000000000002 R12: 0000000000000001
[  962.676116][    C2] R13: 0000000000000246 R14: 0000000000000000 R15: dffffc0000000000
[  962.679334][    C2]  __wake_up+0x3f/0x60
[  962.680891][    C2]  wakeup_kswapd+0x495/0x670
[  962.682339][    C2]  get_page_from_freelist+0x1060/0x3a30
[  962.684406][    C2]  ? prepare_alloc_pages+0x3c2/0x610
[  962.686498][    C2]  ? xas_start+0x153/0x790
[  962.688368][    C2]  __alloc_frozen_pages_noprof+0x25f/0x2470
[  962.690713][    C2]  ? find_held_lock+0x2b/0x80
[  962.692368][    C2]  ? filemap_get_folios_tag+0x460/0xae0
[  962.694161][    C2]  ? filemap_get_folios_tag+0x46a/0xae0
[  962.696436][    C2]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  962.698858][    C2]  ? __pfx_filemap_get_folios_tag+0x10/0x10
[  962.700728][    C2]  ? __lock_acquire+0xb8a/0x1c90
[  962.702512][    C2]  ? __lock_acquire+0x622/0x1c90
[  962.704505][    C2]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  962.706659][    C2]  ? policy_nodemask+0xea/0x4e0
[  962.708217][    C2]  alloc_pages_mpol+0x1fb/0x550
[  962.710173][    C2]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  962.712281][    C2]  ? find_held_lock+0x2b/0x80
[  962.713762][    C2]  folio_alloc_noprof+0x20/0x2d0
[  962.715448][    C2]  filemap_alloc_folio_noprof+0x3a1/0x470
[  962.717744][    C2]  ? __pfx_xa_load+0x10/0x10
[  962.719533][    C2]  ? down_read+0x13d/0x480
[  962.720978][    C2]  ? __pfx_filemap_alloc_folio_noprof+0x10/0x10
[  962.723390][    C2]  ? find_held_lock+0x2b/0x80
[  962.725387][    C2]  page_cache_ra_unbounded+0x377/0xa10
[  962.727237][    C2]  page_cache_ra_order+0xc1d/0xf20
[  962.728917][    C2]  filemap_fault+0x1583/0x29a0
[  962.730827][    C2]  ? __pfx_filemap_fault+0x10/0x10
[  962.732849][    C2]  ? rcu_is_watching+0x12/0xc0
[  962.734398][    C2]  ? __pfx_filemap_map_pages+0x10/0x10
[  962.736364][    C2]  __do_fault+0x10d/0x490
[  962.738118][    C2]  ? __pfx_filemap_map_pages+0x10/0x10
[  962.740101][    C2]  do_pte_missing+0x1a6/0x3ba0
[  962.741624][    C2]  ? find_held_lock+0x2b/0x80
[  962.743542][    C2]  ? __handle_mm_fault+0x1529/0x2aa0
[  962.745698][    C2]  __handle_mm_fault+0x1556/0x2aa0
[  962.747448][    C2]  ? __pfx___handle_mm_fault+0x10/0x10
[  962.749392][    C2]  ? lock_vma_under_rcu+0x176/0x530
[  962.751607][    C2]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  962.753546][    C2]  handle_mm_fault+0x589/0xd10
[  962.755051][    C2]  ? __pkru_allows_pkey+0x21/0xb0
[  962.757080][    C2]  do_user_addr_fault+0x60c/0x1370
[  962.759012][    C2]  ? rcu_is_watching+0x12/0xc0
[  962.760554][    C2]  exc_page_fault+0x64/0xc0
[  962.762215][    C2]  asm_exc_page_fault+0x26/0x30
[  962.764149][    C2] RIP: 0023:0xf70ff2b0
[  962.765789][    C2] Code: f0 83 c7 01 83 eb 08 e8 1e 76 fe ff 8b 46 1c 8b 4e 14 8d 50 f8 89 56 1c 8d 51 08 8b 4c 24 14 89 56 14 89 54 24 0c 8b 54 24 10 <89> 48 fc 89 50 f8 8b 44 24 18 39 c7 73 7a 8b 45 24 99 03 03 13 53
[  962.772902][    C2] RSP: 002b:00000000fff74900 EFLAGS: 00010282
[  962.774810][    C2] RAX: 000000002f2b2000 RBX: 00000000f68bd710 RCX: 00000000ffffffff
[  962.777876][    C2] RDX: 000000008acae62a RSI: 00000000f7fb5610 RDI: 00000000000002be
[  962.780835][    C2] RBP: 00000000f7485080 R08: 0000000000000000 R09: 0000000000000000
[  962.783507][    C2] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  962.786554][    C2] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  962.789161][    C2]  </TASK>
[  962.791140][    C2] Kernel Offset: disabled
[  962.792935][    C2] Rebooting in 86400 seconds..