last executing test programs:

11m27.660708354s ago: executing program 2 (id=3):
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000200100000c000280080002006c6f000018000380040001000800020005000000"], 0x38}}, 0x0)
syz_usb_connect(0x0, 0x2b, &(0x7f0000000480)=ANY=[@ANYBLOB="12010002000000408106050000010000000109021900010100803209040000010a00000007058102"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x10000)

11m25.319659821s ago: executing program 2 (id=12):
syz_usb_connect(0x0, 0x2b, &(0x7f0000000480)=ANY=[@ANYBLOB="12010002000000408106050000010000000109021900010100803209040000010a0000000705"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x10000)

11m24.124419079s ago: executing program 2 (id=19):
syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0)
r0 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x20000000, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0, &(0x7f00000004c0)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, {0x4644}})
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
recvmsg(r4, 0x0, 0x2)

11m24.116885375s ago: executing program 2 (id=20):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080)

11m23.834549668s ago: executing program 2 (id=23):
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x0, 0x6, 0x80000001, 0x7}, 0x3d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412)
r6 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005)

11m23.792061017s ago: executing program 32 (id=23):
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x0, 0x6, 0x80000001, 0x7}, 0x3d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412)
r6 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005)

8m12.332725126s ago: executing program 4 (id=1254):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000002300090025bd700002d4df250100000008000100ac1414bb14000c"], 0x30}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x180940, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000840)=0x3)
r3 = syz_open_procfs(0x0, &(0x7f0000000880)='net/icmp6\x00')
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0x8, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000004100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000004000002850000008600000095"], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000b40)={'syz_tun\x00', <r7=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b80)={r6, r7}, 0x2d)
syz_emit_ethernet(0x66, &(0x7f0000000bc0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x30, 0x3a, 0xfe, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x2, 0x6, "081331", 0x1, 0x33, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty}}}}}}}, 0x0)
dup3(r3, r2, 0x80000)
r8 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0)
ioctl$VIDIOC_G_SELECTION(r8, 0xc040565e, &(0x7f0000000940)={0x2, 0x100, 0x2, {0x9, 0x3, 0x6, 0x81}})
mkdirat(r3, &(0x7f00000008c0)='./file0\x00', 0x8)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0)
r9 = openat$kvm(0xffffff9c, &(0x7f00000006c0), 0x800, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000740)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x7], 0x100000, 0x240046})
ioctl$KVM_RUN(r11, 0xae80, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r12, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10040)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3e4, 0xffffffff, 0xe4, 0x0, 0x254, 0xfeffffff, 0xffffffff, 0x31c, 0x31c, 0x31c, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'rose0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x130, 0x170, 0x0, {}, [@common=@srh1={{0x8c}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, @local, [0xff000000, 0xff000000, 0x0, 0x100], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x440)

8m12.163712763s ago: executing program 4 (id=1256):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xbffffe0000000001, 0xfa11, 0xfffeffff}, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x28, 0x0, &(0x7f00000000c0))
ioctl$KVM_RUN(r1, 0xae80, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$apparmor_exec(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="65786563203a0008c499100949c23262e80dfac1d62de5d32dceea7045b53326"], 0x2a)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r4, &(0x7f0000000440)={&(0x7f0000000480)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_retopts={{0x10}}], 0x10}, 0x40000)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)
memfd_create(&(0x7f0000000180)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x4001})
socket$inet(0x2, 0x2, 0x7)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
openat$mice(0xffffff9c, &(0x7f0000000400), 0x1ad100)

8m10.451154063s ago: executing program 4 (id=1260):
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xfffffffe, 0x800, 0x3, 0x800000c3}, &(0x7f0000000580)=<r1=>0x0, &(0x7f0000000540)=<r2=>0x0, &(0x7f0000000f40)=<r3=>0x0)
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r5 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2)
ftruncate(r5, 0xffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4c040}, 0xc000)
fcntl$addseals(r5, 0x409, 0x3)
close(0x3)
ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x1, 0x0, 0x2000})
r7 = syz_io_uring_setup(0x1cfd, &(0x7f0000000400)={0x0, 0x800, 0x10000, 0x1, 0x91}, 0x0, &(0x7f0000000140)=<r8=>0x0, &(0x7f0000000240)=<r9=>0x0)
syz_io_uring_submit(0x0, r8, r9, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}})
io_uring_enter(r7, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
r10 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r10, 0x29, 0x2a, &(0x7f00000005c0)={0x8, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
syz_io_uring_submit(r1, r2, r3, 0x0)
io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)

8m10.298667392s ago: executing program 4 (id=1263):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x4010, r0, 0x28f42000)
read(r0, &(0x7f0000000080)=""/148, 0x94)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0)
mount$bind(&(0x7f0000001640)='./file0\x00', &(0x7f0000001680)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000016c0)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000001700)='\x00', 0x9801)
move_mount(r2, &(0x7f0000001740)='.\x00', 0xffffffffffffff9c, &(0x7f0000001780)='./file0\x00', 0x0)
mount$bind(&(0x7f00000017c0)='./file0/../file0\x00', &(0x7f0000001800)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(0x0, &(0x7f0000001840)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000001880)='./file0/file0\x00', &(0x7f00000018c0)='./file0\x00', 0x0, 0x2125099, 0x0)
umount2(&(0x7f0000001900)='./file0\x00', 0x8)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4)
r3 = memfd_create(&(0x7f0000001440)='%\x00#D)\xdeA\x02\n,\x06\x89\x96\x8f\xd3F\x9fe\xf7\x9f\x9f\x0f\xeb\v\xc3\x86c\xe7\xc6\x88\xce%0\x05\x9d4M\tH\x89m\x14>4\xe4\xb4m\fF\xaf\x9d&\x05\xcf\xc1HZ\x9a\xa3X\xaa;t\x12\'\xf5\x18PvY\xbe\xd1J6\xd9\xa6\xec\xde\xd4\xb9I5\x1a\xc6S\x14\x18]K\xe0\xef\x97Vv\xbe\x8a\xffG\xc79\x9d\x19\x10\x8c\xb2\xe0` >D\x11*V\xb9\xcfi\x03FnU\t|b\xbe\x10\xc4\xd4\x01\xb2=\x11%\xd0`-\xe2\x1d\x8e\x7f\xd1\x15\x03\xa5(\x1e\x05H\xe8\'[0\xc2\vO\xdc\xf8?QT[8:f\xe9f\x9b\xd3\xe2:\xa2b\xa3\x89\n\x9d\n\xe2\xb7\xf6\xa6\xbe\x82]YF\x90\x8e\xde\xbd\xb1w\xf7\x15\xed\xd8\xea\xa8\xef\xfbM\x82oX\x80~\xe3\x1fH\xf4\x99\xa4\xd2E\'@\xab\x13\x94\xc2\xef\x81R\xbd\xaah\xd2D\xce\x1f\'\x8b9\xa5\x88\xf1C\x1a\a!\x95\x165RS1\x9e[\xf4\xa9v\xfah\xb7\xd8\x9c&\x85\xcbs\xad\x14\xf5\xd5\xd7M\x06\x15\x9d\xa2\xfb\xfc\x9c\x94`x\xdfma\xa6\x04\x06\xcb\xeb\vC{b\xceW3l\x8a\x9cO\"\xb5\xeb#\x03k\xe4\x99\xeb\xe3\x9d\xba\xd0\xb5\x0fh\xf2\xdc\x01\x81\xb48\xea\xaf\xd0*\x9c\x1d\xba,;\x17\xfb\x94M1\xea\x1f\xbf', 0x3)
ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f00000015c0)={0x0, 0x1, 0x11, 0xfffb})
ioctl$FS_IOC_RESVSP(r3, 0x402c5829, &(0x7f0000001600)={0x0, 0x1, 0xf7, 0x9})
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="db1f00d6f4989c53f4aee0b60e8ce7ef2b9f1c88972e370a33fd463bf2f11fa39500000000a91c5f55f4765f8dab412112382b7fa6a582b644b9190efdc12b27434c67568c37822900b432a1e9406c745c08237bbbf0a589400e931ea6cc9aa3288c7020", 0x64}, {&(0x7f0000000300)="549cac65e6786ad82a84515185600984f451080ebf5df00f474514b2d6f77277295a8b6e020f44e167a9e8296e2bd665360c725ba570d62abd2c6e976c50c5d5d70f9644b99d60a49ded049ed05cbc9fcef9850c10d903bd0c7be81c9da8f2f547b7be0c65b65f18424e3030e207f7062b3530c1fd62038aa5e4ae52261efd4dd014f68ce709c79de5115551c8133a4043cdf88674ca2b5b4ff27c660fd294ac24f21432cb097b77b83792ea3b79aaebc682ea19894166727f5c187c3e08ba05b7306306accad133037d2ed2f0127e092d75f42a7b", 0xd5}, {&(0x7f0000000400)="570c4e5b7827c2d241bedf3f5447169c3f2943fcbc1f47dfc22c0944e8f99f937677ce58575bfae935623fa9cb59045a49badcf8df0133473ccf852267a68bb2cad431f3d72665d216a1052ca37f26de2bffd89fbd871e69666af4194eee95df1698966092f11da0216222ab81b206053bbbc4ad9c83b0d1f183c43ceac2d2cbbfda4be7a23886d48ae081f83c720cf495f88d422cfe16b190250325f0d156a2dc26bdb3702c925ff58b2dbce7f77d8d85c61fcc4c03f47aebc55612c36dcb707f420d89d4fce018a8d61bd159c838df19898cb1c0dcfe6f24d9581d7ce282252a", 0xe1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000005c0)="b9c615adb435cca0e14c99165991425bf6869feb5bc91d16faaa1e553b9ba9b8885e3132b577ed920350b853789a3c023c2b935ea8b2b9b98d4523acf27f4e45df6667b26b934bf4a2e10acf78417923dcef99d0ddb6becfb3766973d20a95ee7e83108308969fca595741c7f50e9d35d0462bc65c295881993cbc4dfd962af204ba800dd23f3721fd98b3f6121083f68f408363a4a8620d535c1b29fbbe546f4a2b0b7681251f3ecc7b782f3df90e2942f9e737bb561ddd15b4b6b5ece9448a616a5221828a7ea71dfaaa7cf64f26b41375972d28cd3db598fa5a5625b6b00f13f7d6c194f39cc639e8a5b0ab06d35935e856555504eb25395adec288f6ff8e99de0119f863a5dbf4e3b18cf049d3b70379a3131cd90f25bd5e2f1c3b83e72b8cc88226def21b7824f92cddbf8f4271315ab0ba1dcab80dc1068d3491baacbbc651ba06cfd8bf3cfecce1c0b25124e28f839f25c7d4e2ad533f8fb14c514de63a86e4f06e9799ecaf00f7ff665a2fed73e567536d1d6b1e929a51d3d682559d4dbc174d9d389e53866249e58ff31a1832f453d299e7a3c4e4b673b546f2f0b670183e77f56a17f07c279bae471ce38124d34b6cb40dd5ac278f173c1296d07653d60ed4c1b8ccf2f3d7ff820bacfa26e4086a7bb79e5a72dbed2e8fff1340a9b158b0da2541074be22c160213fea049286cd8da7fb115968c622063040f9b2fbebbd3bbef6eddb51a1c7a082cc76fc7a8348c01b71d87631363e56cba171a1b501af0e02bcf4c1aaebde108a68de36ed5bbfd8037776f1b265716ace9faf8dfc59235cadfecf04f7fb81d03f112cab7c0ff3075d58ffa492652dd110adca2dda9a430535b9474c4faed55e8428fac436dd9723fb98cae9396cd56339b1012b84ba5181dcb5baf6e6f4aeeca6d138592c8e11abf0057f22c99aa0f3c64dd39f97e99a7be65e4dc45a5ef85ecf7c015cda60ae91b2eb439cb67e69b6eb9dd0b61043557530353d72e0468560d4bafcca1bd7f9c6afe1a3a662fb025fc19369ffee064153cbbeec0570b8fe3409f8309cfe934bc5583874e5ba8fd5612c1686dea7433e35aff9ff0e21204915e5c1239de29a5f38f110c4bf26ad1d167f17152d032fa550e8b36c4a45ebddfdbbce0cc2d90e84818ad6884e515091407be569cf665ab7d9274d33ea803cc08c1b3bc542dc81ce88acfcb1229aa5e7ba6f9f1a16495c11829d97b6bef2cd8decd5add93a5574cb84d2c6bb932222909916b2aba380cef005032d404d28cc3ab15c2de814412fc5f35e783687174fc7f80851ace4ce383e8e998bf94f0f87a6bc18d89c0c97c1ebe6e9247922f8535a0d23d44a64f538afa58b3c7a1e8cb5ee501c8e9cb7f476c89c4716f726ac9563c2c8fa14c1a5dd4cc3aa39c6dc1c87995b4f0334fd1f33437af245eb2a40d7e44293390397ae728acb1bf9a77cb8344ac9e2fa5e992bdbfa09767d44c17712941a4f52d888cb4377ab447deff3fca6953dd13eb9737d99d760cade6a9a0918d4cdfeffc8a7d8641c26d5ab5b367122b0b27055f9fc5633e85fc438969ca0a242f0cd14eec12e99bd7d7f8ad802c452566a86d69b8499822c3d04661de7e52124499e574f9e4c0482de31c798568f00432af1e4f988ff4097037c8a1f02a2aa36f9410bbbd47d647c63f22d7d3e72a92ff70934fd18e4b14f9be799308ba42d58c759e2f66696ead711902070c8d1dda1de261e9881429c5c9b4e4625b37b621928112dba116245f8a541f20dde2b4b820a93f153315fc7894cd9195c9076bd8b5fa922a2cce6a9af29c9401a45893936a3ce9485ddf84d043da66f966deb11fb2657b3a06eec71413a4eb3f035080c7368c53c1ce460b51a179ce81442fefef656d13b3ea789befda32fb6d3eb42f75cdeb62f9cc73b2429745f4a8105c64683ecd90734913f94699859c346c7bce9c828b1e0a2d15b8dc2ae8e4449febfd168c5719c039eb44ed314e060b063d3b32ee017ab1a28acc0861da4ba15e9a71040bf106bb45fe3b719ce40a0649f4f73265235164e88563bed2960a35007e46a539f96234b36750643dd239e482359221a3e75332d5beb627fa9d84bc3a2eb7266c890d1b2295042916fb89e935e8fa6237555f931fb312849571d8889152de3338a5c30e611698e4612c8c2586c182d799428352f3a9ec290985e427312a8d3365a8819097b1697f29f7a207e1323d96207a4e46ba4e5b50d984135da9cca6bcf4c62ea0dc2c1ad88c45163c420da885a456a06384deacd39eff91ae124c33749f007c9c73b39b5ef456e06c7394a010066d72790606d39add005ae84bdda4104077b8a797e24d329071c6e4836a5451f4a043b1f71388bbfade35b0ac98ca8711ddfe042f28cb8f76bb8fff0870c67c2c1150a580a93cc16edf6e73d15319263e36723e76d2203a96cb438b6246a3ac4da6621a7e4c89133584341862d547d7bb885c4c169507e30a16170a242a32ead68bd9a5ab169f7460df9c7a135f8b6af647101cdaf6fbd9c3b849ab70bce5dea4cbf5959dad2a91a2dbc095dfc8960e4c3872eabb62565d420c8df1b44e05ab16c69109a4c07733340d59fd3f9853d0183355f05ddeaee5a4f9a5f03f5d84c76634db61b6d9a4aea51ddbdf43aee55e7f3780cd31ee799f6f33003606a5df9db08849da7bf884df395b50474b24b3527682a87968cd1be63ec8405d38cba5db9c943987eda334efac5ff30b137259babe08532e2a930262edf64c7364dc0d987374d6ca78e16a63d56a63a05b6cd9044abc8599b97aefd6460b13dbef9ff09bb15d419f542eae4a237b0fe376605d300467679c06c33aba623c903a559d0836d8353afed6e39e68be56b775a4952e3edbdc461ea3e6883b596ae6e66e0a92f18d48abf9a23eb5ce70ceed4a2ab6611ed70600a9fced116864dcbf43cb72ea3af69f6a47a9728950fbc7c8c71f6c75713423e2b39ea8ea8e2ebdf68fe639fa8b2577c675a4706343577c8237431e91bd6c2a423d774ebd06db324361a0c6857fa0038974761d178224545a326093d945453119e18be577add7dc62317989bbd4ccc5c962c7c31ef56b5126e92adf8899a1cb3416b4087cc034c29b3518bcf8fe105f6bd70cd766a0617ea45ebf9750ac99ef104a7e14405fbab6d7d735fb7ddf72bc368ba08c14ccd6a1f35fb894b030136a05d882a2613fbcea5f934dcab251d047185eaf8e7e349998ec3cd220251a13d63a6926a27314234e55bfe66b125b502c82c7c8e0a7f71ac8deb73a8731d127ff8722cbc2794b99b4594f90cd62afc53a217ff5860146ec98f422191349a5c252ec81ddb055936712d2edf152564cfc0dc98dca3d1d4a6dca380aee72a4f1d33594a16c9f4a27fca028f2f328fc358962bfdfeaa2e060e19cc8232937d5d2b713ee45d6cd7b5a8fb1450f81653eef0cd73bbda10318abbb30daa1cacd59d30722b5264175a8c3ef10426647afa6eecd7d2cebef58b721de10a1dfe4fe1a7735912c9dc68576d5d462b4aa039f350135e2ca8c4203f379ba0afd22fbe84df3611a359e58bc73529517ff2c2b5d6f4cc44df1f37bb6910d9eaff57306a785715a237543f1b2f16b2ae50b5018e0b8988feaa1b24a9106497f87eeb12cbf705c17d5c53b41b7b6ed022ea3ce572a23e22f689fdc517a0d9cc6a997cfb0eefd67162cd727422f4164837dd349c0214922dbfc50c3657b1913ea1f88778320913229432c6c73527876b553b0a6158063323a7f2f36e0216ebaf5e9ea52a85447d43c8a0cbccdfb0b453ca1df93951471cb72225b97b75f1e77225779657bf6d77313ef8bda668c914769b1c0c0dbc5587e4ace985996a4b9ff4071488684d96d131810baa439ad5f9254217142a5697dbb7abf05a3bbde089b2a2e94153edce47b334ec35572bab1cb551c3c76acb7bc1ab82a7cfc6177b2dea4bb012a0cb3f71117f963a5fcf777c6d03ae50e2ffea596d0c5fb821a585352eace44cae8698c51889f341fc68bf0c0ff565f23aca99fe2194e6066c756848d8ff68d5b62075a374c3441217eb2b9ca87263de59a6240ceae2f8a86b6c064dafc6fb9a669e53c5cf815657766d9903d613fdf6fe2957be15eab0af44c1a4a933f940bea2e46518b31c2a1faf9596d086e4f397b200b040c0e5d090142cf42f7de30c3f8a6deb9331d5ea338470df38689f4456ab8d243d381dc7c551784d6ff11a1bcae327fb72cb4de6f04f9e0cbb5a069633baf800ff676d8efa4471a0d412f1d449b797a3c35cf6904db713639974d6f3d157b7dccf1526e0c65598b656cfb30be0643058ac33d6e51bd720a3aa1efe72148d9b2a2c58e44e453feb31956d67119ca0d4a75db27fd62c207902d27b59f7947691d6ac234522c7722ba04aacafd795a0cfa9d01fc4eecb9233ba819a48e22b9b9d2541f843e28bcd80fc058797d99438d20d39af224727c38a72c8ec008c0d286227dcb4799c8b0096c220fc450f10b2e52f293b624e64cac03084cc2e2626215522980f4d19ef37406f534b1061fe9691e721a38e6854c318433c574b17a841af00195306e2209b46021dda5126cc88a49046c17ae48f0a890fa8c53c248d12f96b2f2abe3155026679bc19f8abb0c90f6554b818294bca0525f49e20eb0daafea45ae572a00bc3a8fae5cefc6d5b90c52f0dfe0de4873f1ebd2cf1ebbf09acc9c83d491d5c7e8612c0a7a12376da52246c6bbd548e81e005e466e7848b4bf348b06f09a2da11ea1102c585549b4b7244e999e10f8a89f31d3855ac706742612c815552c784b4e30d51a4dd5a5b92e6cb1e36c19e8e424b450d590925f8bc94133b7a45feea68cd48bfa165d04d2a83c1374066a7cb98f3bf92c226624749eb5ce340be1178baea230909842503ec5696f8976b535f31ca52ed17c5befecb94ba9ec214ac36c3b0c955f30352e57e469564df9ab96e688e2449e821d84814e5d062a631721a3950bf2243a205ead77188121e4b44ddd0ea9946f0a10d805dc", 0xde6}], 0x1}}], 0x2, 0x8800)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000001400)=0x40)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000580), 0x6)
ioctl$sock_bt_hci(r4, 0x800448d5, &(0x7f00000005c0))

8m10.113088276s ago: executing program 4 (id=1268):
r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0)
sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008884}, 0x80)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00')
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x41, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x1d, &(0x7f0000000a40)=0x4, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'hsr0\x00', <r5=>0x0})
sendto$packet(r3, &(0x7f0000000140)="0102030405060708090a0b0c0d0e0f10", 0x10, 0x0, &(0x7f0000000880)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14)
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f00000008c0)="01154e0001000011221e445508000102030405060708090a0b0c", 0x1a, 0x0, &(0x7f0000000900)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, 0x0, 0x0)
nanosleep(&(0x7f0000000a00)={0x0, 0x10000000}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f00000006c0)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r8, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10)
r9 = openat$nvram(0xffffff9c, &(0x7f0000000a80), 0x4c4900, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0185648, &(0x7f0000000b00)={0x0, 0x7c, 0x7, r9, 0x0, &(0x7f0000000ac0)={0x9909cb, 0x77, '\x00', @value64=0x6}})
write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x830, 0x0, 0x0)
writev(r1, &(0x7f0000000700), 0x100000000000022d)

8m9.863337964s ago: executing program 4 (id=1270):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xbffffe0000000001, 0xfa11, 0xfffeffff}, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x28, 0x0, &(0x7f00000000c0))
ioctl$KVM_RUN(r1, 0xae80, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$apparmor_exec(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="65786563203a0008c499100949c23262e80dfac1d62de5d32dceea7045b53326"], 0x2a)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r4, &(0x7f0000000440)={&(0x7f0000000480)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_retopts={{0x10}}], 0x10}, 0x40000)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)
memfd_create(&(0x7f0000000180)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x4001})
r5 = syz_usb_connect(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905", @ANYRES32], 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
openat$mice(0xffffff9c, &(0x7f0000000400), 0x1ad100)

8m9.787828471s ago: executing program 33 (id=1270):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xbffffe0000000001, 0xfa11, 0xfffeffff}, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x28, 0x0, &(0x7f00000000c0))
ioctl$KVM_RUN(r1, 0xae80, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$apparmor_exec(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="65786563203a0008c499100949c23262e80dfac1d62de5d32dceea7045b53326"], 0x2a)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r4, &(0x7f0000000440)={&(0x7f0000000480)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_retopts={{0x10}}], 0x10}, 0x40000)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)
memfd_create(&(0x7f0000000180)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x4001})
r5 = syz_usb_connect(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905", @ANYRES32], 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
openat$mice(0xffffff9c, &(0x7f0000000400), 0x1ad100)

6.317656173s ago: executing program 1 (id=3892):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b400000019000100000000000000000020010000000000000000000000000000ff02000000000000000000000000000100000005000000000a0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000090000000000000000000000000000f3ff000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000006000000000000000000000000000000000000020000000300"/104], 0xb4}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffed9, &(0x7f0000000340)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0900000000000000fbffffffffffffffb9ffffffffffffff0500000000000000cf00000000000000690000000000000002000000000000000800000000000000f30100000000000000800000000000000000000000000040000000000000000000000000bc6b6e0002000103"], 0x1f0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(0x0, 0x1ff)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
listen(r2, 0x4)
connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x24)
recvmmsg(r2, 0x0, 0x0, 0x40000100, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000300)='8250_p', 0x6)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x2000000000000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000090000000000000006ee000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0xa, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x0, &(0x7f0000000040), 0x0)
syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0)

5.213812736s ago: executing program 1 (id=3895):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000005c0)="0102030405060708090a0b0c0d0e0f", 0xf, 0x0, 0x0, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
syz_emit_ethernet(0x7e, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffff00000000000088a84e008100230086dd6800000000403affef8000000000000008000000001900bbff0200250000000000000000000000010105907804000000679aef123fff11fffe8000000000000000000018ea4621762eebef000000ffffac14132b3b6ee4444a69971b752b1d000000000000004b0000"], 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x24, &(0x7f00000003c0), 0x4)
r4 = add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000000000061616161616161616161616161616161616161616161616161616161616161613131313131313131313131313131313131313131313131313131313131313131fc19d4feb7b94d94851d8f6c3258f008aa7105e1970f37438ec51b5bdec4b5889771"], 0x48, 0xfffffffffffffffd)
keyctl$revoke(0x3, r4)
r5 = socket$inet(0x2, 0x5, 0x0)
shutdown(r5, 0x0)
recvmmsg(r5, &(0x7f0000000340), 0xa0d, 0x0, 0x0)
sendto$packet(r2, &(0x7f00000008c0)="01154e0001000011221e445508000102030405060708090a0b0c", 0x1a, 0x0, &(0x7f0000000900)={0x11, 0x11, r1, 0x1, 0x0, 0x6, @local}, 0x14)
r6 = syz_usb_connect(0x1, 0x36, &(0x7f0000000140)=ANY=[@ANYRES16=r4, @ANYRESHEX=r4], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r7, &(0x7f00000007c0)=[{&(0x7f0000000800)='X', 0x1}], 0x1)
pwrite64(r7, &(0x7f0000000840)='F', 0x1, 0x4)
read(0xffffffffffffffff, &(0x7f0000000a00)=""/4096, 0x1000)
timer_settime(0x0, 0x0, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000400"], 0x20}}, 0x0)
pipe2$9p(&(0x7f0000000000), 0x80080)
r9 = socket(0x10, 0x4, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyS0\x00', 0x2, 0x0)
ioctl(r10, 0x542e, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYRESHEX=0x0, @ANYRES8=r1, @ANYRES32=r6], 0x15c}, 0x1, 0x0, 0x0, 0x4000084}, 0x2404c0d4)
ioctl$TIOCGSOFTCAR(r10, 0x5419, &(0x7f0000000700))
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000001600010a0000000000000020060000000400000008000a00000000003661c46e498e0855c54ccc861f3f684684b4c3ced4e01e12e04b2853d4673ace3c26ae29a930a498c3ac4fed2323631d319cb7db4c01e498aa543048cb1619d85724091b6d660efe630ca2002b10965c5a2cce8cad2de55fc48c6f17f4f5943392a4a3a83a737fb29b21"], 0x20}}, 0x4048000)
write$nbd(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB="674466980100000002000200010000232decfbdd8730a7bcd72df06d244ad89d7ba211f0aef6f037a9ec4fd7248f879a5c0b9ce4b2f40d094cecba00837a9e704a8d5b63960ad5533ae79c866aed70fa18a97ecaf8c52e7d9f046c1d454554c126f8b88551afd9fb7d6f3196e7ae2b759122c5214f93eb3929ad06d61942e89e947770d0b3c730e773601aa9a663a3e3908e96449f97f3769853f4d98dfdab7c43ec567a13fd34e35c7210cdc8b6b2fa98ee0f0f3f9f99b77faa84960d475c7940256657a1f76b1b6518"], 0xca)

3.069094564s ago: executing program 0 (id=3908):
symlinkat(&(0x7f0000000500)='.\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="620ad0ff45002c00620ad4ff00000000620ad8ff40060000620adcff7f000001620ae0ff7f000001620ae4ff12345678620ae8ff11223344620aecff00000000620af0ff60021000620af4ff00000000620af8ff02040000620afcff00000000bfa100000000000007010000d0ffffffbfa200000000000007020000e4ffffffb70300001800000085000000cc000000b7000000020000009500000000000000", @ANYRESOCT, @ANYRES16, @ANYRES32, @ANYRES8], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x20000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x36, 0x0, &(0x7f0000000480)="00000000000100000000000208004500002800000000400600007f0000017f0000011234567800000001000000005002100000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
clock_settime(0x0, &(0x7f00000004c0)={0x77359400})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x38, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000740)=@device_b, &(0x7f0000000880)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218240706610049000000"], 0x3e)
nanosleep(&(0x7f00000008c0)={0x0, 0x1dcd6500}, &(0x7f0000000900))
syz_80211_inject_frame(&(0x7f0000000940)=@device_b, &(0x7f0000000980)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f00000009c0)={0x0, 0x1dcd6500}, &(0x7f0000000a00))
syz_80211_inject_frame(&(0x7f0000000a40)=@device_b, &(0x7f0000000a80)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14000000100001000000000c000000000000000a2c000000160a01000000000000000000010000010900010073797a30000000000900020073797a710a6075fcf9ac95ef63553200000000140000001000010000"], 0x54}}, 0x0)
nanosleep(&(0x7f0000000bc0)={0x1}, &(0x7f0000000c00))
r6 = memfd_create(&(0x7f0000000c40)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+  \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz\x03\x00\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92 \x00*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\f\xc9\xc5H\x0f;\xd3\xe2\at\x9bJ\xe6\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2fnj\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xee\xdc\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)\xdeA\x1ed\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xcf\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\xf6\xb8\xebN\xe2\x18\x04[\xabW}\xb1\xffo\xae~=\x9dd\x9f\x92\xd2[\xb8\xb6\x1a\x02c\xa1\xd1H\xb7@\x06\x96s\xef\xee\x92\xfaC\x15+\x84\x00\f\n\x1cpEn\xad\xa7IRf\xc65\x15<}\xb8\x05\xe4\xb7\x9e\xf3\xda\xdavzB\xf8qj\x9e\xe4\xbd\x05\xcfx\xb5\x12\t\xe0\xf2\'f\xf4+\xb3\xdeA6\x10O\xdd\x9c\xf7B', 0x6)
fcntl$addseals(r6, 0x409, 0x8)
ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x4000})
sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)={0x20, r3, 0x5, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x20}}, 0x0)
clock_adjtime(0x6, &(0x7f00000005c0)={0x3, 0x9, 0x380000, 0x208, 0x5, 0xfffffffffffffff7, 0x1000000d, 0x0, 0x200ae, 0x6, 0x7, 0x0, 0xfffffffffffff04f, 0x7, 0xffffffffffffffff, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x102, 0x4, 0x3, 0x5, 0x3, 0x3ff, 0x8})
clock_adjtime(0x0, &(0x7f0000000640)={0x6, 0x7, 0x6, 0x195, 0x1, 0x9, 0x4, 0xe7, 0x72a, 0x80000001, 0x400, 0x7, 0x1a, 0xaed8, 0x8, 0x0, 0xfffffffffffffffb, 0x5, 0x1, 0x7ff, 0x6, 0x0, 0x8, 0x9, 0xfffffffffffff800})
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0)

2.607053876s ago: executing program 5 (id=3910):
fsopen(&(0x7f00000000c0)='ntfs3\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x0, 0x5e)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="3500000002"], 0x8)
r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[], 0xff2e)
r3 = gettid()
timer_create(0x0, &(0x7f0000000380)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f00000003c0))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000400)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$TCXONC(r2, 0x540a, 0x2)

2.335767664s ago: executing program 5 (id=3911):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x5c}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0xdff4092e7c6caadc)
mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/page_tables/kernel\x00', 0x0, 0x10c)
read(r1, &(0x7f0000000300)=""/153, 0x99)

2.06713319s ago: executing program 1 (id=3916):
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'gre0\x00', &(0x7f0000000880)={'syztnl0\x00', <r0=>0x0, 0x1, 0x7800, 0x7fff, 0x8, {{0x22, 0x4, 0x0, 0x6, 0x88, 0x66, 0x0, 0x0, 0x29, 0x0, @broadcast, @rand_addr=0x64010100, {[@cipso={0x86, 0x11, 0x1, [{0x7, 0xb, "40388260b475ab2129"}]}, @ssrr={0x89, 0x1f, 0xe2, [@dev={0xac, 0x14, 0x14, 0x33}, @dev={0xac, 0x14, 0x14, 0x35}, @private=0xa010101, @local, @dev={0xac, 0x14, 0x14, 0x2c}, @empty, @private=0xa010101]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x3, 0x0, 0x4, [0x7, 0x1, 0x3]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0xf5, [@multicast1, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x2f}]}, @rr={0x7, 0x7, 0x62, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x88, 0x3, "9d"}, @generic={0x88, 0x2}, @timestamp_addr={0x44, 0xc, 0xe7, 0x1, 0xd, [{@dev={0xac, 0x14, 0x14, 0x11}, 0x1}]}]}}}}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@deltclass={0x38, 0x29, 0x100, 0x70bd22, 0x25dfdbf9, {0x0, 0x0, 0x0, r0, {0x8, 0xf}, {0xfff3, 0xe}, {0xffe5, 0x2}}, [@tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x5d, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x24000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioprio_get$uid(0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x4a, 0x0, 0x1, 0x0, 0x0, 0x1000c957}, 0x404c030)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r2 = getpid()
r3 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000540)={0x3, 0x1, &(0x7f00000003c0)=""/152, &(0x7f0000000480)=""/71, &(0x7f0000000500)=""/9, 0x41000})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
socket(0xa, 0x3, 0x3a)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a310000000040000380080001400000000008000240000000042c00038014000100766c616e30000000000000000000000014000100776c616e30000000000000000000000048000000160a0101000b000300000000010000000900020073797a31000000000900010073797a30000000001c000380180003801400010070696d36726567310000000000000000140000001000010000000000000000000000000a3b6c57f27ff0b06dc25d7de0177afe2d73942739ddda8de51ae9a80097402020db504c6759588aac41c3bbf3c9e47c569e74899e3f34c03078355f2612f35a71e87a4cc90e0e01c68a11f0a389b137f05bea1d55a18c7ddd0d4f03c67aa76736046c0ae058da1d11f0f016bd3959ffc34acc67d9fc85bbe5b453915309df33e578507cdd3ef02230042d1e40eedd472f0dad8c3e0be43b70cc1a2fe54037e80f3e46298b1166f5f0dba56608b2df817110e79f33e4ec7a0bfc933e35db156c0dae13aaf67f3fa1943d885af39edee91a49ce06a65755acc822d91e6eb76bf4"], 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0x10001, 0x8, 0x5, 0x82, 0x8, 0xfa, 0x40, 0x8, 0x5, [0x1000006, 0x0, 0x5, 0x3, 0x0, 0x8a6d, 0xf7ffffff, 0x2], [0xffffffff]}})

1.466153955s ago: executing program 0 (id=3919):
fsopen(&(0x7f00000000c0)='ntfs3\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x0, 0x5e)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="3500000002"], 0x8)
r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[], 0xff2e)
r3 = gettid()
timer_create(0x0, &(0x7f0000000380)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f00000003c0))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000400)={0x0, 0x0, 0x10001, 0x5})
ioctl$TCXONC(r2, 0x540a, 0x2)

1.29653347s ago: executing program 3 (id=3920):
socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
gettid()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)

1.230375103s ago: executing program 3 (id=3921):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000200))
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000240))
fchdir(r0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0)
write$cgroup_int(r2, &(0x7f00000000c0)=0x985, 0x12)
syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)

1.208202988s ago: executing program 5 (id=3922):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x1, @mcast2, 0xffffffff}, 0x1c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @union={0x0, 0x0, 0x0, 0x5, 0x1}]}}, 0x0, 0x32, 0x0, 0xa}, 0x28)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x206, 0x20982)
ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522)
ioctl$USBDEVFS_WAIT_FOR_RESUME(r3, 0x5523)

1.176510142s ago: executing program 0 (id=3923):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000201000008000300", @ANYRES32, @ANYBLOB="08003f0000020000"], 0x24}}, 0x0)

1.134678582s ago: executing program 0 (id=3924):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newtfilter={0x84, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0xa}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_ACT={0x40, 0x2, [@m_bpf={0x3c, 0x1f, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}]}, {0x9, 0x6, "eb8d4e3027"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x84}}, 0x40010)
sendmsg$nl_route_sched(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x700, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0)

1.081757497s ago: executing program 1 (id=3925):
openat$vmci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000140)})
socket$netlink(0x10, 0x3, 0x0)
syz_open_dev$sg(&(0x7f00000005c0), 0xf9ba, 0x14b082)
syz_open_dev$sg(&(0x7f0000000600), 0x0, 0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00')
ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000080)={0x1a, 0x8, 0x19, 0x10, 0x6, 0x4, 0x2, 0xac, 0xffffffffffffffff})
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0)
ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000100))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x52)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
timer_create(0xb3b54c18e0590239, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000340)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dummy\x00', 0x42, 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./trace/uprobe_events\x00', 0x2, 0x0)
write(r2, &(0x7f0000000540)='p:mygroup/myevent ./dummy:0', 0x1b)
socket$kcm(0x2b, 0x1, 0x0)
r3 = syz_io_uring_setup(0xf08, &(0x7f0000000640)={0x0, 0xfefffffe, 0x80, 0x3, 0x2000361}, &(0x7f00000006c0)=<r4=>0x0, &(0x7f0000000700)=<r5=>0x0, &(0x7f0000000740)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000780)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x1, {0x54}})
io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
write(r2, &(0x7f0000000580)='p:mygroup/myevent ./dummy:0x2', 0x1d)
openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0)

1.080610009s ago: executing program 0 (id=3926):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="f8ced4f1ff036b1486a8992e40f8df22bd95bda3d527717c87098a7bd3616a358a219176f80a86c479bd9afa7815d18ef0ca3c4d4b988be6a2d4d5dc6308f4b05a4b010a83d6e383d63bd3537cf5b839c049e3970a4dabd4520ec6401d7946ecae23862760cac07aa5cc1959dab21405a9e96be376675aea9ce39268a863360b9e3617c618d51c7de2fe68719dd2c4a94b4e5b6b62cb04", 0x97}], 0x1)
r2 = openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0)
close(r2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xb, &(0x7f0000000300)=@raw=[@call={0x85, 0x0, 0x0, 0x7d}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @map_val={0x18, 0x1, 0x2, 0x0, r2}], &(0x7f0000000380)='GPL\x00', 0x4000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000440)="3cd211b45a78529c72481426b639", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
r4 = fsopen(&(0x7f0000000480)='9p\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000004c0)='source', &(0x7f0000000500)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = bpf$TOKEN_CREATE(0x24, 0x0, 0xfffffe0b)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='\x00', 0x89901)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
ioctl$TCFLSH(r7, 0x400455c8, 0x1)
ioctl$TIOCSTI(r7, 0x5412, 0x0)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x11, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r8, @ANYBLOB="0000000000000000b705000008000000850000006a00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000740))
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000780)={{0x1, 0x1, 0x18, r5, {0xfffff9e0}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
close(r6)
move_mount(r6, 0x0, r6, 0x0, 0x262)
r9 = socket$inet6(0xa, 0x2, 0x3a)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0xd4)
setsockopt$inet6_int(r9, 0x29, 0x3e, &(0x7f0000000800)=0x2, 0x4)
sendto$inet6(r9, &(0x7f0000000840)="800009e92208", 0x6, 0x0, &(0x7f0000000880)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c)
setsockopt$inet6_buf(r1, 0x29, 0x15, 0x0, 0x21)
ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000080))

1.038946773s ago: executing program 0 (id=3927):
symlinkat(&(0x7f0000000500)='.\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="620ad0ff45002c00620ad4ff00000000620ad8ff40060000620adcff7f000001620ae0ff7f000001620ae4ff12345678620ae8ff11223344620aecff00000000620af0ff60021000620af4ff00000000620af8ff02040000620afcff00000000bfa100000000000007010000d0ffffffbfa200000000000007020000e4ffffffb70300001800000085000000cc000000b7000000020000009500000000000000", @ANYRESOCT, @ANYRES16, @ANYRES32, @ANYRES8], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x20000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x36, 0x0, &(0x7f0000000480)="00000000000100000000000208004500002800000000400600007f0000017f0000011234567800000001000000005002100000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
clock_settime(0x0, &(0x7f00000004c0)={0x77359400})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x38, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000740)=@device_b, &(0x7f0000000880)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218240706610049000000"], 0x3e)
nanosleep(&(0x7f00000008c0)={0x0, 0x1dcd6500}, &(0x7f0000000900))
syz_80211_inject_frame(&(0x7f0000000940)=@device_b, &(0x7f0000000980)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f00000009c0)={0x0, 0x1dcd6500}, &(0x7f0000000a00))
syz_80211_inject_frame(&(0x7f0000000a40)=@device_b, &(0x7f0000000a80)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14000000100001000000000c000000000000000a2c000000160a01000000000000000000010000010900010073797a30000000000900020073797a710a6075fcf9ac95ef63553200000000140000001000010000"], 0x54}}, 0x0)
nanosleep(&(0x7f0000000bc0)={0x1}, &(0x7f0000000c00))
r6 = memfd_create(&(0x7f0000000c40)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+  \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz\x03\x00\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92 \x00*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\f\xc9\xc5H\x0f;\xd3\xe2\at\x9bJ\xe6\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2fnj\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xee\xdc\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)\xdeA\x1ed\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xcf\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\xf6\xb8\xebN\xe2\x18\x04[\xabW}\xb1\xffo\xae~=\x9dd\x9f\x92\xd2[\xb8\xb6\x1a\x02c\xa1\xd1H\xb7@\x06\x96s\xef\xee\x92\xfaC\x15+\x84\x00\f\n\x1cpEn\xad\xa7IRf\xc65\x15<}\xb8\x05\xe4\xb7\x9e\xf3\xda\xdavzB\xf8qj\x9e\xe4\xbd\x05\xcfx\xb5\x12\t\xe0\xf2\'f\xf4+\xb3\xdeA6\x10O\xdd\x9c\xf7B', 0x6)
fcntl$addseals(r6, 0x409, 0x8)
ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x4000})
sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)={0x20, r3, 0x5, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x20}}, 0x0)
clock_adjtime(0x6, &(0x7f00000005c0)={0x3, 0x9, 0x380000, 0x208, 0x5, 0xfffffffffffffff7, 0x1000000d, 0x0, 0x200ae, 0x6, 0x7, 0x0, 0xfffffffffffff04f, 0x7, 0xffffffffffffffff, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x102, 0x4, 0x3, 0x5, 0x3, 0x3ff, 0x8})
clock_adjtime(0x0, &(0x7f0000000640)={0x6, 0x7, 0x6, 0x195, 0x1, 0x9, 0x4, 0xe7, 0x72a, 0x80000001, 0x400, 0x7, 0x1a, 0xaed8, 0x8, 0x0, 0xfffffffffffffffb, 0x5, 0x1, 0x7ff, 0x6, 0x0, 0x8, 0x9, 0xfffffffffffff800})
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0)

604.358247ms ago: executing program 5 (id=3928):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
close(0x3)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xd000, 0xe, "0062ba7d8200000016001b000200f705096604"})
syz_open_pts(r3, 0xa0200)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x200088c4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdc01}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004)
sendmmsg(r4, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
setuid(0xee01)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x54}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x10000000}}}, &(0x7f0000000580)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@deltclass={0xac, 0x29, 0x8, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x3, 0xfffb}, {0xe, 0xf}, {0x7, 0xfff6}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x4}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x1, 0x6}}, @tclass_kind_options=@c_qfq={{0x8}, {0x3c, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x880e}, @TCA_QFQ_LMAX={0x8, 0x2, 0x2}, @TCA_QFQ_WEIGHT={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0xe}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x1}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x6f75}, @TCA_QFQ_LMAX={0x8, 0x2, 0x7}]}}, @tclass_kind_options=@c_ingress={0xc}]}, 0xac}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20702, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, 0x0)
close(0x3)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bridge0/bridge/group_addr\x00', 0x2, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})

199.061975ms ago: executing program 5 (id=3929):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="40030000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="24033300d0000000080211000001080211000000080211000000000004000000"], 0x340}}, 0x0)

193.788143ms ago: executing program 5 (id=3930):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x5c}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0xdff4092e7c6caadc)
mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/page_tables/kernel\x00', 0x0, 0x10c)
read(r1, &(0x7f0000000300)=""/153, 0x99)

193.652807ms ago: executing program 3 (id=3931):
fsopen(&(0x7f00000000c0)='ntfs3\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x0, 0x5e)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="3500000002"], 0x8)
r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[], 0xff2e)
r3 = gettid()
timer_create(0x0, &(0x7f0000000380)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f00000003c0))
ioctl$TCXONC(r2, 0x540a, 0x2)

158.904496ms ago: executing program 1 (id=3932):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000201000008000300", @ANYRES32, @ANYBLOB="08003f0000020000"], 0x24}}, 0x0)

121.503701ms ago: executing program 3 (id=3933):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x30, 0x41, 0x107, 0xfffffffe, 0xfffffffb, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x15, 0x0, 0x1, [@generic="52e4ff46"]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c010}, 0xc000)

83.158616ms ago: executing program 3 (id=3934):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x141f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

82.057092ms ago: executing program 1 (id=3935):
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x4, 0xfffffffffffffc00, 0x3, r0})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fsopen(&(0x7f0000000140)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000340)='fd', 0x0, r2)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x2)
fchdir(r4)
r5 = open(&(0x7f0000000380)='.\x00', 0x0, 0x244)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r6, r6)
setpgid(0x0, r6)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/resume', 0xa82, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0)
lstat(&(0x7f0000000400)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000440)='./bus/file0\x00', 0x0, 0x31d0000, 0x0)
write$cgroup_int(r7, &(0x7f0000000480)=0x4000921, 0x12)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0x9362, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000500)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x30, r8, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20010)
r11 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x800, 0x0, 0x3, 0x4, 0x9}, 0x20)
r12 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r12, 0x82, 0x44, &(0x7f00000002c0)={[{0x3d, 0x4e00, "a4842193fad36dc1b868ca4ecdc5f6c289c3731a5ec65e579855fe4ee096bd0371cc34fb531e9726fbb34038130d08f11f5320db270379c27b244e8e32"}]})
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000240000000030800034000000001080001400000001414000000110001"], 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x0)
setsockopt$inet6_int(r11, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)

0s ago: executing program 3 (id=3936):
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'gre0\x00', &(0x7f0000000880)={'syztnl0\x00', <r0=>0x0, 0x1, 0x7800, 0x7fff, 0x8, {{0x24, 0x4, 0x0, 0x6, 0x90, 0x66, 0x0, 0x0, 0x29, 0x0, @broadcast, @rand_addr=0x64010100, {[@cipso={0x86, 0x11, 0x1, [{0x7, 0xb, "40388260b475ab2129"}]}, @ssrr={0x89, 0x1f, 0xe2, [@dev={0xac, 0x14, 0x14, 0x33}, @dev={0xac, 0x14, 0x14, 0x35}, @private=0xa010101, @local, @dev={0xac, 0x14, 0x14, 0x2c}, @empty, @private=0xa010101]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x3, 0x0, 0x4, [0x7, 0x1, 0x3]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0xf5, [@multicast1, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x2f}]}, @rr={0x7, 0x7, 0x62, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x88, 0x3, "9d"}, @generic={0x88, 0x9, "264e61cc8ecba7"}, @timestamp_addr={0x44, 0xc, 0xe7, 0x1, 0xd, [{@dev={0xac, 0x14, 0x14, 0x11}, 0x1}]}]}}}}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@deltclass={0x38, 0x29, 0x100, 0x70bd22, 0x25dfdbf9, {0x0, 0x0, 0x0, r0, {0x8, 0xf}, {0xfff3, 0xe}, {0xffe5, 0x2}}, [@tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x5d, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x24000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioprio_get$uid(0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x4a, 0x0, 0x1, 0x0, 0x0, 0x1000c957}, 0x404c030)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r2 = getpid()
r3 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000540)={0x3, 0x1, &(0x7f00000003c0)=""/152, &(0x7f0000000480)=""/71, &(0x7f0000000500)=""/9, 0x41000})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
socket(0xa, 0x3, 0x3a)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0x10001, 0x8, 0x5, 0x82, 0x8, 0xfa, 0x40, 0x8, 0x5, [0x1000006, 0x0, 0x5, 0x3, 0x0, 0x8a6d, 0xf7ffffff, 0x2], [0xffffffff]}})

kernel console output (not intermixed with test programs):


[  936.673826][   T43] audit: type=1326 audit(2000000000.229:5956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.5.3304" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efec code=0x7ffc0000
[  936.707206][   T43] audit: type=1326 audit(2000000000.269:5957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.5.3304" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf748efec code=0x7ffc0000
[  936.707556][   T43] audit: type=1326 audit(2000000000.269:5958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.5.3304" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efec code=0x7ffc0000
[  936.707726][   T43] audit: type=1326 audit(2000000000.269:5959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.5.3304" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efec code=0x7ffc0000
[  936.805085][   T43] audit: type=1326 audit(2000000000.359:5960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.5.3304" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf748efec code=0x7ffc0000
[  937.055378][T12657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  937.458637][ T1158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  937.458744][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  937.605461][T17003] 9pnet_virtio: no channels available for device c:::
[  937.682260][T17006] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3308'.
[  937.682285][T17006] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3308'.
[  938.956276][T17027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3315'.
[  939.001171][   T43] kauditd_printk_skb: 1 callbacks suppressed
[  939.001190][   T43] audit: type=1326 audit(2000000002.559:5962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17028 comm="syz.3.3316" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000
[  939.001296][   T43] audit: type=1326 audit(2000000002.559:5963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17028 comm="syz.3.3316" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000
[  939.001532][   T43] audit: type=1326 audit(2000000002.559:5964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17028 comm="syz.3.3316" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f22fec code=0x7ffc0000
[  939.001613][   T43] audit: type=1326 audit(2000000002.559:5965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17028 comm="syz.3.3316" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000
[  939.001781][   T43] audit: type=1326 audit(2000000002.559:5966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17028 comm="syz.3.3316" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000
[  939.001866][   T43] audit: type=1326 audit(2000000002.559:5967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17028 comm="syz.3.3316" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000
[  939.001976][   T43] audit: type=1326 audit(2000000002.559:5968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17028 comm="syz.3.3316" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f22fec code=0x7ffc0000
[  939.002053][   T43] audit: type=1326 audit(2000000002.559:5969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17028 comm="syz.3.3316" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000
[  939.002171][   T43] audit: type=1326 audit(2000000002.559:5970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17028 comm="syz.3.3316" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f22fec code=0x7ffc0000
[  939.059140][T17031] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3314'.
[  939.103054][T17034] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3317'.
[  939.255176][ T5975] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  939.437554][ T5975] usb 10-1: New USB device found, idVendor=047e, idProduct=ffff, bcdDevice= 0.00
[  939.440220][ T5975] usb 10-1: config 0 has no interfaces?
[  939.440239][ T5975] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  939.442049][ T5975] usb 10-1: config 0 descriptor??
[  939.653611][T17023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  939.653874][T17023] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  940.027999][ T1158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  940.028149][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  940.095528][T15998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  940.335317][T14585] usb 48-1: device descriptor read/8, error -110
[  940.738112][T14585] usb usb48-port1: attempt power cycle
[  940.769690][T17050] FAULT_INJECTION: forcing a failure.
[  940.769690][T17050] name failslab, interval 1, probability 0, space 0, times 0
[  940.769712][T17050] CPU: 1 UID: 0 PID: 17050 Comm: syz.1.3322 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  940.769729][T17050] Tainted: [L]=SOFTLOCKUP
[  940.769733][T17050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  940.769740][T17050] Call Trace:
[  940.769744][T17050]  <TASK>
[  940.769750][T17050]  dump_stack_lvl+0x100/0x190
[  940.769770][T17050]  should_fail_ex.cold+0x5/0xa
[  940.769785][T17050]  should_failslab+0xc2/0x120
[  940.769804][T17050]  kmem_cache_alloc_noprof+0x92/0x6a0
[  940.769822][T17050]  ? do_getname+0x35/0x390
[  940.769837][T17050]  do_getname+0x35/0x390
[  940.769850][T17050]  do_sys_openat2+0xc7/0x1e0
[  940.769863][T17050]  ? __pfx_do_sys_openat2+0x10/0x10
[  940.769877][T17050]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  940.769893][T17050]  __ia32_compat_sys_openat+0x12d/0x210
[  940.769907][T17050]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  940.769925][T17050]  __do_fast_syscall_32+0x13a/0x8b0
[  940.769937][T17050]  ? lockdep_hardirqs_on+0x7d/0x110
[  940.769956][T17050]  do_fast_syscall_32+0x32/0x70
[  940.769968][T17050]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  940.769982][T17050] RIP: 0023:0xf7f54fec
[  940.769997][T17050] Code: Unable to access opcode bytes at 0xf7f54fc2.
[  940.770003][T17050] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127
[  940.770014][T17050] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000400
[  940.770022][T17050] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[  940.770029][T17050] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  940.770035][T17050] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  940.770043][T17050] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  940.770064][T17050]  </TASK>
[  941.231663][T17062] 9pnet_virtio: no channels available for device c:::
[  941.345082][T14585] usb usb48-port1: unable to enumerate USB device
[  941.671324][T14585] usb 10-1: USB disconnect, device number 8
[  942.119381][T17081] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3331'.
[  942.235222][ T5280] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  942.385522][ T5280] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  942.386338][ T5280] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  942.386354][ T5280] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  942.387135][ T5280] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  942.387149][ T5280] usb 6-1: SerialNumber: syz
[  942.391609][T17079] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  942.599978][T17079] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  942.702246][T17094] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3334'.
[  942.702261][T17094] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3334'.
[  942.715514][   T43] audit: type=1326 audit(2000000006.279:5971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17093 comm="syz.5.3334" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf748efec code=0x0
[  943.135331][T12657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  943.218614][ T6920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  943.218762][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  943.694021][ T5280] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71
[  943.761179][   T42] libceph: connect (1)[c::]:6789 error -101
[  943.761462][   T42] libceph: mon0 (1)[c::]:6789 connect error
[  944.015274][   T42] libceph: connect (1)[c::]:6789 error -101
[  944.015363][   T42] libceph: mon0 (1)[c::]:6789 connect error
[  944.024197][T17105] ceph: No mds server is up or the cluster is laggy
[  944.450892][T17111] Context (ID=0x0) not attached to queue pair (handle=0x0:0xffffffff)
[  944.746829][ T5280] usb 6-1: USB disconnect, device number 16
[  945.775464][T10959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  945.775607][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  946.175357][T12657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  946.234179][T17138] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3342'.
[  947.231036][T17142] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  947.344268][T17151] 9pnet_virtio: no channels available for device c:::
[  947.853863][T17166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  947.915924][T17167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  947.976385][T17171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  948.976118][ T6921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  948.976215][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  949.215371][T12657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  949.588427][T17202] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3361'.
[  950.196839][   T43] audit: type=1326 audit(2000000002.339:5972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17203 comm="syz.1.3363" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000
[  950.196914][   T43] audit: type=1326 audit(2000000002.339:5973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17203 comm="syz.1.3363" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000
[  950.403498][T17211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3365'.
[  950.536203][T17207] kvm [17203]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000
[  950.895310][ T6921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  950.895415][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  951.063526][   T43] audit: type=1326 audit(2000000003.199:5974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17220 comm="syz.5.3368" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efec code=0x7ffc0000
[  951.063596][   T43] audit: type=1326 audit(2000000003.199:5975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17220 comm="syz.5.3368" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efec code=0x7ffc0000
[  951.064932][   T43] audit: type=1326 audit(2000000003.199:5976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17220 comm="syz.5.3368" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf748efec code=0x7ffc0000
[  951.065676][   T43] audit: type=1326 audit(2000000003.209:5977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17220 comm="syz.5.3368" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efec code=0x7ffc0000
[  951.065724][   T43] audit: type=1326 audit(2000000003.209:5978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17220 comm="syz.5.3368" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efec code=0x7ffc0000
[  951.066096][   T43] audit: type=1326 audit(2000000003.209:5979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17220 comm="syz.5.3368" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efec code=0x7ffc0000
[  951.066137][   T43] audit: type=1326 audit(2000000003.209:5980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17220 comm="syz.5.3368" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efec code=0x7ffc0000
[  951.066289][   T43] audit: type=1326 audit(2000000003.209:5981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17220 comm="syz.5.3368" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf748efec code=0x7ffc0000
[  952.184309][T17238] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3372'.
[  952.296940][T17237] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3373'.
[  952.457088][T15998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  952.457596][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  952.492279][T14585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  952.493025][T15998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  952.893546][T17247] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3375'.
[  952.893563][T17247] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3375'.
[  953.633525][T17262] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3380'.
[  954.025416][ T6921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  954.025564][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  954.107792][T17254] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3377'.
[  955.537788][T15998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  955.696905][   T43] kauditd_printk_skb: 6 callbacks suppressed
[  955.696925][   T43] audit: type=1800 audit(2000000007.839:5988): pid=17281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3385" name="file1" dev="sda1" ino=2040 res=0 errno=0
[  956.115438][T17298] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3390'.
[  956.115454][T17298] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3390'.
[  956.120000][   T43] audit: type=1326 audit(2000000008.259:5989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17297 comm="syz.3.3390" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f22fec code=0x0
[  956.655604][ T6921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  956.655699][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  958.575254][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  958.689239][T17327] input: syz1 as /devices/virtual/input/input239
[  959.216321][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  959.216483][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  959.266833][T17339] 9pnet_virtio: no channels available for device c:::
[  959.351760][T17343] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3402'.
[  959.351775][T17343] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3402'.
[  959.368640][   T43] audit: type=1326 audit(2000000011.509:5990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17342 comm="syz.5.3402" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf748efec code=0x0
[  961.039868][T17376] 9pnet_virtio: no channels available for device c:::
[  961.300768][ T5809] Bluetooth: hci0: unexpected event for opcode 0x0809
[  961.313141][T17382] input: syz1 as /devices/virtual/input/input241
[  961.447878][ T5767] libceph: connect (1)[c::]:6789 error -101
[  961.447972][ T5767] libceph: mon0 (1)[c::]:6789 connect error
[  961.498599][ T5767] libceph: connect (1)[c::]:6789 error -101
[  961.498722][ T5767] libceph: mon0 (1)[c::]:6789 connect error
[  961.541372][T17398] netlink: 'syz.5.3415': attribute type 1 has an invalid length.
[  961.585821][T17398] bond3: entered promiscuous mode
[  961.586887][T17398] 8021q: adding VLAN 0 to HW filter on device bond3
[  961.615305][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  961.636580][T17398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3415'.
[  961.652187][T17398] macvtap0: entered allmulticast mode
[  961.683094][T17398] bond3: (slave bridge1): making interface the new active one
[  961.683116][T17398] bridge1: entered promiscuous mode
[  961.693284][T17398] bond3: (slave bridge1): Enslaving as an active interface with an up link
[  961.706024][ T5767] libceph: connect (1)[c::]:6789 error -101
[  961.706121][ T5767] libceph: mon0 (1)[c::]:6789 connect error
[  961.755492][ T5767] libceph: connect (1)[c::]:6789 error -101
[  961.755652][ T5767] libceph: mon0 (1)[c::]:6789 connect error
[  962.215639][   T42] libceph: connect (1)[c::]:6789 error -101
[  962.215768][   T42] libceph: mon0 (1)[c::]:6789 connect error
[  962.254651][T17392] ceph: No mds server is up or the cluster is laggy
[  962.258124][T17386] ceph: No mds server is up or the cluster is laggy
[  962.268193][   T42] libceph: connect (1)[c::]:6789 error -101
[  962.268278][   T42] libceph: mon0 (1)[c::]:6789 connect error
[  962.425449][T10959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  962.425628][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  962.666239][ T5809] Bluetooth: hci0: unexpected event for opcode 0x0809
[  962.672317][T17417] input: syz1 as /devices/virtual/input/input243
[  962.725110][ T5767] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  962.875912][ T5767] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  962.876864][ T5767] usb 5-1: config 1 has an invalid interface number: 7 but max is 0
[  962.876885][ T5767] usb 5-1: config 1 has no interface number 0
[  962.876915][ T5767] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[  962.876934][ T5767] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xC has invalid maxpacket 16
[  962.876955][ T5767] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  962.878825][ T5767] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  962.878845][ T5767] usb 5-1: Product: syz
[  962.878859][ T5767] usb 5-1: Manufacturer: syz
[  962.878872][ T5767] usb 5-1: SerialNumber: syz
[  962.881925][T17407] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  962.882026][T17407] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  962.888475][ T5767] usb 5-1: Error in usbnet_get_endpoints (-22)
[  964.344697][T17441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3428'.
[  964.655286][T15998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  964.979509][T10959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  964.979661][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  965.232695][T17460] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3434'.
[  965.552390][T17459] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input245
[  966.093444][T16838] usb 5-1: USB disconnect, device number 22
[  967.695258][T15998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  967.805062][ T5280] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  967.894709][T17501] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3445'.
[  968.090187][ T5280] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  968.174423][ T5280] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  968.174450][ T5280] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  968.185390][ T6921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  968.185537][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  968.245316][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  968.245333][ T5280] usb 5-1: SerialNumber: syz
[  968.488850][T17495] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  969.404084][T17504] 9pnet_virtio: no channels available for device c:::
[  969.921611][T17495] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  970.735564][T15998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  970.736955][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  970.737081][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  970.819356][T17519] input: syz1 as /devices/virtual/input/input246
[  972.735028][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  972.755039][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  972.885045][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  972.895038][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  973.105057][    T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!!
[  973.412595][T17547] FAULT_INJECTION: forcing a failure.
[  973.412595][T17547] name failslab, interval 1, probability 0, space 0, times 0
[  973.412618][T17547] CPU: 2 UID: 0 PID: 17547 Comm: syz.3.3458 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[  973.412635][T17547] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[  973.412640][T17547] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  973.412647][T17547] Call Trace:
[  973.412651][T17547]  <TASK>
[  973.412657][T17547]  dump_stack_lvl+0x100/0x190
[  973.412677][T17547]  should_fail_ex.cold+0x5/0xa
[  973.412694][T17547]  should_failslab+0xc2/0x120
[  973.412714][T17547]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[  973.412731][T17547]  ? find_held_lock+0x2b/0x80
[  973.412745][T17547]  ? sock_alloc_inode+0x26/0x2c0
[  973.412763][T17547]  ? __pfx_sock_alloc_inode+0x10/0x10
[  973.412809][T17547]  sock_alloc_inode+0x26/0x2c0
[  973.412826][T17547]  ? __pfx_sock_alloc_inode+0x10/0x10
[  973.412841][T17547]  alloc_inode+0x68/0x250
[  973.412855][T17547]  sock_alloc+0x44/0x280
[  973.412869][T17547]  ? security_socket_create+0x7f/0x250
[  973.412883][T17547]  __sock_create+0xc2/0x860
[  973.412903][T17547]  __sys_socket+0x14d/0x260
[  973.412912][T17547]  ? xfd_validate_state+0x129/0x190
[  973.412930][T17547]  ? __pfx___sys_socket+0x10/0x10
[  973.412951][T17547]  __ia32_sys_socket+0x72/0xb0
[  973.412962][T17547]  ? lockdep_hardirqs_on+0x7d/0x110
[  973.412981][T17547]  __do_fast_syscall_32+0x13a/0x8b0
[  973.412995][T17547]  do_fast_syscall_32+0x32/0x70
[  973.413007][T17547]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  973.413027][T17547] RIP: 0023:0xf7f22fec
[  973.413040][T17547] Code: Unable to access opcode bytes at 0xf7f22fc2.
[  973.413046][T17547] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167
[  973.413058][T17547] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002
[  973.413067][T17547] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  973.413074][T17547] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  973.413082][T17547] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  973.413089][T17547] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  973.413105][T17547]  </TASK>
[  973.413111][T17547] socket: no more sockets
[  973.514233][T17551] 9pnet_virtio: no channels available for device c:::
[  973.575445][T17553] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3461'.
[  973.617970][ T5809] Bluetooth: hci1: unexpected event for opcode 0x0809
[  973.620130][T17555] input: syz1 as /devices/virtual/input/input247
[  973.705361][ T5280] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71
[  973.706968][ T5280] usb 5-1: USB disconnect, device number 23
[  973.721611][T17410] udevd[17410]: setting mode of /dev/bus/usb/005/023 to 020664 failed: No such file or directory
[  973.721665][T17410] udevd[17410]: setting owner of /dev/bus/usb/005/023 to uid=0, gid=0 failed: No such file or directory
[  973.736168][T16838] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  973.775444][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  973.895141][T16838] usb 8-1: Using ep0 maxpacket: 16
[  973.895708][T16838] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  973.896625][T16838] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  973.896645][T16838] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  973.898406][T16838] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  973.898424][T16838] usb 8-1: Product: syz
[  973.898435][T16838] usb 8-1: Manufacturer: syz
[  973.898447][T16838] usb 8-1: SerialNumber: syz
[  973.900362][T16838] usb 8-1: config 0 descriptor??
[  973.902320][T16838] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  973.902336][T16838] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class)
[  973.935702][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  973.935849][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  974.215429][T16838] em28xx 8-1:0.0: unknown em28xx chip ID (0)
[  974.215988][T16838] em28xx 8-1:0.0: Config register raw data: 0xfffffffb
[  974.216340][T16838] em28xx 8-1:0.0: AC97 chip type couldn't be determined
[  974.216355][T16838] em28xx 8-1:0.0: No AC97 audio processor
[  974.223832][T16838] usb 8-1: USB disconnect, device number 19
[  974.237011][T16838] em28xx 8-1:0.0: Disconnecting em28xx
[  974.277798][T16838] em28xx: Freeing device
[  974.345332][T17564] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3464'.
[  976.498307][ T6444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  976.498413][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  976.567233][T17577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3468'.
[  976.567270][T17577] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3468'.
[  976.636072][T17581] 9pnet_virtio: no channels available for device c:::
[  976.708916][T17586] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3472'.
[  976.817284][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  976.858138][T17563] A link change request failed with some changes committed already. Interface pim6reg0 may have been left with an inconsistent configuration, please check.
[  977.015075][   T42] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  977.066415][T17589] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3473'.
[  977.066431][T17589] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3473'.
[  977.069086][   T43] audit: type=1326 audit(2000000029.209:5991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17588 comm="syz.5.3473" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf748efec code=0x0
[  977.271228][T17595] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3475'.
[  977.271277][T17595] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3475'.
[  977.366951][   T43] audit: type=1326 audit(2000000029.509:5992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17594 comm="syz.3.3475" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f22fec code=0x0
[  978.043291][   T43] audit: type=1800 audit(2000000030.179:5993): pid=17614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3479" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  978.254499][T17619] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3482'.
[  978.612231][T17627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  978.696606][T17625] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3483'.
[  978.760370][T17628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  978.819231][T17628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  978.975657][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  978.975764][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  979.202679][T17640] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3487'.
[  979.203175][T17641] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3487'.
[  979.856139][T15998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  980.129288][   T43] audit: type=1800 audit(2000000001.519:5994): pid=17654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3492" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0
[  980.472989][T17664] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3494'.
[  981.625603][ T7666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  981.625705][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  982.668116][T17681] binder: 17677:17681 ioctl c0306201 80000880 returned -14
[  982.895963][T15998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  984.177848][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  984.177943][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  985.930324][T17720] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3511'.
[  985.936537][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  986.145957][ T5099] Bluetooth: hci2: sending frame failed (-49)
[  986.147943][ T5809] Bluetooth: hci2: Opcode 0x1003 failed: -49
[  986.367494][T17724] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3512'.
[  986.409272][T17724] team0: Port device team_slave_0 removed
[  986.746677][T17730] binder: 17729:17730 ioctl c00c6211 0 returned -14
[  987.031903][T17731] syz.0.3514 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  987.031960][T17731] CPU: 3 UID: 0 PID: 17731 Comm: syz.0.3514 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[  987.031992][T17731] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[  987.031998][T17731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  987.032006][T17731] Call Trace:
[  987.032010][T17731]  <TASK>
[  987.032016][T17731]  dump_stack_lvl+0x100/0x190
[  987.032037][T17731]  dump_header+0xfb/0x606
[  987.032052][T17731]  oom_kill_process.cold+0xd/0x380
[  987.032068][T17731]  out_of_memory+0x340/0x14f0
[  987.032091][T17731]  ? __pfx_out_of_memory+0x10/0x10
[  987.032114][T17731]  mem_cgroup_out_of_memory+0xc6/0x130
[  987.032130][T17731]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  987.032146][T17731]  ? find_held_lock+0x2b/0x80
[  987.032163][T17731]  ? do_raw_spin_unlock+0x145/0x1e0
[  987.032176][T17731]  ? _raw_spin_unlock+0x28/0x50
[  987.032194][T17731]  try_charge_memcg+0x783/0xf60
[  987.032223][T17731]  ? __pfx_try_charge_memcg+0x10/0x10
[  987.032236][T17731]  ? find_held_lock+0x2b/0x80
[  987.032249][T17731]  ? rcu_read_unlock+0x17/0x60
[  987.032262][T17731]  ? rcu_read_unlock+0x17/0x60
[  987.032279][T17731]  obj_cgroup_charge_pages+0x2b/0x1f0
[  987.032294][T17731]  __memcg_kmem_charge_page+0x1c4/0x4d0
[  987.032309][T17731]  __alloc_frozen_pages_noprof+0x534/0x3300
[  987.032326][T17731]  ? stack_trace_save+0x8e/0xc0
[  987.032342][T17731]  ? __pfx_stack_trace_save+0x10/0x10
[  987.032358][T17731]  ? stack_depot_save_flags+0x27/0x9f0
[  987.032373][T17731]  ? find_held_lock+0x2b/0x80
[  987.032388][T17731]  ? kasan_save_stack+0x3f/0x50
[  987.032406][T17731]  ? kasan_save_stack+0x30/0x50
[  987.032423][T17731]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  987.032439][T17731]  ? __ia32_sys_bpf+0xcc/0x170
[  987.032453][T17731]  ? __do_fast_syscall_32+0x13a/0x8b0
[  987.032465][T17731]  ? do_fast_syscall_32+0x32/0x70
[  987.032476][T17731]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  987.032496][T17731]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[  987.032514][T17731]  ? __css_rstat_updated+0x1ce/0x590
[  987.032527][T17731]  ? __pfx___css_rstat_updated+0x10/0x10
[  987.032538][T17731]  ? policy_nodemask+0xed/0x4f0
[  987.032549][T17731]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  987.032568][T17731]  ? policy_nodemask+0xed/0x4f0
[  987.032580][T17731]  alloc_pages_mpol+0x201/0x550
[  987.032592][T17731]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  987.032604][T17731]  ? find_held_lock+0x2b/0x80
[  987.032617][T17731]  ? rcu_read_unlock+0x17/0x60
[  987.032630][T17731]  ? rcu_read_unlock+0x17/0x60
[  987.032645][T17731]  alloc_pages_noprof+0x1a/0x160
[  987.032658][T17731]  __vmalloc_node_range_noprof+0xc1b/0x1420
[  987.032683][T17731]  ? bpf_check+0x115/0xac70
[  987.032702][T17731]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  987.032731][T17731]  ? find_held_lock+0x2b/0x80
[  987.032746][T17731]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  987.032767][T17731]  ? rcu_is_watching+0x13/0xc0
[  987.032784][T17731]  __kvmalloc_node_noprof+0x3da/0x9b0
[  987.032801][T17731]  ? bpf_check+0x115/0xac70
[  987.032819][T17731]  ? ktime_get+0x22c/0x320
[  987.032837][T17731]  ? bpf_check+0x115/0xac70
[  987.032857][T17731]  bpf_check+0x115/0xac70
[  987.032880][T17731]  ? __css_rstat_updated+0x1ce/0x590
[  987.032890][T17731]  ? __lock_acquire+0x5c0/0x1f40
[  987.032908][T17731]  ? __pfx___css_rstat_updated+0x10/0x10
[  987.032925][T17731]  ? __mod_memcg_state+0x12b/0x500
[  987.032941][T17731]  ? find_held_lock+0x2b/0x80
[  987.032957][T17731]  ? __pfx_bpf_check+0x10/0x10
[  987.032975][T17731]  ? lock_acquire+0x1d1/0x380
[  987.032991][T17731]  ? bpf_prog_load+0x1a27/0x2ab0
[  987.033009][T17731]  ? find_held_lock+0x2b/0x80
[  987.033023][T17731]  ? bpf_prog_load+0x1a27/0x2ab0
[  987.033043][T17731]  ? __asan_memset+0x23/0x50
[  987.033060][T17731]  ? bpf_prog_load+0x1ae1/0x2ab0
[  987.033077][T17731]  bpf_prog_load+0x1ae1/0x2ab0
[  987.033098][T17731]  ? __pfx_bpf_prog_load+0x10/0x10
[  987.033116][T17731]  ? lock_acquire+0x1d1/0x380
[  987.033145][T17731]  __sys_bpf+0x1f46/0x4a30
[  987.033163][T17731]  ? __pfx___sys_bpf+0x10/0x10
[  987.033176][T17731]  ? find_held_lock+0x2b/0x80
[  987.033189][T17731]  ? futex_wake+0x4ea/0x5e0
[  987.033216][T17731]  ? putname+0xb1/0x110
[  987.033231][T17731]  ? kmem_cache_free+0x127/0x6c0
[  987.033256][T17731]  ? __ia32_sys_futex_time32+0x2f4/0x470
[  987.033272][T17731]  ? xfd_validate_state+0x129/0x190
[  987.033294][T17731]  ? __ia32_sys_bpf+0xcc/0x170
[  987.033307][T17731]  __ia32_sys_bpf+0xcc/0x170
[  987.033322][T17731]  ? __do_fast_syscall_32+0xb3/0x8b0
[  987.033334][T17731]  __do_fast_syscall_32+0x13a/0x8b0
[  987.033348][T17731]  do_fast_syscall_32+0x32/0x70
[  987.033361][T17731]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  987.033375][T17731] RIP: 0023:0xf748efec
[  987.033390][T17731] Code: Unable to access opcode bytes at 0xf748efc2.
[  987.033396][T17731] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  987.033408][T17731] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000640
[  987.033416][T17731] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000
[  987.033422][T17731] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  987.033429][T17731] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  987.033436][T17731] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  987.033451][T17731]  </TASK>
[  987.265032][T17731] memory: usage 88kB, limit 96kB, failcnt 81
[  987.265047][T17731] memory+swap: usage 100kB, limit 9007199254740988kB, failcnt 0
[  987.265055][T17731] kmem: usage 88kB, limit 9007199254740988kB, failcnt 0
[  987.265062][T17731] Memory cgroup stats for /syz0/test:
[  987.265274][T17731] cache 0
[  987.265280][T17731] rss 0
[  987.265284][T17731] rss_huge 0
[  987.265288][T17731] shmem 0
[  987.265292][T17731] mapped_file 0
[  987.265296][T17731] dirty 0
[  987.265306][T17731] writeback 0
[  987.265310][T17731] workingset_refault_anon 0
[  987.265315][T17731] workingset_refault_file 0
[  987.265319][T17731] swap 0
[  987.265323][T17731] swapcached 0
[  987.265327][T17731] pgpgin 0
[  987.265331][T17731] pgpgout 0
[  987.265335][T17731] pgfault 0
[  987.265339][T17731] pgmajfault 0
[  987.265343][T17731] inactive_anon 0
[  987.265347][T17731] active_anon 0
[  987.265352][T17731] inactive_file 0
[  987.265356][T17731] active_file 0
[  987.265360][T17731] unevictable 0
[  987.265364][T17731] hierarchical_memory_limit 98304
[  987.265369][T17731] hierarchical_memsw_limit 9223372036854771712
[  987.265374][T17731] total_cache 0
[  987.265378][T17731] total_rss 0
[  987.265382][T17731] total_rss_huge 0
[  987.265387][T17731] total_shmem 0
[  987.265391][T17731] total_mapped_file 0
[  987.265395][T17731] total_dirty 0
[  987.265399][T17731] total_writeback 0
[  987.265403][T17731] total_workingset_refault_anon 0
[  987.265408][T17731] total_workingset_refault_file 0
[  987.265413][T17731] total_swap 0
[  987.265417][T17731] total_swapcached 0
[  987.265421][T17731] total_pgpgin 0
[  987.265425][T17731] total_pgpgout 0
[  987.265429][T17731] total_pgfault 0
[  987.265434][T17731] total_pgmajfault 0
[  987.265438][T17731] total_inactive_anon 0
[  987.265442][T17731] total_active_anon 0
[  987.265446][T17731] total_inactive_file 0
[  987.265451][T17731] total_active_file 0
[  987.265455][T17731] total_unevictable 0
[  987.265459][T17731] anon_cost 0
[  987.265463][T17731] file_cost 0
[  987.265468][T17731] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.3514,pid=17729,uid=0
[  987.267098][T17731] Memory cgroup out of memory: Killed process 17729 (syz.0.3514) total-vm:102300kB, anon-rss:628kB, file-rss:23400kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000
[  987.377995][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  987.378091][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  987.392693][T17741] 9pnet_virtio: no channels available for device c:::
[  988.975740][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  989.017515][T17766] 9pnet_virtio: no channels available for device c:::
[  989.076726][T17768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  989.143358][T17773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  989.200982][T17778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  989.308895][T17772] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3530'.
[  989.308912][T17772] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3530'.
[  989.311605][   T43] audit: type=1326 audit(2000000000.229:5995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17769 comm="syz.1.3530" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f54fec code=0x0
[  989.415108][ T5767] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  989.575605][ T5767] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  989.576775][ T5767] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  989.576789][ T5767] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  989.576798][ T5767] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[  989.576818][ T5767] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  989.576837][ T5767] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  989.578045][ T5767] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  989.578058][ T5767] usb 10-1: Product: syz
[  989.578065][ T5767] usb 10-1: Manufacturer: syz
[  989.584787][ T5767] cdc_wdm 10-1:1.0: skipping garbage
[  989.584798][ T5767] cdc_wdm 10-1:1.0: skipping garbage
[  989.586876][ T5767] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[  989.586886][ T5767] cdc_wdm 10-1:1.0: Unknown control protocol
[  989.935949][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  989.936088][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  990.168638][T17781] xt_CT: No such helper "pptp"
[  990.895040][   T35] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  990.938800][T17798] 9pnet_virtio: no channels available for device c:::
[  991.056286][   T35] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  991.057464][   T35] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  991.057487][   T35] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  991.059098][   T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  991.059117][   T35] usb 8-1: SerialNumber: syz
[  991.088190][T17795] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  991.304820][T17795] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  991.307500][T17282] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  991.466252][T17282] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  991.467185][T17282] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  991.467201][T17282] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  991.468006][T17282] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  991.468019][T17282] usb 6-1: SerialNumber: syz
[  991.473779][T17801] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  991.681004][T17801] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  992.015614][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  992.218752][T16827] usb 10-1: USB disconnect, device number 9
[  992.495577][T12657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  992.496667][ T1438] ieee802154 phy0 wpan0: encryption failed: -22
[  992.496738][ T1438] ieee802154 phy1 wpan1: encryption failed: -22
[  992.497349][ T6920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  992.497512][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  993.341310][   T35] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71
[  993.427487][   T35] usb 8-1: USB disconnect, device number 20
[  993.745677][T17282] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71
[  993.749762][T17282] usb 6-1: USB disconnect, device number 18
[  993.790133][T17827] 9pnet_virtio: no channels available for device c:::
[  994.826899][T17842] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3548'.
[  994.826921][T17842] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3548'.
[  994.829370][   T43] audit: type=1326 audit(2000000005.749:5996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17841 comm="syz.1.3548" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f54fec code=0x0
[  994.936824][T17846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3550'.
[  995.535327][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  995.698632][ T6444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  995.698781][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  995.714017][T17860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  995.769631][T17865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  995.824515][T17867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  995.833770][T17866] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3556'.
[  997.187655][T16838] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  997.766854][T16838] usb 5-1: Using ep0 maxpacket: 8
[  998.137478][T16838] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  998.140917][T16838] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  998.141020][T16838] usb 5-1: config 0 has no interface number 0
[  998.141071][T16838] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  998.141108][T16838] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  998.141145][T16838] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  998.141341][T16838] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  998.141363][T16838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  998.172640][T16838] usb 5-1: config 0 descriptor??
[  998.182598][T16838] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  998.269456][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  998.269579][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  998.365894][T17890] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3564'.
[  998.365909][T17890] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3564'.
[  998.367405][   T43] audit: type=1326 audit(2000000002.649:5997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17889 comm="syz.1.3564" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f54fec code=0x0
[  998.494620][T17872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  998.494893][T17872] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  998.547823][T17888] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3562'.
[  998.563803][T17282] usb 5-1: USB disconnect, device number 24
[  998.565715][T17282] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  998.575349][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  999.669916][T17908] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3568'.
[  999.722722][T17909] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3569'.
[  999.967826][T17911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  999.986665][T17902] Set syz1 is full, maxelem 6117 reached
[ 1000.040463][T17912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1000.113110][T17915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1001.672282][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1001.672378][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1001.675919][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1002.632692][T17925] 9pnet_virtio: no channels available for device c:::
[ 1002.655750][T17927] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3575'.
[ 1002.666424][T17927] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3575'.
[ 1002.738090][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1002.827613][T17934] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1002.828316][T17934] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1002.905118][T17282] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[ 1002.907946][T17941] netlink: 'syz.5.3579': attribute type 11 has an invalid length.
[ 1002.907959][T17941] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3579'.
[ 1002.909278][T17941] netlink: 'syz.5.3579': attribute type 11 has an invalid length.
[ 1002.909289][T17941] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3579'.
[ 1003.087077][T17282] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1003.091946][T17282] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[ 1003.092006][T17282] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1003.114373][T17282] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1003.114496][T17282] usb 8-1: SerialNumber: syz
[ 1003.155138][ T5792] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[ 1003.227075][T17923] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1003.286078][T17946] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3581'.
[ 1003.385278][ T6444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1003.385477][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1003.504895][T17923] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1004.033800][T17282] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71
[ 1004.056652][T17282] usb 8-1: USB disconnect, device number 21
[ 1004.098234][ T5792] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1004.164945][ T5792] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0
[ 1004.165169][ T5792] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1004.388159][ T5792] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1004.388177][ T5792] usb 6-1: Product: syz
[ 1004.388186][ T5792] usb 6-1: Manufacturer: syz
[ 1004.388194][ T5792] usb 6-1: SerialNumber: syz
[ 1004.548404][ T5792] usb 6-1: config 0 descriptor??
[ 1004.556137][ T5792] usb 6-1: selecting invalid altsetting 0
[ 1004.690183][T17956] 9pnet_virtio: no channels available for device c:::
[ 1004.777995][ T5792] usb 6-1: USB disconnect, device number 19
[ 1004.778805][T17962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1004.832871][T17964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1004.834046][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1004.890199][T17966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1004.891076][T17967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1004.895132][ T5809] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1004.895169][ T5809] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1004.948394][T17968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1005.348295][T17975] Bluetooth: hci2: Frame reassembly failed (-84)
[ 1005.354389][ T6921] Bluetooth: hci2: Frame reassembly failed (-84)
[ 1005.785385][ T6444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1006.175505][T17983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3593'.
[ 1006.176797][T17983] netlink: 'syz.3.3593': attribute type 2 has an invalid length.
[ 1006.996764][T18008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3601'.
[ 1007.017673][T18010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1007.071902][T18011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1007.125920][T18012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1007.226198][ T6921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1007.226293][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1007.255985][T17282] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[ 1007.375243][ T5809] Bluetooth: hci2: command 0x1003 tx timeout
[ 1007.375783][ T5099] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 1007.405822][T17282] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1007.410165][T17282] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1007.410179][T17282] usb 8-1: Product: syz
[ 1007.410187][T17282] usb 8-1: Manufacturer: syz
[ 1007.410194][T17282] usb 8-1: SerialNumber: syz
[ 1007.472057][ T5280] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1007.684018][T18008] netlink: 'syz.3.3601': attribute type 1 has an invalid length.
[ 1007.708758][T17282] usb 8-1: USB disconnect, device number 22
[ 1008.151381][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1008.157676][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1008.158382][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1008.161870][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1008.162192][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1008.505333][ T5280] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive
[ 1008.506356][ T5280] ath9k_htc: Failed to initialize the device
[ 1009.146932][ T6921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1009.147091][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1009.242644][T17282] usb 8-1: ath9k_htc: USB layer deinitialized
[ 1009.279018][ T5881] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1009.279803][ T5881] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1009.810948][ T5881] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1009.810980][ T5881] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1009.927490][ T5881] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1009.927522][ T5881] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1010.036173][ T5881] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1010.036205][ T5881] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1010.205481][T18030] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1010.205568][T18030] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1010.205627][T18030] bridge_slave_0: entered allmulticast mode
[ 1010.206602][T18030] bridge_slave_0: entered promiscuous mode
[ 1010.215190][T18073] batadv_slave_1: entered promiscuous mode
[ 1010.217607][T18030] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1010.217658][T18030] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1010.217731][T18030] bridge_slave_1: entered allmulticast mode
[ 1010.219019][T18030] bridge_slave_1: entered promiscuous mode
[ 1010.300856][T18030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1010.305629][ T5099] Bluetooth: hci2: command tx timeout
[ 1010.306322][T18030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1010.366560][ T5881] bridge_slave_1: left allmulticast mode
[ 1010.366583][ T5881] bridge_slave_1: left promiscuous mode
[ 1010.366743][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1010.368875][ T5881] bridge_slave_0: left allmulticast mode
[ 1010.368892][ T5881] bridge_slave_0: left promiscuous mode
[ 1010.369029][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1010.387556][T18076] Bluetooth: hci3: Frame reassembly failed (-84)
[ 1010.397188][ T1160] Bluetooth: hci3: Frame reassembly failed (-84)
[ 1010.475667][ T5280] usb 6-1: new full-speed USB device number 20 using dummy_hcd
[ 1010.570692][ T5881] bond3 (unregistering): (slave bridge1): Releasing backup interface
[ 1010.570709][ T5881] bridge1 (unregistering): left promiscuous mode
[ 1010.580356][ T5881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1010.583707][ T5881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1010.584937][ T5881] bond0 (unregistering): Released all slaves
[ 1010.590043][ T5881] bond1 (unregistering): Released all slaves
[ 1010.600826][ T5881] bond2 (unregistering): Released all slaves
[ 1010.630280][ T5881] bond3 (unregistering): Released all slaves
[ 1010.647060][ T5280] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1010.649393][T18030] team0: Port device team_slave_0 added
[ 1010.649617][ T5280] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x9 has an invalid bInterval 0, changing to 10
[ 1010.649660][ T5280] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x9 has invalid maxpacket 169, setting to 64
[ 1010.649700][ T5280] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1010.650881][T18030] team0: Port device team_slave_1 added
[ 1010.652485][ T5280] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1010.652498][ T5280] usb 6-1: Product: syz
[ 1010.652507][ T5280] usb 6-1: Manufacturer: syz
[ 1010.652515][ T5280] usb 6-1: SerialNumber: syz
[ 1010.736640][ T5280] usb 6-1: config 0 descriptor??
[ 1010.760000][T18073] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1010.782140][ T5280] usb 6-1: selecting invalid altsetting 0
[ 1011.055326][ T6444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1011.077499][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.080524][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.100055][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.103367][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.104554][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.114409][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.120617][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.133198][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.134699][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.152857][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.161152][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.173283][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.177924][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.179850][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.191248][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.194860][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.201194][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.243302][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.247232][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.251073][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.252547][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.272289][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.275656][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.277102][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.279183][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.284738][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.294541][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.304424][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.323407][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.326405][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.332111][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.333337][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.336328][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.345694][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.348216][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.352069][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.358100][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.363566][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.379132][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.380244][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.381738][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.382767][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.389784][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.391815][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.398583][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.400647][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.402133][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.408277][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.409939][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.412091][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.421100][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.422228][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.423271][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.424044][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.437045][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.438318][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.440072][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.452324][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.453993][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.454797][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.465909][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.466083][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.466240][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.466401][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.466556][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.466735][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.466930][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.467086][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.467241][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.467403][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.467561][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.467718][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.467879][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.471102][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.471408][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.471649][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.471894][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.472143][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.472424][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.472685][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.472939][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.481829][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.482074][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.482396][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.528854][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.529275][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.578293][T18073] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1011.980201][T18073] snd-usb-audio 6-1:0.0: Runtime PM usage count underflow!
[ 1012.001512][ T5280] usb 6-1: USB disconnect, device number 20
[ 1012.060216][T18030] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1012.060228][T18030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1012.060241][T18030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1012.060771][ T5881] ovs-dp0: left promiscuous mode
[ 1012.145751][ T5453] 8021q: adding VLAN 0 to HW filter on device eth6
[ 1012.146758][T18030] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1012.146768][T18030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1012.146783][T18030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1012.253348][T18030] hsr_slave_0: entered promiscuous mode
[ 1012.254342][T18030] hsr_slave_1: entered promiscuous mode
[ 1012.267822][T18030] debugfs: 'hsr0' already exists in 'hsr'
[ 1012.267841][T18030] Cannot create hsr debugfs directory
[ 1012.336169][ T5809] Bluetooth: hci2: command tx timeout
[ 1012.465184][ T5809] Bluetooth: hci3: command 0x1003 tx timeout
[ 1012.466940][ T5099] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 1013.030228][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1013.030365][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1013.058363][ T5453] 8021q: adding VLAN 0 to HW filter on device eth7
[ 1013.121777][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1013.121792][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1013.156115][ T5881] veth1_vlan: left promiscuous mode
[ 1013.156183][ T5881] veth0_vlan: left promiscuous mode
[ 1013.451733][ T5881] team0 (unregistering): Port device team_slave_1 removed
[ 1013.534445][T18125] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3627'.
[ 1014.415120][ T5099] Bluetooth: hci2: command tx timeout
[ 1014.471945][ T5453] 8021q: adding VLAN 0 to HW filter on device eth8
[ 1014.896704][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1014.896820][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1015.255402][T18135] fuse: Bad value for 'fd'
[ 1015.881277][T18149] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3631'.
[ 1015.881293][T18149] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3631'.
[ 1015.882235][ T5881] IPVS: stop unused estimator thread 0...
[ 1015.883674][   T43] audit: type=1326 audit(2000000008.859:5998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18147 comm="syz.0.3631" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf748efec code=0x0
[ 1016.212129][T18030] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1016.214953][T18030] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1016.219612][T18030] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1016.221863][T18030] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1016.222381][T18030] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1016.224142][T18030] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1016.236253][T18030] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1016.240457][T18030] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1016.347258][T18030] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1016.354256][T18030] 8021q: adding VLAN 0 to HW filter on device team0
[ 1016.360415][ T6444] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1016.360459][ T6444] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1016.367534][ T6444] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1016.367579][ T6444] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1016.505448][ T5099] Bluetooth: hci2: command tx timeout
[ 1016.598754][T18030] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1016.696522][T18030] veth0_vlan: entered promiscuous mode
[ 1016.699868][T18030] veth1_vlan: entered promiscuous mode
[ 1016.734001][T18030] veth0_macvtap: entered promiscuous mode
[ 1016.737083][T18030] veth1_macvtap: entered promiscuous mode
[ 1016.743819][T18030] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1016.755467][T18030] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1016.808003][ T5881] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1016.816378][ T5859] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1016.816405][ T1158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1016.816405][ T5859] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1016.816422][ T5859] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1016.816642][ T1158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1016.823303][ T5280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1016.853789][ T6444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1016.853802][ T6444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1016.865972][T15998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1016.870482][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1016.870499][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1017.258262][T18198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3635'.
[ 1017.258286][T18198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3635'.
[ 1017.260194][   T43] audit: type=1326 audit(2000000010.239:5999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18197 comm="syz.1.3635" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f54fec code=0x0
[ 1017.933996][T18219] 9pnet_virtio: no channels available for device c:::
[ 1018.500831][T18237] FAULT_INJECTION: forcing a failure.
[ 1018.500831][T18237] name failslab, interval 1, probability 0, space 0, times 0
[ 1018.500854][T18237] CPU: 1 UID: 0 PID: 18237 Comm: syz.5.3646 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[ 1018.500872][T18237] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[ 1018.500877][T18237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1018.500884][T18237] Call Trace:
[ 1018.500889][T18237]  <TASK>
[ 1018.500894][T18237]  dump_stack_lvl+0x100/0x190
[ 1018.500914][T18237]  should_fail_ex.cold+0x5/0xa
[ 1018.500931][T18237]  should_failslab+0xc2/0x120
[ 1018.500951][T18237]  __kmalloc_noprof+0xfc/0x840
[ 1018.500967][T18237]  ? asymmetric_key_generate_id+0x7e/0x180
[ 1018.500986][T18237]  asymmetric_key_generate_id+0x7e/0x180
[ 1018.501004][T18237]  x509_process_extension+0x4d8/0xad0
[ 1018.501026][T18237]  asn1_ber_decoder+0x12b3/0x2170
[ 1018.501049][T18237]  ? __pfx_asn1_ber_decoder+0x10/0x10
[ 1018.501067][T18237]  ? kasan_save_track+0x14/0x30
[ 1018.501083][T18237]  ? __kasan_kmalloc+0xaa/0xb0
[ 1018.501100][T18237]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[ 1018.501114][T18237]  ? x509_cert_parse+0x162/0x910
[ 1018.501134][T18237]  x509_cert_parse+0x1c9/0x910
[ 1018.501153][T18237]  x509_key_preparse+0x65/0x9c0
[ 1018.501174][T18237]  asymmetric_key_preparse+0xce/0x1d0
[ 1018.501189][T18237]  ? __pfx_asymmetric_key_preparse+0x10/0x10
[ 1018.501212][T18237]  __key_create_or_update+0x413/0xe30
[ 1018.501231][T18237]  ? __pfx___key_create_or_update+0x10/0x10
[ 1018.501248][T18237]  ? lookup_user_key+0x3f3/0x1300
[ 1018.501270][T18237]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[ 1018.501289][T18237]  key_create_or_update+0x42/0x60
[ 1018.501307][T18237]  __do_sys_add_key+0x2e8/0x460
[ 1018.501326][T18237]  ? __pfx___do_sys_add_key+0x10/0x10
[ 1018.501350][T18237]  __do_fast_syscall_32+0x13a/0x8b0
[ 1018.501365][T18237]  do_fast_syscall_32+0x32/0x70
[ 1018.501377][T18237]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1018.501393][T18237] RIP: 0023:0xf7f48fec
[ 1018.501406][T18237] Code: Unable to access opcode bytes at 0xf7f48fc2.
[ 1018.501411][T18237] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e
[ 1018.501438][T18237] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000
[ 1018.501448][T18237] RDX: 0000000080000200 RSI: 0000000000000559 RDI: 00000000ffffffff
[ 1018.501455][T18237] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1018.501463][T18237] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1018.501470][T18237] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1018.501486][T18237]  </TASK>
[ 1018.527247][T18239] binder: 18238:18239 ioctl c00c620f 80000640 returned -22
[ 1018.573371][T18241] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3647'.
[ 1018.735969][ T6444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1018.736071][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1018.795972][T18248] 9pnet_virtio: no channels available for device c:::
[ 1018.868860][T18251] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3651'.
[ 1018.868881][T18251] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3651'.
[ 1018.880503][   T43] audit: type=1326 audit(2000000011.859:6000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18250 comm="syz.3.3651" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f22fec code=0x0
[ 1019.031862][T18255] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3652'.
[ 1019.910354][T18260] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1019.974439][T18262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3654'.
[ 1020.004372][T18262] ovs-dp0: entered promiscuous mode
[ 1020.021896][T18262] ovs-dp0: left promiscuous mode
[ 1020.730058][T18274] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3658'.
[ 1020.730200][T18274] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3658'.
[ 1021.292844][T18287] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3663'.
[ 1021.292865][T18287] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3663'.
[ 1021.301727][   T43] audit: type=1326 audit(2000000014.279:6001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18286 comm="syz.0.3663" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf748efec code=0x0
[ 1022.007703][T18295] overlayfs: failed to clone upperpath
[ 1022.024507][T18295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1022.086231][T18297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1022.142318][T18299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1022.576615][ T6444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1022.577211][ T6921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1023.059829][T18303] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3667'.
[ 1023.440855][T18324] fuse: fd is not a fuse device
[ 1023.503893][   T43] audit: type=1326 audit(2000000001.479:6002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18326 comm="syz.3.3675" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f22fec code=0x0
[ 1023.921196][T18333] FAULT_INJECTION: forcing a failure.
[ 1023.921196][T18333] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1023.921218][T18333] CPU: 3 UID: 0 PID: 18333 Comm: syz.0.3677 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[ 1023.921235][T18333] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[ 1023.921240][T18333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1023.921247][T18333] Call Trace:
[ 1023.921251][T18333]  <TASK>
[ 1023.921256][T18333]  dump_stack_lvl+0x100/0x190
[ 1023.921276][T18333]  should_fail_ex.cold+0x5/0xa
[ 1023.921291][T18333]  _copy_from_user+0x2e/0xd0
[ 1023.921303][T18333]  __sys_bpf+0x2f5/0x4a30
[ 1023.921321][T18333]  ? __pfx___sys_bpf+0x10/0x10
[ 1023.921334][T18333]  ? lock_acquire+0x1d1/0x380
[ 1023.921350][T18333]  ? get_pid_task+0x2a/0x250
[ 1023.921363][T18333]  ? find_held_lock+0x2b/0x80
[ 1023.921376][T18333]  ? get_pid_task+0xfc/0x250
[ 1023.921387][T18333]  ? get_pid_task+0xfc/0x250
[ 1023.921402][T18333]  ? proc_fail_nth_write+0x9f/0x220
[ 1023.921419][T18333]  ? find_held_lock+0x2b/0x80
[ 1023.921435][T18333]  ? rcu_read_lock_any_held+0x6a/0x90
[ 1023.921450][T18333]  ? find_held_lock+0x2b/0x80
[ 1023.921463][T18333]  ? ksys_write+0x190/0x250
[ 1023.921477][T18333]  ? ksys_write+0x190/0x250
[ 1023.921491][T18333]  ? lock_acquire+0x1d1/0x380
[ 1023.921516][T18333]  ? fput+0x7c/0x100
[ 1023.921533][T18333]  ? __ia32_sys_bpf+0xcc/0x170
[ 1023.921546][T18333]  __ia32_sys_bpf+0xcc/0x170
[ 1023.921560][T18333]  ? __do_fast_syscall_32+0xb3/0x8b0
[ 1023.921573][T18333]  __do_fast_syscall_32+0x13a/0x8b0
[ 1023.921584][T18333]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1023.921603][T18333]  do_fast_syscall_32+0x32/0x70
[ 1023.921615][T18333]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1023.921629][T18333] RIP: 0023:0xf748efec
[ 1023.921642][T18333] Code: Unable to access opcode bytes at 0xf748efc2.
[ 1023.921648][T18333] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[ 1023.921664][T18333] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001a40
[ 1023.921671][T18333] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000
[ 1023.921678][T18333] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1023.921685][T18333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1023.921691][T18333] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1023.921705][T18333]  </TASK>
[ 1024.152289][T18337] __nla_validate_parse: 3 callbacks suppressed
[ 1024.152310][T18337] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3678'.
[ 1024.478902][T18346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1024.496439][ T6444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1024.496699][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1024.532269][T18349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1024.585707][T18352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1025.120347][T18363] Set syz1 is full, maxelem 6117 reached
[ 1025.728358][T18383] fuse: fd is not a fuse device
[ 1025.867411][T18387] overlayfs: failed to clone upperpath
[ 1026.662342][T18395] binder: 18394:18395 ioctl c0306201 80000600 returned -14
[ 1027.376288][T18417] overlayfs: failed to clone upperpath
[ 1027.430257][T18418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1027.486354][T18417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1027.540806][T18419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1027.658458][T18422] FAULT_INJECTION: forcing a failure.
[ 1027.658458][T18422] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1027.658480][T18422] CPU: 3 UID: 0 PID: 18422 Comm: syz.1.3706 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[ 1027.658497][T18422] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[ 1027.658502][T18422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1027.658509][T18422] Call Trace:
[ 1027.658513][T18422]  <TASK>
[ 1027.658518][T18422]  dump_stack_lvl+0x100/0x190
[ 1027.658537][T18422]  should_fail_ex.cold+0x5/0xa
[ 1027.658553][T18422]  _copy_from_user+0x2e/0xd0
[ 1027.658565][T18422]  get_compat_msghdr+0xb3/0x480
[ 1027.658583][T18422]  ? __pfx_get_compat_msghdr+0x10/0x10
[ 1027.658605][T18422]  ___sys_sendmsg+0x1b6/0x1e0
[ 1027.658624][T18422]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1027.658648][T18422]  ? find_held_lock+0x2b/0x80
[ 1027.658670][T18422]  __sys_sendmsg+0x160/0x210
[ 1027.658684][T18422]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1027.658702][T18422]  ? __pfx_ksys_write+0x10/0x10
[ 1027.658719][T18422]  __do_fast_syscall_32+0x13a/0x8b0
[ 1027.658731][T18422]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1027.658750][T18422]  do_fast_syscall_32+0x32/0x70
[ 1027.658767][T18422]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1027.658783][T18422] RIP: 0023:0xf7f54fec
[ 1027.658795][T18422] Code: Unable to access opcode bytes at 0xf7f54fc2.
[ 1027.658801][T18422] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[ 1027.658812][T18422] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800007c0
[ 1027.658819][T18422] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1027.658826][T18422] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1027.658832][T18422] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1027.658839][T18422] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1027.658853][T18422]  </TASK>
[ 1028.045141][T18437] FAULT_INJECTION: forcing a failure.
[ 1028.045141][T18437] name failslab, interval 1, probability 0, space 0, times 0
[ 1028.045178][T18437] CPU: 2 UID: 0 PID: 18437 Comm: syz.5.3711 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[ 1028.045212][T18437] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[ 1028.045223][T18437] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1028.045238][T18437] Call Trace:
[ 1028.045246][T18437]  <TASK>
[ 1028.045256][T18437]  dump_stack_lvl+0x100/0x190
[ 1028.045299][T18437]  should_fail_ex.cold+0x5/0xa
[ 1028.045328][T18437]  should_failslab+0xc2/0x120
[ 1028.045365][T18437]  kmem_cache_alloc_noprof+0x92/0x6a0
[ 1028.045397][T18437]  ? vm_area_dup+0x27/0x9d0
[ 1028.045424][T18437]  vm_area_dup+0x27/0x9d0
[ 1028.045447][T18437]  __split_vma+0x19c/0x1de0
[ 1028.045479][T18437]  ? __pfx___split_vma+0x10/0x10
[ 1028.045503][T18437]  ? kernel_text_address+0x8d/0x100
[ 1028.045529][T18437]  ? __lock_acquire+0x5c0/0x1f40
[ 1028.045575][T18437]  vma_modify+0x137b/0x29b0
[ 1028.045600][T18437]  ? __lock_acquire+0x560/0x1f40
[ 1028.045640][T18437]  ? __pfx_vma_modify+0x10/0x10
[ 1028.045669][T18437]  ? __lock_acquire+0x5c0/0x1f40
[ 1028.045710][T18437]  vma_modify_flags_uffd+0x312/0x470
[ 1028.045739][T18437]  ? __pfx_vma_modify_flags_uffd+0x10/0x10
[ 1028.045776][T18437]  ? __pfx_vma_can_userfault+0x10/0x10
[ 1028.045804][T18437]  ? __pfx___might_resched+0x10/0x10
[ 1028.045837][T18437]  userfaultfd_register_range+0x4be/0x770
[ 1028.045873][T18437]  ? __pfx_userfaultfd_register_range+0x10/0x10
[ 1028.045905][T18437]  ? vma_can_userfault+0x124/0x3f0
[ 1028.045933][T18437]  ? __pfx_vma_can_userfault+0x10/0x10
[ 1028.045958][T18437]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1028.045994][T18437]  userfaultfd_register+0x900/0xe40
[ 1028.046028][T18437]  ? __pfx_userfaultfd_register+0x10/0x10
[ 1028.046057][T18437]  ? kasan_quarantine_put+0x104/0x240
[ 1028.046098][T18437]  ? tomoyo_path_number_perm+0x188/0x580
[ 1028.046128][T18437]  userfaultfd_ioctl+0x2e6e/0x61d0
[ 1028.046166][T18437]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[ 1028.046194][T18437]  ? do_vfs_ioctl+0x226/0x13e0
[ 1028.046219][T18437]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1028.046250][T18437]  ? __fget_files+0x34/0x3d0
[ 1028.046287][T18437]  ? find_held_lock+0x2b/0x80
[ 1028.046314][T18437]  ? __fget_files+0x215/0x3d0
[ 1028.046344][T18437]  ? hook_file_ioctl_common+0x140/0x440
[ 1028.046377][T18437]  ? __fget_files+0x21f/0x3d0
[ 1028.046407][T18437]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[ 1028.046435][T18437]  ? compat_ptr_ioctl+0x6e/0xa0
[ 1028.046456][T18437]  compat_ptr_ioctl+0x6e/0xa0
[ 1028.046481][T18437]  ? __pfx_compat_ptr_ioctl+0x10/0x10
[ 1028.046506][T18437]  __ia32_compat_sys_ioctl+0x2cf/0x360
[ 1028.046534][T18437]  __do_fast_syscall_32+0x13a/0x8b0
[ 1028.046561][T18437]  do_fast_syscall_32+0x32/0x70
[ 1028.046585][T18437]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1028.046613][T18437] RIP: 0023:0xf7f48fec
[ 1028.046638][T18437] Code: Unable to access opcode bytes at 0xf7f48fc2.
[ 1028.046647][T18437] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[ 1028.046670][T18437] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c020aa00
[ 1028.046688][T18437] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000
[ 1028.046702][T18437] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1028.046717][T18437] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1028.046731][T18437] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1028.046758][T18437]  </TASK>
[ 1028.345549][ T6444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1028.345574][ T6444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1028.662327][T18447] FAULT_INJECTION: forcing a failure.
[ 1028.662327][T18447] name failslab, interval 1, probability 0, space 0, times 0
[ 1028.662361][T18447] CPU: 3 UID: 0 PID: 18447 Comm: syz.1.3713 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[ 1028.662390][T18447] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[ 1028.662399][T18447] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1028.662409][T18447] Call Trace:
[ 1028.662415][T18447]  <TASK>
[ 1028.662425][T18447]  dump_stack_lvl+0x100/0x190
[ 1028.662455][T18447]  should_fail_ex.cold+0x5/0xa
[ 1028.662480][T18447]  should_failslab+0xc2/0x120
[ 1028.662509][T18447]  kmem_cache_alloc_noprof+0x92/0x6a0
[ 1028.662538][T18447]  ? vm_area_dup+0x27/0x9d0
[ 1028.662563][T18447]  vm_area_dup+0x27/0x9d0
[ 1028.662582][T18447]  __split_vma+0x19c/0x1de0
[ 1028.662605][T18447]  ? __pfx___split_vma+0x10/0x10
[ 1028.662647][T18447]  vma_modify+0x137b/0x29b0
[ 1028.662673][T18447]  ? __lock_acquire+0x560/0x1f40
[ 1028.662709][T18447]  ? __pfx_vma_modify+0x10/0x10
[ 1028.662730][T18447]  ? __lock_acquire+0x5c0/0x1f40
[ 1028.662769][T18447]  vma_modify_flags_uffd+0x312/0x470
[ 1028.662796][T18447]  ? __pfx_vma_modify_flags_uffd+0x10/0x10
[ 1028.662836][T18447]  ? __pfx_vma_can_userfault+0x10/0x10
[ 1028.662865][T18447]  ? __pfx___might_resched+0x10/0x10
[ 1028.662897][T18447]  userfaultfd_register_range+0x4be/0x770
[ 1028.662930][T18447]  ? __pfx_userfaultfd_register_range+0x10/0x10
[ 1028.662962][T18447]  ? vma_can_userfault+0x124/0x3f0
[ 1028.662990][T18447]  ? __pfx_vma_can_userfault+0x10/0x10
[ 1028.663017][T18447]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1028.663051][T18447]  userfaultfd_register+0x900/0xe40
[ 1028.663084][T18447]  ? __pfx_userfaultfd_register+0x10/0x10
[ 1028.663110][T18447]  ? kasan_quarantine_put+0x104/0x240
[ 1028.663147][T18447]  ? tomoyo_path_number_perm+0x188/0x580
[ 1028.663172][T18447]  userfaultfd_ioctl+0x2e6e/0x61d0
[ 1028.663209][T18447]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[ 1028.663231][T18447]  ? do_vfs_ioctl+0x226/0x13e0
[ 1028.663254][T18447]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1028.663286][T18447]  ? __fget_files+0x34/0x3d0
[ 1028.663309][T18447]  ? find_held_lock+0x2b/0x80
[ 1028.663332][T18447]  ? __fget_files+0x215/0x3d0
[ 1028.663353][T18447]  ? hook_file_ioctl_common+0x140/0x440
[ 1028.663380][T18447]  ? __fget_files+0x21f/0x3d0
[ 1028.663407][T18447]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[ 1028.663432][T18447]  ? compat_ptr_ioctl+0x6e/0xa0
[ 1028.663451][T18447]  compat_ptr_ioctl+0x6e/0xa0
[ 1028.663473][T18447]  ? __pfx_compat_ptr_ioctl+0x10/0x10
[ 1028.663492][T18447]  __ia32_compat_sys_ioctl+0x2cf/0x360
[ 1028.663520][T18447]  __do_fast_syscall_32+0x13a/0x8b0
[ 1028.663542][T18447]  do_fast_syscall_32+0x32/0x70
[ 1028.663563][T18447]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1028.663588][T18447] RIP: 0023:0xf7f54fec
[ 1028.663617][T18447] Code: Unable to access opcode bytes at 0xf7f54fc2.
[ 1028.663626][T18447] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[ 1028.663649][T18447] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c020aa00
[ 1028.663661][T18447] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000
[ 1028.663671][T18447] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1028.663681][T18447] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1028.663692][T18447] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1028.663718][T18447]  </TASK>
[ 1028.882107][T18456] input: syz1 as /devices/virtual/input/input255
[ 1028.896376][T18456] db_root: cannot open: ./my_
[ 1028.923743][T18449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1028.933561][T18449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1030.255872][ T1158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1030.256012][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1030.493964][T18473] fuse: fd is not a fuse device
[ 1030.507310][T18481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1030.564180][T18483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1030.618522][T18486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1031.652693][T18514] input: syz1 as /devices/virtual/input/input256
[ 1031.659200][T18514] db_root: cannot open: ./my_
[ 1032.102729][T18518] fuse: fd is not a fuse device
[ 1032.640806][T18526] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3736'.
[ 1032.652360][T18526] sctp: [Deprecated]: syz.5.3736 (pid 18526) Use of int in max_burst socket option.
[ 1032.652360][T18526] Use struct sctp_assoc_value instead
[ 1032.652492][T18526] sctp: [Deprecated]: syz.5.3736 (pid 18526) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1032.652492][T18526] Use struct sctp_sack_info instead
[ 1032.795288][T18535] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1032.797310][T18535] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1032.856696][T18539] overlayfs: failed to clone upperpath
[ 1032.862137][T18539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1032.868672][T18535] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3738'.
[ 1032.916201][T18540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1032.969350][T18544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1033.456065][ T5280] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[ 1033.629246][ T5280] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[ 1033.651368][ T5280] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1033.652998][ T5280] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 1033.653014][ T5280] usb 6-1: Product: syz
[ 1033.653023][ T5280] usb 6-1: Manufacturer: syz
[ 1033.653032][ T5280] usb 6-1: SerialNumber: syz
[ 1033.700711][T18552] fuse: Bad value for 'fd'
[ 1033.806027][T18558] FAULT_INJECTION: forcing a failure.
[ 1033.806027][T18558] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1033.806049][T18558] CPU: 3 UID: 0 PID: 18558 Comm: syz.5.3748 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[ 1033.806067][T18558] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[ 1033.806071][T18558] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1033.806078][T18558] Call Trace:
[ 1033.806082][T18558]  <TASK>
[ 1033.806087][T18558]  dump_stack_lvl+0x100/0x190
[ 1033.806106][T18558]  should_fail_ex.cold+0x5/0xa
[ 1033.806121][T18558]  _copy_from_user+0x2e/0xd0
[ 1033.806134][T18558]  get_compat_msghdr+0xb3/0x480
[ 1033.806164][T18558]  ? __pfx_get_compat_msghdr+0x10/0x10
[ 1033.806191][T18558]  ___sys_sendmsg+0x1b6/0x1e0
[ 1033.806210][T18558]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1033.806234][T18558]  ? find_held_lock+0x2b/0x80
[ 1033.806257][T18558]  __sys_sendmsg+0x160/0x210
[ 1033.806271][T18558]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1033.806288][T18558]  ? __pfx_ksys_write+0x10/0x10
[ 1033.806306][T18558]  __do_fast_syscall_32+0x13a/0x8b0
[ 1033.806318][T18558]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1033.806337][T18558]  do_fast_syscall_32+0x32/0x70
[ 1033.806349][T18558]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1033.806363][T18558] RIP: 0023:0xf7f48fec
[ 1033.806376][T18558] Code: Unable to access opcode bytes at 0xf7f48fc2.
[ 1033.806382][T18558] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[ 1033.806394][T18558] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0
[ 1033.806401][T18558] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000
[ 1033.806408][T18558] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1033.806414][T18558] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1033.806421][T18558] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1033.806435][T18558]  </TASK>
[ 1033.884925][ T5280] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 1033.985904][T18560] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3749'.
[ 1034.095391][ T6921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1034.095642][ T6921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1034.095975][ T6921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1034.096063][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1034.146536][    C2] usblp0: nonzero write bulk status received: -71
[ 1034.146717][ T5767] usb 6-1: USB disconnect, device number 21
[ 1034.148230][T18549] usblp0: removed
[ 1034.244212][T18569] fuse: fd is not a fuse device
[ 1034.290196][T18571] fuse: fd is not a fuse device
[ 1034.633259][T18589] Set syz0 is full, maxelem 2 reached
[ 1034.675823][T18591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1034.728693][T18592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1034.781898][T18595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1035.313616][T18605] ip6tnl1: entered promiscuous mode
[ 1035.313629][T18605] ip6tnl1: entered allmulticast mode
[ 1035.377085][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1035.377179][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1035.504231][ T5099] Bluetooth: hci0: unexpected event for opcode 0x0809
[ 1035.657951][T18614] comedi comedi0: adq12b: a I/O base address must be specified
[ 1036.046386][T18624] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3768'.
[ 1036.046410][T18624] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3768'.
[ 1036.048894][   T43] audit: type=1326 audit(2000000001.369:6003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18623 comm="syz.5.3768" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f48fec code=0x0
[ 1036.845657][T18631] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3769'.
[ 1036.945059][   T42] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 1037.095454][   T42] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1037.096267][   T42] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[ 1037.096283][   T42] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1037.097081][   T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1037.097093][   T42] usb 5-1: SerialNumber: syz
[ 1037.102416][T18632] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1037.451748][T18632] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1038.606654][T18653] 9pnet_virtio: no channels available for device c:::
[ 1038.648288][   T42] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71
[ 1038.654030][   T42] usb 5-1: USB disconnect, device number 25
[ 1038.666860][T18655] 9pnet_virtio: no channels available for device c:::
[ 1038.697361][T18657] syz_tun: entered allmulticast mode
[ 1038.729200][ T5099] Bluetooth: hci1: unexpected event for opcode 0x0809
[ 1038.729969][T18656] syz_tun: left allmulticast mode
[ 1038.734103][T18660] input: syz1 as /devices/virtual/input/input258
[ 1038.745697][T18660] db_root: cannot open: ./my_
[ 1039.107743][T18662] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3780'.
[ 1039.107758][T18662] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3780'.
[ 1039.110199][   T43] audit: type=1326 audit(2000000004.429:6004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18661 comm="syz.5.3780" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f48fec code=0x0
[ 1039.145345][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1039.145364][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1039.145461][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1039.186268][T18665] FAULT_INJECTION: forcing a failure.
[ 1039.186268][T18665] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1039.186291][T18665] CPU: 1 UID: 0 PID: 18665 Comm: syz.0.3781 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[ 1039.186308][T18665] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[ 1039.186313][T18665] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1039.186319][T18665] Call Trace:
[ 1039.186323][T18665]  <TASK>
[ 1039.186328][T18665]  dump_stack_lvl+0x100/0x190
[ 1039.186348][T18665]  should_fail_ex.cold+0x5/0xa
[ 1039.186363][T18665]  _copy_from_user+0x2e/0xd0
[ 1039.186378][T18665]  io_submit_one+0xbd/0x1fb0
[ 1039.186391][T18665]  ? __lock_acquire+0x5c0/0x1f40
[ 1039.186408][T18665]  ? irqentry_exit+0x24d/0xa10
[ 1039.186419][T18665]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1039.186437][T18665]  ? __pfx_io_submit_one+0x10/0x10
[ 1039.186450][T18665]  ? lock_acquire+0x1d1/0x380
[ 1039.186468][T18665]  ? __might_fault+0xc5/0x140
[ 1039.186484][T18665]  ? __ia32_compat_sys_io_submit+0x1a7/0x3b0
[ 1039.186496][T18665]  __ia32_compat_sys_io_submit+0x1a7/0x3b0
[ 1039.186507][T18665]  ? __fget_files+0x21f/0x3d0
[ 1039.186523][T18665]  ? __pfx___ia32_compat_sys_io_submit+0x10/0x10
[ 1039.186538][T18665]  ? ksys_write+0x1ac/0x250
[ 1039.186553][T18665]  ? __pfx_ksys_write+0x10/0x10
[ 1039.186569][T18665]  __do_fast_syscall_32+0x13a/0x8b0
[ 1039.186580][T18665]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1039.186599][T18665]  do_fast_syscall_32+0x32/0x70
[ 1039.186610][T18665]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1039.186625][T18665] RIP: 0023:0xf748efec
[ 1039.186638][T18665] Code: Unable to access opcode bytes at 0xf748efc2.
[ 1039.186644][T18665] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 00000000000000f8
[ 1039.186655][T18665] RAX: ffffffffffffffda RBX: 00000000f7feb000 RCX: 0000000000000001
[ 1039.186662][T18665] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000
[ 1039.186669][T18665] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1039.186675][T18665] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1039.186682][T18665] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1039.186696][T18665]  </TASK>
[ 1039.315822][T18670] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3783'.
[ 1039.315838][T18670] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3783'.
[ 1039.319832][   T43] audit: type=1326 audit(2000000004.639:6005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18669 comm="syz.1.3783" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f54fec code=0x0
[ 1039.369404][T18673] netlink: 'syz.3.3782': attribute type 1 has an invalid length.
[ 1039.369457][T18673] netlink: 'syz.3.3782': attribute type 1 has an invalid length.
[ 1039.484580][T18677] 9pnet_virtio: no channels available for device c:::
[ 1039.855887][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1040.258461][T18690] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3789'.
[ 1040.626062][T18695] input: syz1 as /devices/virtual/input/input259
[ 1040.638266][T18695] db_root: cannot open: ./my_
[ 1041.086933][T18709] 9pnet_virtio: no channels available for device c:::
[ 1041.132194][T18707] fuse: fd is not a fuse device
[ 1041.137954][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1041.138088][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1041.147605][T18712] loop9: detected capacity change from 0 to 16384
[ 1041.271459][T18715] loop9: detected capacity change from 16384 to 16383
[ 1041.306150][T18716] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3797'.
[ 1042.700719][T18731] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3802'.
[ 1043.336036][T18737] 9pnet_virtio: no channels available for device c:::
[ 1043.560362][ T5099] Bluetooth: hci0: unexpected event for opcode 0x0809
[ 1044.335630][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1044.335735][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1044.345354][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1045.331860][T18772] 9pnet_virtio: no channels available for device c:::
[ 1045.616927][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1045.617702][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1045.618293][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1045.618587][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1045.735111][ T5280] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[ 1045.906130][ T5280] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1045.907041][ T5280] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[ 1045.907065][ T5280] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1045.908091][ T5280] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1045.908111][ T5280] usb 10-1: SerialNumber: syz
[ 1045.912490][T18778] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1045.952280][T18781] syzkaller0: entered promiscuous mode
[ 1045.952295][T18781] syzkaller0: entered allmulticast mode
[ 1045.961072][T18781] tipc: Started in network mode
[ 1045.961088][T18781] tipc: Node identity fa3ac6bd1f82, cluster identity 4711
[ 1045.961290][T18781] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1046.131015][T18778] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1046.257493][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1046.257621][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1046.295445][ T5099] Bluetooth: hci1: unexpected event for opcode 0x0809
[ 1046.299603][T18785] input: syz1 as /devices/virtual/input/input260
[ 1046.310247][T18785] db_root: cannot open: ./my_
[ 1046.497440][T18780] tipc: Resetting bearer <eth:syzkaller0>
[ 1046.511931][T18780] tipc: Disabling bearer <eth:syzkaller0>
[ 1046.565800][ T5280] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71
[ 1046.569689][ T5280] usb 10-1: USB disconnect, device number 10
[ 1047.268466][T18797] hsr_slave_0: left promiscuous mode
[ 1047.269009][T18797] hsr_slave_1: left promiscuous mode
[ 1047.349296][T18799] 9pnet_virtio: no channels available for device c:::
[ 1047.875247][T18807] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3825'.
[ 1048.062211][T18809] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3826'.
[ 1048.655526][T18194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1048.686137][ T5099] Bluetooth: hci1: unexpected event for opcode 0x0809
[ 1048.690834][T18816] input: syz1 as /devices/virtual/input/input261
[ 1048.701439][T18816] db_root: cannot open: ./my_
[ 1049.020841][T18818] FAULT_INJECTION: forcing a failure.
[ 1049.020841][T18818] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1049.020873][T18818] CPU: 1 UID: 0 PID: 18818 Comm: syz.5.3829 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[ 1049.020898][T18818] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[ 1049.020905][T18818] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1049.020916][T18818] Call Trace:
[ 1049.020923][T18818]  <TASK>
[ 1049.020929][T18818]  dump_stack_lvl+0x100/0x190
[ 1049.020956][T18818]  should_fail_ex.cold+0x5/0xa
[ 1049.020977][T18818]  _copy_from_user+0x2e/0xd0
[ 1049.020995][T18818]  get_compat_msghdr+0xb3/0x480
[ 1049.021022][T18818]  ? __pfx_get_compat_msghdr+0x10/0x10
[ 1049.021058][T18818]  ___sys_sendmsg+0x1b6/0x1e0
[ 1049.021101][T18818]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1049.021138][T18818]  ? find_held_lock+0x2b/0x80
[ 1049.021176][T18818]  __sys_sendmsg+0x160/0x210
[ 1049.021196][T18818]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1049.021221][T18818]  ? __pfx_ksys_write+0x10/0x10
[ 1049.021244][T18818]  __do_fast_syscall_32+0x13a/0x8b0
[ 1049.021262][T18818]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1049.021288][T18818]  do_fast_syscall_32+0x32/0x70
[ 1049.021305][T18818]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1049.021325][T18818] RIP: 0023:0xf7f48fec
[ 1049.021343][T18818] Code: Unable to access opcode bytes at 0xf7f48fc2.
[ 1049.021351][T18818] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[ 1049.021367][T18818] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000c00
[ 1049.021377][T18818] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000
[ 1049.021387][T18818] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1049.021397][T18818] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1049.021406][T18818] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1049.021428][T18818]  </TASK>
[ 1049.206475][T18824] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3832'.
[ 1049.458840][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1049.458968][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1049.585221][T18828] netlink: 'syz.5.3834': attribute type 1 has an invalid length.
[ 1049.589537][   T43] audit: type=1326 audit(2000000014.909:6006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18827 comm="syz.5.3834" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48fec code=0x7ffc0000
[ 1049.590599][   T43] audit: type=1326 audit(2000000014.909:6007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18827 comm="syz.5.3834" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48fec code=0x7ffc0000
[ 1049.590702][   T43] audit: type=1326 audit(2000000014.909:6008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18827 comm="syz.5.3834" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48fec code=0x7ffc0000
[ 1049.590906][   T43] audit: type=1326 audit(2000000014.909:6009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18827 comm="syz.5.3834" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f48fec code=0x7ffc0000
[ 1049.591030][   T43] audit: type=1326 audit(2000000014.909:6010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18827 comm="syz.5.3834" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48fec code=0x7ffc0000
[ 1049.591179][   T43] audit: type=1326 audit(2000000014.909:6011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18827 comm="syz.5.3834" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48fec code=0x7ffc0000
[ 1049.593814][   T43] audit: type=1326 audit(2000000014.909:6012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18827 comm="syz.5.3834" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48fec code=0x7ffc0000
[ 1049.593950][   T43] audit: type=1326 audit(2000000014.909:6013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18827 comm="syz.5.3834" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48fec code=0x7ffc0000
[ 1049.594091][   T43] audit: type=1326 audit(2000000014.909:6014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18827 comm="syz.5.3834" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f48fec code=0x7ffc0000
[ 1049.594231][   T43] audit: type=1326 audit(2000000014.909:6015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18827 comm="syz.5.3834" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48fec code=0x7ffc0000
[ 1049.905984][T18845] overlayfs: failed to clone upperpath
[ 1049.911342][T18845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1049.968168][T18846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1050.023061][T18847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1050.366439][T18850] FAULT_INJECTION: forcing a failure.
[ 1050.366439][T18850] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1050.366464][T18850] CPU: 1 UID: 0 PID: 18850 Comm: syz.0.3839 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[ 1050.366487][T18850] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[ 1050.366494][T18850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1050.366503][T18850] Call Trace:
[ 1050.366509][T18850]  <TASK>
[ 1050.366516][T18850]  dump_stack_lvl+0x100/0x190
[ 1050.366540][T18850]  should_fail_ex.cold+0x5/0xa
[ 1050.366555][T18850]  _copy_from_user+0x2e/0xd0
[ 1050.366568][T18850]  get_compat_msghdr+0xb3/0x480
[ 1050.366585][T18850]  ? __pfx_get_compat_msghdr+0x10/0x10
[ 1050.366613][T18850]  ___sys_sendmsg+0x1b6/0x1e0
[ 1050.366632][T18850]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1050.366656][T18850]  ? find_held_lock+0x2b/0x80
[ 1050.366678][T18850]  __sys_sendmsg+0x160/0x210
[ 1050.366692][T18850]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1050.366709][T18850]  ? __pfx_ksys_write+0x10/0x10
[ 1050.366726][T18850]  __do_fast_syscall_32+0x13a/0x8b0
[ 1050.366739][T18850]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1050.366757][T18850]  do_fast_syscall_32+0x32/0x70
[ 1050.366769][T18850]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1050.366784][T18850] RIP: 0023:0xf748efec
[ 1050.366797][T18850] Code: Unable to access opcode bytes at 0xf748efc2.
[ 1050.366802][T18850] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[ 1050.366826][T18850] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0
[ 1050.366834][T18850] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000
[ 1050.366841][T18850] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1050.366848][T18850] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1050.366855][T18850] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1050.366869][T18850]  </TASK>
[ 1050.506610][T18855] input: syz1 as /devices/virtual/input/input263
[ 1050.511653][T18855] db_root: cannot open: ./my_
[ 1051.093983][T18863] Bluetooth: MGMT ver 1.23
[ 1051.304489][T18868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3845'.
[ 1051.406278][T18874] netlink: 'syz.5.3848': attribute type 1 has an invalid length.
[ 1051.503732][T18877] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3847'.
[ 1051.625255][T18876] Set syz1 is full, maxelem 6117 reached
[ 1051.695360][T18194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1052.025400][ T6444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1052.025497][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1052.158242][T18889] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3854'.
[ 1052.180647][T18889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1052.395247][ T5881] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1052.395288][ T5881] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1052.395316][ T5881] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1052.395344][ T5881] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1052.449265][T18906] input: syz1 as /devices/virtual/input/input265
[ 1052.457308][T18906] db_root: cannot open: ./my_
[ 1052.736892][T18916] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3863'.
[ 1053.018756][T18920] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3864'.
[ 1053.779376][ T5099] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[ 1053.779541][ T5099] Bluetooth: hci2: Injecting HCI hardware error event
[ 1053.781913][ T5809] Bluetooth: hci2: hardware error 0x00
[ 1053.937201][ T1438] ieee802154 phy0 wpan0: encryption failed: -22
[ 1053.937232][ T1438] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.496931][ T1158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1054.497043][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1054.738828][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1055.040088][T18945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3872'.
[ 1055.040113][T18945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3872'.
[ 1055.042713][   T43] kauditd_printk_skb: 100 callbacks suppressed
[ 1055.042725][   T43] audit: type=1326 audit(2000000005.119:6116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.3.3872" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f22fec code=0x0
[ 1055.146800][ T5099] Bluetooth: hci2: unexpected event for opcode 0x0809
[ 1055.152798][T18949] input: syz1 as /devices/virtual/input/input267
[ 1055.161054][T18949] db_root: cannot open: ./my_
[ 1055.653195][T18965] FAULT_INJECTION: forcing a failure.
[ 1055.653195][T18965] name failslab, interval 1, probability 0, space 0, times 0
[ 1055.653217][T18965] CPU: 2 UID: 0 PID: 18965 Comm: syz.0.3878 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[ 1055.653234][T18965] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[ 1055.653239][T18965] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1055.653246][T18965] Call Trace:
[ 1055.653250][T18965]  <TASK>
[ 1055.653257][T18965]  dump_stack_lvl+0x100/0x190
[ 1055.653277][T18965]  should_fail_ex.cold+0x5/0xa
[ 1055.653293][T18965]  should_failslab+0xc2/0x120
[ 1055.653311][T18965]  kmem_cache_alloc_noprof+0x92/0x6a0
[ 1055.653326][T18965]  ? dev_queue_xmit_nit+0x38/0xa60
[ 1055.653340][T18965]  ? skb_clone+0x190/0x400
[ 1055.653356][T18965]  skb_clone+0x190/0x400
[ 1055.653369][T18965]  dev_queue_xmit_nit+0x255/0xa60
[ 1055.653387][T18965]  dev_hard_start_xmit+0x2f5/0x760
[ 1055.653401][T18965]  __dev_queue_xmit+0x1c25/0x4a40
[ 1055.653418][T18965]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1055.653436][T18965]  ? rcu_is_watching+0x13/0xc0
[ 1055.653453][T18965]  ? __skb_clone+0x570/0x760
[ 1055.653468][T18965]  netlink_deliver_tap+0xa4d/0xcc0
[ 1055.653482][T18965]  netlink_unicast+0x62b/0x850
[ 1055.653496][T18965]  ? __pfx_netlink_unicast+0x10/0x10
[ 1055.653512][T18965]  netlink_sendmsg+0x8b0/0xda0
[ 1055.653527][T18965]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1055.653540][T18965]  ? apparmor_socket_sendmsg+0x165/0x280
[ 1055.653555][T18965]  ____sys_sendmsg+0xa4d/0xbe0
[ 1055.653572][T18965]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1055.653585][T18965]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1055.653607][T18965]  ___sys_sendmsg+0x190/0x1e0
[ 1055.653625][T18965]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1055.653648][T18965]  ? find_held_lock+0x2b/0x80
[ 1055.653671][T18965]  __sys_sendmsg+0x160/0x210
[ 1055.653684][T18965]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1055.653701][T18965]  ? __pfx_ksys_write+0x10/0x10
[ 1055.653724][T18965]  __do_fast_syscall_32+0x13a/0x8b0
[ 1055.653741][T18965]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1055.653768][T18965]  do_fast_syscall_32+0x32/0x70
[ 1055.653785][T18965]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1055.653806][T18965] RIP: 0023:0xf748efec
[ 1055.653825][T18965] Code: Unable to access opcode bytes at 0xf748efc2.
[ 1055.653833][T18965] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[ 1055.653850][T18965] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100
[ 1055.653862][T18965] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1055.653872][T18965] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1055.653882][T18965] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1055.653893][T18965] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1055.653917][T18965]  </TASK>
[ 1055.941599][ T5809] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[ 1056.303790][T18978] netlink: 'syz.3.3882': attribute type 4 has an invalid length.
[ 1056.320275][T18978] lo: left allmulticast mode
[ 1056.916080][T18985] random: crng reseeded on system resumption
[ 1057.004642][T18989] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3886'.
[ 1057.072022][T18991] input: syz1 as /devices/virtual/input/input268
[ 1057.079380][T18991] db_root: cannot open: ./my_
[ 1057.749973][ T5809] Bluetooth: hci0: SCO packet too small
[ 1057.785467][ T6920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1057.785636][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1057.786514][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1058.713826][T19004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1058.774369][T19007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1058.831786][T19008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1059.385678][T17282] usb 6-1: new low-speed USB device number 22 using dummy_hcd
[ 1059.515110][T17282] usb 6-1: device descriptor read/64, error -71
[ 1059.755290][T17282] usb 6-1: new low-speed USB device number 23 using dummy_hcd
[ 1059.885088][T17282] usb 6-1: device descriptor read/64, error -71
[ 1059.969988][T19028] FAULT_INJECTION: forcing a failure.
[ 1059.969988][T19028] name failslab, interval 1, probability 0, space 0, times 0
[ 1059.970009][T19028] CPU: 2 UID: 0 PID: 19028 Comm: syz.0.3900 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[ 1059.970028][T19028] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[ 1059.970034][T19028] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1059.970042][T19028] Call Trace:
[ 1059.970046][T19028]  <TASK>
[ 1059.970052][T19028]  dump_stack_lvl+0x100/0x190
[ 1059.970072][T19028]  should_fail_ex.cold+0x5/0xa
[ 1059.970088][T19028]  should_failslab+0xc2/0x120
[ 1059.970107][T19028]  kmem_cache_alloc_noprof+0x92/0x6a0
[ 1059.970125][T19028]  ? proc_net_ns_init+0x42/0x420
[ 1059.970140][T19028]  ? __pfx_proc_net_ns_init+0x10/0x10
[ 1059.970153][T19028]  proc_net_ns_init+0x42/0x420
[ 1059.970166][T19028]  ? __pfx_proc_net_ns_init+0x10/0x10
[ 1059.970178][T19028]  ops_init+0x1e2/0x5f0
[ 1059.970195][T19028]  setup_net+0x118/0x3a0
[ 1059.970211][T19028]  ? __pfx_setup_net+0x10/0x10
[ 1059.970247][T19028]  copy_net_ns+0x345/0x7a0
[ 1059.970266][T19028]  create_new_namespaces+0x3ea/0xac0
[ 1059.970288][T19028]  unshare_nsproxy_namespaces+0xf2/0x220
[ 1059.970309][T19028]  ksys_unshare+0x4a2/0xb30
[ 1059.970323][T19028]  ? __pfx_ksys_unshare+0x10/0x10
[ 1059.970342][T19028]  __ia32_sys_unshare+0x30/0x40
[ 1059.970355][T19028]  __do_fast_syscall_32+0x13a/0x8b0
[ 1059.970370][T19028]  do_fast_syscall_32+0x32/0x70
[ 1059.970383][T19028]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1059.970404][T19028] RIP: 0023:0xf748efec
[ 1059.970423][T19028] Code: Unable to access opcode bytes at 0xf748efc2.
[ 1059.970431][T19028] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136
[ 1059.970458][T19028] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000
[ 1059.970470][T19028] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1059.970481][T19028] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1059.970493][T19028] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1059.970504][T19028] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1059.970524][T19028]  </TASK>
[ 1059.997015][T17282] usb usb6-port1: attempt power cycle
[ 1060.250705][T19038] netlink: 'syz.3.3903': attribute type 1 has an invalid length.
[ 1060.253039][   T43] audit: type=1326 audit(2000000001.539:6117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19037 comm="syz.3.3903" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000
[ 1060.253072][   T43] audit: type=1326 audit(2000000001.539:6118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19037 comm="syz.3.3903" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000
[ 1060.254058][   T43] audit: type=1326 audit(2000000001.539:6119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19037 comm="syz.3.3903" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000
[ 1060.254175][   T43] audit: type=1326 audit(2000000001.539:6120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19037 comm="syz.3.3903" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000
[ 1060.254318][   T43] audit: type=1326 audit(2000000001.539:6121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19037 comm="syz.3.3903" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f22fec code=0x7ffc0000
[ 1060.254423][   T43] audit: type=1326 audit(2000000001.539:6122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19037 comm="syz.3.3903" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000
[ 1060.254543][   T43] audit: type=1326 audit(2000000001.539:6123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19037 comm="syz.3.3903" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000
[ 1060.254945][   T43] audit: type=1326 audit(2000000001.539:6124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19037 comm="syz.3.3903" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000
[ 1060.255292][   T43] audit: type=1326 audit(2000000001.549:6125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19037 comm="syz.3.3903" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f22fec code=0x7ffc0000
[ 1060.255434][   T43] audit: type=1326 audit(2000000001.549:6126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19037 comm="syz.3.3903" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000
[ 1060.335345][T17282] usb 6-1: new low-speed USB device number 24 using dummy_hcd
[ 1060.339012][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1060.339111][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1060.358626][T17282] usb 6-1: device descriptor read/8, error -71
[ 1060.361849][T19045] netlink: 'syz.3.3905': attribute type 1 has an invalid length.
[ 1060.408258][T19047] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3906'.
[ 1060.408282][T19047] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3906'.
[ 1060.595065][T17282] usb 6-1: new low-speed USB device number 25 using dummy_hcd
[ 1060.616943][T17282] usb 6-1: device descriptor read/8, error -71
[ 1060.726695][T17282] usb usb6-port1: unable to enumerate USB device
[ 1060.816420][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1061.349047][T19053] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3909'.
[ 1061.501853][T19055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1061.575391][T19056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1061.634342][T19060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1062.211408][T19078] 9pnet_virtio: no channels available for device c:::
[ 1062.815489][ T6921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1062.815589][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1063.147754][T19101] 9pnet_virtio: no channels available for device c:::
[ 1063.191817][T19104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1063.279191][T19106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1063.347244][T19108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1063.856454][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1064.109233][T19123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3933'.
[ 1064.109268][T19123] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1064.320339][T19132] 
[ 1064.321528][T19132] ======================================================
[ 1064.324476][T19132] WARNING: possible circular locking dependency detected
[ 1064.327391][T19132] syzkaller #0 Tainted: G S           L     
[ 1064.329989][T19132] ------------------------------------------------------
[ 1064.332920][T19132] syz.1.3935/19132 is trying to acquire lock:
[ 1064.335458][T19132] ffff88806f887138 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4f8/0xd90
[ 1064.339506][T19132] 
[ 1064.339506][T19132] but task is already holding lock:
[ 1064.342600][T19132] ffff888075924c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1064.346476][T19132] 
[ 1064.346476][T19132] which lock already depends on the new lock.
[ 1064.346476][T19132] 
[ 1064.350809][T19132] 
[ 1064.350809][T19132] the existing dependency chain (in reverse order) is:
[ 1064.354543][T19132] 
[ 1064.354543][T19132] -> #3 (&of->mutex){+.+.}-{4:4}:
[ 1064.357619][T19132]        lock_acquire+0x1d1/0x380
[ 1064.359734][T19132]        __mutex_lock+0x1a4/0x1bd0
[ 1064.361853][T19132]        kernfs_seq_start+0x4f/0x2a0
[ 1064.364111][T19132]        traverse.part.0.constprop.0+0xaf/0x650
[ 1064.366728][T19132]        seq_read_iter+0x93f/0x1270
[ 1064.368927][T19132]        kernfs_fop_read_iter+0x46c/0x610
[ 1064.371292][T19132]        do_iter_readv_writev+0x616/0x930
[ 1064.373249][T19132]        vfs_readv+0x4d3/0x8d0
[ 1064.374981][T19132]        do_preadv+0x1ac/0x270
[ 1064.377070][T19132]        __do_fast_syscall_32+0x13a/0x8b0
[ 1064.379473][T19132]        do_fast_syscall_32+0x32/0x70
[ 1064.381731][T19132]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1064.384572][T19132] 
[ 1064.384572][T19132] -> #2 (&p->lock){+.+.}-{4:4}:
[ 1064.387481][T19132]        lock_acquire+0x1d1/0x380
[ 1064.389607][T19132]        __mutex_lock+0x1a4/0x1bd0
[ 1064.391716][T19132]        seq_read_iter+0xe1/0x1270
[ 1064.393857][T19132]        kernfs_fop_read_iter+0x46c/0x610
[ 1064.396215][T19132]        copy_splice_read+0x4ba/0xbb0
[ 1064.398450][T19132]        do_splice_read+0x285/0x370
[ 1064.400654][T19132]        splice_file_to_pipe+0x82/0x120
[ 1064.402950][T19132]        do_sendfile+0x366/0xe20
[ 1064.405042][T19132]        __ia32_compat_sys_sendfile+0x1e5/0x220
[ 1064.407628][T19132]        __do_fast_syscall_32+0x13a/0x8b0
[ 1064.410028][T19132]        do_fast_syscall_32+0x32/0x70
[ 1064.412370][T19132]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1064.415222][T19132] 
[ 1064.415222][T19132] -> #1 (&pipe->mutex){+.+.}-{4:4}:
[ 1064.418271][T19132]        lock_acquire+0x1d1/0x380
[ 1064.420408][T19132]        __mutex_lock+0x1a4/0x1bd0
[ 1064.422541][T19132]        anon_pipe_prefill_and_lock+0x16c/0x580
[ 1064.425184][T19132]        anon_pipe_write+0x164/0x1b50
[ 1064.427441][T19132]        __kernel_write_iter+0x6bb/0x930
[ 1064.429810][T19132]        __kernel_write+0xf6/0x140
[ 1064.431954][T19132]        autofs_notify_daemon+0x50d/0xd90
[ 1064.434360][T19132]        autofs_wait+0x10fd/0x1b50
[ 1064.436495][T19132]        autofs_mount_wait+0x132/0x3b0
[ 1064.438794][T19132]        autofs_d_automount+0x490/0x950
[ 1064.441110][T19132]        __traverse_mounts+0x1b9/0x8a0
[ 1064.443386][T19132]        step_into_slowpath+0xcb4/0x1150
[ 1064.445760][T19132]        path_lookupat+0x58b/0xc40
[ 1064.447903][T19132]        filename_lookup+0x202/0x590
[ 1064.450118][T19132]        path_listxattrat+0x128/0x370
[ 1064.452384][T19132]        __do_fast_syscall_32+0x13a/0x8b0
[ 1064.454771][T19132]        do_fast_syscall_32+0x32/0x70
[ 1064.457049][T19132]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1064.459881][T19132] 
[ 1064.459881][T19132] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}:
[ 1064.463145][T19132]        check_prev_add+0xeb/0xe60
[ 1064.465365][T19132]        __lock_acquire+0x1528/0x1f40
[ 1064.467301][T19132]        lock_acquire+0x1d1/0x380
[ 1064.469289][T19132]        __mutex_lock+0x1a4/0x1bd0
[ 1064.471455][T19132]        autofs_notify_daemon+0x4f8/0xd90
[ 1064.473548][T19132]        autofs_wait+0x10fd/0x1b50
[ 1064.475315][T19132]        autofs_mount_wait+0x132/0x3b0
[ 1064.477044][T19132]        autofs_d_automount+0x490/0x950
[ 1064.479166][T19132]        __traverse_mounts+0x1b9/0x8a0
[ 1064.481495][T19132]        step_into_slowpath+0xcb4/0x1150
[ 1064.483866][T19132]        path_lookupat+0x58b/0xc40
[ 1064.486091][T19132]        filename_lookup+0x202/0x590
[ 1064.488338][T19132]        kern_path+0x37/0x50
[ 1064.490364][T19132]        lookup_bdev+0xd8/0x2a0
[ 1064.492452][T19132]        resume_store+0x1d6/0x460
[ 1064.494605][T19132]        kobj_attr_store+0x58/0x80
[ 1064.496793][T19132]        sysfs_kf_write+0xf2/0x150
[ 1064.498939][T19132]        kernfs_fop_write_iter+0x3e0/0x5f0
[ 1064.501279][T19132]        vfs_write+0x6af/0x1050
[ 1064.503247][T19132]        ksys_write+0x12a/0x250
[ 1064.505360][T19132]        __do_fast_syscall_32+0x13a/0x8b0
[ 1064.507788][T19132]        do_fast_syscall_32+0x32/0x70
[ 1064.510105][T19132]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1064.513013][T19132] 
[ 1064.513013][T19132] other info that might help us debug this:
[ 1064.513013][T19132] 
[ 1064.516423][T19132] Chain exists of:
[ 1064.516423][T19132]   &sbi->pipe_mutex --> &p->lock --> &of->mutex
[ 1064.516423][T19132] 
[ 1064.521400][T19132]  Possible unsafe locking scenario:
[ 1064.521400][T19132] 
[ 1064.524117][T19132]        CPU0                    CPU1
[ 1064.526388][T19132]        ----                    ----
[ 1064.528639][T19132]   lock(&of->mutex);
[ 1064.530375][T19132]                                lock(&p->lock);
[ 1064.533050][T19132]                                lock(&of->mutex);
[ 1064.535790][T19132]   lock(&sbi->pipe_mutex);
[ 1064.537737][T19132] 
[ 1064.537737][T19132]  *** DEADLOCK ***
[ 1064.537737][T19132] 
[ 1064.541153][T19132] locks held by syz.1.3935/19132: 4, last CPU#2:
[ 1064.543834][T19132]  #0: ffff888014f7ab70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[ 1064.547679][T19132]  #1: ffff888027ed6460 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1064.551364][T19132]  #2: ffff888075924c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1064.555446][T19132]  #3: ffff88801e7dee18 (kn->active#100){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1064.559704][T19132] 
[ 1064.559704][T19132] stack backtrace:
[ 1064.562232][T19132] CPU: 2 UID: 0 PID: 19132 Comm: syz.1.3935 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[ 1064.566801][T19132] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[ 1064.569451][T19132] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1064.573690][T19132] Call Trace:
[ 1064.575136][T19132]  <TASK>
[ 1064.576425][T19132]  dump_stack_lvl+0x100/0x190
[ 1064.578439][T19132]  print_circular_bug.cold+0x178/0x1be
[ 1064.580785][T19132]  check_noncircular+0x146/0x160
[ 1064.582907][T19132]  check_prev_add+0xeb/0xe60
[ 1064.584920][T19132]  __lock_acquire+0x1528/0x1f40
[ 1064.587002][T19132]  lock_acquire+0x1d1/0x380
[ 1064.588983][T19132]  ? autofs_notify_daemon+0x4f8/0xd90
[ 1064.591262][T19132]  ? __pfx___might_resched+0x10/0x10
[ 1064.593542][T19132]  __mutex_lock+0x1a4/0x1bd0
[ 1064.595520][T19132]  ? autofs_notify_daemon+0x4f8/0xd90
[ 1064.597804][T19132]  ? autofs_notify_daemon+0x4f8/0xd90
[ 1064.600096][T19132]  ? find_held_lock+0x2b/0x80
[ 1064.602130][T19132]  ? autofs_notify_daemon+0x4a0/0xd90
[ 1064.604424][T19132]  ? autofs_notify_daemon+0x4a0/0xd90
[ 1064.606714][T19132]  ? __pfx___mutex_lock+0x10/0x10
[ 1064.608669][T19132]  ? __mutex_unlock_slowpath+0x35d/0x930
[ 1064.610564][T19132]  ? from_kgid_munged+0xab/0x130
[ 1064.612310][T19132]  ? __pfx_from_kgid_munged+0x10/0x10
[ 1064.614601][T19132]  ? path_lookupat+0x58b/0xc40
[ 1064.616641][T19132]  ? autofs_notify_daemon+0x4f8/0xd90
[ 1064.618848][T19132]  autofs_notify_daemon+0x4f8/0xd90
[ 1064.621042][T19132]  ? __pfx_autofs_notify_daemon+0x10/0x10
[ 1064.623424][T19132]  ? lockdep_init_map_type+0x5c/0x250
[ 1064.625712][T19132]  ? lockdep_init_map_type+0x5c/0x250
[ 1064.627971][T19132]  autofs_wait+0x10fd/0x1b50
[ 1064.629950][T19132]  ? __pfx_autofs_wait+0x10/0x10
[ 1064.631682][T19132]  ? find_held_lock+0x2b/0x80
[ 1064.633693][T19132]  ? path_has_submounts+0xcf/0x120
[ 1064.635866][T19132]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1064.638085][T19132]  ? find_held_lock+0x2b/0x80
[ 1064.640095][T19132]  autofs_mount_wait+0x132/0x3b0
[ 1064.642123][T19132]  autofs_d_automount+0x490/0x950
[ 1064.644274][T19132]  __traverse_mounts+0x1b9/0x8a0
[ 1064.646366][T19132]  step_into_slowpath+0xcb4/0x1150
[ 1064.648537][T19132]  ? rcu_is_watching+0x13/0xc0
[ 1064.650566][T19132]  ? __pfx_step_into_slowpath+0x10/0x10
[ 1064.652838][T19132]  ? lookup_slow+0x5b/0x70
[ 1064.654706][T19132]  ? lookup_slow+0x5b/0x70
[ 1064.656582][T19132]  path_lookupat+0x58b/0xc40
[ 1064.658521][T19132]  filename_lookup+0x202/0x590
[ 1064.660565][T19132]  ? __pfx_filename_lookup+0x10/0x10
[ 1064.662819][T19132]  ? do_getname_kernel+0x5d/0x250
[ 1064.664994][T19132]  ? __asan_memcpy+0x3c/0x60
[ 1064.666969][T19132]  kern_path+0x37/0x50
[ 1064.668728][T19132]  lookup_bdev+0xd8/0x2a0
[ 1064.670582][T19132]  ? __pfx_lookup_bdev+0x10/0x10
[ 1064.672712][T19132]  ? __asan_memcpy+0x3c/0x60
[ 1064.674691][T19132]  resume_store+0x1d6/0x460
[ 1064.676663][T19132]  ? __pfx_resume_store+0x10/0x10
[ 1064.678776][T19132]  ? lock_acquire+0x1d1/0x380
[ 1064.680737][T19132]  ? sysfs_file_kobj+0x21/0x290
[ 1064.682774][T19132]  ? find_held_lock+0x2b/0x80
[ 1064.684796][T19132]  ? sysfs_file_kobj+0xe4/0x290
[ 1064.686860][T19132]  ? sysfs_file_kobj+0xe4/0x290
[ 1064.688914][T19132]  ? __pfx_resume_store+0x10/0x10
[ 1064.691018][T19132]  kobj_attr_store+0x58/0x80
[ 1064.692987][T19132]  ? __pfx_kobj_attr_store+0x10/0x10
[ 1064.695224][T19132]  sysfs_kf_write+0xf2/0x150
[ 1064.697213][T19132]  kernfs_fop_write_iter+0x3e0/0x5f0
[ 1064.699358][T19132]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 1064.701469][T19132]  vfs_write+0x6af/0x1050
[ 1064.703335][T19132]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 1064.705834][T19132]  ? __pfx_vfs_write+0x10/0x10
[ 1064.707875][T19132]  ? find_held_lock+0x2b/0x80
[ 1064.709768][T19132]  ksys_write+0x12a/0x250
[ 1064.711518][T19132]  ? __pfx_ksys_write+0x10/0x10
[ 1064.713614][T19132]  __do_fast_syscall_32+0x13a/0x8b0
[ 1064.715835][T19132]  do_fast_syscall_32+0x32/0x70
[ 1064.717935][T19132]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1064.720621][T19132] RIP: 0023:0xf7f54fec
[ 1064.722367][T19132] Code: Unable to access opcode bytes at 0xf7f54fc2.
[ 1064.725166][T19132] RSP: 002b:00000000f53c450c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[ 1064.728669][T19132] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000480
[ 1064.731974][T19132] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000
[ 1064.735262][T19132] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1064.738535][T19132] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1064.741782][T19132] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1064.745028][T19132]  </TASK>
[ 1064.762354][T19127] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 1064.770783][T19136] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1064.773677][T19132] PM: Image not found (code -6)
[ 1064.995121][   T35] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[ 1065.025059][ T5767] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[ 1065.145687][   T35] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1065.148445][   T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1065.148468][   T35] usb 6-1: Product: syz
[ 1065.148482][   T35] usb 6-1: Manufacturer: syz
[ 1065.148496][   T35] usb 6-1: SerialNumber: syz
[ 1065.175607][ T5767] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1065.176548][ T5767] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[ 1065.176571][ T5767] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1065.177542][ T5767] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1065.177561][ T5767] usb 5-1: SerialNumber: syz
[ 1065.179452][T19138] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1065.198899][ T5280] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1065.385575][T19138] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1065.465259][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1065.465387][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1065.726546][   T35] usb 6-1: USB disconnect, device number 26
[ 1065.788341][ T5767] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71
[ 1065.791381][ T5767] usb 5-1: USB disconnect, device number 26
[ 1066.255106][ T5280] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 1066.255174][ T5280] ath9k_htc: Failed to initialize the device
[ 1066.255393][   T35] usb 6-1: ath9k_htc: USB layer deinitialized
[ 1066.895224][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1068.655911][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1068.656019][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1069.935460][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1070.495303][ T6920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1070.495380][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1072.975312][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1073.775438][ T6920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1073.775509][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog