last executing test programs:

14m55.249681275s ago: executing program 3 (id=1519):
r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0xffffffffffffffff, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xfffffffd, 0x10000, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000002, 0x5], 0x80a0000, 0x80284})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14m54.817382872s ago: executing program 3 (id=1522):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x1b)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000300, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000f9ffff00ffffffff000000efffffff0000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"/108]}, 0xbc)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x400100, 0x0)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0)
mkdir(0x0, 0x1ff)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000180)={0xdde, 0x7ff, 0xfffffffffffffffa, 0x13, 0xd43, 0x2, 0xff, 0x2}, 0x0, 0x0)
r5 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x129d01, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000180))
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x3b8, 0x208, 0x2d0, 0xfeffffff, 0x2d0, 0x208, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe4, 0x0, {}, [@common=@inet=@tcp={{0x2c}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @common=@inet=@socket2={{0x24}}]}, @common=@inet=@TCPMSS={0x24}}, {{@ip={@multicast1, @rand_addr=0x64010100, 0xffffff00, 0xff, 'tunl0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x84, 0x1, 0x9}, 0x0, 0xb0, 0xe4, 0x0, {}, [@common=@set={{0x40}, {{0x0, [], 0x5}}}]}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id=0x64}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x414)
mknodat(r0, &(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x800, 0x6)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
ptrace$cont(0x21, 0x0, 0x76, 0x4)
r7 = syz_clone(0x1000, &(0x7f0000000580)="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", 0xfd, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="0d67945f91a8f8712b2972deea61ffb5a3fe28b05c7d364d558de92a87a925e0ff1797285f79cd5e36e4ec46716a0beeea2e38d9751427bbad259b3a418ed91f43912bb30cfd5b269052a861de28c6fafd1f8bf0b1ae2aaca5ed84e9d7e9c5285f8a2e0ab2ac145eaad9e36289b8e3b34887e21be1f11bb0fce41b8e7bbf78464ed11d69bd2814e6819c62cece82a08d534cbd2b94df78767797d3763e653ca792a3f32d3d438cb84d78ffdfd10cd181367a7be9a001f4456627e2cf56e93c99b2518b754662262b8458499bdd3e4d222578258880f35e04089dec2ea0")
setpgid(0x0, r7)
recvmmsg(r6, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x40000103, 0x0)
ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010125})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
mmap$IORING_OFF_SQ_RING(0x0, 0x800ff, 0x500000d, 0x13, 0xffffffffffffffff, 0x0)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)

14m53.581281176s ago: executing program 3 (id=1525):
userfaultfd(0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
close(0x3)
mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r1 = openat$sndseq(0xffffff9c, 0x0, 0x8200)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/page_tables/kernel\x00', 0x0, 0x0)
read(r2, &(0x7f00000002c0)=""/153, 0x99)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x204, &(0x7f0000000080)=[{&(0x7f0000000140)="2400000016000d190a762d7f08", 0xd}, {&(0x7f0000000280)="68cebf2dfb58fc0a00000000000000000d010090a8ffff", 0x17}], 0x2}, 0x44000)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55)

14m51.32287952s ago: executing program 3 (id=1532):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) (async)
r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x5, 0x4040)
ioctl$FE_READ_BER(r1, 0x80046f46, &(0x7f00000000c0))
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004)
r3 = accept4(r2, 0x0, 0x0, 0x0) (async)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={<r4=>0x0, 0x7, 0x80000000, 0x2}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000180)={r4, 0x15, 0x0, 0x4}, &(0x7f0000000200)=0x10)

14m51.088843018s ago: executing program 3 (id=1535):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/fs/nfsd\x00', 0x101042, 0x1e0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRESDEC=r2, @ANYBLOB="cf042bbd7000ffdbdf251200000008000300", @ANYRES32=r3, @ANYBLOB="0c0099002f0001000005001301000000000600ed00ce060000"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000010)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x401, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000900)={r0, r0, 0x1, 0x0, @val=@tcx}, 0x1c)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x14)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000002680)=[{&(0x7f0000000200)="2e171679aa5382ea7709fa73ce4c710499e65f0b2bf897357a880d0d31be3ca4679d0195cd32c8f10d39a636ee15bbd9733ff5b3922cc98e7c445533d5bef803a4e61639ac7b61478eae0e7222d30bcd6d22d880eb5ce73857a22395d9bfce22a342d5b715e29f78135b35c7730838fdbb573425cb", 0x75}, {&(0x7f00000003c0)="297cc89c07456a3041b8dce7feb88eaa29dbbcf73007cbba5da97ecde096de0f5cc1ccfdda4b733398b29579d3a63249c5104f890c111fd663e192a85b10d1689761ae64c2f148de968dc7638e6fc8018b661535ebb80947e2b4e81ce66cabcb118a01a0b78a10611c9351507b334a804fac550f8db723b4802f3fd71dd787a4f2e6ae24957e3c2eae24870ffae78c160b9ba8e703090fb4ab2d5a5501392ed691f229f2f15ac6fb08e3d30d11b37964d39ef63b5f48be6923393a4b5d95bdc6a9d43dc2e54e295f54c715b2595b96a61f83e2da8b058b301812b923e689", 0xde}, {&(0x7f0000000500)="d6891d0e0da61247f8ebac975fded2a960698945b57575f7b083c3b3016f9c8a8cb700f458305d2e7341e408adebea9d3ee5d9f0acdcb3e2ef924dd0c04a69281f557398e674f44f8079fe2b0301", 0x4e}, {&(0x7f0000000580)="9d14665f41c35b5178469cd2f0de653239e8d64f1859719e34e21b7565d5b502dbeac910860b38f34f9a519fbd301fa436be54c52a7515d3c9a63d787930f5dd666c731196d0ed274aa03b9bbe579f2c4d5a5b80dd4650a3ddb3f09614969e48ee3f6deb0bdce7802733504eba37ba74176748d8424bc15befdf8a8dd5470837dcb7d28023abc1e4cd11bb5c91f380b87ce18fac6e4462df15ae34716699c0af8f6d56caffddee65", 0xa8}], 0x4)
close(r4)
timerfd_create(0x2, 0x0)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x1000000, 0xff})
socket$nl_generic(0x10, 0x3, 0x10)
openat$kvm(0x0, &(0x7f0000000040), 0xe0000, 0x0)
eventfd(0x5f0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)

14m51.088549406s ago: executing program 3 (id=1536):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x58c, 0x24c, 0x184, 0x24c, 0x314, 0x314, 0x4c4, 0x4c4, 0x4c4, 0x4c4, 0x4c4, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x160, 0x184, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0x0, 0xffffff00], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x24, 'HL\x00', 0x0, {0x0, 0x7}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {0xff}, 0x0, 0x0, 0x5}, 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa4, 0xc8, 0x48000000}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0x9}}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5e8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
sendmsg$FOU_CMD_ADD(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="080028bd7000ffdbdf2501000002080006000a01010120000700fe8000000000000000000000000000bb0800060010000000"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x8000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
openat$rdma_cm(0xffffff9c, &(0x7f0000000640), 0x2, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r8, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r8, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x4a}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x400}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}]}, 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x8c0)
sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x408}}, 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040)
ioctl$sock_proto_private(r0, 0x89e6, &(0x7f0000000140)="2d8f7d68c856b4c37f0613bf5826e10432daac5cc463d56ef93e47c2db960314fb2b92a7ee43bade5a001714b607a3f986cc6cc4cde82f9ffc978177742570d3621ac7c4127e41c19d0f5948053784e282da4f8db72176e57bb0c7f785cfe86ad4ad53eeca81aa31125b72225f63ee2f4c597e9d34438fee159f11e289b2efc1828788357dba3299230ff11221d8c394d91f4ab7b649dc0d47397aa2e559dbc28b674772eccb0d96cc299fa16902257b687ffad309bf3b")

14m34.89652798s ago: executing program 32 (id=1536):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x58c, 0x24c, 0x184, 0x24c, 0x314, 0x314, 0x4c4, 0x4c4, 0x4c4, 0x4c4, 0x4c4, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x160, 0x184, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0x0, 0xffffff00], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x24, 'HL\x00', 0x0, {0x0, 0x7}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {0xff}, 0x0, 0x0, 0x5}, 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa4, 0xc8, 0x48000000}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0x9}}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5e8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
sendmsg$FOU_CMD_ADD(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="080028bd7000ffdbdf2501000002080006000a01010120000700fe8000000000000000000000000000bb0800060010000000"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x8000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
openat$rdma_cm(0xffffff9c, &(0x7f0000000640), 0x2, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r8, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r8, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x4a}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x400}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}]}, 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x8c0)
sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x408}}, 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040)
ioctl$sock_proto_private(r0, 0x89e6, &(0x7f0000000140)="2d8f7d68c856b4c37f0613bf5826e10432daac5cc463d56ef93e47c2db960314fb2b92a7ee43bade5a001714b607a3f986cc6cc4cde82f9ffc978177742570d3621ac7c4127e41c19d0f5948053784e282da4f8db72176e57bb0c7f785cfe86ad4ad53eeca81aa31125b72225f63ee2f4c597e9d34438fee159f11e289b2efc1828788357dba3299230ff11221d8c394d91f4ab7b649dc0d47397aa2e559dbc28b674772eccb0d96cc299fa16902257b687ffad309bf3b")

10.356964133s ago: executing program 2 (id=4211):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0)
syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x4c0142, 0x161)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
keyctl$clear(0x11, 0xfffffffffffffffd)
listen(0xffffffffffffffff, 0xa)
add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r1, r1, 0x0, 0x200000)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000002000000000000000000"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc}, 0x94)
r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0x20f0f026, 0x1})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)="a0", 0x0, 0x3}, 0x4c)
sendfile(r2, r2, 0x0, 0x1002000ff)

7.797589908s ago: executing program 2 (id=4217):
socket$inet6_sctp(0xa, 0x6, 0x84)
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0x40086806, 0x21)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x4000010, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
openat$adsp1(0xffffffffffffff9c, 0x0, 0xc002, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$sndctrl(&(0x7f0000000440), 0x83e, 0x430800)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x3, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)
mkdir(&(0x7f0000000400)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/events/xhci-hcd/xhci_portsc_writel/format\x00', 0x0, 0x0)
read(r5, &(0x7f0000000500)=""/1024, 0x400)

6.904197359s ago: executing program 2 (id=4223):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth1_to_hsr\x00'})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0xc09, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1d040, 0x19492}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0xffffe2ab}]]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240008c1}, 0x4000090) (async)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0xc09, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1d040, 0x19492}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0xffffe2ab}]]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240008c1}, 0x4000090)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000)
unlink(&(0x7f0000000180)='./file0\x00') (async)
unlink(&(0x7f0000000180)='./file0\x00')
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000800)="240000001e005f0214f90408faac4700001e0000010000000000080008000dc00e0000ff", 0x24)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)
ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f00000004c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x1, 'pim6reg0\x00'}) (async)
ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f00000004c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x1, 'pim6reg0\x00'})
syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_cmd_rej_unk={{0x1, 0x1, 0x2}}]}}, 0xf)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0xfffffffe, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x0, 0x1}, 0x28)
ioctl$FIOCLEX(r4, 0x5451) (async)
ioctl$FIOCLEX(r4, 0x5451)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000400000001f8000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000000100"/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94)

6.597257938s ago: executing program 2 (id=4226):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0xe4, r1, 0x4, 0x0, 0x0, 0x264, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)

6.471165681s ago: executing program 2 (id=4227):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000104010100000000000000001ce2efb60a00000406000640"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010)
socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$packet(0x11, 0x2, 0x300)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000280)=ANY=[@ANYRES64=r3, @ANYRES8], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"})
writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0)
syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
close_range(r9, 0xffffffffffffffff, 0x0)

5.715972983s ago: executing program 1 (id=4231):
unshare(0x20000000)
syz_clone(0xa5e07ee2c68bd571, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x4200, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x20048840)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="98020000400007012bbd7000fedbdf25037c00000c00c28008006300ac1e0001780201"], 0x298}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000000440)=@in6={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf85e}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="d977bd07f601b38f64b2ca018257adc6e170669c9727d3f6b75429aa64089380f435286b944e3fefa172cd46958ca9aecf196c80630f89d6d52eefe19fed3577cc7b05998ee5d7f823621d72b321f2", 0x4f}, {&(0x7f0000001b40)="a0e053bfcc9568e2974be0860983f1a339737a377a5096e9b12bb7e0f5097f3c79995cf276f770579af4190914e58f1afbfef48535d9708f6ca7a1069af9bbbca37e382075aafc7f5ce1689be09c58581751d21bb5396ae03b704005a519f57d92f3653b4ded4eae7e01d33fc4b99c5b5bb60cbf9c0ecfde65f553d8b9150263be104e62136cd373b761e63bcaa27028b0fff53d8f0cd0e471f9e3d595996fb06b870e2688806e5a4e7ff9407fef81afb9a613b4def08a83135a1f55c51f1fd8a6b9a202edc9248969192b58d70ff8e4fa86777e7c25c890f33e5629a24bd7cffcfba73b0d249a806e1789d4e727c8ba60a81f5c3867", 0xf6}], 0x3, &(0x7f0000001c80)=[{0x24, 0x118, 0x1, "29112589db8190debd44daab250f2472eeb7a3325176b3"}, {0x78, 0x9272c93abfdf3f9b, 0x7, "2fed7244015658dcc9802cda6b9d17bae1394e7707bc033b731bff3ffa85d7125be4d9ea130c7ed700483bc3abc1cdda9896958507073d2912c4b1dff763c23b109eb54c0547358757a56bcfca7bdeed97295e216faeae775a54d7b1478e58d6aca2c18334487276487a"}, {0xe8, 0x10d, 0x78, "228fcaf09a9c207acbc38a7003ef99aec71b13b7d3cde6ef15dcfb1ec1a0425fe170c7846ad2177e222abfe179a498f107b8e1aa3763feaf5441968336644a3e0a1620281fc8c9171044a2fb898d6d8b2e6845175c4d9766cc2ccda61fd5f96600ad7bccb3f31f7759a4349754b2c7220d5bbaeb2aad9d80f80ecab875d853dc04e88c83254a11c2a74b45e56ef85bfbdabba3bbb575669b3e7ea91f8fe51247ece58578504547ec012643b70f7d67e85bf170eae77a449313bde953073c0886bfa0c9bfb832638b158da62dfe771c53e7c43296b554186bddf9b5"}], 0x184}, 0x80)
sendto$inet6(r2, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe)
shutdown(r2, 0x1)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4)
recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'})
sendmsg$ETHTOOL_MSG_WOL_SET(r0, 0x0, 0x44800)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000006a00040029bd7000fcdbdf25020000008e0000000004000900c7b88b40e3f1ac4683dd0c851250f0dbe979114236567b8e6332f17332c079cc44bd706648f2b3714ce678c3dbe42b09eecdc02cad505fd9545129e86c6f1f443220348020c52ecd8ae2c7cdb158098e45e071f7ac9b220ffeb6540357a91cab2446e0c2994879c90d4dd3aecb6dff676f03fedf870cb91e74f2b54d147a24785f412d6b4d62acd90b025456"], 0x1c}, 0x1, 0x0, 0x0, 0x60004000}, 0x40094)
syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="0408"], 0x7)
io_setup(0x21, &(0x7f0000000080)=<r4=>0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
io_submit(r4, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x826a131d7f28ee36}])
mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0xfffffffb)
r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r6, 0x0)

4.641309203s ago: executing program 2 (id=4232):
r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000001d14ff0f28bd7000fedbdf2508", @ANYBLOB="3ed467aaaf13ca1eb11db9529e71259c8914b5f1cc57de1fd186134e89b8ea2ace4d59a0df468f5c567e1698034faef43cb331c3805ea7d572b5c6da91129ce9eea10d2856f161f5f62a5b0c94260573218907ba5a09c33b51cbd6f97c58", @ANYRES8=r2, @ANYRESDEC=r1, @ANYRES8=r4], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x94)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)

4.640376053s ago: executing program 0 (id=4234):
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1)
r3 = fanotify_init(0x200, 0x0)
fanotify_mark(r3, 0x1, 0x12, r2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000080)={0xf0f007, 0x3})
pread64(r5, &(0x7f00000001c0)=""/104, 0x68, 0x80000001)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r4)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x17f41f2157d8eae}, 0x20000000)
r7 = fsopen(&(0x7f0000000000)='pstore\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x8, 0x0, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f00000005c0)="be56c5b448a5", 0x6)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r9=>0x0})
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x94)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r10}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)
splice(r0, 0x0, r2, 0x0, 0xf8, 0x5)

4.469388168s ago: executing program 0 (id=4235):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
write(r0, &(0x7f0000000440)="000008800000b4abd804b2800b00000000000000000000000000000000000000577b", 0x22)

4.37788352s ago: executing program 0 (id=4236):
r0 = socket$nl_route(0x10, 0x3, 0x0)
unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0x64d0, &(0x7f0000000300)={0x0, 0x74e2, 0x8, 0x2, 0x1b, 0x0, r1}, &(0x7f0000000200), &(0x7f00000000c0), 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x1, @remote, @dev={0xfe, 0x80, '\x00', 0x35}, 0x10, 0x8000, 0x3, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x1}})
r4 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
unshare(0x26020480)
r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd)
write$binfmt_aout(r6, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0, @ANYRES64, @ANYRES32=0x0, @ANYRES8, @ANYRESDEC=r0], 0xff2e)
ioctl$TCFLSH(r8, 0x540b, 0x1)
write$cgroup_int(r7, &(0x7f0000000000), 0x12)

4.377296188s ago: executing program 1 (id=4237):
syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, 0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0)
pipe2(&(0x7f0000000000)={<r2=>0x0, <r3=>0x0}, 0x0)
write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[], 0x20)
splice(r1, &(0x7f0000000040), r3, 0x0, 0x807, 0x0)
read$FUSE(r2, &(0x7f0000000940)={0x2020}, 0x2020)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

3.905848016s ago: executing program 1 (id=4238):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48)
r0 = io_uring_setup(0x1d4c, &(0x7f0000000140)={0x0, 0x64b13e, 0x80, 0x6, 0x58})
openat$cachefiles(0xffffff9c, &(0x7f0000000240), 0x141240, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x14, &(0x7f0000000640)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = getpgid(0x0)
r4 = syz_pidfd_open(r3, 0x0)
ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000040))
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r2}, 0xc)
r5 = syz_open_dev$media(&(0x7f0000000040), 0x9, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x1, 0xfffffffe, 0x3, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x102, {0x6, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x1}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890)
r12 = socket$kcm(0x11, 0x3, 0x0)
r13 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
setsockopt$sock_attach_bpf(r12, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xa888, r14, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030212590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, 0x0)

3.194975584s ago: executing program 0 (id=4239):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_REG(r0, 0x0, 0x20008088)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x6, 0x2)
socket$nl_rdma(0x10, 0x3, 0x14)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa000905"], 0x0)
openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40440, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
init_module(&(0x7f0000000c40)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x89, 0x8, 0x9, 0x9, 0x3, 0x3e, 0xf3a, 0x3b6, 0x40, 0xef, 0xe8b, 0x3, 0x38, 0x2, 0x400e, 0x5, 0x6}, [{0x1, 0x7, 0x1, 0x80000001, 0x0, 0xd9d0, 0x8, 0x9}, {0x70000000, 0xed0, 0x8000000000000000, 0xfffffffffffffff9, 0x0, 0x6, 0x5, 0x9}], "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", ['\x00', '\x00', '\x00', '\x00']}, 0x14b0, &(0x7f0000002100)='],^}%#*-\x00')
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c000000200025a726bd7000bbdbdf250a001404ff000001020001e3130002"], 0x4c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000)
r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @void}, 0x10)
close(r4)
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x101000)
socket$alg(0x26, 0x5, 0x0)
syz_usb_disconnect(r1)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000100)=[0x0], 0x1, 0x0, 0x0, <r5=>0xffffffffffffffff})
sendmsg$TIPC_NL_NET_SET(r5, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)={0xe4, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "6cd116b3c55f3f6b2e65d626d2050e529a7f7f57797051257d62ea0d"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xa}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x38b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000}]}]}, 0xe4}}, 0x24008894)
syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x40, 0xff, 0x7fff7ffc}]})
close_range(r6, 0xffffffffffffffff, 0x0)

3.037411241s ago: executing program 1 (id=4240):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000104010100000000000000001ce2efb60a00000406000640"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010)
socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$packet(0x11, 0x2, 0x300)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000280)=ANY=[@ANYRES64=r3, @ANYRES8], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"})
writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0)
syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
close_range(r9, 0xffffffffffffffff, 0x0)

2.12860168s ago: executing program 1 (id=4241):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x9, 0x400]}})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020ac050f022200e5818301090224000101000000090400000203010200092100050001ffff00090581", @ANYBLOB="ebed"], 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}})
syz_usb_connect$midi(0x4, 0x83, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x763, 0x2080, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x1, 0x1, 0x3b, 0x20, 0xe, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x0, 0xff, [@ms_header={0x7, 0x24, 0x1, 0x2, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x50, 0x5d}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x6, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x6, 0x2}], [{{0x9, 0x5, 0xf, 0x10, 0x8, 0x4, 0x4f, 0x6, {0x4}}}, {{0x9, 0x5, 0xa, 0x2, 0x10, 0x4, 0xa, 0x5d, {0xb, 0x25, 0x1, 0x7, "f3f682ac3f22e5"}}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x6, 0x1, 0xf7, {0x5, 0x25, 0x1, 0x1, 's'}}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x4, 0x5, 0x2, {0x6, 0x25, 0x1, 0x2, "9d72"}}}]}}}}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x201, 0x4, 0x40, 0x0, 0x20, 0x80}, 0x5, &(0x7f0000000440)={0x5, 0xf, 0x5}, 0x2000000f, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x2001}}, {0x35, &(0x7f0000000640)=@string={0xde, 0x3, "c4db3a6d4575d14370076dc79483c23bcd44e32b048918daca7398f559658952eec08858d599466c1b206b3768f050be6663286635af8fd942c6f4136ee03affaebe5dc21557ebd5703a8f541babccf4018c4ba6f86ab84a114301dfcab090ccf99fd965918b6197f8374b2ea07368bdf394fe6977fc05a498b47aec922f3822e96b646708f2fcfcb1573ff55be59f0fae969733e9d60980fa7217f41aa3a99bcdd738e1ce7c36679c0fe356d65f54a9899c8be2a292d44c8adfef4321925c62e91c76da3403012ec41fc68c9ec7680d7a8108aee07fd152edc79648"}}, {0x86, &(0x7f0000000800)=@string={0x86, 0x3, "ddf5255f24cb09c113a2a342705becb551dd58f44fb90a8c123d45bdcf20cf4e5708ca7edc07d9fb322cebb5e2a1516a635d53242ca91932cc840ffe27f8094cf0c633aae093781027178d7ec6435ee926d77f7ea9823a5af3514af28c673d03a10643ef3e3aa885150e80aee6c23f560a255f8b288ae25cc814047476b80f39f42bc780"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x81, &(0x7f0000000980)=@string={0x81, 0x3, "b6bcb41ed9faabdf270d3fc4dd4345f4869911a941556f7d91e1e1cd51253ef4c65e00d3c0cce2c9b3f6281c2e846df48f863ca323514ae62f86d8529ea7cc9eb43ffa43edc2d8bd1fb4871b91786ad55c6bfae9c98fa88837b185531d1f2f50987cc5b4bfaa22d61f86ec6bd538bd01b68b079fb44b7cab882c9dbcbd0675"}}]})
openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x107001)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000480)={0x0, {}, 0x0, {}, 0x0, 0x9, 0x50, 0x10, "6972a16387920cfad256559f58af1ac31147a8bd9b98f15a744d3c03497fc60c69384e4c90a0ed09e1b7f957fb401fa9e05136d2dd259e85fba5a108da06e82d", "7ae7cae7925fbe121718e6de64227243f96d9685d5016b32c02336b2cae3a91e", [0x0, 0x100000004]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0)
write(r4, &(0x7f0000000140)='m', 0x1)
add_key(&(0x7f0000000180)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r7=>0xffffffffffffffff})
r8 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2)
r9 = dup(r8)
read(r9, &(0x7f0000000040), 0x0)
ioctl$VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000000)={0xf0f046})
read$FUSE(r9, &(0x7f0000008180)={0x2020}, 0xfffffdfc)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000140)=[<r10=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r7, 0xc01464a6, &(0x7f00000001c0)={r10})
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
set_mempolicy(0x0, &(0x7f0000000740)=0xaf, 0x9)
sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1a23}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7a}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x22}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}]}, 0x80}}, 0x0)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000140), &(0x7f0000000780)={'enc=', 'raw', ' hash=', {'sha384-arm\x00'}}, 0x0, 0x0)

1.54762068s ago: executing program 4 (id=4243):
syz_io_uring_setup(0x74ff, &(0x7f0000000080)={0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, &(0x7f0000000180))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x4, 0x0, 0xff, 0x2, 0xaa44, 0x10}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mmap(&(0x7f000022b000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil)
mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000bc8000/0x1000)=nil)
mlock(&(0x7f000073b000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000787000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
ioctl(r1, 0x9, &(0x7f0000000440)="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")

1.327972515s ago: executing program 4 (id=4244):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r1 = syz_ublk_setup_io_uring(0xd30, &(0x7f0000000100)={0x0, 0x11aa, 0x80, 0x2, 0x313}, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000280))
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000640)={&(0x7f0000002000)={[{&(0x7f0000000340)="f2816b4da9bc64351dbd293ca3bbe9804a894729259fd6f6c97458f103cd9dd1f6123032a690d2add5e3bdb51c34e67d2da6bf30ea63865a034014dfc25b7f80d950e1d8617e8ae15e3e03094b91462997dfc6bd530d94871bcaef40691565e3bdadeab43575208bbeac1a69771233", 0x6f}]}, 0x1}, 0x1)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaae1ffffffffff85dd60fca33f0000fa0e00000000000000000000000000000000fe8000000000000000000000fcb400aab23ecab2dd74e174dc18246e44cbfc51cbcb99a8dca250200a30663286a5"], 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x11c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
syz_open_dev$dri(0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe48, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2, 0x4}, 0xfffe}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8820}, 0xc0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000880))
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x400800, &(0x7f0000000000)=ANY=[])
chdir(&(0x7f0000000100)='./file0\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.state\x00', 0x275a, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r4)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), 0xffffffffffffffff)
ioctl$SOUND_MIXER_READ_RECMASK(r3, 0x80044dfd, &(0x7f0000000680))
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x35861afe2a15ad58}, 0x48)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)

459.518518ms ago: executing program 1 (id=4245):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
sched_setscheduler(r2, 0x1, &(0x7f00000003c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002200)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f0000002300)=0xe4)
statx(0xffffffffffffff9c, &(0x7f0000002340)='./cgroup\x00', 0x2000, 0x4, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002480)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000002580)=0xe4)
sendmmsg$unix(r4, &(0x7f000000c340)=[{{&(0x7f0000000400)=@file={0x0, './cgroup\x00'}, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000680)="6237754582e82c9d3911549a13cec7842a0e381e7d8825a4474a2db9b5cc1789da9a90c18e1cfcea7a0afb4ed74d2f46b93a9ccb64e235cdff454f726825a635c64d6d69e58006ba486b6f985a9fb5d7b4539d5578d5599a81f8bec1ac84ad2db84580430705580618ec99e154d325863018f7dae4e89a42370e5ae038e3649fefdc21aeac6038190edf29d860acedd7dd0c043ec7de7be8ac8be1f7f581cce582ba3362b9b6bb19199ea37a612e00a2d84f2f8a8dcb0b68de5dc360a62fde60bc65f6903cac56ce6eca4e60879a9a36eafedb62e627fb5af1baf7963fddf057c7bc2c70"}, {&(0x7f0000002780)="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"}, {&(0x7f0000001e40)="6edaed8e78fc5faa5b5af11d31b8fb073df7f0e80c9599033420006ebf458b99ec712c4ba8fe684aab2ce6c2c2c21c4e5e719abc9f"}, {&(0x7f0000001e80)="a9ede9d8b33f65c2b9c39a68f90bb4c6f0f182c3f1a94f7de5fd3d2f5bc347a95fa445d77959a89bfb2ef41d0c28882f4796fd9992497b38eed931d6086eeb32a0ef00d9469d08364b5be73d75528a771a8c586453d0b0fcb88b352c15a8621a2c2fc445d6119513fcb98ad5bdec859ef1c21bc80acf15b77778f479a320fe4b980ecbc2517388b874953ea986eff18dc9fe9d50030a69af4b6fde7f1c"}, {&(0x7f0000001f40)="7d0d272db55dcecf840e7d8388bda29616771de57d9990ab1a221d0e7a930129bea6a9813f2512369d037f8d61b3473c05e145e4342212aa499637155d3c94f38b0d8bed54a86a381a8e674f913a61fde6664f9268fec2e751833f4688d19494a719b33d41e821cf83efff94d91c598b69c5334451c426245cb9de5d7d375d9b644f229e3cddb3246148df04fcaaf269768d3fbf62b773d4073d1b125a4352c75ad7ba7247237b2869717960ae2871b20399a733debe156e9bc75b6b3aa61b0c0e49c68b2b61d6d72e28b29201f58cd3cb9514a0a92b35c89e0368b801"}, {&(0x7f0000002040)="7db533294487e3c09276f5aaa16f92e02221102558dfe2dba438c5fa3d9bc86c41133f12441d8b44dfc98aaaccdfa5c369bcf619920d7505b790aa0f0344cc1d08adf84dc51afaffff8ff9c0ebdb84fdb2042125846043a84343a520d416c3ad30c30db81030a077a9d76855292406caecc6a5dae9f84951cd268082ee5ef315398e7b1db6131298bd08acdcdcaffc0081"}, {&(0x7f0000002100)="3f30901dab381c31b7236dd60285dde7e5cff995ff4a48575adde1b8f6566c535737e4f11b5131ec9a96ae268a76fbfe05ee5060453389c411c28efdf340997c346471d99a042e19ad96c61ba0ec725b734381cf3135305476ef6c0bfe910db7347adebbd46b570d56489feb77116c8ef951c730f6932174e08a87d8287b4ec673c0bfd29ac44dfd198c"}], 0x0, &(0x7f0000002680)=[@rights={{0x0, 0x1, 0x1, [r1, r4, r3, r3, r3, r3]}}, @cred={{0x0, 0x1, 0x2, {r2, r5, r6}}}, @cred={{0x0, 0x1, 0x2, {r2, r7}}}, @rights={{0x0, 0x1, 0x1, [r0]}}, @cred={{0x0, 0x1, 0x2, {r2}}}, @rights={{0x0, 0x1, 0x1, [r0, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [r4, 0xffffffffffffffff, r3]}}, @rights={{0x0, 0x1, 0x1, [r0, r3, r1, r4, r1, r3, r4]}}, @cred={{0x0, 0x1, 0x2, {r2}}}], 0x0, 0x20008041}}], 0x40000000000007f, 0x10)
sched_setaffinity(r2, 0x8, &(0x7f0000000e00)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140), 0x0, 0xfffffffffffffffe)
r9 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
r10 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e2d7ae6a21d056c2c51a416a76b1a03dc55ea62d43c809e0ed6e56162fdab317afd5c34d614367e4425bb9a97e38b8beb840200549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dca30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdbe9cae4147c84583ec907000000ba5ae65e31f00e641832d29ed658b91f349b80e830fa29fc891b8b0d2de59d006ce210a0351b6bbd06c77c9aa67b5d7287fc1bfa1d0bf035ccdd4b20d7f95b5c77afde046b146ce8b395126f00000000000000000000aa7c93213bc6ef4da9e28ef7", 0x135, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r8, r9, r10}, 0x0, 0x0, 0x0)
add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135", 0x1b, 0xfffffffffffffffe)
syz_open_dev$video4linux(0x0, 0x3, 0x42583)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r11}, 0xc)
r12 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r12, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_SPEED(r12, 0xc0045002, &(0x7f00000001c0))
ioctl$SNDCTL_DSP_CHANNELS(r12, 0xc0045006, &(0x7f0000000040)=0xc)
ioctl$SNDCTL_DSP_SETFMT(r12, 0xc0045005, &(0x7f0000000640)=0x10)

186.123091ms ago: executing program 4 (id=4246):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x4, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
open_tree(r0, &(0x7f0000006180)='./mnt\x00', 0x9002)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={<r1=>0x0})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000940)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xcc}]}, 0x2c}}, 0x40)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000180)=r1)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', r7}, 0x94)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r9=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r8, r9, 0x25, 0x0, @val=@perf_event}, 0x18)
r10 = socket$inet_icmp(0x2, 0x2, 0x1)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b0400000000000000000200fffeeb4a2c0004802800018008000100666962001c0002800800034000000006080002400000000208000140000000150900010073797a30000000000900020073797a320000000014000500"], 0x80}}, 0x80)
bind$inet(r10, &(0x7f0000000200)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10)
syz_emit_ethernet(0x11e05, &(0x7f0000001c80)=ANY=[], 0x0)
r12 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
lseek(r12, 0x5, 0x1)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r12, 0x6628)
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b703000000000085000000b9000000bf090000000000085509010b000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095000000000070003eea2a1a437f9830ee9330408dd7c6dfa489459865299e7e00fddfd82155903381e48b35475c06"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3e, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r13, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000080)=0x4)

126.882833ms ago: executing program 0 (id=4247):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc)
r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$CDROM_GET_CAPABILITY(r2, 0x5323)

126.535967ms ago: executing program 4 (id=4248):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="541f0000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r0], 0x54}}, 0x0)

126.279225ms ago: executing program 0 (id=4249):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x0})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0xffffffffffffff52, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0xfffffffffffffe24, 0x30, 0x9, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc}, {0xc}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x50}}, 0x20000801)
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
getpriority(0x0, r3)
sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x118f}, 0x0)
r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
keyctl$read(0xb, 0x0, &(0x7f0000001300)=""/4096, 0x1000)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r4)
r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f00000012c0)=0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x6, 0x4, 0xfffffffffffffffd, 0xb, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x56d92c88, 0x0, 0xfffffffffffffffc, 0x10000}, 0x0, 0x0)
ioctl$FE_SET_FRONTEND(r6, 0x40246f4c, &(0x7f00000001c0)={0x30a32c0, 0x1, @ofdm={0x6, 0x1b, 0x12, 0xa, 0x8, 0x8}})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil)
mremap(&(0x7f000081e000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil)
io_setup(0x2007, &(0x7f0000000980))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x8000, 0x1, 0x4})
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc04c5609, &(0x7f0000000340)=@multiplanar_fd={0x4, 0x3, 0x4, 0x4, 0x4, {0x0, 0xea60}, {0x4, 0x1, 0x25, 0x0, 0x4, 0x33, "1aecab28"}, 0x7, 0x4, {0x0}, 0x4})

125.735122ms ago: executing program 4 (id=4250):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xfffffffffffffff9, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x80, 0x7}]}]}, 0xf8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0)
write(r2, &(0x7f0000000800)='0\n', 0x2)
write(r2, &(0x7f0000000800)='1\n', 0x2)
socket$nl_rdma(0x10, 0x3, 0x14)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="00000000fddbdf25020000000000000006000700040000000c00088005000400010000000800060094a834ffc52df926fdf200000008000500", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0)
r4 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x6, 0x400200)
ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000140))
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_RX_RING(r5, 0x10e, 0x6, &(0x7f0000000080)={0x8, 0xf95, 0x3, 0x1}, 0x10)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1'])
chdir(&(0x7f0000000300)='./file0\x00')
setxattr$incfs_metadata(&(0x7f0000000040)='.\x00', &(0x7f0000000000), 0x0, 0x0, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_rdma(0x10, 0x3, 0x14)
setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00'})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002a40), r7)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)

0s ago: executing program 4 (id=4251):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000020000000000030000000900030073797a30000000000900010073797a300000000014000480080002406375fd82080001"], 0xb0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r1, 0x560e, &(0x7f0000000000))

kernel console output (not intermixed with test programs):

 usb 40-1: SetAddress Request (80) to port 0
[ 1417.375829][ T6625] usb 40-1: new SuperSpeed USB device number 80 using vhci_hcd
[ 1417.606884][T22127] vhci_hcd: connection reset by peer
[ 1417.609908][T12755] vhci_hcd vhci_hcd.1: stop threads
[ 1417.611763][T12755] vhci_hcd vhci_hcd.1: release socket
[ 1417.613644][T12755] vhci_hcd vhci_hcd.1: disconnect device
[ 1417.865139][T22138] FAULT_INJECTION: forcing a failure.
[ 1417.865139][T22138] name failslab, interval 1, probability 0, space 9, times 0
[ 1417.872903][T22138] CPU: 0 UID: 0 PID: 22138 Comm: syz.2.3902 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1417.872925][T22138] Tainted: [L]=SOFTLOCKUP
[ 1417.872930][T22138] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1417.872937][T22138] Call Trace:
[ 1417.872942][T22138]  <TASK>
[ 1417.872947][T22138]  dump_stack_lvl+0x100/0x190
[ 1417.872967][T22138]  should_fail_ex.cold+0x5/0xa
[ 1417.872981][T22138]  should_failslab+0xc2/0x120
[ 1417.873017][T22138]  __kvmalloc_node_noprof+0x116/0x970
[ 1417.873040][T22138]  ? __pfx_down_write+0x10/0x10
[ 1417.873057][T22138]  ? cache_write_procfs+0xdd/0x170
[ 1417.873084][T22138]  ? __pfx_cache_write_procfs+0x10/0x10
[ 1417.873103][T22138]  cache_write_procfs+0xdd/0x170
[ 1417.873121][T22138]  ? __pfx_cache_write_procfs+0x10/0x10
[ 1417.873139][T22138]  proc_reg_write+0x240/0x330
[ 1417.873159][T22138]  vfs_write+0x2aa/0x1050
[ 1417.873177][T22138]  ? __pfx_proc_reg_write+0x10/0x10
[ 1417.873189][T22138]  ? __pfx_vfs_write+0x10/0x10
[ 1417.873199][T22138]  ? find_held_lock+0x2b/0x80
[ 1417.873215][T22138]  ? __fget_files+0x215/0x3d0
[ 1417.873229][T22138]  ? __fget_files+0x21f/0x3d0
[ 1417.873244][T22138]  ksys_write+0x12a/0x250
[ 1417.873255][T22138]  ? __pfx_ksys_write+0x10/0x10
[ 1417.873265][T22138]  ? ksys_write+0x1ac/0x250
[ 1417.873275][T22138]  ? __pfx_ksys_write+0x10/0x10
[ 1417.873289][T22138]  __do_fast_syscall_32+0xe7/0x970
[ 1417.873305][T22138]  ? lockdep_hardirqs_on+0x78/0x100
[ 1417.873322][T22138]  do_fast_syscall_32+0x32/0x70
[ 1417.873338][T22138]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1417.873354][T22138] RIP: 0023:0xf7f74fec
[ 1417.873370][T22138] Code: Unable to access opcode bytes at 0xf7f74fc2.
[ 1417.873375][T22138] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[ 1417.873387][T22138] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500
[ 1417.873394][T22138] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000000
[ 1417.873401][T22138] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1417.873407][T22138] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1417.873414][T22138] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1417.873428][T22138]  </TASK>
[ 1417.981098][ T5826] kernel write not supported for file net/rpc/auth.unix.gid/channel (pid: 5826 comm: kworker/1:3)
[ 1418.117570][ T5826] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0
[ 1418.121794][ T5826] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0
[ 1418.125743][ T5826] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0
[ 1418.128966][ T5826] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0
[ 1418.132330][ T5826] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0
[ 1418.135606][ T5826] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0
[ 1418.138636][ T5826] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0
[ 1418.142150][ T5826] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0
[ 1418.145172][ T5826] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0
[ 1418.156974][ T5826] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0
[ 1418.227119][ T5826] hid-generic 000A:FFFFFF1D:0002.0002: hidraw1: <UNKNOWN> HID v0.04 Device [syz0] on syz1
[ 1418.375057][T22144] fido_id[22144]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1418.443165][T18438] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[ 1418.970861][   T42] audit: type=1326 audit(1785953203.820:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22149 comm="syz.2.3907" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000
[ 1418.979784][   T42] audit: type=1326 audit(1785953203.820:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22149 comm="syz.2.3907" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000
[ 1418.997912][T18438] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1419.001534][T18438] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1419.004981][T18438] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1419.008498][T18438] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1419.012454][T18438] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1419.016005][T18438] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1419.020184][T18438] usb 5-1: config 168 interface 0 has no altsetting 0
[ 1419.024256][T18438] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[ 1419.027113][T18438] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1419.031555][T18438] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1419.035187][T18438] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1419.038805][T18438] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1419.042517][T18438] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1419.046033][T18438] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1419.050167][T18438] usb 5-1: config 168 interface 0 has no altsetting 0
[ 1419.053361][T18438] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[ 1419.055886][T18438] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1419.059387][T18438] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1419.063472][T18438] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1419.067005][T18438] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1419.071065][T18438] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1419.074601][T18438] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1419.078757][T18438] usb 5-1: config 168 interface 0 has no altsetting 0
[ 1419.083251][T18438] usb 5-1: string descriptor 0 read error: -22
[ 1419.085327][T18438] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1419.088275][T18438] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1419.098554][T18438] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1419.420493][ T5826] usb 5-1: USB disconnect, device number 97
[ 1419.492811][T22178] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3910'.
[ 1419.852763][T22182] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3911'.
[ 1419.858446][T22182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3911'.
[ 1420.196180][T22189] Invalid ELF header type: 3 != 1
[ 1420.353651][T22191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3914'.
[ 1420.626354][T22195] FAULT_INJECTION: forcing a failure.
[ 1420.626354][T22195] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1420.629723][T22196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3916'.
[ 1420.630319][T22195] CPU: 1 UID: 0 PID: 22195 Comm: syz.0.3915 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1420.630338][T22195] Tainted: [L]=SOFTLOCKUP
[ 1420.630342][T22195] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1420.630348][T22195] Call Trace:
[ 1420.630354][T22195]  <TASK>
[ 1420.630358][T22195]  dump_stack_lvl+0x100/0x190
[ 1420.630376][T22195]  should_fail_ex.cold+0x5/0xa
[ 1420.630391][T22195]  _copy_from_user+0x2e/0xd0
[ 1420.630410][T22195]  __sys_bpf+0x2f5/0x4e80
[ 1420.630440][T22195]  ? __pfx___sys_bpf+0x10/0x10
[ 1420.630452][T22195]  ? find_held_lock+0x2b/0x80
[ 1420.630467][T22195]  ? get_pid_task+0xfc/0x250
[ 1420.630488][T22195]  ? get_pid_task+0xfc/0x250
[ 1420.630506][T22195]  ? proc_fail_nth_write+0x9f/0x220
[ 1420.630522][T22195]  ? find_held_lock+0x2b/0x80
[ 1420.630539][T22195]  ? rcu_read_lock_any_held+0x6a/0xa0
[ 1420.630554][T22195]  ? find_held_lock+0x2b/0x80
[ 1420.630568][T22195]  ? ksys_write+0x190/0x250
[ 1420.630579][T22195]  ? ksys_write+0x190/0x250
[ 1420.630599][T22195]  ? fput+0x79/0x100
[ 1420.630627][T22195]  ? __ia32_sys_bpf+0xcc/0x170
[ 1420.630639][T22195]  __ia32_sys_bpf+0xcc/0x170
[ 1420.630652][T22195]  ? __do_fast_syscall_32+0x98/0x970
[ 1420.630670][T22195]  __do_fast_syscall_32+0xe7/0x970
[ 1420.630685][T22195]  ? lockdep_hardirqs_on+0x78/0x100
[ 1420.630702][T22195]  do_fast_syscall_32+0x32/0x70
[ 1420.630718][T22195]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1420.630733][T22195] RIP: 0023:0xf703efec
[ 1420.630747][T22195] Code: Unable to access opcode bytes at 0xf703efc2.
[ 1420.630752][T22195] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[ 1420.630764][T22195] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000080
[ 1420.630771][T22195] RDX: 000000000000002c RSI: 0000000000000000 RDI: 0000000000000000
[ 1420.630778][T22195] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1420.630784][T22195] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1420.630791][T22195] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1420.630804][T22195]  </TASK>
[ 1420.651193][ T7544] usb 6-1: new high-speed USB device number 99 using dummy_hcd
[ 1420.719355][T22197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3916'.
[ 1420.853953][T22202] FAULT_INJECTION: forcing a failure.
[ 1420.853953][T22202] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1420.858977][T22202] CPU: 2 UID: 0 PID: 22202 Comm: syz.4.3917 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1420.858997][T22202] Tainted: [L]=SOFTLOCKUP
[ 1420.859001][T22202] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1420.859008][T22202] Call Trace:
[ 1420.859013][T22202]  <TASK>
[ 1420.859019][T22202]  dump_stack_lvl+0x100/0x190
[ 1420.859037][T22202]  should_fail_ex.cold+0x5/0xa
[ 1420.859051][T22202]  _copy_from_user+0x2e/0xd0
[ 1420.859070][T22202]  get_compat_msghdr+0xb3/0x480
[ 1420.859083][T22202]  ? __pfx_get_compat_msghdr+0x10/0x10
[ 1420.859095][T22202]  ? __lock_acquire+0x49f/0x1a40
[ 1420.859116][T22202]  ___sys_sendmsg+0x1b6/0x1e0
[ 1420.859131][T22202]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1420.859150][T22202]  ? find_held_lock+0x2b/0x80
[ 1420.859173][T22202]  __sys_sendmsg+0x160/0x210
[ 1420.859190][T22202]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1420.859214][T22202]  __do_fast_syscall_32+0xe7/0x970
[ 1420.859234][T22202]  do_fast_syscall_32+0x32/0x70
[ 1420.859250][T22202]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1420.859265][T22202] RIP: 0023:0xf702efec
[ 1420.859280][T22202] Code: Unable to access opcode bytes at 0xf702efc2.
[ 1420.859286][T22202] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[ 1420.859297][T22202] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800027c0
[ 1420.859304][T22202] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1420.859310][T22202] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1420.859317][T22202] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1420.859324][T22202] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1420.859337][T22202]  </TASK>
[ 1420.861418][ T7544] usb 6-1: device descriptor read/64, error -71
[ 1421.176938][ T7544] usb 6-1: new high-speed USB device number 100 using dummy_hcd
[ 1421.313223][ T7544] usb 6-1: device descriptor read/64, error -71
[ 1421.569972][ T7544] usb usb6-port1: attempt power cycle
[ 1421.580265][T22216] FAULT_INJECTION: forcing a failure.
[ 1421.580265][T22216] name failslab, interval 1, probability 0, space 9, times 0
[ 1421.585737][T22216] CPU: 2 UID: 0 PID: 22216 Comm: syz.4.3919 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1421.585757][T22216] Tainted: [L]=SOFTLOCKUP
[ 1421.585762][T22216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1421.585769][T22216] Call Trace:
[ 1421.585774][T22216]  <TASK>
[ 1421.585779][T22216]  dump_stack_lvl+0x100/0x190
[ 1421.585797][T22216]  should_fail_ex.cold+0x5/0xa
[ 1421.585811][T22216]  should_failslab+0xc2/0x120
[ 1421.585828][T22216]  __kmalloc_cache_noprof+0x91/0x6c0
[ 1421.585841][T22216]  ? alloc_pipe_info+0x10e/0x590
[ 1421.585857][T22216]  alloc_pipe_info+0x10e/0x590
[ 1421.585870][T22216]  splice_direct_to_actor+0x78f/0xa30
[ 1421.585887][T22216]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1421.585900][T22216]  ? __pfx_aa_file_perm+0x10/0x10
[ 1421.585919][T22216]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1421.585936][T22216]  do_splice_direct+0x174/0x240
[ 1421.585949][T22216]  ? __pfx_do_splice_direct+0x10/0x10
[ 1421.585961][T22216]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 1421.585974][T22216]  ? bpf_lsm_file_permission+0x9/0x10
[ 1421.586001][T22216]  ? security_file_permission+0x76/0x210
[ 1421.586024][T22216]  ? rw_verify_area+0xce/0x6d0
[ 1421.586049][T22216]  do_sendfile+0xadc/0xe20
[ 1421.586078][T22216]  ? __pfx_do_sendfile+0x10/0x10
[ 1421.586112][T22216]  __ia32_compat_sys_sendfile+0x1e5/0x220
[ 1421.586132][T22216]  ? __pfx___ia32_compat_sys_sendfile+0x10/0x10
[ 1421.586150][T22216]  __do_fast_syscall_32+0xe7/0x970
[ 1421.586168][T22216]  do_fast_syscall_32+0x32/0x70
[ 1421.586185][T22216]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1421.586200][T22216] RIP: 0023:0xf702efec
[ 1421.586216][T22216] Code: Unable to access opcode bytes at 0xf702efc2.
[ 1421.586222][T22216] RSP: 002b:00000000f53fc50c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb
[ 1421.586233][T22216] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000007
[ 1421.586240][T22216] RDX: 0000000000000000 RSI: 0000000002000009 RDI: 0000000000000000
[ 1421.586247][T22216] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1421.586253][T22216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1421.586260][T22216] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1421.586273][T22216]  </TASK>
[ 1421.702051][T22225] IPv6: sit1: Disabled Multicast RS
[ 1421.705440][T22225] sit1: entered allmulticast mode
[ 1422.275863][T22230] FAULT_INJECTION: forcing a failure.
[ 1422.275863][T22230] name failslab, interval 1, probability 0, space 9, times 0
[ 1422.280239][T22230] CPU: 2 UID: 0 PID: 22230 Comm: syz.4.3922 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1422.280259][T22230] Tainted: [L]=SOFTLOCKUP
[ 1422.280263][T22230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1422.280270][T22230] Call Trace:
[ 1422.280275][T22230]  <TASK>
[ 1422.280281][T22230]  dump_stack_lvl+0x100/0x190
[ 1422.280300][T22230]  should_fail_ex.cold+0x5/0xa
[ 1422.280314][T22230]  should_failslab+0xc2/0x120
[ 1422.280332][T22230]  __kmalloc_noprof+0xfc/0x820
[ 1422.280347][T22230]  ? kernfs_fop_write_iter+0x26a/0x5f0
[ 1422.280365][T22230]  kernfs_fop_write_iter+0x26a/0x5f0
[ 1422.280381][T22230]  vfs_write+0x6ac/0x1050
[ 1422.280393][T22230]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 1422.280409][T22230]  ? __pfx_vfs_write+0x10/0x10
[ 1422.280419][T22230]  ? find_held_lock+0x2b/0x80
[ 1422.280453][T22230]  ksys_write+0x12a/0x250
[ 1422.280469][T22230]  ? __pfx_ksys_write+0x10/0x10
[ 1422.280481][T22230]  ? ksys_write+0x1ac/0x250
[ 1422.280491][T22230]  ? __pfx_ksys_write+0x10/0x10
[ 1422.280505][T22230]  __do_fast_syscall_32+0xe7/0x970
[ 1422.280521][T22230]  ? lockdep_hardirqs_on+0x78/0x100
[ 1422.280537][T22230]  do_fast_syscall_32+0x32/0x70
[ 1422.280557][T22230]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1422.280573][T22230] RIP: 0023:0xf702efec
[ 1422.280588][T22230] Code: Unable to access opcode bytes at 0xf702efc2.
[ 1422.280594][T22230] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[ 1422.280606][T22230] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800001c0
[ 1422.280613][T22230] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000
[ 1422.280619][T22230] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1422.280626][T22230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1422.280632][T22230] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1422.280646][T22230]  </TASK>
[ 1422.471342][ T6625] usb 40-1: device descriptor read/8, error -110
[ 1422.501312][ T7544] usb 6-1: new high-speed USB device number 101 using dummy_hcd
[ 1422.521956][ T7544] usb 6-1: device descriptor read/8, error -71
[ 1422.600395][T22240] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3924'.
[ 1422.722588][ T1441] ieee802154 phy0 wpan0: encryption failed: -22
[ 1422.725397][ T1441] ieee802154 phy1 wpan1: encryption failed: -22
[ 1422.761190][ T7544] usb 6-1: new high-speed USB device number 102 using dummy_hcd
[ 1422.781852][ T7544] usb 6-1: device descriptor read/8, error -71
[ 1422.865070][ T6625] usb usb40-port1: attempt power cycle
[ 1422.901760][ T7544] usb usb6-port1: unable to enumerate USB device
[ 1423.126393][T22242] jffs2: notice: (22242) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1423.224017][T22246] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3929'.
[ 1423.237346][T22248] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3928'.
[ 1423.422061][ T6625] usb usb40-port1: unable to enumerate USB device
[ 1423.453772][T22248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3928'.
[ 1423.512989][T22249] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1423.516169][T22249] overlayfs: missing 'lowerdir'
[ 1423.530863][T22253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3929'.
[ 1423.876071][T22249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3927'.
[ 1424.149357][T22257] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3931'.
[ 1424.175333][T22260] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3930'.
[ 1424.214641][T22264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3931'.
[ 1424.333232][T22266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3930'.
[ 1425.498650][T22272] CIFS: Attempting to mount //127.0.0.1/share
[ 1425.507885][T22272] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1425.510310][T22272] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1425.866732][T22275] FAULT_INJECTION: forcing a failure.
[ 1425.866732][T22275] name failslab, interval 1, probability 0, space 9, times 0
[ 1425.874655][T22275] CPU: 3 UID: 0 PID: 22275 Comm: syz.4.3935 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1425.874687][T22275] Tainted: [L]=SOFTLOCKUP
[ 1425.874694][T22275] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1425.874705][T22275] Call Trace:
[ 1425.874712][T22275]  <TASK>
[ 1425.874721][T22275]  dump_stack_lvl+0x100/0x190
[ 1425.874751][T22275]  should_fail_ex.cold+0x5/0xa
[ 1425.874772][T22275]  should_failslab+0xc2/0x120
[ 1425.874798][T22275]  __kvmalloc_node_noprof+0x116/0x970
[ 1425.874821][T22275]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1425.874844][T22275]  ? xp_create_and_assign_umem+0xb9/0xf30
[ 1425.874877][T22275]  xp_create_and_assign_umem+0xb9/0xf30
[ 1425.874902][T22275]  ? dev_get_by_index+0x180/0x380
[ 1425.874928][T22275]  ? dev_get_by_index+0x180/0x380
[ 1425.874959][T22275]  xsk_bind+0x6ce/0x16c0
[ 1425.874983][T22275]  ? __pfx_xsk_bind+0x10/0x10
[ 1425.875002][T22275]  ? apparmor_socket_bind+0x105/0x1e0
[ 1425.875026][T22275]  __sys_bind+0x1a9/0x260
[ 1425.875050][T22275]  ? __pfx___sys_bind+0x10/0x10
[ 1425.875068][T22275]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1425.875101][T22275]  ? ksys_write+0x1ac/0x250
[ 1425.875121][T22275]  ? __pfx_ksys_write+0x10/0x10
[ 1425.875141][T22275]  __ia32_sys_bind+0x71/0xb0
[ 1425.875162][T22275]  ? lockdep_hardirqs_on+0x78/0x100
[ 1425.875185][T22275]  __do_fast_syscall_32+0xe7/0x970
[ 1425.875209][T22275]  ? lockdep_hardirqs_on+0x78/0x100
[ 1425.875234][T22275]  do_fast_syscall_32+0x32/0x70
[ 1425.875259][T22275]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1425.875282][T22275] RIP: 0023:0xf702efec
[ 1425.875308][T22275] Code: Unable to access opcode bytes at 0xf702efc2.
[ 1425.875316][T22275] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000169
[ 1425.875332][T22275] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000100
[ 1425.875342][T22275] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000
[ 1425.875353][T22275] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1425.875362][T22275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1425.875373][T22275] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1425.875396][T22275]  </TASK>
[ 1426.646200][T22288] nvmet: adding nsid 1 to subsystem subsys1
[ 1427.241296][ T5854] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[ 1427.393608][ T5854] usb 5-1: config 0 has no interfaces?
[ 1427.395422][ T5854] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[ 1427.404368][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1427.415415][ T5854] usb 5-1: config 0 descriptor??
[ 1427.648730][ T5854] usb 5-1: USB disconnect, device number 98
[ 1428.300502][T22316] tipc: Started in network mode
[ 1428.302253][T22316] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[ 1428.305841][T22316] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002
[ 1428.308888][T22316] tipc: Enabled bearer <udp:syz0>, priority 10
[ 1428.428682][T22322] __nla_validate_parse: 2 callbacks suppressed
[ 1428.428710][T22322] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3950'.
[ 1428.579762][   T35] blk_print_req_error: 22 callbacks suppressed
[ 1428.579779][   T35] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1428.585152][   T35] buffer_io_error: 22 callbacks suppressed
[ 1428.585164][   T35] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1428.589702][   T35] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1428.593097][   T35] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1428.596109][   T35] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1428.599079][   T35] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1428.601768][   T35] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1428.605234][   T35] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1428.608135][   T35] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1428.611250][   T35] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1428.613865][   T35] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1428.616837][   T35] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1428.619326][   T35] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1428.623192][   T35] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1428.626020][   T35] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1428.629026][   T35] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1428.635990][T22320] ldm_validate_partition_table(): Disk read failed.
[ 1428.645008][   T35] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1428.648098][   T35] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1428.650833][   T35] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1428.654444][   T35] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1428.657164][T22320] Dev nbd2: unable to read RDB block 0
[ 1428.666915][T22320]  nbd2: unable to read partition table
[ 1428.779133][T22320] block nbd2: Cannot use ioctl interface on a netlink controlled device.
[ 1428.805271][T22320] block nbd2: Cannot use ioctl interface on a netlink controlled device.
[ 1428.812953][T22320] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3948'.
[ 1429.140506][T22325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3951'.
[ 1429.145699][T22327] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[ 1429.157610][T22327] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[ 1429.167310][T22327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3952'.
[ 1429.425156][T14361] tipc: Node number set to 1
[ 1429.679561][T22328] netlink: 'syz.4.3951': attribute type 4 has an invalid length.
[ 1429.682328][T22328] netlink: 'syz.4.3951': attribute type 8 has an invalid length.
[ 1429.685147][T22328] netlink: 'syz.4.3951': attribute type 1 has an invalid length.
[ 1429.687911][T22328] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3951'.
[ 1429.691362][T22328] NCSI netlink: No device for ifindex 7388455
[ 1430.204744][T22341] netlink: 'syz.1.3954': attribute type 2 has an invalid length.
[ 1430.454191][T22339] FAULT_INJECTION: forcing a failure.
[ 1430.454191][T22339] name failslab, interval 1, probability 0, space 9, times 0
[ 1430.464634][T22339] CPU: 0 UID: 0 PID: 22339 Comm: syz.4.3956 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1430.464687][T22339] Tainted: [L]=SOFTLOCKUP
[ 1430.464693][T22339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1430.464704][T22339] Call Trace:
[ 1430.464713][T22339]  <TASK>
[ 1430.464720][T22339]  dump_stack_lvl+0x100/0x190
[ 1430.464749][T22339]  should_fail_ex.cold+0x5/0xa
[ 1430.464770][T22339]  should_failslab+0xc2/0x120
[ 1430.464794][T22339]  __kmalloc_noprof+0xfc/0x820
[ 1430.464815][T22339]  ? rcu_is_watching+0x12/0xc0
[ 1430.464851][T22339]  ? tomoyo_realpath_from_path+0xb6/0x690
[ 1430.464882][T22339]  tomoyo_realpath_from_path+0xb6/0x690
[ 1430.464913][T22339]  tomoyo_path_number_perm+0x23c/0x580
[ 1430.464935][T22339]  ? tomoyo_path_number_perm+0x22e/0x580
[ 1430.464957][T22339]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1430.464980][T22339]  ? get_pid_task+0x106/0x250
[ 1430.465022][T22339]  ? find_held_lock+0x2b/0x80
[ 1430.465042][T22339]  ? __fget_files+0x215/0x3d0
[ 1430.465058][T22339]  ? hook_file_ioctl_common+0x140/0x440
[ 1430.465079][T22339]  ? __fget_files+0x215/0x3d0
[ 1430.465099][T22339]  ? __fget_files+0x21f/0x3d0
[ 1430.465118][T22339]  security_file_ioctl_compat+0xd3/0x230
[ 1430.465142][T22339]  __ia32_compat_sys_ioctl+0xc2/0x360
[ 1430.465170][T22339]  __do_fast_syscall_32+0xe7/0x970
[ 1430.465193][T22339]  ? lockdep_hardirqs_on+0x78/0x100
[ 1430.465216][T22339]  do_fast_syscall_32+0x32/0x70
[ 1430.465240][T22339]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1430.465263][T22339] RIP: 0023:0xf702efec
[ 1430.465285][T22339] Code: Unable to access opcode bytes at 0xf702efc2.
[ 1430.465294][T22339] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[ 1430.465311][T22339] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080047458
[ 1430.465322][T22339] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1430.465332][T22339] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1430.465341][T22339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1430.465350][T22339] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1430.465372][T22339]  </TASK>
[ 1430.465379][T22339] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1430.515664][T22341] : entered promiscuous mode
[ 1430.987046][T22350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3957'.
[ 1431.336232][ T5158] ldm_validate_partition_table(): Disk read failed.
[ 1431.342677][ T5158] Dev nbd2: unable to read RDB block 0
[ 1431.349600][ T5158]  nbd2: unable to read partition table
[ 1431.364336][ T5158] ldm_validate_partition_table(): Disk read failed.
[ 1431.371593][ T5158] Dev nbd2: unable to read RDB block 0
[ 1431.374337][ T5158]  nbd2: unable to read partition table
[ 1431.413186][T22365] ldm_validate_partition_table(): Disk read failed.
[ 1431.420879][T22365] Dev nbd2: unable to read RDB block 0
[ 1431.425562][T22365]  nbd2: unable to read partition table
[ 1431.441846][T22365] ldm_validate_partition_table(): Disk read failed.
[ 1431.447909][T22365] Dev nbd2: unable to read RDB block 0
[ 1431.454246][T22365]  nbd2: unable to read partition table
[ 1431.463261][T22358] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1431.702586][T22341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3954'.
[ 1431.740941][T22383] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[ 1431.743832][T22383] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1431.768218][T22383] vhci_hcd vhci_hcd.0: Device attached
[ 1432.041176][ T5841] usb 42-1: SetAddress Request (112) to port 0
[ 1432.043246][ T5841] usb 42-1: new SuperSpeed USB device number 112 using vhci_hcd
[ 1432.091587][ T6625] usb 7-1: new high-speed USB device number 83 using dummy_hcd
[ 1432.112252][T22395] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[ 1432.116341][T22395] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[ 1432.251192][ T6625] usb 7-1: Using ep0 maxpacket: 32
[ 1432.278333][ T6625] usb 7-1: config index 0 descriptor too short (expected 15270, got 18)
[ 1432.322064][ T6625] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[ 1432.325353][ T6625] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1432.328742][ T6625] usb 7-1: Product: syz
[ 1432.330455][ T6625] usb 7-1: Manufacturer: syz
[ 1432.332462][ T6625] usb 7-1: SerialNumber: syz
[ 1432.355431][ T6625] usb 7-1: config 0 descriptor??
[ 1432.383867][ T6625] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[ 1432.387109][ T6625] dvb-usb: bulk message failed: -22 (4/0)
[ 1432.394513][ T6625] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1432.398444][ T6625] dvb-usb: bulk message failed: -22 (5/0)
[ 1432.401789][ T6625] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1432.431813][ T6625] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1432.437460][ T6625] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[ 1432.440682][ T6625] usb 7-1: media controller created
[ 1432.500795][ T6625] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1432.549424][ T6625] usb 7-1: selecting invalid altsetting 3
[ 1432.551502][ T6625] ttusb2: set interface to alts=3 failed
[ 1432.566608][T22364] ttusb2: i2c wr len=209 too high
[ 1432.667877][T22384] vhci_hcd: connection reset by peer
[ 1432.673343][T13035] vhci_hcd vhci_hcd.2: stop threads
[ 1432.675125][T13035] vhci_hcd vhci_hcd.2: release socket
[ 1432.677046][ T6625] DVB: Unable to find symbol tda10086_attach()
[ 1432.679083][ T6625] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[ 1432.685302][T13035] vhci_hcd vhci_hcd.2: disconnect device
[ 1432.695822][ T6625] dvb-usb: bulk message failed: -22 (4/0)
[ 1432.697731][ T6625] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1432.702905][ T6625] dvb-usb: bulk message failed: -22 (5/0)
[ 1432.705241][ T6625] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1432.708584][ T6625] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[ 1432.713847][ T6625] usb 7-1: USB disconnect, device number 83
[ 1432.750954][ T6625] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[ 1432.973906][T22412] netlink: 'syz.4.3965': attribute type 2 has an invalid length.
[ 1434.147193][T22407] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3966'.
[ 1434.886652][T22451] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[ 1434.905538][T22450] syzkaller1: entered promiscuous mode
[ 1434.907335][T22450] syzkaller1: entered allmulticast mode
[ 1434.910186][T22451] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[ 1435.932781][T22456] CIFS: Attempting to mount //127.0.0.1/share
[ 1436.000929][T22456] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1436.006994][T22456] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1437.175605][T22478] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3979'.
[ 1437.671737][ T5841] usb 42-1: device descriptor read/8, error -110
[ 1437.881231][T17095] usb 6-1: new low-speed USB device number 103 using dummy_hcd
[ 1437.980576][T22491] No source specified
[ 1437.983980][T22491] MTD: Couldn't look up './dev/mtdblock0': -2
[ 1438.032949][T17095] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[ 1438.035603][T17095] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1438.039384][T17095] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1438.043160][T17095] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1438.047086][T17095] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1438.050616][T17095] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1438.054476][T17095] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1438.059047][T17095] usb 6-1: config 168 interface 0 has no altsetting 0
[ 1438.064443][T17095] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[ 1438.064522][ T5841] usb usb42-port1: attempt power cycle
[ 1438.066963][T17095] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1438.073236][T17095] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1438.076914][T17095] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1438.080809][T17095] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1438.085616][T17095] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1438.090190][T17095] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1438.095653][T17095] usb 6-1: config 168 interface 0 has no altsetting 0
[ 1438.099626][T17095] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[ 1438.102964][T17095] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1438.107411][T17095] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1438.111897][T17095] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1438.116607][T17095] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1438.121397][T17095] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1438.125954][T17095] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1438.130896][T17095] usb 6-1: config 168 interface 0 has no altsetting 0
[ 1438.139151][T17095] usb 6-1: string descriptor 0 read error: -22
[ 1438.141219][T17095] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1438.144399][T17095] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1438.157718][T17095] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1438.518913][T22501] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3987'.
[ 1438.598376][T14361] usb 6-1: USB disconnect, device number 103
[ 1438.636946][ T5841] usb usb42-port1: unable to enumerate USB device
[ 1438.673151][T22503] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[ 1438.679512][T22503] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[ 1438.801408][T22504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3987'.
[ 1439.516836][T22506] bridge0: port 3(ipvlan2) entered blocking state
[ 1439.519841][T22506] bridge0: port 3(ipvlan2) entered disabled state
[ 1439.523270][T22506] ipvlan2: entered allmulticast mode
[ 1439.525524][T22506] bridge0: entered allmulticast mode
[ 1439.532845][T22506] ipvlan2: left allmulticast mode
[ 1439.534981][T22506] bridge0: left allmulticast mode
[ 1439.587872][T22507] siw: device registration error -23
[ 1439.645525][T22507] ib_srp: No route available from (einval) to 0.0.0.0:3260 (-19)
[ 1439.961913][T22512] CIFS: Attempting to mount //127.0.0.1/share
[ 1439.991646][T22512] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1439.994201][T22512] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1440.847483][T22516] netlink: 'syz.1.3992': attribute type 4 has an invalid length.
[ 1440.866733][T22516] netlink: 'syz.1.3992': attribute type 4 has an invalid length.
[ 1441.004970][T22528] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3993'.
[ 1441.040258][T22530] kvm: pic: single mode not supported
[ 1441.053833][T22530] kvm: pic: single mode not supported
[ 1441.056244][T22530] kvm: pic: single mode not supported
[ 1441.065880][T22530] kvm: pic: single mode not supported
[ 1441.067845][T22530] kvm: pic: level sensitive irq not supported
[ 1441.070208][T22530] kvm: pic: level sensitive irq not supported
[ 1441.083501][T22530] kvm: pic: single mode not supported
[ 1441.088094][T22530] kvm: pic: single mode not supported
[ 1441.212063][T22526] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1441.223057][T22526] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1441.561559][T22538] siw: device registration error -23
[ 1441.591591][T22538] ib_srp: No route available from (einval) to 0.0.0.0:3260 (-19)
[ 1441.657850][T22542] 9pnet_fd: Insufficient options for proto=fd
[ 1441.902790][T14361] libceph: connect (1)[c::]:6789 error -101
[ 1441.908910][T14361] libceph: mon0 (1)[c::]:6789 connect error
[ 1441.926590][T22543] ceph: No mds server is up or the cluster is laggy
[ 1442.124895][T22535] bridge0: port 3(ipvlan2) entered blocking state
[ 1442.134971][T22535] bridge0: port 3(ipvlan2) entered disabled state
[ 1442.139710][T22535] ipvlan2: entered allmulticast mode
[ 1442.145176][T22535] bridge0: entered allmulticast mode
[ 1442.154722][T22535] ipvlan2: left allmulticast mode
[ 1442.171233][T22535] bridge0: left allmulticast mode
[ 1442.195557][T20402] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1442.199514][T20402] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1442.203049][T20402] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1442.205261][ T5841] libceph: connect (1)[c::]:6789 error -101
[ 1442.206648][T20402] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1442.208552][ T5841] libceph: mon0 (1)[c::]:6789 connect error
[ 1442.743062][T22551] bridge0: port 3(ipvlan2) entered blocking state
[ 1442.745339][T22551] bridge0: port 3(ipvlan2) entered disabled state
[ 1442.747489][T22551] ipvlan2: entered allmulticast mode
[ 1442.749175][T22551] bridge0: entered allmulticast mode
[ 1442.752152][T22551] ipvlan2: left allmulticast mode
[ 1442.754177][T22551] bridge0: left allmulticast mode
[ 1443.123565][T11583] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1443.134649][ T5841] usb 6-1: new low-speed USB device number 104 using dummy_hcd
[ 1443.137997][T11583] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1443.143758][T11583] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1443.153903][T11583] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1443.157953][T11583] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1443.292885][ T5841] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[ 1443.298642][ T5841] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1443.306736][ T5841] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1443.312482][ T5841] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1443.320237][ T5841] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1443.326003][ T5841] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1443.337090][ T5841] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1443.347004][ T5841] usb 6-1: config 168 interface 0 has no altsetting 0
[ 1443.352214][ T5841] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[ 1443.354896][ T5841] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1443.362729][ T5841] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1443.368307][ T5841] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1443.376269][ T5841] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1443.385379][ T5841] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1443.392259][ T5841] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1443.401304][ T5841] usb 6-1: config 168 interface 0 has no altsetting 0
[ 1443.408775][ T5841] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[ 1443.411425][ T5841] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1443.415102][ T5841] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1443.418830][ T5841] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1443.423051][ T5841] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1443.429183][ T5841] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1443.435896][ T5841] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1443.440530][T22551] ib_srp: No route available from (einval) to 0.0.0.0:3260 (-19)
[ 1443.440732][ T5841] usb 6-1: config 168 interface 0 has no altsetting 0
[ 1443.449142][ T5841] usb 6-1: string descriptor 0 read error: -22
[ 1443.451346][ T5841] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1443.454174][ T5841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1443.460256][ T5841] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1443.485348][T22557] lo speed is unknown, defaulting to 1000
[ 1443.752628][T22578] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4004'.
[ 1443.774173][T12755] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1443.783160][T14475] usb 6-1: USB disconnect, device number 104
[ 1443.920101][T12755] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1443.940849][T22557] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1443.943360][T22557] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1443.945746][T22557] bridge_slave_0: entered allmulticast mode
[ 1443.948366][T22557] bridge_slave_0: entered promiscuous mode
[ 1443.951993][T22557] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1443.954294][T22557] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1443.956668][T22557] bridge_slave_1: entered allmulticast mode
[ 1443.959432][T22557] bridge_slave_1: entered promiscuous mode
[ 1443.981949][T22557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1443.986744][T22557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1444.010307][T22557] team0: Port device team_slave_0 added
[ 1444.045682][T12755] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1444.099273][T22557] team0: Port device team_slave_1 added
[ 1444.167152][T22557] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1444.169387][T22557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1444.179113][T22557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1444.254055][T12755] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1444.329032][T22557] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1444.331708][T22557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1444.339781][T22557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1444.364517][T22557] hsr_slave_0: entered promiscuous mode
[ 1444.366969][T22557] hsr_slave_1: entered promiscuous mode
[ 1444.369186][T22557] debugfs: 'hsr0' already exists in 'hsr'
[ 1444.370968][T22557] Cannot create hsr debugfs directory
[ 1444.778911][T12755] bridge_slave_1: left allmulticast mode
[ 1444.791659][T12755] bridge_slave_1: left promiscuous mode
[ 1444.802145][T12755] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1444.854031][T12755] bridge_slave_0: left allmulticast mode
[ 1444.856173][T12755] bridge_slave_0: left promiscuous mode
[ 1444.857153][T22604] CIFS: Attempting to mount //127.0.0.1/share
[ 1444.862086][T12755] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1444.971795][T22609] ib_srp: No route available from (einval) to 0.0.0.0:3260 (-19)
[ 1444.981157][T22604] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1444.984860][T22604] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1445.127782][T12755] bond1 (unregistering): Released all slaves
[ 1445.139553][T12755] bond2 (unregistering): Released all slaves
[ 1445.154725][T12755] bond3 (unregistering): Released all slaves
[ 1445.165053][T12755] bond4 (unregistering): Released all slaves
[ 1445.177652][T12755] bond5 (unregistering): Released all slaves
[ 1445.187826][T12755] bond6 (unregistering): Released all slaves
[ 1445.191242][T15891] Bluetooth: hci3: command tx timeout
[ 1445.200275][T12755] bond7 (unregistering): Released all slaves
[ 1445.210578][T12755] bond8 (unregistering): Released all slaves
[ 1445.228066][T12755] bond9 (unregistering): Released all slaves
[ 1445.238149][T12755] bond10 (unregistering): Released all slaves
[ 1445.251959][T12755] bond11 (unregistering): Released all slaves
[ 1445.267714][T12755] bond0 (unregistering): Released all slaves
[ 1445.277893][T12755] bond12 (unregistering): Released all slaves
[ 1445.292724][T12755] bond13 (unregistering): Released all slaves
[ 1445.303236][T12755] bond14 (unregistering): Released all slaves
[ 1445.317823][T12755] bond15 (unregistering): Released all slaves
[ 1445.328085][T12755] bond16 (unregistering): Released all slaves
[ 1445.341582][T12755] bond17 (unregistering): Released all slaves
[ 1445.362408][T12755] bond18 (unregistering): Released all slaves
[ 1445.372619][T12755] bond19 (unregistering): Released all slaves
[ 1445.385479][T12755] bond20 (unregistering): Released all slaves
[ 1445.395827][T12755] bond21 (unregistering): Released all slaves
[ 1445.409917][T12755] bond22 (unregistering): Released all slaves
[ 1445.424666][T12755] bond23 (unregistering): Released all slaves
[ 1445.435113][T12755] bond24 (unregistering): Released all slaves
[ 1445.448234][T12755] bond25 (unregistering): Released all slaves
[ 1445.458680][T12755] bond26 (unregistering): Released all slaves
[ 1445.472480][T12755] bond27 (unregistering): Released all slaves
[ 1445.487154][T12755] bond28 (unregistering): Released all slaves
[ 1445.497346][T12755] bond29 (unregistering): Released all slaves
[ 1445.510478][T12755] bond30 (unregistering): Released all slaves
[ 1445.525222][T12755] bond31 (unregistering): Released all slaves
[ 1445.568060][T22606] bridge0: port 3(ipvlan2) entered blocking state
[ 1445.570438][T22606] bridge0: port 3(ipvlan2) entered disabled state
[ 1445.574696][T22606] ipvlan2: entered allmulticast mode
[ 1445.576531][T22606] bridge0: entered allmulticast mode
[ 1445.579505][T22606] ipvlan2: left allmulticast mode
[ 1445.581684][T22606] bridge0: left allmulticast mode
[ 1446.198748][T22617] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21
[ 1446.938875][ T5460] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1447.182873][ T5854] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[ 1447.285900][T15891] Bluetooth: hci3: command tx timeout
[ 1447.334288][ T5854] usb 5-1: config 0 has no interfaces?
[ 1447.336264][ T5854] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[ 1447.350668][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1447.369408][ T5854] usb 5-1: config 0 descriptor??
[ 1447.438780][ T5460] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1447.551363][T22641] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4017'.
[ 1447.606450][ T5854] usb 5-1: USB disconnect, device number 99
[ 1447.677877][T22631] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4016'.
[ 1447.801534][T22643] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[ 1447.801582][T22638] FAULT_INJECTION: forcing a failure.
[ 1447.801582][T22638] name failslab, interval 1, probability 0, space 9, times 0
[ 1447.804098][T22643] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1447.809306][T22643] vhci_hcd vhci_hcd.0: Device attached
[ 1447.811132][T22638] CPU: 2 UID: 0 PID: 22638 Comm: syz.2.4014 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1447.811151][T22638] Tainted: [L]=SOFTLOCKUP
[ 1447.811156][T22638] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1447.811163][T22638] Call Trace:
[ 1447.811169][T22638]  <TASK>
[ 1447.811175][T22638]  dump_stack_lvl+0x100/0x190
[ 1447.811194][T22638]  should_fail_ex.cold+0x5/0xa
[ 1447.811208][T22638]  should_failslab+0xc2/0x120
[ 1447.811225][T22638]  __kmalloc_cache_noprof+0x91/0x6c0
[ 1447.811238][T22638]  ? alloc_pipe_info+0x10e/0x590
[ 1447.811254][T22638]  alloc_pipe_info+0x10e/0x590
[ 1447.811268][T22638]  splice_direct_to_actor+0x78f/0xa30
[ 1447.811283][T22638]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1447.811296][T22638]  ? __pfx_aa_file_perm+0x10/0x10
[ 1447.811315][T22638]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1447.811332][T22638]  do_splice_direct+0x174/0x240
[ 1447.811345][T22638]  ? __pfx_do_splice_direct+0x10/0x10
[ 1447.811360][T22638]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 1447.811372][T22638]  ? bpf_lsm_file_permission+0x9/0x10
[ 1447.811383][T22638]  ? security_file_permission+0x76/0x210
[ 1447.811400][T22638]  ? rw_verify_area+0xce/0x6d0
[ 1447.811418][T22638]  do_sendfile+0xadc/0xe20
[ 1447.811438][T22638]  ? __pfx_do_sendfile+0x10/0x10
[ 1447.811460][T22638]  __ia32_compat_sys_sendfile+0x1e5/0x220
[ 1447.811475][T22638]  ? __pfx___ia32_compat_sys_sendfile+0x10/0x10
[ 1447.811493][T22638]  __do_fast_syscall_32+0xe7/0x970
[ 1447.811512][T22638]  do_fast_syscall_32+0x32/0x70
[ 1447.811529][T22638]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1447.811544][T22638] RIP: 0023:0xf7f74fec
[ 1447.811560][T22638] Code: Unable to access opcode bytes at 0xf7f74fc2.
[ 1447.811566][T22638] RSP: 002b:00000000f541550c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb
[ 1447.811578][T22638] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000000000b
[ 1447.811585][T22638] RDX: 0000000000000000 RSI: 0000000002000009 RDI: 0000000000000000
[ 1447.811592][T22638] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1447.811599][T22638] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1447.811605][T22638] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1447.811619][T22638]  </TASK>
[ 1447.831432][T22638] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21
[ 1447.961092][T22643] erofs (device sr0): cannot find valid erofs superblock
[ 1448.071161][T17095] usb 40-1: SetAddress Request (84) to port 0
[ 1448.078814][T17095] usb 40-1: new SuperSpeed USB device number 84 using vhci_hcd
[ 1448.389243][T22644] vhci_hcd: connection reset by peer
[ 1448.391515][ T5827] vhci_hcd vhci_hcd.1: stop threads
[ 1448.393272][ T5827] vhci_hcd vhci_hcd.1: release socket
[ 1448.395669][ T5827] vhci_hcd vhci_hcd.1: disconnect device
[ 1448.651443][T12755] batadv0: left promiscuous mode
[ 1448.662635][T12755] hsr_slave_0: left promiscuous mode
[ 1448.665333][T22655] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4018'.
[ 1448.669317][T12755] hsr_slave_1: left promiscuous mode
[ 1448.671736][T12755] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1448.674225][T12755] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1448.677546][T12755] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1448.680243][T12755] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1448.690707][T12755] veth1_macvtap: left promiscuous mode
[ 1448.694826][T12755] veth0_macvtap: left promiscuous mode
[ 1448.697560][T12755] veth1_vlan: left promiscuous mode
[ 1448.699848][T12755] veth0_vlan: left promiscuous mode
[ 1448.865736][T22661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4018'.
[ 1449.361386][T15891] Bluetooth: hci3: command tx timeout
[ 1449.594634][T22675] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1449.626039][T22557] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1449.700918][T22557] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1449.705311][T22557] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1449.756156][T22557] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1449.762370][T22557] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1449.782319][T22681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4024'.
[ 1449.787124][T22682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4023'.
[ 1449.806392][T22557] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1449.810691][T22557] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1449.850460][T22557] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1449.932641][T22689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4023'.
[ 1450.027150][T12755] IPVS: stop unused estimator thread 0...
[ 1450.033132][T22557] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1450.047821][T22557] 8021q: adding VLAN 0 to HW filter on device team0
[ 1450.065332][T22158] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1450.067827][T22158] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1450.082180][T22158] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1450.084490][T22158] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1450.486080][T22701] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer.
[ 1450.654203][T22557] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1450.819073][T22557] veth0_vlan: entered promiscuous mode
[ 1450.840220][T22557] veth1_vlan: entered promiscuous mode
[ 1450.865546][T22557] veth0_macvtap: entered promiscuous mode
[ 1450.869868][T22557] veth1_macvtap: entered promiscuous mode
[ 1450.885154][T22557] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1450.894898][T22557] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1451.002094][ T5827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1451.026297][ T5827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1451.041158][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1451.046732][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1451.139657][T22715] geneve2: entered promiscuous mode
[ 1451.151552][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 33651 - 0
[ 1451.154521][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 33651 - 0
[ 1451.159718][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 33651 - 0
[ 1451.164081][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 33651 - 0
[ 1451.267400][T22158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1451.271840][T22158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1451.294526][T22160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1451.301244][T22160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1451.442286][T15891] Bluetooth: hci3: command tx timeout
[ 1451.687552][T22716] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[ 1451.722000][T22716] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[ 1452.342419][ T6010] block nbd25: Receive control failed (result -22)
[ 1453.173357][T22731] nbd25: detected capacity change from 0 to 32
[ 1453.210329][T17095] usb 40-1: device descriptor read/8, error -110
[ 1453.214578][ T2234] block nbd25: Dead connection, failed to find a fallback
[ 1453.216952][ T2234] block nbd25: shutting down sockets
[ 1453.218650][ T2234] blk_print_req_error: 75 callbacks suppressed
[ 1453.218714][ T2234] I/O error, dev nbd25, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1453.225283][ T2234] buffer_io_error: 75 callbacks suppressed
[ 1453.225347][ T2234] Buffer I/O error on dev nbd25, logical block 0, async page read
[ 1453.246661][ T2234] I/O error, dev nbd25, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1453.250158][ T2234] Buffer I/O error on dev nbd25, logical block 0, async page read
[ 1453.255913][T14198] I/O error, dev nbd25, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1453.259187][T14198] Buffer I/O error on dev nbd25, logical block 0, async page read
[ 1453.271872][T14198] I/O error, dev nbd25, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1453.275018][T14198] Buffer I/O error on dev nbd25, logical block 0, async page read
[ 1453.280296][T14198] I/O error, dev nbd25, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1453.284621][T14198] Buffer I/O error on dev nbd25, logical block 0, async page read
[ 1453.288191][T14198] I/O error, dev nbd25, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1453.292355][T14198] Buffer I/O error on dev nbd25, logical block 0, async page read
[ 1453.295761][T14198] I/O error, dev nbd25, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1453.301825][T14198] Buffer I/O error on dev nbd25, logical block 0, async page read
[ 1453.308027][   T35] I/O error, dev nbd25, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1453.311832][   T35] Buffer I/O error on dev nbd25, logical block 0, async page read
[ 1453.315049][T22397] ldm_validate_partition_table(): Disk read failed.
[ 1453.319692][   T35] I/O error, dev nbd25, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1453.323755][   T35] Buffer I/O error on dev nbd25, logical block 0, async page read
[ 1453.327099][   T35] I/O error, dev nbd25, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1453.330768][   T35] Buffer I/O error on dev nbd25, logical block 0, async page read
[ 1453.334851][T22397] Dev nbd25: unable to read RDB block 0
[ 1453.344437][T22397]  nbd25: unable to read partition table
[ 1453.511242][T22397] ldm_validate_partition_table(): Disk read failed.
[ 1453.514341][T22397] Dev nbd25: unable to read RDB block 0
[ 1453.517270][T22397]  nbd25: unable to read partition table
[ 1453.668785][T22744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4035'.
[ 1453.681818][T17095] usb usb40-port1: attempt power cycle
[ 1453.699534][T22739] FAULT_INJECTION: forcing a failure.
[ 1453.699534][T22739] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1453.704780][T22739] CPU: 2 UID: 0 PID: 22739 Comm: syz.1.4033 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1453.704800][T22739] Tainted: [L]=SOFTLOCKUP
[ 1453.704805][T22739] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1453.704812][T22739] Call Trace:
[ 1453.704817][T22739]  <TASK>
[ 1453.704823][T22739]  dump_stack_lvl+0x100/0x190
[ 1453.704843][T22739]  should_fail_ex.cold+0x5/0xa
[ 1453.704857][T22739]  _copy_from_user+0x2e/0xd0
[ 1453.704876][T22739]  get_compat_msghdr+0xb3/0x480
[ 1453.704889][T22739]  ? __pfx_get_compat_msghdr+0x10/0x10
[ 1453.704901][T22739]  ? find_held_lock+0x2b/0x80
[ 1453.704916][T22739]  ? finish_task_switch.isra.0+0x2c0/0x10c0
[ 1453.704930][T22739]  ? finish_task_switch.isra.0+0x2c0/0x10c0
[ 1453.704945][T22739]  ___sys_sendmsg+0x1b6/0x1e0
[ 1453.704960][T22739]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1453.704973][T22739]  ? trace_sched_exit_tp+0x120/0x160
[ 1453.704993][T22739]  ? find_held_lock+0x2b/0x80
[ 1453.705016][T22739]  __sys_sendmsg+0x160/0x210
[ 1453.705033][T22739]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1453.705058][T22739]  __do_fast_syscall_32+0xe7/0x970
[ 1453.705075][T22739]  ? lockdep_hardirqs_on+0x78/0x100
[ 1453.705091][T22739]  do_fast_syscall_32+0x32/0x70
[ 1453.705108][T22739]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1453.705123][T22739] RIP: 0023:0xf70aefec
[ 1453.705139][T22739] Code: Unable to access opcode bytes at 0xf70aefc2.
[ 1453.705145][T22739] RSP: 002b:00000000f547c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[ 1453.705156][T22739] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800027c0
[ 1453.705164][T22739] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1453.705170][T22739] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1453.705177][T22739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1453.705183][T22739] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1453.705197][T22739]  </TASK>
[ 1453.713677][T22744] bridge_slave_1 (unregistering): left allmulticast mode
[ 1453.796987][T22744] bridge_slave_1 (unregistering): left promiscuous mode
[ 1453.807244][T22744] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1454.242136][T17095] usb usb40-port1: unable to enumerate USB device
[ 1454.417061][ T5854] Process accounting resumed
[ 1455.081133][   T34] usb 9-1: new full-speed USB device number 59 using dummy_hcd
[ 1455.692156][   T34] usb 9-1: not running at top speed; connect to a high speed hub
[ 1455.790139][T22759] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[ 1455.815697][T22759] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[ 1455.876417][T22759] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4039'.
[ 1455.882775][T22764] Cannot find del_set index 4 as target
[ 1455.928992][T22766] FAULT_INJECTION: forcing a failure.
[ 1455.928992][T22766] name failslab, interval 1, probability 0, space 9, times 0
[ 1455.935716][T22766] CPU: 0 UID: 0 PID: 22766 Comm: syz.1.4042 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1455.935749][T22766] Tainted: [L]=SOFTLOCKUP
[ 1455.935756][T22766] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1455.935768][T22766] Call Trace:
[ 1455.935775][T22766]  <TASK>
[ 1455.935783][T22766]  dump_stack_lvl+0x100/0x190
[ 1455.935812][T22766]  should_fail_ex.cold+0x5/0xa
[ 1455.935836][T22766]  should_failslab+0xc2/0x120
[ 1455.935871][T22766]  __kmalloc_cache_noprof+0x91/0x6c0
[ 1455.935891][T22766]  ? net_generic+0xea/0x2a0
[ 1455.935921][T22766]  ? ip_set_create+0x342/0x14f0
[ 1455.935944][T22766]  ip_set_create+0x342/0x14f0
[ 1455.935965][T22766]  ? rcu_is_watching+0x12/0xc0
[ 1455.935987][T22766]  ? trace_contention_end+0x126/0x160
[ 1455.936011][T22766]  ? __pfx_ip_set_create+0x10/0x10
[ 1455.936048][T22766]  ? find_held_lock+0x2b/0x80
[ 1455.936080][T22766]  nfnetlink_rcv_msg+0x9d5/0x11e0
[ 1455.936119][T22766]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 1455.936151][T22766]  ? stack_trace_save+0x8e/0xc0
[ 1455.936205][T22766]  ? __lock_acquire+0x49f/0x1a40
[ 1455.936238][T22766]  netlink_rcv_skb+0x159/0x420
[ 1455.936261][T22766]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 1455.936291][T22766]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1455.936325][T22766]  ? ns_capable+0xd2/0xf0
[ 1455.936348][T22766]  nfnetlink_rcv+0x1b3/0x440
[ 1455.936373][T22766]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1455.936398][T22766]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 1455.936423][T22766]  netlink_unicast+0x585/0x850
[ 1455.936465][T22766]  ? __pfx_netlink_unicast+0x10/0x10
[ 1455.936495][T22766]  netlink_sendmsg+0x8b0/0xda0
[ 1455.936520][T22766]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1455.936569][T22766]  ? apparmor_socket_sendmsg+0x15b/0x270
[ 1455.936596][T22766]  ____sys_sendmsg+0xa4d/0xbe0
[ 1455.936614][T22766]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1455.936636][T22766]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1455.936668][T22766]  ___sys_sendmsg+0x190/0x1e0
[ 1455.936690][T22766]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1455.936722][T22766]  ? find_held_lock+0x2b/0x80
[ 1455.936760][T22766]  __sys_sendmsg+0x160/0x210
[ 1455.936788][T22766]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1455.936820][T22766]  ? __pfx_ksys_write+0x10/0x10
[ 1455.936844][T22766]  __do_fast_syscall_32+0xe7/0x970
[ 1455.936876][T22766]  ? lockdep_hardirqs_on+0x78/0x100
[ 1455.936901][T22766]  do_fast_syscall_32+0x32/0x70
[ 1455.936927][T22766]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1455.936950][T22766] RIP: 0023:0xf70aefec
[ 1455.936972][T22766] Code: Unable to access opcode bytes at 0xf70aefc2.
[ 1455.936981][T22766] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[ 1455.937000][T22766] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040
[ 1455.937012][T22766] RDX: 0000000020004000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1455.937023][T22766] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1455.937033][T22766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1455.937044][T22766] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1455.937068][T22766]  </TASK>
[ 1456.138873][   T34] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1456.142079][   T34] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1456.145040][   T34] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[ 1456.148939][   T34] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[ 1456.151756][   T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1456.157973][   T34] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected
[ 1456.161671][   T34] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84
[ 1456.164176][   T34] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2
[ 1456.168078][   T34] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[ 1456.172178][   T34] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88
[ 1456.174606][   T34] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6
[ 1456.178431][   T34] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[ 1456.491521][T22778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4046'.
[ 1456.498666][T22778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4046'.
[ 1456.500437][T14691] usb 9-1: USB disconnect, device number 59
[ 1456.502779][T22778] FAULT_INJECTION: forcing a failure.
[ 1456.502779][T22778] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1456.502805][T22778] CPU: 0 UID: 0 PID: 22778 Comm: syz.2.4046 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1456.502828][T22778] Tainted: [L]=SOFTLOCKUP
[ 1456.502834][T22778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1456.502843][T22778] Call Trace:
[ 1456.502857][T22778]  <TASK>
[ 1456.502865][T22778]  dump_stack_lvl+0x100/0x190
[ 1456.502893][T22778]  should_fail_ex.cold+0x5/0xa
[ 1456.502917][T22778]  _copy_from_user+0x2e/0xd0
[ 1456.502940][T22778]  get_compat_msghdr+0xb3/0x480
[ 1456.502952][T22778]  ? __pfx_get_compat_msghdr+0x10/0x10
[ 1456.502964][T22778]  ? rcu_is_watching+0x12/0xc0
[ 1456.502979][T22778]  ? ___sys_sendmsg+0x19d/0x1e0
[ 1456.502991][T22778]  ? kfree+0x1e5/0x6c0
[ 1456.503002][T22778]  ? __pfx__kstrtoull+0x10/0x10
[ 1456.503017][T22778]  ___sys_sendmsg+0x1b6/0x1e0
[ 1456.503030][T22778]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1456.503042][T22778]  ? __lock_acquire+0x49f/0x1a40
[ 1456.503072][T22778]  ? __pfx___might_resched+0x10/0x10
[ 1456.503093][T22778]  __sys_sendmmsg+0x309/0x440
[ 1456.503111][T22778]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1456.503126][T22778]  ? find_held_lock+0x2b/0x80
[ 1456.503143][T22778]  ? __mutex_unlock_slowpath+0x35d/0x930
[ 1456.503167][T22778]  ? fput+0x79/0x100
[ 1456.503180][T22778]  ? ksys_write+0x1ac/0x250
[ 1456.503192][T22778]  __ia32_compat_sys_sendmmsg+0x9d/0x100
[ 1456.503204][T22778]  ? lockdep_hardirqs_on+0x78/0x100
[ 1456.503219][T22778]  __do_fast_syscall_32+0xe7/0x970
[ 1456.503234][T22778]  ? lockdep_hardirqs_on+0x78/0x100
[ 1456.503250][T22778]  do_fast_syscall_32+0x32/0x70
[ 1456.503266][T22778]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1456.503281][T22778] RIP: 0023:0xf7f74fec
[ 1456.503297][T22778] Code: Unable to access opcode bytes at 0xf7f74fc2.
[ 1456.503302][T22778] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159
[ 1456.503313][T22778] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000
[ 1456.503321][T22778] RDX: 00000000000001f2 RSI: 0000000000000000 RDI: 0000000000000000
[ 1456.503328][T22778] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1456.503334][T22778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1456.503341][T22778] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1456.503356][T22778]  </TASK>
[ 1456.640872][T22780] CIFS: Attempting to mount //127.0.0.1/share
[ 1456.683978][T22780] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1456.687090][T22780] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1456.831101][T14361] usb 7-1: new full-speed USB device number 84 using dummy_hcd
[ 1456.890791][T22786] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4049'.
[ 1456.954545][T22787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4049'.
[ 1457.342570][T14691] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[ 1457.581191][T14361] usb 7-1: config 0 has an invalid interface number: 143 but max is 0
[ 1457.835644][T14691] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[ 1457.845115][T14361] usb 7-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config
[ 1457.848347][T14361] usb 7-1: config 0 has no interface number 0
[ 1457.850577][T14361] usb 7-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30
[ 1457.854140][T14361] usb 7-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149
[ 1457.858330][T14361] usb 7-1: config 0 interface 143 has no altsetting 0
[ 1457.862197][T14361] usb 7-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[ 1457.865498][T14361] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1457.868641][T14361] usb 7-1: Product: syz
[ 1457.870512][T14361] usb 7-1: Manufacturer: syz
[ 1457.872670][T14361] usb 7-1: SerialNumber: syz
[ 1457.889289][T14691] keyspan 9-1:1.0: device disconnected
[ 1457.896883][T14361] usb 7-1: config 0 descriptor??
[ 1457.938905][T22793] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4052'.
[ 1458.017343][T22794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4052'.
[ 1458.114128][T22795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4051'.
[ 1458.427734][T14361] usb 7-1: USB disconnect, device number 84
[ 1458.500311][T22801] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[ 1458.503228][T22801] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[ 1458.506781][T22801] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4053'.
[ 1458.901193][T14361] usb 7-1: new high-speed USB device number 85 using dummy_hcd
[ 1458.978726][T22804] CIFS: Attempting to mount //127.0.0.1/share
[ 1458.994963][T22804] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1458.998482][T22804] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1459.501608][ T5826] usb 9-1: new high-speed USB device number 60 using dummy_hcd
[ 1459.605625][T22795] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1459.746519][ T5826] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 1459.751369][T14361] usb 7-1: Using ep0 maxpacket: 16
[ 1459.756863][ T5826] usb 9-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00
[ 1459.770800][ T5826] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1459.837068][T22800] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1459.842237][ T5826] opticon 9-1:1.0: opticon converter detected
[ 1459.858596][ T5826] usb 9-1: opticon converter now attached to ttyUSB0
[ 1459.930853][T22809] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4056'.
[ 1460.044064][T22811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4056'.
[ 1460.076979][T14361] usb 7-1: device descriptor read/all, error -71
[ 1461.092454][T22795] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1461.327148][T22819] CIFS: Attempting to mount //127.0.0.1/share
[ 1461.529756][T22795] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1461.704898][T22795] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1461.921195][   T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1461.952813][T13035] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1461.963617][T13035] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1461.971251][T13035] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1463.222678][T22819] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1463.230199][T22819] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1463.591602][T22826] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[ 1463.601715][T22826] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[ 1463.612590][T22826] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4060'.
[ 1464.461987][T22834] lo speed is unknown, defaulting to 1000
[ 1464.806416][T22840] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer.
[ 1465.060780][T22844] bridge0: port 3(ipvlan2) entered blocking state
[ 1465.063694][T22844] bridge0: port 3(ipvlan2) entered disabled state
[ 1465.066226][T22844] ipvlan2: entered allmulticast mode
[ 1465.067969][T22844] bridge0: entered allmulticast mode
[ 1465.072028][T22844] ipvlan2: left allmulticast mode
[ 1465.074055][T22844] bridge0: left allmulticast mode
[ 1465.212450][T14475] usb 9-1: USB disconnect, device number 60
[ 1465.226319][T14475] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0
[ 1465.231562][T14475] opticon 9-1:1.0: device disconnected
[ 1465.276984][T22848] bridge0: port 3(ipvlan2) entered blocking state
[ 1465.279491][T22848] bridge0: port 3(ipvlan2) entered disabled state
[ 1465.283089][T22848] ipvlan2: entered allmulticast mode
[ 1465.285122][T22848] bridge0: entered allmulticast mode
[ 1465.292941][T22848] ipvlan2: left allmulticast mode
[ 1465.294739][T22848] bridge0: left allmulticast mode
[ 1465.357108][T22852] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[ 1465.361581][T22852] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[ 1465.365546][T22852] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4066'.
[ 1465.396467][T22853] ib_srp: No route available from (einval) to 0.0.0.0:3260 (-19)
[ 1465.656551][T22858] CIFS: Attempting to mount //127.0.0.1/share
[ 1465.709148][T22858] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1465.714063][T22858] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1466.252830][T22861] CIFS: Attempting to mount //127.0.0.1/share
[ 1466.263398][T22861] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1466.265860][T22861] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1467.145990][T22865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4069'.
[ 1467.924833][T22871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4071'.
[ 1467.989580][T22869] nfs: Unknown parameter '})+%-)'
[ 1469.203600][T22885] bridge0: port 3(ipvlan2) entered blocking state
[ 1469.206333][T22885] bridge0: port 3(ipvlan2) entered disabled state
[ 1469.208850][T22885] ipvlan2: entered allmulticast mode
[ 1469.210542][T22885] bridge0: entered allmulticast mode
[ 1469.223854][T22885] ipvlan2: left allmulticast mode
[ 1469.225913][T22886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4076'.
[ 1469.228799][T22885] bridge0: left allmulticast mode
[ 1470.245237][T22897] CIFS: Attempting to mount //127.0.0.1/share
[ 1470.285433][T22894] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1470.939270][T22905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4079'.
[ 1470.953522][T22905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4079'.
[ 1471.222370][T22908] FAULT_INJECTION: forcing a failure.
[ 1471.222370][T22908] name failslab, interval 1, probability 0, space 9, times 0
[ 1471.229601][T22908] CPU: 2 UID: 0 PID: 22908 Comm: syz.1.4081 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1471.229622][T22908] Tainted: [L]=SOFTLOCKUP
[ 1471.229626][T22908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1471.229634][T22908] Call Trace:
[ 1471.229650][T22908]  <TASK>
[ 1471.229655][T22908]  dump_stack_lvl+0x100/0x190
[ 1471.229755][T22908]  should_fail_ex.cold+0x5/0xa
[ 1471.229775][T22908]  should_failslab+0xc2/0x120
[ 1471.229803][T22908]  __kmalloc_noprof+0xfc/0x820
[ 1471.229825][T22908]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[ 1471.229876][T22908]  genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[ 1471.229896][T22908]  genl_family_rcv_msg_doit+0xc7/0x300
[ 1471.229912][T22908]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1471.229932][T22908]  ? bpf_lsm_capable+0x9/0x10
[ 1471.229951][T22908]  ? security_capable+0x80/0x260
[ 1471.229990][T22908]  ? ns_capable+0xd2/0xf0
[ 1471.230013][T22908]  genl_rcv_msg+0x560/0x800
[ 1471.230030][T22908]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1471.230045][T22908]  ? __pfx_nl80211_pre_doit+0x10/0x10
[ 1471.230078][T22908]  ? __pfx_nl80211_set_interface+0x10/0x10
[ 1471.230089][T22908]  ? __pfx_nl80211_post_doit+0x10/0x10
[ 1471.230107][T22908]  ? __lock_acquire+0x49f/0x1a40
[ 1471.230134][T22908]  netlink_rcv_skb+0x159/0x420
[ 1471.230147][T22908]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1471.230163][T22908]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1471.230182][T22908]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 1471.230196][T22908]  genl_rcv+0x28/0x40
[ 1471.230210][T22908]  netlink_unicast+0x585/0x850
[ 1471.230225][T22908]  ? __pfx_netlink_unicast+0x10/0x10
[ 1471.230239][T22908]  ? __alloc_skb+0x417/0x710
[ 1471.230255][T22908]  ? netlink_alloc_large_skb+0x71/0x150
[ 1471.230270][T22908]  netlink_sendmsg+0x8b0/0xda0
[ 1471.230286][T22908]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1471.230301][T22908]  ? apparmor_socket_sendmsg+0x15b/0x270
[ 1471.230322][T22908]  ____sys_sendmsg+0xa4d/0xbe0
[ 1471.230335][T22908]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1471.230349][T22908]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1471.230368][T22908]  ___sys_sendmsg+0x190/0x1e0
[ 1471.230391][T22908]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1471.230410][T22908]  ? find_held_lock+0x2b/0x80
[ 1471.230433][T22908]  __sys_sendmsg+0x160/0x210
[ 1471.230451][T22908]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1471.230471][T22908]  ? __pfx_ksys_write+0x10/0x10
[ 1471.230490][T22908]  __do_fast_syscall_32+0xe7/0x970
[ 1471.230511][T22908]  ? lockdep_hardirqs_on+0x78/0x100
[ 1471.230527][T22908]  do_fast_syscall_32+0x32/0x70
[ 1471.230543][T22908]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1471.230559][T22908] RIP: 0023:0xf70aefec
[ 1471.230575][T22908] Code: Unable to access opcode bytes at 0xf70aefc2.
[ 1471.230592][T22908] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[ 1471.230604][T22908] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000
[ 1471.230611][T22908] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1471.230618][T22908] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1471.230625][T22908] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1471.230631][T22908] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1471.230645][T22908]  </TASK>
[ 1471.270085][T22897] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1471.369202][T22911] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1471.371448][T22911] bridge0: port 1(bridge_slave_0) entered listening state
[ 1471.436055][T22911] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1471.519210][T22897] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1471.537629][T22912] CIFS: Attempting to mount //127.0.0.1/share
[ 1471.547170][T22912] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1471.549833][T22912] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1471.570665][T22911] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1471.590814][T22911] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1471.702433][T22922] CIFS: Attempting to mount //127.0.0.1/share
[ 1471.706537][T22911] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1471.711780][T22911] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1471.859665][T22911] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1471.980571][T22911] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1472.000100][T22911] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1472.001477][T14475] usb 6-1: new high-speed USB device number 105 using dummy_hcd
[ 1472.061625][T22911] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1472.065258][T22911] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1472.069113][T22911] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1472.092593][T22911] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1472.263845][T14475] usb 6-1: config 0 has no interfaces?
[ 1472.269346][T14475] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1472.276681][T14475] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1472.279852][T14475] usb 6-1: Product: syz
[ 1472.281309][T14475] usb 6-1: Manufacturer: syz
[ 1472.282865][T14475] usb 6-1: SerialNumber: syz
[ 1472.290714][T14475] usb 6-1: config 0 descriptor??
[ 1472.355778][T22911] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1472.407345][T22911] 8021q: adding VLAN 0 to HW filter on device bond12
[ 1472.427303][T22911] 8021q: adding VLAN 0 to HW filter on device bond13
[ 1472.443202][T22911] 8021q: adding VLAN 0 to HW filter on device bond14
[ 1472.454117][T22911] 8021q: adding VLAN 0 to HW filter on device bond15
[ 1472.466076][T22911] 8021q: adding VLAN 0 to HW filter on device eth0
[ 1472.472820][T22911] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1472.476808][T22911] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1472.487571][T22911] 8021q: adding VLAN 0 to HW filter on device eth3
[ 1472.491921][T22922] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1472.495680][T22911] 8021q: adding VLAN 0 to HW filter on device bond17
[ 1472.497840][T22922] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1472.503302][T22911] 8021q: adding VLAN 0 to HW filter on device bond18
[ 1472.512149][T22911] 8021q: adding VLAN 0 to HW filter on device bond19
[ 1472.517682][T22911] 8021q: adding VLAN 0 to HW filter on device bond20
[ 1472.526174][T16943] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1472.529010][T16943] bridge0: port 2(bridge_slave_1) entered listening state
[ 1472.530112][T22923] Invalid ELF header type: 3 != 1
[ 1472.540431][T20969] lo speed is unknown, defaulting to 1000
[ 1472.556666][ T7544] usb 6-1: USB disconnect, device number 105
[ 1473.001875][ T7544] usb 6-1: new high-speed USB device number 106 using dummy_hcd
[ 1473.096793][T22931] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer.
[ 1473.154959][ T7544] usb 6-1: config 0 has no interfaces?
[ 1473.161894][ T7544] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1473.167831][ T7544] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1473.178425][ T7544] usb 6-1: Product: syz
[ 1473.180222][ T7544] usb 6-1: Manufacturer: syz
[ 1473.182607][ T7544] usb 6-1: SerialNumber: syz
[ 1473.304723][ T7544] usb 6-1: config 0 descriptor??
[ 1473.316614][T22942] FAULT_INJECTION: forcing a failure.
[ 1473.316614][T22942] name failslab, interval 1, probability 0, space 9, times 0
[ 1473.322446][T22942] CPU: 0 UID: 0 PID: 22942 Comm: syz.4.4090 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1473.322471][T22942] Tainted: [L]=SOFTLOCKUP
[ 1473.322476][T22942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1473.322485][T22942] Call Trace:
[ 1473.322491][T22942]  <TASK>
[ 1473.322497][T22942]  dump_stack_lvl+0x100/0x190
[ 1473.322522][T22942]  should_fail_ex.cold+0x5/0xa
[ 1473.322540][T22942]  should_failslab+0xc2/0x120
[ 1473.322561][T22942]  kmem_cache_alloc_noprof+0x91/0x6a0
[ 1473.322581][T22942]  ? __kernfs_new_node+0xd2/0xa10
[ 1473.322611][T22942]  __kernfs_new_node+0xd2/0xa10
[ 1473.322626][T22942]  ? kernfs_add_one+0x611/0xaa0
[ 1473.322641][T22942]  ? __pfx___kernfs_new_node+0x10/0x10
[ 1473.322661][T22942]  ? find_held_lock+0x2b/0x80
[ 1473.322679][T22942]  ? kernfs_root+0xee/0x2a0
[ 1473.322700][T22942]  ? kernfs_root+0xee/0x2a0
[ 1473.322726][T22942]  kernfs_new_node+0x117/0x150
[ 1473.322744][T22942]  __kernfs_create_file+0x53/0x350
[ 1473.322765][T22942]  sysfs_add_file_mode_ns+0x207/0x3c0
[ 1473.322806][T22942]  sysfs_create_file_ns+0x145/0x1e0
[ 1473.322824][T22942]  ? rcu_is_watching+0x12/0xc0
[ 1473.322851][T22942]  ? __pfx_sysfs_create_file_ns+0x10/0x10
[ 1473.322872][T22942]  ? __pfx___up_read+0x10/0x10
[ 1473.322887][T22942]  ? acpi_device_notify+0x464/0x500
[ 1473.322920][T22942]  ? kobject_put+0xb9/0x640
[ 1473.322937][T22942]  device_create_file+0xf2/0x1d0
[ 1473.322963][T22942]  device_add+0x2cb/0x1970
[ 1473.322979][T22942]  ? __pfx_device_add+0x10/0x10
[ 1473.322997][T22942]  ? kobject_get+0xbb/0x150
[ 1473.323020][T22942]  cdev_device_add+0x12b/0x270
[ 1473.323037][T22942]  nvme_add_ctrl+0x15c/0x320
[ 1473.323063][T22942]  nvme_loop_create_ctrl+0x201/0xee0
[ 1473.323087][T22942]  nvmf_dev_write+0x4ee/0xb60
[ 1473.323112][T22942]  vfs_write+0x2aa/0x1050
[ 1473.323127][T22942]  ? __pfx_nvmf_dev_write+0x10/0x10
[ 1473.323150][T22942]  ? __pfx_vfs_write+0x10/0x10
[ 1473.323162][T22942]  ? find_held_lock+0x2b/0x80
[ 1473.323179][T22942]  ? __fget_files+0x215/0x3d0
[ 1473.323193][T22942]  ? __fget_files+0x215/0x3d0
[ 1473.323210][T22942]  ? __fget_files+0x21f/0x3d0
[ 1473.323228][T22942]  ksys_write+0x12a/0x250
[ 1473.323242][T22942]  ? __pfx_ksys_write+0x10/0x10
[ 1473.323254][T22942]  ? ksys_write+0x1ac/0x250
[ 1473.323267][T22942]  ? __pfx_ksys_write+0x10/0x10
[ 1473.323284][T22942]  __do_fast_syscall_32+0xe7/0x970
[ 1473.323304][T22942]  ? lockdep_hardirqs_on+0x78/0x100
[ 1473.323325][T22942]  do_fast_syscall_32+0x32/0x70
[ 1473.323346][T22942]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1473.323370][T22942] RIP: 0023:0xf707efec
[ 1473.323390][T22942] Code: Unable to access opcode bytes at 0xf707efc2.
[ 1473.323397][T22942] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[ 1473.323412][T22942] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000780
[ 1473.323421][T22942] RDX: 000000000000001a RSI: 0000000000000000 RDI: 0000000000000000
[ 1473.323430][T22942] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1473.323438][T22942] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1473.323446][T22942] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1473.323465][T22942]  </TASK>
[ 1473.538718][T22948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4091'.
[ 1473.790568][ T7544] usb 6-1: USB disconnect, device number 106
[ 1474.134453][T22952] CIFS: Attempting to mount //127.0.0.1/share
[ 1474.944990][T22952] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1475.169659][T22952] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1475.182633][T22966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4098'.
[ 1475.243384][T22960] CIFS: Attempting to mount //127.0.0.1/share
[ 1475.249860][T22960] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1475.252946][T22960] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1475.531334][ T5841] libceph: connect (1)[c::]:6789 error -101
[ 1475.534257][ T5841] libceph: mon0 (1)[c::]:6789 connect error
[ 1475.576562][T22973] ceph: No mds server is up or the cluster is laggy
[ 1475.819666][T22979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4100'.
[ 1476.680194][  T845] libceph: connect (1)[c::]:6789 error -101
[ 1476.739056][  T845] libceph: mon0 (1)[c::]:6789 connect error
[ 1476.834576][T22986] ceph: No mds server is up or the cluster is laggy
[ 1476.858158][T22988] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[ 1476.864351][T22992] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer.
[ 1476.976046][T22988] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[ 1477.047053][T22988] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4102'.
[ 1477.462981][T23010] CIFS: Attempting to mount //127.0.0.1/share
[ 1477.467567][T23010] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1477.470763][T23010] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1477.522947][T23011] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1477.534439][T23012] vicodec vicodec.0: Removing vicodec
[ 1477.550396][T23011] block device autoloading is deprecated and will be removed.
[ 1477.564374][T23008] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1477.574434][T23008] block device autoloading is deprecated and will be removed.
[ 1477.660048][T23019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4111'.
[ 1477.773651][T23021] lo speed is unknown, defaulting to 1000
[ 1477.868672][T23025] ptrace attach of "/syz-executor exec"[15890] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              
[ 1478.603557][T23036] loop5: detected capacity change from 0 to 4095
[ 1478.689217][T22927] buffer_io_error: 27 callbacks suppressed
[ 1478.689291][T22927] Buffer I/O error on dev loop5, logical block 511, async page read
[ 1478.703032][T23039] lo speed is unknown, defaulting to 1000
[ 1478.950323][T23039] ptrace attach of "/syz-executor exec"[16501] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              
[ 1479.040234][T23036] Buffer I/O error on dev loop5, logical block 511, async page read
[ 1479.121953][T14691] libceph: mon0 (1)127.0.0.1:12345 socket error on write
[ 1479.363564][T23051] CIFS: Attempting to mount //127.0.0.1/share
[ 1479.421198][   T34] usb 6-1: new high-speed USB device number 107 using dummy_hcd
[ 1479.565210][T23054] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[ 1479.569949][T23054] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[ 1479.576800][T23054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4120'.
[ 1479.719029][   T34] usb 6-1: config index 0 descriptor too short (expected 39, got 27)
[ 1479.727258][   T34] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1479.826521][   T34] usb 6-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1479.853653][   T34] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1479.854481][T23040] ceph: No mds server is up or the cluster is laggy
[ 1479.864897][   T34] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1479.868992][   T34] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1479.873433][   T34] usb 6-1: Product: syz
[ 1479.875334][   T34] usb 6-1: Manufacturer: syz
[ 1479.877404][   T34] usb 6-1: SerialNumber: syz
[ 1479.882444][   T34] usb 6-1: config 0 descriptor??
[ 1479.886758][T14691] libceph: mon0 (1)127.0.0.1:12345 socket error on write
[ 1479.888197][   T34] hub 6-1:0.0: bad descriptor, ignoring hub
[ 1479.893888][   T34] hub 6-1:0.0: probe with driver hub failed with error -5
[ 1479.939835][   T34] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1480.065168][T22829] udevd[22829]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1480.138954][T23051] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1480.163483][T23048] Invalid ELF header type: 3 != 1
[ 1480.243739][T23051] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1480.304256][ T5841] usb 6-1: USB disconnect, device number 107
[ 1480.568677][T23063] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4124'.
[ 1480.667429][T23067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4125'.
[ 1480.669659][T23068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4124'.
[ 1481.498789][T15891] Bluetooth: hci1: unexpected event for opcode 0x2041
[ 1481.544356][T23073] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[ 1481.548915][T23073] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[ 1481.552960][T23073] udc dummy_udc.0: failed to start g1: -22
[ 1481.555599][T23073] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[ 1481.564513][T23073] UDC core: g1: couldn't find an available UDC or it's busy
[ 1481.607390][T23075] netlink: 'syz.4.4127': attribute type 1 has an invalid length.
[ 1481.657076][T23076] syzkaller0: entered promiscuous mode
[ 1481.659534][T23076] syzkaller0: entered allmulticast mode
[ 1481.665861][T23075] dummy0: entered promiscuous mode
[ 1481.670755][T23075] dummy0: entered allmulticast mode
[ 1482.054549][T23083] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4129'.
[ 1482.075302][T14691] usb 6-1: new high-speed USB device number 108 using dummy_hcd
[ 1482.506474][T14691] usb 6-1: device descriptor read/all, error -71
[ 1482.582220][T23088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4130'.
[ 1482.778074][T23093] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[ 1482.782328][T23093] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[ 1482.789109][T23093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4131'.
[ 1483.399622][T23094] CIFS: Attempting to mount //127.0.0.1/share
[ 1483.409815][T23094] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1483.412384][T23094] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1483.823238][  T845] libceph: connect (1)[c::]:6789 error -101
[ 1483.825308][  T845] libceph: mon0 (1)[c::]:6789 connect error
[ 1483.855822][T23099] ceph: No mds server is up or the cluster is laggy
[ 1484.171717][ T1441] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.174689][ T1441] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.626451][T23104] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4135'.
[ 1484.741518][T23106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4135'.
[ 1485.776738][T23113] siw: device registration error -23
[ 1485.793772][T23114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4137'.
[ 1485.934269][T23117] ib_srp: No route available from (einval) to 0.0.0.0:3260 (-19)
[ 1486.262062][   T56] usb 7-1: new high-speed USB device number 87 using dummy_hcd
[ 1486.482663][   T34] libceph: connect (1)[c::]:6789 error -101
[ 1486.485009][   T34] libceph: mon0 (1)[c::]:6789 connect error
[ 1486.518931][T23126] ceph: No mds server is up or the cluster is laggy
[ 1486.697848][T23133] afs: Unknown parameter 'fowner>00000000000000000000'
[ 1486.702154][T23133] configfs-gadget.g1 gadget.34: uvc: uvc_function_bind()
[ 1487.307422][T23144] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer.
[ 1487.348659][T23150] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4145'.
[ 1487.424476][   T56] usb 7-1: config index 0 descriptor too short (expected 39, got 27)
[ 1487.427493][   T56] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1487.431588][   T56] usb 7-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1487.446458][   T56] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1487.536253][   T56] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1487.539654][T21731] nvmet: connect request for invalid subsystem tes.nqn!
[ 1487.547045][T23152] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "tes.nqn"
[ 1487.552878][   T56] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1487.555746][   T56] usb 7-1: Product: syz
[ 1487.557389][   T56] usb 7-1: Manufacturer: syz
[ 1487.559189][   T56] usb 7-1: SerialNumber: syz
[ 1487.561204][T14361] usb 6-1: new low-speed USB device number 110 using dummy_hcd
[ 1487.580585][   T56] usb 7-1: config 0 descriptor??
[ 1487.593795][   T56] hub 7-1:0.0: bad descriptor, ignoring hub
[ 1487.596613][   T56] hub 7-1:0.0: probe with driver hub failed with error -5
[ 1487.712942][T14361] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[ 1487.716200][T14361] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1487.721187][T14361] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1487.725754][T14361] usb 6-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping
[ 1487.730341][T14361] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1487.735502][T14361] usb 6-1: config 168 interface 0 has no altsetting 0
[ 1487.740431][T14361] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[ 1487.745790][T14361] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1487.750477][T14361] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1487.755242][T14361] usb 6-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping
[ 1487.759920][T14361] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1487.765660][T14361] usb 6-1: config 168 interface 0 has no altsetting 0
[ 1487.769569][T14361] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[ 1487.773222][T14361] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1487.777867][T14361] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1487.783139][T14361] usb 6-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping
[ 1487.788104][T14361] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1487.793999][T14361] usb 6-1: config 168 interface 0 has no altsetting 0
[ 1487.800329][T14361] usb 6-1: string descriptor 0 read error: -22
[ 1487.803603][T14361] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1487.807091][T14361] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1487.816132][   T56] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1487.816953][T14361] adutux 6-1:168.0: interrupt endpoints not found
[ 1487.831746][T22927] udevd[22927]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[ 1487.848733][T23156] Invalid ELF header type: 3 != 1
[ 1487.953685][T23159] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer.
[ 1488.021512][T14475] usb 7-1: USB disconnect, device number 87
[ 1488.059198][  T845] usb 6-1: USB disconnect, device number 110
[ 1488.336837][T23167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4150'.
[ 1488.361706][   T34] usb 7-1: new high-speed USB device number 88 using dummy_hcd
[ 1488.491449][   T34] usb 7-1: device descriptor read/64, error -71
[ 1488.606336][T23168] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1488.731185][   T34] usb 7-1: new high-speed USB device number 89 using dummy_hcd
[ 1488.861171][   T34] usb 7-1: device descriptor read/64, error -71
[ 1488.982078][   T34] usb usb7-port1: attempt power cycle
[ 1489.430740][ T5841] libceph: connect (1)[c::]:6789 error -101
[ 1489.433385][ T5841] libceph: mon0 (1)[c::]:6789 connect error
[ 1489.678908][T23185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4154'.
[ 1489.695986][T14361] libceph: connect (1)[c::]:6789 error -101
[ 1489.699129][T14361] libceph: mon0 (1)[c::]:6789 connect error
[ 1490.173299][T23180] ceph: No mds server is up or the cluster is laggy
[ 1490.214274][ T5841] libceph: connect (1)[c::]:6789 error -101
[ 1490.219195][ T5841] libceph: mon0 (1)[c::]:6789 connect error
[ 1490.397641][T23191] FAULT_INJECTION: forcing a failure.
[ 1490.397641][T23191] name failslab, interval 1, probability 0, space 9, times 0
[ 1490.401951][T23191] CPU: 0 UID: 0 PID: 23191 Comm: syz.1.4156 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1490.401971][T23191] Tainted: [L]=SOFTLOCKUP
[ 1490.401975][T23191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1490.401982][T23191] Call Trace:
[ 1490.401986][T23191]  <TASK>
[ 1490.401991][T23191]  dump_stack_lvl+0x100/0x190
[ 1490.402010][T23191]  should_fail_ex.cold+0x5/0xa
[ 1490.402024][T23191]  should_failslab+0xc2/0x120
[ 1490.402041][T23191]  __kmalloc_cache_noprof+0x91/0x6c0
[ 1490.402054][T23191]  ? rtnl_newlink+0x126/0x2380
[ 1490.402078][T23191]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1490.402095][T23191]  rtnl_newlink+0x126/0x2380
[ 1490.402111][T23191]  ? find_held_lock+0x2b/0x80
[ 1490.402127][T23191]  ? is_bpf_text_address+0x8a/0x1a0
[ 1490.402155][T23191]  ? bpf_ksym_find+0x124/0x1c0
[ 1490.402168][T23191]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1490.402186][T23191]  ? is_bpf_text_address+0x94/0x1a0
[ 1490.402202][T23191]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1490.402219][T23191]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1490.402234][T23191]  ? __kernel_text_address+0xd/0x30
[ 1490.402253][T23191]  ? unwind_get_return_address+0x59/0xa0
[ 1490.402278][T23191]  ? arch_stack_walk+0xa6/0xf0
[ 1490.402306][T23191]  ? __lock_acquire+0x49f/0x1a40
[ 1490.402323][T23191]  ? stack_depot_save_flags+0x27/0x9d0
[ 1490.402342][T23191]  ? stack_trace_save+0x8e/0xc0
[ 1490.402357][T23191]  ? __pfx_stack_trace_save+0x10/0x10
[ 1490.402377][T23191]  ? find_held_lock+0x2b/0x80
[ 1490.402390][T23191]  ? rtnetlink_rcv_msg+0x93a/0xe90
[ 1490.402407][T23191]  ? rtnetlink_rcv_msg+0x93a/0xe90
[ 1490.402425][T23191]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1490.402443][T23191]  rtnetlink_rcv_msg+0x95e/0xe90
[ 1490.402461][T23191]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1490.402481][T23191]  ? __lock_acquire+0x49f/0x1a40
[ 1490.402502][T23191]  netlink_rcv_skb+0x159/0x420
[ 1490.402516][T23191]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1490.402535][T23191]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1490.402553][T23191]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 1490.402567][T23191]  netlink_unicast+0x585/0x850
[ 1490.402582][T23191]  ? __pfx_netlink_unicast+0x10/0x10
[ 1490.402599][T23191]  netlink_sendmsg+0x8b0/0xda0
[ 1490.402615][T23191]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1490.402630][T23191]  ? apparmor_socket_sendmsg+0x15b/0x270
[ 1490.402645][T23191]  ____sys_sendmsg+0xa4d/0xbe0
[ 1490.402657][T23191]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1490.402671][T23191]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1490.402689][T23191]  ___sys_sendmsg+0x190/0x1e0
[ 1490.402703][T23191]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1490.402722][T23191]  ? find_held_lock+0x2b/0x80
[ 1490.402744][T23191]  __sys_sendmsg+0x160/0x210
[ 1490.402760][T23191]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1490.402780][T23191]  ? __pfx_ksys_write+0x10/0x10
[ 1490.402795][T23191]  __do_fast_syscall_32+0xe7/0x970
[ 1490.402812][T23191]  ? lockdep_hardirqs_on+0x78/0x100
[ 1490.402828][T23191]  do_fast_syscall_32+0x32/0x70
[ 1490.402844][T23191]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1490.402860][T23191] RIP: 0023:0xf70aefec
[ 1490.402874][T23191] Code: Unable to access opcode bytes at 0xf70aefc2.
[ 1490.402880][T23191] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[ 1490.402891][T23191] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000
[ 1490.402898][T23191] RDX: 0000000004008840 RSI: 0000000000000000 RDI: 0000000000000000
[ 1490.402905][T23191] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1490.402911][T23191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1490.402918][T23191] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1490.402931][T23191]  </TASK>
[ 1490.516860][T23194] FAULT_INJECTION: forcing a failure.
[ 1490.516860][T23194] name failslab, interval 1, probability 0, space 9, times 0
[ 1490.534947][T23194] CPU: 3 UID: 0 PID: 23194 Comm: syz.4.4157 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1490.534968][T23194] Tainted: [L]=SOFTLOCKUP
[ 1490.534972][T23194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1490.534979][T23194] Call Trace:
[ 1490.534983][T23194]  <TASK>
[ 1490.534988][T23194]  dump_stack_lvl+0x100/0x190
[ 1490.535007][T23194]  should_fail_ex.cold+0x5/0xa
[ 1490.535021][T23194]  should_failslab+0xc2/0x120
[ 1490.535038][T23194]  kmem_cache_alloc_lru_noprof+0x8d/0x6a0
[ 1490.535054][T23194]  ? __d_alloc+0x35/0xa50
[ 1490.535069][T23194]  __d_alloc+0x35/0xa50
[ 1490.535083][T23194]  d_alloc+0x4a/0x1e0
[ 1490.535097][T23194]  lookup_one_qstr_excl+0x171/0x250
[ 1490.535117][T23194]  ? mnt_want_write+0x161/0x410
[ 1490.535136][T23194]  filename_create+0x1cf/0x400
[ 1490.535153][T23194]  ? __pfx_filename_create+0x10/0x10
[ 1490.535173][T23194]  ? find_held_lock+0x2b/0x80
[ 1490.535190][T23194]  filename_symlinkat+0xe1/0x560
[ 1490.535205][T23194]  ? __pfx_filename_symlinkat+0x10/0x10
[ 1490.535218][T23194]  ? strncpy_from_user+0x19d/0x2d0
[ 1490.535237][T23194]  ? do_getname+0x191/0x390
[ 1490.535253][T23194]  __ia32_sys_symlinkat+0x9b/0xe0
[ 1490.535267][T23194]  __do_fast_syscall_32+0xe7/0x970
[ 1490.535284][T23194]  ? lockdep_hardirqs_on+0x78/0x100
[ 1490.535314][T23194]  do_fast_syscall_32+0x32/0x70
[ 1490.535333][T23194]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1490.535348][T23194] RIP: 0023:0xf707efec
[ 1490.535361][T23194] Code: Unable to access opcode bytes at 0xf707efc2.
[ 1490.535366][T23194] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000130
[ 1490.535378][T23194] RAX: ffffffffffffffda RBX: 0000000080003200 RCX: 00000000ffffff9c
[ 1490.535385][T23194] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1490.535392][T23194] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1490.535399][T23194] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1490.535405][T23194] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1490.535419][T23194]  </TASK>
[ 1490.672120][T23198] netlink: 'syz.1.4159': attribute type 13 has an invalid length.
[ 1490.717006][T23205] siw: device registration error -23
[ 1490.778647][T23208] ib_srp: No route available from (einval) to 0.0.0.0:3260 (-19)
[ 1490.785587][T23199] geneve2: entered promiscuous mode
[ 1490.787849][T23199] geneve2: entered allmulticast mode
[ 1490.811273][T15834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0
[ 1490.814398][T15834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0
[ 1490.818049][T15834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0
[ 1490.820846][T15834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0
[ 1491.048977][T23218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4165'.
[ 1491.065560][T23218] 8021q: adding VLAN 0 to HW filter on device bond23
[ 1491.186280][T23218] 8021q: adding VLAN 0 to HW filter on device bond23
[ 1491.189469][T23218] bond23: (slave ip_vti0): The slave device specified does not support setting the MAC address
[ 1491.196061][T23218] bond23: (slave ip_vti0): Error -95 calling set_mac_address
[ 1491.365407][T23224] bond23: (slave vlan2): Opening slave failed
[ 1491.457295][T23227] siw: device registration error -23
[ 1491.555786][T23230] CIFS: Attempting to mount //127.0.0.1/share
[ 1491.562267][T23230] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1491.565541][T23230] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1491.578352][T23231] ib_srp: No route available from (einval) to 0.0.0.0:3260 (-19)
[ 1492.193902][T23236] CIFS: Attempting to mount //127.0.0.1/share
[ 1492.611849][T23243] lo speed is unknown, defaulting to 1000
[ 1493.192446][   T42] audit: type=1800 audit(1785953277.049:196): pid=23248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4171" name="attr_allow_any_host" dev="configfs" ino=82995 res=0 errno=0
[ 1493.203792][T23248] nvmet: adding nsid 1 to subsystem testnqn
[ 1493.391256][T23236] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1493.393873][T23236] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1493.520459][T23257] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4173'.
[ 1493.527011][T23257] gretap0: entered promiscuous mode
[ 1493.930374][T23260] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1494.596985][T23272] CIFS: Attempting to mount //127.0.0.1/share
[ 1495.446734][T15891] Bluetooth: hci1: unexpected event for opcode 0x201c
[ 1495.452598][T23272] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1495.492645][T23272] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1495.576001][T23283] x_tables: duplicate underflow at hook 1
[ 1495.653688][T23279] hub 8-0:1.0: USB hub found
[ 1495.668188][T23279] hub 8-0:1.0: 1 port detected
[ 1496.042808][T23289] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4182'.
[ 1496.174878][T23290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4182'.
[ 1496.223306][T23293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4183'.
[ 1496.891466][   T34] usb 7-1: new high-speed USB device number 91 using dummy_hcd
[ 1497.101266][   T34] usb 7-1: Using ep0 maxpacket: 32
[ 1497.108604][   T34] usb 7-1: config 9 has an invalid interface number: 80 but max is 3
[ 1497.112216][   T34] usb 7-1: config 9 contains an unexpected descriptor of type 0x2, skipping
[ 1497.116673][   T34] usb 7-1: config 9 has an invalid interface number: 9 but max is 3
[ 1497.120568][   T34] usb 7-1: config 9 has an invalid interface number: 206 but max is 3
[ 1497.124917][   T34] usb 7-1: config 9 contains an unexpected descriptor of type 0x2, skipping
[ 1497.128516][   T34] usb 7-1: config 9 contains an unexpected descriptor of type 0x1, skipping
[ 1497.132275][   T34] usb 7-1: config 9 has an invalid descriptor of length 181, skipping remainder of the config
[ 1497.136595][   T34] usb 7-1: config 9 has 3 interfaces, different from the descriptor's value: 4
[ 1497.140502][   T34] usb 7-1: config 9 has no interface number 0
[ 1497.143194][   T34] usb 7-1: config 9 has no interface number 1
[ 1497.145698][   T34] usb 7-1: config 9 has no interface number 2
[ 1497.148264][   T34] usb 7-1: config 9 interface 80 altsetting 251 has an invalid descriptor for endpoint zero, skipping
[ 1497.152823][   T34] usb 7-1: config 9 interface 80 altsetting 251 endpoint 0xC has invalid maxpacket 512, setting to 64
[ 1497.157314][   T34] usb 7-1: config 9 interface 80 altsetting 251 has an invalid descriptor for endpoint zero, skipping
[ 1497.161854][   T34] usb 7-1: config 9 interface 80 altsetting 251 has an invalid descriptor for endpoint zero, skipping
[ 1497.166377][   T34] usb 7-1: config 9 interface 80 altsetting 251 endpoint 0xD has invalid maxpacket 1023, setting to 64
[ 1497.170914][   T34] usb 7-1: config 9 interface 206 altsetting 3 has a duplicate endpoint with address 0xD, skipping
[ 1497.175518][   T34] usb 7-1: config 9 interface 206 altsetting 3 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[ 1497.180044][   T34] usb 7-1: config 9 interface 206 altsetting 3 has a duplicate endpoint with address 0xD, skipping
[ 1497.184770][   T34] usb 7-1: config 9 interface 206 altsetting 3 has 4 endpoint descriptors, different from the interface descriptor's value: 8
[ 1497.191911][   T34] usb 7-1: config 9 interface 80 has no altsetting 0
[ 1497.196252][   T34] usb 7-1: config 9 interface 9 has no altsetting 0
[ 1497.202029][   T34] usb 7-1: config 9 interface 206 has no altsetting 0
[ 1497.213267][   T34] usb 7-1: New USB device found, idVendor=0403, idProduct=daf9, bcdDevice= 7.0c
[ 1497.216230][   T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1497.218775][   T34] usb 7-1: Product: ⍿䠱䨓尗낯窬ᑤ夆뷷䁎鲉씽ࠔ绝䑎䧪௛귰쏡ꁙ믈僈箶挳嗰狰麿岎ꦻ像띁怩ۜ豿圵
[ 1497.237016][   T34] usb 7-1: Manufacturer: 꼟ꦿ獮銝┤ὅ␓쀴嶲䋸踏ᄥ㸨릆읆Ḥ瑗긜뛯᜙샅件츞現Ὁΰ귀畵㶪蘖㿨䤳婣ή㴦鄁碬ҩన薱鷚㾱낻璑ꂜゎ岪⬍༮受輤˓ϋ뎿쏴ફ⃠王鋾ࠓㄹ輵ᲈ㰶䜃Ꝿᶳ㺰ꃔᆠს얦溧舍蹗㴎 檑糩椉䑌㙁䌒ꪣ颖퐇䀨᷽ﷁ陗岠獥
[ 1497.254822][   T34] usb 7-1: SerialNumber: 諘
[ 1497.503340][   T34] ftdi_sio 7-1:9.80: FTDI USB Serial Device converter detected
[ 1497.509815][   T34] ftdi_sio ttyUSB0: unknown device type: 0x70c
[ 1497.515329][   T34] ftdi_sio 7-1:9.9: FTDI USB Serial Device converter detected
[ 1497.518380][   T34] ftdi_sio ttyUSB1: unknown device type: 0x70c
[ 1497.525471][   T34] ftdi_sio 7-1:9.206: FTDI USB Serial Device converter detected
[ 1497.787452][   T34] ftdi_sio ttyUSB2: unknown device type: 0x70c
[ 1497.994729][T23310] siw: device registration error -23
[ 1498.054830][T23311] ib_srp: No route available from (einval) to 0.0.0.0:3260 (-19)
[ 1498.804427][T23318] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4191'.
[ 1498.807543][T23318] openvswitch: netlink: Message has 512 unknown bytes.
[ 1499.093874][   T34] usb 7-1: USB disconnect, device number 91
[ 1499.108531][   T34] ftdi_sio 7-1:9.80: device disconnected
[ 1499.112159][   T34] ftdi_sio 7-1:9.9: device disconnected
[ 1499.117209][   T34] ftdi_sio 7-1:9.206: device disconnected
[ 1499.316546][T23321] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4192'.
[ 1499.844607][T23326] FAULT_INJECTION: forcing a failure.
[ 1499.844607][T23326] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1499.849413][T23326] CPU: 0 UID: 0 PID: 23326 Comm: syz.1.4193 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1499.849433][T23326] Tainted: [L]=SOFTLOCKUP
[ 1499.849437][T23326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1499.849444][T23326] Call Trace:
[ 1499.849449][T23326]  <TASK>
[ 1499.849454][T23326]  dump_stack_lvl+0x100/0x190
[ 1499.849473][T23326]  should_fail_ex.cold+0x5/0xa
[ 1499.849487][T23326]  _copy_from_iter+0x1f4/0x1690
[ 1499.849509][T23326]  ? __asan_memset+0x23/0x50
[ 1499.849524][T23326]  ? __pfx__copy_from_iter+0x10/0x10
[ 1499.849541][T23326]  ? __pfx___alloc_skb+0x10/0x10
[ 1499.849563][T23326]  netlink_sendmsg+0x808/0xda0
[ 1499.849580][T23326]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1499.849600][T23326]  ? apparmor_socket_sendmsg+0x15b/0x270
[ 1499.849616][T23326]  ____sys_sendmsg+0xa4d/0xbe0
[ 1499.849628][T23326]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1499.849642][T23326]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1499.849660][T23326]  ___sys_sendmsg+0x190/0x1e0
[ 1499.849674][T23326]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1499.849693][T23326]  ? find_held_lock+0x2b/0x80
[ 1499.849716][T23326]  __sys_sendmsg+0x160/0x210
[ 1499.849735][T23326]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1499.849764][T23326]  ? __pfx_ksys_write+0x10/0x10
[ 1499.849790][T23326]  __do_fast_syscall_32+0xe7/0x970
[ 1499.849813][T23326]  ? lockdep_hardirqs_on+0x78/0x100
[ 1499.849829][T23326]  do_fast_syscall_32+0x32/0x70
[ 1499.849846][T23326]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1499.849861][T23326] RIP: 0023:0xf70aefec
[ 1499.849876][T23326] Code: Unable to access opcode bytes at 0xf70aefc2.
[ 1499.849881][T23326] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[ 1499.849893][T23326] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000340
[ 1499.849900][T23326] RDX: 0000000000064040 RSI: 0000000000000000 RDI: 0000000000000000
[ 1499.849906][T23326] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1499.849913][T23326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1499.849920][T23326] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1499.849933][T23326]  </TASK>
[ 1499.933557][T23321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4192'.
[ 1500.190979][T23338] siw: device registration error -23
[ 1500.259953][T23340] ib_srp: No route available from (einval) to 0.0.0.0:3260 (-19)
[ 1500.437956][T23339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4196'.
[ 1502.510672][T23350] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer.
[ 1502.725223][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[ 1502.726838][T23359] siw: device registration error -23
[ 1502.742780][T11583] Bluetooth: hci3: command 0x0405 tx timeout
[ 1502.811374][T23362] ib_srp: No route available from (einval) to 0.0.0.0:3260 (-19)
[ 1503.120125][T23368] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4204'.
[ 1503.203754][T23371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4204'.
[ 1503.523459][  T845] libceph: connect (1)[c::]:6789 error -101
[ 1503.526673][  T845] libceph: mon0 (1)[c::]:6789 connect error
[ 1503.793416][  T845] libceph: connect (1)[c::]:6789 error -101
[ 1503.796299][  T845] libceph: mon0 (1)[c::]:6789 connect error
[ 1503.800240][T23386] capability: warning: `syz.1.4207' uses deprecated v2 capabilities in a way that may be insecure
[ 1504.185488][T23381] ceph: No mds server is up or the cluster is laggy
[ 1504.451557][T23400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4210'.
[ 1504.511783][ T5841] libceph: connect (1)[c::]:6789 error -101
[ 1504.598712][T23401] capability: warning: `syz.0.4208' uses 32-bit capabilities (legacy support in use)
[ 1505.072595][T23392] ceph: No mds server is up or the cluster is laggy
[ 1505.352072][ T5841] libceph: mon0 (1)[c::]:6789 connect error
[ 1505.448263][T23408] siw: device registration error -23
[ 1505.532597][T23409] ib_srp: No route available from (einval) to 0.0.0.0:3260 (-19)
[ 1505.943717][T23418] input: syz1 as /devices/virtual/input/input185
[ 1505.946264][T23419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4215'.
[ 1506.002277][T23421] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4216'.
[ 1506.148648][T23423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4216'.
[ 1506.244910][T23413] ipvlan0: Caught tx_queue_len zero misconfig
[ 1507.742508][ T5841] libceph: connect (1)[c::]:6789 error -101
[ 1507.745469][ T5841] libceph: mon0 (1)[c::]:6789 connect error
[ 1507.897360][T23437] ceph: No mds server is up or the cluster is laggy
[ 1508.001435][ T5841] libceph: connect (1)[c::]:6789 error -101
[ 1508.003987][ T5841] libceph: mon0 (1)[c::]:6789 connect error
[ 1508.349886][T23468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4227'.
[ 1509.124250][T23480] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4229'.
[ 1509.190753][T23482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4229'.
[ 1509.696763][T23488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4232'.
[ 1509.705014][T23488] program syz.2.4232 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1510.097537][T23476] netlink: 'syz.1.4231': attribute type 1 has an invalid length.
[ 1510.204970][T23490] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1510.230861][T23490] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 1510.243723][T14361] lo speed is unknown, defaulting to 1000
[ 1510.254609][T14361] syz0: Port: 1 Link DOWN
[ 1510.328913][T23499] jffs2: notice: (23499) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1510.501927][T23505] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1511.135955][T23508] syzkaller0: entered promiscuous mode
[ 1511.138376][T23508] syzkaller0: entered allmulticast mode
[ 1511.782160][T23518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4240'.
[ 1512.590281][    C2] sched: DL replenish lagged too much
[ 1512.921089][ T5854] usb 6-1: new high-speed USB device number 111 using dummy_hcd
[ 1512.981805][T23526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4242'.
[ 1513.071610][ T5854] usb 6-1: Using ep0 maxpacket: 32
[ 1513.076135][ T5854] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1513.082133][ T5854] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1513.089963][ T5854] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[ 1513.094641][ T5854] usb 6-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131
[ 1513.098170][ T5854] usb 6-1: Product: syz
[ 1513.099881][ T5854] usb 6-1: Manufacturer: syz
[ 1513.102220][ T5854] usb 6-1: SerialNumber: syz
[ 1513.115445][ T5854] input: appletouch as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/input/input186
[ 1513.482359][T23522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4241'.
[ 1513.637577][T14475] usb 6-1: USB disconnect, device number 111
[ 1513.795642][T14475] appletouch 6-1:1.0: input: appletouch disconnected
[ 1514.576351][T23540] overlay: ./file0 is not a directory
[ 1514.586119][T23540] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4246'.
[ 1514.677741][T23548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4250'.
[ 1514.866582][T23550] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI
[ 1514.870654][T23550] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[ 1514.873819][T23550] CPU: 3 UID: 0 PID: 23550 Comm: syz.0.4249 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1514.877571][T23550] Tainted: [L]=SOFTLOCKUP
[ 1514.879088][T23550] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1514.882504][T23550] RIP: 0010:uvcg_video_enable+0x12d/0xf80
[ 1514.884504][T23550] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b7 0d 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 6b 18 48 8d 7d 03 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 e5 0d 00 00
[ 1514.890975][T23550] RSP: 0018:ffffc9000c2a7b08 EFLAGS: 00010246
[ 1514.893020][T23550] RAX: dffffc0000000000 RBX: ffff88805fe62100 RCX: ffffc90026351000
[ 1514.895648][T23550] RDX: 0000000000000000 RSI: ffffffff87e2c2d5 RDI: 0000000000000003
[ 1514.898331][T23550] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[ 1514.901006][T23550] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000002
[ 1514.903657][T23550] R13: 0000000000000000 R14: ffff888026fb08f0 R15: ffff888026fb0840
[ 1514.906367][T23550] FS:  0000000000000000(0000) GS:ffff888096edf000(0063) knlGS:00000000f53ebb40
[ 1514.909318][T23550] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[ 1514.911408][T23550] CR2: 000000002d515ff8 CR3: 0000000060449000 CR4: 0000000000352ef0
[ 1514.914121][T23550] Call Trace:
[ 1514.915300][T23550]  <TASK>
[ 1514.916365][T23550]  ? __lock_acquire+0x49f/0x1a40
[ 1514.918091][T23550]  uvc_v4l2_streamon+0x9f/0x130
[ 1514.919764][T23550]  ? v4l_streamon+0x1a/0xa0
[ 1514.921355][T23550]  __video_do_ioctl+0xb2a/0xdf0
[ 1514.923101][T23550]  ? __might_fault+0xc5/0x140
[ 1514.924716][T23550]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1514.926527][T23550]  video_usercopy+0x3d3/0x14c0
[ 1514.928156][T23550]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1514.930051][T23550]  ? __pfx_video_usercopy+0x10/0x10
[ 1514.931804][T23550]  ? __fget_files+0x215/0x3d0
[ 1514.933458][T23550]  ? hook_file_ioctl_common+0x140/0x440
[ 1514.935412][T23550]  v4l2_ioctl+0x1bd/0x250
[ 1514.936961][T23550]  v4l2_compat_ioctl32+0x20f/0x2d0
[ 1514.938751][T23550]  ? __pfx_v4l2_compat_ioctl32+0x10/0x10
[ 1514.940769][T23550]  __ia32_compat_sys_ioctl+0x2cf/0x360
[ 1514.942689][T23550]  __do_fast_syscall_32+0xe7/0x970
[ 1514.944485][T23550]  ? lockdep_hardirqs_on+0x78/0x100
[ 1514.946369][T23550]  do_fast_syscall_32+0x32/0x70
[ 1514.948095][T23550]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1514.950312][T23550] RIP: 0023:0xf703efec
[ 1514.951785][T23550] Code: Unable to access opcode bytes at 0xf703efc2.
[ 1514.954114][T23550] RSP: 002b:00000000f53eb50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[ 1514.957008][T23550] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000040045612
[ 1514.959767][T23550] RDX: 00000000800012c0 RSI: 0000000000000000 RDI: 0000000000000000
[ 1514.962567][T23550] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1514.965400][T23550] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1514.968222][T23550] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1514.971010][T23550]  </TASK>
[ 1514.972125][T23550] Modules linked in:
[ 1514.974358][T23550] ---[ end trace 0000000000000000 ]---
[ 1515.511920][T23550] RIP: 0010:uvcg_video_enable+0x12d/0xf80
[ 1515.513934][T23550] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b7 0d 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 6b 18 48 8d 7d 03 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 e5 0d 00 00
[ 1515.519957][T23550] RSP: 0018:ffffc9000c2a7b08 EFLAGS: 00010246
[ 1515.522080][T23550] RAX: dffffc0000000000 RBX: ffff88805fe62100 RCX: ffffc90026351000
[ 1515.524619][T23550] RDX: 0000000000000000 RSI: ffffffff87e2c2d5 RDI: 0000000000000003
[ 1515.527175][T23550] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[ 1515.529942][T23550] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000002
[ 1515.532897][T23550] R13: 0000000000000000 R14: ffff888026fb08f0 R15: ffff888026fb0840
[ 1515.535480][T23550] FS:  0000000000000000(0000) GS:ffff888096bdf000(0063) knlGS:00000000f53ebb40
[ 1515.538345][T23550] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[ 1515.540492][T23550] CR2: 000055f677215b58 CR3: 0000000060449000 CR4: 0000000000352ef0
[ 1515.543353][T23550] Kernel panic - not syncing: Fatal exception
[ 1515.546062][T23550] Kernel Offset: disabled
[ 1515.547452][T23550] Rebooting in 86400 seconds..